Rapport de ZHPDiag v1.31.13 par Nicolas Coolman, Update du 31/07/2012
Run by Lucas at 31/08/2012 22:48:21
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site :  http://nicolascoolman.skyrock.com/
State : Version à jour.


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2045 MB (51% free)
System Restore: Activé (Enable)
System drive C: has 172 GB (75%) free of 228 GB

---\\ Logged in mode
~ Computer Name: PC-DE-LUCAS
~ User Name: Lucas
~ All Users Names: Lucas, IUSR_NMPR, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Lucas\AppData\Roaming\
~ %Desktop% : C:\Users\Lucas\Desktop\
~ %Favorites% : C:\Users\Lucas\Favorites\
~ %LocalAppData% : C:\Users\Lucas\AppData\Local\
~ %StartMenu% : C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 172 Go of 228 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 5 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\WINDOWS\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.18/01/2008 - 22:33:38.) -- C:\WINDOWS\System32\Wininit.exe [96768]
[MD5.75A97A2C060E72AB49E071E08C7DD2BA] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/08/2012 - 18:35:55.) -- C:\WINDOWS\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\WINDOWS\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\WINDOWS\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\WINDOWS\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.18/01/2008 - 20:28:04.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.18/01/2008 - 20:49:20.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.18/01/2008 - 20:56:30.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\WINDOWS\system32\Drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 07:32:49.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\WINDOWS\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.18/01/2008 - 20:56:36.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [76288]
[MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [242688]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\WINDOWS\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\WINDOWS\system32\Drivers\tdx.sys [72192]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.11/04/2009 - 07:32:55.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [226280]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/2
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/22
~ Mon Bureau (My Desktop) : 1/8
~ Menu demarrer (Programs) : 1/23
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.85B8925F1A477DF7AEC93CABBEB04F1F] - (.Hewlett-Packard Company - hpsysdrv.) -- C:\hp\support\hpsysdrv.exe   [65536] [PID.2932]
[MD5.C81BE1B951C36E97D3DA90DA745DA5F7] - (.Hewlett-Packard Company - KBD EXE.) -- C:\hp\KBD\kbd.exe   [61440] [PID.2980]
[MD5.D2CA35A3F711E613D9399845CE9302FA] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe   [151552] [PID.3024]
[MD5.A503A47A5E7EA8024379A8CC6059B74A] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\WINDOWS\RtHDVCpl.exe   [3784704] [PID.3036]
[MD5.821F73B833C4DAEBC33C1A9A4B16BB5A] - (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe   [49152] [PID.3052]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe   [252848] [PID.3092]
[MD5.60BC86652E72B91E27ACA2CB5784AB76] - (.Secunia - Secunia PSI Tray.) -- C:\Program Files\Secunia\PSI\psi_tray.exe   [572000] [PID.3176]
[MD5.4B555106290BD117334E9A08761C035A] - (...) -- ystem32\rundll32.exe   [0] [PID.3296]
[MD5.FCB13D9E3D55075C8FACA9CA3C55B263] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [3763200] [PID.4056]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe   [69120] [PID.3816]
[MD5.24516BF4E12A46CB67302E2CDCB8CDDF] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe   [11552] [PID.]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe   [3408896] [PID.]
[MD5.D19C4EE2AC7C47B8F5F84FFF1A789D8A] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe   [63960] [PID.]
[MD5.A0B584C33F55545D56F9E71FB4E203AC] - (.Pas de propriétaire - DQLWinSe Application.) -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe   [208896] [PID.]
[MD5.0BCEE844A02747DD7F1E30352E619F2E] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe   [81920] [PID.]
[MD5.6E5DAC168D1FF9843E84A59D51D31107] - (.Hewlett-Packard Company - Pas de description.) -- c:\Program Files\Common Files\LightScribe\LSSrvc.exe   [61440] [PID.]
[MD5.9044795E9D1A912D5F1B8DF6211850FD] - (.Secunia - Secunia PSI Agent.) -- C:\Program Files\Secunia\PSI\PSIA.exe   [1326176] [PID.]
[MD5.8B1A72E4FB63A9C068B08E1F9B70482A] - (.Secunia - Secunia Update Agent.) -- C:\Program Files\Secunia\PSI\sua.exe   [681056] [PID.]
~ Scan Processes Running in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.7.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.7.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.7.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.orange.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} Clé orpheline
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} . (...) -- C:\Program Files\WOT\WOT.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Simple Adblock - Simple Adblock Module.) -- C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Google - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O3 - Toolbar: WOT - [HKLM]{71576546-354D-41c9-AAE8-31F2EC22BF0D} . (...) -- C:\Program Files\WOT\WOT.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe 
O4 - HKLM\..\Run: [hpsysdrv] . (.Hewlett-Packard Company - hpsysdrv.) -- c:\hp\support\hpsysdrv.exe 
O4 - HKLM\..\Run: [KBD] . (.Hewlett-Packard Company - KBD EXE.) -- C:\HP\KBD\KBD.exe 
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\WINDOWS\RtHDVCpl.exe 
O4 - HKLM\..\Run: [CCUTRAYICON] Clé orpheline 
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- c:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 97.34.) -- C:\Windows\system32\nvsvc.dll 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe 
O4 - HKLM\..\RunOnce: [Launcher] . (.soft thinks - Launcher.) -- C:\WINDOWS\SMINST\launcher.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 06s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{49CA38E7-88A5-4086-B573-4846E3EFB5B4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F8B2C618-D083-4DED-A028-CC9C85BC8AAF}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{49CA38E7-88A5-4086-B573-4846E3EFB5B4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F8B2C618-D083-4DED-A028-CC9C85BC8AAF}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{49CA38E7-88A5-4086-B573-4846E3EFB5B4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{F8B2C618-D083-4DED-A028-CC9C85BC8AAF}: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- 
O18 - Handler: dvd - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- 
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: its - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: mhtml - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: ms-its - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- 
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: tv - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: vbscript - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- 
O18 - Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} . (...) -- C:\Program Files\WOT\WOT.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: DQLWinService (DQLWinService) . (.Pas de propriétaire - DQLWinSe Application.) - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Intel DH Service (IntelDHSvcConf) . (.Intel(R) Corporation - Intel(R) Factory Mode Service.) - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
O23 - Service: LightScribeService Direct Disc Labeling  (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Planificateur LiveUpdate automatique (Planificateur LiveUpdate automatique) . (...) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (.not file.)
O23 - Service: Secunia PSI Agent (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files\Secunia\PSI\sua.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
O24 - Desktop General: BackupWallPaper - .(...) - C:\WINDOWS\web\wallpaper\horizon.jpg
O24 - Desktop General: WallPaper - .(...) - C:\WINDOWS\web\wallpaper\horizon.jpg
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[MD5.B2B64AF436FACCFA854DD397027C5360] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
~ Scan Scheduled Task in 00mn 03s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\WINDOWS\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\system32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\System32\themeui.dll
O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\WINDOWS\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\WINDOWS\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver:  (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver:  (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver: (MpKslc3f13a69) . (.Microsoft Corporation - KSLDriver.) - c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B14DE83D-CC6A-4DA8-85B7-0C97BB8DC37A}\MpKslc3f13a69.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
O41 - Driver:  (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver:  (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\WINDOWS\System32\drivers\nsiproxy.sys
O41 - Driver: C:\WINDOWS\System32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\WINDOWS\System32\DRIVERS\pacer.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver:  (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
O41 - Driver:  (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver:  (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\drivers\rdpencdd.sys
O41 - Driver: C:\WINDOWS\System32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\WINDOWS\System32\DRIVERS\smb.sys
O41 - Driver: C:\WINDOWS\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\WINDOWS\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver:  (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\WINDOWS\System32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.1.4) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {AB5E289E-76BF-4251-9F3F-9B763F681AE0}
O42 - Logiciel: HP Easy Setup - Core - (.Hewlett-Packard.) [HKLM] -- {F94234DB-FD06-42C3-B88D-6FC4DC9F988C}
O42 - Logiciel: HP Easy Setup - Frontend - (.Hewlett-Packard.) [HKLM] -- {40F7AED3-0C7D-4582-99F6-484A515C73F2}
O42 - Logiciel: HP Picasso Media Center Add-In - (.HP.) [HKLM] -- {55979C41-7D6A-49CC-B591-64AC1BBE2C8B}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {8C6027FD-53DC-446D-BB75-CACD7028A134}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java 7 Update 7 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217007FF}
O42 - Logiciel: Logiciel Intel® Viiv™ - (.Intel Corporation.) [HKLM] -- Intel(R) Configuration Center
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.62.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: OcxSetup - (.Hewlett-Packard Company.) [HKLM] -- {C3DC29BC-A8CF-4578-9DFC-37F049C44771}
O42 - Logiciel: Outils de diagnostic du matériel - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor 5 for Windows
O42 - Logiciel: Python 2.4.3 - (.Martin v. Löwis.) [HKLM] -- {75E71ADD-042C-4F30-BFAC-A9EC42351313}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Roxio Creator Audio - (.Roxio.) [HKLM] -- {83FFCFC7-88C6-41c6-8752-958A45325C82}
O42 - Logiciel: Roxio Creator Basic v9 - (.Roxio.) [HKLM] -- {C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
O42 - Logiciel: Roxio Creator Copy - (.Roxio.) [HKLM] -- {619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
O42 - Logiciel: Roxio Creator Data - (.Roxio.) [HKLM] -- {0D397393-9B50-4c52-84D5-77E344289F87}
O42 - Logiciel: Roxio Creator EasyArchive - (.Roxio.) [HKLM] -- {11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
O42 - Logiciel: Roxio Creator Tools - (.Roxio.) [HKLM] -- {0394CDC8-FABD-4ed8-B104-03393876DFDF}
O42 - Logiciel: Roxio Express Labeler 3 - (.Roxio.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
O42 - Logiciel: Secunia PSI (3.0.0.3001) - (.Secunia.) [HKLM] -- Secunia PSI
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2604111
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2604121
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368v2
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656405
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2686827
O42 - Logiciel: Simple Adblock - (.Simple Adblock.) [HKLM] -- {59308225-510C-4492-A7E4-71625FAD545E}
O42 - Logiciel: Solution de clavier multimédia amélioré - (.Hewlett-Packard.) [HKLM] -- KBD
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217
O42 - Logiciel: WOT for Internet Explorer - (.WOT Services Oy.) [HKLM] -- {DCAEC601-735C-41AE-B84F-D792F09FB7D1}
O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM] -- {6068A42A-C1CF-45F2-9859-5DB16287FE5D}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Against Intuition]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Classes]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\JavaSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Secunia]
[HKCU\Software\SysInternals]
[HKLM\Software\Adobe]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\LightScribe]
[HKLM\Software\Ligos Corporation]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MicroVision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\OldTimer Tools]
[HKLM\Software\PC-Doctor]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Roxio]
[HKLM\Software\Secunia]
[HKLM\Software\Simple Adblock]
[HKLM\Software\Sonic]
[HKLM\Software\SymNRT]
[HKLM\Software\Symantec]
[HKLM\Software\Volatile]
[HKLM\Software\Wilson WindowWare]
[HKLM\Software\webtogo]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 30/08/2012 - 20:45:44 - [113,097] ----D C:\Program Files\Adobe
O43 - CFD: 30/08/2012 - 21:30:16 - [367,677] ----D C:\Program Files\Common Files
O43 - CFD: 25/08/2012 - 17:01:37 - [0] R---D C:\Program Files\Fichiers communs
O43 - CFD: 06/12/2006 - 15:24:32 - [2,590] ----D C:\Program Files\Google
O43 - CFD: 06/12/2006 - 15:22:58 - [93,565] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 06/12/2006 - 15:19:05 - [3,555] ----D C:\Program Files\HP
O43 - CFD: 06/12/2006 - 15:22:57 - [9,747] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 06/12/2006 - 15:16:10 - [29,007] ----D C:\Program Files\Intel
O43 - CFD: 30/08/2012 - 19:46:58 - [5,316] ----D C:\Program Files\Internet Explorer
O43 - CFD: 30/08/2012 - 20:29:13 - [120,981] ----D C:\Program Files\Java
O43 - CFD: 30/08/2012 - 21:22:37 - [11,703] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 02/11/2006 - 14:37:34 - [89,117] ----D C:\Program Files\Microsoft Games
O43 - CFD: 06/12/2006 - 15:20:00 - [4,022] ----D C:\Program Files\Microsoft Office
O43 - CFD: 30/08/2012 - 20:53:54 - [19,148] ----D C:\Program Files\Microsoft Security Client
O43 - CFD: 06/12/2006 - 15:20:01 - [143,337] ----D C:\Program Files\Microsoft Works
O43 - CFD: 29/08/2012 - 22:02:51 - [0,015] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 29/08/2012 - 21:49:30 - [94,740] ----D C:\Program Files\Movie Maker
O43 - CFD: 02/11/2006 - 14:37:34 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 30/08/2012 - 21:46:27 - [0,147] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 06/12/2006 - 15:33:54 - [103,185] ----D C:\Program Files\PC-Doctor 5 for Windows
O43 - CFD: 06/12/2006 - 15:14:51 - [9,721] ----D C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:34 - [36,906] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 06/12/2006 - 15:17:56 - [15,440] ----D C:\Program Files\Roxio
O43 - CFD: 30/08/2012 - 21:42:29 - [7,001] ----D C:\Program Files\Secunia
O43 - CFD: 06/12/2006 - 15:24:13 - [18,019] ----D C:\Program Files\Services en ligne
O43 - CFD: 02/11/2006 - 15:01:55 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 29/08/2012 - 21:49:30 - [0,970] ----D C:\Program Files\Windows Calendar
O43 - CFD: 29/08/2012 - 21:49:30 - [2,610] ----D C:\Program Files\Windows Collaboration
O43 - CFD: 29/08/2012 - 21:49:29 - [4,283] ----D C:\Program Files\Windows Defender
O43 - CFD: 30/08/2012 - 19:47:03 - [6,757] ----D C:\Program Files\Windows Journal
O43 - CFD: 30/08/2012 - 19:46:44 - [8,694] ----D C:\Program Files\Windows Mail
O43 - CFD: 29/08/2012 - 21:49:30 - [4,290] ----D C:\Program Files\Windows Media Player
O43 - CFD: 25/08/2012 - 17:01:37 - [7,589] ----D C:\Program Files\Windows NT
O43 - CFD: 29/08/2012 - 21:49:30 - [12,902] ----D C:\Program Files\Windows Photo Gallery
O43 - CFD: 30/08/2012 - 20:05:05 - [0,128] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 29/08/2012 - 21:49:30 - [6,225] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 30/08/2012 - 21:35:46 - [1,342] ----D C:\Program Files\WOT
O43 - CFD: 31/08/2012 - 22:48:42 - [12,789] ----D C:\Program Files\ZHPDiag
O43 - CFD: 30/08/2012 - 20:45:50 - [3,722] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 06/12/2006 - 15:30:57 - [8,566] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 06/12/2006 - 15:16:10 - [48,782] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 30/08/2012 - 20:30:07 - [1,184] ----D C:\Program Files\Common Files\Java
O43 - CFD: 06/12/2006 - 15:18:17 - [7,560] ---AD C:\Program Files\Common Files\LightScribe
O43 - CFD: 06/12/2006 - 15:18:15 - [0,066] ---AD C:\Program Files\Common Files\LS Getting Started
O43 - CFD: 06/12/2006 - 15:20:01 - [222,041] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 06/12/2006 - 15:17:42 - [23,522] ----D C:\Program Files\Common Files\Roxio Shared
O43 - CFD: 02/11/2006 - 13:18:33 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 30/08/2012 - 21:30:16 - [0,824] ----D C:\Program Files\Common Files\Simple Adblock
O43 - CFD: 06/12/2006 - 15:17:44 - [1,031] ----D C:\Program Files\Common Files\Sonic Shared
O43 - CFD: 02/11/2006 - 13:18:33 - [39,198] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 06/12/2006 - 15:17:57 - [0,588] ----D C:\Program Files\Common Files\SureThing Shared
O43 - CFD: 28/08/2012 - 20:53:51 - [2,259] ----D C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 30/08/2012 - 19:46:40 - [8,333] ----D C:\Program Files\Common Files\System
O43 - CFD: 30/08/2012 - 20:49:19 - [134,049] ----D C:\ProgramData\Adobe
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 06/12/2006 - 15:24:32 - [0,496] ----D C:\ProgramData\Google
O43 - CFD: 06/12/2006 - 15:39:26 - [0,614] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 06/12/2006 - 15:22:35 - [0,000] ----D C:\ProgramData\InstallShield
O43 - CFD: 06/12/2006 - 15:16:11 - [0,000] ----D C:\ProgramData\Intel
O43 - CFD: 30/08/2012 - 21:22:29 - [6,611] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 31/08/2012 - 00:38:23 - [237,120] -S--D C:\ProgramData\Microsoft
O43 - CFD: 25/08/2012 - 17:01:37 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 06/12/2006 - 15:17:46 - [0] ----D C:\ProgramData\Sonic
O43 - CFD: 30/08/2012 - 20:30:07 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 28/08/2012 - 20:52:46 - [0,000] ----D C:\ProgramData\Symantec
O43 - CFD: 25/08/2012 - 17:19:59 - [0] ----D C:\Users\Lucas\AppData\Roaming\Adobe
O43 - CFD: 26/08/2012 - 12:15:11 - [0,000] ----D C:\Users\Lucas\AppData\Roaming\Google
O43 - CFD: 25/08/2012 - 17:06:58 - [0] ----D C:\Users\Lucas\AppData\Roaming\Hewlett-Packard
O43 - CFD: 25/08/2012 - 17:10:06 - [0] ----D C:\Users\Lucas\AppData\Roaming\Identities
O43 - CFD: 25/08/2012 - 17:20:02 - [0,000] ----D C:\Users\Lucas\AppData\Roaming\Macromedia
O43 - CFD: 30/08/2012 - 21:23:02 - [0,002] ----D C:\Users\Lucas\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 14:37:34 - [0] ----D C:\Users\Lucas\AppData\Roaming\Media Center Programs
O43 - CFD: 31/08/2012 - 00:38:23 - [1,560] -S--D C:\Users\Lucas\AppData\Roaming\Microsoft
O43 - CFD: 25/08/2012 - 17:04:50 - [0] ----D C:\Users\Lucas\AppData\Local\Application Data
O43 - CFD: 25/08/2012 - 17:13:26 - [0] ----D C:\Users\Lucas\AppData\Local\Google
O43 - CFD: 25/08/2012 - 17:04:50 - [0] ----D C:\Users\Lucas\AppData\Local\Historique
O43 - CFD: 25/08/2012 - 20:17:42 - [38,075] ----D C:\Users\Lucas\AppData\Local\Microsoft
O43 - CFD: 30/08/2012 - 21:42:41 - [0] ----D C:\Users\Lucas\AppData\Local\Secunia PSI
O43 - CFD: 31/08/2012 - 22:46:49 - [2,356] ----D C:\Users\Lucas\AppData\Local\Temp
O43 - CFD: 25/08/2012 - 17:04:50 - [0] ----D C:\Users\Lucas\AppData\Local\Temporary Internet Files
O43 - CFD: 25/08/2012 - 17:10:02 - [0] ----D C:\Users\Lucas\AppData\Local\VirtualStore
O43 - CFD: 02/11/2006 - 14:54:36 - [0,015] R---D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 25/08/2012 - 17:10:12 - [0,000] R---D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 02/11/2006 - 14:50:41 - [0,001] R---D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 25/08/2012 - 17:10:12 - [0,000] R---D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Scan Program Folder in 00mn 03s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D59D3C7EA5CCE0C404AE9A5D6AD71C86] - 31/08/2012 - 20:27:41 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1418429]
O44 - LFC:[MD5.F6A3F70D83BBE4D600D25D3F3F48C58A] - 31/08/2012 - 20:22:34 ---A- . (...) -- C:\WINDOWS\System32\PerfStringBackup.INI   [1502476]
O44 - LFC:[MD5.251346FB99631820FFFAC516EF7C62BC] - 31/08/2012 - 20:22:34 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat   [104872]
O44 - LFC:[MD5.4BCE51EAD20DE0593412C64A660A53B8] - 31/08/2012 - 20:22:34 ---A- . (...) -- C:\WINDOWS\System32\perfc00C.dat   [127420]
O44 - LFC:[MD5.3E3AF880F6AD8CCBDAD4B832EE4B2C26] - 31/08/2012 - 20:22:34 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat   [597898]
O44 - LFC:[MD5.857194EE48303E5DE8BEE52739FBD560] - 31/08/2012 - 20:22:34 ---A- . (...) -- C:\WINDOWS\System32\perfh00C.dat   [680904]
O44 - LFC:[MD5.9FFD1464E34AC17A74934E848F329291] - 31/08/2012 - 20:17:19 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [67584]
O44 - LFC:[MD5.C90B463D8F593E0D0804C4C6F75D267B] - 30/08/2012 - 23:28:31 ---A- . (...) -- C:\WINDOWS\msxml4-KB2721691-enu.LOG   [269666]
O44 - LFC:[MD5.6DFE7F2E8E8A337263AA5C92A215F161] - 30/08/2012 - 20:22:27 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\Drivers\mbam.sys   [22344]
O44 - LFC:[MD5.29BF8A17C3AD59AA696A8147B727E8AF] - 30/08/2012 - 19:54:58 ---A- . (...) -- C:\WINDOWS\MEMORY.DMP   [227057681]
O44 - LFC:[MD5.2701448229AEE43D266C00042EA3CB52] - 30/08/2012 - 19:54:02 ---A- . (...) -- C:\WINDOWS\epplauncher.mif   [2154]
O44 - LFC:[MD5.A8715909CA22A12F69FFC26EA29C84B5] - 30/08/2012 - 19:49:45 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\System32\FlashPlayerApp.exe   [696520]
O44 - LFC:[MD5.947414E8F3866EE69245382521C1939E] - 30/08/2012 - 19:49:45 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl   [73416]
O44 - LFC:[MD5.FC07490794C92D3E359D05AE58FDA4EB] - 30/08/2012 - 19:29:21 ---A- . (.Oracle Corporation - Pas de description.) -- C:\WINDOWS\System32\WindowsAccessBridge.dll   [93672]
O44 - LFC:[MD5.569BFF85F4589A52741B1CD46DDB8128] - 30/08/2012 - 19:29:19 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\deployJava1.dll   [746984]
O44 - LFC:[MD5.8AE5C8D2BA4F6A72F74DB6DEA5967C4A] - 30/08/2012 - 19:29:19 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\java.exe   [174056]
O44 - LFC:[MD5.A8F3C0659931724881347F586730827C] - 30/08/2012 - 19:29:19 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\javaw.exe   [174056]
O44 - LFC:[MD5.8C33DD712CC33D0257FD0C66C08EB743] - 30/08/2012 - 19:29:19 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\WINDOWS\System32\javaws.exe   [246760]
O44 - LFC:[MD5.96C406EC877EB23BB753E59B776C6BC7] - 30/08/2012 - 19:29:19 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\WINDOWS\System32\npDeployJava1.dll   [821736]
O44 - LFC:[MD5.EAF73695A06F985A2D30A36136DE740B] - 30/08/2012 - 19:05:00 ---A- . (...) -- C:\WINDOWS\setupact.log   [32169]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 30/08/2012 - 19:04:57 --HA- . (...) -- C:\WINDOWS\System32\Drivers\Msft_User_WpdFs_01_07_00.Wdf   [0]
O44 - LFC:[MD5.BFAC42A55BBE5AB1EC8CEC4141539F2C] - 30/08/2012 - 18:49:00 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT   [285152]
O44 - LFC:[MD5.2D9AE6A242D4E35E4177A1360C8F3C45] - 30/08/2012 - 18:36:14 ---A- . (...) -- C:\WINDOWS\IE9_main.log   [4287]
O44 - LFC:[MD5.ECD81B99477AB4A93D7838EB40B870D0] - 30/08/2012 - 18:36:06 ---A- . (...) -- C:\WINDOWS\System32\icrav03.rat   [8798]
O44 - LFC:[MD5.6D21D0A95286DCD09E354B612F592EB7] - 30/08/2012 - 18:36:06 ---A- . (...) -- C:\WINDOWS\System32\ticrf.rat   [1988]
O44 - LFC:[MD5.4B333D3CC96AE66BD754329FD2989EE2] - 30/08/2012 - 18:35:54 ---A- . (...) -- C:\WINDOWS\System32\ieuinit.inf   [72822]
O44 - LFC:[MD5.1DD95612D853F5DC611F7D5DE8898AC7] - 29/08/2012 - 21:09:17 ---A- . (...) -- C:\WINDOWS\PFRO.log   [33618]
O44 - LFC:[MD5.9A7E344C3D52EE1A2EF003B33B1C1BF1] - 29/08/2012 - 20:15:45 ---A- . (.Microsoft - NPS Migration Plugin.) -- C:\WINDOWS\System32\IasMigPlugin.dll   [454144]
O44 - LFC:[MD5.358A03A7A47F0AD71E84306AC635A626] - 29/08/2012 - 20:15:32 ---A- . (.Pas de propriétaire - Programme d'authentification du périphériqu.) -- C:\WINDOWS\System32\EhStorAuthn.dll   [117248]
O44 - LFC:[MD5.81638E6E467193699B5A800732ECBDE4] - 29/08/2012 - 20:14:40 ---A- . (.Microsoft - Classe d’assistance SMB (partage de fichier.) -- C:\WINDOWS\System32\SMBHelperClass.dll   [83456]
O44 - LFC:[MD5.FA4B5940B31853ADE67A73026884C8C9] - 28/08/2012 - 22:31:41 ---A- . (.Microsoft Corporation - Bibliothèque d'assistance au déploiement de.) -- C:\WINDOWS\System32\dfshim.dll   [1130824]
O44 - LFC:[MD5.3F337DD54339BEAF26917D3A0A32C1DE] - 28/08/2012 - 22:27:16 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\WINDOWS\System32\iccvid.dll   [81920]
O44 - LFC:[MD5.54F73529D65E5EB41FFC28C4EDDF069F] - 28/08/2012 - 22:27:12 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\WINDOWS\System32\atmlib.dll   [34304]
O44 - LFC:[MD5.B44A7AC9E801C38F54F7340351313E85] - 28/08/2012 - 22:27:12 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\WINDOWS\System32\atmfd.dll   [292864]
O44 - LFC:[MD5.F99DDD5E4F807B43E8B85DCD5F4B59EA] - 28/08/2012 - 22:25:51 ---A- . (.Microsoft - Legacy GDF resource DLL.) -- C:\WINDOWS\System32\GameUXLegacyGDFs.dll   [4240384]
O44 - LFC:[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - 28/08/2012 - 20:57:56 R-HA- . (...) -- C:\WINDOWS\WindowsShell.Manifest   [749]
O44 - LFC:[MD5.8A81E8BC3EE54DAB0FD98E2B42238907] - 28/08/2012 - 20:56:19 ---A- . (...) -- C:\WINDOWS\DtcInstall.log   [3324]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/08/2012 - 20:54:45 --HA- . (...) -- C:\WINDOWS\System32\Drivers\Msft_User_WpdFs_01_00_00.Wdf   [0]
O44 - LFC:[MD5.4709B08070AAD89BB6B40E4014321F59] - 28/08/2012 - 20:44:09 ---A- . (.Infineon Technologies AG - Infineon SICRYPT® Card Module.) -- C:\WINDOWS\System32\ifxcardm.dll   [101888]
O44 - LFC:[MD5.B00B85D60F8678F011F76943041B619B] - 28/08/2012 - 20:44:04 ---A- . (.Gemalto, Inc. - Gemalto Card Module.) -- C:\WINDOWS\System32\axaltocm.dll   [82432]
O44 - LFC:[MD5.FC0605DDA8F1AF44A82D3BDDA9F85C20] - 28/08/2012 - 20:36:33 ---A- . (...) -- C:\WINDOWS\SPInstall.etl   [196608]
O44 - LFC:[MD5.9B22B133CE919AA0D8C0DC101A6BDA09] - 28/08/2012 - 20:20:58 ---A- . (.Microsoft - robocopy.) -- C:\WINDOWS\System32\Robocopy.exe   [87552]
O44 - LFC:[MD5.7F73B83E2C975B5057D36625FA3D1A71] - 28/08/2012 - 20:20:55 ---A- . (.Microsoft Corp. - Module de défragmenteur de disque.) -- C:\WINDOWS\System32\Defrag.exe   [226816]
O44 - LFC:[MD5.5C58F73D55DB850C47A1A8B193BDBF1B] - 28/08/2012 - 20:20:54 ---A- . (.Microsoft Corp. - Module NTFS du défragmenteur de disque.) -- C:\WINDOWS\System32\DfrgNtfs.exe   [163840]
O44 - LFC:[MD5.6AE49062DBE58B49273E8AD027966923] - 28/08/2012 - 20:20:54 ---A- . (.Microsoft Corp. - Module Système de fichiers FAT du défragmen.) -- C:\WINDOWS\System32\dfrgfat.exe   [96768]
O44 - LFC:[MD5.419D476CDE881C0D32608825E14B089A] - 28/08/2012 - 20:20:50 ---A- . (.Microsoft - Système de classement ESRB.) -- C:\WINDOWS\System32\esrb.rs   [51712]
O44 - LFC:[MD5.D00EEAE1CACD77A1A8396BBC19140BBA] - 28/08/2012 - 20:20:49 ---A- . (.Intel Corporation - Pilote NDIS 5.1 de la carte Intel(R) PRO/10.) -- C:\WINDOWS\System32\Drivers\e100b325.sys   [159744]
O44 - LFC:[MD5.8FD2D3100B64D307E6132069F442AFE1] - 28/08/2012 - 20:20:27 ---A- . (.Microsoft - Système de classement GRB.) -- C:\WINDOWS\System32\grb.rs   [16896]
O44 - LFC:[MD5.409CAF2DEE948DFF5ECB8ACC1EA7ABAC] - 28/08/2012 - 20:20:14 ---A- . (.Microsoft - Classe d’assistance du Gestionnaire multimé.) -- C:\WINDOWS\System32\WlanMmHC.dll   [41472]
O44 - LFC:[MD5.9AF8911E4FB7D152801EE1A3AB401F45] - 28/08/2012 - 18:45:37 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.18B2C06EF8DC3FAF83C074089024391E] - 25/08/2012 - 20:53:25 ---A- . (...) -- C:\WINDOWS\System32\wlan.tmf   [2501921]
O44 - LFC:[MD5.956481EDE95CBF973D0192F980DDA4A6] - 25/08/2012 - 20:53:22 ---A- . (...) -- C:\WINDOWS\System32\gatherWirelessInfo.vbs   [15181]
O44 - LFC:[MD5.0857BDD856888D78E6E991CDDA49A4B8] - 25/08/2012 - 20:22:58 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\WINDOWS\System32\l3codecp.acm   [220672]
O44 - LFC:[MD5.8A64A3F68F0E24917759852C842DCD74] - 25/08/2012 - 20:22:58 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm   [62464]
O44 - LFC:[MD5.B342F896628FD45ECA7F9417124B6B1B] - 25/08/2012 - 20:05:56 ---A- . (...) -- C:\WINDOWS\ocsetup_cbs_install_NetFx3.dpx   [65536]
O44 - LFC:[MD5.9FB3816106A34360FDAF52F37D6E7A3E] - 25/08/2012 - 20:05:56 ---A- . (...) -- C:\WINDOWS\ocsetup_cbs_install_NetFx3.perf   [327680]
O44 - LFC:[MD5.30567C9DF828F0BA874E3A9868CC6567] - 25/08/2012 - 20:05:56 ---A- . (...) -- C:\WINDOWS\ocsetup_install_NetFx3.etl   [25362432]
O44 - LFC:[MD5.3A77C18665A4C8428768CE186A5BC1EF] - 25/08/2012 - 18:57:51 ---A- . (...) -- C:\WINDOWS\System32\rasctrnm.h   [1820]
O44 - LFC:[MD5.E404EEF78F6AB66D3A894A086EEAD4A2] - 25/08/2012 - 18:15:22 ---A- . (...) -- C:\WINDOWS\msxml4-KB954430-enu.LOG   [281832]
O44 - LFC:[MD5.49130FBDE2931A6C5158730943639502] - 25/08/2012 - 18:14:33 ---A- . (...) -- C:\WINDOWS\msxml4-KB973688-enu.LOG   [289086]
O44 - LFC:[MD5.E0EA9F5F94814F8A31F4B40175E1456E] - 25/08/2012 - 16:22:07 R--A- . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\WINDOWS\System32\Drivers\rtl8187B.sys   [281088]
O44 - LFC:[MD5.59DB74EF3B328852A736578DFF3FCAD6] - 25/08/2012 - 16:21:51 R--A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\WINDOWS\System32\Drivers\athrusb.sys   [449536]
O44 - LFC:[MD5.7520EC4D3C37FE487FE887CAC22524ED] - 25/08/2012 - 16:21:40 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\WINDOWS\System32\Drivers\WLANUHN.sys   [449536]
O44 - LFC:[MD5.7520EC4D3C37FE487FE887CAC22524ED] - 25/08/2012 - 16:21:38 R--A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\WINDOWS\System32\Drivers\WlanuhnV32.sys   [449536]
O44 - LFC:[MD5.F7654303F03D390B5A4BC60509EFC404] - 25/08/2012 - 16:16:55 RSHA- . (...) -- C:\WINDOWS\System32\Drivers\103C_HP_CPC_RR459AA-ABF t3717.fr_YC_0Pavi_QCNX649_E71FRv3PrA4_49_ILEONITE_SASUSTek Computer INC._V5.00_B5.07_T061128_WUH0_L40C_M2046_J25
O44 - LFC:[MD5.CA3DD58475041B611B35A39C1CD17019] - 25/08/2012 - 15:57:18 ---A- . (...) -- C:\WINDOWS\TSSysprep.log   [3540]
O44 - LFC:[MD5.F6D48AE1F578493D2E19DD644B153976] - 01/08/2009 - 07:27:37 ---A- . (...) -- C:\WINDOWS\System32\winrm.vbs   [201184]
O44 - LFC:[MD5.B2EDF82825D979928AE07CBE9C7A2160] - 16/07/2009 - 18:30:03 ---A- . (...) -- C:\WINDOWS\System32\WsmTxt.xsl   [2426]
O44 - LFC:[MD5.3C436603213561E2E7DD3D4459DBB7D4] - 16/07/2009 - 18:30:03 ---A- . (...) -- C:\WINDOWS\System32\wsmanconfig_schema.xml   [4675]
O44 - LFC:[MD5.52CB0185C73E1BA86CC7F726F22523C3] - 11/04/2009 - 07:28:21 ---A- . (...) -- C:\WINDOWS\System32\msjetoledb40.dll   [368640]
O44 - LFC:[MD5.AD4C3968CE1DB3A3A4632E1CDECA9555] - 11/04/2009 - 05:48:19 ---A- . (...) -- C:\WINDOWS\System32\eaphost.tmf   [344698]
O44 - LFC:[MD5.A3EB38D309C5682BBA0E23732C5D4AF2] - 11/04/2009 - 05:46:15 ---A- . (...) -- C:\WINDOWS\System32\WFP.TMF   [208966]
O44 - LFC:[MD5.4DF0D81B2B19B87DBFF241619DCDDC31] - 11/04/2009 - 05:43:51 ---A- . (...) -- C:\WINDOWS\System32\dot3.tmf   [442788]
O44 - LFC:[MD5.16D06DC26B8BD160AD81EE271D9577D8] - 11/04/2009 - 05:43:37 ---A- . (...) -- C:\WINDOWS\System32\onex.tmf   [392170]
O44 - LFC:[MD5.E9E66706083BFE4B0070EE0A5E8D42DB] - 11/04/2009 - 02:59:51 ---A- . (...) -- C:\WINDOWS\System32\StructuredQuerySchema.bin   [107612]
O44 - LFC:[MD5.B51BF7934D2B657454F66035AA5BFA03] - 11/04/2009 - 02:54:25 ---A- . (...) -- C:\WINDOWS\System32\locale.nls   [3662128]
O44 - LFC:[MD5.75DFEB04C0C978810720283C1B5CD7B1] - 07/03/2009 - 02:11:16 ---A- . (...) -- C:\WINDOWS\System32\systemsf.ebd   [130008]
O44 - LFC:[MD5.07400BC21119204892795F015052CDF4] - 20/02/2009 - 01:20:51 ---A- . (...) -- C:\WINDOWS\System32\RacUR.xml   [9212]
O44 - LFC:[MD5.6F7C27002EA0F9496070A1150C977DEC] - 20/02/2009 - 01:20:51 ---A- . (...) -- C:\WINDOWS\System32\spcinstrumentation.man   [9239]
O44 - LFC:[MD5.4C58B5E71FEEFD18BB7F537343C7219A] - 18/02/2009 - 19:43:18 ---A- . (...) -- C:\WINDOWS\System32\RacUREx.xml   [153]
O44 - LFC:[MD5.BCDBB5CEA1E8AEA0FA353691EB003728] - 18/02/2009 - 19:39:57 ---A- . (...) -- C:\WINDOWS\System32\slmgr.vbs   [92918]
O44 - LFC:[MD5.D07E5384D2B4E71F7D49C9F334D69284] - 27/05/2008 - 05:59:40 ---A- . (...) -- C:\WINDOWS\System32\StructuredQuerySchemaTrivial.bin   [18904]
O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 05/01/2008 - 02:31:46 ---A- . (...) -- C:\WINDOWS\System32\Drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf   [3]
O44 - LFC:[MD5.C2FDF63A87D167819671778FE78B4323] - 05/01/2008 - 02:31:16 ---A- . (...) -- C:\WINDOWS\System32\perfmon.msc   [145455]
O44 - LFC:[MD5.47F22CAD4A16BB40153555D631546B94] - 05/01/2008 - 02:23:30 ---A- . (...) -- C:\WINDOWS\System32\tcpmon.ini   [60124]
O44 - LFC:[MD5.97AED7FC6C2B38F34CA1A3C10D2F5A60] - 05/01/2008 - 02:22:38 ---A- . (...) -- C:\WINDOWS\System32\fsmgmt.msc   [144909]
O44 - LFC:[MD5.4599D028A0CA8B54555CF72345940B45] - 05/01/2008 - 02:21:40 ---A- . (...) -- C:\WINDOWS\System32\gatherWiredInfo.vbs   [12198]
O44 - LFC:[MD5.C1B7AB03AC2F3C990A40BC2E18E02CF1] - 08/11/2007 - 10:04:45 ---A- . (...) -- C:\WINDOWS\System32\korwbrkr.lex   [11967524]
~ Scan Files in 00mn 39s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.21111B04DB59FA34D1190C7E4A4F15CF] - 29/08/2012 - 20:54:34 ---A- - C:\WINDOWS\Prefetch\WINMAIL.EXE-D6E90604.pf
O45 - LFCP:[MD5.1C7332EFE4682350FBC7E777C2991093] - 30/08/2012 - 21:00:33 ---A- - C:\WINDOWS\Prefetch\AgAppLaunch.db
O45 - LFCP:[MD5.8841799AFEDD79B88B7A0D989CA2DDE9] - 30/08/2012 - 21:03:40 ---A- - C:\WINDOWS\Prefetch\READER_SL.EXE-9594AF7E.pf
O45 - LFCP:[MD5.5542E75777AF6FFE4224A3DB1736EC63] - 30/08/2012 - 21:04:46 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-4D95F5A7.pf
O45 - LFCP:[MD5.9879218F3C815D075134C59849C05F0B] - 30/08/2012 - 21:19:50 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-55A4EE79.pf
O45 - LFCP:[MD5.FF0AFE8D3CAD20F73B2804F5F01D793C] - 30/08/2012 - 21:19:59 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-CD3441D7.pf
O45 - LFCP:[MD5.5ADA75AFF9609514986526FC452A5E35] - 30/08/2012 - 22:33:59 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-3D2AFDB4.pf
O45 - LFCP:[MD5.08473D1D1E5420C345A8BDC04E36E819] - 30/08/2012 - 22:59:09 ---A- - C:\WINDOWS\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.BF7C4C30CA2EBAAF66F48157397E2ACB] - 31/08/2012 - 20:18:11 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.8C5A14C196A78A53C0F8C3ED75C0566E] - 31/08/2012 - 20:19:26 ---A- - C:\WINDOWS\Prefetch\WMPLAYER.EXE-9DE758AE.pf
O45 - LFCP:[MD5.B9A92FDC607AE0BF29D979DA405EFEF5] - 31/08/2012 - 20:19:32 ---A- - C:\WINDOWS\Prefetch\MSCORSVW.EXE-FAA88858.pf
O45 - LFCP:[MD5.7F7D9F729B58F1121C2B56A0546A03A4] - 31/08/2012 - 20:20:04 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-9F32D4F0.pf
O45 - LFCP:[MD5.1ACE3BC008B36A5F84BEE2B5A02E9AC5] - 31/08/2012 - 20:20:19 ---A- - C:\WINDOWS\Prefetch\WUAPP.EXE-12372724.pf
O45 - LFCP:[MD5.5C31A171B62FA2735AA8FA544AB7F977] - 31/08/2012 - 20:20:35 ---A- - C:\WINDOWS\Prefetch\TRUSTEDINSTALLER.EXE-031B6478.pf
O45 - LFCP:[MD5.E802FDF628AD3798F09C4C957053DD65] - 31/08/2012 - 20:20:47 ---A- - C:\WINDOWS\Prefetch\SUA.EXE-A1D91336.pf
O45 - LFCP:[MD5.8F499FDA40E11B3332890287B8E4FAE7] - 31/08/2012 - 20:21:41 ---A- - C:\WINDOWS\Prefetch\WMIADAP.EXE-369DF1CD.pf
O45 - LFCP:[MD5.A3E0B725CE4D7E567F28BB770497EACA] - 31/08/2012 - 20:30:25 ---A- - C:\WINDOWS\Prefetch\WERCON.EXE-FE5CD389.pf
O45 - LFCP:[MD5.39A5F584D9B2ACC81FE0FB245076F91F] - 31/08/2012 - 20:30:25 ---A- - C:\WINDOWS\Prefetch\WERMGR.EXE-2A1BCBC7.pf
O45 - LFCP:[MD5.0AA8404D15B336F9BD30E1FC693EA92D] - 31/08/2012 - 20:39:25 ---A- - C:\WINDOWS\Prefetch\Layout.ini
O45 - LFCP:[MD5.ECFE9DB68F210CFA53EE8180EAA9FBF3] - 31/08/2012 - 20:39:34 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-738093E8.pf
O45 - LFCP:[MD5.4B1C23B122ECE70C8234D9524DDF62BE] - 31/08/2012 - 20:39:36 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-4F838A89.pf
O45 - LFCP:[MD5.128079F75CB5B9689BF795569341A085] - 31/08/2012 - 20:49:03 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-F452D79D.pf
O45 - LFCP:[MD5.5A1BFFD1759C27A8F0E343F6A7536A57] - 31/08/2012 - 20:49:03 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-8FD92526.pf
O45 - LFCP:[MD5.50985EC1E825F958E61EAA1FEC844990] - 31/08/2012 - 20:49:03 ---A- - C:\WINDOWS\Prefetch\VSSVC.EXE-04D079CC.pf
O45 - LFCP:[MD5.A36D8A0DB666535011DD668CE9DDA6F6] - 31/08/2012 - 20:54:03 ---A- - C:\WINDOWS\Prefetch\MPCMDRUN.EXE-1B3ABCE8.pf
O45 - LFCP:[MD5.C473E60E3F73D1778E39CA980EA2F993] - 31/08/2012 - 21:18:12 ---A- - C:\WINDOWS\Prefetch\AgRobust.db
O45 - LFCP:[MD5.30D3130F4991C12772EB81EA040D4058] - 31/08/2012 - 21:18:14 ---A- - C:\WINDOWS\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.F263F813AD4D0120E10FF802AFAEE13A] - 31/08/2012 - 21:18:16 ---A- - C:\WINDOWS\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.DFECFD3741BB451F00336CC7692CC1D8] - 31/08/2012 - 21:18:17 ---A- - C:\WINDOWS\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.7473C314D297E58157CB5912E50C1A17] - 31/08/2012 - 21:26:06 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0CF170F4.pf
O45 - LFCP:[MD5.8A88FBF84F32F49F8866F458B5DDD71C] - 31/08/2012 - 21:39:03 ---A- - C:\WINDOWS\Prefetch\TASKENG.EXE-5BAF290C.pf
O45 - LFCP:[MD5.49E7C07DDDACD09F65DDB5CA1934F7CF] - 31/08/2012 - 21:40:19 ---A- - C:\WINDOWS\Prefetch\CONTROL.EXE-9459D5A0.pf
O45 - LFCP:[MD5.88CDA047B92BF6C388B34AC0C7DA607C] - 31/08/2012 - 21:40:37 ---A- - C:\WINDOWS\Prefetch\MSASCUI.EXE-6465DB72.pf
O45 - LFCP:[MD5.A5015386D59E78E64BF4392501D26FF0] - 31/08/2012 - 21:42:19 ---A- - C:\WINDOWS\Prefetch\PSI.EXE-EEA35745.pf
O45 - LFCP:[MD5.37EAD98A7842B68D2E12C9EAE1576032] - 31/08/2012 - 21:43:45 ---A- - C:\WINDOWS\Prefetch\AgGlUAD_P_S-1-5-21-94191032-3867296919-4092370973-1001.db
O45 - LFCP:[MD5.8BF3448F14307F3DB058CCDE1F64C858] - 31/08/2012 - 21:43:45 ---A- - C:\WINDOWS\Prefetch\AgGlUAD_S-1-5-21-94191032-3867296919-4092370973-1001.db
O45 - LFCP:[MD5.102A38427DE54E14C7C9560599D99E2B] - 31/08/2012 - 21:44:57 ---A- - C:\WINDOWS\Prefetch\SNIPPINGTOOL.EXE-2DBBC209.pf
O45 - LFCP:[MD5.DC20069CDBE2C3B025392A041242C4BD] - 31/08/2012 - 21:44:57 ---A- - C:\WINDOWS\Prefetch\WISPTIS.EXE-6C347CFA.pf
O45 - LFCP:[MD5.8DAC0AFC126A35DBF7530B5D7542395B] - 31/08/2012 - 21:45:34 ---A- - C:\WINDOWS\Prefetch\SEARCHFILTERHOST.EXE-AA7A1FDD.pf
O45 - LFCP:[MD5.A87B3372264653BC325795959A6CEBC7] - 31/08/2012 - 21:45:34 ---A- - C:\WINDOWS\Prefetch\SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf
O45 - LFCP:[MD5.A6310DD67DB4E7631A54BBBA0BF2A8BE] - 31/08/2012 - 21:45:40 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-1B894AFB.pf
O45 - LFCP:[MD5.4E602971BB98E4BCDEBC2BBBE287F39F] - 31/08/2012 - 21:45:47 ---A- - C:\WINDOWS\Prefetch\FLASHUTIL32_11_4_402_265_ACTI-435495FE.pf
O45 - LFCP:[MD5.D22899449141CE760A5D4E37695F5FAD] - 31/08/2012 - 21:45:53 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBAR1USER.EXE-7F556BE2.pf
O45 - LFCP:[MD5.D6FA27E15CDB921CE2ACCDF878A21CC9] - 31/08/2012 - 21:46:12 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-893DDF55.pf
O45 - LFCP:[MD5.5FCD4F3E811005D6BCA884476575B242] - 31/08/2012 - 21:46:17 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-4ED60CE7.pf
O45 - LFCP:[MD5.7F4636CCDE6067605F735C2CAF42A815] - 31/08/2012 - 21:46:18 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-FBCFA9DD.pf
O45 - LFCP:[MD5.275EE0654836A26ECDCBE571E1783FCE] - 31/08/2012 - 21:46:34 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-71214090.pf
O45 - LFCP:[MD5.8726C82EF96CFFE462CB515AE99B10D7] - 31/08/2012 - 21:47:50 ---A- - C:\WINDOWS\Prefetch\CONSENT.EXE-65F6206D.pf
O45 - LFCP:[MD5.9A02FD264A541F13F4E10EBCEBA65F66] - 31/08/2012 - 21:48:07 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-9D0EE457.pf
O45 - LFCP:[MD5.7E85D7EB29B1E4041B973D775E39FC51] - 31/08/2012 - 21:48:31 ---A- - C:\WINDOWS\Prefetch\CONIME.EXE-B273009A.pf
O45 - LFCP:[MD5.1D6032ABC1B7EC103622C2DE92156DFE] - 31/08/2012 - 21:48:31 ---A- - C:\WINDOWS\Prefetch\CSCRIPT.EXE-E4C98DEB.pf
O45 - LFCP:[MD5.971A3E158E5D277D11D97D1560FC96F1] - 31/08/2012 - 21:48:32 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-43972D0F.pf
O45 - LFCP:[MD5.945AFAFB511FEF3D7FDAEA8D996C8F1B] - 31/08/2012 - 21:48:40 ---A- - C:\WINDOWS\Prefetch\PV.EXE-8E63E86A.pf
O45 - LFCP:[MD5.4636BFE0A31B6A1ED6BCF7C21CF31B68] - 31/08/2012 - 21:48:53 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-89305D47.pf
O45 - LFCP:[MD5.A2CE326D684D75BEE34F91E9B2173E79] - 31/08/2012 - 21:48:53 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-2DE769BF.pf
O45 - LFCP:[MD5.D9842F01ADE65354E054E2B52E158F95] - 31/08/2012 - 23:00:09 ---A- - C:\WINDOWS\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.BF96D7781D65CE783580A7BFC217DC94] - 31/08/2012 - 23:27:55 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-1BEE4A84.pf
O45 - LFCP:[MD5.3CEEC5EA37B1604583FD531DE92D09ED] - 31/08/2012 - 23:28:20 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-830BCC14.pf
O45 - LFCP:[MD5.EE2D127A08C71CFBA102B877E43BD7EA] - 31/08/2012 - 23:28:21 ---A- - C:\WINDOWS\Prefetch\MSXML4-KB2721691-ENU.EXE-296F044B.pf
O45 - LFCP:[MD5.A5CCE9D1A7932482164CA00FA87CDE14] - 31/08/2012 - 23:28:23 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-B5AFA339.pf
O45 - LFCP:[MD5.B022D4A9D815AFFF40898D931FB04829] - 31/08/2012 - 23:33:46 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-135A30D8.pf
O45 - LFCP:[MD5.53B9565EA603E8E1FC3B33F3B7A5E43D] - 31/08/2012 - 23:33:50 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-16B1DF16.pf
O45 - LFCP:[MD5.93A47946C4E3B056E93A6781AC2503B2] - 31/08/2012 - 23:40:50 ---A- - C:\WINDOWS\Prefetch\MSSECES.EXE-8984E619.pf
O45 - LFCP:[MD5.5351B4A6A5BFF092C0569B57AAC39397] - 31/08/2012 - 23:42:22 ---A- - C:\WINDOWS\Prefetch\PfSvPerfStats.bin
~ Scan Prefetcher in 00mn 01s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\WINDOWS\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\WINDOWS\System32\tspkg.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\WINDOWS\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\WINDOWS\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\WINDOWS\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\WINDOWS\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\WINDOWS\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\WINDOWS\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\WINDOWS\System32\Drivers\adp94xx.sys   [420968]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\WINDOWS\System32\ANSI.SYS   [9029]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 28/08/2012 - 21:05:58 ---A- C:\Users\Lucas\AppData\Roaming\Microsoft\Speech\Files\UserLexicons\SP_AE6B1F3F8ADF4C3B8949BE979F109253.dat   [940]
O61 - LFC:Last File Created 30/08/2012 - 19:26:41 ---A- C:\Users\Lucas\Downloads\jxpiinstall.exe   [894952]
O61 - LFC:Last File Created 30/08/2012 - 20:21:37 ---A- C:\Users\Lucas\Downloads\mbam-setup-1.62.0.1300.exe   [10652120]
O61 - LFC:Last File Created 30/08/2012 - 20:28:41 ---A- C:\Users\Lucas\Downloads\simpleadblock1.1.2.msi   [1330688]
O61 - LFC:Last File Created 30/08/2012 - 20:36:50 ---A- C:\Users\Lucas\Downloads\WOT-latest-en.msi   [1040384]
O61 - LFC:Last File Created 30/08/2012 - 20:37:06 ---A- C:\Users\Lucas\AppData\Local\Temp\MSI55fae.LOG   [220]
O61 - LFC:Last File Created 30/08/2012 - 20:42:01 ---A- C:\Users\Lucas\Downloads\PSISetup.exe   [3098616]
O61 - LFC:Last File Created 30/08/2012 - 20:46:25 ---A- C:\Users\Lucas\AppData\Local\Temp\3as6t8s6-a0fb-49b0-adba-h8a9m4e8h5a6\msxml.msi   [2434048]
O61 - LFC:Last File Created 30/08/2012 - 22:33:49 ---A- C:\Users\Lucas\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2012-08-30 (22-20-09).txt   [2172]
O61 - LFC:Last File Created 30/12/1899 - 23:27:44 --HA- C:\Users\Lucas\AppData\Local\IconCache.db   [1456479]
O61 - LFC:Last File Created 31/08/2012 - 20:17:33 ---A- C:\Users\Lucas\AppData\Local\Temp\Lucas.bmp   [31832]
O61 - LFC:Last File Created 31/08/2012 - 23:39:51 ---A- C:\Users\Lucas\AppData\Roaming\Microsoft\HTML Help\hh.dat   [8590]
~ Scan Files in 00mn 28s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des fichiers non signés (O65) (None)

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\WINDOWS\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\WINDOWS\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\WINDOWS\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\system32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {CC41DBA2-AEC1-4967-9684-9D45EEFD89AC} [DefaultScope] - (Yahoo! France) - http://fr.search.yahoo.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll   [24576]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll   [62976]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll   [247808]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\WINDOWS\System32\certprop.dll   [40448]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\WINDOWS\System32\certprop.dll   [40448]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\System32\srvsvc.dll   [125952]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\System32\srvsvc.dll   [125952]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll   [438784]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\WINDOWS\System32\Audiosrv.dll   [315392]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\WINDOWS\System32\rasauto.dll   [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\WINDOWS\System32\rasmans.dll   [262144]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\WINDOWS\System32\mprdim.dll   [68608]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\WINDOWS\System32\sens.dll   [47104]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll   [288256]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\System32\tapisrv.dll   [242688]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\WINDOWS\System32\termsrv.dll   [449024]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll   [1933848]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\System32\qmgr.dll   [758784]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll   [247808]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\WINDOWS\System32\iphlpsvc.dll   [200704]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [19968]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll   [33280]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\System32\iscsiexe.dll   [111616]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\WINDOWS\System32\mmcss.dll   [45056]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\System32\profsvc.dll   [153088]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\System32\profsvc.dll   [153088]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\System32\wbem\WMIsvc.dll   [162304]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\System32\schedsvc.dll   [601600]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\WINDOWS\System32\sessenv.dll   [84992]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll   [81920]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll   [81920]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.E06041B86D4A4EC82DF38EC60D229E2C] [SPRF][30/08/2012] (.Pas de propriétaire - Suppression fichiers temporaires.) -- C:\Users\Lucas\Desktop\SFT.exe   [843645]
[MD5.7DAFDC3AA155B1562AF33B1399EBF341] [SPRF][30/08/2012] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Lucas\Desktop\ZHPDiag2.exe   [4600348]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [SPRF][16/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll   [401408]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{476CB903-C18C-4B59-AF0D-2A8D5758B342}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
O87 - FAEL: "{49F56069-E6A2-414E-AB90-6DC1F8057A3D}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
O87 - FAEL: "{39E4179A-A3B1-4BBB-924C-06D296DA5D16}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O87 - FAEL: "{AE1F472A-81F8-41AE-9929-EA8AE3A17607}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O87 - FAEL: "{E230A820-65E3-429D-8EFE-EED0CAC2A01E}" | In - Public - P6 - TRUE | .(.Intel(R) Corporation - Intel® Remoting Service.) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O87 - FAEL: "{CA7AAC92-AB5D-4F04-B648-39EB36A62150}" | In - Public - P17 - TRUE | .(.Intel(R) Corporation - Intel® Remoting Service.) -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O87 - FAEL: "{E93A4BC4-5A61-44E4-907A-80D18899CEDC}" |In - Public - P6 - TRUE | .(...) -- E:\Orange\OrangeW2G\fscommand\CKSocketServer.exe (.not file.)
O87 - FAEL: "{A512B1EB-77BE-45A3-919B-0F16DA3017FB}" |In - Public - P17 - TRUE | .(...) -- E:\Orange\OrangeW2G\fscommand\CKSocketServer.exe (.not file.)
O87 - FAEL: "{45010BFE-51B5-4B9D-BC16-B8C39C13F89C}" |In - Public - P6 - TRUE | .(...) -- C:\Users\Lucas\AppData\Local\Temp\7zS92AF.tmp\SYMNRT.exe (.not file.)
O87 - FAEL: "{342C3577-3EE0-48C7-A786-CE2AEDB4AF95}" |In - Public - P17 - TRUE | .(...) -- C:\Users\Lucas\AppData\Local\Temp\7zS92AF.tmp\SYMNRT.exe (.not file.)
~ Scan Firewall in 00mn 01s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 27/07/2012 63960 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 30/08/2012 250568 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 11/09/2006 188416 |  (AlertService) . (.Intel(R) Corporation.) - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
SR - | Auto  208896 |  (DQLWinService) . (...) - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
SR - | Auto 29/09/2006 81920 |  (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
SS - | Auto 10/05/2006 29696 |  (IntelDHSvcConf) . (.Intel(R) Corporation.) - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
SS - | Demand 11/09/2006 75264 |  (ISSM) . (.Intel(R) Corporation.) - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
SR - | Auto 19/10/2006 61440 |  (LightScribeService) . (.Hewlett-Packard Company.) - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
SS - | Demand  26624 |  (M1 Server) . (...) - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
SS - | Demand 11/09/2006 167936 |  (MCLServiceATL) . (.Intel(R) Corporation.) - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
SS - | Auto  0 |  (Planificateur LiveUpdate automatique) . (...) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
SS - | Demand 11/09/2006 544256 |  (Remote UI Service) . (.Intel(R) Corporation.) - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
SR - | Auto 25/07/2012 1326176 |  (Secunia PSI Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\PSIA.exe
SR - | Auto 25/07/2012 681056 |  (Secunia Update Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\sua.exe
SS - | Demand 01/11/2006 78752 |  (stllssvr) . (.MicroVision Development, Inc..) - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
SS - | Auto 18/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe
SR - | Auto 18/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe
~ Scan Services in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Lucas at 31/08/2012 22:52:02

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll 
C:\Windows\system32\drivers\iastor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x81A8A936] -> \Device\Harddisk0\DR0[0x85BDE220]
3 CLASSPNP[0x87DA98B3] -> ntkrnlpa!IofCallDriver[0x81A8A936] -> \Device\Ide\IAAStorageDevice-0[0x8407F030]
kernel: MBR read successfully
user & kernel MBR OK 
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Lucas at 31/08/2012 22:52:04

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (994 lines in 03mn 43s)(0)