Rapport de ZHPDiag v2013.6.10.15 par Nicolas Coolman, Update du 10/06/2013
Run by OriSon at 11/06/2013 17:40:33
WebSite: http://nicolascoolman.webs.com
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by user


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16576
MFIE: Mozilla Firefox 21.0 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : 6RP2Y
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
Kaspersky Anti-Virus 2012 v12.0.0.374
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7

---\\ System Optimizer

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin

---\\ System Information
~ Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8158 MB (77% free)
System Restore: Activé (Enable)
System drive C: has 215 GB (86%) free of 249 GB

---\\ Logged in mode
~ Computer Name: ORISON-PC
~ User Name: OriSon
~ All Users Names: OriSon, HomeGroupUser$, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\OriSon\AppData\Roaming\
~ %Desktop% : C:\Users\OriSon\Bureau\
~ %Favorites% : C:\Users\OriSon\Favorites\
~ %LocalAppData% : C:\Users\OriSon\AppData\Local\
~ %StartMenu% : C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 215 Go of 249 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 285 Go of 466 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)
I:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 127 Go)
L:\ Hard drive, Flash drive, Thumb drive (Free 40 Go of 98 Go)
M:\ Hard drive, Flash drive, Thumb drive (Free 87 Go of 119 Go)
S:\ Hard drive, Flash drive, Thumb drive (Free 71 Go of 106 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 34 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/06/2013 - 09:22:41.) -- C:\Windows\System32\wininet.dll [2242048]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 04:25:32.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 04:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 00:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 00:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 01:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 00:23:22.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 01:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 02:06:42.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 00:21:58.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 04:34:04.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 1/7
~ Mon Bureau (My Desktop) : 1/146
~ Menu demarrer (Programs) : 1/30
~ Hidden Files:  Scanned in 00mn 00s



---\\ Processus lancés
[MD5.60CAA8A76E0E101F4F42AA6598CA53F4] - (.IObit - Advanced SystemCare 6 Monitor.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe   [720192] [PID.1820]
[MD5.78185A1C861FA7AD6BE016D54D050119] - (.IObit - ASCTray.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe   [491840] [PID.416]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe   [532040] [PID.2216]
[MD5.A8A71CDF640008DDDF856542A5757CA7] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe   [3587664] [PID.2736]
[MD5.6C9D5BADC8F83D410A278717C2EEA6F6] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe   [206448] [PID.1796]
[MD5.82447BEC15A44E3A8FA436457C7FA8A7] - (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe   [128352] [PID.2672]
[MD5.FAA729BC3B4EC2900D14E1F0F4D30ED0] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe   [268248] [PID.3260]
[MD5.95110A1C5A1D228AC1DDF6AB67D00BEB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [920472] [PID.4696]
[MD5.6FC79A950476A5F539EEB65F9097C0A8] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [17304] [PID.3788]
[MD5.3A32FAFEEE290E6E6C058DE59EC4EC88] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7478272] [PID.2040]
[MD5.9243229DFCCC99B5441750EBA49F1B14] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe   [574272] [PID.808]
[MD5.8AE99EBE30E8338907361018D9030835] - (.IObit - IObit Malware Fighter Service.) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe   [821592] [PID.1380]
[MD5.755519F49906B73C1FE9CBBF75E347EA] - (.Pas de propriétaire - Inkjet Printer/Scanner Extended Servey Prog.) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe   [103808] [PID.1844]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe   [418376] [PID.1616]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe   [701512] [PID.2124]
[MD5.543A4EF0923BF70D126625B034EF25AF] - (.Protexis Inc. - PsiService PsiService.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe   [189728] [PID.2256]
~ Processes Running:  Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\OriSon\AppData\Roaming\Mozilla\Firefox\Profiles\ql4j0dir.default\prefs.js
C:\Users\OriSon\AppData\Roaming\Mozilla\Firefox\Profiles\ql4j0dir.default\user.js
M3 - MFPP: Plugins - [OriSon] -- C:\Users\OriSon\AppData\Roaming\Mozilla\Firefox\Profiles\ql4j0dir.default\searchplugins\delta.xml
M0 - MFSP: prefs.js [OriSon - ql4j0dir.default] http://www.google.fr
M2 - MFEP: prefs.js [OriSon - ql4j0dir.default\ascsurfingprotection@iobit.com] [] Advanced SystemCare Surfing Protection v1.0 (..)
M2 - MFEP: prefs.js [OriSon - ql4j0dir.default\donottrackplus@abine.com] [] DoNotTrackMe v2.2.9.520 (..)
M2 - MFEP: prefs.js [OriSon - ql4j0dir.default\{e44a1809-4d10-4ab8-b343-3326b64c7cdd}] [] entrusted  v10.16.2.509 (..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
~ Firefox Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 9 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: IEVkbdBHO [64Bits] - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: Advanced SystemCare Browser Protection [64Bits] - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} . (.IObit - Pas de description.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll
O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll
~ BHO: 6 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
~ Toolbar:  Scanned in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Spykey] . (.The Spykey Team - Windows system task.) -- L:\Logithèque\1 - Installation de Windows 7\1 - Installer\Mes logs\Spykey\Spykey.exe 
O4 - HKLM\..\Run: [CanonSolutionMenu] . (.CANON INC. - CNSLMAIN.) -- C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe 
O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMyPrt.exe 
O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe 
O4 - HKLM\..\Wow6432Node\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe 
O4 - HKLM\..\Wow6432Node\Run: [IJNetworkScanUtility] . (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-1179567654-2596897241-1763927584-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\QuickLaunch: Documents.lnk . (...)  -- C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms 
O4 - GS\QuickLaunch: Logithèque.lnk . (...)  -- L:\Logithèque 
O4 - GS\QuickLaunch: MozBackup.lnk . (...)  -- C:\Program Files (x86)\MozBackup\MozBackup.exe
O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\QuickLaunch: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.)  -- C:\Windows\system32\SnippingTool.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Clavier &virtuel [64Bits] - {4248FE82-7FCB-46AC-B270-339F08212110} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\kbrd.ico
O9 - Extra button: Analyse des &liens [64Bits] - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\logo.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{AF0607A9-9C80-4F20-9019-D012B9219011}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AF0607A9-9C80-4F20-9019-D012B9219011}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AF0607A9-9C80-4F20-9019-D012B9219011}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\Windows\System32\klogon.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) . (.IObit - Advanced SystemCare Service.) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: Kaspersky Anti-Virus Service (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey P (IJPLMSVC) . (.Pas de propriétaire - Inkjet Printer/Scanner Extended Servey Prog.) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
O23 - Service: IMF Service (IMFservice) . (.IObit - IObit Malware Fighter Service.) - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
~ Services: 9 Scanned in 00mn 07s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1064]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1068]
[MD5.F040037B149FD0F5A5044AE563390FA7] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [256904]
[MD5.60CAA8A76E0E101F4F42AA6598CA53F4] [APT] [ASC6_PerformanceMonitor] (.IObit.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe   [720192]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [136176]
[MD5.E7C268C4C8702EAF4057F4D54E00D142] [APT] [{4D823672-3C02-49AB-9C03-C037E70D2CCB}] (.Corel Corporation.) -- C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2 - Installation Files\setup.exe   [316744]
[MD5.FB6674A519505CC93E28CF600BBC23A3] [APT] [{51CDE6A1-BD76-4AB8-A9FC-727DD24688B6}] (.InstallShield Software Corporation.) -- L:\Logithèque\1 - Installation de Windows 7\1 - Installer\AMDCoolnQuiet_Utility_V21801_XPVistaWin7\Setup.exe   [168448]
[MD5.2302EACE8E12FA460B14C2E6764AC952] [APT] [{86DB7854-EA39-44C4-8215-90CDBEAB1AAD}] (.UNICORN.) -- L:\Logithèque\1 - Installation de Windows 7\1 - Installer\Mes logs\Google Earth Pro 2009 Gold Edition + Crack\Google Earth Pro 2009 Gold+Google Earth 5\Google Earth Pro 2009 Gold\Crack.exe   [1516356]
[MD5.00000000000000000000000000000000] [APT] [{D666C475-62EB-4FF3-8577-DA90A02390FA}] (...) -- L:\Logithèque\1 - Installation de Windows 7\1 - Installer\Mes logs\PSP 12 de Janaly (01-03-2012)\PSPP12_Corel_TBYB_EN_IE_FR_DE_ES_IT_NL_ESD.exe (.not file.)   [0]
~ Scheduled Task: 12 Scanned in 00mn 03s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl2.sys
O41 - Driver:  (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_amd64].) - C:\Windows\System32\DRIVERS\klif.sys
O41 - Driver:  (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\System32\DRIVERS\klim6.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 72 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM][64Bits] -- {698EDD46-FC0B-926F-54DF-23B6BB20EDFC}
O42 - Logiciel: ATI AVIVO64 Codecs - (.ATI Technologies Inc..) [HKLM][64Bits] -- {B45B5123-C009-F8B4-FE93-45B42C8A786F}
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {4E594F8A-B042-B61D-DADC-08822B630781}
O42 - Logiciel: ATI Problem Report Wizard - (.ATI Technologies.) [HKLM][64Bits] -- {35B226DA-E3F6-21FD-31AB-0046C6E87043}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Advanced SystemCare 6 - (.IObit.) [HKLM][64Bits] -- Advanced SystemCare 6_is1
O42 - Logiciel: Advanced Uninstaller PRO - Version 11 - (.Innovative Solutions.) [HKLM][64Bits] -- AU11_is1
O42 - Logiciel: Avanquest update - (.Avanquest Software.) [HKLM][64Bits] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}
O42 - Logiciel: Canon IJ Network Scan Utility - (...) [HKLM][64Bits] -- Canon_IJ_Network_Scan_UTILITY
O42 - Logiciel: Canon IJ Network Tool - (...) [HKLM][64Bits] -- Canon_IJ_Network_UTILITY
O42 - Logiciel: Canon MP Navigator EX 2.0 - (...) [HKLM][64Bits] -- MP Navigator EX 2.0
O42 - Logiciel: Canon MP620 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP620_series
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (...) [HKLM][64Bits] -- Easy-PhotoPrint EX
O42 - Logiciel: Canon Utilities My Printer - (...) [HKLM][64Bits] -- CanonMyPrinter
O42 - Logiciel: Canon Utilities Solution Menu - (...) [HKLM][64Bits] -- CanonSolutionMenu
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {DDA34038-89BD-4804-B0B8-DC48D5DFB463}
O42 - Logiciel: Corel PaintShop Pro X4 - (.Corel Corporation.) [HKLM][64Bits] -- _{00580795-581C-4587-B9F2-37320D7AB37F}
O42 - Logiciel: Corel PaintShop Pro X4 - (.Corel Corporation.) [HKLM][64Bits] -- {00AE1A2D-7BC2-4359-A0EC-E19F36E391BB}
O42 - Logiciel: Enregistrement utilisateur de Canon MP620 series - (...) [HKLM][64Bits] -- Enregistrement utilisateur de Canon MP620 series
O42 - Logiciel: Expert PDF 7 Converter - (.Avanquest software.) [HKLM][64Bits] -- {FC279721-37A6-4777-AFD8-7A56681EBA14}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {EA561FC0-A965-11E2-94D3-B8AC6F98CCE3}
O42 - Logiciel: Google Earth Pro - (.Google.) [HKLM][64Bits] -- {9578C0CD-8108-4379-9026-4601F59859A0}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM][64Bits] -- {B80BE2E3-EA77-53D4-7A56-C53D452E6D50}
O42 - Logiciel: ICA - (.Corel Corporation.) [HKLM][64Bits] -- {00580795-581C-4587-B9F2-37320D7AB37F}
O42 - Logiciel: IObit Malware Fighter - (.IObit.) [HKLM][64Bits] -- IObit Malware Fighter_is1
O42 - Logiciel: IPM_PSP_COM - (.Corel Corporation.) [HKLM][64Bits] -- {00BEE329-BAAB-49FF-9B66-55E4B12B9ADD}
O42 - Logiciel: IZArc 4.1.7 - (.Ivan Zahariev.) [HKLM][64Bits] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
O42 - Logiciel: Inkjet Printer/Scanner Extended Survey Program - (...) [HKLM][64Bits] -- CANONIJPLM100
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager
O42 - Logiciel: Kaspersky Anti-Virus 2012 - (.Kaspersky Lab.) [HKLM][64Bits] -- InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}
O42 - Logiciel: Kaspersky Anti-Virus 2012 - (.Kaspersky Lab.) [HKLM][64Bits] -- {45E557D6-2271-4F13-8101-C620B4285AB0}
O42 - Logiciel: Light Image Resizer 4.3.2.2 - (.ObviousIdea.) [HKLM][64Bits] -- {EBE030DD-D404-4D92-85E9-8C3624820808}_is1
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Reader Text-to-Speech pour le français - (.Microsoft Corporation.) [HKLM][64Bits] -- {6F1547AA-8DA7-4FAC-BA11-BE1659E7086E}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: MozBackup 1.5.1 - (.Pavel Cvrcek.) [HKLM][64Bits] -- MozBackup
O42 - Logiciel: Mozilla Firefox 21.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 21.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mozilla Thunderbird 17.0.6 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Thunderbird 17.0.6 (x86 fr)
O42 - Logiciel: MyTomTom 3.2.0.906 - (.TomTom.) [HKLM][64Bits] -- MyTomTom
O42 - Logiciel: PSPPContent - (.Corel Corporation.) [HKLM][64Bits] -- {006CAAEF-CA96-4181-AC22-FE56D61432E4}
O42 - Logiciel: PSPPHelp - (.Corel Corporation.) [HKLM][64Bits] -- {00D74A7A-F7AD-4D00-ABD2-0973836292C7}
O42 - Logiciel: PSPPro64 - (.Corel Corporation.) [HKLM][64Bits] -- {0015DE8E-8D9F-403E-8E5A-4098410E6125}
O42 - Logiciel: Protected Folder - (.IObit.) [HKLM][64Bits] -- Protected Folder_is1
O42 - Logiciel: Setup - (.Nom de votre société.) [HKLM][64Bits] -- {00D13418-7DDF-4D3D-A237-E297B103BB6B}
O42 - Logiciel: SyncBackFree - (.2BrightSparks.) [HKLM][64Bits] -- SyncBackFree_is1
O42 - Logiciel: VLC media player 2.0.5 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM][64Bits] -- {4412F224-3849-4461-A3E9-DEEF8D252790}
~ Logic: 83 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\2BrightSparks]
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\AppDataLow\Software\SmartBar]   =>Hijacker.SmartBar
[HKCU\Software\AppDataLow]
[HKCU\Software\Avanquest]
[HKCU\Software\Canon]
[HKCU\Software\Chromium]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\Corel]
[HKCU\Software\DownloadManager]
[HKCU\Software\Google]
[HKCU\Software\IZSoftware]
[HKCU\Software\Innovative Solutions]
[HKCU\Software\KC Softwares]
[HKCU\Software\KasperskyLab]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mozilla Backup]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\ObviousIdea]
[HKCU\Software\Policies]
[HKCU\Software\PowerPack]
[HKCU\Software\TAdvCheckList]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\Wow6432Node]
[HKLM\Software\AMD]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Intel]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Wow6432Node\2BrightSparks]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\Avanquest]
[HKLM\Software\Wow6432Node\BVRP Software]
[HKLM\Software\Wow6432Node\Canon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Corel]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IObit]
[HKLM\Software\Wow6432Node\Innovative Solutions]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\KasperskyLab]
[HKLM\Software\Wow6432Node\L&H]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\ObviousIdea]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\TomTom]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\dotNetInstaller]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 109 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 02/06/2013 - 11:15:41 - [32,681] ----D C:\Program Files (x86)\2BrightSparks
O43 - CFD: 09/06/2013 - 17:11:59 - [15,765] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 01/06/2013 - 10:52:15 - [113,802] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 01/06/2013 - 18:18:17 - [75,897] ----D C:\Program Files (x86)\Avanquest
O43 - CFD: 01/06/2013 - 18:23:37 - [2,730] ----D C:\Program Files (x86)\Avanquest update
O43 - CFD: 09/06/2013 - 17:27:20 - [1,623] ----D C:\Program Files (x86)\Balabolka
O43 - CFD: 10/06/2013 - 09:15:10 - [297,049] ----D C:\Program Files (x86)\Canon
O43 - CFD: 09/06/2013 - 18:27:49 - [313,473] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 01/06/2013 - 20:48:48 - [675,283] ----D C:\Program Files (x86)\Corel
O43 - CFD: 01/06/2013 - 09:48:18 - [0,249] ----D C:\Program Files (x86)\ERUNT
O43 - CFD: 01/06/2013 - 14:03:33 - [172,469] ----D C:\Program Files (x86)\Google
O43 - CFD: 01/06/2013 - 10:38:38 - [21,150] ----D C:\Program Files (x86)\Innovative Solutions
O43 - CFD: 09/06/2013 - 23:55:03 - [5,451] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 08/06/2013 - 17:21:25 - [11,487] ----D C:\Program Files (x86)\Internet Download Manager
O43 - CFD: 09/06/2013 - 23:42:13 - [4,147] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 03/06/2013 - 11:16:41 - [177,150] ----D C:\Program Files (x86)\IObit
O43 - CFD: 01/06/2013 - 14:01:32 - [15,547] ----D C:\Program Files (x86)\IZArc
O43 - CFD: 31/05/2013 - 22:07:39 - [132,092] ----D C:\Program Files (x86)\Kaspersky Lab
O43 - CFD: 03/06/2013 - 10:55:00 - [13,306] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 03/06/2013 - 08:24:23 - [504,810] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 08/06/2013 - 20:13:16 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 01/06/2013 - 11:35:16 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 01/06/2013 - 11:32:43 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 02/06/2013 - 11:41:23 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 01/06/2013 - 14:18:06 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 31/05/2013 - 22:56:50 - [1,664] ----D C:\Program Files (x86)\MozBackup
O43 - CFD: 31/05/2013 - 22:44:23 - [45,971] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 09/06/2013 - 18:05:54 - [0,326] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 09/06/2013 - 16:16:10 - [43,409] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 01/06/2013 - 11:35:18 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 01/06/2013 - 13:33:39 - [0,015] ----D C:\Program Files (x86)\MyPC Backup
O43 - CFD: 01/06/2013 - 14:05:50 - [17,451] ----D C:\Program Files (x86)\MyTomTom 3
O43 - CFD: 01/06/2013 - 14:08:17 - [32,709] ----D C:\Program Files (x86)\ObviousIdea
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 09/06/2013 - 17:57:54 - [14,200] ----D C:\Program Files (x86)\ScanSoft
O43 - CFD: 01/06/2013 - 14:05:51 - [0,021] ----D C:\Program Files (x86)\TomTom International B.V
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 01/06/2013 - 14:07:30 - [94,419] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 14/07/2009 - 17:24:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 01/06/2013 - 21:37:25 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 01/06/2013 - 21:37:25 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 01/06/2013 - 21:37:25 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 01/06/2013 - 21:37:25 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 01/06/2013 - 21:37:25 - [5,740] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 11/06/2013 - 17:41:02 - [16,864] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 09/06/2013 - 17:28:16 - [1,978] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 01/06/2013 - 10:52:26 - [0,093] ----D C:\Program Files (x86)\Common Files\ATI Technologies
O43 - CFD: 01/06/2013 - 11:35:16 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 01/06/2013 - 10:38:41 - [1,013] ----D C:\Program Files (x86)\Common Files\Innovative Solutions
O43 - CFD: 01/06/2013 - 16:05:00 - [1,102] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 09/06/2013 - 18:27:49 - [2,282] ----D C:\Program Files (x86)\Common Files\L&H
O43 - CFD: 09/06/2013 - 23:55:03 - [223,888] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 01/06/2013 - 20:54:41 - [1,620] ----D C:\Program Files (x86)\Common Files\Protexis
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 01/06/2013 - 22:58:50 - [42,206] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 09/06/2013 - 17:12:00 - [144,244] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 01/06/2013 - 07:22:26 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 01/06/2013 - 18:23:37 - [33,240] ----D C:\ProgramData\Avanquest
O43 - CFD: 01/06/2013 - 18:23:25 - [0] ----D C:\ProgramData\Avanquest Software
O43 - CFD: 31/05/2013 - 22:01:04 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 03/06/2013 - 13:35:04 - [18,732] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 10/06/2013 - 12:21:48 - [0,000] ----D C:\ProgramData\CanonIJ
O43 - CFD: 10/06/2013 - 13:23:25 - [0,000] --H-D C:\ProgramData\CanonIJEGV
O43 - CFD: 10/06/2013 - 09:16:17 - [0,000] --H-D C:\ProgramData\CanonIJMyPrinter
O43 - CFD: 10/06/2013 - 15:44:16 - [0,006] ----D C:\ProgramData\CanonIJPLM
O43 - CFD: 10/06/2013 - 12:20:24 - [0,002] --H-D C:\ProgramData\CanonIJScan
O43 - CFD: 10/06/2013 - 09:16:20 - [0,000] --H-D C:\ProgramData\CanonIJSolutionMenu
O43 - CFD: 01/06/2013 - 20:58:13 - [228,601] ----D C:\ProgramData\Corel
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 01/06/2013 - 18:18:17 - [0] ----D C:\ProgramData\Expert PDF 7
O43 - CFD: 01/06/2013 - 18:18:17 - [0] ----D C:\ProgramData\Expert PDF Jobs
O43 - CFD: 31/05/2013 - 22:01:04 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 01/06/2013 - 13:40:18 - [0,518] ----D C:\ProgramData\Google
O43 - CFD: 08/06/2013 - 17:20:27 - [0] ----D C:\ProgramData\IDM
O43 - CFD: 01/06/2013 - 10:40:42 - [10,709] ----D C:\ProgramData\Innovative Solutions
O43 - CFD: 02/06/2013 - 20:59:32 - [0,003] ----D C:\ProgramData\IObit
O43 - CFD: 11/06/2013 - 16:48:27 - [958,343] ----D C:\ProgramData\Kaspersky Lab
O43 - CFD: 02/06/2013 - 14:27:47 - [16,016] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 31/05/2013 - 22:01:05 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 03/06/2013 - 08:33:04 - [232,002] -S--D C:\ProgramData\Microsoft
O43 - CFD: 02/06/2013 - 21:06:54 - [0,059] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 31/05/2013 - 22:01:05 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 31/05/2013 - 22:44:24 - [0,000] ----D C:\ProgramData\Mozilla
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 01/06/2013 - 12:23:48 - [0] ----D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
O43 - CFD: 01/06/2013 - 14:23:02 - [0] ----D C:\Users\OriSon\AppData\Roaming\Adobe
O43 - CFD: 01/06/2013 - 12:23:46 - [0,078] ----D C:\Users\OriSon\AppData\Roaming\Apple Computer
O43 - CFD: 01/06/2013 - 07:22:26 - [0] ----D C:\Users\OriSon\AppData\Roaming\ATI
O43 - CFD: 09/06/2013 - 17:27:20 - [0,000] ----D C:\Users\OriSon\AppData\Roaming\Balabolka
O43 - CFD: 10/06/2013 - 12:20:25 - [0,001] ----D C:\Users\OriSon\AppData\Roaming\Canon
O43 - CFD: 01/06/2013 - 20:58:08 - [2,485] ----D C:\Users\OriSon\AppData\Roaming\Corel
O43 - CFD: 10/06/2013 - 22:23:43 - [0,020] ----D C:\Users\OriSon\AppData\Roaming\DMCache
O43 - CFD: 10/06/2013 - 13:33:43 - [0,000] ----D C:\Users\OriSon\AppData\Roaming\dvdcss
O43 - CFD: 01/06/2013 - 18:34:50 - [0,002] ----D C:\Users\OriSon\AppData\Roaming\Expert PDF 7
O43 - CFD: 01/06/2013 - 13:40:52 - [0] ----D C:\Users\OriSon\AppData\Roaming\Google
O43 - CFD: 31/05/2013 - 22:01:24 - [0] ----D C:\Users\OriSon\AppData\Roaming\Identities
O43 - CFD: 09/06/2013 - 18:56:46 - [7,007] ----D C:\Users\OriSon\AppData\Roaming\IDM
O43 - CFD: 01/06/2013 - 20:38:13 - [0] ----D C:\Users\OriSon\AppData\Roaming\InstallShield
O43 - CFD: 09/06/2013 - 18:05:54 - [3,170] ----D C:\Users\OriSon\AppData\Roaming\IObit
O43 - CFD: 03/06/2013 - 13:44:50 - [0,001] ----D C:\Users\OriSon\AppData\Roaming\KC Softwares
O43 - CFD: 01/06/2013 - 13:46:58 - [0,005] ----D C:\Users\OriSon\AppData\Roaming\Macromedia
O43 - CFD: 02/06/2013 - 14:27:51 - [0] ----D C:\Users\OriSon\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 17:35:18 - [0] ----D C:\Users\OriSon\AppData\Roaming\Media Center Programs
O43 - CFD: 08/06/2013 - 20:28:46 - [952,180] -S--D C:\Users\OriSon\AppData\Roaming\Microsoft
O43 - CFD: 31/05/2013 - 22:52:22 - [44,735] ----D C:\Users\OriSon\AppData\Roaming\Mozilla
O43 - CFD: 01/06/2013 - 14:01:12 - [0,560] ----D C:\Users\OriSon\AppData\Roaming\OpenCandy   =>Adware.OpenCandy
O43 - CFD: 31/05/2013 - 22:51:39 - [17,667] ----D C:\Users\OriSon\AppData\Roaming\Thunderbird
O43 - CFD: 01/06/2013 - 20:57:01 - [0,030] ----D C:\Users\OriSon\AppData\Roaming\Ulead Systems
O43 - CFD: 10/06/2013 - 15:14:00 - [0,163] ----D C:\Users\OriSon\AppData\Roaming\vlc
O43 - CFD: 02/06/2013 - 11:15:41 - [0,001] ----D C:\Users\OriSon\AppData\Local\2BrightSparks
O43 - CFD: 09/06/2013 - 17:12:34 - [0] ----D C:\Users\OriSon\AppData\Local\Adobe
O43 - CFD: 31/05/2013 - 22:01:15 - [0] ----D C:\Users\OriSon\AppData\Local\Application Data
O43 - CFD: 03/06/2013 - 11:48:28 - [0] ----D C:\Users\OriSon\AppData\Local\Apps
O43 - CFD: 01/06/2013 - 07:22:26 - [0,100] ----D C:\Users\OriSon\AppData\Local\ATI
O43 - CFD: 01/06/2013 - 20:57:00 - [8,956] ----D C:\Users\OriSon\AppData\Local\Corel PaintShop Pro
O43 - CFD: 08/06/2013 - 22:05:40 - [13,905] ----D C:\Users\OriSon\AppData\Local\CrashDumps
O43 - CFD: 09/06/2013 - 23:34:50 - [1,163] ----D C:\Users\OriSon\AppData\Local\ElevatedDiagnostics
O43 - CFD: 01/06/2013 - 22:56:51 - [0,013] ----D C:\Users\OriSon\AppData\Local\Google
O43 - CFD: 31/05/2013 - 22:01:15 - [0] ----D C:\Users\OriSon\AppData\Local\Historique
O43 - CFD: 01/06/2013 - 10:38:41 - [0,001] ----D C:\Users\OriSon\AppData\Local\Innovative Solutions
O43 - CFD: 01/06/2013 - 19:34:28 - [0] ----D C:\Users\OriSon\AppData\Local\Macromedia
O43 - CFD: 10/06/2013 - 13:20:44 - [655,877] ----D C:\Users\OriSon\AppData\Local\Microsoft
O43 - CFD: 01/06/2013 - 07:10:01 - [0] ----D C:\Users\OriSon\AppData\Local\Microsoft Help
O43 - CFD: 01/06/2013 - 12:06:43 - [0,170] ----D C:\Users\OriSon\AppData\Local\MigWiz
O43 - CFD: 31/05/2013 - 22:52:22 - [286,937] ----D C:\Users\OriSon\AppData\Local\Mozilla
O43 - CFD: 01/06/2013 - 13:33:06 - [65,394] ----D C:\Users\OriSon\AppData\Local\Pokki
O43 - CFD: 02/06/2013 - 11:15:26 - [0] ----D C:\Users\OriSon\AppData\Local\Programs
O43 - CFD: 01/06/2013 - 12:10:11 - [1,071] ----D C:\Users\OriSon\AppData\Local\Solid State Networks
O43 - CFD: 11/06/2013 - 17:40:56 - [0,038] ----D C:\Users\OriSon\AppData\Local\Temp
O43 - CFD: 31/05/2013 - 22:01:15 - [0] ----D C:\Users\OriSon\AppData\Local\Temporary Internet Files
O43 - CFD: 01/06/2013 - 11:24:26 - [18,018] ----D C:\Users\OriSon\AppData\Local\Thunderbird
O43 - CFD: 01/06/2013 - 14:05:53 - [6,482] ----D C:\Users\OriSon\AppData\Local\TomTom
O43 - CFD: 31/05/2013 - 22:01:21 - [0] ----D C:\Users\OriSon\AppData\Local\VirtualStore
O43 - CFD: 01/06/2013 - 22:57:50 - [0,016] ----D C:\Users\OriSon\AppData\Local\WindowsUpdate
O43 - CFD: 14/07/2009 - 06:54:32 - [0,013] R---D C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 01/06/2013 - 23:04:18 - [0,000] R---D C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 01/06/2013 - 13:48:15 - [0,006] ----D C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 09/06/2013 - 12:59:31 - [0,001] R---D C:\Users\OriSon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 145 Scanned in 00mn 26s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D96515D576B93029A4D99E8CA0C156CC] - 11/06/2013 - 14:30:37 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1639505]
O44 - LFC:[MD5.962F991AC9167C7D296D70DB9C9D6068] - 11/06/2013 - 13:47:28 ---A- . (...) -- C:\Windows\setupact.log   [2363]
O44 - LFC:[MD5.0ECD6D3CA0C770200109BCA3C736D220] - 11/06/2013 - 07:26:34 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.28E1A0B55CD29067A22D9E37CA26E1F9] - 10/06/2013 - 18:29:51 ---A- . (...) -- C:\Windows\iis7.log   [35992]
O44 - LFC:[MD5.059A7E2F57BB2668DCDA5880D3A31CFC] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - Application Host Admin Proxy.) -- C:\Windows\SysNative\ahadmin.dll   [60928]
O44 - LFC:[MD5.059A7E2F57BB2668DCDA5880D3A31CFC] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - Application Host Admin Proxy.) -- C:\Windows\System32\ahadmin.dll   [60928]
O44 - LFC:[MD5.EDC5E337D2CCD95150E89AD9E777778F] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS Admin Com API Proxy dll.) -- C:\Windows\SysNative\admwprox.dll   [55296]
O44 - LFC:[MD5.EDC5E337D2CCD95150E89AD9E777778F] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS Admin Com API Proxy dll.) -- C:\Windows\System32\admwprox.dll   [55296]
O44 - LFC:[MD5.80CA0CCD8356DD20A82F5DDF32B46AD0] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS Restart API Proxy dll.) -- C:\Windows\SysNative\iisrstap.dll   [11264]
O44 - LFC:[MD5.80CA0CCD8356DD20A82F5DDF32B46AD0] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS Restart API Proxy dll.) -- C:\Windows\System32\iisrstap.dll   [11264]
O44 - LFC:[MD5.54CB2D6909E6CCDC3177E1D2B68D7610] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS RunTime Library.) -- C:\Windows\SysNative\iisRtl.dll   [192000]
O44 - LFC:[MD5.54CB2D6909E6CCDC3177E1D2B68D7610] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS RunTime Library.) -- C:\Windows\System32\iisRtl.dll   [192000]
O44 - LFC:[MD5.AAA1E0A0BC59365370CE1624D9FC23FE] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS control command line utility.) -- C:\Windows\SysNative\iisreset.exe   [16896]
O44 - LFC:[MD5.AAA1E0A0BC59365370CE1624D9FC23FE] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - IIS control command line utility.) -- C:\Windows\System32\iisreset.exe   [16896]
O44 - LFC:[MD5.8055165FC1D534AB338A2C3E09496B55] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - WAMREG Proxy Stub.) -- C:\Windows\SysNative\wamregps.dll   [14848]
O44 - LFC:[MD5.8055165FC1D534AB338A2C3E09496B55] - 10/06/2013 - 15:06:16 ---A- . (.Microsoft Corporation - WAMREG Proxy Stub.) -- C:\Windows\System32\wamregps.dll   [14848]
O44 - LFC:[MD5.E4FC35673DFD0AB401647AA73DF3127A] - 10/06/2013 - 08:05:28 ---A- . (...) -- C:\Windows\PFRO.log   [2586]
O44 - LFC:[MD5.2C461FCF9CED079F40EFF9776E5F84AB] - 09/06/2013 - 22:42:34 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [113554]
O44 - LFC:[MD5.E9008FF6DCF49E04C03ACF7224FC2CD0] - 09/06/2013 - 22:42:34 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [140284]
O44 - LFC:[MD5.E3BCE9C513FC00E6310A55A07C8641F0] - 09/06/2013 - 22:42:34 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [643870]
O44 - LFC:[MD5.1ED0BE8F55D8B3E67B474A09D5F937C7] - 09/06/2013 - 22:42:34 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [737614]
O44 - LFC:[MD5.2C461FCF9CED079F40EFF9776E5F84AB] - 09/06/2013 - 22:42:34 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [113554]
O44 - LFC:[MD5.E9008FF6DCF49E04C03ACF7224FC2CD0] - 09/06/2013 - 22:42:34 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [140284]
O44 - LFC:[MD5.E3BCE9C513FC00E6310A55A07C8641F0] - 09/06/2013 - 22:42:34 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [643870]
O44 - LFC:[MD5.1ED0BE8F55D8B3E67B474A09D5F937C7] - 09/06/2013 - 22:42:34 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [737614]
O44 - LFC:[MD5.F1CA11D5F7EA86A684AD3E0439740E05] - 09/06/2013 - 21:59:50 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [422224]
O44 - LFC:[MD5.F1CA11D5F7EA86A684AD3E0439740E05] - 09/06/2013 - 21:59:50 RSHAD . (...) -- C:\Windows\System32\FNTCACHE.DAT   [422224]
O44 - LFC:[MD5.C1033F56D87209FEAEE19F36DB0D43EF] - 08/06/2013 - 19:10:25 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1549700]
O44 - LFC:[MD5.C1033F56D87209FEAEE19F36DB0D43EF] - 08/06/2013 - 19:10:25 RSHAD . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1549700]
O44 - LFC:[MD5.C279A9DF64F464A8D818DF15DD81998A] - 08/06/2013 - 14:32:27 ---A- . (...) -- C:\parametreMail.ini   [47]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/06/2013 - 12:41:32 RSHAD . (...) -- C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf   [0]
O44 - LFC:[MD5.A1676271F37E953A2C4FB8E1046AEA86] - 03/06/2013 - 12:34:37 ---A- . (.CANON INC. - IJ Language Monitor.) -- C:\Windows\SysNative\CNMLM9D.DLL   [279040]
O44 - LFC:[MD5.A1676271F37E953A2C4FB8E1046AEA86] - 03/06/2013 - 12:34:37 RSHAD . (.CANON INC. - IJ Language Monitor.) -- C:\Windows\System32\CNMLM9D.DLL   [279040]
O44 - LFC:[MD5.CC2229EEC61D2E2C40A5EF7C8E99B98A] - 03/06/2013 - 12:34:19 ---A- . (.Canon Inc. - Canon WIA scanner co-installer 64bit Editio.) -- C:\Windows\SysNative\CNC620O.DLL   [229888]
O44 - LFC:[MD5.CC2229EEC61D2E2C40A5EF7C8E99B98A] - 03/06/2013 - 12:34:19 RSHAD . (.Canon Inc. - Canon WIA scanner co-installer 64bit Editio.) -- C:\Windows\System32\CNC620O.DLL   [229888]
O44 - LFC:[MD5.D3D8F1DB0A00E3BF9AED0FA79B1792F8] - 03/06/2013 - 12:34:18 ---A- . (.CANON INC. - LLD.) -- C:\Windows\SysNative\CNC620L.DLL   [293376]
O44 - LFC:[MD5.A1561BD059A48D8CD3574E2E5CBD9E09] - 03/06/2013 - 12:34:18 ---A- . (.CANON INC. - WIA Scanner Driver Image Enhancement dll 64.) -- C:\Windows\SysNative\CNC620I.DLL   [92672]
O44 - LFC:[MD5.D3D8F1DB0A00E3BF9AED0FA79B1792F8] - 03/06/2013 - 12:34:18 RSHAD . (.CANON INC. - LLD.) -- C:\Windows\System32\CNC620L.DLL   [293376]
O44 - LFC:[MD5.A1561BD059A48D8CD3574E2E5CBD9E09] - 03/06/2013 - 12:34:18 RSHAD . (.CANON INC. - WIA Scanner Driver Image Enhancement dll 64.) -- C:\Windows\System32\CNC620I.DLL   [92672]
O44 - LFC:[MD5.855B10A5DAC983D4B173FA1ECC4931B3] - 03/06/2013 - 12:34:17 ---A- . (.CANON INC. - WIA Scanner Driver 64-bit Edition.) -- C:\Windows\SysNative\CNC620C.DLL   [1354240]
O44 - LFC:[MD5.855B10A5DAC983D4B173FA1ECC4931B3] - 03/06/2013 - 12:34:17 RSHAD . (.CANON INC. - WIA Scanner Driver 64-bit Edition.) -- C:\Windows\System32\CNC620C.DLL   [1354240]
O44 - LFC:[MD5.D39CC47DBB6C1213191410768616326F] - 03/06/2013 - 12:33:48 ---A- . (.CANON INC. - Canon IJ Network 64bit UI Module.) -- C:\Windows\SysNative\CNMN6UI.DLL   [151552]
O44 - LFC:[MD5.5F27E886BC7ADE0CB2BD356B929F71D2] - 03/06/2013 - 12:33:48 ---A- . (.CANON INC. - Canon IJ Network 64bit comm Module.) -- C:\Windows\SysNative\CNMN6PPM.DLL   [251904]
O44 - LFC:[MD5.D39CC47DBB6C1213191410768616326F] - 03/06/2013 - 12:33:48 RSHAD . (.CANON INC. - Canon IJ Network 64bit UI Module.) -- C:\Windows\System32\CNMN6UI.DLL   [151552]
O44 - LFC:[MD5.5F27E886BC7ADE0CB2BD356B929F71D2] - 03/06/2013 - 12:33:48 RSHAD . (.CANON INC. - Canon IJ Network 64bit comm Module.) -- C:\Windows\System32\CNMN6PPM.DLL   [251904]
O44 - LFC:[MD5.A49C1C6A7857ED3D0FF01E1AF7DF108F] - 03/06/2013 - 12:33:47 ---A- . (...) -- C:\Windows\SysNative\Cnmnput.chm   [132170]
O44 - LFC:[MD5.A49C1C6A7857ED3D0FF01E1AF7DF108F] - 03/06/2013 - 12:33:47 RSHAD . (...) -- C:\Windows\System32\Cnmnput.chm   [132170]
O44 - LFC:[MD5.973131EB99BE1E19DAC502CB724E72A5] - 03/06/2013 - 07:30:52 ---A- . (.Microsoft Corporation - DirectShow DVD PlayBack Runtime..) -- C:\Windows\SysNative\qdvd.dll   [366592]
O44 - LFC:[MD5.973131EB99BE1E19DAC502CB724E72A5] - 03/06/2013 - 07:30:52 ---A- . (.Microsoft Corporation - DirectShow DVD PlayBack Runtime..) -- C:\Windows\System32\qdvd.dll   [366592]
O44 - LFC:[MD5.685527DA09EBFB681E98C515978BDEE2] - 03/06/2013 - 07:30:51 ---A- . (.Microsoft Corporation - DLL serveur LSA.) -- C:\Windows\SysNative\lsasrv.dll   [1448448]
O44 - LFC:[MD5.B7D42CB36C08FA017E73FF2433CD7287] - 03/06/2013 - 07:30:51 ---A- . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\SysNative\schannel.dll   [340992]
O44 - LFC:[MD5.B7D42CB36C08FA017E73FF2433CD7287] - 03/06/2013 - 07:30:51 ---A- . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll   [340992]
O44 - LFC:[MD5.685527DA09EBFB681E98C515978BDEE2] - 03/06/2013 - 07:30:51 RSHAD . (.Microsoft Corporation - DLL serveur LSA.) -- C:\Windows\System32\lsasrv.dll   [1448448]
O44 - LFC:[MD5.AAFCB52FE0037207FB6FBEA070D25EFE] - 03/06/2013 - 07:30:51 RSHAD . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\Drivers\cng.sys   [458712]
O44 - LFC:[MD5.7EFB9333E4ECCE6AE4AE9D777D9E553E] - 03/06/2013 - 07:30:51 RSHAD . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecpkg.sys   [154480]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/06/2013 - 06:45:03 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.C76841C1828DEFD238DC4477FE206736] - 02/06/2013 - 19:44:52 ---A- . (.IObit - Advanced SystemCare.) -- C:\Windows\SysNative\RegistryDefragBootTime.exe   [26432]
O44 - LFC:[MD5.C76841C1828DEFD238DC4477FE206736] - 02/06/2013 - 19:44:52 RSHAD . (.IObit - Advanced SystemCare.) -- C:\Windows\System32\RegistryDefragBootTime.exe   [26432]
O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 02/06/2013 - 19:24:03 RSHAD . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys   [25928]
O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 02/06/2013 - 09:27:53 RSHAD . (...) -- C:\Windows\System32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf   [3]
O44 - LFC:[MD5.51DFBD18A435BAEC1F71A692373ECE4F] - 02/06/2013 - 09:27:52 ---A- . (.Microsoft Corporation - Kernel Mode Driver Framework Resource.) -- C:\Windows\SysNative\Wdfres.dll   [9728]
O44 - LFC:[MD5.AEA0A67275CFBA0E463E00C6E9A1DDAE] - 02/06/2013 - 09:27:52 RSHAD . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\Drivers\WdfLdr.sys   [54376]
O44 - LFC:[MD5.51DFBD18A435BAEC1F71A692373ECE4F] - 02/06/2013 - 09:27:52 RSHAD . (.Microsoft Corporation - Kernel Mode Driver Framework Resource.) -- C:\Windows\System32\Wdfres.dll   [9728]
O44 - LFC:[MD5.442783E2CB0DA19873B7A63833FF4CB4] - 02/06/2013 - 09:27:52 RSHAD . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\Windows\System32\Drivers\Wdf01000.sys   [785512]
O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 02/06/2013 - 09:22:41 ---A- . (...) -- C:\Windows\SysNative\ieuinit.inf   [25185]
O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 02/06/2013 - 09:22:41 ---A- . (...) -- C:\Windows\System32\ieuinit.inf   [25185]
O44 - LFC:[MD5.E965529C43D25F2BDA77D705098BF777] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\Windows\SysNative\IEAdvpack.dll   [135680]
O44 - LFC:[MD5.E965529C43D25F2BDA77D705098BF777] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - ADVPACK.) -- C:\Windows\System32\IEAdvpack.dll   [135680]
O44 - LFC:[MD5.40738329209CBE2C9B48F7E30F7C1414] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Auto-extracteur de fichier CAB Win32.) -- C:\Windows\SysNative\wextract.exe   [144896]
O44 - LFC:[MD5.40738329209CBE2C9B48F7E30F7C1414] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Auto-extracteur de fichier CAB Win32.) -- C:\Windows\System32\wextract.exe   [144896]
O44 - LFC:[MD5.BC0D4AFBE94D8E1F81C8926D805C3366] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\SysNative\webcheck.dll   [247296]
O44 - LFC:[MD5.BC0D4AFBE94D8E1F81C8926D805C3366] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll   [247296]
O44 - LFC:[MD5.D8DD5CBB9668EEE98915EA49C72F78FA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\SysNative\html.iec   [441856]
O44 - LFC:[MD5.D8DD5CBB9668EEE98915EA49C72F78FA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\System32\html.iec   [441856]
O44 - LFC:[MD5.EC08E38751854C5B8899139B7DD29FF9] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL de gestion d'utilisateur local et de co.) -- C:\Windows\SysNative\msrating.dll   [197120]
O44 - LFC:[MD5.EC08E38751854C5B8899139B7DD29FF9] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL de gestion d'utilisateur local et de co.) -- C:\Windows\System32\msrating.dll   [197120]
O44 - LFC:[MD5.942E110384668EEFF44751A02EDDF5E4] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL de ressource du composant d'édition HTM.) -- C:\Windows\SysNative\mshtmler.dll   [48640]
O44 - LFC:[MD5.942E110384668EEFF44751A02EDDF5E4] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL de ressource du composant d'édition HTM.) -- C:\Windows\System32\mshtmler.dll   [48640]
O44 - LFC:[MD5.D8076F8A3C34064582035AE6696DC34A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de licences Microsoft®.) -- C:\Windows\SysNative\licmgr10.dll   [27648]
O44 - LFC:[MD5.D8076F8A3C34064582035AE6696DC34A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de licences Microsoft®.) -- C:\Windows\System32\licmgr10.dll   [27648]
O44 - LFC:[MD5.3531FA12A76A32ECECD972196775DF7C] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - ELS Hyphenation Service.) -- C:\Windows\SysNative\elshyph.dll   [226304]
O44 - LFC:[MD5.3531FA12A76A32ECECD972196775DF7C] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - ELS Hyphenation Service.) -- C:\Windows\System32\elshyph.dll   [226304]
O44 - LFC:[MD5.27A9000C534AA9BADC9EE74940F50C6D] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll   [2242048]
O44 - LFC:[MD5.27A9000C534AA9BADC9EE74940F50C6D] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll   [2242048]
O44 - LFC:[MD5.E34F0440799F9A0F9DC4265F4ADA75C1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll   [1365504]
O44 - LFC:[MD5.E34F0440799F9A0F9DC4265F4ADA75C1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll   [1365504]
O44 - LFC:[MD5.658E8FEC79A4AB5BFDE032627B5C9667] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) -- C:\Windows\SysNative\mshta.exe   [13824]
O44 - LFC:[MD5.658E8FEC79A4AB5BFDE032627B5C9667] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) -- C:\Windows\System32\mshta.exe   [13824]
O44 - LFC:[MD5.C2F21E3059AFF5E616F3E361D9FA10CD] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\Windows\SysNative\pngfilt.dll   [62976]
O44 - LFC:[MD5.C2F21E3059AFF5E616F3E361D9FA10CD] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE PNG plugin image decoder.) -- C:\Windows\System32\pngfilt.dll   [62976]
O44 - LFC:[MD5.EC6E8273B6CB79CA5B7B00CA82D1FCEE] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll   [136704]
O44 - LFC:[MD5.EC6E8273B6CB79CA5B7B00CA82D1FCEE] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll   [136704]
O44 - LFC:[MD5.5B15164486C66B76699E1CD2CD2F3A2A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\Windows\SysNative\imgutil.dll   [51200]
O44 - LFC:[MD5.5B15164486C66B76699E1CD2CD2F3A2A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IE plugin image decoder support DLL.) -- C:\Windows\System32\imgutil.dll   [51200]
O44 - LFC:[MD5.97588F2871E1FE8E3EB57B17B98DF03B] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll   [67072]
O44 - LFC:[MD5.97588F2871E1FE8E3EB57B17B98DF03B] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll   [67072]
O44 - LFC:[MD5.402D797A7905DC3C6FE11E75CD5252EB] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\Windows\SysNative\url.dll   [235008]
O44 - LFC:[MD5.402D797A7905DC3C6FE11E75CD5252EB] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Internet Shortcut Shell Extension DLL.) -- C:\Windows\System32\url.dll   [235008]
O44 - LFC:[MD5.254502230F2259D255D4149C235173B1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll   [53248]
O44 - LFC:[MD5.254502230F2259D255D4149C235173B1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll   [53248]
O44 - LFC:[MD5.E1055A7FAD39F1F7C44F6152044056EA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Media DLL.) -- C:\Windows\SysNative\mshtmlmedia.dll   [905728]
O44 - LFC:[MD5.E1055A7FAD39F1F7C44F6152044056EA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Media DLL.) -- C:\Windows\System32\mshtmlmedia.dll   [905728]
O44 - LFC:[MD5.772EC073332D1BA2DBEC32C6D063811A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll   [855552]
O44 - LFC:[MD5.2C96C695B6015042AC867EA419A45C20] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll   [3958784]
O44 - LFC:[MD5.772EC073332D1BA2DBEC32C6D063811A] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll   [855552]
O44 - LFC:[MD5.2C96C695B6015042AC867EA419A45C20] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll   [3958784]
O44 - LFC:[MD5.7DAA72F6C30D81EE31EC2BDC90054326] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll   [603136]
O44 - LFC:[MD5.7DAA72F6C30D81EE31EC2BDC90054326] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll   [603136]
O44 - LFC:[MD5.82D602EBBBA6D08E4691F32269FD3494] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\Windows\SysNative\msfeedssync.exe   [12800]
O44 - LFC:[MD5.82D602EBBBA6D08E4691F32269FD3494] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Feeds Synchronization.) -- C:\Windows\System32\msfeedssync.exe   [12800]
O44 - LFC:[MD5.23556D116D5FB93395B2A648EEB24251] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Information Card IE Helper.) -- C:\Windows\SysNative\icardie.dll   [81408]
O44 - LFC:[MD5.23556D116D5FB93395B2A648EEB24251] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Information Card IE Helper.) -- C:\Windows\System32\icardie.dll   [81408]
O44 - LFC:[MD5.112183DF91C9BAECB498E4A86ECDE598] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Line Services library file.) -- C:\Windows\SysNative\msls31.dll   [216064]
O44 - LFC:[MD5.112183DF91C9BAECB498E4A86ECDE598] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Line Services library file.) -- C:\Windows\System32\msls31.dll   [216064]
O44 - LFC:[MD5.8C3D32A4A46326031309A43C52539D7F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter Data File.) -- C:\Windows\SysNative\ieapfltr.dat   [1400416]
O44 - LFC:[MD5.8C3D32A4A46326031309A43C52539D7F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter Data File.) -- C:\Windows\System32\ieapfltr.dat   [1400416]
O44 - LFC:[MD5.1456EECCB5CF6B91513200F95D61706E] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\SysNative\ieapfltr.dll   [762368]
O44 - LFC:[MD5.1456EECCB5CF6B91513200F95D61706E] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll   [762368]
O44 - LFC:[MD5.5051BB40FFB2BA4870C0A059CA03294F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft Spell Checking Facility.) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe   [1054720]
O44 - LFC:[MD5.4CFBEC37E4FAD530E623E1541E1EA958] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\SysNative\vbscript.dll   [599552]
O44 - LFC:[MD5.4CFBEC37E4FAD530E623E1541E1EA958] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll   [599552]
O44 - LFC:[MD5.2AAE2B8FED8390879C2369FC63F7001F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\SysNative\mshtmled.dll   [97280]
O44 - LFC:[MD5.2AAE2B8FED8390879C2369FC63F7001F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll   [97280]
O44 - LFC:[MD5.9B2BB51ED6D28860A48CFF46FD6D3DC1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb   [2706432]
O44 - LFC:[MD5.9B2BB51ED6D28860A48CFF46FD6D3DC1] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb   [2706432]
O44 - LFC:[MD5.4E426A67C46379B75A5E671B46FC07F6] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Moteur d'installation.) -- C:\Windows\SysNative\inseng.dll   [102912]
O44 - LFC:[MD5.4E426A67C46379B75A5E671B46FC07F6] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Moteur d'installation.) -- C:\Windows\System32\inseng.dll   [102912]
O44 - LFC:[MD5.FE6CB2001A8C2A85B617CD3FC85D8242] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\SysNative\ieui.dll   [526336]
O44 - LFC:[MD5.FE6CB2001A8C2A85B617CD3FC85D8242] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll   [526336]
O44 - LFC:[MD5.7F4F74880E0B586EB7A9E225C34B1296] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll   [15404032]
O44 - LFC:[MD5.7F4F74880E0B586EB7A9E225C34B1296] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll   [15404032]
O44 - LFC:[MD5.D0D4CE6C6CE87269A34A184356475D17] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Object Control Viewer.) -- C:\Windows\SysNative\occache.dll   [149504]
O44 - LFC:[MD5.D0D4CE6C6CE87269A34A184356475D17] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Object Control Viewer.) -- C:\Windows\System32\occache.dll   [149504]
O44 - LFC:[MD5.18A94D6E9D27D169D38DAB91F6A97518] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Objets homologues Internet Explorer.) -- C:\Windows\SysNative\iepeers.dll   [136192]
O44 - LFC:[MD5.18A94D6E9D27D169D38DAB91F6A97518] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Objets homologues Internet Explorer.) -- C:\Windows\System32\iepeers.dll   [136192]
O44 - LFC:[MD5.31E219322B8D765F9F84B80D1D92A07F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\SysNative\ieUnatt.exe   [173568]
O44 - LFC:[MD5.31E219322B8D765F9F84B80D1D92A07F] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\System32\ieUnatt.exe   [173568]
O44 - LFC:[MD5.ADE73A865A5F136E84F49BB6B1627C6E] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\SysNative\inetcpl.cpl   [1509376]
O44 - LFC:[MD5.ADE73A865A5F136E84F49BB6B1627C6E] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl   [1509376]
O44 - LFC:[MD5.D0F66CFAED5B85543216EF526D380B8B] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\SysNative\iedkcs32.dll   [270848]
O44 - LFC:[MD5.D0F66CFAED5B85543216EF526D380B8B] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll   [270848]
O44 - LFC:[MD5.9D6B9124B582F0FBF275B434CE5A672C] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\SysNative\iertutil.dll   [2647552]
O44 - LFC:[MD5.9D6B9124B582F0FBF275B434CE5A672C] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll   [2647552]
O44 - LFC:[MD5.F651D95B5043EFC20A6108A853553984] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Sets the date that IE was installed.) -- C:\Windows\SysNative\SetIEInstalledDate.exe   [92160]
O44 - LFC:[MD5.F651D95B5043EFC20A6108A853553984] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Sets the date that IE was installed.) -- C:\Windows\System32\SetIEInstalledDate.exe   [92160]
O44 - LFC:[MD5.63CAE56FE4215F98FEB0188748A99378] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Synchronisation en arrière-plan des flux Mi.) -- C:\Windows\SysNative\msfeedsbs.dll   [52224]
O44 - LFC:[MD5.63CAE56FE4215F98FEB0188748A99378] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Synchronisation en arrière-plan des flux Mi.) -- C:\Windows\System32\msfeedsbs.dll   [52224]
O44 - LFC:[MD5.440104AEB9DAF8AC9842080AE59740FA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - TDC ActiveX Control.) -- C:\Windows\SysNative\tdc.ocx   [77312]
O44 - LFC:[MD5.440104AEB9DAF8AC9842080AE59740FA] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - TDC ActiveX Control.) -- C:\Windows\System32\tdc.ocx   [77312]
O44 - LFC:[MD5.168602AB16D30D5D6E091CA609FC7E75] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\SysNative\iernonce.dll   [39936]
O44 - LFC:[MD5.168602AB16D30D5D6E091CA609FC7E75] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll   [39936]
O44 - LFC:[MD5.42758AF68D3C4912C8D8A18088AD2555] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe   [51712]
O44 - LFC:[MD5.C56EF4C50A1FEED0CC9B7AE068CBBBBB] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll   [19231232]
O44 - LFC:[MD5.C56EF4C50A1FEED0CC9B7AE068CBBBBB] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll   [19231232]
O44 - LFC:[MD5.D9C10A4A0B3411146E6FC8936B079934] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Wizard.) -- C:\Windows\SysNative\iexpress.exe   [167424]
O44 - LFC:[MD5.D9C10A4A0B3411146E6FC8936B079934] - 02/06/2013 - 09:22:41 ---A- . (.Microsoft Corporation - Wizard.) -- C:\Windows\System32\iexpress.exe   [167424]
O44 - LFC:[MD5.5051BB40FFB2BA4870C0A059CA03294F] - 02/06/2013 - 09:22:41 RSHAD . (.Microsoft Corporation - Microsoft Spell Checking Facility.) -- C:\Windows\System32\MsSpellCheckingFacility.exe   [1054720]
O44 - LFC:[MD5.42758AF68D3C4912C8D8A18088AD2555] - 02/06/2013 - 09:22:41 RSHAD . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe   [51712]
O44 - LFC:[MD5.7E8A672B7B06A6EB11960C22E0360C59] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Bibliothèque Microsoft D2D.) -- C:\Windows\SysNative\d2d1.dll   [3928064]
O44 - LFC:[MD5.7E8A672B7B06A6EB11960C22E0360C59] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Bibliothèque Microsoft D2D.) -- C:\Windows\System32\d2d1.dll   [3928064]
O44 - LFC:[MD5.893E8C1E4A1263EDDB1A6922D0E32201] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Codec pour photographie Windows Media Photo.) -- C:\Windows\SysNative\WMPhoto.dll   [465920]
O44 - LFC:[MD5.893E8C1E4A1263EDDB1A6922D0E32201] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Codec pour photographie Windows Media Photo.) -- C:\Windows\System32\WMPhoto.dll   [465920]
O44 - LFC:[MD5.C498EF41B93986BCBD483597573EB96D] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Rasterizer.) -- C:\Windows\SysNative\d3d10warp.dll   [2565120]
O44 - LFC:[MD5.C498EF41B93986BCBD483597573EB96D] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Rasterizer.) -- C:\Windows\System32\d3d10warp.dll   [2565120]
O44 - LFC:[MD5.B2CA1AC17E78D986B22FD6C2261CD84F] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Runtime.) -- C:\Windows\SysNative\d3d10.dll   [1238528]
O44 - LFC:[MD5.AFB73882AE41E1629A63E6713FE30FB9] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Runtime.) -- C:\Windows\SysNative\d3d10core.dll   [296960]
O44 - LFC:[MD5.B2CA1AC17E78D986B22FD6C2261CD84F] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Runtime.) -- C:\Windows\System32\d3d10.dll   [1238528]
O44 - LFC:[MD5.AFB73882AE41E1629A63E6713FE30FB9] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 Runtime.) -- C:\Windows\System32\d3d10core.dll   [296960]
O44 - LFC:[MD5.3834316FE8A653227282196525E07DFE] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 to Direct3D9 Translation Runtim.) -- C:\Windows\SysNative\d3d10level9.dll   [648192]
O44 - LFC:[MD5.3834316FE8A653227282196525E07DFE] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10 to Direct3D9 Translation Runtim.) -- C:\Windows\System32\d3d10level9.dll   [648192]
O44 - LFC:[MD5.9AE80F6A66B30E3ED8CDF858CF28B11B] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10.1 Runtime.) -- C:\Windows\SysNative\d3d10_1.dll   [194560]
O44 - LFC:[MD5.63F72417CA38D8FC8F53709649B589E3] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10.1 Runtime.) -- C:\Windows\SysNative\d3d10_1core.dll   [333312]
O44 - LFC:[MD5.9AE80F6A66B30E3ED8CDF858CF28B11B] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10.1 Runtime.) -- C:\Windows\System32\d3d10_1.dll   [194560]
O44 - LFC:[MD5.63F72417CA38D8FC8F53709649B589E3] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 10.1 Runtime.) -- C:\Windows\System32\d3d10_1core.dll   [333312]
O44 - LFC:[MD5.448B02AD260EC3E1E892FCE6DFDDEEBD] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 11 Runtime.) -- C:\Windows\SysNative\d3d11.dll   [1887232]
O44 - LFC:[MD5.448B02AD260EC3E1E892FCE6DFDDEEBD] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Direct3D 11 Runtime.) -- C:\Windows\System32\d3d11.dll   [1887232]
O44 - LFC:[MD5.8DFB5752FCE145A6B295093C0A8BE131] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - DirectX Graphics Infrastructure.) -- C:\Windows\SysNative\dxgi.dll   [363008]
O44 - LFC:[MD5.8DFB5752FCE145A6B295093C0A8BE131] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - DirectX Graphics Infrastructure.) -- C:\Windows\System32\dxgi.dll   [363008]
O44 - LFC:[MD5.E8EEA503870CB6A6DC4E09A2433DF33E] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft DTV-DVD Video Decoder.) -- C:\Windows\SysNative\msmpeg2vdec.dll   [2776576]
O44 - LFC:[MD5.E8EEA503870CB6A6DC4E09A2433DF33E] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft DTV-DVD Video Decoder.) -- C:\Windows\System32\msmpeg2vdec.dll   [2776576]
O44 - LFC:[MD5.F1C19F0AA151B90A7416FA1D50DDB582] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Extended Library.) -- C:\Windows\SysNative\WindowsCodecsExt.dll   [245248]
O44 - LFC:[MD5.F1C19F0AA151B90A7416FA1D50DDB582] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Extended Library.) -- C:\Windows\System32\WindowsCodecsExt.dll   [245248]
O44 - LFC:[MD5.BDDF242A49E7B7DC5CCEC291BCE53ACB] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\SysNative\WindowsCodecs.dll   [1424384]
O44 - LFC:[MD5.BDDF242A49E7B7DC5CCEC291BCE53ACB] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Microsoft Windows Codecs Library.) -- C:\Windows\System32\WindowsCodecs.dll   [1424384]
O44 - LFC:[MD5.C4C183E6551084039EC862DA1C945E3D] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Service de cache de police Windows.) -- C:\Windows\SysNative\FntCache.dll   [1175552]
O44 - LFC:[MD5.63BB89DED1E9104E68D33E54DE4D340D] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Services de typographie Microsoft DirectX.) -- C:\Windows\SysNative\DWrite.dll   [1643520]
O44 - LFC:[MD5.63BB89DED1E9104E68D33E54DE4D340D] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Services de typographie Microsoft DirectX.) -- C:\Windows\System32\DWrite.dll   [1643520]
O44 - LFC:[MD5.04CB7C8FDC6D9640DD82A527208F72C4] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Windows Animation Manager.) -- C:\Windows\SysNative\UIAnimation.dll   [221184]
O44 - LFC:[MD5.04CB7C8FDC6D9640DD82A527208F72C4] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - Windows Animation Manager.) -- C:\Windows\System32\UIAnimation.dll   [221184]
O44 - LFC:[MD5.FA428BDBCFAB9DC3D58F0BD2CCD50EA2] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - XPS Printing DLL.) -- C:\Windows\System32\XpsPrint.dll   [1682432]
O44 - LFC:[MD5.6F623BD09CBB4C3F97374F12976E5EA5] - 02/06/2013 - 09:21:27 ---A- . (.Microsoft Corporation - XPS to GDI Converter.) -- C:\Windows\System32\XpsGdiConverter.dll   [522752]
O44 - LFC:[MD5.F49E92B50CED5C9F1725D3C0329FD933] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll   [10752]
O44 - LFC:[MD5.F5CEF064C7E6D95DA86B9D064A56A969] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll   [3584]
O44 - LFC:[MD5.64A4AB126E24FD3F58EBE64852773DB5] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll   [2560]
O44 - LFC:[MD5.0E6FBF19D9DFBB77316C23DF91F8A101] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll   [5632]
O44 - LFC:[MD5.9108540E866F75C7AF2B91DD921A8091] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll   [3072]
O44 - LFC:[MD5.AFC3DB5C6EB8CA8017DDB81D6C0AD02A] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll   [9728]
O44 - LFC:[MD5.FB4045578F5180BDB1963AB352B78548] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll   [5632]
O44 - LFC:[MD5.72723D3E4781BADC62C3180C137E7B23] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll   [4096]
O44 - LFC:[MD5.9094039A00485F71C4DE64BF51F64C46] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll   [3072]
O44 - LFC:[MD5.F49E92B50CED5C9F1725D3C0329FD933] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll   [10752]
O44 - LFC:[MD5.F5CEF064C7E6D95DA86B9D064A56A969] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll   [3584]
O44 - LFC:[MD5.64A4AB126E24FD3F58EBE64852773DB5] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll   [2560]
O44 - LFC:[MD5.0E6FBF19D9DFBB77316C23DF91F8A101] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll   [5632]
O44 - LFC:[MD5.9108540E866F75C7AF2B91DD921A8091] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll   [3072]
O44 - LFC:[MD5.AFC3DB5C6EB8CA8017DDB81D6C0AD02A] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll   [9728]
O44 - LFC:[MD5.FB4045578F5180BDB1963AB352B78548] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll   [5632]
O44 - LFC:[MD5.72723D3E4781BADC62C3180C137E7B23] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll   [4096]
O44 - LFC:[MD5.9094039A00485F71C4DE64BF51F64C46] - 02/06/2013 - 09:21:27 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll   [3072]
O44 - LFC:[MD5.C4C183E6551084039EC862DA1C945E3D] - 02/06/2013 - 09:21:27 RSHAD . (.Microsoft Corporation - Service de cache de police Windows.) -- C:\Windows\System32\FntCache.dll   [1175552]
O44 - LFC:[MD5.B1DF2D87DC8BF6072699AC8301B37796] - 02/06/2013 - 09:16:36 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - Bibliothèque de.) -- C:\Windows\System32\WUDFPlatform.dll   [194048]
O44 - LFC:[MD5.B20F051B03A966392364C83F009F7D17] - 02/06/2013 - 09:16:36 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - Service d’infra.) -- C:\Windows\System32\WUDFSvc.dll   [84992]
O44 - LFC:[MD5.AB886378EEB55C6C75B4F2D14B6C869F] - 02/06/2013 - 09:16:36 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\Drivers\WUDFPf.sys   [87040]
O44 - LFC:[MD5.DDA4CAF29D8C0A297F886BFE561E6659] - 02/06/2013 - 09:16:36 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\Drivers\WUDFRd.sys   [198656]
O44 - LFC:[MD5.8ABFE00F213F2571498F1B8FD7939A98] - 02/06/2013 - 09:16:35 ---A- . (.Microsoft Corporation - Windows Driver Foundation - Processus hôte.) -- C:\Windows\SysNative\WUDFHost.exe   [229888]
O44 - LFC:[MD5.F1617F1014D51987D517A4C37A7C733B] - 02/06/2013 - 09:16:35 ---A- . (.Microsoft Corporation - Windows Driver Foundation - User-mode Platf.) -- C:\Windows\SysNative\WUDFCoinstaller.dll   [45056]
O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 02/06/2013 - 09:16:35 RSHAD . (...) -- C:\Windows\System32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf   [3]
O44 - LFC:[MD5.25AE683DCB4AE7E6F1B193A0CB9DB35F] - 02/06/2013 - 09:16:35 RSHAD . (.Microsoft Corporation - WDF:UMDF Framework Library.) -- C:\Windows\System32\WUDFx.dll   [744448]
O44 - LFC:[MD5.8ABFE00F213F2571498F1B8FD7939A98] - 02/06/2013 - 09:16:35 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - Processus hôte.) -- C:\Windows\System32\WUDFHost.exe   [229888]
O44 - LFC:[MD5.F1617F1014D51987D517A4C37A7C733B] - 02/06/2013 - 09:16:35 RSHAD . (.Microsoft Corporation - Windows Driver Foundation - User-mode Platf.) -- C:\Windows\System32\WUDFCoinstaller.dll   [45056]
O44 - LFC:[MD5.6F8B48F3D343E4B186AB6A9E302B7E16] - 02/06/2013 - 08:41:04 ---A- . (.Microsoft Corporation - Microsoft XmlLite Library.) -- C:\Windows\System32\xmllite.dll   [199680]
O44 - LFC:[MD5.3CC16A849E6092E43909F48EF0E60306] - 02/06/2013 - 08:40:59 ---A- . (.Microsoft Corporation - Client DHCPv6.) -- C:\Windows\SysNative\dhcpcore6.dll   [226816]
O44 - LFC:[MD5.3C06D5A929B798D0B13F6481242A0FD2] - 02/06/2013 - 08:40:59 ---A- . (.Microsoft Corporation - Client DHCPv6.) -- C:\Windows\SysNative\dhcpcsvc6.dll   [55296]
O44 - LFC:[MD5.3CC16A849E6092E43909F48EF0E60306] - 02/06/2013 - 08:40:59 ---A- . (.Microsoft Corporation - Client DHCPv6.) -- C:\Windows\System32\dhcpcore6.dll   [226816]
O44 - LFC:[MD5.3C06D5A929B798D0B13F6481242A0FD2] - 02/06/2013 - 08:40:59 ---A- . (.Microsoft Corporation - Client DHCPv6.) -- C:\Windows\System32\dhcpcsvc6.dll   [55296]
O44 - LFC:[MD5.332FEAB1435662FC6C672E25BEB37BE3] - 02/06/2013 - 08:40:53 ---A- . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe   [2871808]
O44 - LFC:[MD5.037A719DAD50603202C978CD802623E4] - 02/06/2013 - 08:40:46 ---A- . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\SysNative\ntshrui.dll   [509952]
O44 - LFC:[MD5.037A719DAD50603202C978CD802623E4] - 02/06/2013 - 08:40:46 ---A- . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll   [509952]
O44 - LFC:[MD5.589DF683A6C81424A6CECE52ABF98A50] - 02/06/2013 - 08:40:44 ---A- . (.Microsoft Corporation - tquery.dll.) -- C:\Windows\SysNative\tquery.dll   [2315776]
O44 - LFC:[MD5.589DF683A6C81424A6CECE52ABF98A50] - 02/06/2013 - 08:40:44 ---A- . (.Microsoft Corporation - tquery.dll.) -- C:\Windows\System32\tquery.dll   [2315776]
O44 - LFC:[MD5.E0B340996A41C9A75DFA3B99BBA9C500] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\SysNative\SearchIndexer.exe   [591872]
O44 - LFC:[MD5.E0B340996A41C9A75DFA3B99BBA9C500] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\System32\SearchIndexer.exe   [591872]
O44 - LFC:[MD5.48041BAEB60CE5F34F13CC2A1361E49C] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Microsoft Search Protocol Handler.) -- C:\Windows\SysNative\mssph.dll   [491520]
O44 - LFC:[MD5.48041BAEB60CE5F34F13CC2A1361E49C] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Microsoft Search Protocol Handler.) -- C:\Windows\System32\mssph.dll   [491520]
O44 - LFC:[MD5.D9E21CBF9E6A87847AFFD39EA3FA28EE] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) -- C:\Windows\SysNative\SearchProtocolHost.exe   [249856]
O44 - LFC:[MD5.D9E21CBF9E6A87847AFFD39EA3FA28EE] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) -- C:\Windows\System32\SearchProtocolHost.exe   [249856]
O44 - LFC:[MD5.7568CC720ACE4D03B84AF97817E745EF] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - mssrch.dll.) -- C:\Windows\SysNative\mssrch.dll   [2223616]
O44 - LFC:[MD5.7568CC720ACE4D03B84AF97817E745EF] - 02/06/2013 - 08:40:43 ---A- . (.Microsoft Corporation - mssrch.dll.) -- C:\Windows\System32\mssrch.dll   [2223616]
O44 - LFC:[MD5.4C219239ED8CC35CA41AD26B33A15624] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Connecteur Microsoft Search pour Outlook.) -- C:\Windows\SysNative\mssphtb.dll   [288256]
O44 - LFC:[MD5.4C219239ED8CC35CA41AD26B33A15624] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Connecteur Microsoft Search pour Outlook.) -- C:\Windows\System32\mssphtb.dll   [288256]
O44 - LFC:[MD5.49A3AD5CE578CD77F445F3D244AEAB2D] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Microsoft Windows Search Filter Host.) -- C:\Windows\SysNative\SearchFilterHost.exe   [113664]
O44 - LFC:[MD5.49A3AD5CE578CD77F445F3D244AEAB2D] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Microsoft Windows Search Filter Host.) -- C:\Windows\System32\SearchFilterHost.exe   [113664]
O44 - LFC:[MD5.E503E15C88B4BBDA3F6345E34FED3E92] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Plateforme de recherche Microsoft Vista.) -- C:\Windows\SysNative\mssvp.dll   [778752]
O44 - LFC:[MD5.E503E15C88B4BBDA3F6345E34FED3E92] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - Plateforme de recherche Microsoft Vista.) -- C:\Windows\System32\mssvp.dll   [778752]
O44 - LFC:[MD5.093747DAE1C1A7F6DEA8D16E26D4F648] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - msscntrs.dll.) -- C:\Windows\SysNative\msscntrs.dll   [75264]
O44 - LFC:[MD5.093747DAE1C1A7F6DEA8D16E26D4F648] - 02/06/2013 - 08:40:42 ---A- . (.Microsoft Corporation - msscntrs.dll.) -- C:\Windows\System32\msscntrs.dll   [75264]
O44 - LFC:[MD5.FE90B750AB808FB9DD8FBB428B5FF83B] - 02/06/2013 - 08:40:40 RSHAD . (.Microsoft Corporation - Service de configuration automatique WWAN.) -- C:\Windows\System32\wwansvc.dll   [230400]
O44 - LFC:[MD5.30B1489F2DCD8DC1AB6BB60CA6093615] - 02/06/2013 - 08:40:40 RSHAD . (.Microsoft Corporation - WWAN Device Interface Module.) -- C:\Windows\System32\wwanprotdim.dll   [48640]
O44 - LFC:[MD5.FB10715E4099AF9FA389C71873245226] - 02/06/2013 - 08:40:39 ---A- . (.Microsoft Corporation - Panneau de configuration Date/Heure.) -- C:\Windows\SysNative\timedate.cpl   [515584]
O44 - LFC:[MD5.FB10715E4099AF9FA389C71873245226] - 02/06/2013 - 08:40:39 ---A- . (.Microsoft Corporation - Panneau de configuration Date/Heure.) -- C:\Windows\System32\timedate.cpl   [515584]
O44 - LFC:[MD5.760E38053BF56E501D562B70AD796B88] - 02/06/2013 - 08:40:37 RSHAD . (.Microsoft Corporation - Pilote NDIS 6.20.) -- C:\Windows\System32\Drivers\ndis.sys   [950128]
O44 - LFC:[MD5.0E01641D96889BDEB22DE12D30575B08] - 02/06/2013 - 08:40:37 RSHAD . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\Drivers\RNDISMP.sys   [41472]
O44 - LFC:[MD5.59B3BE37BAFBD40715F45D580783738B] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Classes d’assistance pour les diagnostics p.) -- C:\Windows\SysNative\netcorehc.dll   [246272]
O44 - LFC:[MD5.59B3BE37BAFBD40715F45D580783738B] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Classes d’assistance pour les diagnostics p.) -- C:\Windows\System32\netcorehc.dll   [246272]
O44 - LFC:[MD5.8AD77806D336673F270DB31645267293] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) -- C:\Windows\SysNative\nlasvc.dll   [303104]
O44 - LFC:[MD5.D4FAC263861BAE06971C7F7D0A8EBF15] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Indicateur d’état de la connectivité réseau.) -- C:\Windows\SysNative\ncsi.dll   [216576]
O44 - LFC:[MD5.D4FAC263861BAE06971C7F7D0A8EBF15] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Indicateur d’état de la connectivité réseau.) -- C:\Windows\System32\ncsi.dll   [216576]
O44 - LFC:[MD5.DC4382E93770B3BF0774DB7FE46C8239] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Manipulateur d’événements réseau.) -- C:\Windows\SysNative\netevent.dll   [18944]
O44 - LFC:[MD5.DC4382E93770B3BF0774DB7FE46C8239] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Manipulateur d’événements réseau.) -- C:\Windows\System32\netevent.dll   [18944]
O44 - LFC:[MD5.46BB91A169B9B31FF44EB04C48EC1D41] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\SysNative\nlaapi.dll   [70656]
O44 - LFC:[MD5.46BB91A169B9B31FF44EB04C48EC1D41] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32\nlaapi.dll   [70656]
O44 - LFC:[MD5.08C2957BB30058E663720C5606885653] - 02/06/2013 - 08:40:33 ---A- . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\SysNative\iphlpsvc.dll   [569344]
O44 - LFC:[MD5.8AD77806D336673F270DB31645267293] - 02/06/2013 - 08:40:33 RSHAD . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) -- C:\Windows\System32\nlasvc.dll   [303104]
O44 - LFC:[MD5.08C2957BB30058E663720C5606885653] - 02/06/2013 - 08:40:33 RSHAD . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O44 - LFC:[MD5.1B16D0BD9841794A6E0CDE0CEF744ABC] - 02/06/2013 - 08:40:33 RSHAD . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\Drivers\tcpipreg.sys   [45568]
O44 - LFC:[MD5.9BBD8B5855BC6578957F82341F9CDE5A] - 02/06/2013 - 08:40:31 RSHAD . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\Drivers\Diskdump.sys   [27520]
O44 - LFC:[MD5.53E83F1F6CF9D62F32801CF66D8352A8] - 02/06/2013 - 08:40:30 ---A- . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\SysNative\profsvc.dll   [209920]
O44 - LFC:[MD5.53E83F1F6CF9D62F32801CF66D8352A8] - 02/06/2013 - 08:40:30 RSHAD . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O44 - LFC:[MD5.A236B1646E96AB06BE0F8D592B6D9A0D] - 02/06/2013 - 08:40:28 ---A- . (.Microsoft Corporation - OXPS to XPS Converter.) -- C:\Windows\SysNative\OxpsConverter.exe   [245760]
O44 - LFC:[MD5.A236B1646E96AB06BE0F8D592B6D9A0D] - 02/06/2013 - 08:40:28 RSHAD . (.Microsoft Corporation - OXPS to XPS Converter.) -- C:\Windows\System32\OxpsConverter.exe   [245760]
O44 - LFC:[MD5.DBF99FD9CAF75CA66D042BD8D050FF71] - 02/06/2013 - 08:40:26 ---A- . (.Microsoft Corporation - Uniscribe Unicode script processor.) -- C:\Windows\SysNative\usp10.dll   [800768]
O44 - LFC:[MD5.DBF99FD9CAF75CA66D042BD8D050FF71] - 02/06/2013 - 08:40:26 ---A- . (.Microsoft Corporation - Uniscribe Unicode script processor.) -- C:\Windows\System32\usp10.dll   [800768]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\SysNative\grb.rs   [21504]
O44 - LFC:[MD5.4489D5D2CB4BA0799F3FB4625DE181CF] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement GRB.) -- C:\Windows\System32\grb.rs   [21504]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\SysNative\pegi-pt.rs   [20480]
O44 - LFC:[MD5.6D540AF9B183FC97DC4CC54369561548] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI au Portugal.) -- C:\Windows\System32\pegi-pt.rs   [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\SysNative\pegi.rs   [20480]
O44 - LFC:[MD5.661AE5EAC62C4598DD01795CEB915BAE] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI.) -- C:\Windows\System32\pegi.rs   [20480]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\SysNative\pegibbfc.rs   [44544]
O44 - LFC:[MD5.C4B0793E4B97AA36A2A8C81A7AA1979A] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement PEGI/BBFC.) -- C:\Windows\System32\pegibbfc.rs   [44544]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\SysNative\usk.rs   [30720]
O44 - LFC:[MD5.5C48A43FC30FC61ECB1335DC646686BC] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classement USK.) -- C:\Windows\System32\usk.rs   [30720]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\SysNative\cob-au.rs   [40960]
O44 - LFC:[MD5.A2E0F1E01A0983E9C94565BBEC862BF7] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification COB-AU.) -- C:\Windows\System32\cob-au.rs   [40960]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\SysNative\djctq.rs   [15360]
O44 - LFC:[MD5.65A8302C7551CFE45FAA2BC085C9E7E2] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification DJCTQ.) -- C:\Windows\System32\djctq.rs   [15360]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\SysNative\fpb.rs   [46592]
O44 - LFC:[MD5.54B11BB2AFBC3D5EBA9C96F0C1820B9B] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification FPB.) -- C:\Windows\System32\fpb.rs   [46592]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\SysNative\oflc-nz.rs   [45568]
O44 - LFC:[MD5.997938D423CE830161CB6059434E3C9F] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de classification OFLC-NZ.) -- C:\Windows\System32\oflc-nz.rs   [45568]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\SysNative\csrr.rs   [43520]
O44 - LFC:[MD5.EBB73E4E8CA01089CF74ECE506EB7607] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft - Système de notation CSRR.) -- C:\Windows\System32\csrr.rs   [43520]
O44 - LFC:[MD5.027675ED9B34EE1B91505C3B8752649F] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft Corporation - Bibliothèque des paramètres WPC.) -- C:\Windows\SysNative\Wpc.dll   [441856]
O44 - LFC:[MD5.027675ED9B34EE1B91505C3B8752649F] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft Corporation - Bibliothèque des paramètres WPC.) -- C:\Windows\System32\Wpc.dll   [441856]
O44 - LFC:[MD5.2BCBA6052374959A30BD7948444DBB79] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft Corporation - Explorateur des jeux.) -- C:\Windows\SysNative\gameux.dll   [2746368]
O44 - LFC:[MD5.2BCBA6052374959A30BD7948444DBB79] - 02/06/2013 - 08:40:20 ---A- . (.Microsoft Corporation - Explorateur des jeux.) -- C:\Windows\System32\gameux.dll   [2746368]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\SysNative\cero.rs   [55296]
O44 - LFC:[MD5.D0C01412FBF59C1C25630C49F0C1B803] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement CERO.) -- C:\Windows\System32\cero.rs   [55296]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\SysNative\esrb.rs   [51712]
O44 - LFC:[MD5.51D25C805A01A2C4F930F9720CF51FFE] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\Windows\System32\esrb.rs   [51712]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\SysNative\oflc.rs   [23552]
O44 - LFC:[MD5.4773EB5962548068547214A620E9ACC3] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement OFLC.) -- C:\Windows\System32\oflc.rs   [23552]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\SysNative\pegi-fi.rs   [20480]
O44 - LFC:[MD5.9BB05674E013C35F4DAED51F5015355D] - 02/06/2013 - 08:40:19 ---A- . (.Microsoft - Système de classement PEGI en Finlande.) -- C:\Windows\System32\pegi-fi.rs   [20480]
O44 - LFC:[MD5.5EB6E9C8BE1ACC5830780E0F9A846255] - 02/06/2013 - 08:40:07 ---A- . (.Microsoft Corporation - Windows Installer.) -- C:\Windows\SysNative\msi.dll   [3216384]
O44 - LFC:[MD5.5EB6E9C8BE1ACC5830780E0F9A846255] - 02/06/2013 - 08:40:07 ---A- . (.Microsoft Corporation - Windows Installer.) -- C:\Windows\System32\msi.dll   [3216384]
O44 - LFC:[MD5.1F56F209585F350A5666E3CC7931FD67] - 02/06/2013 - 08:40:01 ---A- . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\SysNative\KernelBase.dll   [424448]
O44 - LFC:[MD5.1F56F209585F350A5666E3CC7931FD67] - 02/06/2013 - 08:40:01 ---A- . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\System32\KernelBase.dll   [424448]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 02/06/2013 - 08:40:00 ---A- . (...) -- C:\Windows\SysNative\locale.nls   [420064]
O44 - LFC:[MD5.1153AC6E133AA849853DFD407B086B80] - 02/06/2013 - 08:40:00 ---A- . (...) -- C:\Windows\System32\locale.nls   [420064]
O44 - LFC:[MD5.65C113214F7B05820F6D8A65B1485196] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\SysNative\kernel32.dll   [1161216]
O44 - LFC:[MD5.65C113214F7B05820F6D8A65B1485196] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\System32\kernel32.dll   [1161216]
O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - Hôte de la fenêtre de la console.) -- C:\Windows\SysNative\conhost.exe   [338432]
O44 - LFC:[MD5.259EB5F7D95A29842B476C5B3EB6E186] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - Win32 Emulation on NT64.) -- C:\Windows\SysNative\wow64.dll   [243200]
O44 - LFC:[MD5.5674E21E82CFBEA36DDAD5DB285D6DBC] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - Wow64 Console and Win32 API Logging.) -- C:\Windows\SysNative\wow64win.dll   [362496]
O44 - LFC:[MD5.BA69FBB4BFC88BA6AA8EB5A285393A72] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - Émulation 16 bits sur NT64.) -- C:\Windows\SysNative\ntvdm64.dll   [16384]
O44 - LFC:[MD5.BA69FBB4BFC88BA6AA8EB5A285393A72] - 02/06/2013 - 08:40:00 ---A- . (.Microsoft Corporation - Émulation 16 bits sur NT64.) -- C:\Windows\System32\ntvdm64.dll   [16384]
O44 - LFC:[MD5.17F5FEA9A69F0517655BB3FEE7D41A3D] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll   [5120]
O44 - LFC:[MD5.078BB0471CF8DFBFC4C2B2ED81CE0AFE] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll   [3072]
O44 - LFC:[MD5.E7A63E3B5BC8967291C3B91B5DA6FD5D] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll   [3072]
O44 - LFC:[MD5.719902F335E2165D08B3698D9EB5E355] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll   [3584]
O44 - LFC:[MD5.2EBEAB925FC6CE494E5E0F3378E4B1AC] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll   [4096]
O44 - LFC:[MD5.F2BCDE94AE8588D3F464E5D1D375B786] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll   [3584]
O44 - LFC:[MD5.293DCB3CC4662610166F26A5175B43C7] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll   [3584]
O44 - LFC:[MD5.5B5290C57E2EA6C14C9779F0A0BEBCDD] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll   [3584]
O44 - LFC:[MD5.663D508DAE5E0C12B9B9440C71E27BE2] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll   [4608]
O44 - LFC:[MD5.33DFC092CC058E89D2D259159D938E7C] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll   [3072]
O44 - LFC:[MD5.2DC9B836D0799BD9A6AA1FD9BE988C10] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll   [3584]
O44 - LFC:[MD5.85CA2D43A8AE1761E3DE0E9A657314B4] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll   [3072]
O44 - LFC:[MD5.E3BE74E14F56EE93688B106E099B1515] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll   [4096]
O44 - LFC:[MD5.D4F66FAE16F9C041ABC3E72A962E93C1] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll   [4096]
O44 - LFC:[MD5.E82825F3FB23C6489DFCC329FE6C5CE1] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll   [4608]
O44 - LFC:[MD5.B9289D66E4022137A60D940EF00F884C] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll   [3072]
O44 - LFC:[MD5.FCBCF5BC3A92E2851434A628D3C00348] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll   [3072]
O44 - LFC:[MD5.0196BAEED4879B4B09F7557C1F31CB28] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll   [6144]
O44 - LFC:[MD5.17F5FEA9A69F0517655BB3FEE7D41A3D] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll   [5120]
O44 - LFC:[MD5.078BB0471CF8DFBFC4C2B2ED81CE0AFE] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll   [3072]
O44 - LFC:[MD5.E7A63E3B5BC8967291C3B91B5DA6FD5D] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll   [3072]
O44 - LFC:[MD5.719902F335E2165D08B3698D9EB5E355] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll   [3584]
O44 - LFC:[MD5.2EBEAB925FC6CE494E5E0F3378E4B1AC] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll   [4096]
O44 - LFC:[MD5.F2BCDE94AE8588D3F464E5D1D375B786] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll   [3584]
O44 - LFC:[MD5.293DCB3CC4662610166F26A5175B43C7] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll   [3584]
O44 - LFC:[MD5.5B5290C57E2EA6C14C9779F0A0BEBCDD] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll   [3584]
O44 - LFC:[MD5.663D508DAE5E0C12B9B9440C71E27BE2] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll   [4608]
O44 - LFC:[MD5.33DFC092CC058E89D2D259159D938E7C] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll   [3072]
O44 - LFC:[MD5.2DC9B836D0799BD9A6AA1FD9BE988C10] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll   [3584]
O44 - LFC:[MD5.85CA2D43A8AE1761E3DE0E9A657314B4] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll   [3072]
O44 - LFC:[MD5.E3BE74E14F56EE93688B106E099B1515] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll   [4096]
O44 - LFC:[MD5.D4F66FAE16F9C041ABC3E72A962E93C1] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll   [4096]
O44 - LFC:[MD5.E82825F3FB23C6489DFCC329FE6C5CE1] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll   [4608]
O44 - LFC:[MD5.B9289D66E4022137A60D940EF00F884C] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll   [3072]
O44 - LFC:[MD5.FCBCF5BC3A92E2851434A628D3C00348] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll   [3072]
O44 - LFC:[MD5.0196BAEED4879B4B09F7557C1F31CB28] - 02/06/2013 - 08:40:00 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll   [6144]
O44 - LFC:[MD5.1BCDB508143B517F21BBDAC10F5777BF] - 02/06/2013 - 08:40:00 RSHAD . (.Microsoft Corporation - Hôte de la fenêtre de la console.) -- C:\Windows\System32\conhost.exe   [338432]
O44 - LFC:[MD5.259EB5F7D95A29842B476C5B3EB6E186] - 02/06/2013 - 08:40:00 RSHAD . (.Microsoft Corporation - Win32 Emulation on NT64.) -- C:\Windows\System32\wow64.dll   [243200]
O44 - LFC:[MD5.5674E21E82CFBEA36DDAD5DB285D6DBC] - 02/06/2013 - 08:40:00 RSHAD . (.Microsoft Corporation - Wow64 Console and Win32 API Logging.) -- C:\Windows\System32\wow64win.dll   [362496]
O44 - LFC:[MD5.3EE3AA76D8AB6D5644C4C8F34471CEB3] - 02/06/2013 - 08:39:59 ---A- . (.Microsoft Corporation - AMD64 Wow64 CPU.) -- C:\Windows\SysNative\wow64cpu.dll   [13312]
O44 - LFC:[MD5.B990A3815075B0939D808D696479F6A6] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll   [3072]
O44 - LFC:[MD5.C19D34EB0FEC0CE0A0E066485F2ECA8A] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll   [3072]
O44 - LFC:[MD5.2B4E40E430C949A309F8FDE8A236791F] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll   [3072]
O44 - LFC:[MD5.657B9AE87F35B1FCE160F7DF17253CC4] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll   [3072]
O44 - LFC:[MD5.22C1ACA768F01951070F022C6D027162] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll   [3072]
O44 - LFC:[MD5.EDFBC649FC6D1E05A839F61ED5395D65] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll   [3072]
O44 - LFC:[MD5.BFB4C3C823AA44F87B5FCB95C60CE2B6] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll   [3072]
O44 - LFC:[MD5.AA1A831C8D8F179A7C7AF0A157EFD4B2] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll   [3584]
O44 - LFC:[MD5.3BB4066B59F83682B9573C1DC2CA7104] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll   [4096]
O44 - LFC:[MD5.02444B2D06BD920BBA9BB1C044AA742E] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll   [3584]
O44 - LFC:[MD5.B990A3815075B0939D808D696479F6A6] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll   [3072]
O44 - LFC:[MD5.C19D34EB0FEC0CE0A0E066485F2ECA8A] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll   [3072]
O44 - LFC:[MD5.2B4E40E430C949A309F8FDE8A236791F] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll   [3072]
O44 - LFC:[MD5.657B9AE87F35B1FCE160F7DF17253CC4] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll   [3072]
O44 - LFC:[MD5.22C1ACA768F01951070F022C6D027162] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll   [3072]
O44 - LFC:[MD5.EDFBC649FC6D1E05A839F61ED5395D65] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll   [3072]
O44 - LFC:[MD5.BFB4C3C823AA44F87B5FCB95C60CE2B6] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll   [3072]
O44 - LFC:[MD5.AA1A831C8D8F179A7C7AF0A157EFD4B2] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll   [3584]
O44 - LFC:[MD5.3BB4066B59F83682B9573C1DC2CA7104] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll   [4096]
O44 - LFC:[MD5.02444B2D06BD920BBA9BB1C044AA742E] - 02/06/2013 - 08:39:59 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll   [3584]
O44 - LFC:[MD5.3EE3AA76D8AB6D5644C4C8F34471CEB3] - 02/06/2013 - 08:39:59 RSHAD . (.Microsoft Corporation - AMD64 Wow64 CPU.) -- C:\Windows\System32\wow64cpu.dll   [13312]
O44 - LFC:[MD5.287C6C9410B111B68B52CA298F7B8C24] - 02/06/2013 - 08:39:41 RSHAD . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\Windows\System32\Drivers\usbhub.sys   [343040]
O44 - LFC:[MD5.C025055FE7B87701EB042095DF1A2D7B] - 02/06/2013 - 08:39:41 RSHAD . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\Drivers\usbehci.sys   [52736]
O44 - LFC:[MD5.AE259C75F9A0B057B6BF9E9695632B09] - 02/06/2013 - 08:39:41 RSHAD . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\Drivers\usbport.sys   [325120]
O44 - LFC:[MD5.6F1A3157A1C89435352CEB543CDB359C] - 02/06/2013 - 08:39:41 RSHAD . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\Drivers\usbccgp.sys   [98816]
O44 - LFC:[MD5.CCA2AB1752A61F29C3C941CD79D78CEA] - 02/06/2013 - 08:39:41 RSHAD . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\Drivers\usbd.sys   [7936]
O44 - LFC:[MD5.522B0466ED967A0762E9AF5B37D8F40A] - 02/06/2013 - 08:39:34 ---A- . (.Microsoft Corporation - Moteur de stockage extensible pour Microsof.) -- C:\Windows\SysNative\esent.dll   [2565632]
O44 - LFC:[MD5.522B0466ED967A0762E9AF5B37D8F40A] - 02/06/2013 - 08:39:34 ---A- . (.Microsoft Corporation - Moteur de stockage extensible pour Microsof.) -- C:\Windows\System32\esent.dll   [2565632]
O44 - LFC:[MD5.6804A0B4AAF1F65277FB8A58DE40EABC] - 02/06/2013 - 08:39:34 ---A- . (.Microsoft Corporation - fsutil.exe.) -- C:\Windows\SysNative\fsutil.exe   [96768]
O44 - LFC:[MD5.6804A0B4AAF1F65277FB8A58DE40EABC] - 02/06/2013 - 08:39:34 ---A- . (.Microsoft Corporation - fsutil.exe.) -- C:\Windows\System32\fsutil.exe   [96768]
O44 - LFC:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 02/06/2013 - 08:39:33 RSHAD . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys   [107904]
O44 - LFC:[MD5.540DAF1CEA6094886D72126FD7C33048] - 02/06/2013 - 08:39:33 RSHAD . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys   [27008]
O44 - LFC:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 02/06/2013 - 08:39:33 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys   [410496]
O44 - LFC:[MD5.19CB37AC38B802BE9C441D094521A29A] - 02/06/2013 - 08:39:33 RSHAD . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\Drivers\storport.sys   [189824]
O44 - LFC:[MD5.0A92CB65770442ED0DC44834632F66AD] - 02/06/2013 - 08:39:33 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys   [148352]
O44 - LFC:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 02/06/2013 - 08:39:33 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys   [166272]
O44 - LFC:[MD5.FED648B01349A3C8395A5169DB5FB7D6] - 02/06/2013 - 08:39:32 RSHAD . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\Windows\System32\Drivers\USBSTOR.SYS   [91648]
O44 - LFC:[MD5.5FAC5F264D61D99EE8961480818B9DEF] - 02/06/2013 - 08:39:28 ---A- . (.Microsoft Corporation - Preview Handler Surrogate Host.) -- C:\Windows\SysNative\prevhost.exe   [31232]
O44 - LFC:[MD5.5FAC5F264D61D99EE8961480818B9DEF] - 02/06/2013 - 08:39:28 ---A- . (.Microsoft Corporation - Preview Handler Surrogate Host.) -- C:\Windows\System32\prevhost.exe   [31232]
O44 - LFC:[MD5.D5164131D596A070FF9C82BC4A488F1F] - 02/06/2013 - 08:39:22 ---A- . (.Microsoft Corporation - Bibliothèque principale de Restauration du.) -- C:\Windows\SysNative\srcore.dll   [503808]
O44 - LFC:[MD5.D5164131D596A070FF9C82BC4A488F1F] - 02/06/2013 - 08:39:22 RSHAD . (.Microsoft Corporation - Bibliothèque principale de Restauration du.) -- C:\Windows\System32\srcore.dll   [503808]
O44 - LFC:[MD5.8F6322049018354F45F05A2FD2D4E5E0] - 02/06/2013 - 08:39:20 RSHAD . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\Drivers\fvevol.sys   [223752]
O44 - LFC:[MD5.85DAA09A98C9286D4EA2BA8D0E644377] - 02/06/2013 - 08:39:19 ---A- . (.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\SysNative\spoolsv.exe   [559104]
O44 - LFC:[MD5.127AA81343A7C6F665C22CB1293B0A90] - 02/06/2013 - 08:39:19 ---A- . (.Microsoft Corporation - Print driver host for 32bit applications.) -- C:\Windows\splwow64.exe   [67072]
O44 - LFC:[MD5.85DAA09A98C9286D4EA2BA8D0E644377] - 02/06/2013 - 08:39:19 RSHAD . (.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\System32\spoolsv.exe   [559104]
O44 - LFC:[MD5.EFD3FD9742ACD4795DEEC4F2A5C826D8] - 31/05/2013 - 21:44:44 ----- . (.Microsoft Corporation - Microsoft Malware Protection Signature Upda.) -- C:\Windows\SysNative\MpSigStub.exe   [278800]
O44 - LFC:[MD5.EFD3FD9742ACD4795DEEC4F2A5C826D8] - 31/05/2013 - 21:44:44 RSHAD . (.Microsoft Corporation - Microsoft Malware Protection Signature Upda.) -- C:\Windows\System32\MpSigStub.exe   [278800]
O44 - LFC:[MD5.66047A9C4A04C74B5803FA3DBC00E973] - 31/05/2013 - 21:39:45 RSHAD . (...) -- C:\Windows\System32\Drivers\klick.dat   [107384]
O44 - LFC:[MD5.D9444B09B7469AF32430ED0C1E578131] - 31/05/2013 - 21:39:45 RSHAD . (...) -- C:\Windows\System32\Drivers\klin.dat   [153053]
O44 - LFC:[MD5.8490798365236B6C8E54DEDD27A42D07] - 31/05/2013 - 21:39:44 RSHAD . (.Kaspersky Lab - Klif Mini-Filter [fre_wlh_amd64].) -- C:\Windows\System32\Drivers\klif.sys   [637272]
O44 - LFC:[MD5.85D6E8F735865B502D65D1D91A79E3F3] - 01/06/2013 - 21:35:44 ---A- . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\SysNative\browserchoice.exe   [294912]
O44 - LFC:[MD5.85D6E8F735865B502D65D1D91A79E3F3] - 01/06/2013 - 21:35:44 RSHAD . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\System32\browserchoice.exe   [294912]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 01/06/2013 - 21:24:28 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe   [75016696]
O44 - LFC:[MD5.44FFF8BA70A459BDEEDDC881D36498E2] - 01/06/2013 - 21:24:28 RSHAD . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe   [75016696]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 01/06/2013 - 21:20:28 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll   [46080]
O44 - LFC:[MD5.2ED72B3F76C9368ABC01464DA64DB7AE] - 01/06/2013 - 21:20:28 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll   [46080]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 01/06/2013 - 21:20:28 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll   [367616]
O44 - LFC:[MD5.CB2ABB2DA1E9C977302A78D86D4AE3B0] - 01/06/2013 - 21:20:28 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll   [367616]
O44 - LFC:[MD5.0333ED5E203B6DBE909AC06EA52757D0] - 01/06/2013 - 21:20:28 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\SysNative\fontsub.dll   [100864]
O44 - LFC:[MD5.0333ED5E203B6DBE909AC06EA52757D0] - 01/06/2013 - 21:20:28 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\System32\fontsub.dll   [100864]
O44 - LFC:[MD5.C00DB14550E4BD49737F311C644E45FF] - 01/06/2013 - 21:19:00 ---A- . (.Microsoft Corporation - WMI DC and DP functionality.) -- C:\Windows\SysNative\wmi.dll   [5120]
O44 - LFC:[MD5.C00DB14550E4BD49737F311C644E45FF] - 01/06/2013 - 21:19:00 ---A- . (.Microsoft Corporation - WMI DC and DP functionality.) -- C:\Windows\System32\wmi.dll   [5120]
O44 - LFC:[MD5.A1BE6A720D02E37F72E9CD89AE9CB3CF] - 01/06/2013 - 21:19:00 ---A- . (.Microsoft Corporation - Windows NT Image Helper.) -- C:\Windows\SysNative\imagehlp.dll   [81408]
O44 - LFC:[MD5.A1BE6A720D02E37F72E9CD89AE9CB3CF] - 01/06/2013 - 21:19:00 ---A- . (.Microsoft Corporation - Windows NT Image Helper.) -- C:\Windows\System32\imagehlp.dll   [81408]
O44 - LFC:[MD5.6BD9295CC032DD3077C671FCCF579A7B] - 01/06/2013 - 21:19:00 RSHAD . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\Drivers\fs_rec.sys   [23408]
O44 - LFC:[MD5.F4C640E85DB6450CB221E5224AA2AB51] - 01/06/2013 - 21:08:58 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\SysNative\mstscax.dll   [3717632]
O44 - LFC:[MD5.F4C640E85DB6450CB221E5224AA2AB51] - 01/06/2013 - 21:08:58 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\System32\mstscax.dll   [3717632]
O44 - LFC:[MD5.9F5C2F0CFEF95B4653E21443CDC0D587] - 01/06/2013 - 21:08:57 ---A- . (.Microsoft Corporation - Client avec accès à distance.) -- C:\Windows\SysNative\aaclient.dll   [158720]
O44 - LFC:[MD5.9F5C2F0CFEF95B4653E21443CDC0D587] - 01/06/2013 - 21:08:57 ---A- . (.Microsoft Corporation - Client avec accès à distance.) -- C:\Windows\System32\aaclient.dll   [158720]
O44 - LFC:[MD5.CE4157E4B1E5041D252EF38EB61E9F0C] - 01/06/2013 - 21:08:57 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\SysNative\tsgqec.dll   [44032]
O44 - LFC:[MD5.CE4157E4B1E5041D252EF38EB61E9F0C] - 01/06/2013 - 21:08:57 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\System32\tsgqec.dll   [44032]
O44 - LFC:[MD5.4474A8AEABD056DF636FD4FBEF49353B] - 31/05/2013 - 21:08:25 ---A- . (.Microsoft Corporation - RDP Core DLL.) -- C:\Windows\SysNative\rdpcore.dll   [1031680]
O44 - LFC:[MD5.4474A8AEABD056DF636FD4FBEF49353B] - 31/05/2013 - 21:08:25 ---A- . (.Microsoft Corporation - RDP Core DLL.) -- C:\Windows\System32\rdpcore.dll   [1031680]
O44 - LFC:[MD5.51C5ECEB1CDEE2468A1748BE550CFBC8] - 31/05/2013 - 21:08:25 RSHAD . (.Microsoft Corporation - TCP Transport Driver.) -- C:\Windows\System32\Drivers\tdtcp.sys   [23552]
O44 - LFC:[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - 01/06/2013 - 21:08:15 RSHAD . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\Drivers\ntfs.sys   [1656680]
O44 - LFC:[MD5.27E461F0BE5BFF5FC737328F749538C3] - 01/06/2013 - 21:08:05 RSHAD . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\Drivers\srvnet.sys   [168448]
O44 - LFC:[MD5.441FBA48BFF01FDB9D5969EBC1838F0B] - 01/06/2013 - 21:08:05 RSHAD . (.Microsoft Corporation - Server driver.) -- C:\Windows\System32\Drivers\srv.sys   [467456]
O44 - LFC:[MD5.B4ADEBBF5E3677CCE9651E0F01F7CC28] - 01/06/2013 - 21:08:05 RSHAD . (.Microsoft Corporation - Smb 2.0 Server driver.) -- C:\Windows\System32\Drivers\srv2.sys   [410112]
O44 - LFC:[MD5.371948BC5911ABA06168FAC91ED25F06] - 01/06/2013 - 21:07:58 ---A- . (.Microsoft Corporation - MSXML 3.0 SP11.) -- C:\Windows\SysNative\msxml3.dll   [1882624]
O44 - LFC:[MD5.371948BC5911ABA06168FAC91ED25F06] - 01/06/2013 - 21:07:58 ---A- . (.Microsoft Corporation - MSXML 3.0 SP11.) -- C:\Windows\System32\msxml3.dll   [1882624]
O44 - LFC:[MD5.99B91C5D2FCEF218CAD3600ECB62A799] - 01/06/2013 - 21:07:58 ---A- . (.Microsoft Corporation - MSXML 6.0 SP3.) -- C:\Windows\SysNative\msxml6.dll   [2002432]
O44 - LFC:[MD5.99B91C5D2FCEF218CAD3600ECB62A799] - 01/06/2013 - 21:07:58 ---A- . (.Microsoft Corporation - MSXML 6.0 SP3.) -- C:\Windows\System32\msxml6.dll   [2002432]
O44 - LFC:[MD5.D0EC440FA8D306E4CEFC8CC4DEFD2AC4] - 01/06/2013 - 21:07:57 ---A- . (.Microsoft Corporation - XML Resources.) -- C:\Windows\SysNative\msxml3r.dll   [2048]
O44 - LFC:[MD5.D0EC440FA8D306E4CEFC8CC4DEFD2AC4] - 01/06/2013 - 21:07:57 ---A- . (.Microsoft Corporation - XML Resources.) -- C:\Windows\System32\msxml3r.dll   [2048]
O44 - LFC:[MD5.5A83C43DE44546370CAC4CD05B304F09] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation -  PTFilter & Encypter/Decrypter Tagger Filte.) -- C:\Windows\SysNative\CPFilters.dll   [961024]
O44 - LFC:[MD5.5A83C43DE44546370CAC4CD05B304F09] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation -  PTFilter & Encypter/Decrypter Tagger Filte.) -- C:\Windows\System32\CPFilters.dll   [961024]
O44 - LFC:[MD5.1E452D8F44D82BFC256E02D0D6FD9608] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation - DirectShow MPEG-2 Splitter..) -- C:\Windows\SysNative\mpg2splt.ax   [259072]
O44 - LFC:[MD5.1E452D8F44D82BFC256E02D0D6FD9608] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation - DirectShow MPEG-2 Splitter..) -- C:\Windows\System32\mpg2splt.ax   [259072]
O44 - LFC:[MD5.A5AE40808B72A25379A5499AD9977743] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation - DirectShow Stream Buffer Filter..) -- C:\Windows\SysNative\sbe.dll   [1118720]
O44 - LFC:[MD5.A5AE40808B72A25379A5499AD9977743] - 01/06/2013 - 21:07:52 ---A- . (.Microsoft Corporation - DirectShow Stream Buffer Filter..) -- C:\Windows\System32\sbe.dll   [1118720]
O44 - LFC:[MD5.1BFC94665BCA35F9001ADC7BFB167C63] - 01/06/2013 - 21:07:48 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\SysNative\shell32.dll   [14172672]
O44 - LFC:[MD5.1BFC94665BCA35F9001ADC7BFB167C63] - 01/06/2013 - 21:07:48 ---A- . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll   [14172672]
O44 - LFC:[MD5.3EF480BFED1B5947A32585E30A58D4ED] - 01/06/2013 - 21:07:48 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\SysNative\authui.dll   [1930752]
O44 - LFC:[MD5.3EF480BFED1B5947A32585E30A58D4ED] - 01/06/2013 - 21:07:48 ---A- . (.Microsoft Corporation - Interface utilisateur d’authentification Wi.) -- C:\Windows\System32\authui.dll   [1930752]
O44 - LFC:[MD5.22A0AE97360C1B146FDD9AA55AC0E989] - 01/06/2013 - 21:07:47 ---A- . (.Microsoft Corporation - Bibliothèque d’objets et de contrôles de do.) -- C:\Windows\SysNative\shdocvw.dll   [197120]
O44 - LFC:[MD5.22A0AE97360C1B146FDD9AA55AC0E989] - 01/06/2013 - 21:07:47 ---A- . (.Microsoft Corporation - Bibliothèque d’objets et de contrôles de do.) -- C:\Windows\System32\shdocvw.dll   [197120]
O44 - LFC:[MD5.E948D1D42DC68923ABD75EEB5BCCD1D3] - 01/06/2013 - 21:07:47 ---A- . (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\SysNative\consent.exe   [111448]
O44 - LFC:[MD5.9D2A2369AB4B08A4905FE72DB104498F] - 01/06/2013 - 21:07:47 ---A- . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\SysNative\appinfo.dll   [70144]
O44 - LFC:[MD5.E948D1D42DC68923ABD75EEB5BCCD1D3] - 01/06/2013 - 21:07:47 RSHAD . (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\System32\consent.exe   [111448]
O44 - LFC:[MD5.9D2A2369AB4B08A4905FE72DB104498F] - 01/06/2013 - 21:07:47 RSHAD . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O44 - LFC:[MD5.41C67E4205C606A103DEC8651D0B6FE6] - 01/06/2013 - 21:07:45 RSHAD . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\Drivers\FWPKCLNT.SYS   [288088]
O44 - LFC:[MD5.7942B7AC3FF598F8A1736D51ADAF04E8] - 01/06/2013 - 21:07:45 RSHAD . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\Drivers\netio.sys   [376688]
O44 - LFC:[MD5.B62A953F2BF3922C8764A29C34A22899] - 01/06/2013 - 21:07:45 RSHAD . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys   [1913192]
O44 - LFC:[MD5.9423E9D355C8D303E76B8CFBD8A5C30C] - 01/06/2013 - 21:07:43 RSHAD . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\Drivers\mrxsmb20.sys   [128000]
O44 - LFC:[MD5.D711B3C1D5F42C0C2415687BE09FC163] - 01/06/2013 - 21:07:43 RSHAD . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\Drivers\mrxsmb10.sys   [288768]
O44 - LFC:[MD5.A5D9106A73DC88564C825D317CAC68AC] - 01/06/2013 - 21:07:43 RSHAD . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\Drivers\mrxsmb.sys   [158208]
O44 - LFC:[MD5.44A8B9185030EA57F7999383643ADFFB] - 01/06/2013 - 21:07:42 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\SysNative\quartz.dll   [1572864]
O44 - LFC:[MD5.44A8B9185030EA57F7999383643ADFFB] - 01/06/2013 - 21:07:42 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\System32\quartz.dll   [1572864]
O44 - LFC:[MD5.19F9B524A525D202194247E96656CB88] - 01/06/2013 - 21:07:41 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\SysNative\mfc42u.dll   [1359872]
O44 - LFC:[MD5.19F9B524A525D202194247E96656CB88] - 01/06/2013 - 21:07:41 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42u.dll   [1359872]
O44 - LFC:[MD5.7E1CF52C347D8755E5CA5ED0E99B401E] - 01/06/2013 - 21:07:40 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\SysNative\mfc42.dll   [1395712]
O44 - LFC:[MD5.7E1CF52C347D8755E5CA5ED0E99B401E] - 01/06/2013 - 21:07:40 ---A- . (.Microsoft Corporation - Bibliothèque partagée MFCDLL - Version comm.) -- C:\Windows\System32\mfc42.dll   [1395712]
O44 - LFC:[MD5.F28D6538F76DC6ECFABF6176DBDD2664] - 01/06/2013 - 21:07:36 ---A- . (.Microsoft Corporation - Exécuteur de file d’attente d’opérations pr.) -- C:\Windows\SysNative\poqexec.exe   [142336]
O44 - LFC:[MD5.F28D6538F76DC6ECFABF6176DBDD2664] - 01/06/2013 - 21:07:36 ---A- . (.Microsoft Corporation - Exécuteur de file d’attente d’opérations pr.) -- C:\Windows\System32\poqexec.exe   [142336]
O44 - LFC:[MD5.AC3232ED772403D38D64C18CD5A66FBD] - 01/06/2013 - 21:07:34 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\SysNative\ntoskrnl.exe   [5550424]
O44 - LFC:[MD5.AC3232ED772403D38D64C18CD5A66FBD] - 01/06/2013 - 21:07:34 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe   [5550424]
O44 - LFC:[MD5.F0371DE302FFFF8F086661611BE60848] - 01/06/2013 - 21:07:32 ---A- . (.Microsoft Corporation - Gestionnaire de sessions Windows.) -- C:\Windows\SysNative\smss.exe   [112640]
O44 - LFC:[MD5.CEC1EDF4022DC4DCA40384DCEC672B0E] - 01/06/2013 - 21:07:32 ---A- . (.Microsoft Corporation - Processus d'exécution client-serveur.) -- C:\Windows\SysNative\csrsrv.dll   [43520]
O44 - LFC:[MD5.F0371DE302FFFF8F086661611BE60848] - 01/06/2013 - 21:07:32 RSHAD . (.Microsoft Corporation - Gestionnaire de sessions Windows.) -- C:\Windows\System32\smss.exe   [112640]
O44 - LFC:[MD5.CEC1EDF4022DC4DCA40384DCEC672B0E] - 01/06/2013 - 21:07:32 RSHAD . (.Microsoft Corporation - Processus d'exécution client-serveur.) -- C:\Windows\System32\csrsrv.dll   [43520]
O44 - LFC:[MD5.A11523523B31086DD760C0189C763359] - 01/06/2013 - 21:07:31 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys   [3153920]
O44 - LFC:[MD5.A11523523B31086DD760C0189C763359] - 01/06/2013 - 21:07:31 RSHAD . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys   [3153920]
O44 - LFC:[MD5.0C27239FEA4DB8A2AAC9E502186B7264] - 01/06/2013 - 21:07:30 ---A- . (.Microsoft Corporation - DLL serveur de Windows multi-utilisateurs.) -- C:\Windows\SysNative\winsrv.dll   [215040]
O44 - LFC:[MD5.0C27239FEA4DB8A2AAC9E502186B7264] - 01/06/2013 - 21:07:30 RSHAD . (.Microsoft Corporation - DLL serveur de Windows multi-utilisateurs.) -- C:\Windows\System32\winsrv.dll   [215040]
O44 - LFC:[MD5.603EBD34E216C5654A2D774EAC98D278] - 01/06/2013 - 21:07:27 ---A- . (.Microsoft Corporation - API des protocoles de transfert Web.) -- C:\Windows\SysNative\webio.dll   [395776]
O44 - LFC:[MD5.603EBD34E216C5654A2D774EAC98D278] - 01/06/2013 - 21:07:27 ---A- . (.Microsoft Corporation - API des protocoles de transfert Web.) -- C:\Windows\System32\webio.dll   [395776]
O44 - LFC:[MD5.97DC40842B54AD4E961DECC9345F16FC] - 01/06/2013 - 21:07:25 ---A- . (.Microsoft Corporation - ODBC Cursor Library.) -- C:\Windows\SysNative\odbccu32.dll   [106496]
O44 - LFC:[MD5.97DC40842B54AD4E961DECC9345F16FC] - 01/06/2013 - 21:07:25 ---A- . (.Microsoft Corporation - ODBC Cursor Library.) -- C:\Windows\System32\odbccu32.dll   [106496]
O44 - LFC:[MD5.F4F36FEABB4F86ACA6FFD8819D7642C5] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Cursor Library.) -- C:\Windows\SysNative\odbccr32.dll   [106496]
O44 - LFC:[MD5.F4F36FEABB4F86ACA6FFD8819D7642C5] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Cursor Library.) -- C:\Windows\System32\odbccr32.dll   [106496]
O44 - LFC:[MD5.935AE3DFF21465D600185305479A03F7] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Driver Manager Trace.) -- C:\Windows\SysNative\odbctrac.dll   [212992]
O44 - LFC:[MD5.935AE3DFF21465D600185305479A03F7] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Driver Manager Trace.) -- C:\Windows\System32\odbctrac.dll   [212992]
O44 - LFC:[MD5.D10E13E494C5B4437549BE6A4987125E] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Installer.) -- C:\Windows\SysNative\odbccp32.dll   [163840]
O44 - LFC:[MD5.D10E13E494C5B4437549BE6A4987125E] - 01/06/2013 - 21:07:24 ---A- . (.Microsoft Corporation - ODBC Installer.) -- C:\Windows\System32\odbccp32.dll   [163840]
O44 - LFC:[MD5.3D2D108E14AD21889A2621B94C80A3DD] - 01/06/2013 - 21:07:20 ---A- . (.Microsoft Corporation - Fichier DLL de ressources des fuseaux horai.) -- C:\Windows\SysNative\tzres.dll   [2048]
O44 - LFC:[MD5.3D2D108E14AD21889A2621B94C80A3DD] - 01/06/2013 - 21:07:20 ---A- . (.Microsoft Corporation - Fichier DLL de ressources des fuseaux horai.) -- C:\Windows\System32\tzres.dll   [2048]
O44 - LFC:[MD5.943F527DF79E6B400104341AA7023C75] - 01/06/2013 - 21:07:17 ---A- . (.Microsoft Corporation - Canonical Display Driver.) -- C:\Windows\SysNative\cdd.dll   [144384]
O44 - LFC:[MD5.943F527DF79E6B400104341AA7023C75] - 01/06/2013 - 21:07:17 RSHAD . (.Microsoft Corporation - Canonical Display Driver.) -- C:\Windows\System32\cdd.dll   [144384]
O44 - LFC:[MD5.AF2E16242AA723F68F461B6EAE2EAD3D] - 01/06/2013 - 21:07:17 RSHAD . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys   [983400]
O44 - LFC:[MD5.1F04CFB79DD5FB7694468CE3FB3DCC31] - 01/06/2013 - 21:07:17 RSHAD . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys   [265064]
O44 - LFC:[MD5.3A0CE5FE781708CD6ABD55313607EC8B] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - LSA SSPI RPC interface DLL.) -- C:\Windows\SysNative\sspisrv.dll   [29184]
O44 - LFC:[MD5.C118A82CD78818C29AB228366EBF81C3] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\SysNative\lsass.exe   [31232]
O44 - LFC:[MD5.0144D8D75A0B12938AEEE859E3310A46] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\Windows\SysNative\secur32.dll   [28160]
O44 - LFC:[MD5.B66BC8B20B7F33975865B1DF99783FD8] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\Windows\SysNative\sspicli.dll   [136192]
O44 - LFC:[MD5.0144D8D75A0B12938AEEE859E3310A46] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\Windows\System32\secur32.dll   [28160]
O44 - LFC:[MD5.B66BC8B20B7F33975865B1DF99783FD8] - 01/06/2013 - 21:07:16 ---A- . (.Microsoft Corporation - Security Support Provider Interface.) -- C:\Windows\System32\sspicli.dll   [136192]
O44 - LFC:[MD5.97A7070AEA4C058B6418519E869A63B4] - 01/06/2013 - 21:07:16 RSHAD . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecdd.sys   [95600]
O44 - LFC:[MD5.3A0CE5FE781708CD6ABD55313607EC8B] - 01/06/2013 - 21:07:16 RSHAD . (.Microsoft Corporation - LSA SSPI RPC interface DLL.) -- C:\Windows\System32\sspisrv.dll   [29184]
O44 - LFC:[MD5.C118A82CD78818C29AB228366EBF81C3] - 01/06/2013 - 21:07:16 RSHAD . (.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe   [31232]
O44 - LFC:[MD5.0353B239C28B0E9EBC7FA3D1F6181661] - 01/06/2013 - 21:07:14 ---A- . (.Microsoft Corporation - Fournisseur d’impression de rendu côté clie.) -- C:\Windows\SysNative\win32spl.dll   [750592]
O44 - LFC:[MD5.0353B239C28B0E9EBC7FA3D1F6181661] - 01/06/2013 - 21:07:14 ---A- . (.Microsoft Corporation - Fournisseur d’impression de rendu côté clie.) -- C:\Windows\System32\win32spl.dll   [750592]
O44 - LFC:[MD5.5F3307352216618221A17CFEF273EEE2] - 01/06/2013 - 21:07:12 ---A- . (.Microsoft Corporation - Bibliothèque de chiffrement Windows.) -- C:\Windows\SysNative\ncrypt.dll   [307200]
O44 - LFC:[MD5.5F3307352216618221A17CFEF273EEE2] - 01/06/2013 - 21:07:12 ---A- . (.Microsoft Corporation - Bibliothèque de chiffrement Windows.) -- C:\Windows\System32\ncrypt.dll   [307200]
O44 - LFC:[MD5.AA06902362B1422D7A7DA7061E07C624] - 01/06/2013 - 21:07:10 ---A- . (.Microsoft Corporation - Microsoft Trust Verification APIs.) -- C:\Windows\SysNative\wintrust.dll   [220160]
O44 - LFC:[MD5.AA06902362B1422D7A7DA7061E07C624] - 01/06/2013 - 21:07:10 ---A- . (.Microsoft Corporation - Microsoft Trust Verification APIs.) -- C:\Windows\System32\wintrust.dll   [220160]
O44 - LFC:[MD5.92B3172E8C14C1444682F510843A9988] - 01/06/2013 - 21:07:10 RSHAD . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\Drivers\usb8023.sys   [19968]
O44 - LFC:[MD5.050AF06F8B0463417E4AED9DA5816A65] - 01/06/2013 - 21:07:09 ---A- . (.Microsoft Corporation - Microsoft SI/PSI parser for MPEG2 based net.) -- C:\Windows\SysNative\psisdecd.dll   [613888]
O44 - LFC:[MD5.050AF06F8B0463417E4AED9DA5816A65] - 01/06/2013 - 21:07:09 ---A- . (.Microsoft Corporation - Microsoft SI/PSI parser for MPEG2 based net.) -- C:\Windows\System32\psisdecd.dll   [613888]
O44 - LFC:[MD5.78394F2B354BDC28C5C61837872DD132] - 01/06/2013 - 21:07:08 ---A- . (.Microsoft Corporation - Microsoft Transport Information Filter for.) -- C:\Windows\SysNative\psisrndr.ax   [108032]
O44 - LFC:[MD5.78394F2B354BDC28C5C61837872DD132] - 01/06/2013 - 21:07:08 ---A- . (.Microsoft Corporation - Microsoft Transport Information Filter for.) -- C:\Windows\System32\psisrndr.ax   [108032]
O44 - LFC:[MD5.492D07D79E7024CA310867B526D9636D] - 01/06/2013 - 21:07:07 ---A- . (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\SysNative\dnsapi.dll   [357888]
O44 - LFC:[MD5.492D07D79E7024CA310867B526D9636D] - 01/06/2013 - 21:07:07 ---A- . (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll   [357888]
O44 - LFC:[MD5.C7AC9A4D827774B19221D5FE068BF190] - 01/06/2013 - 21:07:07 ---A- . (.Microsoft Corporation - DNSCache Unattend Generic Command.) -- C:\Windows\SysNative\dnscacheugc.exe   [30208]
O44 - LFC:[MD5.C7AC9A4D827774B19221D5FE068BF190] - 01/06/2013 - 21:07:07 ---A- . (.Microsoft Corporation - DNSCache Unattend Generic Command.) -- C:\Windows\System32\dnscacheugc.exe   [30208]
O44 - LFC:[MD5.16835866AAA693C7D7FCEBA8FFF706E4] - 01/06/2013 - 21:07:07 ---A- . (.Microsoft Corporation - Service de résolution du cache DNS.) -- C:\Windows\SysNative\dnsrslvr.dll   [183296]
O44 - LFC:[MD5.16835866AAA693C7D7FCEBA8FFF706E4] - 01/06/2013 - 21:07:07 RSHAD . (.Microsoft Corporation - Service de résolution du cache DNS.) -- C:\Windows\System32\dnsrslvr.dll   [183296]
O44 - LFC:[MD5.374CE9DAB2F0CB173B8FCF3AB8DB5D1B] - 01/06/2013 - 21:07:06 ---A- . (.Microsoft Corporation - Microsoft DirectPlay.) -- C:\Windows\SysNative\dpnet.dll   [478208]
O44 - LFC:[MD5.374CE9DAB2F0CB173B8FCF3AB8DB5D1B] - 01/06/2013 - 21:07:06 ---A- . (.Microsoft Corporation - Microsoft DirectPlay.) -- C:\Windows\System32\dpnet.dll   [478208]
O44 - LFC:[MD5.1C7857B62DE5994A75B054A9FD4C3825] - 01/06/2013 - 21:07:06 RSHAD . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\Drivers\afd.sys   [498688]
O44 - LFC:[MD5.E61608AA35E98999AF9AAEEEA6114B0A] - 01/06/2013 - 21:07:05 RSHAD . (.Microsoft Corporation - Pilote de pile RDP Terminal.) -- C:\Windows\System32\Drivers\rdpwd.sys   [210944]
O44 - LFC:[MD5.E9766131EEADE40A27DC27D2D68FBA9C] - 01/06/2013 - 21:07:03 RSHAD . (.Microsoft Corporation - Partition Management Driver.) -- C:\Windows\System32\Drivers\partmgr.sys   [75120]
O44 - LFC:[MD5.5B236296E233CAA6BF86BE0C6501A224] - 01/06/2013 - 21:07:01 ---A- . (.Microsoft Corporation - DLL RDPCore Terminal Server (KM).) -- C:\Windows\SysNative\rdpcorekmts.dll   [149504]
O44 - LFC:[MD5.6D5DCC1579B3961D791ABDE286A1CB5E] - 01/06/2013 - 21:07:01 ---A- . (.Microsoft Corporation - RDP Extension DLL.) -- C:\Windows\SysNative\rdpwsx.dll   [77312]
O44 - LFC:[MD5.9E5D9177660A76FC8DECDC37A91A5B0D] - 01/06/2013 - 21:07:01 ---A- . (.Microsoft Corporation - RDP Listeners Correction Tool.) -- C:\Windows\SysNative\rdrmemptylst.exe   [9216]
O44 - LFC:[MD5.5B236296E233CAA6BF86BE0C6501A224] - 01/06/2013 - 21:07:01 RSHAD . (.Microsoft Corporation - DLL RDPCore Terminal Server (KM).) -- C:\Windows\System32\rdpcorekmts.dll   [149504]
O44 - LFC:[MD5.6D5DCC1579B3961D791ABDE286A1CB5E] - 01/06/2013 - 21:07:01 RSHAD . (.Microsoft Corporation - RDP Extension DLL.) -- C:\Windows\System32\rdpwsx.dll   [77312]
O44 - LFC:[MD5.9E5D9177660A76FC8DECDC37A91A5B0D] - 01/06/2013 - 21:07:01 RSHAD . (.Microsoft Corporation - RDP Listeners Correction Tool.) -- C:\Windows\System32\rdrmemptylst.exe   [9216]
O44 - LFC:[MD5.012787CEB35505EB78DF82E0A0072888] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Browser Service Client DLL.) -- C:\Windows\SysNative\browcli.dll   [59392]
O44 - LFC:[MD5.012787CEB35505EB78DF82E0A0072888] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Browser Service Client DLL.) -- C:\Windows\System32\browcli.dll   [59392]
O44 - LFC:[MD5.05F5A0D14A2EE1D8255C2AA0E9E8E694] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\SysNative\browser.dll   [136704]
O44 - LFC:[MD5.EEEA40F0EDB0A6E5359E539E15D0BC77] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Net Win32 API DLL.) -- C:\Windows\SysNative\netapi32.dll   [73216]
O44 - LFC:[MD5.EEEA40F0EDB0A6E5359E539E15D0BC77] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Net Win32 API DLL.) -- C:\Windows\System32\netapi32.dll   [73216]
O44 - LFC:[MD5.8699D17DFCFCD327784034DB6BD3A422] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Windows Briefcase Engine.) -- C:\Windows\SysNative\synceng.dll   [95744]
O44 - LFC:[MD5.8699D17DFCFCD327784034DB6BD3A422] - 01/06/2013 - 21:06:58 ---A- . (.Microsoft Corporation - Windows Briefcase Engine.) -- C:\Windows\System32\synceng.dll   [95744]
O44 - LFC:[MD5.05F5A0D14A2EE1D8255C2AA0E9E8E694] - 01/06/2013 - 21:06:58 RSHAD . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O44 - LFC:[MD5.44E1A196DFCB53B01FE4B855C3B56A15] - 01/06/2013 - 21:06:51 ---A- . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\SysNative\kerberos.dll   [715776]
O44 - LFC:[MD5.44E1A196DFCB53B01FE4B855C3B56A15] - 01/06/2013 - 21:06:51 ---A- . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll   [715776]
O44 - LFC:[MD5.25FBDEF06C4D92815B353F6E792C8129] - 01/06/2013 - 21:06:50 ---A- . (.Microsoft Corporation - Service mode utilisateur de Plug-and-Play.) -- C:\Windows\SysNative\umpnpmgr.dll   [404480]
O44 - LFC:[MD5.25FBDEF06C4D92815B353F6E792C8129] - 01/06/2013 - 21:06:50 RSHAD . (.Microsoft Corporation - Service mode utilisateur de Plug-and-Play.) -- C:\Windows\System32\umpnpmgr.dll   [404480]
O44 - LFC:[MD5.5EF94FF9210ED73B9488C460D1FE173C] - 01/06/2013 - 21:06:48 ---A- . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\SysNative\winresume.efi   [566208]
O44 - LFC:[MD5.5EF94FF9210ED73B9488C460D1FE173C] - 01/06/2013 - 21:06:48 RSHAD . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\System32\winresume.efi   [566208]
O44 - LFC:[MD5.5A76F4B8D9D5D9D4C1153DFF4972C196] - 01/06/2013 - 21:06:47 ---A- . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\SysNative\winresume.exe   [518672]
O44 - LFC:[MD5.78C918D3612FE5937D32E488F053F10A] - 01/06/2013 - 21:06:47 ---A- . (.Microsoft Corporation - OS Loader.) -- C:\Windows\SysNative\winload.exe   [605552]
O44 - LFC:[MD5.5A76F4B8D9D5D9D4C1153DFF4972C196] - 01/06/2013 - 21:06:47 RSHAD . (.Microsoft Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\System32\winresume.exe   [518672]
O44 - LFC:[MD5.78C918D3612FE5937D32E488F053F10A] - 01/06/2013 - 21:06:47 RSHAD . (.Microsoft Corporation - OS Loader.) -- C:\Windows\System32\winload.exe   [605552]
O44 - LFC:[MD5.722258D597A0CC4EEFF3AF338681E5B6] - 01/06/2013 - 21:06:45 ---A- . (.Microsoft Corporation - 1394 Kernel Debugger.) -- C:\Windows\SysNative\kd1394.dll   [19328]
O44 - LFC:[MD5.8AE1C98D96EF1E63FB00A1BB3D14C959] - 01/06/2013 - 21:06:45 ---A- . (.Microsoft Corporation - OS Loader.) -- C:\Windows\SysNative\winload.efi   [642944]
O44 - LFC:[MD5.CDD0C92A653CAC881D780003E0C4E813] - 01/06/2013 - 21:06:45 ---A- . (.Microsoft Corporation - Serial Kernel Debugger.) -- C:\Windows\SysNative\kdcom.dll   [17792]
O44 - LFC:[MD5.539AA23C29FAC72FB29D58F33E6931B1] - 01/06/2013 - 21:06:45 ---A- . (.Microsoft Corporation - USB 2.0 Kernel Debugger.) -- C:\Windows\SysNative\kdusb.dll   [20352]
O44 - LFC:[MD5.722258D597A0CC4EEFF3AF338681E5B6] - 01/06/2013 - 21:06:45 RSHAD . (.Microsoft Corporation - 1394 Kernel Debugger.) -- C:\Windows\System32\kd1394.dll   [19328]
O44 - LFC:[MD5.8AE1C98D96EF1E63FB00A1BB3D14C959] - 01/06/2013 - 21:06:45 RSHAD . (.Microsoft Corporation - OS Loader.) -- C:\Windows\System32\winload.efi   [642944]
O44 - LFC:[MD5.CDD0C92A653CAC881D780003E0C4E813] - 01/06/2013 - 21:06:45 RSHAD . (.Microsoft Corporation - Serial Kernel Debugger.) -- C:\Windows\System32\kdcom.dll   [17792]
O44 - LFC:[MD5.539AA23C29FAC72FB29D58F33E6931B1] - 01/06/2013 - 21:06:45 RSHAD . (.Microsoft Corporation - USB 2.0 Kernel Debugger.) -- C:\Windows\System32\kdusb.dll   [20352]
O44 - LFC:[MD5.639774C9ACD063F028F6084ABF5593AD] - 01/06/2013 - 21:06:42 ---A- . (.Microsoft Corporation - Processus hôte pour Tâches Windows.) -- C:\Windows\SysNative\taskhost.exe   [68608]
O44 - LFC:[MD5.639774C9ACD063F028F6084ABF5593AD] - 01/06/2013 - 21:06:42 RSHAD . (.Microsoft Corporation - Processus hôte pour Tâches Windows.) -- C:\Windows\System32\taskhost.exe   [68608]
O44 - LFC:[MD5.12EE6FE9268CEE6D90FDCCBF89236C65] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\SysNative\crypt32.dll   [1464320]
O44 - LFC:[MD5.12EE6FE9268CEE6D90FDCCBF89236C65] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll   [1464320]
O44 - LFC:[MD5.8792BAB371B4B1589E015B6FD1ED3B15] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\SysNative\cryptnet.dll   [140288]
O44 - LFC:[MD5.8792BAB371B4B1589E015B6FD1ED3B15] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll   [140288]
O44 - LFC:[MD5.9C01375BE382E834CC26D1B7EAF2C4FE] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Services de chiffrement.) -- C:\Windows\SysNative\cryptsvc.dll   [184320]
O44 - LFC:[MD5.9C01375BE382E834CC26D1B7EAF2C4FE] - 01/06/2013 - 21:06:37 ---A- . (.Microsoft Corporation - Services de chiffrement.) -- C:\Windows\System32\cryptsvc.dll   [184320]
O44 - LFC:[MD5.1FEB1694B13247A451B274E114AFAC45] - 01/06/2013 - 21:06:28 ---A- . (.Microsoft Corporation - Microsoft CDO for Windows Library.) -- C:\Windows\SysNative\cdosys.dll   [1133568]
O44 - LFC:[MD5.1FEB1694B13247A451B274E114AFAC45] - 01/06/2013 - 21:06:28 ---A- . (.Microsoft Corporation - Microsoft CDO for Windows Library.) -- C:\Windows\System32\cdosys.dll   [1133568]
O44 - LFC:[MD5.CF636C92B762B26F0B39B38E92380A09] - 01/06/2013 - 21:06:24 ---A- . (.Microsoft Corporation - Active Accessibility Core Component.) -- C:\Windows\SysNative\oleacc.dll   [331776]
O44 - LFC:[MD5.CF636C92B762B26F0B39B38E92380A09] - 01/06/2013 - 21:06:24 ---A- . (.Microsoft Corporation - Active Accessibility Core Component.) -- C:\Windows\System32\oleacc.dll   [331776]
O44 - LFC:[MD5.C06B32165E23A72A898B7A89679AD754] - 01/06/2013 - 21:06:24 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\oleaut32.dll   [861696]
O44 - LFC:[MD5.C06B32165E23A72A898B7A89679AD754] - 01/06/2013 - 21:06:24 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\oleaut32.dll   [861696]
O44 - LFC:[MD5.50EBD31C3527366FAFA468BD609F7352] - 31/05/2013 - 21:02:34 ---A- . (.Microsoft Corporation - Expérience utilisateur du client Windows Up.) -- C:\Windows\SysNative\wucltux.dll   [2622464]
O44 - LFC:[MD5.C1C03EA437EDDA8A7D4D8786E5AE6751] - 31/05/2013 - 21:02:34 ---A- . (.Microsoft Corporation - Windows Update.) -- C:\Windows\SysNative\wuauclt.exe   [57880]
O44 - LFC:[MD5.50EBD31C3527366FAFA468BD609F7352] - 31/05/2013 - 21:02:34 RSHAD . (.Microsoft Corporation - Expérience utilisateur du client Windows Up.) -- C:\Windows\System32\wucltux.dll   [2622464]
O44 - LFC:[MD5.7FE0D0C8F53735EA17C9AE93EFE7AD5A] - 31/05/2013 - 21:02:34 RSHAD . (.Microsoft Corporation - Windows Update client proxy stub 2.) -- C:\Windows\System32\wups2.dll   [44056]
O44 - LFC:[MD5.C1C03EA437EDDA8A7D4D8786E5AE6751] - 31/05/2013 - 21:02:34 RSHAD . (.Microsoft Corporation - Windows Update.) -- C:\Windows\System32\wuauclt.exe   [57880]
O44 - LFC:[MD5.D9EF901DCA379CFE914E9FA13B73B4C4] - 31/05/2013 - 21:02:33 ---A- . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\SysNative\wuaueng.dll   [2428952]
O44 - LFC:[MD5.D9EF901DCA379CFE914E9FA13B73B4C4] - 31/05/2013 - 21:02:33 RSHAD . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O44 - LFC:[MD5.C47F35CC6FA4F1BDBEF8F87AC1A46537] - 31/05/2013 - 21:02:26 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\Windows\SysNative\wuapi.dll   [701976]
O44 - LFC:[MD5.C47F35CC6FA4F1BDBEF8F87AC1A46537] - 31/05/2013 - 21:02:26 ---A- . (.Microsoft Corporation - API du client Windows Update.) -- C:\Windows\System32\wuapi.dll   [701976]
O44 - LFC:[MD5.4AA6AA52A16EED6481E83D73EED4C8D5] - 31/05/2013 - 21:02:26 ---A- . (.Microsoft Corporation - Windows Update WUDriver Stub.) -- C:\Windows\System32\wudriver.dll   [99840]
O44 - LFC:[MD5.E746ED90132C6B6313CE9179F56BD31D] - 31/05/2013 - 21:02:26 ---A- . (.Microsoft Corporation - Windows Update client proxy stub.) -- C:\Windows\System32\wups.dll   [38424]
O44 - LFC:[MD5.FF0729002E081668620A681182D63FE6] - 31/05/2013 - 21:02:17 ---A- . (.Microsoft Corporation - Windows Update Application Launcher.) -- C:\Windows\SysNative\wuapp.exe   [36864]
O44 - LFC:[MD5.FF0729002E081668620A681182D63FE6] - 31/05/2013 - 21:02:17 ---A- . (.Microsoft Corporation - Windows Update Application Launcher.) -- C:\Windows\System32\wuapp.exe   [36864]
O44 - LFC:[MD5.3E38C20AC83B01C45723B63B0F7A8FDC] - 31/05/2013 - 21:02:17 ---A- . (.Microsoft Corporation - Windows Update Vista Web Control.) -- C:\Windows\System32\wuwebv.dll   [186752]
O44 - LFC:[MD5.C391FC68282A000CDF953F8B6B55D2EF] - 01/06/2013 - 20:58:54 ---A- . (.Microsoft Corporation - Windows NT CRT DLL.) -- C:\Windows\SysNative\msvcrt.dll   [634880]
O44 - LFC:[MD5.C391FC68282A000CDF953F8B6B55D2EF] - 01/06/2013 - 20:58:54 ---A- . (.Microsoft Corporation - Windows NT CRT DLL.) -- C:\Windows\System32\msvcrt.dll   [634880]
O44 - LFC:[MD5.1392A9F9E56A876C616D8A33FE272C78] - 01/06/2013 - 20:58:53 ---A- . (.Microsoft Corporation -  Filtre XDS Codec & filtres de balises d’en.) -- C:\Windows\SysNative\EncDec.dll   [723456]
O44 - LFC:[MD5.1392A9F9E56A876C616D8A33FE272C78] - 01/06/2013 - 20:58:53 ---A- . (.Microsoft Corporation -  Filtre XDS Codec & filtres de balises d’en.) -- C:\Windows\System32\EncDec.dll   [723456]
O44 - LFC:[MD5.81A85BA8B536B70E035A9976F9D42873] - 01/06/2013 - 20:58:52 ---A- . (.Microsoft Corporation - Microsoft  Fax Cover Page Editor.) -- C:\Windows\SysNative\FXSCOVER.exe   [267776]
O44 - LFC:[MD5.81A85BA8B536B70E035A9976F9D42873] - 01/06/2013 - 20:58:52 RSHAD . (.Microsoft Corporation - Microsoft  Fax Cover Page Editor.) -- C:\Windows\System32\FXSCOVER.exe   [267776]
O44 - LFC:[MD5.CF95B85FF8D128385ABD411C8CA74DED] - 01/06/2013 - 20:58:51 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\SysNative\ntdll.dll   [1731920]
O44 - LFC:[MD5.CF95B85FF8D128385ABD411C8CA74DED] - 01/06/2013 - 20:58:51 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll   [1731920]
O44 - LFC:[MD5.142E90CF1A4C5B6E7505810E38B07B9F] - 01/06/2013 - 20:58:50 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysNative\inetcomm.dll   [976896]
O44 - LFC:[MD5.142E90CF1A4C5B6E7505810E38B07B9F] - 01/06/2013 - 20:58:50 ---A- . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll   [976896]
O44 - LFC:[MD5.6C02A83164F5CC0A262F4199F0871CF5] - 01/06/2013 - 20:58:49 RSHAD . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\Drivers\bowser.sys   [90624]
O44 - LFC:[MD5.45CFBFA8EDC3DF4E2B7FB0D0260FE051] - 01/06/2013 - 20:58:47 ---A- . (.Microsoft Corporation - DLL de spouleur local.) -- C:\Windows\SysNative\localspl.dll   [956928]
O44 - LFC:[MD5.BACE7F36D65968FD07757B239B01F4E2] - 01/06/2013 - 20:58:47 ---A- . (.Microsoft Corporation - Gestionnaire de liaisons d’objets2.) -- C:\Windows\SysNative\packager.dll   [77312]
O44 - LFC:[MD5.BACE7F36D65968FD07757B239B01F4E2] - 01/06/2013 - 20:58:47 ---A- . (.Microsoft Corporation - Gestionnaire de liaisons d’objets2.) -- C:\Windows\System32\packager.dll   [77312]
O44 - LFC:[MD5.45CFBFA8EDC3DF4E2B7FB0D0260FE051] - 01/06/2013 - 20:58:47 RSHAD . (.Microsoft Corporation - DLL de spouleur local.) -- C:\Windows\System32\localspl.dll   [956928]
O44 - LFC:[MD5.8136841474281C1F70F8AD6A491C428C] - 31/05/2013 - 20:55:44 ---A- . (...) -- C:\Windows\SysNative\license.rtf   [55877]
O44 - LFC:[MD5.8136841474281C1F70F8AD6A491C428C] - 31/05/2013 - 20:55:44 ---A- . (...) -- C:\Windows\System32\license.rtf   [55877]
O44 - LFC:[MD5.E5EB533D4B77B3CCFF7DF76DE62AA968] - 01/06/2013 - 20:31:58 ---A- . (.Microsoft Corporation - Microsoft Class Mini-driver.) -- C:\Windows\SysNative\msclmd.dll   [175616]
O44 - LFC:[MD5.E5EB533D4B77B3CCFF7DF76DE62AA968] - 01/06/2013 - 20:31:58 ---A- . (.Microsoft Corporation - Microsoft Class Mini-driver.) -- C:\Windows\System32\msclmd.dll   [175616]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/06/2013 - 20:26:57 RSHAD . (...) -- C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf   [0]
O44 - LFC:[MD5.D38535978F93F9FC9F28BE6093A87DBE] - 01/06/2013 - 20:08:18 ---A- . (.Microsoft Corporation - Microsoft Digital Receiver Interface Class.) -- C:\Windows\SysNative\msdri.dll   [552960]
O44 - LFC:[MD5.509E88FF7B257885775791FAF0965D6A] - 01/06/2013 - 20:08:18 ---A- . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\SysNative\mobsync.exe   [102400]
O44 - LFC:[MD5.509E88FF7B257885775791FAF0965D6A] - 01/06/2013 - 20:08:18 ---A- . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe   [102400]
O44 - LFC:[MD5.621B74BFCE49F9372AED2859FD87343C] - 01/06/2013 - 20:08:18 ---A- . (.Microsoft Corporation - Superviseur du Gestionnaire de numérotation.) -- C:\Windows\SysNative\mprddm.dll   [211456]
O44 - LFC:[MD5.621B74BFCE49F9372AED2859FD87343C] - 01/06/2013 - 20:08:18 ---A- . (.Microsoft Corporation - Superviseur du Gestionnaire de numérotation.) -- C:\Windows\System32\mprddm.dll   [211456]
O44 - LFC:[MD5.D38535978F93F9FC9F28BE6093A87DBE] - 01/06/2013 - 20:08:18 RSHAD . (.Microsoft Corporation - Microsoft Digital Receiver Interface Class.) -- C:\Windows\System32\msdri.dll   [552960]
O44 - LFC:[MD5.D931D7309DEB2317035B07C9F9E6B0BD] - 01/06/2013 - 20:08:18 RSHAD . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\Drivers\msiscsi.sys   [273792]
O44 - LFC:[MD5.25D284EB2F12254C001AFE9A82575A81] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Analyseur de clip RDP.) -- C:\Windows\SysNative\rdpclip.exe   [210944]
O44 - LFC:[MD5.79F73766D279D1842581EA60D6FD44F1] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\Windows\SysNative\KBDBLR.DLL   [7168]
O44 - LFC:[MD5.79F73766D279D1842581EA60D6FD44F1] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Belarusian Keyboard Layout.) -- C:\Windows\System32\KBDBLR.DLL   [7168]
O44 - LFC:[MD5.10F815BE90A66AAFC6C713D1BD626064] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Icône du système réseau.) -- C:\Windows\SysNative\pnidui.dll   [1808384]
O44 - LFC:[MD5.10F815BE90A66AAFC6C713D1BD626064] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Icône du système réseau.) -- C:\Windows\System32\pnidui.dll   [1808384]
O44 - LFC:[MD5.BA0F80C7878558C28B1B298E94D259FF] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Interface de gestion des paramètres de l’im.) -- C:\Windows\SysNative\printui.dll   [1050624]
O44 - LFC:[MD5.BA0F80C7878558C28B1B298E94D259FF] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Interface de gestion des paramètres de l’im.) -- C:\Windows\System32\printui.dll   [1050624]
O44 - LFC:[MD5.90CC31E54E79E9E5800FFF3CCF2FC5DB] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Microsoft MIB-II subagent.) -- C:\Windows\SysNative\inetmib1.dll   [65536]
O44 - LFC:[MD5.90CC31E54E79E9E5800FFF3CCF2FC5DB] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Microsoft MIB-II subagent.) -- C:\Windows\System32\inetmib1.dll   [65536]
O44 - LFC:[MD5.F024FD214655A287536026B00C08430F] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Microsoft® InfoTech IR Local DLL.) -- C:\Windows\SysNative\itircl.dll   [194048]
O44 - LFC:[MD5.F024FD214655A287536026B00C08430F] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Microsoft® InfoTech IR Local DLL.) -- C:\Windows\System32\itircl.dll   [194048]
O44 - LFC:[MD5.E7B1B5D5A1D1E4C77AE995D725A1FEE5] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Panneau de configuration Sauvegarde et rest.) -- C:\Windows\SysNative\sdcpl.dll   [762368]
O44 - LFC:[MD5.FF6148B1C150DA05D35C68D143AD6DEA] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - RDP Encoder Mirror Driver.) -- C:\Windows\SysNative\RDPENCDD.dll   [147456]
O44 - LFC:[MD5.90C06682302B3F911EA22211A2FFC6ED] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Tuner TV sous flux WDM.) -- C:\Windows\SysNative\kstvtune.ax   [102912]
O44 - LFC:[MD5.90C06682302B3F911EA22211A2FFC6ED] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Tuner TV sous flux WDM.) -- C:\Windows\System32\kstvtune.ax   [102912]
O44 - LFC:[MD5.5F7C94678DAE6EF130CDDC1BBDC1738E] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - WDM Streaming Crossbar.) -- C:\Windows\SysNative\ksxbar.ax   [66048]
O44 - LFC:[MD5.5F7C94678DAE6EF130CDDC1BBDC1738E] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - WDM Streaming Crossbar.) -- C:\Windows\System32\ksxbar.ax   [66048]
O44 - LFC:[MD5.3924400E5C14A561E3C7279B95523160] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Windows NT PIF Manager Icon Resources Libra.) -- C:\Windows\SysNative\pifmgr.dll   [35328]
O44 - LFC:[MD5.3924400E5C14A561E3C7279B95523160] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Windows NT PIF Manager Icon Resources Libra.) -- C:\Windows\System32\pifmgr.dll   [35328]
O44 - LFC:[MD5.D45BE8BAED0B82F6BBC9D9421FA8FA1C] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Écran de veille Rubans.) -- C:\Windows\SysNative\Ribbons.scr   [241664]
O44 - LFC:[MD5.D45BE8BAED0B82F6BBC9D9421FA8FA1C] - 01/06/2013 - 20:08:17 ---A- . (.Microsoft Corporation - Écran de veille Rubans.) -- C:\Windows\System32\Ribbons.scr   [241664]
O44 - LFC:[MD5.25D284EB2F12254C001AFE9A82575A81] - 01/06/2013 - 20:08:17 RSHAD . (.Microsoft Corporation - Analyseur de clip RDP.) -- C:\Windows\System32\rdpclip.exe   [210944]
O44 - LFC:[MD5.0FC1AEA580957AA8817B8F305D18CA3A] - 01/06/2013 - 20:08:17 RSHAD . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\Drivers\IPMIDrv.sys   [78848]
O44 - LFC:[MD5.E7B1B5D5A1D1E4C77AE995D725A1FEE5] - 01/06/2013 - 20:08:17 RSHAD . (.Microsoft Corporation - Panneau de configuration Sauvegarde et rest.) -- C:\Windows\System32\sdcpl.dll   [762368]
O44 - LFC:[MD5.FF6148B1C150DA05D35C68D143AD6DEA] - 01/06/2013 - 20:08:17 RSHAD . (.Microsoft Corporation - RDP Encoder Mirror Driver.) -- C:\Windows\System32\RDPENCDD.dll   [147456]
O44 - LFC:[MD5.1B1E264203D4EF9D3DA1987AD70355AB] - 01/06/2013 - 20:08:17 RSHAD . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\Drivers\scsiport.sys   [171392]
O44 - LFC:[MD5.94DFBB481BF51158B216E23C5C1C9D6E] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Client Microsoft® Active Directory Certific.) -- C:\Windows\SysNative\certcli.dll   [460800]
O44 - LFC:[MD5.94DFBB481BF51158B216E23C5C1C9D6E] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Client Microsoft® Active Directory Certific.) -- C:\Windows\System32\certcli.dll   [460800]
O44 - LFC:[MD5.60EB9DB7A449FC083D2F02B0A0425104] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Certificats.) -- C:\Windows\SysNative\certmgr.dll   [1796096]
O44 - LFC:[MD5.60EB9DB7A449FC083D2F02B0A0425104] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Certificats.) -- C:\Windows\System32\certmgr.dll   [1796096]
O44 - LFC:[MD5.AA339DD8BB128EF66660DFBBB59043D3] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - DLL des services Net Logon.) -- C:\Windows\SysNative\netlogon.dll   [695808]
O44 - LFC:[MD5.AA339DD8BB128EF66660DFBBB59043D3] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - DLL des services Net Logon.) -- C:\Windows\System32\netlogon.dll   [695808]
O44 - LFC:[MD5.C6505DE3561537BA1004D638C2F93F2F] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Domain Join DLL.) -- C:\Windows\SysNative\netjoin.dll   [188928]
O44 - LFC:[MD5.C6505DE3561537BA1004D638C2F93F2F] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Domain Join DLL.) -- C:\Windows\System32\netjoin.dll   [188928]
O44 - LFC:[MD5.FCF433BFE9F44C8FD2FAF1E8DED23D72] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Mise en route.) -- C:\Windows\SysNative\OobeFldr.dll   [898560]
O44 - LFC:[MD5.FCF433BFE9F44C8FD2FAF1E8DED23D72] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Mise en route.) -- C:\Windows\System32\OobeFldr.dll   [898560]
O44 - LFC:[MD5.FCE23E27F62989AD0BB88E256E847A41] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Moteur de stratégie de certificat.) -- C:\Windows\SysNative\CertPolEng.dll   [71680]
O44 - LFC:[MD5.FCE23E27F62989AD0BB88E256E847A41] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Moteur de stratégie de certificat.) -- C:\Windows\System32\CertPolEng.dll   [71680]
O44 - LFC:[MD5.A42F2C1EB3B66C54FB3C7B79D30C1A6D] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Noyau des Connexions réseau.) -- C:\Windows\SysNative\netshell.dll   [2652160]
O44 - LFC:[MD5.A42F2C1EB3B66C54FB3C7B79D30C1A6D] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Noyau des Connexions réseau.) -- C:\Windows\System32\netshell.dll   [2652160]
O44 - LFC:[MD5.3DC7F21CF94CC930E7E8F63D4AEBA71A] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - Outil de mappage du moniteur au numériseur.) -- C:\Windows\SysNative\MultiDigiMon.exe   [51712]
O44 - LFC:[MD5.891C5270AFE8A69366702C88F3E24768] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - nslookup.) -- C:\Windows\SysNative\nslookup.exe   [109568]
O44 - LFC:[MD5.891C5270AFE8A69366702C88F3E24768] - 01/06/2013 - 20:08:16 ---A- . (.Microsoft Corporation - nslookup.) -- C:\Windows\System32\nslookup.exe   [109568]
O44 - LFC:[MD5.3DC7F21CF94CC930E7E8F63D4AEBA71A] - 01/06/2013 - 20:08:16 RSHAD . (.Microsoft Corporation - Outil de mappage du moniteur au numériseur.) -- C:\Windows\System32\MultiDigiMon.exe   [51712]
O44 - LFC:[MD5.D92420AC58F49F173D7E1CAE32629F3E] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - API d’acquisition d’images du système de fi.) -- C:\Windows\SysNative\imapi2fs.dll   [1244160]
O44 - LFC:[MD5.D92420AC58F49F173D7E1CAE32629F3E] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - API d’acquisition d’images du système de fi.) -- C:\Windows\System32\imapi2fs.dll   [1244160]
O44 - LFC:[MD5.1F137AC28556D4507F97F736B0AC7D45] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\SysNative\aeinv.dll   [424448]
O44 - LFC:[MD5.8B22B0CF8912F810B28AFBFC8B42727F] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Bibliothèque d’extension de l’onglet Compat.) -- C:\Windows\SysNative\acppage.dll   [53248]
O44 - LFC:[MD5.8B22B0CF8912F810B28AFBFC8B42727F] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Bibliothèque d’extension de l’onglet Compat.) -- C:\Windows\System32\acppage.dll   [53248]
O44 - LFC:[MD5.A6585E85184E3E6B45AE833536CAA282] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Boot Configuration Data COM Server.) -- C:\Windows\SysNative\bcdsrv.dll   [168448]
O44 - LFC:[MD5.9835E63E09F824D22B689D2BB789BAB9] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - DLL commune de boîtes de dialogues.) -- C:\Windows\SysNative\comdlg32.dll   [594432]
O44 - LFC:[MD5.9835E63E09F824D22B689D2BB789BAB9] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - DLL commune de boîtes de dialogues.) -- C:\Windows\System32\comdlg32.dll   [594432]
O44 - LFC:[MD5.4449D23E8F197862F1B16F1E6C89C36C] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Diagnostics de performances Microsoft.) -- C:\Windows\SysNative\diagperf.dll   [1340416]
O44 - LFC:[MD5.4C3DAEE652B005B483F16B8E9131C99D] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Direct3D 9 Runtime.) -- C:\Windows\SysNative\d3d9.dll   [2067456]
O44 - LFC:[MD5.4C3DAEE652B005B483F16B8E9131C99D] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Direct3D 9 Runtime.) -- C:\Windows\System32\d3d9.dll   [2067456]
O44 - LFC:[MD5.C0EB0E804F596CC1C7283D2D7FF980E7] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Extension des modèles d’administration.) -- C:\Windows\SysNative\AdmTmpl.dll   [577024]
O44 - LFC:[MD5.C0EB0E804F596CC1C7283D2D7FF980E7] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Extension des modèles d’administration.) -- C:\Windows\System32\AdmTmpl.dll   [577024]
O44 - LFC:[MD5.C07CEEF7737E9101E06CD656192B4BCB] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Logiciel de transfert de fichiers.) -- C:\Windows\SysNative\ftp.exe   [48128]
O44 - LFC:[MD5.C07CEEF7737E9101E06CD656192B4BCB] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Logiciel de transfert de fichiers.) -- C:\Windows\System32\ftp.exe   [48128]
O44 - LFC:[MD5.FF50D93AAF2C520B43B0910EF2A1838B] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Microsoft® Korean IME.) -- C:\Windows\SysNative\imkr80.ime   [457216]
O44 - LFC:[MD5.FF50D93AAF2C520B43B0910EF2A1838B] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Microsoft® Korean IME.) -- C:\Windows\System32\imkr80.ime   [457216]
O44 - LFC:[MD5.AF84C72EE2E49DA2B13EF30DABA5B5CC] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Mise à jour des données de compatibilité de.) -- C:\Windows\SysNative\aepdu.dll   [412160]
O44 - LFC:[MD5.AE67E6224419C1A88800DF29E6A95F88] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Services Microsoft Windows SideShow.) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll   [135680]
O44 - LFC:[MD5.A7A8CA53D9C9FD90C07AB0EB38E5316B] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Windows Image Helper.) -- C:\Windows\SysNative\dbghelp.dll   [1087488]
O44 - LFC:[MD5.A7A8CA53D9C9FD90C07AB0EB38E5316B] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Windows Image Helper.) -- C:\Windows\System32\dbghelp.dll   [1087488]
O44 - LFC:[MD5.990EA3103E06D68CE0E755A9C3D70107] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Windows Symbolic Debugger Engine.) -- C:\Windows\SysNative\dbgeng.dll   [3391488]
O44 - LFC:[MD5.990EA3103E06D68CE0E755A9C3D70107] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Windows Symbolic Debugger Engine.) -- C:\Windows\System32\dbgeng.dll   [3391488]
O44 - LFC:[MD5.780836BB63852990382DF27DE7FEFD20] - 01/06/2013 - 20:08:15 ---A- . (.Microsoft Corporation - Éditeur de données de configuration de déma.) -- C:\Windows\SysNative\bcdedit.exe   [346112]
O44 - LFC:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 01/06/2013 - 20:08:15 RSHAD . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\Drivers\HpSAMD.sys   [78720]
O44 - LFC:[MD5.89A69C3F2F319B43379399547526D952] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\Drivers\appid.sys   [61440]
O44 - LFC:[MD5.1F137AC28556D4507F97F736B0AC7D45] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll   [424448]
O44 - LFC:[MD5.A6585E85184E3E6B45AE833536CAA282] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Boot Configuration Data COM Server.) -- C:\Windows\System32\bcdsrv.dll   [168448]
O44 - LFC:[MD5.4449D23E8F197862F1B16F1E6C89C36C] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Diagnostics de performances Microsoft.) -- C:\Windows\System32\diagperf.dll   [1340416]
O44 - LFC:[MD5.0EA7DE1ACB728DD5A369FD742D6EEE28] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\Drivers\http.sys   [753664]
O44 - LFC:[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\Drivers\hdaudbus.sys   [122368]
O44 - LFC:[MD5.975761C778E33CD22498059B91E7373A] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\HdAudio.sys   [350208]
O44 - LFC:[MD5.AF84C72EE2E49DA2B13EF30DABA5B5CC] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Mise à jour des données de compatibilité de.) -- C:\Windows\System32\aepdu.dll   [412160]
O44 - LFC:[MD5.F036CE71586E93D94DAB220D7BDF4416] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\Drivers\cdrom.sys   [147456]
O44 - LFC:[MD5.AE67E6224419C1A88800DF29E6A95F88] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Services Microsoft Windows SideShow.) -- C:\Windows\System32\AuxiliaryDisplayServices.dll   [135680]
O44 - LFC:[MD5.780836BB63852990382DF27DE7FEFD20] - 01/06/2013 - 20:08:15 RSHAD . (.Microsoft Corporation - Éditeur de données de configuration de déma.) -- C:\Windows\System32\bcdedit.exe   [346112]
O44 - LFC:[MD5.F152755F131ADFE452D534F4E9383590] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - DLL du rapport d’incident dans le mode util.) -- C:\Windows\SysNative\Faultrep.dll   [355328]
O44 - LFC:[MD5.F152755F131ADFE452D534F4E9383590] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - DLL du rapport d’incident dans le mode util.) -- C:\Windows\System32\Faultrep.dll   [355328]
O44 - LFC:[MD5.12929BDE96189F4E968AD035573424F0] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - ELS Transliteration Service.) -- C:\Windows\SysNative\elsTrans.dll   [25600]
O44 - LFC:[MD5.12929BDE96189F4E968AD035573424F0] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - ELS Transliteration Service.) -- C:\Windows\System32\elsTrans.dll   [25600]
O44 - LFC:[MD5.EED05D42D91835064703E2318552ED25] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - ExplorerFrame.) -- C:\Windows\SysNative\ExplorerFrame.dll   [1866240]
O44 - LFC:[MD5.EED05D42D91835064703E2318552ED25] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - ExplorerFrame.) -- C:\Windows\System32\ExplorerFrame.dll   [1866240]
O44 - LFC:[MD5.F0074CEB72EA93608037C98A1F187DB5] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - Panneau de configuration d’affichage.) -- C:\Windows\SysNative\Display.dll   [1066496]
O44 - LFC:[MD5.F0074CEB72EA93608037C98A1F187DB5] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - Panneau de configuration d’affichage.) -- C:\Windows\System32\Display.dll   [1066496]
O44 - LFC:[MD5.B0F69B9DE0AEBFD7E4CEADE6758DF627] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - SearchFolder.) -- C:\Windows\SysNative\SearchFolder.dll   [867840]
O44 - LFC:[MD5.B0F69B9DE0AEBFD7E4CEADE6758DF627] - 01/06/2013 - 20:08:14 ---A- . (.Microsoft Corporation - SearchFolder.) -- C:\Windows\System32\SearchFolder.dll   [867840]
O44 - LFC:[MD5.5EC92F0EAE3CA59F647C3CA5AA7CB053] - 01/06/2013 - 20:08:13 ---A- . (...) -- C:\Windows\SysNative\systemsf.ebd   [347904]
O44 - LFC:[MD5.BAAFAF9CEAEC0B73C2A3550A01F6CECB] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - API COM du Planificateur de tâches.) -- C:\Windows\SysNative\taskschd.dll   [1197056]
O44 - LFC:[MD5.BAAFAF9CEAEC0B73C2A3550A01F6CECB] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - API COM du Planificateur de tâches.) -- C:\Windows\System32\taskschd.dll   [1197056]
O44 - LFC:[MD5.B7AC66C1CCD87D7C49256B5451DED4FA] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Bibliothèque de points de protection partag.) -- C:\Windows\SysNative\spp.dll   [244224]
O44 - LFC:[MD5.B7AC66C1CCD87D7C49256B5451DED4FA] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Bibliothèque de points de protection partag.) -- C:\Windows\System32\spp.dll   [244224]
O44 - LFC:[MD5.6A1B51F414E2F83ECC2B9AFA0121FEF6] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Bibliothèque du programme d’installation de.) -- C:\Windows\SysNative\sysclass.dll   [207360]
O44 - LFC:[MD5.24F4B480F335A6C724AF352253C5D98B] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Cache de miniatures Microsoft.) -- C:\Windows\SysNative\thumbcache.dll   [112640]
O44 - LFC:[MD5.24F4B480F335A6C724AF352253C5D98B] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Cache de miniatures Microsoft.) -- C:\Windows\System32\thumbcache.dll   [112640]
O44 - LFC:[MD5.4947AB26D8C3E402B153B3A5BB615495] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Fournisseur d’infrastructure WMI de configu.) -- C:\Windows\SysNative\tscfgwmi.dll   [200192]
O44 - LFC:[MD5.BF9CCC0BF39B418C8D0AE8B05CF95B7D] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Hôte de service Superfetch.) -- C:\Windows\SysNative\sysmain.dll   [1743360]
O44 - LFC:[MD5.8569E35D00F45972E506502EEE622BA4] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Options d’indexation.) -- C:\Windows\SysNative\srchadmin.dll   [340992]
O44 - LFC:[MD5.8569E35D00F45972E506502EEE622BA4] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Options d’indexation.) -- C:\Windows\System32\srchadmin.dll   [340992]
O44 - LFC:[MD5.98E7911BEFE83F76777317CE6905666D] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Outil de calibration de la numérisation.) -- C:\Windows\SysNative\tabcal.exe   [78848]
O44 - LFC:[MD5.F731DB7489A0994F682D68A2B21AA5AE] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Panneau de configuration Tablet PC.) -- C:\Windows\SysNative\TabletPC.cpl   [684032]
O44 - LFC:[MD5.27B9E163740A226B65E4B9E186117911] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - SQM Client.) -- C:\Windows\SysNative\sqmapi.dll   [244736]
O44 - LFC:[MD5.27B9E163740A226B65E4B9E186117911] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - SQM Client.) -- C:\Windows\System32\sqmapi.dll   [244736]
O44 - LFC:[MD5.E17E0188BB90FAE42D83E98707EFA59C] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\SysNative\sppsvc.exe   [3524608]
O44 - LFC:[MD5.4A6305A5386DA8293E218F60B0BA12FA] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Services Web Windows Shell.) -- C:\Windows\SysNative\shwebsvc.dll   [451072]
O44 - LFC:[MD5.4A6305A5386DA8293E218F60B0BA12FA] - 01/06/2013 - 20:08:13 ---A- . (.Microsoft Corporation - Services Web Windows Shell.) -- C:\Windows\System32\shwebsvc.dll   [451072]
O44 - LFC:[MD5.5EC92F0EAE3CA59F647C3CA5AA7CB053] - 01/06/2013 - 20:08:13 RSHAD . (...) -- C:\Windows\System32\systemsf.ebd   [347904]
O44 - LFC:[MD5.6A1B51F414E2F83ECC2B9AFA0121FEF6] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Bibliothèque du programme d’installation de.) -- C:\Windows\System32\sysclass.dll   [207360]
O44 - LFC:[MD5.4947AB26D8C3E402B153B3A5BB615495] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Fournisseur d’infrastructure WMI de configu.) -- C:\Windows\System32\tscfgwmi.dll   [200192]
O44 - LFC:[MD5.BF9CCC0BF39B418C8D0AE8B05CF95B7D] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Hôte de service Superfetch.) -- C:\Windows\System32\sysmain.dll   [1743360]
O44 - LFC:[MD5.98E7911BEFE83F76777317CE6905666D] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Outil de calibration de la numérisation.) -- C:\Windows\System32\tabcal.exe   [78848]
O44 - LFC:[MD5.F731DB7489A0994F682D68A2B21AA5AE] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Panneau de configuration Tablet PC.) -- C:\Windows\System32\TabletPC.cpl   [684032]
O44 - LFC:[MD5.E17E0188BB90FAE42D83E98707EFA59C] - 01/06/2013 - 20:08:13 RSHAD . (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\System32\sppsvc.exe   [3524608]
O44 - LFC:[MD5.BAFE84E637BF7388C96EF48D4D3FDD53] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Application d’ouverture de session Userinit.) -- C:\Windows\SysNative\userinit.exe   [30720]
O44 - LFC:[MD5.BAFE84E637BF7388C96EF48D4D3FDD53] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Application d’ouverture de session Userinit.) -- C:\Windows\System32\userinit.exe   [30720]
O44 - LFC:[MD5.2236436F5522E6F9153569AD24C4F70F] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Assistant WCN d’appareil mobile Windows.) -- C:\Windows\SysNative\wpdwcn.dll   [215040]
O44 - LFC:[MD5.2236436F5522E6F9153569AD24C4F70F] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Assistant WCN d’appareil mobile Windows.) -- C:\Windows\System32\wpdwcn.dll   [215040]
O44 - LFC:[MD5.8FAFCA21FE9B20C420CE9D4DC50A7169] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Consolidateur SQM Windows.) -- C:\Windows\SysNative\wsqmcons.exe   [293888]
O44 - LFC:[MD5.851A1382EED3E3A7476DB004F4EE3E1A] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - DLL du service Station de travail.) -- C:\Windows\SysNative\wkssvc.dll   [118784]
O44 - LFC:[MD5.0E2F58F6E698EDCB9E58FAD0CBCD0567] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Requestor/Wri.) -- C:\Windows\SysNative\vssapi.dll   [1753088]
O44 - LFC:[MD5.0E2F58F6E698EDCB9E58FAD0CBCD0567] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Requestor/Wri.) -- C:\Windows\System32\vssapi.dll   [1753088]
O44 - LFC:[MD5.4D85B1B44DC19C0C46E6DDE35895FD0F] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service proxy.) -- C:\Windows\SysNative\vss_ps.dll   [61952]
O44 - LFC:[MD5.4D85B1B44DC19C0C46E6DDE35895FD0F] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Microsoft® Volume Shadow Copy Service proxy.) -- C:\Windows\System32\vss_ps.dll   [61952]
O44 - LFC:[MD5.1473768973453DE50DC738C2955FC4DD] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Pilote du système audio Winmm.) -- C:\Windows\SysNative\wdmaud.drv   [217088]
O44 - LFC:[MD5.1473768973453DE50DC738C2955FC4DD] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Pilote du système audio Winmm.) -- C:\Windows\System32\wdmaud.drv   [217088]
O44 - LFC:[MD5.F41831D2A3D6E2152525EA3F75316ACD] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Programme d’installation de la classe de co.) -- C:\Windows\SysNative\wpd_ci.dll   [611840]
O44 - LFC:[MD5.285DEA88F17836A6D5EE2C2116750982] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Rapport d’erreurs Windows.) -- C:\Windows\SysNative\WerFaultSecure.exe   [26112]
O44 - LFC:[MD5.285DEA88F17836A6D5EE2C2116750982] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Rapport d’erreurs Windows.) -- C:\Windows\System32\WerFaultSecure.exe   [26112]
O44 - LFC:[MD5.A293DCD756D04D8492A750D03B9A297C] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Service Redirecteur de périphériques des se.) -- C:\Windows\SysNative\umrdp.dll   [214528]
O44 - LFC:[MD5.B60BA0BC31B0CB414593E169F6F21CC2] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Service de cliché instantané de volumes Mic.) -- C:\Windows\SysNative\VSSVC.exe   [1600512]
O44 - LFC:[MD5.58F4493BF748A3A89689997B7BD00E95] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Services HTTP Windows.) -- C:\Windows\SysNative\winhttp.dll   [444416]
O44 - LFC:[MD5.58F4493BF748A3A89689997B7BD00E95] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Services HTTP Windows.) -- C:\Windows\System32\winhttp.dll   [444416]
O44 - LFC:[MD5.9FCA3A84338ADEF2AFF67CDA46EF8539] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - User Mode Bus Driver Interface Dll.) -- C:\Windows\SysNative\umb.dll   [59904]
O44 - LFC:[MD5.0F8A86A636A774DBB63B3A8659723312] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - VBI Surface Allocator Filter.) -- C:\Windows\SysNative\vbisurf.ax   [43520]
O44 - LFC:[MD5.0F8A86A636A774DBB63B3A8659723312] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - VBI Surface Allocator Filter.) -- C:\Windows\System32\vbisurf.ax   [43520]
O44 - LFC:[MD5.4C1244FEF74C60A4B1B151C76609CBE2] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - WSD Challenge Component.) -- C:\Windows\SysNative\wsdchngr.dll   [26112]
O44 - LFC:[MD5.4C1244FEF74C60A4B1B151C76609CBE2] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - WSD Challenge Component.) -- C:\Windows\System32\wsdchngr.dll   [26112]
O44 - LFC:[MD5.E87D22236DFDF100715F142D4D258FB7] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Audio Decoder.) -- C:\Windows\SysNative\WMADMOD.DLL   [1232896]
O44 - LFC:[MD5.E87D22236DFDF100715F142D4D258FB7] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Audio Decoder.) -- C:\Windows\System32\WMADMOD.DLL   [1232896]
O44 - LFC:[MD5.BC631580FC99C75740DC1C6AF20B986B] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Audio Voice Decoder.) -- C:\Windows\SysNative\WMSPDMOD.DLL   [978944]
O44 - LFC:[MD5.BC631580FC99C75740DC1C6AF20B986B] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Audio Voice Decoder.) -- C:\Windows\System32\WMSPDMOD.DLL   [978944]
O44 - LFC:[MD5.765A0868EB29240873FB40E32F9C2053] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media DRM for Network Devices DLL.) -- C:\Windows\SysNative\wmdrmnet.dll   [527872]
O44 - LFC:[MD5.765A0868EB29240873FB40E32F9C2053] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media DRM for Network Devices DLL.) -- C:\Windows\System32\wmdrmnet.dll   [527872]
O44 - LFC:[MD5.423982DD851406A52B6399DDB196C606] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media DRM for Network Devices Regis.) -- C:\Windows\SysNative\wmdrmdev.dll   [636416]
O44 - LFC:[MD5.423982DD851406A52B6399DDB196C606] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media DRM for Network Devices Regis.) -- C:\Windows\System32\wmdrmdev.dll   [636416]
O44 - LFC:[MD5.612F1A6DA62A004128943A184123D184] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Player Effects.) -- C:\Windows\SysNative\wmpeffects.dll   [605696]
O44 - LFC:[MD5.612F1A6DA62A004128943A184123D184] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Player Effects.) -- C:\Windows\System32\wmpeffects.dll   [605696]
O44 - LFC:[MD5.8206692C891DDDD7FD097422005E8BAE] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Video Decoder.) -- C:\Windows\SysNative\WMVDECOD.DLL   [1888256]
O44 - LFC:[MD5.8206692C891DDDD7FD097422005E8BAE] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Media Video Decoder.) -- C:\Windows\System32\WMVDECOD.DLL   [1888256]
O44 - LFC:[MD5.4BBFA57F594F7E8A8EDC8F377184C3F0] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Socket 2.0 32-Bit DLL.) -- C:\Windows\SysNative\ws2_32.dll   [297984]
O44 - LFC:[MD5.4BBFA57F594F7E8A8EDC8F377184C3F0] - 01/06/2013 - 20:08:12 ---A- . (.Microsoft Corporation - Windows Socket 2.0 32-Bit DLL.) -- C:\Windows\System32\ws2_32.dll   [297984]
O44 - LFC:[MD5.163A95975E1D8819E653AA3E961371CA] - 01/06/2013 - 20:08:12 ---A- . (.Twain Working Group - Gestionnaire de sources Twain_32 (Image Acq.) -- C:\Windows\twain_32.dll   [51200]
O44 - LFC:[MD5.8FAFCA21FE9B20C420CE9D4DC50A7169] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Consolidateur SQM Windows.) -- C:\Windows\System32\wsqmcons.exe   [293888]
O44 - LFC:[MD5.851A1382EED3E3A7476DB004F4EE3E1A] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - DLL du service Station de travail.) -- C:\Windows\System32\wkssvc.dll   [118784]
O44 - LFC:[MD5.36F3D6CF6842573E5955D0B7CD2BF281] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Flux de connexion WAN sans fil.) -- C:\Windows\System32\wwanconn.dll   [222720]
O44 - LFC:[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\Drivers\volsnap.sys   [295808]
O44 - LFC:[MD5.F41831D2A3D6E2152525EA3F75316ACD] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Programme d’installation de la classe de co.) -- C:\Windows\System32\wpd_ci.dll   [611840]
O44 - LFC:[MD5.A293DCD756D04D8492A750D03B9A297C] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Service Redirecteur de périphériques des se.) -- C:\Windows\System32\umrdp.dll   [214528]
O44 - LFC:[MD5.B60BA0BC31B0CB414593E169F6F21CC2] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Service de cliché instantané de volumes Mic.) -- C:\Windows\System32\VSSVC.exe   [1600512]
O44 - LFC:[MD5.9FCA3A84338ADEF2AFF67CDA46EF8539] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - User Mode Bus Driver Interface Dll.) -- C:\Windows\System32\umb.dll   [59904]
O44 - LFC:[MD5.DC54A574663A895C8763AF0FA1FF7561] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - User-Mode Bus Enumerator.) -- C:\Windows\System32\Drivers\umbus.sys   [48640]
O44 - LFC:[MD5.FE88B288356E7B47B74B13372ADD906D] - 01/06/2013 - 20:08:12 RSHAD . (.Microsoft Corporation - Windows USB Class Driver BETA.) -- C:\Windows\System32\Drivers\winusb.sys   [41984]
O44 - LFC:[MD5.98BB7E40685F7F79C20E2ABA93818346] - 01/06/2013 - 20:08:10 ---A- . (.Microsoft Corporation - Filtre MIME.) -- C:\Windows\SysNative\mimefilt.dll   [41472]
O44 - LFC:[MD5.98BB7E40685F7F79C20E2ABA93818346] - 01/06/2013 - 20:08:10 ---A- . (.Microsoft Corporation - Filtre MIME.) -- C:\Windows\System32\mimefilt.dll   [41472]
O44 - LFC:[MD5.20ECAC7791DCBA69121631CB627E5A96] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - DLL Media Foundation.) -- C:\Windows\SysNative\mf.dll   [4120064]
O44 - LFC:[MD5.20ECAC7791DCBA69121631CB627E5A96] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - DLL Media Foundation.) -- C:\Windows\System32\mf.dll   [4120064]
O44 - LFC:[MD5.AAFAF68D1A450325DA58D9EAD997B427] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - DLL d’API de lecture Media Foundation.) -- C:\Windows\SysNative\MFPlay.dll   [240640]
O44 - LFC:[MD5.AAFAF68D1A450325DA58D9EAD997B427] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - DLL d’API de lecture Media Foundation.) -- C:\Windows\System32\MFPlay.dll   [240640]
O44 - LFC:[MD5.0BE09CD858ABF9DF6ED259D57A1A1663] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - Media Center Extender Service.) -- C:\Windows\SysNative\Mcx2Svc.dll   [84992]
O44 - LFC:[MD5.54C0E2C37436A15DA2CC40FDA742E2F5] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - Media Foundation Direct Show wrapper DLL.) -- C:\Windows\SysNative\mfds.dll   [381440]
O44 - LFC:[MD5.54C0E2C37436A15DA2CC40FDA742E2F5] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - Media Foundation Direct Show wrapper DLL.) -- C:\Windows\System32\mfds.dll   [381440]
O44 - LFC:[MD5.7C932706EC416BCFC2FB9DB66D823643] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - Media Foundation Proxy DLL.) -- C:\Windows\SysNative\mfps.dll   [206848]
O44 - LFC:[MD5.7C932706EC416BCFC2FB9DB66D823643] - 01/06/2013 - 20:08:09 ---A- . (.Microsoft Corporation - Media Foundation Proxy DLL.) -- C:\Windows\System32\mfps.dll   [206848]
O44 - LFC:[MD5.0BE09CD858ABF9DF6ED259D57A1A1663] - 01/06/2013 - 20:08:09 RSHAD . (.Microsoft Corporation - Media Center Extender Service.) -- C:\Windows\System32\Mcx2Svc.dll   [84992]
O44 - LFC:[MD5.B64E6DA93066E6DCECB046E3E75C61A5] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Bengali Keyboard Layout.) -- C:\Windows\SysNative\KBDINBEN.DLL   [7680]
O44 - LFC:[MD5.B64E6DA93066E6DCECB046E3E75C61A5] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Bengali Keyboard Layout.) -- C:\Windows\System32\KBDINBEN.DLL   [7680]
O44 - LFC:[MD5.4F15D75ADF6156BF56ECED6D4A55C389] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - DLL du serveur SPD IPsec Windows.) -- C:\Windows\SysNative\IPSECSVC.DLL   [501248]
O44 - LFC:[MD5.14232FB0BCBB446352C37CF3260FC3E4] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\Windows\SysNative\KBDGKL.DLL   [8192]
O44 - LFC:[MD5.14232FB0BCBB446352C37CF3260FC3E4] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Greek_Latin Keyboard Layout.) -- C:\Windows\System32\KBDGKL.DLL   [8192]
O44 - LFC:[MD5.9697D0C831C3D33EAA22D3454554638A] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Microsoft .NET Runtime IE resources.) -- C:\Windows\SysNative\mscorier.dll   [154960]
O44 - LFC:[MD5.9697D0C831C3D33EAA22D3454554638A] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Microsoft .NET Runtime IE resources.) -- C:\Windows\System32\mscorier.dll   [154960]
O44 - LFC:[MD5.8699D60D780483F2A1B6B35EF967A78A] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Microsoft AC-3 Encoder.) -- C:\Windows\SysNative\MSAC3ENC.DLL   [268288]
O44 - LFC:[MD5.8699D60D780483F2A1B6B35EF967A78A] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Microsoft AC-3 Encoder.) -- C:\Windows\System32\MSAC3ENC.DLL   [268288]
O44 - LFC:[MD5.110B1CB812D2A7208FC366654ABB80CE] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\Windows\SysNative\KBDTUF.DLL   [8192]
O44 - LFC:[MD5.110B1CB812D2A7208FC366654ABB80CE] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Turkish F Keyboard Layout.) -- C:\Windows\System32\KBDTUF.DLL   [8192]
O44 - LFC:[MD5.D599A5E49043569C89804128ECBDA25C] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\Windows\SysNative\logoff.exe   [21504]
O44 - LFC:[MD5.715F03B4C7223349768013EA95D9E5B7] - 01/06/2013 - 20:08:08 ---A- . (.Microsoft Corporation - Windows Logon User Interface Host.) -- C:\Windows\SysNative\LogonUI.exe   [27648]
O44 - LFC:[MD5.4F15D75ADF6156BF56ECED6D4A55C389] - 01/06/2013 - 20:08:08 RSHAD . (.Microsoft Corporation - DLL du serveur SPD IPsec Windows.) -- C:\Windows\System32\IPSECSVC.DLL   [501248]
O44 - LFC:[MD5.D599A5E49043569C89804128ECBDA25C] - 01/06/2013 - 20:08:08 RSHAD . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\Windows\System32\logoff.exe   [21504]
O44 - LFC:[MD5.715F03B4C7223349768013EA95D9E5B7] - 01/06/2013 - 20:08:08 RSHAD . (.Microsoft Corporation - Windows Logon User Interface Host.) -- C:\Windows\System32\LogonUI.exe   [27648]
O44 - LFC:[MD5.FA4C36B574BF387D9582ED2C54A347A8] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\SysNative\mblctr.exe   [957440]
O44 - LFC:[MD5.35C2F5EE281D0CC00B6185435EE6D1A7] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Lua manifest install.) -- C:\Windows\SysNative\luainstall.dll   [48640]
O44 - LFC:[MD5.35C2F5EE281D0CC00B6185435EE6D1A7] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Lua manifest install.) -- C:\Windows\System32\luainstall.dll   [48640]
O44 - LFC:[MD5.6C60B5ACA7442EFB794082CDACFC001C] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Microsoft OLE pour Windows.) -- C:\Windows\SysNative\ole32.dll   [2086912]
O44 - LFC:[MD5.6C60B5ACA7442EFB794082CDACFC001C] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Microsoft OLE pour Windows.) -- C:\Windows\System32\ole32.dll   [2086912]
O44 - LFC:[MD5.03DC34242009D26061A4B1E91DF51C9B] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Native Code OPC Services Library.) -- C:\Windows\SysNative\OpcServices.dll   [1911808]
O44 - LFC:[MD5.03DC34242009D26061A4B1E91DF51C9B] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Native Code OPC Services Library.) -- C:\Windows\System32\OpcServices.dll   [1911808]
O44 - LFC:[MD5.6CECA4C6A489C9B2E6073AFDAAE3F607] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Net Win32 API Helpers DLL.) -- C:\Windows\SysNative\netutils.dll   [29184]
O44 - LFC:[MD5.6CECA4C6A489C9B2E6073AFDAAE3F607] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Net Win32 API Helpers DLL.) -- C:\Windows\System32\netutils.dll   [29184]
O44 - LFC:[MD5.C4E28504E92F7D34C830C9D767B9948D] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Panneau de configuration des identités en l.) -- C:\Windows\SysNative\OnLineIDCpl.dll   [221696]
O44 - LFC:[MD5.C4E28504E92F7D34C830C9D767B9948D] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - Panneau de configuration des identités en l.) -- C:\Windows\System32\OnLineIDCpl.dll   [221696]
O44 - LFC:[MD5.78523A26F5604C0568FE9D1CE86E36F4] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - United States Keyboard Layout.) -- C:\Windows\SysNative\KBDUS.DLL   [7168]
O44 - LFC:[MD5.78523A26F5604C0568FE9D1CE86E36F4] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - United States Keyboard Layout.) -- C:\Windows\System32\KBDUS.DLL   [7168]
O44 - LFC:[MD5.2D66F79983F266621E6450E08A536DAD] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\Windows\SysNative\ksproxy.ax   [250880]
O44 - LFC:[MD5.2D66F79983F266621E6450E08A536DAD] - 01/06/2013 - 20:08:07 ---A- . (.Microsoft Corporation - WDM Streaming ActiveMovie Proxy.) -- C:\Windows\System32\ksproxy.ax   [250880]
O44 - LFC:[MD5.FA4C36B574BF387D9582ED2C54A347A8] - 01/06/2013 - 20:08:07 RSHAD . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\System32\mblctr.exe   [957440]
O44 - LFC:[MD5.52D30D72E4833CDC3B49B60498766486] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Client Gestion des droits Windows.) -- C:\Windows\SysNative\msdrm.dll   [457216]
O44 - LFC:[MD5.52D30D72E4833CDC3B49B60498766486] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Client Gestion des droits Windows.) -- C:\Windows\System32\msdrm.dll   [457216]
O44 - LFC:[MD5.69A4347A8EAD86185EFF2F75755176E6] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Compresseur Microsoft Vidéo 1.) -- C:\Windows\SysNative\msvidc32.dll   [38912]
O44 - LFC:[MD5.69A4347A8EAD86185EFF2F75755176E6] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Compresseur Microsoft Vidéo 1.) -- C:\Windows\System32\msvidc32.dll   [38912]
O44 - LFC:[MD5.558C42D165DB5799B4072DC0A9C27C0B] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - DMO Runtime.) -- C:\Windows\SysNative\msdmo.dll   [35840]
O44 - LFC:[MD5.558C42D165DB5799B4072DC0A9C27C0B] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - DMO Runtime.) -- C:\Windows\System32\msdmo.dll   [35840]
O44 - LFC:[MD5.AE55B3FC3D29593A9CEBA5909AB4A346] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - MUI Callback for font registry settings.) -- C:\Windows\SysNative\muifontsetup.dll   [16896]
O44 - LFC:[MD5.AE55B3FC3D29593A9CEBA5909AB4A346] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - MUI Callback for font registry settings.) -- C:\Windows\System32\muifontsetup.dll   [16896]
O44 - LFC:[MD5.5A9290C6413880C3C109522124AB0981] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Microsoft Protected Broadcast Digital Archi.) -- C:\Windows\SysNative\mspbda.dll   [571904]
O44 - LFC:[MD5.45989C268EC2CC9EEA80030AF96CDA5A] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Microsoft RLE Compressor.) -- C:\Windows\SysNative\msrle32.dll   [16384]
O44 - LFC:[MD5.45989C268EC2CC9EEA80030AF96CDA5A] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Microsoft RLE Compressor.) -- C:\Windows\System32\msrle32.dll   [16384]
O44 - LFC:[MD5.E0773633E4193B183FB396192581BD86] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - NAP Cryptographic API helper.) -- C:\Windows\SysNative\NAPCRYPT.DLL   [50176]
O44 - LFC:[MD5.E0773633E4193B183FB396192581BD86] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - NAP Cryptographic API helper.) -- C:\Windows\System32\NAPCRYPT.DLL   [50176]
O44 - LFC:[MD5.48F714CD2DCD00E8E98172AA72CF358D] - 01/06/2013 - 20:08:06 ---A- . (.Microsoft Corporation - Plug-in de migration de fichiers hors conne.) -- C:\Windows\SysNative\CscMig.dll   [137216]
O44 - LFC:[MD5.5A9290C6413880C3C109522124AB0981] - 01/06/2013 - 20:08:06 RSHAD . (.Microsoft Corporation - Microsoft Protected Broadcast Digital Archi.) -- C:\Windows\System32\mspbda.dll   [571904]
O44 - LFC:[MD5.DB801A638D011B9633829EB6F663C900] - 01/06/2013 - 20:08:06 RSHAD . (.Microsoft Corporation - Module spécifique de périphériques Microsof.) -- C:\Windows\System32\Drivers\msdsm.sys   [140672]
O44 - LFC:[MD5.015C0D8E0E0421B4CFD48CFFE2825879] - 01/06/2013 - 20:08:06 RSHAD . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\Drivers\ndproxy.sys   [57856]
O44 - LFC:[MD5.48F714CD2DCD00E8E98172AA72CF358D] - 01/06/2013 - 20:08:06 RSHAD . (.Microsoft Corporation - Plug-in de migration de fichiers hors conne.) -- C:\Windows\System32\CscMig.dll   [137216]
O44 - LFC:[MD5.54DA3DFD29ED9F1619B6F53F3CE55E49] - 01/06/2013 - 20:08:06 RSHAD . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\Windows\System32\Drivers\csc.sys   [514560]
O44 - LFC:[MD5.7A09F960C73A63D68293EFDFD843A5FF] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Application d’assistance netsh 802.3.) -- C:\Windows\SysNative\dot3cfg.dll   [69120]
O44 - LFC:[MD5.7A09F960C73A63D68293EFDFD843A5FF] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Application d’assistance netsh 802.3.) -- C:\Windows\System32\dot3cfg.dll   [69120]
O44 - LFC:[MD5.BC4A4569F5E50EE9993E9DD9784C2FE3] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - CCA DirectShow Filter..) -- C:\Windows\SysNative\cca.dll   [95232]
O44 - LFC:[MD5.BC4A4569F5E50EE9993E9DD9784C2FE3] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - CCA DirectShow Filter..) -- C:\Windows\System32\cca.dll   [95232]
O44 - LFC:[MD5.2102EE1AC5A82401C93DDEE67B66EE67] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - DiskRAID.) -- C:\Windows\SysNative\diskraid.exe   [363520]
O44 - LFC:[MD5.2102EE1AC5A82401C93DDEE67B66EE67] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - DiskRAID.) -- C:\Windows\System32\diskraid.exe   [363520]
O44 - LFC:[MD5.90499F3163A9F815CF196A205EA3CD5D] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Fichier DLL du client de compatibilité des.) -- C:\Windows\SysNative\apphelp.dll   [342016]
O44 - LFC:[MD5.90499F3163A9F815CF196A205EA3CD5D] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Fichier DLL du client de compatibilité des.) -- C:\Windows\System32\apphelp.dll   [342016]
O44 - LFC:[MD5.BD3E64A49311E558C08F4F04B53F82D8] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Offre un choix à l’utilisateur.) -- C:\Windows\SysNative\choice.exe   [36864]
O44 - LFC:[MD5.BD3E64A49311E558C08F4F04B53F82D8] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Offre un choix à l’utilisateur.) -- C:\Windows\System32\choice.exe   [36864]
O44 - LFC:[MD5.7D067C851FD270E7C3495788AD487CDE] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Panneau de configuration du Centre de maint.) -- C:\Windows\SysNative\ActionCenterCPL.dll   [549888]
O44 - LFC:[MD5.7D067C851FD270E7C3495788AD487CDE] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Panneau de configuration du Centre de maint.) -- C:\Windows\System32\ActionCenterCPL.dll   [549888]
O44 - LFC:[MD5.2C6E1A303EC8DE78F257C2D7BAD4E849] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\asycfilt.dll   [84992]
O44 - LFC:[MD5.2C6E1A303EC8DE78F257C2D7BAD4E849] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\asycfilt.dll   [84992]
O44 - LFC:[MD5.69A9B266835ED67C031322660F7B18E4] - 01/06/2013 - 20:08:05 ---A- . (.Microsoft Corporation - Utilitaire de modification de mappage des f.) -- C:\Windows\SysNative\chgusr.exe   [21504]
O44 - LFC:[MD5.69A9B266835ED67C031322660F7B18E4] - 01/06/2013 - 20:08:05 RSHAD . (.Microsoft Corporation - Utilitaire de modification de mappage des f.) -- C:\Windows\System32\chgusr.exe   [21504]
O44 - LFC:[MD5.DD72849FE94E6F49732E1E9A6484FBAF] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft - Filtre du convertisseur RDP (redirecteur).) -- C:\Windows\SysNative\DShowRdpFilter.dll   [281600]
O44 - LFC:[MD5.DD72849FE94E6F49732E1E9A6484FBAF] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft - Filtre du convertisseur RDP (redirecteur).) -- C:\Windows\System32\DShowRdpFilter.dll   [281600]
O44 - LFC:[MD5.945E54F23C72D37B8CD1987AF0DB63BF] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - API de chiffrement de lecteur BitLocker Win.) -- C:\Windows\SysNative\fveapi.dll   [345600]
O44 - LFC:[MD5.8130391F82D52D36C0441F714136957F] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - API de contrôle d’image v2.) -- C:\Windows\SysNative\imapi2.dll   [503296]
O44 - LFC:[MD5.8130391F82D52D36C0441F714136957F] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - API de contrôle d’image v2.) -- C:\Windows\System32\imapi2.dll   [503296]
O44 - LFC:[MD5.9BB99503D6A4DD62569EDE9E5E2672A5] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Agent utilisateur HotStart Microsoft Window.) -- C:\Windows\SysNative\HotStartUserAgent.dll   [27136]
O44 - LFC:[MD5.047AD05DE61C166A1BED4CF5A9083ED8] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Composant de protocole RADIUS NPS.) -- C:\Windows\SysNative\iasrad.dll   [217088]
O44 - LFC:[MD5.047AD05DE61C166A1BED4CF5A9083ED8] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Composant de protocole RADIUS NPS.) -- C:\Windows\System32\iasrad.dll   [217088]
O44 - LFC:[MD5.9613BEA1E1509884EC472A10858EC61D] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Dossier des polices Windows.) -- C:\Windows\SysNative\fontext.dll   [861184]
O44 - LFC:[MD5.9613BEA1E1509884EC472A10858EC61D] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Dossier des polices Windows.) -- C:\Windows\System32\fontext.dll   [861184]
O44 - LFC:[MD5.A6F309DD01DC5BD7BFB3E3C1C413573F] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Fournisseur de compte NPS.) -- C:\Windows\SysNative\iasacct.dll   [100864]
O44 - LFC:[MD5.A6F309DD01DC5BD7BFB3E3C1C413573F] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Fournisseur de compte NPS.) -- C:\Windows\System32\iasacct.dll   [100864]
O44 - LFC:[MD5.98AA082059B23A7378A18B5D01824121] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Hyper-V Integration Components Coinstaller.) -- C:\Windows\SysNative\IcCoinstall.dll   [128512]
O44 - LFC:[MD5.25833C9289AEA84AE3F552FE7A0B1C19] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Microsoft IME Old Style.) -- C:\Windows\SysNative\IMJP10.IME   [1148416]
O44 - LFC:[MD5.25833C9289AEA84AE3F552FE7A0B1C19] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Microsoft IME Old Style.) -- C:\Windows\System32\IMJP10.IME   [1148416]
O44 - LFC:[MD5.D971173B54CA16810F138518A08F9566] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Plugin MF RDP.) -- C:\Windows\SysNative\tsmf.dll   [299520]
O44 - LFC:[MD5.D971173B54CA16810F138518A08F9566] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Plugin MF RDP.) -- C:\Windows\System32\tsmf.dll   [299520]
O44 - LFC:[MD5.DDE008F644E8D33F726D5357FE52F447] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire de changement de port.) -- C:\Windows\SysNative\chgport.exe   [24064]
O44 - LFC:[MD5.2BA41198C6A0367B4FC61315E9E90020] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\Windows\SysNative\tscon.exe   [22528]
O44 - LFC:[MD5.40EDE82A2D7E5336B12693D89B4F4466] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\Windows\SysNative\tsdiscon.exe   [22016]
O44 - LFC:[MD5.4C42CDF8B7CC00ADD1A1645F1500C3DC] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire de modification des services Bur.) -- C:\Windows\SysNative\change.exe   [16896]
O44 - LFC:[MD5.17123DEF4E76086D759122DD864D9512] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire de modification d’ouverture de s.) -- C:\Windows\SysNative\chglogon.exe   [22528]
O44 - LFC:[MD5.8DD050AFAC250837DF42514DEF72B2E2] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Utilitaire d’arrêt de processus des service.) -- C:\Windows\SysNative\tskill.exe   [23552]
O44 - LFC:[MD5.515F6B0BBC6E3A09B57C5AE6C41765D2] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Écran de veille Bulles.) -- C:\Windows\SysNative\Bubbles.scr   [899584]
O44 - LFC:[MD5.515F6B0BBC6E3A09B57C5AE6C41765D2] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Écran de veille Bulles.) -- C:\Windows\System32\Bubbles.scr   [899584]
O44 - LFC:[MD5.3D991793E642D063508503FE68907BA4] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Éditeur de sonneries Microsoft.) -- C:\Windows\SysNative\DXPTaskRingtone.dll   [675328]
O44 - LFC:[MD5.3D991793E642D063508503FE68907BA4] - 01/06/2013 - 20:08:04 ---A- . (.Microsoft Corporation - Éditeur de sonneries Microsoft.) -- C:\Windows\System32\DXPTaskRingtone.dll   [675328]
O44 - LFC:[MD5.945E54F23C72D37B8CD1987AF0DB63BF] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - API de chiffrement de lecteur BitLocker Win.) -- C:\Windows\System32\fveapi.dll   [345600]
O44 - LFC:[MD5.9BB99503D6A4DD62569EDE9E5E2672A5] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Agent utilisateur HotStart Microsoft Window.) -- C:\Windows\System32\HotStartUserAgent.dll   [27136]
O44 - LFC:[MD5.A5462BD6884960C9DC85ED49D34FF392] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\Drivers\hwpolicy.sys   [14720]
O44 - LFC:[MD5.98AA082059B23A7378A18B5D01824121] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Hyper-V Integration Components Coinstaller.) -- C:\Windows\System32\IcCoinstall.dll   [128512]
O44 - LFC:[MD5.DDE008F644E8D33F726D5357FE52F447] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire de changement de port.) -- C:\Windows\System32\chgport.exe   [24064]
O44 - LFC:[MD5.2BA41198C6A0367B4FC61315E9E90020] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire de connexion de session.) -- C:\Windows\System32\tscon.exe   [22528]
O44 - LFC:[MD5.40EDE82A2D7E5336B12693D89B4F4466] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire de déconnexion de session.) -- C:\Windows\System32\tsdiscon.exe   [22016]
O44 - LFC:[MD5.4C42CDF8B7CC00ADD1A1645F1500C3DC] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire de modification des services Bur.) -- C:\Windows\System32\change.exe   [16896]
O44 - LFC:[MD5.17123DEF4E76086D759122DD864D9512] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire de modification d’ouverture de s.) -- C:\Windows\System32\chglogon.exe   [22528]
O44 - LFC:[MD5.8DD050AFAC250837DF42514DEF72B2E2] - 01/06/2013 - 20:08:04 RSHAD . (.Microsoft Corporation - Utilitaire d’arrêt de processus des service.) -- C:\Windows\System32\tskill.exe   [23552]
O44 - LFC:[MD5.CE776FE2FC6FDE12FC455412CE45162E] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Co-installateur de pilote USB générique du.) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll   [40960]
O44 - LFC:[MD5.FF71E16F8F5672A77F4B8689AA50D38A] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Contrôle du Moniteur système.) -- C:\Windows\SysNative\sysmon.ocx   [474112]
O44 - LFC:[MD5.FF71E16F8F5672A77F4B8689AA50D38A] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Contrôle du Moniteur système.) -- C:\Windows\System32\sysmon.ocx   [474112]
O44 - LFC:[MD5.4715F8F8CDBFFF2728BA38B789A1D7C7] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Extension de l’environnement des appareils.) -- C:\Windows\SysNative\wpdshext.dll   [2543616]
O44 - LFC:[MD5.4715F8F8CDBFFF2728BA38B789A1D7C7] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Extension de l’environnement des appareils.) -- C:\Windows\System32\wpdshext.dll   [2543616]
O44 - LFC:[MD5.04D4A3C86479841A8D8740DB3E9AA43C] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Extension de stratégie de groupe pour la re.) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll   [12288]
O44 - LFC:[MD5.2E648163254233755035B46DD7B89123] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\SysNative\termsrv.dll   [680960]
O44 - LFC:[MD5.09F7401D56F2393C6CA534FF0241A590] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Gestionnaire des tâches de Windows.) -- C:\Windows\SysNative\taskmgr.exe   [257024]
O44 - LFC:[MD5.09F7401D56F2393C6CA534FF0241A590] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Gestionnaire des tâches de Windows.) -- C:\Windows\System32\taskmgr.exe   [257024]
O44 - LFC:[MD5.739BDC031DF0790FF8BB1AB244152C50] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Infrastructure de ruban Windows.) -- C:\Windows\SysNative\UIRibbon.dll   [3860992]
O44 - LFC:[MD5.739BDC031DF0790FF8BB1AB244152C50] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Infrastructure de ruban Windows.) -- C:\Windows\System32\UIRibbon.dll   [3860992]
O44 - LFC:[MD5.ABC58A1A2C4D527A358EEF2142268FE5] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft Narrator Text Renderer.) -- C:\Windows\SysNative\TRAPI.dll   [21504]
O44 - LFC:[MD5.ABC58A1A2C4D527A358EEF2142268FE5] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft Narrator Text Renderer.) -- C:\Windows\System32\TRAPI.dll   [21504]
O44 - LFC:[MD5.040B198DA82AC2C4DB22E088BBAFD10B] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft T2Embed Font Embedding.) -- C:\Windows\SysNative\t2embed.dll   [148992]
O44 - LFC:[MD5.040B198DA82AC2C4DB22E088BBAFD10B] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft T2Embed Font Embedding.) -- C:\Windows\System32\t2embed.dll   [148992]
O44 - LFC:[MD5.BE306D6E345A5FD8A049726C6F9DE6F8] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft Teletext Server.) -- C:\Windows\SysNative\WSTPager.ax   [98304]
O44 - LFC:[MD5.BE306D6E345A5FD8A049726C6F9DE6F8] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft Teletext Server.) -- C:\Windows\System32\WSTPager.ax   [98304]
O44 - LFC:[MD5.3DC58E2CA9A146A65F2066F2DC983898] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft VBI Codec.) -- C:\Windows\SysNative\VBICodec.ax   [196096]
O44 - LFC:[MD5.3DC58E2CA9A146A65F2066F2DC983898] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft VBI Codec.) -- C:\Windows\System32\VBICodec.ax   [196096]
O44 - LFC:[MD5.FFF9D00CF16397C64317F213484F94BD] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft WinSNMP v2.0 Manager API.) -- C:\Windows\SysNative\wsnmp32.dll   [67072]
O44 - LFC:[MD5.FFF9D00CF16397C64317F213484F94BD] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Microsoft WinSNMP v2.0 Manager API.) -- C:\Windows\System32\wsnmp32.dll   [67072]
O44 - LFC:[MD5.86CC31F0A3D05C1DBD587552FF2DADFF] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Outil d’évaluation du système Windows.) -- C:\Windows\SysNative\WinSAT.exe   [3957760]
O44 - LFC:[MD5.F0112F2DDAC14DFD4B3A69BB0164D005] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Panneau de configuration de la barre des tâ.) -- C:\Windows\SysNative\taskbarcpl.dll   [243712]
O44 - LFC:[MD5.53F4BCD594CC2A791E16246AED525B6D] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Prend possession d’un fichier.) -- C:\Windows\SysNative\takeown.exe   [63488]
O44 - LFC:[MD5.53F4BCD594CC2A791E16246AED525B6D] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Prend possession d’un fichier.) -- C:\Windows\System32\takeown.exe   [63488]
O44 - LFC:[MD5.C15B3D813F4382ADE98F1892350F21C7] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Programme d’installation de Windows Update.) -- C:\Windows\System32\wusa.exe   [307200]
O44 - LFC:[MD5.4E1073B674746EEA0B2EA0F4775EA6A4] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Remote Desktop USB Redirection GP Extension.) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe   [8192]
O44 - LFC:[MD5.2383B9314592FEC47900BC5A6C7AEC83] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Media Network Plugin Manager DLL.) -- C:\Windows\SysNative\WMNetMgr.dll   [1243136]
O44 - LFC:[MD5.2383B9314592FEC47900BC5A6C7AEC83] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Media Network Plugin Manager DLL.) -- C:\Windows\System32\WMNetMgr.dll   [1243136]
O44 - LFC:[MD5.994DF4AC984DC0EAB52EE51AF0E2B90C] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Media Screen Decoder.) -- C:\Windows\SysNative\WMVSDECD.DLL   [666112]
O44 - LFC:[MD5.994DF4AC984DC0EAB52EE51AF0E2B90C] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Media Screen Decoder.) -- C:\Windows\System32\WMVSDECD.DLL   [666112]
O44 - LFC:[MD5.4B4CA7B9008C56E380BC0A97FE0F2B4D] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows NT System Setup.) -- C:\Windows\SysNative\syssetup.dll   [17408]
O44 - LFC:[MD5.4B4CA7B9008C56E380BC0A97FE0F2B4D] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows NT System Setup.) -- C:\Windows\System32\syssetup.dll   [17408]
O44 - LFC:[MD5.C8FDF0FA9E97E2FAAF3F814716AAA881] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\Windows\SysNative\WPDShServiceObj.dll   [115200]
O44 - LFC:[MD5.C8FDF0FA9E97E2FAAF3F814716AAA881] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\Windows\System32\WPDShServiceObj.dll   [115200]
O44 - LFC:[MD5.55E3404EBA301BC8A420157BFE7184D2] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Ribbon Framework Resources.) -- C:\Windows\SysNative\UIRibbonRes.dll   [1164800]
O44 - LFC:[MD5.55E3404EBA301BC8A420157BFE7184D2] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Ribbon Framework Resources.) -- C:\Windows\System32\UIRibbonRes.dll   [1164800]
O44 - LFC:[MD5.5088595871D94EAD05CFD9351002B589] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - Windows Visual Components.) -- C:\Windows\System32\wvc.dll   [594432]
O44 - LFC:[MD5.57528A746F7A1026B41FB8447F9591B5] - 01/06/2013 - 20:08:03 ---A- . (.Microsoft Corporation - XPS Rasterization Service Component.) -- C:\Windows\System32\XpsRasterService.dll   [229888]
O44 - LFC:[MD5.CE776FE2FC6FDE12FC455412CE45162E] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Co-installateur de pilote USB générique du.) -- C:\Windows\System32\TsUsbGDCoInstaller.dll   [40960]
O44 - LFC:[MD5.04D4A3C86479841A8D8740DB3E9AA43C] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Extension de stratégie de groupe pour la re.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll   [12288]
O44 - LFC:[MD5.2E648163254233755035B46DD7B89123] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll   [680960]
O44 - LFC:[MD5.86CC31F0A3D05C1DBD587552FF2DADFF] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Outil d’évaluation du système Windows.) -- C:\Windows\System32\WinSAT.exe   [3957760]
O44 - LFC:[MD5.F0112F2DDAC14DFD4B3A69BB0164D005] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Panneau de configuration de la barre des tâ.) -- C:\Windows\System32\taskbarcpl.dll   [243712]
O44 - LFC:[MD5.4E1073B674746EEA0B2EA0F4775EA6A4] - 01/06/2013 - 20:08:03 RSHAD . (.Microsoft Corporation - Remote Desktop USB Redirection GP Extension.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe   [8192]
O44 - LFC:[MD5.0A551CCDEF9D6F99A008B5B075354650] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft - robocopy.) -- C:\Windows\SysNative\Robocopy.exe   [128000]
O44 - LFC:[MD5.0A551CCDEF9D6F99A008B5B075354650] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft - robocopy.) -- C:\Windows\System32\Robocopy.exe   [128000]
O44 - LFC:[MD5.6E26EE228F60D75C732D209688FB546C] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Analyseur de performances.) -- C:\Windows\SysNative\wdc.dll   [1363968]
O44 - LFC:[MD5.6E26EE228F60D75C732D209688FB546C] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Analyseur de performances.) -- C:\Windows\System32\wdc.dll   [1363968]
O44 - LFC:[MD5.101797BA603D227946B4B5109867EB19] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Centre de synchronisation Microsoft.) -- C:\Windows\SysNative\SyncCenter.dll   [2262528]
O44 - LFC:[MD5.101797BA603D227946B4B5109867EB19] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Centre de synchronisation Microsoft.) -- C:\Windows\System32\SyncCenter.dll   [2262528]
O44 - LFC:[MD5.0FDEEF01CB054D8FE46682FB64EE99BB] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Fichier DLL de ressources du Service Compos.) -- C:\Windows\SysNative\vmicres.dll   [53760]
O44 - LFC:[MD5.F62B62E3CAAB44E6C6056955954AE86F] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Implémentation du profil et de la numérisat.) -- C:\Windows\SysNative\scansetting.dll   [303616]
O44 - LFC:[MD5.F62B62E3CAAB44E6C6056955954AE86F] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Implémentation du profil et de la numérisat.) -- C:\Windows\System32\scansetting.dll   [303616]
O44 - LFC:[MD5.BBCDF350817BA86416C0F06B6981BE8D] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Moteur de l’Éditeur de configuration de séc.) -- C:\Windows\SysNative\scesrv.dll   [406016]
O44 - LFC:[MD5.BBCDF350817BA86416C0F06B6981BE8D] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Moteur de l’Éditeur de configuration de séc.) -- C:\Windows\System32\scesrv.dll   [406016]
O44 - LFC:[MD5.EAFA08FDE52AF3C564D2D4D7B8BF66E3] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - ParamètresContrôleCompteUtilisateur.) -- C:\Windows\SysNative\UserAccountControlSettings.dll   [84480]
O44 - LFC:[MD5.EAFA08FDE52AF3C564D2D4D7B8BF66E3] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - ParamètresContrôleCompteUtilisateur.) -- C:\Windows\System32\UserAccountControlSettings.dll   [84480]
O44 - LFC:[MD5.E377BBA01F34E4183C32E5BBD688CE83] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Registry Configuration APIs.) -- C:\Windows\SysNative\regapi.dll   [95232]
O44 - LFC:[MD5.E377BBA01F34E4183C32E5BBD688CE83] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Registry Configuration APIs.) -- C:\Windows\System32\regapi.dll   [95232]
O44 - LFC:[MD5.850BD2D2D9CB5894935C3B6333CAD6FD] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v3.1.) -- C:\Windows\SysNative\riched20.dll   [633344]
O44 - LFC:[MD5.850BD2D2D9CB5894935C3B6333CAD6FD] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v3.1.) -- C:\Windows\System32\riched20.dll   [633344]
O44 - LFC:[MD5.B53C4B69B695EDA1B7E41D35CA4244E2] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Routing Utilities.) -- C:\Windows\SysNative\rtutils.dll   [52224]
O44 - LFC:[MD5.B53C4B69B695EDA1B7E41D35CA4244E2] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Routing Utilities.) -- C:\Windows\System32\rtutils.dll   [52224]
O44 - LFC:[MD5.025E7DBDB98866ED3CB2D4DDA70B364D] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Run Once Wrapper.) -- C:\Windows\SysNative\runonce.exe   [56832]
O44 - LFC:[MD5.025E7DBDB98866ED3CB2D4DDA70B364D] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Run Once Wrapper.) -- C:\Windows\System32\runonce.exe   [56832]
O44 - LFC:[MD5.C59DC915FFC4E1BCEA09A2F9D1E0799D] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\Windows\SysNative\rwinsta.exe   [21504]
O44 - LFC:[MD5.2A520FF878C453E6CA3F2E6F7CA6E7ED] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\Windows\SysNative\reset.exe   [16896]
O44 - LFC:[MD5.79E14B291CA96A02F1EB22BD721DECCD] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Virtual Machine Integration Component Servi.) -- C:\Windows\SysNative\vmicsvc.exe   [244224]
O44 - LFC:[MD5.7961AAD46149CD5510DD405FA5DE1D3F] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Virtual Machine Integration Component Time.) -- C:\Windows\SysNative\vmictimeprovider.dll   [51712]
O44 - LFC:[MD5.3181F76ED237CC3D50D10CEA05AF8B60] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Wrapper Dll for Richedit 1.0.) -- C:\Windows\SysNative\riched32.dll   [10752]
O44 - LFC:[MD5.3181F76ED237CC3D50D10CEA05AF8B60] - 01/06/2013 - 20:08:02 ---A- . (.Microsoft Corporation - Wrapper Dll for Richedit 1.0.) -- C:\Windows\System32\riched32.dll   [10752]
O44 - LFC:[MD5.0FDEEF01CB054D8FE46682FB64EE99BB] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - Fichier DLL de ressources du Service Compos.) -- C:\Windows\System32\vmicres.dll   [53760]
O44 - LFC:[MD5.356AFD78A6ED4457169241AC3965230C] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\Drivers\wanarp.sys   [88576]
O44 - LFC:[MD5.C59DC915FFC4E1BCEA09A2F9D1E0799D] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - Utilitaire de réinitialisation de session.) -- C:\Windows\System32\rwinsta.exe   [21504]
O44 - LFC:[MD5.2A520FF878C453E6CA3F2E6F7CA6E7ED] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - Utilitaire de réinitialisation des services.) -- C:\Windows\System32\reset.exe   [16896]
O44 - LFC:[MD5.2CE2DF28C83AEAF30084E1B1EB253CBB] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\Drivers\vhdmp.sys   [215936]
O44 - LFC:[MD5.79E14B291CA96A02F1EB22BD721DECCD] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - Virtual Machine Integration Component Servi.) -- C:\Windows\System32\vmicsvc.exe   [244224]
O44 - LFC:[MD5.7961AAD46149CD5510DD405FA5DE1D3F] - 01/06/2013 - 20:08:02 RSHAD . (.Microsoft Corporation - Virtual Machine Integration Component Time.) -- C:\Windows\System32\vmictimeprovider.dll   [51712]
O44 - LFC:[MD5.EE867A0870FC9E4972BA9EAAD35651E2] - 01/06/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\SysNative\rasmans.dll   [344064]
O44 - LFC:[MD5.3EB98CFF1C242167DF5FDBC6441CE3C5] - 01/06/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\SysNative\perfmon.exe   [172544]
O44 - LFC:[MD5.3EB98CFF1C242167DF5FDBC6441CE3C5] - 01/06/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\System32\perfmon.exe   [172544]
O44 - LFC:[MD5.262F6592C3299C005FD6BEC90FC4463A] - 01/06/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\SysNative\schedsvc.dll   [1110016]
O44 - LFC:[MD5.EE867A0870FC9E4972BA9EAAD35651E2] - 01/06/2013 - 20:08:01 RSHAD . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O44 - LFC:[MD5.77F665941019A1594D887A74F301FA2F] - 01/06/2013 - 20:08:01 RSHAD . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\Windows\System32\Drivers\rdbss.sys   [309248]
O44 - LFC:[MD5.471815800AE33E6F1C32FB1B97C490CA] - 01/06/2013 - 20:08:01 RSHAD . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\Drivers\rasl2tp.sys   [129536]
O44 - LFC:[MD5.262F6592C3299C005FD6BEC90FC4463A] - 01/06/2013 - 20:08:01 RSHAD . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O44 - LFC:[MD5.A3D4197E5DC267D488C467133E8407DF] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Bibliothèque de configuration de la protect.) -- C:\Windows\SysNative\srrstr.dll   [270848]
O44 - LFC:[MD5.067FA52BFB59A56110A12312EF9AF243] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\SysNative\sppcomapi.dll   [232448]
O44 - LFC:[MD5.067FA52BFB59A56110A12312EF9AF243] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll   [232448]
O44 - LFC:[MD5.C5CE5CE799387E82B7698A0EE5544A6D] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Client d’activation Windows.) -- C:\Windows\SysNative\slui.exe   [349696]
O44 - LFC:[MD5.364E7E33289341D4EB83CFA95D7B23AF] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Interface utilisateur de l’Assistant SPC.) -- C:\Windows\SysNative\spwizui.dll   [263168]
O44 - LFC:[MD5.E4A343322CF7F4463DF18DDF04109BF3] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\SysNative\qdv.dll   [250880]
O44 - LFC:[MD5.E4A343322CF7F4463DF18DDF04109BF3] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\System32\qdv.dll   [250880]
O44 - LFC:[MD5.4BE691DE828BFC1CB1EBBC767586D73A] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Noyau de configuration WMI.) -- C:\Windows\SysNative\SmiEngine.dll   [933376]
O44 - LFC:[MD5.B4296172C4766788BA1D087941372E54] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Panneau de configuration Partage de fichier.) -- C:\Windows\SysNative\sharemediacpl.dll   [357888]
O44 - LFC:[MD5.0C4DED0FF69B4EBCC487295C68EDB1AA] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - PushPrinterConnection application.) -- C:\Windows\SysNative\PushPrinterConnections.exe   [55296]
O44 - LFC:[MD5.0C4DED0FF69B4EBCC487295C68EDB1AA] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - PushPrinterConnection application.) -- C:\Windows\System32\PushPrinterConnections.exe   [55296]
O44 - LFC:[MD5.0BF4362E18DFC52382F418278DCC52C4] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - RDP Display Driver.) -- C:\Windows\SysNative\rdpdd.dll   [274944]
O44 - LFC:[MD5.29C1D5B330B802EFA1A8357373BC97FE] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - SP Installer.) -- C:\Windows\SysNative\spinstall.exe   [598016]
O44 - LFC:[MD5.704CD4CAC010E8E6D8DE9B778ED17773] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\SysNative\spreview.exe   [301568]
O44 - LFC:[MD5.F6F22291024906E43D135A4B1705FEAC] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Software Protection Platform Windows Plugin.) -- C:\Windows\SysNative\sppwinob.dll   [418816]
O44 - LFC:[MD5.4E81439902079C348B61D7FF027FE147] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Structured Query.) -- C:\Windows\SysNative\StructuredQuery.dll   [483840]
O44 - LFC:[MD5.4E81439902079C348B61D7FF027FE147] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Structured Query.) -- C:\Windows\System32\StructuredQuery.dll   [483840]
O44 - LFC:[MD5.C92170F5FFAB62A94D5435AD5259F30A] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\Windows\SysNative\shadow.exe   [21504]
O44 - LFC:[MD5.3DBFBF22B2539FF7D1EB67DD2C5BB69D] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire de requête multi-utilisateurs.) -- C:\Windows\SysNative\query.exe   [16384]
O44 - LFC:[MD5.9BAC981F66940ACFF5469D15B769E056] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire d’enregistrement des Performance.) -- C:\Windows\SysNative\logman.exe   [104448]
O44 - LFC:[MD5.9BAC981F66940ACFF5469D15B769E056] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire d’enregistrement des Performance.) -- C:\Windows\System32\logman.exe   [104448]
O44 - LFC:[MD5.FE043CC325B7095FEF9C8EE1567A662C] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire d’interrogation de processus.) -- C:\Windows\SysNative\qprocess.exe   [26624]
O44 - LFC:[MD5.17A39E50921D061FB792F565B0849363] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Utilitaire d’interrogation de serveur hôte.) -- C:\Windows\SysNative\qappsrv.exe   [23040]
O44 - LFC:[MD5.33CFB33A0BBEA072A8BEE03618D9EC38] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Windows Shell Obsolete APIs.) -- C:\Windows\SysNative\shunimpl.dll   [11264]
O44 - LFC:[MD5.33CFB33A0BBEA072A8BEE03618D9EC38] - 01/06/2013 - 20:08:00 ---A- . (.Microsoft Corporation - Windows Shell Obsolete APIs.) -- C:\Windows\System32\shunimpl.dll   [11264]
O44 - LFC:[MD5.A3D4197E5DC267D488C467133E8407DF] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Bibliothèque de configuration de la protect.) -- C:\Windows\System32\srrstr.dll   [270848]
O44 - LFC:[MD5.C5CE5CE799387E82B7698A0EE5544A6D] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Client d’activation Windows.) -- C:\Windows\System32\slui.exe   [349696]
O44 - LFC:[MD5.364E7E33289341D4EB83CFA95D7B23AF] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Interface utilisateur de l’Assistant SPC.) -- C:\Windows\System32\spwizui.dll   [263168]
O44 - LFC:[MD5.4BE691DE828BFC1CB1EBBC767586D73A] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Noyau de configuration WMI.) -- C:\Windows\System32\SmiEngine.dll   [933376]
O44 - LFC:[MD5.B4296172C4766788BA1D087941372E54] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Panneau de configuration Partage de fichier.) -- C:\Windows\System32\sharemediacpl.dll   [357888]
O44 - LFC:[MD5.0BF4362E18DFC52382F418278DCC52C4] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - RDP Display Driver.) -- C:\Windows\System32\rdpdd.dll   [274944]
O44 - LFC:[MD5.29C1D5B330B802EFA1A8357373BC97FE] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - SP Installer.) -- C:\Windows\System32\spinstall.exe   [598016]
O44 - LFC:[MD5.704CD4CAC010E8E6D8DE9B778ED17773] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\spreview.exe   [301568]
O44 - LFC:[MD5.F6F22291024906E43D135A4B1705FEAC] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Software Protection Platform Windows Plugin.) -- C:\Windows\System32\sppwinob.dll   [418816]
O44 - LFC:[MD5.C92170F5FFAB62A94D5435AD5259F30A] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Utilitaire de contrôle à distance de sessio.) -- C:\Windows\System32\shadow.exe   [21504]
O44 - LFC:[MD5.3DBFBF22B2539FF7D1EB67DD2C5BB69D] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Utilitaire de requête multi-utilisateurs.) -- C:\Windows\System32\query.exe   [16384]
O44 - LFC:[MD5.FE043CC325B7095FEF9C8EE1567A662C] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Utilitaire d’interrogation de processus.) -- C:\Windows\System32\qprocess.exe   [26624]
O44 - LFC:[MD5.17A39E50921D061FB792F565B0849363] - 01/06/2013 - 20:08:00 RSHAD . (.Microsoft Corporation - Utilitaire d’interrogation de serveur hôte.) -- C:\Windows\System32\qappsrv.exe   [23040]
O44 - LFC:[MD5.2B81776DA02017A37FE26C662827470E] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - API de l’application d’assistance IP.) -- C:\Windows\SysNative\IPHLPAPI.DLL   [145920]
O44 - LFC:[MD5.2B81776DA02017A37FE26C662827470E] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - API de l’application d’assistance IP.) -- C:\Windows\System32\IPHLPAPI.DLL   [145920]
O44 - LFC:[MD5.9CB174523429D757DC8B896F5C3967C7] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\Windows\SysNative\KBDBULG.DLL   [7168]
O44 - LFC:[MD5.9CB174523429D757DC8B896F5C3967C7] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Bulgarian Keyboard Layout.) -- C:\Windows\System32\KBDBULG.DLL   [7168]
O44 - LFC:[MD5.0B0A8CE57A798231C0B6E4F7ABBFE5D1] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Chiffrement de lecteur BitLocker : outil de.) -- C:\Windows\SysNative\manage-bde.exe   [79872]
O44 - LFC:[MD5.FCD84C381E0140AF901E58D48882D26B] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\SysNative\IKEEXT.DLL   [853504]
O44 - LFC:[MD5.AD20BF819D5C52F36CAAAE33EFB2AC14] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\Windows\SysNative\KBDINHIN.DLL   [7168]
O44 - LFC:[MD5.AD20BF819D5C52F36CAAAE33EFB2AC14] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Hindi Keyboard Layout.) -- C:\Windows\System32\KBDINHIN.DLL   [7168]
O44 - LFC:[MD5.C3E6B50E73E2212C3A2768054F9A523B] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\Windows\SysNative\KBDINKAN.DLL   [7168]
O44 - LFC:[MD5.C3E6B50E73E2212C3A2768054F9A523B] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Kannada Keyboard Layout.) -- C:\Windows\System32\KBDINKAN.DLL   [7168]
O44 - LFC:[MD5.4179D7F2872EA3BCB6A2BE95340D2FAA] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Media Metadata Handler.) -- C:\Windows\SysNative\MediaMetadataHandler.dll   [345600]
O44 - LFC:[MD5.4179D7F2872EA3BCB6A2BE95340D2FAA] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Media Metadata Handler.) -- C:\Windows\System32\MediaMetadataHandler.dll   [345600]
O44 - LFC:[MD5.50D28F3F8B7C17056520C80A29EFE17C] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Programme d’installation des packs de langu.) -- C:\Windows\SysNative\lpksetup.exe   [653312]
O44 - LFC:[MD5.8CA406EF4805B7097D3E5CED50540A50] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Resource cache builder tool.) -- C:\Windows\SysNative\mcbuilder.exe   [272896]
O44 - LFC:[MD5.8CA406EF4805B7097D3E5CED50540A50] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Resource cache builder tool.) -- C:\Windows\System32\mcbuilder.exe   [272896]
O44 - LFC:[MD5.387E72E739E15E3D37907A86D9FF98E2] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\SysNative\KMSVC.DLL   [90624]
O44 - LFC:[MD5.4572948BA797E6EE4D33B5B55A98A099] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Swiss German Keyboard Layout.) -- C:\Windows\SysNative\KBDSG.DLL   [8192]
O44 - LFC:[MD5.4572948BA797E6EE4D33B5B55A98A099] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Swiss German Keyboard Layout.) -- C:\Windows\System32\KBDSG.DLL   [8192]
O44 - LFC:[MD5.6132CBC243CAB9B5462ED4419DAF3ECE] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Tajik Keyboard Layout.) -- C:\Windows\SysNative\KBDTAJIK.DLL   [7168]
O44 - LFC:[MD5.6132CBC243CAB9B5462ED4419DAF3ECE] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Tajik Keyboard Layout.) -- C:\Windows\System32\KBDTAJIK.DLL   [7168]
O44 - LFC:[MD5.AE3821CB2E8CF9F6FB04ECA83E7A3C34] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Uyghur Keyboard Layout.) -- C:\Windows\SysNative\KBDUGHR1.DLL   [7168]
O44 - LFC:[MD5.AE3821CB2E8CF9F6FB04ECA83E7A3C34] - 01/06/2013 - 20:07:59 ---A- . (.Microsoft Corporation - Uyghur Keyboard Layout.) -- C:\Windows\System32\KBDUGHR1.DLL   [7168]
O44 - LFC:[MD5.0B0A8CE57A798231C0B6E4F7ABBFE5D1] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - Chiffrement de lecteur BitLocker : outil de.) -- C:\Windows\System32\manage-bde.exe   [79872]
O44 - LFC:[MD5.FCD84C381E0140AF901E58D48882D26B] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL   [853504]
O44 - LFC:[MD5.C9F0E1BD74365A8771590E9008D22AB6] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\Drivers\ipfltdrv.sys   [82944]
O44 - LFC:[MD5.0705EFF5B42A9DB58548EEC3B26BB484] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\Drivers\kbdhid.sys   [33280]
O44 - LFC:[MD5.50D28F3F8B7C17056520C80A29EFE17C] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - Programme d’installation des packs de langu.) -- C:\Windows\System32\lpksetup.exe   [653312]
O44 - LFC:[MD5.387E72E739E15E3D37907A86D9FF98E2] - 01/06/2013 - 20:07:59 RSHAD . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL   [90624]
O44 - LFC:[MD5.F848764F21653CB94037945A76A59171] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Action PnP sans assistance.) -- C:\Windows\SysNative\PnPUnattend.exe   [62976]
O44 - LFC:[MD5.0BC9A864E8AC046A85613C451699D91A] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - DEC LK411-AJ Keyboard Layout.) -- C:\Windows\SysNative\kbdlk41a.dll   [8192]
O44 - LFC:[MD5.0BC9A864E8AC046A85613C451699D91A] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - DEC LK411-AJ Keyboard Layout.) -- C:\Windows\System32\kbdlk41a.dll   [8192]
O44 - LFC:[MD5.854D93A45BA56523FB73599BF0852604] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Fournisseur d’appareil mobile Microsoft Win.) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll   [224256]
O44 - LFC:[MD5.854D93A45BA56523FB73599BF0852604] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Fournisseur d’appareil mobile Microsoft Win.) -- C:\Windows\System32\PortableDeviceSyncProvider.dll   [224256]
O44 - LFC:[MD5.40308014B44489795DA132D3F2CC13DA] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Gestionnaire de routeur IP.) -- C:\Windows\SysNative\iprtrmgr.dll   [281088]
O44 - LFC:[MD5.40308014B44489795DA132D3F2CC13DA] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Gestionnaire de routeur IP.) -- C:\Windows\System32\iprtrmgr.dll   [281088]
O44 - LFC:[MD5.36917E19EDABCC37054C6F2FD27DB6FC] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - NLSBuild resource DLL.) -- C:\Windows\SysNative\nlsbres.dll   [69120]
O44 - LFC:[MD5.36917E19EDABCC37054C6F2FD27DB6FC] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - NLSBuild resource DLL.) -- C:\Windows\System32\nlsbres.dll   [69120]
O44 - LFC:[MD5.B73A6E4B319AFFE64582AC5C1801BB3F] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Name Resolution Proxy (NRP) RPC interface.) -- C:\Windows\SysNative\nrpsrv.dll   [15360]
O44 - LFC:[MD5.757BDC7D5870E23A83DAD7EB9132C6BE] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Nepali Keyboard Layout.) -- C:\Windows\SysNative\KBDNEPR.DLL   [7680]
O44 - LFC:[MD5.757BDC7D5870E23A83DAD7EB9132C6BE] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Nepali Keyboard Layout.) -- C:\Windows\System32\KBDNEPR.DLL   [7680]
O44 - LFC:[MD5.7FF8E121AFA05BDAB23B9FEDCDAB7A33] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - ODBC Driver Manager.) -- C:\Windows\SysNative\odbc32.dll   [720896]
O44 - LFC:[MD5.7FF8E121AFA05BDAB23B9FEDCDAB7A33] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - ODBC Driver Manager.) -- C:\Windows\System32\odbc32.dll   [720896]
O44 - LFC:[MD5.2F1A635997A0E86AAF99F974E72905B1] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Panneau de configuration Système ; onglet I.) -- C:\Windows\SysNative\netid.dll   [165376]
O44 - LFC:[MD5.2F1A635997A0E86AAF99F974E72905B1] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Panneau de configuration Système ; onglet I.) -- C:\Windows\System32\netid.dll   [165376]
O44 - LFC:[MD5.56840D971042FA448E9F75062BB26DAD] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - iTV Data Filters..) -- C:\Windows\SysNative\iTVData.dll   [282624]
O44 - LFC:[MD5.56840D971042FA448E9F75062BB26DAD] - 01/06/2013 - 20:07:58 ---A- . (.Microsoft Corporation - iTV Data Filters..) -- C:\Windows\System32\iTVData.dll   [282624]
O44 - LFC:[MD5.F848764F21653CB94037945A76A59171] - 01/06/2013 - 20:07:58 RSHAD . (.Microsoft Corporation - Action PnP sans assistance.) -- C:\Windows\System32\PnPUnattend.exe   [62976]
O44 - LFC:[MD5.09594D1089C523423B32A4229263F068] - 01/06/2013 - 20:07:58 RSHAD . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\Drivers\netbt.sys   [261632]
O44 - LFC:[MD5.B73A6E4B319AFFE64582AC5C1801BB3F] - 01/06/2013 - 20:07:58 RSHAD . (.Microsoft Corporation - Name Resolution Proxy (NRP) RPC interface.) -- C:\Windows\System32\nrpsrv.dll   [15360]
O44 - LFC:[MD5.81749E073AC5857B044A686B406E5244] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Bibliothèque d’API de cluster.) -- C:\Windows\SysNative\clusapi.dll   [314368]
O44 - LFC:[MD5.81749E073AC5857B044A686B406E5244] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Bibliothèque d’API de cluster.) -- C:\Windows\System32\clusapi.dll   [314368]
O44 - LFC:[MD5.DC8560036F238C904DC9FBCEA7796D54] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Centre de performances.) -- C:\Windows\SysNative\PerfCenterCPL.dll   [658432]
O44 - LFC:[MD5.DC8560036F238C904DC9FBCEA7796D54] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Centre de performances.) -- C:\Windows\System32\PerfCenterCPL.dll   [658432]
O44 - LFC:[MD5.263B26106606A010CF877472B535E4BB] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Client d’inscription des services de certif.) -- C:\Windows\SysNative\CertEnroll.dll   [1975296]
O44 - LFC:[MD5.263B26106606A010CF877472B535E4BB] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Client d’inscription des services de certif.) -- C:\Windows\System32\CertEnroll.dll   [1975296]
O44 - LFC:[MD5.E64D9EC8018C55873B40FDEE9DBEF5B3] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Composants API de l’appareil mobile Windows.) -- C:\Windows\SysNative\PortableDeviceApi.dll   [758272]
O44 - LFC:[MD5.E64D9EC8018C55873B40FDEE9DBEF5B3] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Composants API de l’appareil mobile Windows.) -- C:\Windows\System32\PortableDeviceApi.dll   [758272]
O44 - LFC:[MD5.1834B31C749B86DAC233BBBA1C03BC48] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - DLL du système de correspondance de couleur.) -- C:\Windows\SysNative\mscms.dll   [625664]
O44 - LFC:[MD5.1834B31C749B86DAC233BBBA1C03BC48] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - DLL du système de correspondance de couleur.) -- C:\Windows\System32\mscms.dll   [625664]
O44 - LFC:[MD5.AF1CCAFDAF72439B123A37BD6509F19E] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - DRM ActiveX Network Object.) -- C:\Windows\SysNative\msnetobj.dll   [325632]
O44 - LFC:[MD5.AF1CCAFDAF72439B123A37BD6509F19E] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - DRM ActiveX Network Object.) -- C:\Windows\System32\msnetobj.dll   [325632]
O44 - LFC:[MD5.60E8C91E58AB800C3879BE11DD8D6BD5] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Dossier de couplage des périphériques.) -- C:\Windows\SysNative\DevicePairingFolder.dll   [225280]
O44 - LFC:[MD5.60E8C91E58AB800C3879BE11DD8D6BD5] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Dossier de couplage des périphériques.) -- C:\Windows\System32\DevicePairingFolder.dll   [225280]
O44 - LFC:[MD5.85CD6797A4EDE1E3E0378DCBDF227CF0] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Extension GPEdit NAP.) -- C:\Windows\SysNative\napdsnap.dll   [72192]
O44 - LFC:[MD5.85CD6797A4EDE1E3E0378DCBDF227CF0] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Extension GPEdit NAP.) -- C:\Windows\System32\napdsnap.dll   [72192]
O44 - LFC:[MD5.DB55D6EA72B92C8F8268A5B795156433] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Extension shell de l’Afficheur de fichiers.) -- C:\Windows\SysNative\cabview.dll   [139264]
O44 - LFC:[MD5.DB55D6EA72B92C8F8268A5B795156433] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Extension shell de l’Afficheur de fichiers.) -- C:\Windows\System32\cabview.dll   [139264]
O44 - LFC:[MD5.862596399AAFD2A21DB2AF9270CD4F70] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fichier DLL d’interface du Planificateur de.) -- C:\Windows\SysNative\mstask.dll   [238080]
O44 - LFC:[MD5.862596399AAFD2A21DB2AF9270CD4F70] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fichier DLL d’interface du Planificateur de.) -- C:\Windows\System32\mstask.dll   [238080]
O44 - LFC:[MD5.B3BFBD758506ECB50C5804AAA76318F9] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur de l’interface Microsoft Trust.) -- C:\Windows\SysNative\cryptui.dll   [1065984]
O44 - LFC:[MD5.B3BFBD758506ECB50C5804AAA76318F9] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur de l’interface Microsoft Trust.) -- C:\Windows\System32\cryptui.dll   [1065984]
O44 - LFC:[MD5.1D5185A4C7E6695431AE4B55C3D7D333] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\Windows\SysNative\mswsock.dll   [326144]
O44 - LFC:[MD5.1D5185A4C7E6695431AE4B55C3D7D333] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\Windows\System32\mswsock.dll   [326144]
O44 - LFC:[MD5.8166A3DAFCB98790436F9B8B686C0608] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur d’état d’appareil mobile Micros.) -- C:\Windows\SysNative\PortableDeviceStatus.dll   [435712]
O44 - LFC:[MD5.8166A3DAFCB98790436F9B8B686C0608] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Fournisseur d’état d’appareil mobile Micros.) -- C:\Windows\System32\PortableDeviceStatus.dll   [435712]
O44 - LFC:[MD5.A190DA6546501CB4146BBCC0B6A3F48B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\SysNative\msiexec.exe   [128000]
O44 - LFC:[MD5.A190DA6546501CB4146BBCC0B6A3F48B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Installateur Windows®.) -- C:\Windows\System32\msiexec.exe   [128000]
O44 - LFC:[MD5.A08C010D859F8EB42BDD7E1D55B8CA27] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysNative\mscoree.dll   [444752]
O44 - LFC:[MD5.A08C010D859F8EB42BDD7E1D55B8CA27] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll   [444752]
O44 - LFC:[MD5.EF12B8385AA2849999008A977918F96B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\SysNative\msv1_0.dll   [312320]
O44 - LFC:[MD5.EF12B8385AA2849999008A977918F96B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll   [312320]
O44 - LFC:[MD5.82974D6A2FD19445CC5171FC378668A4] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Moteur de filtrage de base.) -- C:\Windows\SysNative\BFE.DLL   [705024]
O44 - LFC:[MD5.A302DA1404664CEF1D416ED4DE49EA2B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - NAP client config API helper.) -- C:\Windows\SysNative\NAPHLPR.DLL   [133632]
O44 - LFC:[MD5.A302DA1404664CEF1D416ED4DE49EA2B] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - NAP client config API helper.) -- C:\Windows\System32\NAPHLPR.DLL   [133632]
O44 - LFC:[MD5.234AFA322624B3203A2E720F08292B03] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Objet COM intra-processus utilisé par des c.) -- C:\Windows\SysNative\cscobj.dll   [240640]
O44 - LFC:[MD5.234AFA322624B3203A2E720F08292B03] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Objet COM intra-processus utilisé par des c.) -- C:\Windows\System32\cscobj.dll   [240640]
O44 - LFC:[MD5.F0C6A924CAED0D26E7150F4009384AA6] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Panneau de configuration Paramètres du Bure.) -- C:\Windows\SysNative\desk.cpl   [130048]
O44 - LFC:[MD5.F0C6A924CAED0D26E7150F4009384AA6] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Panneau de configuration Paramètres du Bure.) -- C:\Windows\System32\desk.cpl   [130048]
O44 - LFC:[MD5.1EAC1A8CA6874BF5B15E2EFB9A9A7B86] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v4.1.) -- C:\Windows\SysNative\msftedit.dll   [799744]
O44 - LFC:[MD5.1EAC1A8CA6874BF5B15E2EFB9A9A7B86] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Rich Text Edit Control, v4.1.) -- C:\Windows\System32\msftedit.dll   [799744]
O44 - LFC:[MD5.43D808F5D9E1A18E5EEB5EBC83969E4E] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Service client DHCP.) -- C:\Windows\SysNative\dhcpcore.dll   [317952]
O44 - LFC:[MD5.43D808F5D9E1A18E5EEB5EBC83969E4E] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Service client DHCP.) -- C:\Windows\System32\dhcpcore.dll   [317952]
O44 - LFC:[MD5.F17D1D393BBC69C5322FBFAFACA28C7F] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\SysNative\certprop.dll   [80384]
O44 - LFC:[MD5.54FFC9C8898113ACE189D4AA7199D2C1] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Service de protection Microsoft.) -- C:\Windows\SysNative\MPSSVC.dll   [828416]
O44 - LFC:[MD5.12597124DF5E54B932945D326F916C9A] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\Windows\SysNative\browseui.dll   [14336]
O44 - LFC:[MD5.12597124DF5E54B932945D326F916C9A] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\Windows\System32\browseui.dll   [14336]
O44 - LFC:[MD5.317CD1CE327B6520BF4EE007BCD39E61] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Utilitaire de service de fichier de démarra.) -- C:\Windows\bfsvc.exe   [71168]
O44 - LFC:[MD5.D6C7780A364C6BBACFA796BAB9F1B374] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Windows Cryptographic Primitives Library.) -- C:\Windows\SysNative\bcryptprimitives.dll   [298104]
O44 - LFC:[MD5.D6C7780A364C6BBACFA796BAB9F1B374] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Windows Cryptographic Primitives Library.) -- C:\Windows\System32\bcryptprimitives.dll   [298104]
O44 - LFC:[MD5.D1353DE9899D713C2875B9731DD2A489] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Windows Media Secure Content Provider.) -- C:\Windows\SysNative\msscp.dll   [641024]
O44 - LFC:[MD5.D1353DE9899D713C2875B9731DD2A489] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Windows Media Secure Content Provider.) -- C:\Windows\System32\msscp.dll   [641024]
O44 - LFC:[MD5.17E6B6B2ADA2630E01EAE9F9AC7A1D63] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Écran de veille Ballet de lignes.) -- C:\Windows\SysNative\Mystify.scr   [242688]
O44 - LFC:[MD5.17E6B6B2ADA2630E01EAE9F9AC7A1D63] - 01/06/2013 - 20:07:57 ---A- . (.Microsoft Corporation - Écran de veille Ballet de lignes.) -- C:\Windows\System32\Mystify.scr   [242688]
O44 - LFC:[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\Drivers\dfsc.sys   [102400]
O44 - LFC:[MD5.82974D6A2FD19445CC5171FC378668A4] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Moteur de filtrage de base.) -- C:\Windows\System32\BFE.DLL   [705024]
O44 - LFC:[MD5.D81D9E70B8A6DD14D42D7B4EFA65D5F2] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\Drivers\acpi.sys   [334208]
O44 - LFC:[MD5.A44B420D30BD56E145D6A2BC8768EC58] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Pilote du bus de prise en charge des chemin.) -- C:\Windows\System32\Drivers\mpio.sys   [155008]
O44 - LFC:[MD5.F17D1D393BBC69C5322FBFAFACA28C7F] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll   [80384]
O44 - LFC:[MD5.54FFC9C8898113ACE189D4AA7199D2C1] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Service de protection Microsoft.) -- C:\Windows\System32\MPSSVC.dll   [828416]
O44 - LFC:[MD5.DC722758B8261E1ABAFD31A3C0A66380] - 01/06/2013 - 20:07:57 RSHAD . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys   [140800]
O44 - LFC:[MD5.3B536A8BEC3B4F23FFDFD78B11A2AB93] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Auto Check Utility.) -- C:\Windows\SysNative\autochk.exe   [777728]
O44 - LFC:[MD5.3B536A8BEC3B4F23FFDFD78B11A2AB93] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Auto Check Utility.) -- C:\Windows\System32\autochk.exe   [777728]
O44 - LFC:[MD5.97A891E2BF7FDA830BCFC6269DA3F5E9] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - BlackBox DLL.) -- C:\Windows\SysNative\blackbox.dll   [840192]
O44 - LFC:[MD5.97A891E2BF7FDA830BCFC6269DA3F5E9] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - BlackBox DLL.) -- C:\Windows\System32\blackbox.dll   [840192]
O44 - LFC:[MD5.C6A4A29DD06F38D0045FBE3F3A1DBAD5] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Classe d’assistance de la plateforme de fil.) -- C:\Windows\SysNative\fphc.dll   [121344]
O44 - LFC:[MD5.C6A4A29DD06F38D0045FBE3F3A1DBAD5] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Classe d’assistance de la plateforme de fil.) -- C:\Windows\System32\fphc.dll   [121344]
O44 - LFC:[MD5.96C14589E835B99E5C3B1C35C738AF7E] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - DRM Migration DLL.) -- C:\Windows\SysNative\drmmgrtn.dll   [495104]
O44 - LFC:[MD5.96C14589E835B99E5C3B1C35C738AF7E] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - DRM Migration DLL.) -- C:\Windows\System32\drmmgrtn.dll   [495104]
O44 - LFC:[MD5.FAEE5377E2B48FAAF3702E73DB8D6F58] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - DiskPart.) -- C:\Windows\SysNative\diskpart.exe   [166400]
O44 - LFC:[MD5.FAEE5377E2B48FAAF3702E73DB8D6F58] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - DiskPart.) -- C:\Windows\System32\diskpart.exe   [166400]
O44 - LFC:[MD5.42A9CB6906D9A8BEDC83B57163E62924] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Extension de l’environnement Device Stage.) -- C:\Windows\SysNative\DXP.dll   [459776]
O44 - LFC:[MD5.DBEFD454F8318A0EF691FDD2EAAB44EB] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Fax Service.) -- C:\Windows\SysNative\FXSSVC.exe   [689152]
O44 - LFC:[MD5.D95AD0B6A27A14DCD31B3E5BAF635898] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Fournisseur de services de chiffrement Micr.) -- C:\Windows\SysNative\basecsp.dll   [166784]
O44 - LFC:[MD5.D95AD0B6A27A14DCD31B3E5BAF635898] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Fournisseur de services de chiffrement Micr.) -- C:\Windows\System32\basecsp.dll   [166784]
O44 - LFC:[MD5.1084AA52CCC324EA54C7121FA24C2221] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - GDI Client DLL.) -- C:\Windows\SysNative\gdi32.dll   [403968]
O44 - LFC:[MD5.1084AA52CCC324EA54C7121FA24C2221] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - GDI Client DLL.) -- C:\Windows\System32\gdi32.dll   [403968]
O44 - LFC:[MD5.A0524499F4C63CADA7E1529FC77F5DC1] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - HomeGroup Printing Support.) -- C:\Windows\SysNative\hgprint.dll   [235008]
O44 - LFC:[MD5.1A481461B004DBAC04C28CF70455A751] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Intel G711 CODEC.) -- C:\Windows\SysNative\g711codc.ax   [57856]
O44 - LFC:[MD5.1A481461B004DBAC04C28CF70455A751] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Intel G711 CODEC.) -- C:\Windows\System32\g711codc.ax   [57856]
O44 - LFC:[MD5.8888DC2ACEBFE75B3B52CE01AB2249C3] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Interface utilisateur avancée 802.3.) -- C:\Windows\SysNative\dot3ui.dll   [313344]
O44 - LFC:[MD5.8888DC2ACEBFE75B3B52CE01AB2249C3] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Interface utilisateur avancée 802.3.) -- C:\Windows\System32\dot3ui.dll   [313344]
O44 - LFC:[MD5.19E41CCCEE697CC9465396B370929792] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Microsoft  Fax Print Monitor.) -- C:\Windows\SysNative\FXSMON.dll   [41984]
O44 - LFC:[MD5.3B1829281D9273D00AEEA7F749A688F9] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Microsoft  Fax Unattend Setup Program.) -- C:\Windows\SysNative\FXSUNATD.exe   [18432]
O44 - LFC:[MD5.1B4A711265FEA91259553D7B4E83394B] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Microsoft® Remote Desktop Services Cryptogr.) -- C:\Windows\SysNative\tlscsp.dll   [73728]
O44 - LFC:[MD5.1B4A711265FEA91259553D7B4E83394B] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Microsoft® Remote Desktop Services Cryptogr.) -- C:\Windows\System32\tlscsp.dll   [73728]
O44 - LFC:[MD5.6A5C1A8AC0B572679361026D0E900420] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Panneau de configuration HomeGroup.) -- C:\Windows\SysNative\hgcpl.dll   [332288]
O44 - LFC:[MD5.6A5C1A8AC0B572679361026D0E900420] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Panneau de configuration HomeGroup.) -- C:\Windows\System32\hgcpl.dll   [332288]
O44 - LFC:[MD5.8956BA8E83F83ED3B54B292CEB42F219] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Panneau de configuration de Microsoft Windo.) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll   [726528]
O44 - LFC:[MD5.8956BA8E83F83ED3B54B292CEB42F219] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Panneau de configuration de Microsoft Windo.) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll   [726528]
O44 - LFC:[MD5.20FACCF61372C1C6BBAAA5CE413875EA] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Panneau de configuration du service de biom.) -- C:\Windows\SysNative\biocpl.dll   [504320]
O44 - LFC:[MD5.6F1AC6100B372F22709B24CFC9E2CC16] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Pare-feu Windows - Panneau de configuration.) -- C:\Windows\SysNative\FirewallControlPanel.dll   [934912]
O44 - LFC:[MD5.6F1AC6100B372F22709B24CFC9E2CC16] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Pare-feu Windows - Panneau de configuration.) -- C:\Windows\System32\FirewallControlPanel.dll   [934912]
O44 - LFC:[MD5.A6BF31A71B409DFA8CAC83159E1E2AFF] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Service de l’installateur ActiveX.) -- C:\Windows\SysNative\AxInstSv.dll   [114688]
O44 - LFC:[MD5.D7111757FCB56070D15D37DAD910CC35] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Synchronisation Microsoft Windows DXP..) -- C:\Windows\SysNative\DxpTaskSync.dll   [1457664]
O44 - LFC:[MD5.D7111757FCB56070D15D37DAD910CC35] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Synchronisation Microsoft Windows DXP..) -- C:\Windows\System32\DxpTaskSync.dll   [1457664]
O44 - LFC:[MD5.78027FCA53D99FFF446C47B30C33890C] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Éditeur Blb.) -- C:\Windows\SysNative\BlbEvents.dll   [52736]
O44 - LFC:[MD5.35E397D6CA8407B86D8A7972F0C90711] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\SysNative\eudcedit.exe   [359936]
O44 - LFC:[MD5.35E397D6CA8407B86D8A7972F0C90711] - 01/06/2013 - 20:07:56 ---A- . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\System32\eudcedit.exe   [359936]
O44 - LFC:[MD5.345BC7CADBE91E78B52497EF3B0D910B] - 01/06/2013 - 20:07:56 ---A- . (.Windows (R) Codename Longhorn DDK provider - Services de gestion des polices.) -- C:\Windows\SysNative\fms.dll   [116224]
O44 - LFC:[MD5.345BC7CADBE91E78B52497EF3B0D910B] - 01/06/2013 - 20:07:56 ---A- . (.Windows (R) Codename Longhorn DDK provider - Services de gestion des polices.) -- C:\Windows\System32\fms.dll   [116224]
O44 - LFC:[MD5.42A9CB6906D9A8BEDC83B57163E62924] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Extension de l’environnement Device Stage.) -- C:\Windows\System32\DXP.dll   [459776]
O44 - LFC:[MD5.DBEFD454F8318A0EF691FDD2EAAB44EB] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Fax Service.) -- C:\Windows\System32\FXSSVC.exe   [689152]
O44 - LFC:[MD5.8B0E40E7E8BBF5ACF390465609D89FF1] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys   [76800]
O44 - LFC:[MD5.A0524499F4C63CADA7E1529FC77F5DC1] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - HomeGroup Printing Support.) -- C:\Windows\System32\hgprint.dll   [235008]
O44 - LFC:[MD5.19E41CCCEE697CC9465396B370929792] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Microsoft  Fax Print Monitor.) -- C:\Windows\System32\FXSMON.dll   [41984]
O44 - LFC:[MD5.3B1829281D9273D00AEEA7F749A688F9] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Microsoft  Fax Unattend Setup Program.) -- C:\Windows\System32\FXSUNATD.exe   [18432]
O44 - LFC:[MD5.20FACCF61372C1C6BBAAA5CE413875EA] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Panneau de configuration du service de biom.) -- C:\Windows\System32\biocpl.dll   [504320]
O44 - LFC:[MD5.A6BF31A71B409DFA8CAC83159E1E2AFF] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Service de l’installateur ActiveX.) -- C:\Windows\System32\AxInstSv.dll   [114688]
O44 - LFC:[MD5.9592090A7E2B61CD582B612B6DF70536] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\Drivers\hidusb.sys   [30208]
O44 - LFC:[MD5.78027FCA53D99FFF446C47B30C33890C] - 01/06/2013 - 20:07:56 RSHAD . (.Microsoft Corporation - Éditeur Blb.) -- C:\Windows\System32\BlbEvents.dll   [52736]
O44 - LFC:[MD5.96DB78C9C50CEED9DA5050EFFEE272A2] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - API UPnP de Point de contrôle.) -- C:\Windows\SysNative\upnp.dll   [264192]
O44 - LFC:[MD5.96DB78C9C50CEED9DA5050EFFEE272A2] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - API UPnP de Point de contrôle.) -- C:\Windows\System32\upnp.dll   [264192]
O44 - LFC:[MD5.DAAF9C77603F77988D3B0E74400F5038] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Application Système du Panneau de configura.) -- C:\Windows\SysNative\sysdm.cpl   [352768]
O44 - LFC:[MD5.DAAF9C77603F77988D3B0E74400F5038] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Application Système du Panneau de configura.) -- C:\Windows\System32\sysdm.cpl   [352768]
O44 - LFC:[MD5.B4CE0CAB186EBF4DF54BD34B4F0C0A06] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - NTFS Utility DLL.) -- C:\Windows\SysNative\untfs.dll   [403968]
O44 - LFC:[MD5.B4CE0CAB186EBF4DF54BD34B4F0C0A06] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - NTFS Utility DLL.) -- C:\Windows\System32\untfs.dll   [403968]
O44 - LFC:[MD5.534D84434D9DB1D1E1E865F64E52AA8E] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Page de propriétés des versions précédentes.) -- C:\Windows\SysNative\twext.dll   [172544]
O44 - LFC:[MD5.534D84434D9DB1D1E1E865F64E52AA8E] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Page de propriétés des versions précédentes.) -- C:\Windows\System32\twext.dll   [172544]
O44 - LFC:[MD5.CFA6B4D4A70D67C6387C29FA6FD703D0] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Panneau de configuration Personnalisation.) -- C:\Windows\SysNative\themecpl.dll   [2193920]
O44 - LFC:[MD5.CFA6B4D4A70D67C6387C29FA6FD703D0] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Panneau de configuration Personnalisation.) -- C:\Windows\System32\themecpl.dll   [2193920]
O44 - LFC:[MD5.29B19D564600319FD3746C48F888717C] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Utilitaire Windows pour les fuseaux horaire.) -- C:\Windows\SysNative\tzutil.exe   [58368]
O44 - LFC:[MD5.29B19D564600319FD3746C48F888717C] - 01/06/2013 - 20:07:55 ---A- . (.Microsoft Corporation - Utilitaire Windows pour les fuseaux horaire.) -- C:\Windows\System32\tzutil.exe   [58368]
O44 - LFC:[MD5.D11C783E3EF9A3C52C0EBE83CC5000E9] - 01/06/2013 - 20:07:55 RSHAD . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys   [59392]
O44 - LFC:[MD5.3566A8DAAFA27AF944F5D705EAA64894] - 01/06/2013 - 20:07:55 RSHAD . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\Windows\System32\Drivers\tunnel.sys   [125440]
O44 - LFC:[MD5.FF4232A1A64012BAA1FD97C7B67DF593] - 01/06/2013 - 20:07:55 RSHAD . (.Microsoft Corporation - UDF File System Driver.) -- C:\Windows\System32\Drivers\udfs.sys   [328192]
O44 - LFC:[MD5.292A8E03B3FCE04E39B5BE9B14132030] - 01/06/2013 - 20:07:55 RSHAD . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\Drivers\USBCAMD2.sys   [32896]
O44 - LFC:[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\SysNative\winlogon.exe   [390656]
O44 - LFC:[MD5.C4DF22EC976FF51A8A4057BE3C3D3F03] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Gestion de st.) -- C:\Windows\SysNative\wlangpui.dll   [475136]
O44 - LFC:[MD5.C4DF22EC976FF51A8A4057BE3C3D3F03] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Gestion de st.) -- C:\Windows\System32\wlangpui.dll   [475136]
O44 - LFC:[MD5.0015ACFBBDD164A8A730009908868CA7] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Pilote de spouleur Windows.) -- C:\Windows\SysNative\winspool.drv   [442368]
O44 - LFC:[MD5.0015ACFBBDD164A8A730009908868CA7] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Pilote de spouleur Windows.) -- C:\Windows\System32\winspool.drv   [442368]
O44 - LFC:[MD5.6F3F29905F0EC4CE22C1FD8ACBF6C6DE] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Résultats de Mise à niveau express.) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe   [294912]
O44 - LFC:[MD5.F8E722E173C976353881024088794450] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - WMDM Service Provider for Windows Portable.) -- C:\Windows\SysNative\WPDSp.dll   [431104]
O44 - LFC:[MD5.F8E722E173C976353881024088794450] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - WMDM Service Provider for Windows Portable.) -- C:\Windows\System32\WPDSp.dll   [431104]
O44 - LFC:[MD5.AE57DB2CCE48C85D0AD1EB38AE67EAA3] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - WMPSrcWp Module.) -- C:\Windows\SysNative\wmpsrcwp.dll   [223232]
O44 - LFC:[MD5.AE57DB2CCE48C85D0AD1EB38AE67EAA3] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - WMPSrcWp Module.) -- C:\Windows\System32\wmpsrcwp.dll   [223232]
O44 - LFC:[MD5.3BDCBB29D727C49DC3E3256253467281] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Windows Media DRM SDK DLL.) -- C:\Windows\SysNative\wmdrmsdk.dll   [781312]
O44 - LFC:[MD5.3BDCBB29D727C49DC3E3256253467281] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Windows Media DRM SDK DLL.) -- C:\Windows\System32\wmdrmsdk.dll   [781312]
O44 - LFC:[MD5.A648C4A06DE367065B24056D067B4460] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Windows Wireless LAN 802.11 MSM DLL.) -- C:\Windows\SysNative\wlanmsm.dll   [414720]
O44 - LFC:[MD5.A648C4A06DE367065B24056D067B4460] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Windows Wireless LAN 802.11 MSM DLL.) -- C:\Windows\System32\wlanmsm.dll   [414720]
O44 - LFC:[MD5.3C91392D448F6E5D525A85B7550D8BA9] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Workstation Service Client DLL.) -- C:\Windows\SysNative\wkscli.dll   [71680]
O44 - LFC:[MD5.3C91392D448F6E5D525A85B7550D8BA9] - 01/06/2013 - 20:07:52 ---A- . (.Microsoft Corporation - Workstation Service Client DLL.) -- C:\Windows\System32\wkscli.dll   [71680]
O44 - LFC:[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - 01/06/2013 - 20:07:52 RSHAD . (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\winlogon.exe   [390656]
O44 - LFC:[MD5.6F3F29905F0EC4CE22C1FD8ACBF6C6DE] - 01/06/2013 - 20:07:52 RSHAD . (.Microsoft Corporation - Résultats de Mise à niveau express.) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe   [294912]
O44 - LFC:[MD5.7373DE70D405FF08DC53336B83989138] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Accès distant PPP EAP-TLS.) -- C:\Windows\SysNative\rastls.dll   [424448]
O44 - LFC:[MD5.7373DE70D405FF08DC53336B83989138] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Accès distant PPP EAP-TLS.) -- C:\Windows\System32\rastls.dll   [424448]
O44 - LFC:[MD5.9EDB0A8337529D69F96DD1B2E70FA2F7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Afficher les réseaux disponibles.) -- C:\Windows\SysNative\VAN.dll   [691200]
O44 - LFC:[MD5.9EDB0A8337529D69F96DD1B2E70FA2F7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Afficher les réseaux disponibles.) -- C:\Windows\System32\VAN.dll   [691200]
O44 - LFC:[MD5.B6F9B45112E56992EF3EFA369FB7F047] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Bibliothèque d’utilitaires du service de di.) -- C:\Windows\SysNative\vdsutil.dll   [185856]
O44 - LFC:[MD5.F1B205F932F62F94506A5F332C895DAF] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - DLL de l’API des services Web pour périphér.) -- C:\Windows\SysNative\WSDApi.dll   [577536]
O44 - LFC:[MD5.F1B205F932F62F94506A5F332C895DAF] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - DLL de l’API des services Web pour périphér.) -- C:\Windows\System32\WSDApi.dll   [577536]
O44 - LFC:[MD5.F7E418D5BB71996347A8C431E6DC778C] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Interface utilisateur par défaut du scanneu.) -- C:\Windows\SysNative\wiadefui.dll   [462336]
O44 - LFC:[MD5.F7E418D5BB71996347A8C431E6DC778C] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Interface utilisateur par défaut du scanneu.) -- C:\Windows\System32\wiadefui.dll   [462336]
O44 - LFC:[MD5.4A3B1F516F2CD426CA0562DDABE3C6B9] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Microsoft Wave MSP.) -- C:\Windows\SysNative\wavemsp.dll   [255488]
O44 - LFC:[MD5.4A3B1F516F2CD426CA0562DDABE3C6B9] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Microsoft Wave MSP.) -- C:\Windows\System32\wavemsp.dll   [255488]
O44 - LFC:[MD5.ED78427259134C63ED69804D2132B86C] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Moteur du client de l’Éditeur de configurat.) -- C:\Windows\SysNative\scecli.dll   [232960]
O44 - LFC:[MD5.ED78427259134C63ED69804D2132B86C] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Moteur du client de l’Éditeur de configurat.) -- C:\Windows\System32\scecli.dll   [232960]
O44 - LFC:[MD5.F9959237F106F2B2609E61A290C0652E] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - PRS CPL.) -- C:\Windows\SysNative\werconcpl.dll   [1281024]
O44 - LFC:[MD5.1C8A7466E79B306C6D703FE8A6AC5612] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Pilote VfW MM pour périphériques de capture.) -- C:\Windows\SysNative\vfwwdm32.dll   [68096]
O44 - LFC:[MD5.1C8A7466E79B306C6D703FE8A6AC5612] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Pilote VfW MM pour périphériques de capture.) -- C:\Windows\System32\vfwwdm32.dll   [68096]
O44 - LFC:[MD5.C6C83C0DF40E11FA1F06625E95E41DE7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - ProQuota.) -- C:\Windows\SysNative\proquota.exe   [31744]
O44 - LFC:[MD5.C6C83C0DF40E11FA1F06625E95E41DE7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - ProQuota.) -- C:\Windows\System32\proquota.exe   [31744]
O44 - LFC:[MD5.3DB5A1EACE7F3049ECC49FA64461E254] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\SysNative\rstrui.exe   [296960]
O44 - LFC:[MD5.0611473C1AD9E2D991CD9482068417F7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Runtime d’appel de procédure distante.) -- C:\Windows\SysNative\rpcrt4.dll   [1219584]
O44 - LFC:[MD5.0611473C1AD9E2D991CD9482068417F7] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Runtime d’appel de procédure distante.) -- C:\Windows\System32\rpcrt4.dll   [1219584]
O44 - LFC:[MD5.BCB1310604AA415C4508708975B3931E] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Service WSMan.) -- C:\Windows\SysNative\WsmSvc.dll   [2018304]
O44 - LFC:[MD5.BCB1310604AA415C4508708975B3931E] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Service WSMan.) -- C:\Windows\System32\WsmSvc.dll   [2018304]
O44 - LFC:[MD5.8D6B481601D01A456E75C3210F1830BE] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\SysNative\vds.exe   [533504]
O44 - LFC:[MD5.6011714C8C5C55CBFFAD24D61E879FBD] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Service journal des événements.) -- C:\Windows\SysNative\wevtsvc.dll   [1646080]
O44 - LFC:[MD5.F06BB4E336EA57511FDBAFAFCC47DE62] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Système de propriétés Microsoft.) -- C:\Windows\SysNative\propsys.dll   [1212416]
O44 - LFC:[MD5.F06BB4E336EA57511FDBAFAFCC47DE62] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Système de propriétés Microsoft.) -- C:\Windows\System32\propsys.dll   [1212416]
O44 - LFC:[MD5.1A0882C441AB2A685DAF076FF15F6482] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Utilitaire de réenregistrement de Performan.) -- C:\Windows\SysNative\relog.exe   [43008]
O44 - LFC:[MD5.1A0882C441AB2A685DAF076FF15F6482] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Utilitaire de réenregistrement de Performan.) -- C:\Windows\System32\relog.exe   [43008]
O44 - LFC:[MD5.7368A2AFD46E5A4481D1DE9D14848EDD] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Connect Now - Service de registre d.) -- C:\Windows\SysNative\wcncsvc.dll   [367104]
O44 - LFC:[MD5.7368A2AFD46E5A4481D1DE9D14848EDD] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Connect Now - Service de registre d.) -- C:\Windows\System32\wcncsvc.dll   [367104]
O44 - LFC:[MD5.A6DE0C14462B422D24FCB88AF4C3D67B] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe   [305152]
O44 - LFC:[MD5.A6DE0C14462B422D24FCB88AF4C3D67B] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\System32\RMActivate_ssp_isv.exe   [305152]
O44 - LFC:[MD5.BCC2CE468E24159FFEF2134D6566D117] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\Windows\SysNative\secproc_ssp_isv.dll   [121856]
O44 - LFC:[MD5.BCC2CE468E24159FFEF2134D6566D117] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\Windows\System32\secproc_ssp_isv.dll   [121856]
O44 - LFC:[MD5.C55516D98DD5D8F0153C2A9B4227DA86] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Web Services Runtime.) -- C:\Windows\SysNative\webservices.dll   [1158656]
O44 - LFC:[MD5.C55516D98DD5D8F0153C2A9B4227DA86] - 01/06/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Windows Web Services Runtime.) -- C:\Windows\System32\webservices.dll   [1158656]
O44 - LFC:[MD5.B6F9B45112E56992EF3EFA369FB7F047] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Bibliothèque d’utilitaires du service de di.) -- C:\Windows\System32\vdsutil.dll   [185856]
O44 - LFC:[MD5.F9959237F106F2B2609E61A290C0652E] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - PRS CPL.) -- C:\Windows\System32\werconcpl.dll   [1281024]
O44 - LFC:[MD5.253F38D0D7074C02FF8DEB9836C97D2B] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\Windows\System32\Drivers\scfilter.sys   [29696]
O44 - LFC:[MD5.A255814907C89BE58B79EF2F189B843B] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\Windows\System32\Drivers\volmgrx.sys   [363392]
O44 - LFC:[MD5.34ED295FA0121C241BFEF24764FC4520] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\Drivers\rdyboost.sys   [213888]
O44 - LFC:[MD5.3DB5A1EACE7F3049ECC49FA64461E254] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\System32\rstrui.exe   [296960]
O44 - LFC:[MD5.8D6B481601D01A456E75C3210F1830BE] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\System32\vds.exe   [533504]
O44 - LFC:[MD5.6011714C8C5C55CBFFAD24D61E879FBD] - 01/06/2013 - 20:07:51 RSHAD . (.Microsoft Corporation - Service journal des événements.) -- C:\Windows\System32\wevtsvc.dll   [1646080]
O44 - LFC:[MD5.6A84E68B538B8B04608BF2F0D426CE6F] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Accès distant PPP CHAP.) -- C:\Windows\SysNative\raschap.dll   [337920]
O44 - LFC:[MD5.6A84E68B538B8B04608BF2F0D426CE6F] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Accès distant PPP CHAP.) -- C:\Windows\System32\raschap.dll   [337920]
O44 - LFC:[MD5.FF2B106909EED48C536DA04742C0324A] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - DLL de l’utilitaire d’indexation du contenu.) -- C:\Windows\SysNative\Query.dll   [2055680]
O44 - LFC:[MD5.FF2B106909EED48C536DA04742C0324A] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - DLL de l’utilitaire d’indexation du contenu.) -- C:\Windows\System32\Query.dll   [2055680]
O44 - LFC:[MD5.582AC6D9873E31DFA28A4547270862DD] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\Windows\SysNative\QAGENTRT.DLL   [476160]
O44 - LFC:[MD5.FE536088C8A94F0E6AEDAE34342B056E] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Fournisseur WMI du client de quarantaine.) -- C:\Windows\SysNative\QCLIPROV.DLL   [79872]
O44 - LFC:[MD5.FE536088C8A94F0E6AEDAE34342B056E] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Fournisseur WMI du client de quarantaine.) -- C:\Windows\System32\QCLIPROV.DLL   [79872]
O44 - LFC:[MD5.B24450E38722F69F338533A36ECFFC29] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Moteur de calcul des mesures d’analyse de f.) -- C:\Windows\SysNative\RacEngn.dll   [1556992]
O44 - LFC:[MD5.B24450E38722F69F338533A36ECFFC29] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Moteur de calcul des mesures d’analyse de f.) -- C:\Windows\System32\RacEngn.dll   [1556992]
O44 - LFC:[MD5.6B851E682A36453E1B1EE297FFB6E2AB] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Proxy de l’agent de quarantaine.) -- C:\Windows\SysNative\QAGENT.DLL   [266240]
O44 - LFC:[MD5.6B851E682A36453E1B1EE297FFB6E2AB] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Proxy de l’agent de quarantaine.) -- C:\Windows\System32\QAGENT.DLL   [266240]
O44 - LFC:[MD5.1EA7969E3271CBC59E1730697DC74682] - 01/06/2013 - 20:07:50 ---A- . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\SysNative\qmgr.dll   [849920]
O44 - LFC:[MD5.582AC6D9873E31DFA28A4547270862DD] - 01/06/2013 - 20:07:50 RSHAD . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\Windows\System32\QAGENTRT.DLL   [476160]
O44 - LFC:[MD5.1EA7969E3271CBC59E1730697DC74682] - 01/06/2013 - 20:07:50 RSHAD . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll   [849920]
O44 - LFC:[MD5.AAF932B4011D14052955D4B212A4DA8D] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\SysNative\shsvcs.dll   [370688]
O44 - LFC:[MD5.AAF932B4011D14052955D4B212A4DA8D] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O44 - LFC:[MD5.9C75CB8B98610F0CD85D99BB5876308B] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Microsoft SQL Mobile.) -- C:\Windows\SysNative\sqlcese30.dll   [446976]
O44 - LFC:[MD5.9C75CB8B98610F0CD85D99BB5876308B] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Microsoft SQL Mobile.) -- C:\Windows\System32\sqlcese30.dll   [446976]
O44 - LFC:[MD5.2A796B7E73673B960B1EA963A70DBC4F] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Module PnP de SysPrep.) -- C:\Windows\SysNative\sppnp.dll   [102400]
O44 - LFC:[MD5.826E2C7B96B024A203D237E7AFB5A81C] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - OPK Sysprep Plugin.) -- C:\Windows\SysNative\spopk.dll   [18944]
O44 - LFC:[MD5.826E2C7B96B024A203D237E7AFB5A81C] - 01/06/2013 - 20:07:49 ---A- . (.Microsoft Corporation - OPK Sysprep Plugin.) -- C:\Windows\System32\spopk.dll   [18944]
O44 - LFC:[MD5.2A796B7E73673B960B1EA963A70DBC4F] - 01/06/2013 - 20:07:49 RSHAD . (.Microsoft Corporation - Module PnP de SysPrep.) -- C:\Windows\System32\sppnp.dll   [102400]
O44 - LFC:[MD5.884415BD4269C02EAF8E2613BF85500D] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - ASN.1 Runtime APIs.) -- C:\Windows\SysNative\msasn1.dll   [46592]
O44 - LFC:[MD5.884415BD4269C02EAF8E2613BF85500D] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - ASN.1 Runtime APIs.) -- C:\Windows\System32\msasn1.dll   [46592]
O44 - LFC:[MD5.4659DD732B02A7593469882ACEF1BFF6] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Assistant Connexion à des lecteurs ou des e.) -- C:\Windows\SysNative\netplwiz.dll   [193024]
O44 - LFC:[MD5.4659DD732B02A7593469882ACEF1BFF6] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Assistant Connexion à des lecteurs ou des e.) -- C:\Windows\System32\netplwiz.dll   [193024]
O44 - LFC:[MD5.B84CB0F6C83F5D515570334AC505720C] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Capture vidéo du flux WDM.) -- C:\Windows\SysNative\Kswdmcap.ax   [133120]
O44 - LFC:[MD5.B84CB0F6C83F5D515570334AC505720C] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Capture vidéo du flux WDM.) -- C:\Windows\System32\Kswdmcap.ax   [133120]
O44 - LFC:[MD5.5CE9241C030C004FF92037DF8F7401B0] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Codec vidéo YUV Intel Indeo(R).) -- C:\Windows\SysNative\iyuv_32.dll   [54272]
O44 - LFC:[MD5.5CE9241C030C004FF92037DF8F7401B0] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Codec vidéo YUV Intel Indeo(R).) -- C:\Windows\System32\iyuv_32.dll   [54272]
O44 - LFC:[MD5.9E3C848BBDB5521271B3B038ECE8CC88] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de nœud MMC.) -- C:\Windows\SysNative\mmcndmgr.dll   [3205120]
O44 - LFC:[MD5.9E3C848BBDB5521271B3B038ECE8CC88] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - DLL du Gestionnaire de nœud MMC.) -- C:\Windows\System32\mmcndmgr.dll   [3205120]
O44 - LFC:[MD5.0F02C3FF97EAB0D8295854D6C4F82BEE] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Extensible Performance Counter Shim.) -- C:\Windows\SysNative\netfxperf.dll   [48976]
O44 - LFC:[MD5.0F02C3FF97EAB0D8295854D6C4F82BEE] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Extensible Performance Counter Shim.) -- C:\Windows\System32\netfxperf.dll   [48976]
O44 - LFC:[MD5.67C5556E2A9F0F9FFB5FC40A8761FABB] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Inter.) -- C:\Windows\SysNative\msieftp.dll   [335360]
O44 - LFC:[MD5.67C5556E2A9F0F9FFB5FC40A8761FABB] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Inter.) -- C:\Windows\System32\msieftp.dll   [335360]
O44 - LFC:[MD5.A09DB2FEA18B9652F8D20B5CAEB5A44E] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\Windows\SysNative\KBDGEO.DLL   [6656]
O44 - LFC:[MD5.A09DB2FEA18B9652F8D20B5CAEB5A44E] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Georgian Keyboard Layout.) -- C:\Windows\System32\KBDGEO.DLL   [6656]
O44 - LFC:[MD5.BC566D17914B07ABAAB3A5A385CC3300] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Gestionnaire de réseau local Microsoft®.) -- C:\Windows\SysNative\ntlanman.dll   [129536]
O44 - LFC:[MD5.BC566D17914B07ABAAB3A5A385CC3300] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Gestionnaire de réseau local Microsoft®.) -- C:\Windows\System32\ntlanman.dll   [129536]
O44 - LFC:[MD5.066DA0F1237E3AFD48792739EEEEC03D] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Installation du composant facultatif Window.) -- C:\Windows\SysNative\ocsetup.exe   [186368]
O44 - LFC:[MD5.066DA0F1237E3AFD48792739EEEEC03D] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Installation du composant facultatif Window.) -- C:\Windows\System32\ocsetup.exe   [186368]
O44 - LFC:[MD5.46302663F2E25F9877A10BC9F1E619D6] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\Windows\SysNative\KBDINMAR.DLL   [7168]
O44 - LFC:[MD5.46302663F2E25F9877A10BC9F1E619D6] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Marathi Keyboard Layout.) -- C:\Windows\System32\KBDINMAR.DLL   [7168]
O44 - LFC:[MD5.3C6085842F154C350213511B0D3E381A] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\Windows\SysNative\KBDMON.DLL   [7168]
O44 - LFC:[MD5.3C6085842F154C350213511B0D3E381A] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Mongolian Keyboard Layout.) -- C:\Windows\System32\KBDMON.DLL   [7168]
O44 - LFC:[MD5.8FFE297B8449386E7B6851458B6E474E] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Net Logon Client DLL.) -- C:\Windows\SysNative\logoncli.dll   [186880]
O44 - LFC:[MD5.8FFE297B8449386E7B6851458B6E474E] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Net Logon Client DLL.) -- C:\Windows\System32\logoncli.dll   [186880]
O44 - LFC:[MD5.93BF245D8A1DB0BF1C8A3FFDFF3E2C83] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - ODBC Driver Configuration Program.) -- C:\Windows\SysNative\odbcconf.dll   [53248]
O44 - LFC:[MD5.93BF245D8A1DB0BF1C8A3FFDFF3E2C83] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - ODBC Driver Configuration Program.) -- C:\Windows\System32\odbcconf.dll   [53248]
O44 - LFC:[MD5.649F5F47EA85C08AEE9353CEEF810233] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Panneau de commande audio.) -- C:\Windows\SysNative\mmsys.cpl   [850944]
O44 - LFC:[MD5.649F5F47EA85C08AEE9353CEEF810233] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Panneau de commande audio.) -- C:\Windows\System32\mmsys.cpl   [850944]
O44 - LFC:[MD5.4B1D11E789F27C99B7D18F7765E256C1] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Portuguese Keyboard Layout.) -- C:\Windows\SysNative\KBDPO.DLL   [7680]
O44 - LFC:[MD5.4B1D11E789F27C99B7D18F7765E256C1] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Portuguese Keyboard Layout.) -- C:\Windows\System32\KBDPO.DLL   [7680]
O44 - LFC:[MD5.6DFF455CE6D7338F9146578BE21594C2] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Swiss French Keyboard Layout.) -- C:\Windows\SysNative\KBDSF.DLL   [7680]
O44 - LFC:[MD5.6DFF455CE6D7338F9146578BE21594C2] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Swiss French Keyboard Layout.) -- C:\Windows\System32\KBDSF.DLL   [7680]
O44 - LFC:[MD5.76CB184041C6D21838BC1DF903E3C155] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Windows Optional Component Setup API.) -- C:\Windows\SysNative\ocsetapi.dll   [161792]
O44 - LFC:[MD5.76CB184041C6D21838BC1DF903E3C155] - 01/06/2013 - 20:07:48 ---A- . (.Microsoft Corporation - Windows Optional Component Setup API.) -- C:\Windows\System32\ocsetapi.dll   [161792]
O44 - LFC:[MD5.E6F0F82788E8BD0F7A616350EFA0761C] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\SysNative\actxprxy.dll   [958464]
O44 - LFC:[MD5.E6F0F82788E8BD0F7A616350EFA0761C] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - ActiveX Interface Marshaling Library.) -- C:\Windows\System32\actxprxy.dll   [958464]
O44 - LFC:[MD5.04FAFCAF36632E03B6BFC48275178349] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Auto File System Format Utility.) -- C:\Windows\SysNative\autofmt.exe   [763904]
O44 - LFC:[MD5.04FAFCAF36632E03B6BFC48275178349] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Auto File System Format Utility.) -- C:\Windows\System32\autofmt.exe   [763904]
O44 - LFC:[MD5.6140A1493EC6FFFE2DF350EA0E9A7D8B] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Bibliothèque d’interface utilisateur de pro.) -- C:\Windows\SysNative\ncryptui.dll   [66048]
O44 - LFC:[MD5.6140A1493EC6FFFE2DF350EA0E9A7D8B] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Bibliothèque d’interface utilisateur de pro.) -- C:\Windows\System32\ncryptui.dll   [66048]
O44 - LFC:[MD5.92DBF0A4C9239169010FC6E07859C82E] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Centre de maintenance.) -- C:\Windows\SysNative\ActionCenter.dll   [780800]
O44 - LFC:[MD5.92DBF0A4C9239169010FC6E07859C82E] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Centre de maintenance.) -- C:\Windows\System32\ActionCenter.dll   [780800]
O44 - LFC:[MD5.277BBC7E1AA1EE957F573A10ECA7EF3A] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\SysNative\gpsvc.dll   [777728]
O44 - LFC:[MD5.2477A28081BDAEE622CF045ACF8EE124] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Configuration Manager DLL.) -- C:\Windows\SysNative\cfgmgr32.dll   [207872]
O44 - LFC:[MD5.2477A28081BDAEE622CF045ACF8EE124] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Configuration Manager DLL.) -- C:\Windows\System32\cfgmgr32.dll   [207872]
O44 - LFC:[MD5.50F739538EF014B2E7EC59431749D838] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\SysNative\mstsc.exe   [1116672]
O44 - LFC:[MD5.50F739538EF014B2E7EC59431749D838] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\System32\mstsc.exe   [1116672]
O44 - LFC:[MD5.507D5567A0A4EE86C4B0CE2CE1777025] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - DLL du service d’impression Internet.) -- C:\Windows\SysNative\inetpp.dll   [166912]
O44 - LFC:[MD5.4C2C4640BF23AAFCF90519E0F34436CE] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\SysNative\DeviceCenter.dll   [508928]
O44 - LFC:[MD5.4C2C4640BF23AAFCF90519E0F34436CE] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\System32\DeviceCenter.dll   [508928]
O44 - LFC:[MD5.EB3E45B0F5C5743863C86F38E8CDC151] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Générateur/exécuteur de la file d’attente d.) -- C:\Windows\SysNative\ActionQueue.dll   [213504]
O44 - LFC:[MD5.CFB8C673F9188F99466E76C6972191E0] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Hardware Abstraction Layer DLL.) -- C:\Windows\SysNative\hal.dll   [263040]
O44 - LFC:[MD5.74C6DA5522F420C394AE34B2D3D677E3] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Installateur de profils Microsoft Connectio.) -- C:\Windows\SysNative\cmstp.exe   [92160]
O44 - LFC:[MD5.74C6DA5522F420C394AE34B2D3D677E3] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Installateur de profils Microsoft Connectio.) -- C:\Windows\System32\cmstp.exe   [92160]
O44 - LFC:[MD5.C8994E2703410F8DFE19DE5BF82994C0] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Interface utilisateur du dossier Mes docume.) -- C:\Windows\SysNative\mydocs.dll   [143360]
O44 - LFC:[MD5.C8994E2703410F8DFE19DE5BF82994C0] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Interface utilisateur du dossier Mes docume.) -- C:\Windows\System32\mydocs.dll   [143360]
O44 - LFC:[MD5.B94D3DACCF5882B697A1C53D00BE643A] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Microsoft UYVY Video Decompressor.) -- C:\Windows\SysNative\msyuv.dll   [25600]
O44 - LFC:[MD5.B94D3DACCF5882B697A1C53D00BE643A] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Microsoft UYVY Video Decompressor.) -- C:\Windows\System32\msyuv.dll   [25600]
O44 - LFC:[MD5.FA43D418BC945D27D0625B697B8442B5] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Microsoft® Cabinet File API.) -- C:\Windows\SysNative\cabinet.dll   [94720]
O44 - LFC:[MD5.FA43D418BC945D27D0625B697B8442B5] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Microsoft® Cabinet File API.) -- C:\Windows\System32\cabinet.dll   [94720]
O44 - LFC:[MD5.3B6928BC39E5530CEAD1E99269E7B1EE] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Net Command.) -- C:\Windows\SysNative\net1.exe   [152064]
O44 - LFC:[MD5.3B6928BC39E5530CEAD1E99269E7B1EE] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Net Command.) -- C:\Windows\System32\net1.exe   [152064]
O44 - LFC:[MD5.1FB6588DDF991124D49475C99BBC9C5B] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Panneau de configuration Lecture automatiqu.) -- C:\Windows\SysNative\autoplay.dll   [155136]
O44 - LFC:[MD5.1FB6588DDF991124D49475C99BBC9C5B] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Panneau de configuration Lecture automatiqu.) -- C:\Windows\System32\autoplay.dll   [155136]
O44 - LFC:[MD5.FD28E3B46F63337EAF905120F1E00070] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Panneau de configuration Options d’ergonomi.) -- C:\Windows\SysNative\accessibilitycpl.dll   [3745792]
O44 - LFC:[MD5.FD28E3B46F63337EAF905120F1E00070] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Panneau de configuration Options d’ergonomi.) -- C:\Windows\System32\accessibilitycpl.dll   [3745792]
O44 - LFC:[MD5.3A66846F45BE2E46F7EA16B2F7D2EF34] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Utilitaire Bcdboot.) -- C:\Windows\SysNative\bcdboot.exe   [175616]
O44 - LFC:[MD5.B3A33600DCDFB84D7FBE09ADEB1C9B8A] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Web DAV Client DLL.) -- C:\Windows\SysNative\davclnt.dll   [100864]
O44 - LFC:[MD5.B3A33600DCDFB84D7FBE09ADEB1C9B8A] - 01/06/2013 - 20:07:47 ---A- . (.Microsoft Corporation - Web DAV Client DLL.) -- C:\Windows\System32\davclnt.dll   [100864]
O44 - LFC:[MD5.A87D604AEA360176311474C87A63BB88] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\Windows\System32\Drivers\1394ohci.sys   [229888]
O44 - LFC:[MD5.277BBC7E1AA1EE957F573A10ECA7EF3A] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O44 - LFC:[MD5.507D5567A0A4EE86C4B0CE2CE1777025] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - DLL du service d’impression Internet.) -- C:\Windows\System32\inetpp.dll   [166912]
O44 - LFC:[MD5.EB3E45B0F5C5743863C86F38E8CDC151] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - Générateur/exécuteur de la file d’attente d.) -- C:\Windows\System32\ActionQueue.dll   [213504]
O44 - LFC:[MD5.CFB8C673F9188F99466E76C6972191E0] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - Hardware Abstraction Layer DLL.) -- C:\Windows\System32\hal.dll   [263040]
O44 - LFC:[MD5.03EDB043586CCEBA243D689BDDA370A8] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - Multi-Transport Composite Bus Enumerator.) -- C:\Windows\System32\Drivers\CompositeBus.sys   [38912]
O44 - LFC:[MD5.3A66846F45BE2E46F7EA16B2F7D2EF34] - 01/06/2013 - 20:07:47 RSHAD . (.Microsoft Corporation - Utilitaire Bcdboot.) -- C:\Windows\System32\bcdboot.exe   [175616]
O44 - LFC:[MD5.7D5645EE0EA77D539828433D9B95F5EB] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - API Microsoft Smart Card.) -- C:\Windows\SysNative\WinSCard.dll   [217600]
O44 - LFC:[MD5.7D5645EE0EA77D539828433D9B95F5EB] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - API Microsoft Smart Card.) -- C:\Windows\System32\WinSCard.dll   [217600]
O44 - LFC:[MD5.F9AFD12BB4B1CFA5FCC0A5B37C604FD2] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - API de configuration 802.3.) -- C:\Windows\SysNative\dot3api.dll   [84992]
O44 - LFC:[MD5.F9AFD12BB4B1CFA5FCC0A5B37C604FD2] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - API de configuration 802.3.) -- C:\Windows\System32\dot3api.dll   [84992]
O44 - LFC:[MD5.7F8E83B9466A0A002D4AB15C104062A7] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Bibliothèque principale EFS.) -- C:\Windows\SysNative\efscore.dll   [304128]
O44 - LFC:[MD5.7F8E83B9466A0A002D4AB15C104062A7] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Bibliothèque principale EFS.) -- C:\Windows\System32\efscore.dll   [304128]
O44 - LFC:[MD5.FCFCD1101C5DA23B4B95F93D02B2C169] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Composant de redirection du Gestionnaire de.) -- C:\Windows\SysNative\dwmredir.dll   [128512]
O44 - LFC:[MD5.BA9DC5F6E03309B795566122847B8428] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - DLL de rendu vidéo amélioré.) -- C:\Windows\SysNative\evr.dll   [630272]
O44 - LFC:[MD5.BA9DC5F6E03309B795566122847B8428] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - DLL de rendu vidéo amélioré.) -- C:\Windows\System32\evr.dll   [630272]
O44 - LFC:[MD5.786D0E9BE38BAD3C8FFFA9BAB6909582] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - DS Authorization for Services.) -- C:\Windows\SysNative\dsauth.dll   [36864]
O44 - LFC:[MD5.786D0E9BE38BAD3C8FFFA9BAB6909582] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - DS Authorization for Services.) -- C:\Windows\System32\dsauth.dll   [36864]
O44 - LFC:[MD5.356E96B2FE133373116D1AEBBCA896A3] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Driver Store API.) -- C:\Windows\SysNative\drvstore.dll   [422912]
O44 - LFC:[MD5.356E96B2FE133373116D1AEBBCA896A3] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Driver Store API.) -- C:\Windows\System32\drvstore.dll   [422912]
O44 - LFC:[MD5.0A98C4E4975F5D735F8361FFEBF2793D] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\SysNative\fde.dll   [171520]
O44 - LFC:[MD5.0A98C4E4975F5D735F8361FFEBF2793D] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\System32\fde.dll   [171520]
O44 - LFC:[MD5.2B734931F36EF571816236D7C792BC80] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Module spécifique aux médias 802.3.) -- C:\Windows\SysNative\dot3msm.dll   [103936]
O44 - LFC:[MD5.2B734931F36EF571816236D7C792BC80] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Module spécifique aux médias 802.3.) -- C:\Windows\System32\dot3msm.dll   [103936]
O44 - LFC:[MD5.C3489639EC8E181044F6C6BFD3D01AC9] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Mélangeur de volume.) -- C:\Windows\SysNative\SndVol.exe   [273920]
O44 - LFC:[MD5.C3489639EC8E181044F6C6BFD3D01AC9] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Mélangeur de volume.) -- C:\Windows\System32\SndVol.exe   [273920]
O44 - LFC:[MD5.55DE45B116711881C852D2841E4C84DD] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Objets de configuration du réseau.) -- C:\Windows\SysNative\tcpipcfg.dll   [253440]
O44 - LFC:[MD5.55DE45B116711881C852D2841E4C84DD] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Objets de configuration du réseau.) -- C:\Windows\System32\tcpipcfg.dll   [253440]
O44 - LFC:[MD5.A10B048B681C38E26CA90CD1BC123604] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\SysNative\syncui.dll   [200192]
O44 - LFC:[MD5.A10B048B681C38E26CA90CD1BC123604] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll   [200192]
O44 - LFC:[MD5.3A9C9BAF610B0DD4967086040B3B62A9] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Server Service Client DLL.) -- C:\Windows\SysNative\srvcli.dll   [128000]
O44 - LFC:[MD5.3A9C9BAF610B0DD4967086040B3B62A9] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Server Service Client DLL.) -- C:\Windows\System32\srvcli.dll   [128000]
O44 - LFC:[MD5.B1FB3DDCA0FDF408750D5843591AFBC6] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Service de configuration automatique de rés.) -- C:\Windows\SysNative\dot3svc.dll   [252416]
O44 - LFC:[MD5.D7F1EF374A90709B31591823B002F918] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Volume SCA.) -- C:\Windows\SysNative\SndVolSSO.dll   [225280]
O44 - LFC:[MD5.D7F1EF374A90709B31591823B002F918] - 01/06/2013 - 20:07:46 ---A- . (.Microsoft Corporation - Volume SCA.) -- C:\Windows\System32\SndVolSSO.dll   [225280]
O44 - LFC:[MD5.FCFCD1101C5DA23B4B95F93D02B2C169] - 01/06/2013 - 20:07:46 RSHAD . (.Microsoft Corporation - Composant de redirection du Gestionnaire de.) -- C:\Windows\System32\dwmredir.dll   [128512]
O44 - LFC:[MD5.B1FB3DDCA0FDF408750D5843591AFBC6] - 01/06/2013 - 20:07:46 RSHAD . (.Microsoft Corporation - Service de configuration automatique de rés.) -- C:\Windows\System32\dot3svc.dll   [252416]
O44 - LFC:[MD5.D34E4943D5AC096C8EDEEBFD80D76E23] - 01/06/2013 - 20:07:46 RSHAD . (.Microsoft Corporation - Storage VSC Driver.) -- C:\Windows\System32\Drivers\storvsc.sys   [34688]
O44 - LFC:[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - 01/06/2013 - 20:07:46 RSHAD . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\Drivers\tdx.sys   [119296]
O44 - LFC:[MD5.E811F8510B133E70CF6E509FB809824F] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Adaptive SQM WDI Plugin.) -- C:\Windows\SysNative\wdiasqmmodule.dll   [36352]
O44 - LFC:[MD5.78F4E7F5C56CB9716238EB57DA4B6A75] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Exécutable du service de moteur de sauvegar.) -- C:\Windows\SysNative\wbengine.exe   [1504256]
O44 - LFC:[MD5.D289D2E949609B696161039C3D86FFE9] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) -- C:\Windows\SysNative\vmstorfltres.dll   [38400]
O44 - LFC:[MD5.3DB6D04E1C64272F8B14EB8BC4616280] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Fichier DLL du service DAV pour le Web.) -- C:\Windows\SysNative\WebClnt.dll   [258560]
O44 - LFC:[MD5.3DB6D04E1C64272F8B14EB8BC4616280] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Fichier DLL du service DAV pour le Web.) -- C:\Windows\System32\WebClnt.dll   [258560]
O44 - LFC:[MD5.D2A0FFA75AB181B19B5EB93BB29C7686] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Fournisseur de service Unimodem 5.) -- C:\Windows\SysNative\unimdm.tsp   [321536]
O44 - LFC:[MD5.D2A0FFA75AB181B19B5EB93BB29C7686] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Fournisseur de service Unimodem 5.) -- C:\Windows\System32\unimdm.tsp   [321536]
O44 - LFC:[MD5.D5FED0C332BDF11698FBF8E59EA83434] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Hyper-V Integration Components Coinstaller.) -- C:\Windows\SysNative\VmdCoinstall.dll   [129024]
O44 - LFC:[MD5.F8297797CC1993E25B8967D6032BFB31] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Panneau de configuration du coffre Windows.) -- C:\Windows\SysNative\Vault.dll   [1098240]
O44 - LFC:[MD5.F8297797CC1993E25B8967D6032BFB31] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Panneau de configuration du coffre Windows.) -- C:\Windows\System32\Vault.dll   [1098240]
O44 - LFC:[MD5.C4BFE4B61086416B0529212F92BCE081] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Scheduler Service Client DLL.) -- C:\Windows\SysNative\schedcli.dll   [24064]
O44 - LFC:[MD5.C4BFE4B61086416B0529212F92BCE081] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Scheduler Service Client DLL.) -- C:\Windows\System32\schedcli.dll   [24064]
O44 - LFC:[MD5.CEED624D1291081B1B7D921FBB9C61D9] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Toshiba Video Codec.) -- C:\Windows\SysNative\tsbyuv.dll   [14848]
O44 - LFC:[MD5.CEED624D1291081B1B7D921FBB9C61D9] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Toshiba Video Codec.) -- C:\Windows\System32\tsbyuv.dll   [14848]
O44 - LFC:[MD5.77B5035BC6EDF4D1B6265391AECEE4C0] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - VPN IKE API's.) -- C:\Windows\SysNative\vpnikeapi.dll   [38912]
O44 - LFC:[MD5.77B5035BC6EDF4D1B6265391AECEE4C0] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - VPN IKE API's.) -- C:\Windows\System32\vpnikeapi.dll   [38912]
O44 - LFC:[MD5.0FE5CD5F9C9248F42D1EF56E495B182E] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - VPNIKE Protocol Engine - Test dll.) -- C:\Windows\SysNative\vpnike.dll   [263168]
O44 - LFC:[MD5.7DB5AA22A8A8E5C2D335F44853C1F6DE] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - WMI.) -- C:\Windows\SysNative\wbemcomn.dll   [529408]
O44 - LFC:[MD5.7DB5AA22A8A8E5C2D335F44853C1F6DE] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbemcomn.dll   [529408]
O44 - LFC:[MD5.9EB716B82B5CB2E26524BC3A37FB7BA2] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysNative\wmpdxm.dll   [358400]
O44 - LFC:[MD5.9EB716B82B5CB2E26524BC3A37FB7BA2] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll   [358400]
O44 - LFC:[MD5.A9CD8CA91A60D6CF28719008C553BC08] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\Windows\SysNative\secproc_ssp.dll   [121856]
O44 - LFC:[MD5.A9CD8CA91A60D6CF28719008C553BC08] - 01/06/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Windows Rights Management Services Server S.) -- C:\Windows\System32\secproc_ssp.dll   [121856]
O44 - LFC:[MD5.E811F8510B133E70CF6E509FB809824F] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - Adaptive SQM WDI Plugin.) -- C:\Windows\System32\wdiasqmmodule.dll   [36352]
O44 - LFC:[MD5.78F4E7F5C56CB9716238EB57DA4B6A75] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - Exécutable du service de moteur de sauvegar.) -- C:\Windows\System32\wbengine.exe   [1504256]
O44 - LFC:[MD5.D289D2E949609B696161039C3D86FFE9] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) -- C:\Windows\System32\vmstorfltres.dll   [38400]
O44 - LFC:[MD5.D5FED0C332BDF11698FBF8E59EA83434] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - Hyper-V Integration Components Coinstaller.) -- C:\Windows\System32\VmdCoinstall.dll   [129024]
O44 - LFC:[MD5.0FE5CD5F9C9248F42D1EF56E495B182E] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - VPNIKE Protocol Engine - Test dll.) -- C:\Windows\System32\vpnike.dll   [263168]
O44 - LFC:[MD5.7785DC213270D2FC066538DAF94087E7] - 01/06/2013 - 20:07:45 RSHAD . (.Microsoft Corporation - Virtual Storage Filter Driver.) -- C:\Windows\System32\Drivers\vmstorfl.sys   [46464]
O44 - LFC:[MD5.6E90B7A6C66355AA8DDC5CABF6073DE1] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Applications du Panneau de configuration So.) -- C:\Windows\SysNative\main.cpl   [497664]
O44 - LFC:[MD5.6E90B7A6C66355AA8DDC5CABF6073DE1] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Applications du Panneau de configuration So.) -- C:\Windows\System32\main.cpl   [497664]
O44 - LFC:[MD5.EAF32CB8C1F810E4715B4DFBE785C7FF] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Bibliothèque d’utilitaires légers du Shell.) -- C:\Windows\SysNative\shlwapi.dll   [448512]
O44 - LFC:[MD5.EAF32CB8C1F810E4715B4DFBE785C7FF] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Bibliothèque d’utilitaires légers du Shell.) -- C:\Windows\System32\shlwapi.dll   [448512]
O44 - LFC:[MD5.A6F8D318F6041334889481B472000081] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Client d’adaptabilité de présentation sur o.) -- C:\Windows\SysNative\PresentationSettings.exe   [176640]
O44 - LFC:[MD5.97E0EC3D6D99E8CC2B17EF2D3760E8FC] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Gestion des tâches planifiées.) -- C:\Windows\SysNative\schtasks.exe   [285696]
O44 - LFC:[MD5.97E0EC3D6D99E8CC2B17EF2D3760E8FC] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Gestion des tâches planifiées.) -- C:\Windows\System32\schtasks.exe   [285696]
O44 - LFC:[MD5.5D8E6C95156ED1F79A63D1EADE6F9ED5] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Installation de L’API Windows.) -- C:\Windows\SysNative\setupapi.dll   [1900544]
O44 - LFC:[MD5.5D8E6C95156ED1F79A63D1EADE6F9ED5] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Installation de L’API Windows.) -- C:\Windows\System32\setupapi.dll   [1900544]
O44 - LFC:[MD5.988121D083B7AB61D4A7E244290BAAB0] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - LSM interfaces proxy Dll.) -- C:\Windows\SysNative\lsmproxy.dll   [50176]
O44 - LFC:[MD5.988121D083B7AB61D4A7E244290BAAB0] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - LSM interfaces proxy Dll.) -- C:\Windows\System32\lsmproxy.dll   [50176]
O44 - LFC:[MD5.AEBA315A5631B407A2E9C6E1BD711A9D] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - MUI Callback for Bcd.) -- C:\Windows\SysNative\setbcdlocale.dll   [63488]
O44 - LFC:[MD5.3EEC0FB1DDD317AA1E8933B912439736] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Outil Diagnostics de la mémoire Windows.) -- C:\Windows\SysNative\MdSched.exe   [146944]
O44 - LFC:[MD5.B3F03B594E7A6353273D43F6E7EA1D25] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Ouvrir Emplacement et autres capteurs.) -- C:\Windows\SysNative\SensorsCpl.dll   [2250752]
O44 - LFC:[MD5.B3F03B594E7A6353273D43F6E7EA1D25] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Ouvrir Emplacement et autres capteurs.) -- C:\Windows\System32\SensorsCpl.dll   [2250752]
O44 - LFC:[MD5.2F6DA6A2C092BC61F0324E3C52935252] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Panneau de contrôle de récupération.) -- C:\Windows\SysNative\recovery.dll   [146944]
O44 - LFC:[MD5.E674F9D3B685167F6C83EAE8BEF7F567] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Pilote MCI DirectShow.) -- C:\Windows\SysNative\mciqtz32.dll   [41472]
O44 - LFC:[MD5.E674F9D3B685167F6C83EAE8BEF7F567] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Pilote MCI DirectShow.) -- C:\Windows\System32\mciqtz32.dll   [41472]
O44 - LFC:[MD5.A1CDE92DDC170D307DB3C5BAA348811B] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Print UI Cache.) -- C:\Windows\SysNative\prncache.dll   [183808]
O44 - LFC:[MD5.A1CDE92DDC170D307DB3C5BAA348811B] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Print UI Cache.) -- C:\Windows\System32\prncache.dll   [183808]
O44 - LFC:[MD5.F38FA28124B1F9A7676A08CE2980344C] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - RPC HTTP DLL.) -- C:\Windows\SysNative\rpchttp.dll   [187904]
O44 - LFC:[MD5.F38FA28124B1F9A7676A08CE2980344C] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - RPC HTTP DLL.) -- C:\Windows\System32\rpchttp.dll   [187904]
O44 - LFC:[MD5.F890B16A75982537CDDDD1F5F8298337] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Reflector Driver API.) -- C:\Windows\SysNative\rdprefdrvapi.dll   [23040]
O44 - LFC:[MD5.F890B16A75982537CDDDD1F5F8298337] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Reflector Driver API.) -- C:\Windows\System32\rdprefdrvapi.dll   [23040]
O44 - LFC:[MD5.4E9C2DB10F7E6AE91BF761139D4B745B] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Shell Accounts Classes.) -- C:\Windows\SysNative\shacct.dll   [135168]
O44 - LFC:[MD5.4E9C2DB10F7E6AE91BF761139D4B745B] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Shell Accounts Classes.) -- C:\Windows\System32\shacct.dll   [135168]
O44 - LFC:[MD5.B9F0A4020AA98B7A20287BF7FE99A1FD] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Utilitaires de quarantaine.) -- C:\Windows\SysNative\QUTIL.DLL   [107520]
O44 - LFC:[MD5.B9F0A4020AA98B7A20287BF7FE99A1FD] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Utilitaires de quarantaine.) -- C:\Windows\System32\QUTIL.DLL   [107520]
O44 - LFC:[MD5.B5BCBC935B89B4BB38F0FC7378A52F65] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\SysNative\RMActivate_ssp.exe   [306688]
O44 - LFC:[MD5.B5BCBC935B89B4BB38F0FC7378A52F65] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\System32\RMActivate_ssp.exe   [306688]
O44 - LFC:[MD5.89C92686DED63EEAF1DB03F97A1898F2] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Windows® Media Center WMDRM-ND Receiver Bri.) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll   [433512]
O44 - LFC:[MD5.89C92686DED63EEAF1DB03F97A1898F2] - 01/06/2013 - 20:07:44 ---A- . (.Microsoft Corporation - Windows® Media Center WMDRM-ND Receiver Bri.) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll   [433512]
O44 - LFC:[MD5.A6F8D318F6041334889481B472000081] - 01/06/2013 - 20:07:44 RSHAD . (.Microsoft Corporation - Client d’adaptabilité de présentation sur o.) -- C:\Windows\System32\PresentationSettings.exe   [176640]
O44 - LFC:[MD5.AEBA315A5631B407A2E9C6E1BD711A9D] - 01/06/2013 - 20:07:44 RSHAD . (.Microsoft Corporation - MUI Callback for Bcd.) -- C:\Windows\System32\setbcdlocale.dll   [63488]
O44 - LFC:[MD5.3EEC0FB1DDD317AA1E8933B912439736] - 01/06/2013 - 20:07:44 RSHAD . (.Microsoft Corporation - Outil Diagnostics de la mémoire Windows.) -- C:\Windows\System32\MdSched.exe   [146944]
O44 - LFC:[MD5.2F6DA6A2C092BC61F0324E3C52935252] - 01/06/2013 - 20:07:44 RSHAD . (.Microsoft Corporation - Panneau de contrôle de récupération.) -- C:\Windows\System32\recovery.dll   [146944]
O44 - LFC:[MD5.BCEA9AB347E53BC03B2E36BE0B8BA0EF] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - API de pile du protocole HTTP.) -- C:\Windows\SysNative\httpapi.dll   [45056]
O44 - LFC:[MD5.BCEA9AB347E53BC03B2E36BE0B8BA0EF] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - API de pile du protocole HTTP.) -- C:\Windows\System32\httpapi.dll   [45056]
O44 - LFC:[MD5.56BEB546F3F6EEAAAD5759E0B32E7C58] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Centre réseau - Panneau de configuration.) -- C:\Windows\SysNative\netcenter.dll   [1689600]
O44 - LFC:[MD5.56BEB546F3F6EEAAAD5759E0B32E7C58] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Centre réseau - Panneau de configuration.) -- C:\Windows\System32\netcenter.dll   [1689600]
O44 - LFC:[MD5.0191E738BF521FE6EC567148E73C086B] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysNative\MSVidCtl.dll   [3650560]
O44 - LFC:[MD5.0191E738BF521FE6EC567148E73C086B] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll   [3650560]
O44 - LFC:[MD5.77EC39CBFDDD4B54F741B27004882542] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\Windows\SysNative\KBDCZ1.DLL   [8192]
O44 - LFC:[MD5.77EC39CBFDDD4B54F741B27004882542] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Czech_101 Keyboard Layout.) -- C:\Windows\System32\KBDCZ1.DLL   [8192]
O44 - LFC:[MD5.2C2FBB6DC3CE8FAF4AB2F7C6C5071C4C] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\Windows\SysNative\intl.cpl   [373248]
O44 - LFC:[MD5.2C2FBB6DC3CE8FAF4AB2F7C6C5071C4C] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL du Panneau de configuration.) -- C:\Windows\System32\intl.cpl   [373248]
O44 - LFC:[MD5.0FE14E3B3C0DAA77DFB5B60E1D274D6F] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL d’application d’assistance Netio.) -- C:\Windows\SysNative\netiohlp.dll   [215552]
O44 - LFC:[MD5.0FE14E3B3C0DAA77DFB5B60E1D274D6F] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL d’application d’assistance Netio.) -- C:\Windows\System32\netiohlp.dll   [215552]
O44 - LFC:[MD5.FDC385A0F7D7DD880C4622D1DF08ABE9] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL d’installation de spouleur.) -- C:\Windows\SysNative\ntprint.dll   [344576]
O44 - LFC:[MD5.FDC385A0F7D7DD880C4622D1DF08ABE9] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - DLL d’installation de spouleur.) -- C:\Windows\System32\ntprint.dll   [344576]
O44 - LFC:[MD5.166930BF9AC87B8DC52EC4F77821D4B1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - German_IBM Keyboard Layout.) -- C:\Windows\SysNative\KBDGR1.DLL   [7680]
O44 - LFC:[MD5.166930BF9AC87B8DC52EC4F77821D4B1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - German_IBM Keyboard Layout.) -- C:\Windows\System32\KBDGR1.DLL   [7680]
O44 - LFC:[MD5.28E9FE419779A4DB32F841CE8B572139] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Maori Keyboard Layout.) -- C:\Windows\SysNative\KBDMAORI.DLL   [7168]
O44 - LFC:[MD5.28E9FE419779A4DB32F841CE8B572139] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Maori Keyboard Layout.) -- C:\Windows\System32\KBDMAORI.DLL   [7168]
O44 - LFC:[MD5.ACB4F32174EB5066D4684369CEA925E9] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Microsoft Distributed Transaction Coordinat.) -- C:\Windows\SysNative\mtxclu.dll   [372736]
O44 - LFC:[MD5.ACB4F32174EB5066D4684369CEA925E9] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Microsoft Distributed Transaction Coordinat.) -- C:\Windows\System32\mtxclu.dll   [372736]
O44 - LFC:[MD5.4C6F525A346E80A8834CE2E7A870B203] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - NPS XML Datastore Access.) -- C:\Windows\SysNative\iasrecst.dll   [198656]
O44 - LFC:[MD5.4C6F525A346E80A8834CE2E7A870B203] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - NPS XML Datastore Access.) -- C:\Windows\System32\iasrecst.dll   [198656]
O44 - LFC:[MD5.01E2855FB06C422E721D890AF201C2D7] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Natural Language Development Platform 6.) -- C:\Windows\SysNative\NaturalLanguage6.dll   [1326080]
O44 - LFC:[MD5.01E2855FB06C422E721D890AF201C2D7] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Natural Language Development Platform 6.) -- C:\Windows\System32\NaturalLanguage6.dll   [1326080]
O44 - LFC:[MD5.03706015DB44368375AEBE6339490E66] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Objets de configuration du réseau.) -- C:\Windows\SysNative\netcfgx.dll   [519680]
O44 - LFC:[MD5.03706015DB44368375AEBE6339490E66] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Objets de configuration du réseau.) -- C:\Windows\System32\netcfgx.dll   [519680]
O44 - LFC:[MD5.A5C09AA0017428B30BE3423CB84DEB61] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Outil de découverte iSCSI.) -- C:\Windows\SysNative\iscsicli.exe   [152064]
O44 - LFC:[MD5.A5C09AA0017428B30BE3423CB84DEB61] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Outil de découverte iSCSI.) -- C:\Windows\System32\iscsicli.exe   [152064]
O44 - LFC:[MD5.F8051F06E1C4AA3F2EFE4402AF5919B1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Outil de gravure d’image disque Windows.) -- C:\Windows\SysNative\isoburn.exe   [91648]
O44 - LFC:[MD5.F8051F06E1C4AA3F2EFE4402AF5919B1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Outil de gravure d’image disque Windows.) -- C:\Windows\System32\isoburn.exe   [91648]
O44 - LFC:[MD5.1F9860C03FAC9A1052C96837649D7723] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\Windows\SysNative\KBDINTAM.DLL   [7680]
O44 - LFC:[MD5.1F9860C03FAC9A1052C96837649D7723] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Tamil Keyboard Layout.) -- C:\Windows\System32\KBDINTAM.DLL   [7680]
O44 - LFC:[MD5.174E2AF0968A86D5FBFA7B00C79677B6] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Turkmen Keyboard Layout.) -- C:\Windows\SysNative\KBDTURME.DLL   [7168]
O44 - LFC:[MD5.174E2AF0968A86D5FBFA7B00C79677B6] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Turkmen Keyboard Layout.) -- C:\Windows\System32\KBDTURME.DLL   [7168]
O44 - LFC:[MD5.B23E4D796A3FEB91241A806EC18D5C32] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Utilitaire de test de serveur d’ouverture d.) -- C:\Windows\SysNative\nltest.exe   [395776]
O44 - LFC:[MD5.EFDFB3DD38A4376F93E7985173813ABD] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Windows HomeGroup.) -- C:\Windows\SysNative\ListSvc.dll   [232448]
O44 - LFC:[MD5.2DF29664ED261F0FC448E58F338F0671] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Windows NT MP Router Administration DLL.) -- C:\Windows\SysNative\mprapi.dll   [221184]
O44 - LFC:[MD5.2DF29664ED261F0FC448E58F338F0671] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - Windows NT MP Router Administration DLL.) -- C:\Windows\System32\mprapi.dll   [221184]
O44 - LFC:[MD5.22D98BF27F3DAE2B3E9559B9C40D49A1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - iSCSI Discovery api.) -- C:\Windows\SysNative\iscsium.dll   [37376]
O44 - LFC:[MD5.22D98BF27F3DAE2B3E9559B9C40D49A1] - 01/06/2013 - 20:07:43 ---A- . (.Microsoft Corporation - iSCSI Discovery api.) -- C:\Windows\System32\iscsium.dll   [37376]
O44 - LFC:[MD5.32E7A3D591D671A6DF2DB515A5CBE0FA] - 01/06/2013 - 20:07:43 RSHAD . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\Drivers\mountmgr.sys   [94592]
O44 - LFC:[MD5.C25F0BAFA182CBCA2DD3C851C2E75796] - 01/06/2013 - 20:07:43 RSHAD . (.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) -- C:\Windows\System32\Drivers\msahci.sys   [31104]
O44 - LFC:[MD5.B23E4D796A3FEB91241A806EC18D5C32] - 01/06/2013 - 20:07:43 RSHAD . (.Microsoft Corporation - Utilitaire de test de serveur d’ouverture d.) -- C:\Windows\System32\nltest.exe   [395776]
O44 - LFC:[MD5.EFDFB3DD38A4376F93E7985173813ABD] - 01/06/2013 - 20:07:43 RSHAD . (.Microsoft Corporation - Windows HomeGroup.) -- C:\Windows\System32\ListSvc.dll   [232448]
O44 - LFC:[MD5.F7A256EC899C72B4ECDD2C02CB592EFD] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Applet Panneau de configuration Bluetooth.) -- C:\Windows\SysNative\bthprops.cpl   [721408]
O44 - LFC:[MD5.F7A256EC899C72B4ECDD2C02CB592EFD] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Applet Panneau de configuration Bluetooth.) -- C:\Windows\System32\bthprops.cpl   [721408]
O44 - LFC:[MD5.26653D1C26E9E2AA5DD596354BA9FAF3] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Bibliothèque de ressources de démarrage.) -- C:\Windows\SysNative\bootres.dll   [2217856]
O44 - LFC:[MD5.28A7D7C7E2FDD1D55F12F750CD6331EC] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Codeur Microsoft MPEG-2.) -- C:\Windows\SysNative\MSMPEG2ENC.DLL   [1160192]
O44 - LFC:[MD5.28A7D7C7E2FDD1D55F12F750CD6331EC] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Codeur Microsoft MPEG-2.) -- C:\Windows\System32\MSMPEG2ENC.DLL   [1160192]
O44 - LFC:[MD5.C58193D44CF096225288E351611C77A3] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - DLL de proxy de BWUnpairElevated.) -- C:\Windows\SysNative\BWUnpairElevated.dll   [14848]
O44 - LFC:[MD5.C58193D44CF096225288E351611C77A3] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - DLL de proxy de BWUnpairElevated.) -- C:\Windows\System32\BWUnpairElevated.dll   [14848]
O44 - LFC:[MD5.80F720E3C6B85A5FA9F359F881510880] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Distributed Transaction Coordinat.) -- C:\Windows\SysNative\msdtctm.dll   [1509888]
O44 - LFC:[MD5.14DBF43745F54326CBBC7211750B6D20] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft MPEG-2 Section and Table Acquisit.) -- C:\Windows\SysNative\Mpeg2Data.ax   [104960]
O44 - LFC:[MD5.14DBF43745F54326CBBC7211750B6D20] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft MPEG-2 Section and Table Acquisit.) -- C:\Windows\System32\Mpeg2Data.ax   [104960]
O44 - LFC:[MD5.A88D5A2FA2B16934A74C4B1138676560] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Network Provider for MPEG2 based.) -- C:\Windows\SysNative\MSDvbNP.ax   [75776]
O44 - LFC:[MD5.B862B1040C5D9843678ECEA8EB4099C0] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Network Provider for MPEG2 based.) -- C:\Windows\SysNative\MSNP.ax   [288256]
O44 - LFC:[MD5.A88D5A2FA2B16934A74C4B1138676560] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Network Provider for MPEG2 based.) -- C:\Windows\System32\MSDvbNP.ax   [75776]
O44 - LFC:[MD5.B862B1040C5D9843678ECEA8EB4099C0] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Network Provider for MPEG2 based.) -- C:\Windows\System32\MSNP.ax   [288256]
O44 - LFC:[MD5.D027C5FDA1072C099165725AB8A54165] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\SysNative\msdxm.ocx   [5120]
O44 - LFC:[MD5.D027C5FDA1072C099165725AB8A54165] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\System32\msdxm.ocx   [5120]
O44 - LFC:[MD5.894B39B50E4FD1580884085D59352839] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Panneau de configuration de l’emplacement p.) -- C:\Windows\SysNative\defaultlocationcpl.dll   [233984]
O44 - LFC:[MD5.894B39B50E4FD1580884085D59352839] - 01/06/2013 - 20:07:42 ---A- . (.Microsoft Corporation - Panneau de configuration de l’emplacement p.) -- C:\Windows\System32\defaultlocationcpl.dll   [233984]
O44 - LFC:[MD5.26653D1C26E9E2AA5DD596354BA9FAF3] - 01/06/2013 - 20:07:42 RSHAD . (.Microsoft Corporation - Bibliothèque de ressources de démarrage.) -- C:\Windows\System32\bootres.dll   [2217856]
O44 - LFC:[MD5.80F720E3C6B85A5FA9F359F881510880] - 01/06/2013 - 20:07:42 RSHAD . (.Microsoft Corporation - Microsoft Distributed Transaction Coordinat.) -- C:\Windows\System32\msdtctm.dll   [1509888]
O44 - LFC:[MD5.ACFAD0B512226C7A83C7CB09FD55A9AD] - 01/06/2013 - 20:07:42 RSHAD . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\Drivers\Classpnp.sys   [179072]
O44 - LFC:[MD5.DDB88D0BB116D468B2B3EFBB6E3D6D06] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Agent AIT (Application Impact Telemetry).) -- C:\Windows\SysNative\aitagent.exe   [122880]
O44 - LFC:[MD5.C3F3509C9127B1EFF9012CBC152ADF56] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Auto File System Conversion Utility.) -- C:\Windows\SysNative\autoconv.exe   [793088]
O44 - LFC:[MD5.C3F3509C9127B1EFF9012CBC152ADF56] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Auto File System Conversion Utility.) -- C:\Windows\System32\autoconv.exe   [793088]
O44 - LFC:[MD5.3DA66EF520D45081DCFFDAECD3DE17C8] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Commande générique d’installation sans assi.) -- C:\Windows\SysNative\djoin.exe   [61440]
O44 - LFC:[MD5.FE70103391A64039A921DBFFF9C7AB1B] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\SysNative\user32.dll   [1008128]
O44 - LFC:[MD5.FE70103391A64039A921DBFFF9C7AB1B] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\user32.dll   [1008128]
O44 - LFC:[MD5.25871B7114005B04B24A5114CD5234CF] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL des procédures stockées étendues d’audi.) -- C:\Windows\SysNative\AzSqlExt.dll   [31744]
O44 - LFC:[MD5.25871B7114005B04B24A5114CD5234CF] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL des procédures stockées étendues d’audi.) -- C:\Windows\System32\AzSqlExt.dll   [31744]
O44 - LFC:[MD5.F832EEEA97CDDA1AF577E721F652A0D1] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL d’application d’assistance de Jauge de.) -- C:\Windows\SysNative\batmeter.dll   [749568]
O44 - LFC:[MD5.F832EEEA97CDDA1AF577E721F652A0D1] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DLL d’application d’assistance de Jauge de.) -- C:\Windows\System32\batmeter.dll   [749568]
O44 - LFC:[MD5.6B3E852970892B3033DC996C282C2C93] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DirectShow Runtime..) -- C:\Windows\SysNative\amstream.dll   [89088]
O44 - LFC:[MD5.6B3E852970892B3033DC996C282C2C93] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - DirectShow Runtime..) -- C:\Windows\System32\amstream.dll   [89088]
O44 - LFC:[MD5.2A436796758BF2555A26C770FE8A6FEE] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Function Discovery Proxy Dll.) -- C:\Windows\SysNative\fdProxy.dll   [74240]
O44 - LFC:[MD5.2A436796758BF2555A26C770FE8A6FEE] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Function Discovery Proxy Dll.) -- C:\Windows\System32\fdProxy.dll   [74240]
O44 - LFC:[MD5.C418F8085C61D3B6911EE82157CA3775] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - HBA API data interface dll for HBA_API_Rev_.) -- C:\Windows\SysNative\hbaapi.dll   [78848]
O44 - LFC:[MD5.C418F8085C61D3B6911EE82157CA3775] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - HBA API data interface dll for HBA_API_Rev_.) -- C:\Windows\System32\hbaapi.dll   [78848]
O44 - LFC:[MD5.CC0AB40F02D2C2A12209715A3C1B07B8] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Interface utilisateur du gestionnaire d’inf.) -- C:\Windows\SysNative\credui.dll   [197120]
O44 - LFC:[MD5.CC0AB40F02D2C2A12209715A3C1B07B8] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Interface utilisateur du gestionnaire d’inf.) -- C:\Windows\System32\credui.dll   [197120]
O44 - LFC:[MD5.5746BD7E255DD6A8AFA06F7C42C1BA41] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\SysNative\cmd.exe   [345088]
O44 - LFC:[MD5.5746BD7E255DD6A8AFA06F7C42C1BA41] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe   [345088]
O44 - LFC:[MD5.D5CCA1453B98A5801E6D5FF0FF89DC6C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Isolation graphique de périphérique audio W.) -- C:\Windows\SysNative\audiodg.exe   [126464]
O44 - LFC:[MD5.CF1A231594E1B7D59D9279FAA38AD4C2] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft ThirdPartyEapDispatcher.) -- C:\Windows\SysNative\eapp3hst.dll   [348160]
O44 - LFC:[MD5.CF1A231594E1B7D59D9279FAA38AD4C2] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft ThirdPartyEapDispatcher.) -- C:\Windows\System32\eapp3hst.dll   [348160]
O44 - LFC:[MD5.D027C5FDA1072C099165725AB8A54165] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\SysNative\dxmasf.dll   [5120]
O44 - LFC:[MD5.D027C5FDA1072C099165725AB8A54165] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft Windows Media Component Removal F.) -- C:\Windows\System32\dxmasf.dll   [5120]
O44 - LFC:[MD5.6369F960C28A16F4502C480EEDE3652C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft(R) Delta Package Expander.) -- C:\Windows\SysNative\dpx.dll   [399872]
O44 - LFC:[MD5.6369F960C28A16F4502C480EEDE3652C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Microsoft(R) Delta Package Expander.) -- C:\Windows\System32\dpx.dll   [399872]
O44 - LFC:[MD5.2472BDF30C62F3E81AE27A968C25608C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Mini-pilote AT fournisseur de service Unimo.) -- C:\Windows\SysNative\unimdmat.dll   [73216]
O44 - LFC:[MD5.2472BDF30C62F3E81AE27A968C25608C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Mini-pilote AT fournisseur de service Unimo.) -- C:\Windows\System32\unimdmat.dll   [73216]
O44 - LFC:[MD5.0ADD464D92D6189A7697C0C5BBEE1909] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Module azroles.) -- C:\Windows\SysNative\azroles.dll   [897536]
O44 - LFC:[MD5.0ADD464D92D6189A7697C0C5BBEE1909] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Module azroles.) -- C:\Windows\System32\azroles.dll   [897536]
O44 - LFC:[MD5.65EA57712340C09B1B0C427B4848AE05] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\Windows\SysNative\taskeng.exe   [464384]
O44 - LFC:[MD5.65EA57712340C09B1B0C427B4848AE05] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\Windows\System32\taskeng.exe   [464384]
O44 - LFC:[MD5.7C58DEFD1306691C43837CEC18BC64A3] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Outil de diagnostic Microsoft DirectX.) -- C:\Windows\SysNative\dxdiagn.dll   [279552]
O44 - LFC:[MD5.7C58DEFD1306691C43837CEC18BC64A3] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Outil de diagnostic Microsoft DirectX.) -- C:\Windows\System32\dxdiagn.dll   [279552]
O44 - LFC:[MD5.29409ED7400CA5BCCC30C0EE5147A60D] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Perfmon Counter Access.) -- C:\Windows\SysNative\bitsperf.dll   [24576]
O44 - LFC:[MD5.29409ED7400CA5BCCC30C0EE5147A60D] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Perfmon Counter Access.) -- C:\Windows\System32\bitsperf.dll   [24576]
O44 - LFC:[MD5.6DC4A7242F565C9E9C9CCC7BB0FA75C7] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Plug-in de compatibilité descendante du Pla.) -- C:\Windows\SysNative\taskcomp.dll   [473600]
O44 - LFC:[MD5.6DC4A7242F565C9E9C9CCC7BB0FA75C7] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Plug-in de compatibilité descendante du Pla.) -- C:\Windows\System32\taskcomp.dll   [473600]
O44 - LFC:[MD5.F23FEF6D569FCE88671949894A8BECF1] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\SysNative\audiosrv.dll   [679424]
O44 - LFC:[MD5.E3C61FD7B7C2557E1F1B0B4CEC713585] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Service Microsoft Panneau de saisie Tablet.) -- C:\Windows\SysNative\TabSvc.dll   [92672]
O44 - LFC:[MD5.B26F4F737E8F9DF4F31AF6CF31D05820] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Service de stratégie de diagnostic WDI.) -- C:\Windows\SysNative\dps.dll   [162816]
O44 - LFC:[MD5.87356377F31DA5F20A833811CD59499C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Service homologue EAPHost Microsoft.) -- C:\Windows\SysNative\eapphost.dll   [303616]
O44 - LFC:[MD5.87356377F31DA5F20A833811CD59499C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Service homologue EAPHost Microsoft.) -- C:\Windows\System32\eapphost.dll   [303616]
O44 - LFC:[MD5.DC220AE6F64819099F7EBD6F137E32E7] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Session audio.) -- C:\Windows\SysNative\AudioSes.dll   [296448]
O44 - LFC:[MD5.DC220AE6F64819099F7EBD6F137E32E7] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Session audio.) -- C:\Windows\System32\AudioSes.dll   [296448]
O44 - LFC:[MD5.9BDAEBDBDE7B98068F7F59E51476160C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - UI générique EAP.) -- C:\Windows\SysNative\eappgnui.dll   [103936]
O44 - LFC:[MD5.9BDAEBDBDE7B98068F7F59E51476160C] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - UI générique EAP.) -- C:\Windows\System32\eappgnui.dll   [103936]
O44 - LFC:[MD5.62D2B05F7426D4735F50DC207D569281] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - WMI SDK Provider Framework.) -- C:\Windows\SysNative\framedyn.dll   [279040]
O44 - LFC:[MD5.1484B9EBF567346582DE571B0E164AE0] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - WMI SDK Provider Framework.) -- C:\Windows\SysNative\framedynos.dll   [295936]
O44 - LFC:[MD5.62D2B05F7426D4735F50DC207D569281] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - WMI SDK Provider Framework.) -- C:\Windows\System32\framedyn.dll   [279040]
O44 - LFC:[MD5.1484B9EBF567346582DE571B0E164AE0] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - WMI SDK Provider Framework.) -- C:\Windows\System32\framedynos.dll   [295936]
O44 - LFC:[MD5.BE5A0F4022E998E9319EA39598B427EA] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Windows Media Player System Preparation DLL.) -- C:\Windows\SysNative\spwmp.dll   [9728]
O44 - LFC:[MD5.BE5A0F4022E998E9319EA39598B427EA] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Windows Media Player System Preparation DLL.) -- C:\Windows\System32\spwmp.dll   [9728]
O44 - LFC:[MD5.8DEDB880C3CB1B7024F2C8EE2F3E1151] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Écran de veille Texte 3D.) -- C:\Windows\SysNative\ssText3d.scr   [333824]
O44 - LFC:[MD5.8DEDB880C3CB1B7024F2C8EE2F3E1151] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Écran de veille Texte 3D.) -- C:\Windows\System32\ssText3d.scr   [333824]
O44 - LFC:[MD5.E1DCEE9E3EC0522DF24397BE1A64E449] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Bibliothèque d'assistance au déploiement de.) -- C:\Windows\SysNative\dfshim.dll   [1942856]
O44 - LFC:[MD5.E1DCEE9E3EC0522DF24397BE1A64E449] - 01/06/2013 - 20:07:41 ---A- . (.Microsoft Corporation - Bibliothèque d'assistance au déploiement de.) -- C:\Windows\System32\dfshim.dll   [1942856]
O44 - LFC:[MD5.A97E6B70CCD03870A06BD57DDC6BE0E0] - 01/06/2013 - 20:07:41 --HA- . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll   [3072]
O44 - LFC:[MD5.A34FE1E025E88798E746F484956C0720] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\Drivers\ataport.sys   [155520]
O44 - LFC:[MD5.DDB88D0BB116D468B2B3EFBB6E3D6D06] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Agent AIT (Application Impact Telemetry).) -- C:\Windows\System32\aitagent.exe   [122880]
O44 - LFC:[MD5.A97E6B70CCD03870A06BD57DDC6BE0E0] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-ums-l1-1-0.dll   [3072]
O44 - LFC:[MD5.3DA66EF520D45081DCFFDAECD3DE17C8] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Commande générique d’installation sans assi.) -- C:\Windows\System32\djoin.exe   [61440]
O44 - LFC:[MD5.C3EC945DEC43C00E2AD4C98DDDD064C7] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Gestionnaire de stratégie de redirection US.) -- C:\Windows\System32\Drivers\usbrpm.sys   [31744]
O44 - LFC:[MD5.D5CCA1453B98A5801E6D5FF0FF89DC6C] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Isolation graphique de périphérique audio W.) -- C:\Windows\System32\audiodg.exe   [126464]
O44 - LFC:[MD5.561E7E1F06895D78DE991E01DD0FB6E5] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Remote Desktop Server Driver.) -- C:\Windows\System32\Drivers\termdd.sys   [63360]
O44 - LFC:[MD5.F23FEF6D569FCE88671949894A8BECF1] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll   [679424]
O44 - LFC:[MD5.E3C61FD7B7C2557E1F1B0B4CEC713585] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Service Microsoft Panneau de saisie Tablet.) -- C:\Windows\System32\TabSvc.dll   [92672]
O44 - LFC:[MD5.B26F4F737E8F9DF4F31AF6CF31D05820] - 01/06/2013 - 20:07:41 RSHAD . (.Microsoft Corporation - Service de stratégie de diagnostic WDI.) -- C:\Windows\System32\dps.dll   [162816]
O44 - LFC:[MD5.021287C2050FD5DB4A8B084E2C38139C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - API de l’outil d’évaluation système Windows.) -- C:\Windows\SysNative\WinSATAPI.dll   [501248]
O44 - LFC:[MD5.021287C2050FD5DB4A8B084E2C38139C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - API de l’outil d’évaluation système Windows.) -- C:\Windows\System32\WinSATAPI.dll   [501248]
O44 - LFC:[MD5.19A6EDD4236403AE9869D12BEDF2B11E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Assistant Impression de photographies.) -- C:\Windows\SysNative\photowiz.dll   [409600]
O44 - LFC:[MD5.19A6EDD4236403AE9869D12BEDF2B11E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Assistant Impression de photographies.) -- C:\Windows\System32\photowiz.dll   [409600]
O44 - LFC:[MD5.02E20372D9D6D28E37BA9704EDC90B67] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Composant de saisie tactile ou avec stylet.) -- C:\Windows\SysNative\wisptis.exe   [405504]
O44 - LFC:[MD5.4E4FFB09D895AA000DD56D1404F69A7E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL API LDAP Win32.) -- C:\Windows\SysNative\Wldap32.dll   [312832]
O44 - LFC:[MD5.4E4FFB09D895AA000DD56D1404F69A7E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL API LDAP Win32.) -- C:\Windows\System32\Wldap32.dll   [312832]
O44 - LFC:[MD5.8CE1C165396F2453012B3E23ADD9DF76] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL de l’agent de récupération Microsoft Wi.) -- C:\Windows\SysNative\ReAgent.dll   [313856]
O44 - LFC:[MD5.8CE1C165396F2453012B3E23ADD9DF76] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL de l’agent de récupération Microsoft Wi.) -- C:\Windows\System32\ReAgent.dll   [313856]
O44 - LFC:[MD5.CF6850A72BEB4845A3BFFB3F5E8014B2] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL d’application d’assistance Windows pour.) -- C:\Windows\SysNative\pdh.dll   [300032]
O44 - LFC:[MD5.CF6850A72BEB4845A3BFFB3F5E8014B2] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL d’application d’assistance Windows pour.) -- C:\Windows\System32\pdh.dll   [300032]
O44 - LFC:[MD5.DE418798DA91AAA067A2EF41D8A7B886] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL d’objets PrintUI.) -- C:\Windows\SysNative\puiobj.dll   [429568]
O44 - LFC:[MD5.DE418798DA91AAA067A2EF41D8A7B886] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DLL d’objets PrintUI.) -- C:\Windows\System32\puiobj.dll   [429568]
O44 - LFC:[MD5.605A399F42B09D6147DDAC2C7851BD36] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DirectShow ASF Support.) -- C:\Windows\SysNative\qasf.dll   [254464]
O44 - LFC:[MD5.605A399F42B09D6147DDAC2C7851BD36] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - DirectShow ASF Support.) -- C:\Windows\System32\qasf.dll   [254464]
O44 - LFC:[MD5.9498656CAE8A5047B9CD4C69075FF66B] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\Windows\SysNative\remotepg.dll   [153088]
O44 - LFC:[MD5.9498656CAE8A5047B9CD4C69075FF66B] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Extension du Panneau de configuration Sessi.) -- C:\Windows\System32\remotepg.dll   [153088]
O44 - LFC:[MD5.E48FCE3820487A9CDDD83BBABC6B962C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Fichier DLL de ressources de bus VMBus.) -- C:\Windows\SysNative\vmbusres.dll   [44544]
O44 - LFC:[MD5.AC3D7EE5F9EC2AB4BE0CDDE362D026A4] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Fournisseur de base de service de disque vi.) -- C:\Windows\SysNative\vdsbas.dll   [190976]
O44 - LFC:[MD5.AC3D7EE5F9EC2AB4BE0CDDE362D026A4] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Fournisseur de base de service de disque vi.) -- C:\Windows\System32\vdsbas.dll   [190976]
O44 - LFC:[MD5.EC5F6EE00337DB400229B69FB43F92C5] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Gestion de serveur de quarantaine.) -- C:\Windows\SysNative\QSVRMGMT.DLL   [124416]
O44 - LFC:[MD5.EC5F6EE00337DB400229B69FB43F92C5] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Gestion de serveur de quarantaine.) -- C:\Windows\System32\QSVRMGMT.DLL   [124416]
O44 - LFC:[MD5.7A20E304276A422F1FF0BBB640272DA0] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Hyper-V VMBUS Coinstaller.) -- C:\Windows\SysNative\VmbusCoinstaller.dll   [130048]
O44 - LFC:[MD5.DD853B7E91F22F842B8C8CB5096EE3B3] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Hôte SHV de quarantaine.) -- C:\Windows\SysNative\QSHVHOST.DLL   [223232]
O44 - LFC:[MD5.DD853B7E91F22F842B8C8CB5096EE3B3] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Hôte SHV de quarantaine.) -- C:\Windows\System32\QSHVHOST.DLL   [223232]
O44 - LFC:[MD5.E62E6C6E0ECE74CD8345808F5A5F9F00] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Interface utilisateur de profil sans fil.) -- C:\Windows\SysNative\wlanui.dll   [414208]
O44 - LFC:[MD5.E62E6C6E0ECE74CD8345808F5A5F9F00] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Interface utilisateur de profil sans fil.) -- C:\Windows\System32\wlanui.dll   [414208]
O44 - LFC:[MD5.C7CF6A6E137463219E1259E3F0F0DD6C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Journaux & alertes de performance.) -- C:\Windows\SysNative\pla.dll   [1389056]
O44 - LFC:[MD5.C7CF6A6E137463219E1259E3F0F0DD6C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Journaux & alertes de performance.) -- C:\Windows\System32\pla.dll   [1389056]
O44 - LFC:[MD5.A943D670747778C7597987A4B5B9A679] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.) -- C:\Windows\SysNative\WFS.exe   [974336]
O44 - LFC:[MD5.02E20372D9D6D28E37BA9704EDC90B67] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Microsoft Tablet PC Component.) -- C:\Windows\System32\wisptis.exe   [405504]
O44 - LFC:[MD5.55EDFADBEFB5B1C28DCE340DDCD2206E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Options d’alimentation du Panneau de config.) -- C:\Windows\SysNative\powercpl.dll   [486400]
O44 - LFC:[MD5.55EDFADBEFB5B1C28DCE340DDCD2206E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Options d’alimentation du Panneau de config.) -- C:\Windows\System32\powercpl.dll   [486400]
O44 - LFC:[MD5.C6B0B5AA20C8E51234A039472ABA75B2] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Outil de clonage de système.) -- C:\Windows\SysNative\setupcl.exe   [88576]
O44 - LFC:[MD5.EC84D7DCAE6AE0FE87EE5D4F0D50DC55] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Panneau de configuration Définition des opt.) -- C:\Windows\SysNative\sud.dll   [769536]
O44 - LFC:[MD5.EC84D7DCAE6AE0FE87EE5D4F0D50DC55] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Panneau de configuration Définition des opt.) -- C:\Windows\System32\sud.dll   [769536]
O44 - LFC:[MD5.F145002386400162C9F66DD29702976F] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Point de terminaison audio RDP.) -- C:\Windows\SysNative\rdpendp.dll   [167424]
O44 - LFC:[MD5.F145002386400162C9F66DD29702976F] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Point de terminaison audio RDP.) -- C:\Windows\System32\rdpendp.dll   [167424]
O44 - LFC:[MD5.C5AC93CF3BA30D367FB49148A2B673B9] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Print Sandbox COM Proxy Stub.) -- C:\Windows\SysNative\PrintIsolationProxy.dll   [48128]
O44 - LFC:[MD5.FA2F60F09DDF459CB4AA9DE8A83B65B3] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - RDP Direct3D Remoting DLL.) -- C:\Windows\SysNative\rdpd3d.dll   [68096]
O44 - LFC:[MD5.FA2F60F09DDF459CB4AA9DE8A83B65B3] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - RDP Direct3D Remoting DLL.) -- C:\Windows\System32\rdpd3d.dll   [68096]
O44 - LFC:[MD5.A717A35120DBAB5AB707AB40662AF9DD] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Remote Access PPP.) -- C:\Windows\SysNative\rasppp.dll   [211456]
O44 - LFC:[MD5.A717A35120DBAB5AB707AB40662AF9DD] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Remote Access PPP.) -- C:\Windows\System32\rasppp.dll   [211456]
O44 - LFC:[MD5.E19AD0D49BFF5938B3E374873AC174DE] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\SysNative\wmploc.DLL   [12625920]
O44 - LFC:[MD5.E19AD0D49BFF5938B3E374873AC174DE] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.DLL   [12625920]
O44 - LFC:[MD5.B86399C64A19EB45519466413FA5E361] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Réseaux sans fil favoris.) -- C:\Windows\SysNative\wlanpref.dll   [1441280]
O44 - LFC:[MD5.B86399C64A19EB45519466413FA5E361] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Réseaux sans fil favoris.) -- C:\Windows\System32\wlanpref.dll   [1441280]
O44 - LFC:[MD5.0B6231BF38174A1628C4AC812CC75804] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\SysNative\SessEnv.dll   [121856]
O44 - LFC:[MD5.0B6231BF38174A1628C4AC812CC75804] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll   [121856]
O44 - LFC:[MD5.2B373B5F7E36B5ED5DA176D4400EF091] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Software Protection Platform Plugins.) -- C:\Windows\SysNative\sppobjs.dll   [1082880]
O44 - LFC:[MD5.D1AAFE4B6515002332DF389326BB6A87] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - VmBus User Mode Pipe DLL.) -- C:\Windows\SysNative\vmbuspipe.dll   [15872]
O44 - LFC:[MD5.F149E8CAE538DBF7059B00326673F602] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - WMPMDE DLL.) -- C:\Windows\SysNative\wmpmde.dll   [1024512]
O44 - LFC:[MD5.F149E8CAE538DBF7059B00326673F602] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - WMPMDE DLL.) -- C:\Windows\System32\wmpmde.dll   [1024512]
O44 - LFC:[MD5.908ACB1F594274965A53926B10C81E89] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows HomeGroup.) -- C:\Windows\SysNative\provsvc.dll   [187904]
O44 - LFC:[MD5.908ACB1F594274965A53926B10C81E89] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows HomeGroup.) -- C:\Windows\System32\provsvc.dll   [187904]
O44 - LFC:[MD5.9864D52F15AD32094A636C6B5281D9E7] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Media Playback/Authoring DLL.) -- C:\Windows\SysNative\WMVCORE.DLL   [3027968]
O44 - LFC:[MD5.9864D52F15AD32094A636C6B5281D9E7] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Media Playback/Authoring DLL.) -- C:\Windows\System32\WMVCORE.DLL   [3027968]
O44 - LFC:[MD5.1EB82516F21F27EED1833B4F9FD9614E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\SysNative\wmp.dll   [14633472]
O44 - LFC:[MD5.1EB82516F21F27EED1833B4F9FD9614E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\System32\wmp.dll   [14633472]
O44 - LFC:[MD5.4E39FFB3BEB58A232429E44C60ED1264] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Package Manager.) -- C:\Windows\SysNative\PkgMgr.exe   [199168]
O44 - LFC:[MD5.4E39FFB3BEB58A232429E44C60ED1264] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Package Manager.) -- C:\Windows\System32\PkgMgr.exe   [199168]
O44 - LFC:[MD5.33E4AFE6DCBC638771AFD25D556D8E5D] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Presentation Foundation Host Proxy.) -- C:\Windows\SysNative\PresentationHostProxy.dll   [109928]
O44 - LFC:[MD5.33E4AFE6DCBC638771AFD25D556D8E5D] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Presentation Foundation Host Proxy.) -- C:\Windows\System32\PresentationHostProxy.dll   [109928]
O44 - LFC:[MD5.8A1846C0817513AD18BA48B4427771FC] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Presentation Foundation Host.) -- C:\Windows\SysNative\PresentationHost.exe   [320352]
O44 - LFC:[MD5.8A1846C0817513AD18BA48B4427771FC] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Presentation Foundation Host.) -- C:\Windows\System32\PresentationHost.exe   [320352]
O44 - LFC:[MD5.748849C42DEA24C723048E24BCA1BD55] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\SysNative\wshbth.dll   [47104]
O44 - LFC:[MD5.748849C42DEA24C723048E24BCA1BD55] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\System32\wshbth.dll   [47104]
O44 - LFC:[MD5.C1A8C1D804EFB14D344E958BC6AA572C] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Windows Sound Recorder.) -- C:\Windows\SysNative\WavDest.dll   [61952]
O44 - LFC:[MD5.0D9764D58C5EFD672B7184854B152E5E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Winstation Library.) -- C:\Windows\SysNative\winsta.dll   [235008]
O44 - LFC:[MD5.0D9764D58C5EFD672B7184854B152E5E] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Winstation Library.) -- C:\Windows\System32\winsta.dll   [235008]
O44 - LFC:[MD5.3D840598CECAAE8470804918EE5A00B5] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - Xps Object Model in memory creation and des.) -- C:\Windows\System32\xpsservices.dll   [3008000]
O44 - LFC:[MD5.2D2A6EC8EAD30EC3ACE2FD6FB1B3E122] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - prnfldr dll.) -- C:\Windows\SysNative\prnfldr.dll   [416256]
O44 - LFC:[MD5.2D2A6EC8EAD30EC3ACE2FD6FB1B3E122] - 01/06/2013 - 20:07:40 ---A- . (.Microsoft Corporation - prnfldr dll.) -- C:\Windows\System32\prnfldr.dll   [416256]
O44 - LFC:[MD5.E48FCE3820487A9CDDD83BBABC6B962C] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Fichier DLL de ressources de bus VMBus.) -- C:\Windows\System32\vmbusres.dll   [44544]
O44 - LFC:[MD5.7A20E304276A422F1FF0BBB640272DA0] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Hyper-V VMBUS Coinstaller.) -- C:\Windows\System32\VmbusCoinstaller.dll   [130048]
O44 - LFC:[MD5.A943D670747778C7597987A4B5B9A679] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.) -- C:\Windows\System32\WFS.exe   [974336]
O44 - LFC:[MD5.1B6163C503398B23FF8B939C67747683] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\Drivers\rdpdr.sys   [165888]
O44 - LFC:[MD5.C6B0B5AA20C8E51234A039472ABA75B2] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Outil de clonage de système.) -- C:\Windows\System32\setupcl.exe   [88576]
O44 - LFC:[MD5.F92A2C41117A11A00BE01CA01A7FCDE9] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\Drivers\raspptp.sys   [111104]
O44 - LFC:[MD5.0557CF5A2556BD58E26384169D72438D] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\Drivers\pacer.sys   [131584]
O44 - LFC:[MD5.C5AC93CF3BA30D367FB49148A2B673B9] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Print Sandbox COM Proxy Stub.) -- C:\Windows\System32\PrintIsolationProxy.dll   [48128]
O44 - LFC:[MD5.2B373B5F7E36B5ED5DA176D4400EF091] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Software Protection Platform Plugins.) -- C:\Windows\System32\sppobjs.dll   [1082880]
O44 - LFC:[MD5.86EA3E79AE350FEA5331A1303054005F] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Virtual Machine Bus.) -- C:\Windows\System32\Drivers\vmbus.sys   [199552]
O44 - LFC:[MD5.D1AAFE4B6515002332DF389326BB6A87] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - VmBus User Mode Pipe DLL.) -- C:\Windows\System32\vmbuspipe.dll   [15872]
O44 - LFC:[MD5.D2AAFD421940F640B407AEFAAEBD91B0] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys   [71552]
O44 - LFC:[MD5.B4A1002206F6810EABC027DBBCE3B737] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\Windows\System32\Drivers\winhv.sys   [52096]
O44 - LFC:[MD5.C1A8C1D804EFB14D344E958BC6AA572C] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Windows Sound Recorder.) -- C:\Windows\System32\WavDest.dll   [61952]
O44 - LFC:[MD5.94575C0571D1462A0F70BDE6BD6EE6B3] - 01/06/2013 - 20:07:40 RSHAD . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\Drivers\pci.sys   [184704]
O44 - LFC:[MD5.A744BA6E04C8AA4592818178DBF89521] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - DLL Serveur SAM.) -- C:\Windows\SysNative\samsrv.dll   [758784]
O44 - LFC:[MD5.5CBB682DF172AC4D818E2E49DA2B4A19] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Extension d’administration de script.) -- C:\Windows\SysNative\scrptadm.dll   [568832]
O44 - LFC:[MD5.5CBB682DF172AC4D818E2E49DA2B4A19] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Extension d’administration de script.) -- C:\Windows\System32\scrptadm.dll   [568832]
O44 - LFC:[MD5.CA2985996BB49924B677113DF95CFEA7] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Fournisseur d’informations d’identification.) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll   [189952]
O44 - LFC:[MD5.CA2985996BB49924B677113DF95CFEA7] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Fournisseur d’informations d’identification.) -- C:\Windows\System32\SmartcardCredentialProvider.dll   [189952]
O44 - LFC:[MD5.00EED37FFA36C9FCF8370160596B891E] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Galerie de photographies.) -- C:\Windows\SysNative\shimgvw.dll   [37376]
O44 - LFC:[MD5.00EED37FFA36C9FCF8370160596B891E] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Galerie de photographies.) -- C:\Windows\System32\shimgvw.dll   [37376]
O44 - LFC:[MD5.F55F754866D79A11D5B36DA1A17E6737] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Nettoyage du Service Pack.) -- C:\Windows\SysNative\scavengeui.dll   [146944]
O44 - LFC:[MD5.C2A8CB1275ECB85D246A9ECC02A728E3] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Remote RPC Extension.) -- C:\Windows\SysNative\RpcRtRemote.dll   [65536]
O44 - LFC:[MD5.C2A8CB1275ECB85D246A9ECC02A728E3] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Remote RPC Extension.) -- C:\Windows\System32\RpcRtRemote.dll   [65536]
O44 - LFC:[MD5.FC51229C7D4AFA0D6F186133728B95AB] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Security Accounts Manager Client DLL.) -- C:\Windows\SysNative\samcli.dll   [67584]
O44 - LFC:[MD5.FC51229C7D4AFA0D6F186133728B95AB] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Security Accounts Manager Client DLL.) -- C:\Windows\System32\samcli.dll   [67584]
O44 - LFC:[MD5.431DC374BB338D99400B24FAC576D7D1] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Shell setup helper.) -- C:\Windows\SysNative\shsetup.dll   [130048]
O44 - LFC:[MD5.431DC374BB338D99400B24FAC576D7D1] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Shell setup helper.) -- C:\Windows\System32\shsetup.dll   [130048]
O44 - LFC:[MD5.67B6B783979C8CF96DCCC2813CB21C10] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Single-Instance Store Backup Support Functi.) -- C:\Windows\SysNative\sisbkup.dll   [24064]
O44 - LFC:[MD5.67B6B783979C8CF96DCCC2813CB21C10] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Single-Instance Store Backup Support Functi.) -- C:\Windows\System32\sisbkup.dll   [24064]
O44 - LFC:[MD5.B6D6886149573278CBA6ABD44C4317F5] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Software Licensing WGA API.) -- C:\Windows\SysNative\slwga.dll   [15360]
O44 - LFC:[MD5.B6D6886149573278CBA6ABD44C4317F5] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Software Licensing WGA API.) -- C:\Windows\System32\slwga.dll   [15360]
O44 - LFC:[MD5.3BCB70DA9B5A2011E01E35ED29A3F3F3] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Touches de raccourci de l’accessibilité.) -- C:\Windows\SysNative\sethc.exe   [279040]
O44 - LFC:[MD5.3BCB70DA9B5A2011E01E35ED29A3F3F3] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Touches de raccourci de l’accessibilité.) -- C:\Windows\System32\sethc.exe   [279040]
O44 - LFC:[MD5.E19D102BAF266F34592F7C742FBFA886] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\Windows\SysNative\msconfig.exe   [300032]
O44 - LFC:[MD5.9F4EA339FD6315CBDC4E543B2A222F45] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - WMI CMI Plugin.) -- C:\Windows\SysNative\wmicmiplugin.dll   [524288]
O44 - LFC:[MD5.DB7E9251C0EE697FCFAE2406097BF611] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\Windows\SysNative\secproc.dll   [488448]
O44 - LFC:[MD5.DB7E9251C0EE697FCFAE2406097BF611] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\Windows\System32\secproc.dll   [488448]
O44 - LFC:[MD5.C8AAF0D10B1BC3844E51BFC19F48004B] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\SysNative\RMActivate.exe   [359424]
O44 - LFC:[MD5.C8AAF0D10B1BC3844E51BFC19F48004B] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\System32\RMActivate.exe   [359424]
O44 - LFC:[MD5.F1D89890A434B46242DFB73EB2DAEE5A] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Shell User Logon.) -- C:\Windows\SysNative\shgina.dll   [28160]
O44 - LFC:[MD5.F1D89890A434B46242DFB73EB2DAEE5A] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - Windows Shell User Logon.) -- C:\Windows\System32\shgina.dll   [28160]
O44 - LFC:[MD5.90A914FE79249D6BD7F53EFF00FAECFD] - 01/06/2013 - 20:07:39 ---A- . (.Microsoft Corporation - WorkspaceRuntime.) -- C:\Windows\SysNative\wksprt.exe   [248832]
O44 - LFC:[MD5.A744BA6E04C8AA4592818178DBF89521] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - DLL Serveur SAM.) -- C:\Windows\System32\samsrv.dll   [758784]
O44 - LFC:[MD5.F55F754866D79A11D5B36DA1A17E6737] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - Nettoyage du Service Pack.) -- C:\Windows\System32\scavengeui.dll   [146944]
O44 - LFC:[MD5.CAF88D6573D21CD2AA27001DDBFDC74D] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\Drivers\rmcast.sys   [146432]
O44 - LFC:[MD5.DD85B78243A19B59F0637DCF284DA63C] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\Windows\System32\Drivers\sffp_sd.sys   [14336]
O44 - LFC:[MD5.E19D102BAF266F34592F7C742FBFA886] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\Windows\System32\msconfig.exe   [300032]
O44 - LFC:[MD5.9F4EA339FD6315CBDC4E543B2A222F45] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - WMI CMI Plugin.) -- C:\Windows\System32\wmicmiplugin.dll   [524288]
O44 - LFC:[MD5.90A914FE79249D6BD7F53EFF00FAECFD] - 01/06/2013 - 20:07:39 RSHAD . (.Microsoft Corporation - WorkspaceRuntime.) -- C:\Windows\System32\wksprt.exe   [248832]
O44 - LFC:[MD5.2C647ABE9A424E55B5F3DAE4629B4277] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\SysNative\themeui.dll   [2851840]
O44 - LFC:[MD5.2C647ABE9A424E55B5F3DAE4629B4277] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll   [2851840]
O44 - LFC:[MD5.C5BC9544F0C5C6532EFA9508732244C2] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - BCD Sysprep Plugin.) -- C:\Windows\SysNative\spbcd.dll   [78848]
O44 - LFC:[MD5.C5BC9544F0C5C6532EFA9508732244C2] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - BCD Sysprep Plugin.) -- C:\Windows\System32\spbcd.dll   [78848]
O44 - LFC:[MD5.73FCB7919DEE80EE556F2E498594EBAE] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Bibliothèque de demandeur IEEE 802.1X.) -- C:\Windows\SysNative\onex.dll   [235520]
O44 - LFC:[MD5.73FCB7919DEE80EE556F2E498594EBAE] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Bibliothèque de demandeur IEEE 802.1X.) -- C:\Windows\System32\onex.dll   [235520]
O44 - LFC:[MD5.31ABDD039F63BABBED8C031F87E0F6DE] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Bibliothèque d’interface utilisateur de dem.) -- C:\Windows\SysNative\onexui.dll   [1080320]
O44 - LFC:[MD5.31ABDD039F63BABBED8C031F87E0F6DE] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Bibliothèque d’interface utilisateur de dem.) -- C:\Windows\System32\onexui.dll   [1080320]
O44 - LFC:[MD5.D9F42719019740BAA6D1C6D536CBDAA6] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\SysNative\srvsvc.dll   [236032]
O44 - LFC:[MD5.97BA1A7979EB66F4E8E95270854DFBDC] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - DLL d’application d’assistance NetShell Séc.) -- C:\Windows\SysNative\nshipsec.dll   [455168]
O44 - LFC:[MD5.97BA1A7979EB66F4E8E95270854DFBDC] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - DLL d’application d’assistance NetShell Séc.) -- C:\Windows\System32\nshipsec.dll   [455168]
O44 - LFC:[MD5.DB76DB15EFC6E4D1153A6C5BC895948D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Dll de client de gestion de licences du log.) -- C:\Windows\SysNative\sppc.dll   [145920]
O44 - LFC:[MD5.DB76DB15EFC6E4D1153A6C5BC895948D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Dll de client de gestion de licences du log.) -- C:\Windows\System32\sppc.dll   [145920]
O44 - LFC:[MD5.DDA6773DACE0774160AAA927ECF8ADCD] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\SysNative\appmgr.dll   [479232]
O44 - LFC:[MD5.DDA6773DACE0774160AAA927ECF8ADCD] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Extension du composant logiciel enfichable.) -- C:\Windows\System32\appmgr.dll   [479232]
O44 - LFC:[MD5.FF80CAD87555E8E4D2CFD7B9058343F8] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Fichier DLL principal du service Serveur.) -- C:\Windows\SysNative\sscore.dll   [13312]
O44 - LFC:[MD5.FF80CAD87555E8E4D2CFD7B9058343F8] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Fichier DLL principal du service Serveur.) -- C:\Windows\System32\sscore.dll   [13312]
O44 - LFC:[MD5.9CEAD32E79A62150FE9F8557E58E008B] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Fusion 2.5.) -- C:\Windows\SysNative\sxs.dll   [582656]
O44 - LFC:[MD5.9CEAD32E79A62150FE9F8557E58E008B] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Fusion 2.5.) -- C:\Windows\System32\sxs.dll   [582656]
O44 - LFC:[MD5.587BB0FA7D11F81251539A630C097C8C] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Gestionnaire d’applications d’environnement.) -- C:\Windows\SysNative\appwiz.cpl   [726528]
O44 - LFC:[MD5.587BB0FA7D11F81251539A630C097C8C] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Gestionnaire d’applications d’environnement.) -- C:\Windows\System32\appwiz.cpl   [726528]
O44 - LFC:[MD5.DD48B7D93771674F330763613AA7C095] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Gestionnaire d’autorisations.) -- C:\Windows\SysNative\azroleui.dll   [472064]
O44 - LFC:[MD5.DD48B7D93771674F330763613AA7C095] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Gestionnaire d’autorisations.) -- C:\Windows\System32\azroleui.dll   [472064]
O44 - LFC:[MD5.56DAA6A090E528BD938B08616434717C] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Lanceur du Lecteur Windows Media.) -- C:\Windows\SysNative\wmpshell.dll   [132608]
O44 - LFC:[MD5.56DAA6A090E528BD938B08616434717C] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Lanceur du Lecteur Windows Media.) -- C:\Windows\System32\wmpshell.dll   [132608]
O44 - LFC:[MD5.2F794096269B32C1611B29341AD4A599] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft TAPI3 Terminal Manager.) -- C:\Windows\SysNative\termmgr.dll   [421888]
O44 - LFC:[MD5.2F794096269B32C1611B29341AD4A599] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft TAPI3 Terminal Manager.) -- C:\Windows\System32\termmgr.dll   [421888]
O44 - LFC:[MD5.1BC6D282FF30D768515EAE0431F91552] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft.WindowsFirewall.SnapIn.) -- C:\Windows\SysNative\AuthFWSnapin.dll   [5066752]
O44 - LFC:[MD5.1BC6D282FF30D768515EAE0431F91552] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft.WindowsFirewall.SnapIn.) -- C:\Windows\System32\AuthFWSnapin.dll   [5066752]
O44 - LFC:[MD5.C3761661C17C2248A9379A8FB89E3DE1] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Objet du service d’environnement Systray.) -- C:\Windows\SysNative\stobject.dll   [257024]
O44 - LFC:[MD5.C3761661C17C2248A9379A8FB89E3DE1] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Objet du service d’environnement Systray.) -- C:\Windows\System32\stobject.dll   [257024]
O44 - LFC:[MD5.BB074F35B49EB2EA416962B596281E1E] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Panneau de configuration de mon système.) -- C:\Windows\SysNative\systemcpl.dll   [419840]
O44 - LFC:[MD5.BB074F35B49EB2EA416962B596281E1E] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Panneau de configuration de mon système.) -- C:\Windows\System32\systemcpl.dll   [419840]
O44 - LFC:[MD5.F5F9D892E8196C074C3A159569EEB886] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Print Ticket Services Module.) -- C:\Windows\SysNative\prntvpt.dll   [156160]
O44 - LFC:[MD5.F5F9D892E8196C074C3A159569EEB886] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Print Ticket Services Module.) -- C:\Windows\System32\prntvpt.dll   [156160]
O44 - LFC:[MD5.10116D686A4DBA135E5C394E931E5D98] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Ressources Framework de l’Assistant Install.) -- C:\Windows\SysNative\spwizres.dll   [7680]
O44 - LFC:[MD5.10116D686A4DBA135E5C394E931E5D98] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Ressources Framework de l’Assistant Install.) -- C:\Windows\System32\spwizres.dll   [7680]
O44 - LFC:[MD5.AAEF1B0563D6EDD324E834F64D0A0ED5] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - SQL Server ODBC Driver.) -- C:\Windows\SysNative\sqlsrv32.dll   [933888]
O44 - LFC:[MD5.AAEF1B0563D6EDD324E834F64D0A0ED5] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - SQL Server ODBC Driver.) -- C:\Windows\System32\sqlsrv32.dll   [933888]
O44 - LFC:[MD5.40F0849F65D13EE87B9A9AE3C1DD6823] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\SysNative\tapisrv.dll   [316928]
O44 - LFC:[MD5.40F0849F65D13EE87B9A9AE3C1DD6823] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll   [316928]
O44 - LFC:[MD5.CA4166E8424EA3E8053876B47603DBE6] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Setup Wizard Framework.) -- C:\Windows\SysNative\spwizeng.dll   [445952]
O44 - LFC:[MD5.CA4166E8424EA3E8053876B47603DBE6] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Setup Wizard Framework.) -- C:\Windows\System32\spwizeng.dll   [445952]
O44 - LFC:[MD5.8A25506B6948EFBD5A7F37E53CCD36D9] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\SysNative\TSpkg.dll   [86016]
O44 - LFC:[MD5.8A25506B6948EFBD5A7F37E53CCD36D9] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll   [86016]
O44 - LFC:[MD5.105B83027DD0C664242CFD74EE70C11D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Windows Media Player Encoding Module.) -- C:\Windows\SysNative\WMPEncEn.dll   [2072576]
O44 - LFC:[MD5.105B83027DD0C664242CFD74EE70C11D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Windows Media Player Encoding Module.) -- C:\Windows\System32\WMPEncEn.dll   [2072576]
O44 - LFC:[MD5.355A138ABDFD43FBABCAE3A1B06AB93D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Windows Media Player Proxy Stub Dll.) -- C:\Windows\SysNative\wmpps.dll   [481280]
O44 - LFC:[MD5.355A138ABDFD43FBABCAE3A1B06AB93D] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Windows Media Player Proxy Stub Dll.) -- C:\Windows\System32\wmpps.dll   [481280]
O44 - LFC:[MD5.B0951D9AF84D9639CF81BC99BE4084C0] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Écran de veille Photos.) -- C:\Windows\SysNative\PhotoScreensaver.scr   [477696]
O44 - LFC:[MD5.B0951D9AF84D9639CF81BC99BE4084C0] - 01/06/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Écran de veille Photos.) -- C:\Windows\System32\PhotoScreensaver.scr   [477696]
O44 - LFC:[MD5.D9F42719019740BAA6D1C6D536CBDAA6] - 01/06/2013 - 20:07:38 RSHAD . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O44 - LFC:[MD5.6F020A220388ECA0AB6062DC27BD16B6] - 01/06/2013 - 20:07:38 RSHAD . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\Drivers\tdi.sys   [26624]
O44 - LFC:[MD5.CE18B2CDFC837C99E5FAE9CA6CBA5D30] - 01/06/2013 - 20:07:38 RSHAD . (.Microsoft Corporation - TS Security Filter Driver.) -- C:\Windows\System32\Drivers\tssecsrv.sys   [39424]
O44 - LFC:[MD5.C236A8735A48B165A2A7724357DBE332] - 01/06/2013 - 20:07:37 ---A- . (...) -- C:\Windows\SysNative\RacRules.xml   [105559]
O44 - LFC:[MD5.5C18CD22BE4628865FCB63337A6E5EF6] - 01/06/2013 - 20:07:37 ---A- . (...) -- C:\Windows\SysNative\ScavengeSpace.xml   [10429]
O44 - LFC:[MD5.C236A8735A48B165A2A7724357DBE332] - 01/06/2013 - 20:07:37 ---A- . (...) -- C:\Windows\System32\RacRules.xml   [105559]
O44 - LFC:[MD5.F4EA461A9DDF4861A0BDE2B0DD5645BA] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Cadre de Diagnostic réseau.) -- C:\Windows\SysNative\netdiagfx.dll   [324096]
O44 - LFC:[MD5.F4EA461A9DDF4861A0BDE2B0DD5645BA] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Cadre de Diagnostic réseau.) -- C:\Windows\System32\netdiagfx.dll   [324096]
O44 - LFC:[MD5.5A1976E146C82EE36611AD47DF626B1E] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Chiffrement de lecteur BitLocker : outil de.) -- C:\Windows\SysNative\repair-bde.exe   [51712]
O44 - LFC:[MD5.FEB91B4DA0D540865260A33838654FA3] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Co-installateur : NET.) -- C:\Windows\SysNative\nci.dll   [90112]
O44 - LFC:[MD5.FEB91B4DA0D540865260A33838654FA3] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Co-installateur : NET.) -- C:\Windows\System32\nci.dll   [90112]
O44 - LFC:[MD5.BC617A4E1B4FA8DF523A061739A0BD87] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\SysNative\seclogon.dll   [30720]
O44 - LFC:[MD5.F3B306179F1840C0813DC6771B018358] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Disque de réparation Microsoft® Windows.) -- C:\Windows\SysNative\recdisc.exe   [238080]
O44 - LFC:[MD5.5C627D1B1138676C0A7AB2C2C190D123] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Distributed COM Services.) -- C:\Windows\SysNative\rpcss.dll   [512000]
O44 - LFC:[MD5.405F4D32D2185F1F1BD753D8EEAFFB3A] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Explorateur de réseaux.) -- C:\Windows\SysNative\networkexplorer.dll   [1672704]
O44 - LFC:[MD5.405F4D32D2185F1F1BD753D8EEAFFB3A] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Explorateur de réseaux.) -- C:\Windows\System32\networkexplorer.dll   [1672704]
O44 - LFC:[MD5.EF00EAD1A0C4978C685BEB83FF1C9EF6] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Extension de configuration des connexions s.) -- C:\Windows\SysNative\rdpcfgex.dll   [10240]
O44 - LFC:[MD5.D291620D4C51C5F5FFA62CCDC52C5C13] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Informations système.) -- C:\Windows\SysNative\msinfo32.exe   [378880]
O44 - LFC:[MD5.D291620D4C51C5F5FFA62CCDC52C5C13] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Informations système.) -- C:\Windows\System32\msinfo32.exe   [378880]
O44 - LFC:[MD5.D2D30DAC4DE4EC8BF09564BB51915263] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Mappage réseau.) -- C:\Windows\SysNative\networkmap.dll   [2146816]
O44 - LFC:[MD5.D2D30DAC4DE4EC8BF09564BB51915263] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Mappage réseau.) -- C:\Windows\System32\networkmap.dll   [2146816]
O44 - LFC:[MD5.EDEC311F8BC0C12117A6492C382BE4D7] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\SysNative\qcap.dll   [181248]
O44 - LFC:[MD5.EDEC311F8BC0C12117A6492C382BE4D7] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Module d’exécution DirectShow..) -- C:\Windows\System32\qcap.dll   [181248]
O44 - LFC:[MD5.11C405A2DCF38E098316FD904A4FB662] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Moteur de sauvegarde Microsoft® Windows.) -- C:\Windows\SysNative\sdengin2.dll   [1120768]
O44 - LFC:[MD5.AFA10DB13B9A0537297AEEF2CD66352F] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Narrator.) -- C:\Windows\SysNative\Narrator.exe   [1077248]
O44 - LFC:[MD5.AC2170D1DDEEA5CEDE106DA188F18138] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Panneau de configuration - Gestion de l’ali.) -- C:\Windows\SysNative\powercfg.cpl   [173568]
O44 - LFC:[MD5.AC2170D1DDEEA5CEDE106DA188F18138] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Panneau de configuration - Gestion de l’ali.) -- C:\Windows\System32\powercfg.cpl   [173568]
O44 - LFC:[MD5.01073F2BA36792C9BFD1BD622A6247B3] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Panneau de configuration du contrôle parent.) -- C:\Windows\SysNative\wpccpl.dll   [812032]
O44 - LFC:[MD5.4FFB0D0E913D8A2767F6D8B7C0375208] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - RDPSRAPI COM Objects.) -- C:\Windows\SysNative\rdpencom.dll   [222208]
O44 - LFC:[MD5.4FFB0D0E913D8A2767F6D8B7C0375208] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - RDPSRAPI COM Objects.) -- C:\Windows\System32\rdpencom.dll   [222208]
O44 - LFC:[MD5.CDEBD55FFBDA3889AA2A8CE52B9DC097] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Sauvegarde Microsoft® Windows.) -- C:\Windows\SysNative\sdclt.exe   [1264640]
O44 - LFC:[MD5.6EA4234DC55346E0709560FE7C2C1972] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Service de sauvegarde Microsoft® Windows.) -- C:\Windows\SysNative\sdrsvc.dll   [170496]
O44 - LFC:[MD5.F97883C70C964AF913C4D1BD37D38A57] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - User Profile WMI Provider.) -- C:\Windows\SysNative\profprov.dll   [33792]
O44 - LFC:[MD5.1C27130219A604124E9E19C26B2E31EB] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\Windows\SysNative\secproc_isv.dll   [485888]
O44 - LFC:[MD5.1C27130219A604124E9E19C26B2E31EB] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Rights Management Desktop Security.) -- C:\Windows\System32\secproc_isv.dll   [485888]
O44 - LFC:[MD5.89F8615C9A46998F8808E3BD384FE3EE] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\SysNative\RMActivate_isv.exe   [362496]
O44 - LFC:[MD5.89F8615C9A46998F8808E3BD384FE3EE] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Rights Management Services Activati.) -- C:\Windows\System32\RMActivate_isv.exe   [362496]
O44 - LFC:[MD5.218A400108F280428FA22282D3268BBC] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Security Center API.) -- C:\Windows\SysNative\wscapi.dll   [63488]
O44 - LFC:[MD5.218A400108F280428FA22282D3268BBC] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Security Center API.) -- C:\Windows\System32\wscapi.dll   [63488]
O44 - LFC:[MD5.11A087ED1D82FF01F74CEA03CF25E348] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\SysNative\wshirda.dll   [13824]
O44 - LFC:[MD5.11A087ED1D82FF01F74CEA03CF25E348] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\System32\wshirda.dll   [13824]
O44 - LFC:[MD5.194ABF8D943999276C9EE0B4922E45B4] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Édition DirectShow..) -- C:\Windows\SysNative\qedit.dll   [624128]
O44 - LFC:[MD5.194ABF8D943999276C9EE0B4922E45B4] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Édition DirectShow..) -- C:\Windows\System32\qedit.dll   [624128]
O44 - LFC:[MD5.93221146D4EBBF314C29B23CD6CC391D] - 01/06/2013 - 20:07:37 ---A- . (.Microsoft Corporation - Énumérateur d’appareil mobile.) -- C:\Windows\SysNative\wpdbusenum.dll   [117248]
O44 - LFC:[MD5.5C18CD22BE4628865FCB63337A6E5EF6] - 01/06/2013 - 20:07:37 RSHAD . (...) -- C:\Windows\System32\ScavengeSpace.xml   [10429]
O44 - LFC:[MD5.5A1976E146C82EE36611AD47DF626B1E] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Chiffrement de lecteur BitLocker : outil de.) -- C:\Windows\System32\repair-bde.exe   [51712]
O44 - LFC:[MD5.BC617A4E1B4FA8DF523A061739A0BD87] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll   [30720]
O44 - LFC:[MD5.F3B306179F1840C0813DC6771B018358] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Disque de réparation Microsoft® Windows.) -- C:\Windows\System32\recdisc.exe   [238080]
O44 - LFC:[MD5.5C627D1B1138676C0A7AB2C2C190D123] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Distributed COM Services.) -- C:\Windows\System32\rpcss.dll   [512000]
O44 - LFC:[MD5.EF00EAD1A0C4978C685BEB83FF1C9EF6] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Extension de configuration des connexions s.) -- C:\Windows\System32\rdpcfgex.dll   [10240]
O44 - LFC:[MD5.759A9EEB0FA9ED79DA1FB7D4EF78866D] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\Drivers\msrpc.sys   [366976]
O44 - LFC:[MD5.53F7305169863F0A2BDDC49E116C2E11] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\Drivers\ndiswan.sys   [164352]
O44 - LFC:[MD5.11C405A2DCF38E098316FD904A4FB662] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Moteur de sauvegarde Microsoft® Windows.) -- C:\Windows\System32\sdengin2.dll   [1120768]
O44 - LFC:[MD5.AFA10DB13B9A0537297AEEF2CD66352F] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Narrator.) -- C:\Windows\System32\Narrator.exe   [1077248]
O44 - LFC:[MD5.01073F2BA36792C9BFD1BD622A6247B3] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Panneau de configuration du contrôle parent.) -- C:\Windows\System32\wpccpl.dll   [812032]
O44 - LFC:[MD5.136185F9FB2CC61E573E676AA5402356] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\Drivers\ndisuio.sys   [56832]
O44 - LFC:[MD5.AC03AF3329579FFFB455AA2DAABBE22B] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\Drivers\sbp2port.sys   [103808]
O44 - LFC:[MD5.CDEBD55FFBDA3889AA2A8CE52B9DC097] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Sauvegarde Microsoft® Windows.) -- C:\Windows\System32\sdclt.exe   [1264640]
O44 - LFC:[MD5.6EA4234DC55346E0709560FE7C2C1972] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Service de sauvegarde Microsoft® Windows.) -- C:\Windows\System32\sdrsvc.dll   [170496]
O44 - LFC:[MD5.F97883C70C964AF913C4D1BD37D38A57] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - User Profile WMI Provider.) -- C:\Windows\System32\profprov.dll   [33792]
O44 - LFC:[MD5.93221146D4EBBF314C29B23CD6CC391D] - 01/06/2013 - 20:07:37 RSHAD . (.Microsoft Corporation - Énumérateur d’appareil mobile.) -- C:\Windows\System32\wpdbusenum.dll   [117248]
O44 - LFC:[MD5.C1FC0D0BCA806CAD557C7CAF3E78E1DA] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Bashkir Keyboard Layout.) -- C:\Windows\SysNative\KBDBASH.DLL   [7168]
O44 - LFC:[MD5.C1FC0D0BCA806CAD557C7CAF3E78E1DA] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Bashkir Keyboard Layout.) -- C:\Windows\System32\KBDBASH.DLL   [7168]
O44 - LFC:[MD5.77FD3C1F628FDA66DEA1D8234CEC7E52] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Composant MMC Utilisateurs et groupes locau.) -- C:\Windows\SysNative\localsec.dll   [551936]
O44 - LFC:[MD5.77FD3C1F628FDA66DEA1D8234CEC7E52] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Composant MMC Utilisateurs et groupes locau.) -- C:\Windows\System32\localsec.dll   [551936]
O44 - LFC:[MD5.ED3AF52CE4FFBE152BD27D0B6CE676F5] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Moniteur de s.) -- C:\Windows\SysNative\ipsmsnap.dll   [584192]
O44 - LFC:[MD5.ED3AF52CE4FFBE152BD27D0B6CE676F5] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Composant logiciel enfichable Moniteur de s.) -- C:\Windows\System32\ipsmsnap.dll   [584192]
O44 - LFC:[MD5.4E1EED4AC7C69E33BA461E68F748EFA0] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\Windows\SysNative\KBDLT1.DLL   [7168]
O44 - LFC:[MD5.4E1EED4AC7C69E33BA461E68F748EFA0] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Lithuanian Keyboard Layout.) -- C:\Windows\System32\KBDLT1.DLL   [7168]
O44 - LFC:[MD5.C6E8BA35B529D33E2056C4922CC11336] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Oriya Keyboard Layout.) -- C:\Windows\SysNative\KBDINORI.DLL   [7168]
O44 - LFC:[MD5.C6E8BA35B529D33E2056C4922CC11336] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Oriya Keyboard Layout.) -- C:\Windows\System32\KBDINORI.DLL   [7168]
O44 - LFC:[MD5.8DD52E8E6128F4B2DA92CE27402871C1] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Service de périphériques d’images fixes.) -- C:\Windows\SysNative\wiaservc.dll   [580096]
O44 - LFC:[MD5.9662EE182644511439F1C53745DC1C88] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Service du gestionnaire de session locale.) -- C:\Windows\SysNative\lsm.exe   [343040]
O44 - LFC:[MD5.713B611F6B796EECDA6F9970ACD9845B] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Setup Wizard Framework.) -- C:\Windows\SysNative\uxlib.dll   [154624]
O44 - LFC:[MD5.713B611F6B796EECDA6F9970ACD9845B] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Setup Wizard Framework.) -- C:\Windows\System32\uxlib.dll   [154624]
O44 - LFC:[MD5.59825A3288FDEC4D00FF99ADBD77AD79] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\Windows\SysNative\KBDINTEL.DLL   [7168]
O44 - LFC:[MD5.59825A3288FDEC4D00FF99ADBD77AD79] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Telugu Keyboard Layout.) -- C:\Windows\System32\KBDINTEL.DLL   [7168]
O44 - LFC:[MD5.35701AA2A2B63A97714B1016374E0557] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\Windows\SysNative\KBDTUQ.DLL   [8192]
O44 - LFC:[MD5.35701AA2A2B63A97714B1016374E0557] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Turkish Q Keyboard Layout.) -- C:\Windows\System32\KBDTUQ.DLL   [8192]
O44 - LFC:[MD5.7A17485DC7D8A7AC81321A42CD034519] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Userenv.) -- C:\Windows\SysNative\userenv.dll   [109056]
O44 - LFC:[MD5.7A17485DC7D8A7AC81321A42CD034519] - 01/06/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Userenv.) -- C:\Windows\System32\userenv.dll   [109056]
O44 - LFC:[MD5.99F8E788246D495CE3794D7E7821D2CA] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\Drivers\acpipmi.sys   [12800]
O44 - LFC:[MD5.24FBF5CC5C04150073C315A7C83521EE] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\Drivers\ks.sys   [243712]
O44 - LFC:[MD5.E60C0A09F997826C7627B244195AB581] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\Windows\System32\Drivers\vms3cap.sys   [6656]
O44 - LFC:[MD5.7DE90B48F210D29649380545DB45A187] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\Windows\System32\Drivers\VMBusHID.sys   [21760]
O44 - LFC:[MD5.8DD52E8E6128F4B2DA92CE27402871C1] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - Service de périphériques d’images fixes.) -- C:\Windows\System32\wiaservc.dll   [580096]
O44 - LFC:[MD5.9662EE182644511439F1C53745DC1C88] - 01/06/2013 - 20:07:36 RSHAD . (.Microsoft Corporation - Service du gestionnaire de session locale.) -- C:\Windows\System32\lsm.exe   [343040]
O44 - LFC:[MD5.03E012434BBE2B66D8C56B4A69461615] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Composant Connexion RemoteApp et Bureau à d.) -- C:\Windows\SysNative\TSWorkspace.dll   [750080]
O44 - LFC:[MD5.03E012434BBE2B66D8C56B4A69461615] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Composant Connexion RemoteApp et Bureau à d.) -- C:\Windows\System32\TSWorkspace.dll   [750080]
O44 - LFC:[MD5.6D3E70937228FD90F2A7185D33D4C46E] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - DLL d’IU des quotas de disque système.) -- C:\Windows\SysNative\dskquoui.dll   [239616]
O44 - LFC:[MD5.6D3E70937228FD90F2A7185D33D4C46E] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - DLL d’IU des quotas de disque système.) -- C:\Windows\System32\dskquoui.dll   [239616]
O44 - LFC:[MD5.C7301A1D3DB09DE86528D9D916069859] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\SysNative\dfrgui.exe   [606208]
O44 - LFC:[MD5.C7301A1D3DB09DE86528D9D916069859] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\System32\dfrgui.exe   [606208]
O44 - LFC:[MD5.32802C0F6FC7C8F561B9D91F52A46421] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\SysNative\cscui.dll   [498688]
O44 - LFC:[MD5.06CBA28981689B96B1E6A16F463F2260] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Intel Microcode Update Library.) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll   [299392]
O44 - LFC:[MD5.A3D570EEADFFA62D3DC8AB10E281FF8B] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Interface utilisateur commune du service d’.) -- C:\Windows\SysNative\dsuiext.dll   [701440]
O44 - LFC:[MD5.A3D570EEADFFA62D3DC8AB10E281FF8B] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Interface utilisateur commune du service d’.) -- C:\Windows\System32\dsuiext.dll   [701440]
O44 - LFC:[MD5.8F4BB0CFECED925D440ABC2481278360] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - MAPI 1.0 étendue pour Windows NT.) -- C:\Windows\SysNative\mapi32.dll   [91648]
O44 - LFC:[MD5.8F4BB0CFECED925D440ABC2481278360] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - MAPI 1.0 étendue pour Windows NT.) -- C:\Windows\SysNative\mapistub.dll   [91648]
O44 - LFC:[MD5.8F4BB0CFECED925D440ABC2481278360] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - MAPI 1.0 étendue pour Windows NT.) -- C:\Windows\System32\mapi32.dll   [91648]
O44 - LFC:[MD5.8F4BB0CFECED925D440ABC2481278360] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - MAPI 1.0 étendue pour Windows NT.) -- C:\Windows\System32\mapistub.dll   [91648]
O44 - LFC:[MD5.C37D1BCE87EE81C17EE602F1391DDE48] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - MCMDE DLL.) -- C:\Windows\SysNative\mcmde.dll   [1009152]
O44 - LFC:[MD5.E8706A051BFFC9DA9E9B935AAA432AAC] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Media Foundation ReadWrite DLL.) -- C:\Windows\SysNative\mfreadwrite.dll   [257024]
O44 - LFC:[MD5.E8706A051BFFC9DA9E9B935AAA432AAC] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Media Foundation ReadWrite DLL.) -- C:\Windows\System32\mfreadwrite.dll   [257024]
O44 - LFC:[MD5.383345EA4003833B44D40E4F363034DD] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Address.) -- C:\Windows\SysNative\dpnaddr.dll   [3072]
O44 - LFC:[MD5.383345EA4003833B44D40E4F363034DD] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Microsoft DirectPlay8 Address.) -- C:\Windows\System32\dpnaddr.dll   [3072]
O44 - LFC:[MD5.DC50B0FE1C3F654AC25B5484BF3A458C] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Panneau de configuration Dépannage.) -- C:\Windows\SysNative\DiagCpl.dll   [1202176]
O44 - LFC:[MD5.887EB84BB2EC3F4C1510C98E8C1ADFC0] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Utilisateur du Panneau de configuration.) -- C:\Windows\SysNative\usercpl.dll   [625664]
O44 - LFC:[MD5.887EB84BB2EC3F4C1510C98E8C1ADFC0] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - Utilisateur du Panneau de configuration.) -- C:\Windows\System32\usercpl.dll   [625664]
O44 - LFC:[MD5.BA94F132C66F2BD456854490C800C4F2] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - WIA Video.) -- C:\Windows\SysNative\wiavideo.dll   [124928]
O44 - LFC:[MD5.BA94F132C66F2BD456854490C800C4F2] - 01/06/2013 - 20:07:35 ---A- . (.Microsoft Corporation - WIA Video.) -- C:\Windows\System32\wiavideo.dll   [124928]
O44 - LFC:[MD5.32802C0F6FC7C8F561B9D91F52A46421] - 01/06/2013 - 20:07:35 RSHAD . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll   [498688]
O44 - LFC:[MD5.06CBA28981689B96B1E6A16F463F2260] - 01/06/2013 - 20:07:35 RSHAD . (.Microsoft Corporation - Intel Microcode Update Library.) -- C:\Windows\System32\mcupdate_GenuineIntel.dll   [299392]
O44 - LFC:[MD5.C37D1BCE87EE81C17EE602F1391DDE48] - 01/06/2013 - 20:07:35 RSHAD . (.Microsoft Corporation - MCMDE DLL.) -- C:\Windows\System32\mcmde.dll   [1009152]
O44 - LFC:[MD5.DC50B0FE1C3F654AC25B5484BF3A458C] - 01/06/2013 - 20:07:35 RSHAD . (.Microsoft Corporation - Panneau de configuration Dépannage.) -- C:\Windows\System32\DiagCpl.dll   [1202176]
O44 - LFC:[MD5.14DFDEAF4E589ED3F1FF187A86B9408C] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l’expérience u.) -- C:\Windows\SysNative\comctl32.dll   [633856]
O44 - LFC:[MD5.14DFDEAF4E589ED3F1FF187A86B9408C] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l’expérience u.) -- C:\Windows\System32\comctl32.dll   [633856]
O44 - LFC:[MD5.4BA77A5EF71C14C764B0ED4701683E3E] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Bibliothèque principale du Gestionnaire de.) -- C:\Windows\SysNative\dwmcore.dll   [1632256]
O44 - LFC:[MD5.4BA77A5EF71C14C764B0ED4701683E3E] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Bibliothèque principale du Gestionnaire de.) -- C:\Windows\System32\dwmcore.dll   [1632256]
O44 - LFC:[MD5.52D3D5E3586988D4D9E34ACAAC33105C] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\SysNative\credssp.dll   [22016]
O44 - LFC:[MD5.52D3D5E3586988D4D9E34ACAAC33105C] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll   [22016]
O44 - LFC:[MD5.7881A5557CD9A9D40D994A57D24001AB] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - DLL du composant logiciel enfichable MMC Cl.) -- C:\Windows\SysNative\dnscmmc.dll   [118272]
O44 - LFC:[MD5.7881A5557CD9A9D40D994A57D24001AB] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - DLL du composant logiciel enfichable MMC Cl.) -- C:\Windows\System32\dnscmmc.dll   [118272]
O44 - LFC:[MD5.3AB183AB4D2C79DCF459CD2C1266B043] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - DLL du service CSC.) -- C:\Windows\SysNative\cscsvc.dll   [692224]
O44 - LFC:[MD5.BBAAE027C176402E221CADBFCAEB5407] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Dossiers compressés.) -- C:\Windows\System32\zipfldr.dll   [366080]
O44 - LFC:[MD5.103D54F329686C2CCF67156117A30D53] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\Windows\SysNative\C_ISCII.DLL   [13312]
O44 - LFC:[MD5.103D54F329686C2CCF67156117A30D53] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - ISCII Code Page Translation DLL.) -- C:\Windows\System32\C_ISCII.DLL   [13312]
O44 - LFC:[MD5.650CAEA856943E29F25A25D31E004B18] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Microsoft  Fax API Support DLL.) -- C:\Windows\SysNative\FXSAPI.dll   [623104]
O44 - LFC:[MD5.650CAEA856943E29F25A25D31E004B18] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Microsoft  Fax API Support DLL.) -- C:\Windows\System32\FXSAPI.dll   [623104]
O44 - LFC:[MD5.43FA401CF9F3343F5B0CB800909506B5] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Microsoft  Fax TIFF library.) -- C:\Windows\SysNative\FXSTIFF.dll   [434688]
O44 - LFC:[MD5.11338E0557B07BC32CDB980B6EDB35AA] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Module d’intégrité du code.) -- C:\Windows\SysNative\ci.dll   [780008]
O44 - LFC:[MD5.7EE5F17A21D9A9101207DF4BC37B085D] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Offline Files Temporary Shim.) -- C:\Windows\SysNative\cscdll.dll   [30208]
O44 - LFC:[MD5.7EE5F17A21D9A9101207DF4BC37B085D] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Offline Files Temporary Shim.) -- C:\Windows\System32\cscdll.dll   [30208]
O44 - LFC:[MD5.1BF0CB861A48FEB1638228760750F3CB] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Offline Files Win32 API.) -- C:\Windows\SysNative\cscapi.dll   [46080]
O44 - LFC:[MD5.1BF0CB861A48FEB1638228760750F3CB] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Offline Files Win32 API.) -- C:\Windows\System32\cscapi.dll   [46080]
O44 - LFC:[MD5.DC3302590D5D3841CDAF391A282FED06] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Stratégie de groupe Client de préférences.) -- C:\Windows\SysNative\gpprefcl.dll   [784896]
O44 - LFC:[MD5.DC3302590D5D3841CDAF391A282FED06] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Stratégie de groupe Client de préférences.) -- C:\Windows\System32\gpprefcl.dll   [784896]
O44 - LFC:[MD5.DC81872E3E6BCA39B322A7FA1A044040] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Utilitaire d’administration BITS.) -- C:\Windows\SysNative\bitsadmin.exe   [232448]
O44 - LFC:[MD5.DC81872E3E6BCA39B322A7FA1A044040] - 01/06/2013 - 20:07:34 ---A- . (.Microsoft Corporation - Utilitaire d’administration BITS.) -- C:\Windows\System32\bitsadmin.exe   [232448]
O44 - LFC:[MD5.3AB183AB4D2C79DCF459CD2C1266B043] - 01/06/2013 - 20:07:34 RSHAD . (.Microsoft Corporation - DLL du service CSC.) -- C:\Windows\System32\cscsvc.dll   [692224]
O44 - LFC:[MD5.DA6B67270FD9DB3697B20FCE94950741] - 01/06/2013 - 20:07:34 RSHAD . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\Windows\System32\Drivers\fltMgr.sys   [289664]
O44 - LFC:[MD5.43FA401CF9F3343F5B0CB800909506B5] - 01/06/2013 - 20:07:34 RSHAD . (.Microsoft Corporation - Microsoft  Fax TIFF library.) -- C:\Windows\System32\FXSTIFF.dll   [434688]
O44 - LFC:[MD5.11338E0557B07BC32CDB980B6EDB35AA] - 01/06/2013 - 20:07:34 RSHAD . (.Microsoft Corporation - Module d’intégrité du code.) -- C:\Windows\System32\ci.dll   [780008]
O44 - LFC:[MD5.03AB2A2E426C2AD400AC8315226347F8] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - API du périphérique de stockage amélioré Wi.) -- C:\Windows\SysNative\EhStorAPI.dll   [144896]
O44 - LFC:[MD5.03AB2A2E426C2AD400AC8315226347F8] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - API du périphérique de stockage amélioré Wi.) -- C:\Windows\System32\EhStorAPI.dll   [144896]
O44 - LFC:[MD5.E5E13FCBD1D247BF4CCD8BE3C7D8A5EA] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Extension Stratégie de groupe de redirectio.) -- C:\Windows\SysNative\fdeploy.dll   [72192]
O44 - LFC:[MD5.E5E13FCBD1D247BF4CCD8BE3C7D8A5EA] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Extension Stratégie de groupe de redirectio.) -- C:\Windows\System32\fdeploy.dll   [72192]
O44 - LFC:[MD5.859E2A5AB0CBD752F9C030D74F55D30C] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - FIXMAPI 1.0 MAPI Repair Tool.) -- C:\Windows\SysNative\fixmapi.exe   [17920]
O44 - LFC:[MD5.859E2A5AB0CBD752F9C030D74F55D30C] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - FIXMAPI 1.0 MAPI Repair Tool.) -- C:\Windows\System32\fixmapi.exe   [17920]
O44 - LFC:[MD5.E060CAF6D6C303A2C9BC13435F7F81A1] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - IFS Utility DLL.) -- C:\Windows\SysNative\ifsutil.dll   [180736]
O44 - LFC:[MD5.E060CAF6D6C303A2C9BC13435F7F81A1] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - IFS Utility DLL.) -- C:\Windows\System32\ifsutil.dll   [180736]
O44 - LFC:[MD5.6A2E9BBD516D064C925A9634A5632854] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Utilitaire (QGREP) de recherche de chaînes.) -- C:\Windows\SysNative\findstr.exe   [71168]
O44 - LFC:[MD5.6A2E9BBD516D064C925A9634A5632854] - 01/06/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Utilitaire (QGREP) de recherche de chaînes.) -- C:\Windows\System32\findstr.exe   [71168]
O44 - LFC:[MD5.7299DF5CF81135934740211D9A946737] - 01/06/2013 - 19:48:44 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\D3DCompiler_36.dll   [2006552]
O44 - LFC:[MD5.570FDAE7041775DE0C67747BB7081939] - 01/06/2013 - 19:48:44 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\d3dx10_36.dll   [508264]
O44 - LFC:[MD5.7299DF5CF81135934740211D9A946737] - 01/06/2013 - 19:48:44 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\D3DCompiler_36.dll   [2006552]
O44 - LFC:[MD5.570FDAE7041775DE0C67747BB7081939] - 01/06/2013 - 19:48:44 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\d3dx10_36.dll   [508264]
O44 - LFC:[MD5.E8932AF24786765859558CB79E385AC2] - 01/06/2013 - 19:48:44 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_10.dll   [411656]
O44 - LFC:[MD5.B21427EDF0449E92000FF497DAAF89C9] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\D3DCompiler_35.dll   [1985904]
O44 - LFC:[MD5.84116AA94672D623B95217648AE5B5B9] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\d3dx10_35.dll   [508264]
O44 - LFC:[MD5.B21427EDF0449E92000FF497DAAF89C9] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\D3DCompiler_35.dll   [1985904]
O44 - LFC:[MD5.84116AA94672D623B95217648AE5B5B9] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\d3dx10_35.dll   [508264]
O44 - LFC:[MD5.BBB6C6833C30E323B41860D6DF61972D] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_36.dll   [5081608]
O44 - LFC:[MD5.BBB6C6833C30E323B41860D6DF61972D] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_36.dll   [5081608]
O44 - LFC:[MD5.A69C32C2BD01522A088D254342826866] - 01/06/2013 - 19:48:43 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_9.dll   [411496]
O44 - LFC:[MD5.1B3AF16A27D390096925576202A64037] - 01/06/2013 - 19:48:42 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_35.dll   [5073256]
O44 - LFC:[MD5.1B3AF16A27D390096925576202A64037] - 01/06/2013 - 19:48:42 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_35.dll   [5073256]
O44 - LFC:[MD5.9D9407F52B8E24E99358D9944B0D5FA3] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\D3DCompiler_34.dll   [1401200]
O44 - LFC:[MD5.1ED4E7A82BD5C7DEED082F00E63BB7A0] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\d3dx10_34.dll   [506728]
O44 - LFC:[MD5.9D9407F52B8E24E99358D9944B0D5FA3] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\D3DCompiler_34.dll   [1401200]
O44 - LFC:[MD5.1ED4E7A82BD5C7DEED082F00E63BB7A0] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\d3dx10_34.dll   [506728]
O44 - LFC:[MD5.AE5D5439525B4A4CBF206058D493685D] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_34.dll   [4496232]
O44 - LFC:[MD5.AE5D5439525B4A4CBF206058D493685D] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_34.dll   [4496232]
O44 - LFC:[MD5.BC78D5328541410510DDE06B9FA92024] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\Windows\System32\X3DAudio1_2.dll   [21000]
O44 - LFC:[MD5.FA485E76F94B7457767E372F47757733] - 01/06/2013 - 19:48:41 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_8.dll   [409960]
O44 - LFC:[MD5.BFB3091B167550EC6E6454813D3DB244] - 01/06/2013 - 19:48:40 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\Windows\System32\xinput1_3.dll   [107368]
O44 - LFC:[MD5.3EBF620536A13CA343E52ECA4F0DE7F8] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\D3DCompiler_33.dll   [1400176]
O44 - LFC:[MD5.839C3921005BB41D441E3752C74F2292] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\d3dx10_33.dll   [506728]
O44 - LFC:[MD5.3EBF620536A13CA343E52ECA4F0DE7F8] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\D3DCompiler_33.dll   [1400176]
O44 - LFC:[MD5.839C3921005BB41D441E3752C74F2292] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\d3dx10_33.dll   [506728]
O44 - LFC:[MD5.3172C3CAC8EA7CA1B5D5AF6699C037D6] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_33.dll   [4494184]
O44 - LFC:[MD5.3172C3CAC8EA7CA1B5D5AF6699C037D6] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_33.dll   [4494184]
O44 - LFC:[MD5.8C970509E0AE10061E3ED6D51E34FEB9] - 01/06/2013 - 19:48:39 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_7.dll   [403304]
O44 - LFC:[MD5.398FF46FF7354FED2F0F1AECDB546866] - 01/06/2013 - 19:48:38 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_5.dll   [390424]
O44 - LFC:[MD5.4837A54574A6105D404A8560984B93DD] - 01/06/2013 - 19:48:38 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_6.dll   [393576]
O44 - LFC:[MD5.8251826F04BA0822D08AD9B92C65A3D5] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\SysNative\d3dx10.dll   [469264]
O44 - LFC:[MD5.8251826F04BA0822D08AD9B92C65A3D5] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - Microsoft Direct3D.) -- C:\Windows\System32\d3dx10.dll   [469264]
O44 - LFC:[MD5.A4DDFE5DC4E73D1FED9B1B3A3D885612] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_32.dll   [4398360]
O44 - LFC:[MD5.A4DDFE5DC4E73D1FED9B1B3A3D885612] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_32.dll   [4398360]
O44 - LFC:[MD5.489E5B8BB1BD1028FF1C798EAAEC65E4] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\Windows\System32\x3daudio1_1.dll   [17688]
O44 - LFC:[MD5.58BB51253427A834A8807B9245CC5965] - 01/06/2013 - 19:48:37 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_4.dll   [364824]
O44 - LFC:[MD5.06F15D3CB1AE0EAFA50F595B3FF8D9F5] - 01/06/2013 - 19:48:36 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\Windows\System32\xinput1_2.dll   [83736]
O44 - LFC:[MD5.FAAA0BB9CD2905B25334132E5BA093EB] - 01/06/2013 - 19:48:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_31.dll   [3977496]
O44 - LFC:[MD5.FAAA0BB9CD2905B25334132E5BA093EB] - 01/06/2013 - 19:48:36 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_31.dll   [3977496]
O44 - LFC:[MD5.0396D2A98B0CCD4419B572EBF618E81E] - 01/06/2013 - 19:48:36 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_3.dll   [363288]
O44 - LFC:[MD5.6F9D3289D8B166E478AFFF9EFA92C42C] - 01/06/2013 - 19:48:35 ---A- . (.Microsoft Corporation - Microsoft Common Controller API.) -- C:\Windows\System32\xinput1_1.dll   [83664]
O44 - LFC:[MD5.DC5A914C34EB12056531777D4DD0F44E] - 01/06/2013 - 19:48:35 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_2.dll   [354072]
O44 - LFC:[MD5.0CC809422AB40974DFF8078392E4D507] - 01/06/2013 - 19:48:34 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_1.dll   [352464]
O44 - LFC:[MD5.E09A9CF383ACF4A28038561E62277377] - 01/06/2013 - 19:48:31 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_30.dll   [3927248]
O44 - LFC:[MD5.E09A9CF383ACF4A28038561E62277377] - 01/06/2013 - 19:48:31 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_30.dll   [3927248]
O44 - LFC:[MD5.F77D5AB654881E683CFF6650916C424E] - 01/06/2013 - 19:48:31 ---A- . (.Microsoft Corporation - X3DAudio.) -- C:\Windows\System32\x3daudio1_0.dll   [16592]
O44 - LFC:[MD5.CE5753F9A27837259EB52F3F47F39593] - 01/06/2013 - 19:48:31 ---A- . (.Microsoft Corporation - XACT Engine API.) -- C:\Windows\System32\xactengine2_0.dll   [355536]
O44 - LFC:[MD5.88BAC8306D4EC79A82B1FFA17DC8CF4A] - 01/06/2013 - 19:48:30 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_28.dll   [3815120]
O44 - LFC:[MD5.68B35CBDB4A8CC424718BBCC894FEEEA] - 01/06/2013 - 19:48:30 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_29.dll   [3830992]
O44 - LFC:[MD5.88BAC8306D4EC79A82B1FFA17DC8CF4A] - 01/06/2013 - 19:48:30 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_28.dll   [3815120]
O44 - LFC:[MD5.68B35CBDB4A8CC424718BBCC894FEEEA] - 01/06/2013 - 19:48:30 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_29.dll   [3830992]
O44 - LFC:[MD5.4C56E7C5B2A61353E534C7D15D05856D] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_25.dll   [3823312]
O44 - LFC:[MD5.44F5C5E27D6825E4E62420BC29B8B533] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_26.dll   [3767504]
O44 - LFC:[MD5.914C3237E4D145A18DCD1D0D4C8659E1] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_27.dll   [3807440]
O44 - LFC:[MD5.4C56E7C5B2A61353E534C7D15D05856D] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_25.dll   [3823312]
O44 - LFC:[MD5.44F5C5E27D6825E4E62420BC29B8B533] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_26.dll   [3767504]
O44 - LFC:[MD5.914C3237E4D145A18DCD1D0D4C8659E1] - 01/06/2013 - 19:48:29 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_27.dll   [3807440]
O44 - LFC:[MD5.B165DF72E13E6AF74D47013504319921] - 01/06/2013 - 19:48:28 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\SysNative\d3dx9_24.dll   [3544272]
O44 - LFC:[MD5.B165DF72E13E6AF74D47013504319921] - 01/06/2013 - 19:48:28 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_24.dll   [3544272]
O44 - LFC:[MD5.CE34958B7084737DB681BAD0426E797C] - 01/06/2013 - 17:33:53 ---A- . (.Visagesoft - Visagesoft Printer Port Monitor.) -- C:\Windows\SysNative\vsmon1.dll   [23552]
O44 - LFC:[MD5.CE34958B7084737DB681BAD0426E797C] - 01/06/2013 - 17:33:53 RSHAD . (.Visagesoft - Visagesoft Printer Port Monitor.) -- C:\Windows\System32\vsmon1.dll   [23552]
O44 - LFC:[MD5.A103FDF7348130EF3F3FEF56B1700A27] - 01/06/2013 - 13:02:58 ---A- . (...) -- C:\END   [9]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/06/2013 - 09:53:49 ---A- . (...) -- C:\Windows\ativpsrm.bin   [0]
O44 - LFC:[MD5.FDA1E117A7E880BFF5540D180C06EA87] - 01/06/2013 - 09:50:18 RSHAD . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\AtihdW76.sys   [116240]
O44 - LFC:[MD5.DDEECB73EAA47F84CBEA7CC0C279330F] - 01/06/2013 - 09:49:36 ---A- . (...) -- C:\Windows\SysNative\atiapfxx.blb   [78848]
O44 - LFC:[MD5.9E11B96A2051A336ACD6DBCCD918B5F4] - 01/06/2013 - 09:49:36 ---A- . (...) -- C:\Windows\SysNative\atipblag.dat   [2857]
O44 - LFC:[MD5.9E11B96A2051A336ACD6DBCCD918B5F4] - 01/06/2013 - 09:49:36 ---A- . (...) -- C:\Windows\System32\atipblag.dat   [2857]
O44 - LFC:[MD5.53E8269C811E750861B1C6E4E67B86C9] - 01/06/2013 - 09:49:36 ---A- . (...) -- C:\Windows\atiogl.xml   [22190]
O44 - LFC:[MD5.64B95F7B70693EEB4DE20111DCF6ED38] - 01/06/2013 - 09:49:36 ---A- . (.AMD - CoInstaller DLL.) -- C:\Windows\SysNative\coinst.dll   [58880]
O44 - LFC:[MD5.B369BCD378FB18D36026AAF82BDE2129] - 01/06/2013 - 09:49:36 ---A- . (.Advanced Micro Devices, Inc. - Graphics DEM.) -- C:\Windows\SysNative\ATIDEMGX.dll   [450560]
O44 - LFC:[MD5.DDEECB73EAA47F84CBEA7CC0C279330F] - 01/06/2013 - 09:49:36 RSHAD . (...) -- C:\Windows\System32\atiapfxx.blb   [78848]
O44 - LFC:[MD5.64B95F7B70693EEB4DE20111DCF6ED38] - 01/06/2013 - 09:49:36 RSHAD . (.AMD - CoInstaller DLL.) -- C:\Windows\System32\coinst.dll   [58880]
O44 - LFC:[MD5.B369BCD378FB18D36026AAF82BDE2129] - 01/06/2013 - 09:49:36 RSHAD . (.Advanced Micro Devices, Inc. - Graphics DEM.) -- C:\Windows\System32\ATIDEMGX.dll   [450560]
O44 - LFC:[MD5.5801BB0B48B9D66A7462D7B807599A81] - 01/06/2013 - 05:10:29 RSHAD . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\Drivers\idmwfp.sys   [168288]
~ Files: 1999 Scanned in 06mn 30s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ LSA: 8 Scanned in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Advanced SystemCare 6  [Key] . (.IObit - ASCTray.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
O53 - SMSR:HKLM\...\startupreg\IDMan  [Key] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
O53 - SMSR:HKLM\...\startupreg\IObit Malware Fighter  [Key] . (.IObit - IObit Malware Fighter.) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
O53 - SMSR:HKLM\...\startupreg\MyTomTomSA.exe  [Key] . (.TomTom - MyTomTom.) -- C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
O53 - SMSR:HKLM\...\startupreg\Sidebar  [Key] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O53 - SMSR:HKLM\...\startupreg\StartCCC  [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O53 - SMSR:HKLM\...\startupreg\swg  [Key] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O53 - SMSR:HKLM\...\startupreg\vspdfprsrv.exe  [Key] . (.Visagesoft - Expert PDF 7 Converter.) -- C:\Program Files (x86)\Avanquest\Expert PDF 7 Converter\vspdfprsrv.exe
~ SMSR Keys: 8 Scanned in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 4 Scanned in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.E74DC2F3F9675A6025A4AA020EDD4341] - 29/11/2010 - 16:42:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys   [38224]
O58 - SDL:[MD5.A4330E8047A5341801F087D1BD02B7EF] - 01/06/2013 - 19:39:33 -SHA- . (...) -- C:\Windows\SysWOW64\KGyGaAvL.sys   [952]
~ Drivers:  Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 08/06/2013 - 14:43:07 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\places.sqlite   [10485760]
O61 - LFC: 08/06/2013 - 14:43:29 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\D\89\2B826d01   [36719]
O61 - LFC: 08/06/2013 - 15:14:36 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\76\C015Cd01   [20465]
O61 - LFC: 08/06/2013 - 15:14:50 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\A7\A0B3Dd01   [16634]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\2\06\440EAd01   [18804]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\08\AC80Dd01   [17701]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\04\09931d01   [22172]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\C4\DB9A3d01   [57379]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\FD\4DB24d01   [68810]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\D\D3\B7CEAd01   [17915]
O61 - LFC: 08/06/2013 - 15:14:51 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\E\3A\EFF9Fd01   [63276]
O61 - LFC: 08/06/2013 - 15:14:52 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\AA\F5AA8d01   [19508]
O61 - LFC: 08/06/2013 - 15:54:24 ---A- C:\Users\OriSon\Bureau\vidéo thématique 11 -les fibres seconde partie _#8211; _laquo; le meilleur extracteur de jus du monde _raquo; et différence entre extraction des jus et passage au mixeur.FLV   [92257298]
O61 - LFC: 08/06/2013 - 16:05:26 ---A- C:\Users\OriSon\Bureau\un jus pour accompagner la detoxination.mp3   [6461041]
O61 - LFC: 08/06/2013 - 16:16:54 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\BC\B9490d01   [22859]
O61 - LFC: 08/06/2013 - 16:20:11 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmupdt.exe   [5083760]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\META-INF\manifest.mf   [2453]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\META-INF\zigbert.rsa   [4848]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\META-INF\zigbert.sf   [2561]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\chrome.manifest   [1459]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\chrome\idmmzcc.jar   [5879]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\iIDMHelper.xpt   [331]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\iIDMMzCC.xpt   [569]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll   [270360]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll   [384536]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\idmhelper.js   [1469]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc.dll   [34216]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components2\idmmzcc64.dll   [28512]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components9\idmmzcc.dll   [24384]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components9\idmmzcc64.dll   [28480]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components\iIDMHelper5.xpt   [2115]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components\iIDMMzCC.xpt   [569]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components\idmhelper5.js   [18351]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\components\idmmzcc.dll   [34216]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\install.js   [696]
O61 - LFC: 08/06/2013 - 16:20:27 ---A- C:\Users\OriSon\AppData\Roaming\IDM\idmmzcc5\install.rdf   [2645]
O61 - LFC: 08/06/2013 - 18:01:45 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\PFilterkey.dbd   [44]
O61 - LFC: 08/06/2013 - 18:31:58 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Backup\ASCBackup32-2013-06-08(19-31-58).reg   [75435]
O61 - LFC: 08/06/2013 - 18:31:58 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Backup\ASCBackup64-2013-06-08(19-31-58).reg   [270782]
O61 - LFC: 08/06/2013 - 18:31:58 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Log\ASCLog-2013-06-08(19-31-58).txt   [327314]
O61 - LFC: 08/06/2013 - 18:34:28 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Internet Booster\ASCFirefoxBak.dat   [570]
O61 - LFC: 08/06/2013 - 18:35:14 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Internet Booster\InternetBoosterLog.txt   [21]
O61 - LFC: 08/06/2013 - 18:39:25 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Backup\ASCBackup32-2013-06-08(19-39-25).reg   [3690]
O61 - LFC: 08/06/2013 - 18:39:25 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Log\ASCLog-2013-06-08(19-39-25).txt   [8224]
O61 - LFC: 08/06/2013 - 19:09:44 ---A- C:\Users\OriSon\Bureau\FILMS.lnk   [649]
O61 - LFC: 08/06/2013 - 19:28:42 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\PowerP12.pip   [1468]
O61 - LFC: 08/06/2013 - 21:05:44 ---A- C:\Users\OriSon\AppData\Local\CrashDumps\explorer.exe.1744.dmp   [2517013]
O61 - LFC: 09/06/2013 - 07:36:13 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\75\BEC0Cd01   [17309]
O61 - LFC: 09/06/2013 - 07:36:13 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\2\FA\A3A42d01   [170691]
O61 - LFC: 09/06/2013 - 07:36:13 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\66\893F6d01   [47883]
O61 - LFC: 09/06/2013 - 11:21:52 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Répertoire téléphonique.LNK   [537]
O61 - LFC: 09/06/2013 - 11:21:52 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Répertoire téléphonique.xls.LNK   [693]
O61 - LFC: 09/06/2013 - 11:27:06 ---A- C:\Users\OriSon\Bureau\comment je vois le monde (albert einstein).PNG   [44635]
O61 - LFC: 09/06/2013 - 11:28:26 ---A- C:\Users\OriSon\Contacts\OriSon.contact   [44597]
O61 - LFC: 09/06/2013 - 11:58:11 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Dentistes.LNK   [635]
O61 - LFC: 09/06/2013 - 11:58:11 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\dentistes st-aygulf.doc.LNK   [779]
O61 - LFC: 09/06/2013 - 12:11:43 ---A- C:\Users\OriSon\Bureau\Comment je vois le monde Amazon.fr A Einstein Livres.URL   [287]
O61 - LFC: 09/06/2013 - 12:14:17 ---A- C:\Users\OriSon\Bureau\Livre La plus belle histoire du monde.URL   [235]
O61 - LFC: 09/06/2013 - 12:15:29 ---A- C:\Users\OriSon\Bureau\Biographie de Hubert Reeves.URL   [227]
O61 - LFC: 09/06/2013 - 12:37:23 ---A- C:\Users\OriSon\Bureau\Corbeille à fruits Pomme - Achat Vente PORTE FRUITS - COUPE Corbeille à fruits Pomme - Cdiscount.com.URL   [287]
O61 - LFC: 09/06/2013 - 13:02:39 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\1-09-05-2009_Clic-clac, table, chaises, micro-ondes.LNK   [743]
O61 - LFC: 09/06/2013 - 13:12:30 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\5E\41BB4d01   [63519]
O61 - LFC: 09/06/2013 - 13:12:41 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\6C\27AA6d01   [29307]
O61 - LFC: 09/06/2013 - 13:32:08 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\73\025BAd01   [155288]
O61 - LFC: 09/06/2013 - 14:17:37 ---A- C:\Users\OriSon\Bureau\sthil ms 211-C.PNG   [150408]
O61 - LFC: 09/06/2013 - 14:32:57 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Speech\Files\UserShortcuts\SP_B5EC3FB9E0BA4964A7E21AD28772905B.dat   [940]
O61 - LFC: 09/06/2013 - 14:41:26 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\pluginreg.dat   [3047]
O61 - LFC: 09/06/2013 - 14:43:28 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\F9\A2662d01   [36719]
O61 - LFC: 09/06/2013 - 14:56:01 ---A- C:\Users\OriSon\Bureau\Faciliter l'utilisation du clavier.URL   [258]
O61 - LFC: 09/06/2013 - 15:16:05 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Crash Reports\InstallTime20130509153421   [10]
O61 - LFC: 09/06/2013 - 15:16:09 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\extensions.sqlite   [458752]
O61 - LFC: 09/06/2013 - 15:16:10 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Mozilla Thunderbird\active-update.xml   [57]
O61 - LFC: 09/06/2013 - 15:16:10 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Mozilla Thunderbird\updates.xml   [1229]
O61 - LFC: 09/06/2013 - 16:44:12 ---A- C:\Users\OriSon\Bureau\Tester son materiel avec des logiciels.URL   [262]
O61 - LFC: 09/06/2013 - 16:52:14 ---A- C:\Users\OriSon\Documents\Scanned Documents\Bienvenue.jpg   [516424]
O61 - LFC: 09/06/2013 - 16:52:19 ---A- C:\Users\OriSon\Documents\Fax\Inbox\WelcomeFax.tif   [103176]
O61 - LFC: 09/06/2013 - 17:15:44 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\results.xsl   [49097]
O61 - LFC: 09/06/2013 - 17:15:52 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\DC869A05-06DE-4A3D-A61F-419238092EC0.Diagnose.Admin.0.etl   [196608]
O61 - LFC: 09/06/2013 - 17:16:17 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\F434740D-7B96-4256-93E6-AE730D2F9654.Diagnose.Admin.1.etl   [196608]
O61 - LFC: 09/06/2013 - 17:16:17 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\NetworkConfiguration.cab   [1442]
O61 - LFC: 09/06/2013 - 17:16:23 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\NetworkDiagnostics.0.debugreport.xml   [70738]
O61 - LFC: 09/06/2013 - 17:16:23 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\ResultReport.xml   [40243]
O61 - LFC: 09/06/2013 - 17:16:23 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\2013060916.000\results.xml   [256]
O61 - LFC: 09/06/2013 - 17:16:23 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\460911090\latest.cab   [26988]
O61 - LFC: 09/06/2013 - 17:20:43 ---A- C:\Users\OriSon\Bureau\SpeechUX.lnk   [12412]
O61 - LFC: 09/06/2013 - 17:29:50 ---A- C:\Users\OriSon\AppData\Local\GDIPFONTCACHEV1.DAT   [110768]
O61 - LFC: 09/06/2013 - 18:05:07 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Je vis dans un petit village gaulois.doc.LNK   [592]
O61 - LFC: 09/06/2013 - 18:05:07 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Mes documents.LNK   [397]
O61 - LFC: 09/06/2013 - 18:45:42 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\impab.mab   [9738]
O61 - LFC: 09/06/2013 - 22:04:49 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\search.json   [8779]
O61 - LFC: 09/06/2013 - 22:09:03 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\37 - 09-06-2013_achat cigarette électronique.LNK   [722]
O61 - LFC: 09/06/2013 - 22:10:03 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\65\A3A2Fd01   [55306]
O61 - LFC: 09/06/2013 - 22:10:46 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\34\2FD3Fd01   [33554]
O61 - LFC: 09/06/2013 - 22:11:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\4B\5B3F6d01   [21855]
O61 - LFC: 09/06/2013 - 22:12:38 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\09\1777Cd01   [53914]
O61 - LFC: 09/06/2013 - 22:12:38 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\D\80\9A989d01   [18270]
O61 - LFC: 09/06/2013 - 22:16:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\85\E49CAd01   [23252]
O61 - LFC: 09/06/2013 - 22:34:36 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\results.xsl   [49097]
O61 - LFC: 09/06/2013 - 22:34:50 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\UsbTs.etl   [262144]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\DeviceCenterDiagnostic.0.debugreport.xml   [4363]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\DeviceDiagnostic.0.debugreport.xml   [1354]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\NetworkDiagnostics.0.debugreport.xml   [1327]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\PrinterDiagnostic.0.debugreport.xml   [1321]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\ResultReport.xml   [57188]
O61 - LFC: 09/06/2013 - 22:34:55 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\UsbCoreDiagnostic.0.debugreport.xml   [5154]
O61 - LFC: 09/06/2013 - 22:34:56 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013060921.000\results.xml   [220]
O61 - LFC: 09/06/2013 - 22:52:07 ---A- C:\Users\OriSon\Bureau\PC redémarrer en\09-06-2013 à 23h51 (431 s).PNG   [25043]
O61 - LFC: 09/06/2013 - 22:54:18 --HA- C:\Users\OriSon\Documents\My Library\LitPath.lpt   [10190]
O61 - LFC: 10/06/2013 - 07:38:51 ---A- C:\Users\OriSon\Bureau\narrateur.PNG   [5249]
O61 - LFC: 10/06/2013 - 07:47:46 ---A- C:\Users\OriSon\Bureau\2-.PNG   [58953]
O61 - LFC: 10/06/2013 - 07:48:58 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\Temps redémarrage W7.vbs.lnk   [1940]
O61 - LFC: 10/06/2013 - 08:21:57 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\2-31-07-2009_Table à repasser, enrouleur, casseroles, imprimante.LNK   [782]
O61 - LFC: 10/06/2013 - 08:21:57 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\facture.doc.LNK   [888]
O61 - LFC: 10/06/2013 - 08:25:11 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Copie de ma CNI.doc.LNK   [741]
O61 - LFC: 10/06/2013 - 08:25:11 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Michel.LNK   [609]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\39\7F058d01   [25504]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\DA\28D98d01   [29589]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\B4\CA917d01   [20846]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\8E\A4818d01   [45950]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\39\C7E3Fd01   [25968]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\46\B176Dd01   [20187]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\F7\94B0Bd01   [23222]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\D\EA\C3437d01   [17269]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\CC\BF70Fd01   [129254]
O61 - LFC: 10/06/2013 - 08:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\FF\10553d01   [19002]
O61 - LFC: 10/06/2013 - 08:28:12 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\61\C2D80d01   [56996]
O61 - LFC: 10/06/2013 - 08:28:31 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\BC\E499Cd01   [24609]
O61 - LFC: 10/06/2013 - 08:28:31 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\A5\662FFd01   [22649]
O61 - LFC: 10/06/2013 - 08:29:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\72\91BACd01   [165170]
O61 - LFC: 10/06/2013 - 08:29:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\DE\82B0Cd01   [26363]
O61 - LFC: 10/06/2013 - 08:30:08 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\02\BE7F2d01   [32000]
O61 - LFC: 10/06/2013 - 08:33:54 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\31\393E8d01   [30832]
O61 - LFC: 10/06/2013 - 08:34:09 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.sfr.fr\Inbox   [0]
O61 - LFC: 10/06/2013 - 08:34:09 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.sfr.fr\Trash   [0]
O61 - LFC: 10/06/2013 - 08:35:13 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.sfr.fr\Inbox.msf   [1419]
O61 - LFC: 10/06/2013 - 08:35:13 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.sfr.fr\Trash.msf   [1411]
O61 - LFC: 10/06/2013 - 09:02:48 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Modèle contrat CDI.LNK   [1300]
O61 - LFC: 10/06/2013 - 09:02:48 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\comprendrechoisir-cdi-aide-a-domicile.doc.LNK   [1582]
O61 - LFC: 10/06/2013 - 10:39:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\D4\79131d01   [50831]
O61 - LFC: 10/06/2013 - 10:39:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\83\199D6d01   [22144]
O61 - LFC: 10/06/2013 - 10:39:46 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\3B\CABCEd01   [28688]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\0\0F\955AAd01   [23210]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\5B\112ADd01   [25087]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\03\50BCCd01   [32087]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\64\3A4E3d01   [51436]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\17\A3B89d01   [34623]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\28\BD1B9d01   [67436]
O61 - LFC: 10/06/2013 - 10:39:47 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\AF\6FEBEd01   [34415]
O61 - LFC: 10/06/2013 - 11:16:45 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\DeviceCenterDiagnostic.0.debugreport.xml   [5073]
O61 - LFC: 10/06/2013 - 11:16:45 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\DeviceDiagnostic.0.debugreport.xml   [1352]
O61 - LFC: 10/06/2013 - 11:16:45 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\NetworkDiagnostics.0.debugreport.xml   [1325]
O61 - LFC: 10/06/2013 - 11:16:45 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\PrinterDiagnostic.0.debugreport.xml   [27388]
O61 - LFC: 10/06/2013 - 11:16:45 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\UsbCoreDiagnostic.0.debugreport.xml   [1353]
O61 - LFC: 10/06/2013 - 11:16:47 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\results.xsl   [49097]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\DeviceCenterDiagnostic.1.debugreport.xml   [4425]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\DeviceDiagnostic.1.debugreport.xml   [1352]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\NetworkDiagnostics.1.debugreport.xml   [1325]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\PrinterDiagnostic.1.debugreport.xml   [21517]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\ResultReport.xml   [59021]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\UsbCoreDiagnostic.1.debugreport.xml   [1353]
O61 - LFC: 10/06/2013 - 11:17:15 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\2013061010.000\results.xml   [220]
O61 - LFC: 10/06/2013 - 11:17:16 ---A- C:\Users\OriSon\AppData\Local\ElevatedDiagnostics\3493975886\latest.cab   [18490]
O61 - LFC: 10/06/2013 - 11:18:33 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\MP Navigator EX 2.0.lnk   [2099]
O61 - LFC: 10/06/2013 - 11:21:17 --H-- C:\Users\OriSon\AppData\Roaming\Canon\MP Navigator EX V20\history\ap\hstr_0001.lnk   [901]
O61 - LFC: 10/06/2013 - 12:38:41 ---A- C:\Users\OriSon\AppData\Roaming\dvdcss\CACHEDIR.TAG   [203]
O61 - LFC: 10/06/2013 - 13:55:34 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\consommations_ndrtc.csv.LNK   [1066]
O61 - LFC: 10/06/2013 - 13:57:20 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Excel12.pip   [1544]
O61 - LFC: 10/06/2013 - 14:39:51 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\MP620 series Manuel en ligne.lnk   [2332]
O61 - LFC: 10/06/2013 - 14:40:05 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\Canon IJ Network Tool.lnk   [2031]
O61 - LFC: 10/06/2013 - 14:40:13 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\Easy-PhotoPrint EX.lnk   [2115]
O61 - LFC: 10/06/2013 - 14:40:20 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\Enregistrement utilisateur de Canon MP620 series.LNK   [2076]
O61 - LFC: 10/06/2013 - 14:40:28 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\My Printer.lnk   [1866]
O61 - LFC: 10/06/2013 - 14:40:37 ---A- C:\Users\OriSon\Bureau\MES PROGRAMMES\BUREAUTIQUE\IMPRIMANTE\Canon Solution Menu.lnk   [2061]
O61 - LFC: 10/06/2013 - 14:43:28 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\BB\D8FF1d01   [36719]
O61 - LFC: 10/06/2013 - 14:47:39 ---A- C:\Users\OriSon\AppData\Roaming\Canon\MP Navigator EX V20\index\image.idx   [92]
O61 - LFC: 10/06/2013 - 14:47:39 ---A- C:\Users\OriSon\AppData\Roaming\Canon\MP Navigator EX V20\index\index.idx   [19]
O61 - LFC: 10/06/2013 - 14:49:34 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\HTML Help\hh.dat   [8722]
O61 - LFC: 10/06/2013 - 14:51:38 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\abook.mab   [13202]
O61 - LFC: 10/06/2013 - 19:05:50 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\77\8CE81d01   [78864]
O61 - LFC: 10/06/2013 - 19:22:24 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.orange.fr\Inbox   [0]
O61 - LFC: 10/06/2013 - 19:22:24 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.orange.fr\Trash   [0]
O61 - LFC: 10/06/2013 - 19:23:21 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.orange.fr\Inbox.msf   [1419]
O61 - LFC: 10/06/2013 - 19:23:21 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\Mail\pop.orange.fr\Trash.msf   [1411]
O61 - LFC: 10/06/2013 - 19:24:23 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\14\2C991d01   [41954]
O61 - LFC: 10/06/2013 - 20:04:23 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\C2\8210Dd01   [25137]
O61 - LFC: 10/06/2013 - 20:04:23 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\2C\41533d01   [38503]
O61 - LFC: 10/06/2013 - 20:04:23 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\62\2F270d01   [16672]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\2\2A\5F9BAd01   [17037]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\2\C5\09DE9d01   [77979]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\D8\D2ABBd01   [38545]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\57\5E79Cd01   [22691]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\46\C965Bd01   [28868]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\70\4D96Fd01   [32226]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\8E\78C67d01   [29916]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\A9\9C9B5d01   [21822]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\02\25C9Ed01   [27402]
O61 - LFC: 10/06/2013 - 20:04:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\E\D9\DCC67d01   [25753]
O61 - LFC: 10/06/2013 - 20:04:29 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\A0\C439Fd01   [34038]
O61 - LFC: 10/06/2013 - 20:04:50 ---A- C:\Users\OriSon\AppData\Roaming\IDM\cnlurllist.dat   [753]
O61 - LFC: 10/06/2013 - 20:42:02 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\signons.sqlite   [327680]
O61 - LFC: 10/06/2013 - 21:23:42 --HA- C:\Users\OriSon\AppData\Local\IconCache.db   [1871989]
O61 - LFC: 10/06/2013 - 21:23:43 ---A- C:\Users\OriSon\AppData\Roaming\DMCache\settings.bak   [20480]
O61 - LFC: 11/06/2013 - 07:27:52 ---A- C:\Users\OriSon\AppData\Roaming\IDM\defextmap.dat   [2656]
O61 - LFC: 11/06/2013 - 07:27:52 ---A- C:\Users\OriSon\AppData\Roaming\IDM\urlexclist.dat   [2708]
O61 - LFC: 11/06/2013 - 07:27:53 ---A- C:\Users\OriSon\AppData\Local\Temp\FXSAPIDebugLogFile.txt   [0]
O61 - LFC: 11/06/2013 - 07:28:34 ---A- C:\Users\OriSon\AppData\Roaming\IObit\Advanced SystemCare V6\Boottime\AscTray_Delay.Log   [83107]
O61 - LFC: 11/06/2013 - 07:35:42 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\Bureau.LNK   [874]
O61 - LFC: 11/06/2013 - 07:44:42 ---A- C:\Users\OriSon\AppData\Local\Temp\6wqDsh6q.doc.part   [35840]
O61 - LFC: 11/06/2013 - 07:44:46 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\CV Natalia.doc.LNK   [585]
O61 - LFC: 11/06/2013 - 07:44:46 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\CV.LNK   [468]
O61 - LFC: 11/06/2013 - 07:46:16 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\B5\E3634d01   [133427]
O61 - LFC: 11/06/2013 - 07:46:16 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\E\BB\C41A2d01   [16482]
O61 - LFC: 11/06/2013 - 09:27:57 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\36\4661Fd01   [24928]
O61 - LFC: 11/06/2013 - 09:28:11 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\9A\DB3C6d01   [64901]
O61 - LFC: 11/06/2013 - 12:36:08 ---A- C:\Users\OriSon\Bureau\PC redémarrer en\système.PNG   [23588]
O61 - LFC: 11/06/2013 - 12:53:02 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Word12.pip   [1684]
O61 - LFC: 11/06/2013 - 12:53:06 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\parent.lock   [0]
O61 - LFC: 11/06/2013 - 12:53:10 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\3A\02EB3d01   [63519]
O61 - LFC: 11/06/2013 - 12:53:21 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\61\37D66d01   [58230]
O61 - LFC: 11/06/2013 - 12:53:21 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\4B\85478d01   [55622]
O61 - LFC: 11/06/2013 - 12:55:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\0\F6\3D7BEd01   [50113]
O61 - LFC: 11/06/2013 - 12:55:24 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\E9\BF85Ed01   [144233]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\0\C2\2F00Cd01   [55422]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\A4\EF8EDd01   [69727]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\7\07\55CDEd01   [47545]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\8\8B\70B02d01   [54561]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\72\C39A9d01   [51394]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\F3\1655Ad01   [50840]
O61 - LFC: 11/06/2013 - 12:55:25 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\3D\F8CA4d01   [49939]
O61 - LFC: 11/06/2013 - 13:07:09 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\BE\9A38Bd01   [93433]
O61 - LFC: 11/06/2013 - 13:07:10 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\FE\12443d01   [49155]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\0\11\E5DAFd01   [49773]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\0\38\76E9Bd01   [21096]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\AB\CABD2d01   [21849]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\EE\A6E49d01   [31348]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\6E\738A6d01   [39197]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\BE\99BAAd01   [21553]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\D1\47DFBd01   [17185]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\67\582E7d01   [38261]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\B\E7\B23CAd01   [48150]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\29\CB8E2d01   [29232]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\C\EB\D3501d01   [18250]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\E\0B\89FB9d01   [17954]
O61 - LFC: 11/06/2013 - 13:07:14 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\5F\F1B85d01   [89449]
O61 - LFC: 11/06/2013 - 13:22:44 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\4\81\E2E78d01   [28967]
O61 - LFC: 11/06/2013 - 13:22:44 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\5\75\F8994d01   [68502]
O61 - LFC: 11/06/2013 - 13:22:44 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\A\32\74476d01   [20331]
O61 - LFC: 11/06/2013 - 13:28:10 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\MOD delegation d'indemnités-1.doc.LNK   [988]
O61 - LFC: 11/06/2013 - 13:37:29 ---A- C:\Users\OriSon\AppData\Local\Temp\22283760.od   [134]
O61 - LFC: 11/06/2013 - 13:37:29 ---A- C:\Users\OriSon\AppData\Local\Temp\CVR5F0.tmp.cvr   [0]
O61 - LFC: 11/06/2013 - 13:44:03 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\MOD delegation d'indemnités (Michel).doc.LNK   [1009]
O61 - LFC: 11/06/2013 - 14:41:29 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\addons.sqlite   [524288]
O61 - LFC: 11/06/2013 - 14:43:29 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\3\CF\22959d01   [36941]
O61 - LFC: 11/06/2013 - 14:43:29 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\blocklist.xml   [36941]
O61 - LFC: 11/06/2013 - 15:29:22 ---A- C:\Users\OriSon\AppData\Roaming\Expert PDF 7\recent.menus.txt   [1280]
O61 - LFC: 11/06/2013 - 15:31:06 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\4E\78204d01   [63272]
O61 - LFC: 11/06/2013 - 15:31:06 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\1\D7\49475d01   [152620]
O61 - LFC: 11/06/2013 - 15:31:06 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\6\DC\CDF24d01   [73469]
O61 - LFC: 11/06/2013 - 15:31:06 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\8C\DBC7Fd01   [115472]
O61 - LFC: 11/06/2013 - 15:31:06 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\F\13\4EE65d01   [64436]
O61 - LFC: 11/06/2013 - 15:31:07 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\9\7C\BDF38d01   [32376]
O61 - LFC: 11/06/2013 - 15:34:17 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\1 - Nos échanges courrier postal.LNK   [814]
O61 - LFC: 11/06/2013 - 15:34:17 ---A- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\MOD delegation d'indemnités (Natalia).doc.LNK   [1012]
O61 - LFC: 11/06/2013 - 15:34:17 --H-- C:\Users\OriSon\AppData\Roaming\Microsoft\Office\Recent\index.dat   [789]
O61 - LFC: 11/06/2013 - 15:34:47 ---A- C:\Users\OriSon\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml   [314]
O61 - LFC: 11/06/2013 - 15:34:47 ---A- C:\Users\OriSon\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx   [3086]
O61 - LFC: 11/06/2013 - 15:37:05 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\startupCache\startupCache.4.little   [1862775]
O61 - LFC: 11/06/2013 - 16:21:28 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\localstore.rdf   [17252]
O61 - LFC: 11/06/2013 - 16:32:46 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\global-messages-db.sqlite   [4194304]
O61 - LFC: 11/06/2013 - 16:33:07 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\session.json   [591]
O61 - LFC: 11/06/2013 - 16:34:46 ---A- C:\Users\OriSon\AppData\Roaming\IDM\foldresHistory.txt   [2310]
O61 - LFC: 11/06/2013 - 16:34:57 ---A- C:\Users\OriSon\Bureau\analyse pc\ZHPDiag\ZHPDiag2.exe   [5676095]
O61 - LFC: 11/06/2013 - 16:34:58 ---A- C:\Users\OriSon\AppData\Roaming\IDM\Scheduler\q_1.dt   [0]
O61 - LFC: 11/06/2013 - 16:38:16 ---A- C:\Users\OriSon\Bureau\analyse pc\ZHPDiag\ZHPDiag après instal\ZHPDiag.lnk   [1882]
O61 - LFC: 11/06/2013 - 16:38:24 ---A- C:\Users\OriSon\Bureau\analyse pc\ZHPDiag\ZHPDiag après instal\ZHPFix.lnk   [2009]
O61 - LFC: 11/06/2013 - 16:38:32 ---A- C:\Users\OriSon\Bureau\analyse pc\ZHPDiag\ZHPDiag après instal\MBRCheck.lnk   [1020]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\_CACHE_001_   [844733]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\_CACHE_002_   [1620821]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\_CACHE_003_   [5295238]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\Cache\_CACHE_MAP_   [65812]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Local\Thunderbird\Profiles\tcfdy9rc.default\_CACHE_CLEAN_   [1]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\cert8.db   [98304]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\cookies.sqlite   [524288]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\downloads.sqlite   [65536]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\folderTree.json   [291]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\key3.db   [16384]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\panacea.dat   [13426]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\permissions.sqlite   [65536]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\prefs.js   [33019]
O61 - LFC: 11/06/2013 - 16:40:56 ---A- C:\Users\OriSon\AppData\Roaming\Thunderbird\Profiles\tcfdy9rc.default\virtualFolders.dat   [10]
O61 - LFC: 11/06/2013 - 16:47:49 ---A- C:\Users\OriSon\Bureau\analyse pc\module.PNG   [28637]
~ 6 Fichiers temporaires (Temporary files)
~ Files: 291 Scanned in 00mn 08s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 29/09/2010 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\cscsvc.dll (CSC)  .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 05/01/2012 - C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys (FileMonitor)  .(.IObit - IMF File MiniFilter Driver.) - LEGACY_FILEMONITOR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 25/05/2013 - C:\Windows\System32\DRIVERS\idmwfp.sys (IDMWFP)  .(.Tonec Inc. - Internet Download Manager WFP Driver.) - LEGACY_IDMWFP
O64 - Services: CurCS - 04/03/2011 - C:\Windows\System32\DRIVERS\kl1.sys (KL1)  .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL1
O64 - Services: CurCS - 04/03/2011 - C:\Windows\System32\DRIVERS\kl2.sys (kl2)  .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL2
O64 - Services: CurCS - 31/05/2013 - C:\Windows\System32\DRIVERS\klif.sys (KLIF)  .(.Kaspersky Lab - Klif Mini-Filter [fre_wlh_amd64].) - LEGACY_KLIF
O64 - Services: CurCS - 10/03/2011 - C:\Windows\System32\DRIVERS\klim6.sys (KLIM6)  .(.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - LEGACY_KLIM6
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 04/04/2013 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector)  .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 03/04/2013 - C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys (PfFilter)  .(.IObit Information Technology - Protected Folder filter driver.) - LEGACY_PFFILTER
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 05/07/2012 - C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys (RegFilter)  .(.IObit.com - Registry Filter.) - LEGACY_REGFILTER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\vmstorfltres.dll (storflt)  .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 05/07/2012 - C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys (UrlFilter)  .(.IObit.com - URL Filter.) - LEGACY_URLFILTER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\vmbusres.dll (vmbus)  .(.Microsoft Corporation - Fichier DLL de ressources de bus VMBus.) - LEGACY_VMBUS
O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
~ Legacy: 115 Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys:  Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("CT3281675.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN2617[...]
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("CT3281675.installType", "conduitnsisintegration");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("CT3281675.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3281675&octid=CT3[...]
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("Smartbar.ConduitHomepagesList", "");   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("Smartbar.ConduitSearchEngineList", "entrusted Customized Web Search");   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN26177577[...]   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("aol_toolbar.default.homepage.check", false);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("aol_toolbar.default.search.check", false);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("browser.search.defaultthis.engineName", "entrusted Customized Web Search");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN26177577711434526&UM=2&Sear[...]
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("browser.search.selectedEngine", "entrusted Customized Web Search");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.BabylonToolbar.prtkDS", 0);   =>Toolbar.Babylon
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.BabylonToolbar.prtkHmpg", 0);   =>Toolbar.Babylon
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.aflt", "babsst");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.dfltLng", "en");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.ffxUnstlRst", true);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.id", "6c66d23e0000000000005cd99856f0c7");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.instlDay", "15852");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.smplGrp", "none");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.vrsn", "1.8.21.5");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.vrsnTs", "1.8.21.521:20:38");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta.vrsni", "1.8.21.5");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta_i.babExt", "");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta_i.babTrack", "affID=119556&tt=gc_");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("extensions.delta_i.srcExt", "ss");
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN26177577711434526&UM=2&q="[...]
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT3281675&CUI=UN26177577711434526&UM=2&SearchSource=13,[...]   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN2[...]   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("smartbar.originalHomepage", "http://search.conduit.com/?ctid=CT3281675&CUI=UN26177577711434526&UM=2&SearchSource=13");   =>Hijacker.SmartBar
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.previous.keyword.URL", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("sweetim.toolbar.searchguard.enable", "");   =>PUP.SweetIM
O69 - SBI: prefs.js [OriSon - ql4j0dir.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com
~ Keys:  Scanned in 00mn 00s



---\\ Crack & Keygen Files (O82)
L:\Logithèque\BUREAUTIQUE\Compresseur-décompresseur\WinRAR\Winrar.v4.0.1.X86.X64.FiNAL.Incl.Keygen-FFF\winrar-x64-401.exe
L:\Logithèque\BUREAUTIQUE\Compresseur-décompresseur\WinRAR\Winrar.v4.0.1.X86.X64.FiNAL.Incl.Keygen-FFF\wrar401.exe
L:\Logithèque\MULTIMEDIA\VIDEO\Convertir DVD vers AVI\Speed Video Converter\SoftFlyers.Speed.Video.Converter.v4.4.33.Incl.Keygen-Lz0\Lz0\Keygen.exe
L:\Logithèque\MULTIMEDIA\VIDEO\Convertir DVD vers AVI\Speed Video Converter\SoftFlyers.Speed.Video.Converter.v4.4.33.Incl.Keygen-Lz0\spdvc.exe
L:\Logithèque\MULTIMEDIA\VIDEO\ConvertXtoDVD 4.0.12.327\ConvertX_to_Dvd v2.3.258\ConvertX To Dvd v2.2.3.258\keygen.exe
M:\Mes documents\Mes fichiers PSP\Modules externes\Filtres 2\Lokas effect 1.8\Lokas effect 1.8\keygen.exe
M:\Mes documents\Mes fichiers PSP\Modules externes\Filtres 3\Richard_Rosenman\Depthfield\keygen.rar
S:\3 - Cours PSP\A - Janaly\A - SECTIONS GRAPHISME\SECTION 3\Devoir 23 (Susan Tag +Papier)\Matériel\Filtres\Lokas\Lokas effect 1.8\Lokas effect 1.8\keygen.exe
S:\3 - Cours PSP\A - Janaly\A - SECTIONS GRAPHISME\SECTION 5\Devoir 35 (Autumn)\Matériel\Filtres\Richard_Rosenman\Richard_Rosenman\Depthfield\keygen.rar
S:\3 - Cours PSP\Outils PSP\Filtres 1 (autres)\Alien.Skin.Snap.Art.v2.0.Incl.Keymaker-CORE\Keygen\keygen.exe
S:\3 - Cours PSP\Outils PSP\Filtres 1 (autres)\AlienSkin_Eye_Candy_5_Textures_Photoshop_Plugin_incl_KeyGen-PARADOX\fo-ec5t.exe
~ Files:  Scanned in 01mn 18s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70144]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [193536]
~ Services: 33 Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-In" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-Out" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe
O87 - FAEL: "{D66AC78D-AF9C-438E-BF6E-D9AD53E67179}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{3B1DCF72-EEF2-4746-8C26-9928F3401A11}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{C3C7DC10-CFB9-431A-B9E7-741CF312507A}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{9A3DC36B-FF50-45EB-92D0-BA8C52813FB2}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{774A9F1C-3FF5-4FBA-A56F-3A84AC781BAA}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{5059B53C-305F-48E4-9B62-D7C60ED1C6C3}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{B38A4B6A-8096-483D-A080-F35A0D705B65}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{517892D3-459F-411E-8BBF-F05F31F30892}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{74445685-156E-407E-9546-1AECF473C113}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{C8A700C9-749E-40F1-9BE6-485F63A39516}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{523BDE21-3322-4D7E-89FC-FA31E9B398A6}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "{59C6AC85-0328-4DE7-94E8-2173DC54E622}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{9BF009F1-808A-4866-BA66-D0EDEDF8AF15}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{7D3EEF3E-0C98-44B6-88E7-50D09E373DCE}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{669FB8BB-5B5C-4314-9779-927D7C06037A}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{9F3190B3-D6E6-4329-9026-D929B485686D}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{4F53FE26-1090-4CE6-B2D7-443401F03A55}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{342CE6D8-5DFC-4DC7-B2E2-90D8EFE1DA89}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{4F901CDF-1D46-4995-9062-451D5BA2E663}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{FE8719F2-2DC2-499B-8C6B-E81374CD68FE}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "TCP Query User{1992FE3D-F84B-419B-B8DF-EEEA4B9A8F48}C:\program files (x86)\avanquest\expert pdf 7 converter\pdfreader.exe" | In - Private - P6 - TRUE | .(.Visagesoft.) -- C:\program files (x86)\avanquest\expert pdf 7 converter\pdfreader.exe
O87 - FAEL: "UDP Query User{5E44F633-1304-4C64-BD64-EFF9BC63BC52}C:\program files (x86)\avanquest\expert pdf 7 converter\pdfreader.exe" | In - Private - P17 - TRUE | .(.Visagesoft.) -- C:\program files (x86)\avanquest\expert pdf 7 converter\pdfreader.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{B72F8D46-04E9-4BFA-A116-D9186EF17D9F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{49004629-30D7-4CD8-BC98-E6F838DEE7FE}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
~ Firewall: 196 Scanned in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : v2.12437 - (10/06/2013)
Clés trouvées (Keys found) : 4
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 2
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]   =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>Toolbar.Agent
C:\Users\OriSon\AppData\Roaming\OpenCandy   =>Adware.OpenCandy
C:\Users\OriSon\AppData\Roaming\Mozilla\Firefox\Profiles\ql4j0dir.default\Smartbar   =>Hijacker.SmartBar
~ Additionnel Scan: 171889 Items scanned in 00mn 12s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "0CF165AE569A2E11493D8BCAF689CC3E" . (.Google Earth Plug-in.) -- C:\Windows\Installer\{EA561FC0-A965-11E2-94D3-B8AC6F98CCE3}\ARPPRODUCTICON.exe
O90 - PUC: "134B78B530A02064665E6D8EA4CA1FD5" . (.ccc-core-static.) -- C:\Windows\Installer\{5B87B431-0A03-4602-66E5-D6E84AACF15D}\ARPPRODUCTICON.exe
O90 - PUC: "3215B54B900C4B8FEF39544BC2A887F6" . (.ATI AVIVO64 Codecs.) -- C:\Windows\Installer\{B45B5123-C009-F8B4-FE93-45B42C8A786F}\ARPPRODUCTICON.exe
O90 - PUC: "33EFA258C5BBA0A185E649209D989529" . (.ccc-utility64.) -- C:\Windows\Installer\{852AFE33-BB5C-1A0A-586E-9402D9895992}\ARPPRODUCTICON.exe
O90 - PUC: "3E2EB08B77AE4D35A7655CD354E2D605" . (.HydraVision.) -- C:\Windows\Installer\{B80BE2E3-EA77-53D4-7A56-C53D452E6D50}\ARPPRODUCTICON.exe
O90 - PUC: "59708500C18578549B2F7323D0A73BF7" . (.ICA.) -- C:\Windows\Installer\{00580795-581C-4587-B9F2-37320D7AB37F}\ARPPRODUCTICON.exe
O90 - PUC: "6383BB84F6F25F8B5D4B0196309EF2F2" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{48BB3836-2F6F-B8F5-D5B4-106903E92F2F}\ARPPRODUCTICON.exe
O90 - PUC: "64DDE896B0CFF62945FD326BBB02DECF" . (.AMD Drag and Drop Transcoding.) -- C:\Windows\Installer\{698EDD46-FC0B-926F-54DF-23B6BB20EDFC}\ARPPRODUCTICON.exe
O90 - PUC: "6D755E54172231F418106C024B82A50B" . (.Kaspersky Anti-Virus 2012.) -- C:\Windows\Installer\{45E557D6-2271-4F13-8101-C620B4285AB0}\setup2.ico
O90 - PUC: "6DBD7447217EDF7BE3B18C92923ECD49" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{7447DBD6-E712-B7FD-3E1B-C82929E3DC94}\ARPPRODUCTICON.exe
O90 - PUC: "81021CB223A4573EFF4984031A9ADB71" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{2BC12018-4A32-E375-FF94-4830A1A9BD17}\ARPPRODUCTICON.exe
O90 - PUC: "81431D00FDD7D3D42A732E791B30BBB6" . (.Setup.) -- C:\Windows\Installer\{00D13418-7DDF-4D3D-A237-E297B103BB6B}\ARPPRODUCTICON.exe
O90 - PUC: "83043ADDDB9840840B8BCD845DFD4B36" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{DDA34038-89BD-4804-B0B8-DC48D5DFB463}\ARPPRODUCTICON.exe
O90 - PUC: "923EEB00BAABFF94B966554E1BB2A9DD" . (.IPM_PSP_COM.) -- C:\Windows\Installer\{00BEE329-BAAB-49FF-9B66-55E4B12B9ADD}\ARPPRODUCTICON.exe
O90 - PUC: "A7A47D00DA7F00D4BA2D90373826297C" . (.PSPPHelp.) -- C:\Windows\Installer\{00D74A7A-F7AD-4D00-ABD2-0973836292C7}\ARPPRODUCTICON.exe
O90 - PUC: "A8F495E4240BD16BADCD8028B2367018" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{4E594F8A-B042-B61D-DADC-08822B630781}\ARPPRODUCTICON.exe
O90 - PUC: "AD622B536F3EDF1213BA00646C8E0734" . (.ATI Problem Report Wizard.) -- C:\Windows\Installer\{35B226DA-E3F6-21FD-31AB-0046C6E87043}\ARPPRODUCTICON.exe
O90 - PUC: "D2A1EA002CB795340ACE1EF9633E19BB" . (.Corel PaintShop Pro X4.) -- C:\Windows\Installer\{00AE1A2D-7BC2-4359-A0EC-E19F36E391BB}\ARPPRODUCTICON.exe
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "DC0C875980189734096264105F89950A" . (.Google Earth Pro.) -- C:\Windows\Installer\{9578C0CD-8108-4379-9026-4601F59859A0}\ARPPRODUCTICON.exe
O90 - PUC: "E8ED5100F9D8E304E8A5048914E01652" . (.PSPPro64.) -- C:\Windows\Installer\{0015DE8E-8D9F-403E-8E5A-4098410E6125}\ARPPRODUCTICON.exe
O90 - PUC: "EB9D37CFCB03FBB1E3F7753FE769FABE" . (.Catalyst Control Center Graphics Previews Vista.) -- C:\Windows\Installer\{FC73D9BE-30BC-1BBF-3E7F-57F37E96AFEB}\ARPPRODUCTICON.exe
O90 - PUC: "FEAAC60069AC1814CA22EF656D41234E" . (.PSPPContent.) -- C:\Windows\Installer\{006CAAEF-CA96-4181-AC22-FE56D61432E4}\ARPPRODUCTICON.exe
~ Update Products: 74 Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 01/06/2013 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 18/04/2013 574272 |  (AdvancedSystemCareService6) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
SR - | Auto 29/09/2010 203264 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 31/05/2013 206448 |  (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
SS - | Auto 01/06/2013 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 01/06/2013 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 01/06/2013 194032 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto  103808 |  (IJPLMSVC) . (...) - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.exe
SR - | Auto 09/01/2012 821592 |  (IMFservice) . (.IObit.) - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
SR - | Auto 04/04/2013 418376 |  (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 04/04/2013 701512 |  (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Demand 11/05/2013 117144 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 10/03/2010 189728 |  (PSI_SVC_2) . (.Protexis Inc..) - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 01s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by OriSon at 11/06/2013 17:50:03

device: opened successfully
user: error reading MBR 

Disk trace:
error: Read  Descripteur non valide
kernel: error reading MBR 
~ MBR: 9 Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by OriSon at 11/06/2013 17:50:05

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 04s



End of the scan (3572 lines in 09mn 32s)(11)