Rapport de ZHPDiag v2013.6.7.12 par Nicolas Coolman, Update du 07/06/2013 Run by Guilhem at 09/06/2013 21:25:40 WebSite: http://nicolascoolman.webs.com State : Version à jour. WhiteList : Disable High Elevated Privileges : OK UAC : Deactivate by user ---\\ Web Browser MSIE: Internet Explorer v10.0.9200.16576 MFIE: Mozilla Firefox 21.0 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Protection COMODO Internet Security v3.13.121240.574 Malwarebytes Anti-Malware version 1.75.0.1300 Microsoft Security Client FR-FR Language Pack v2.1.1116.0 Windows Defender W7 ---\\ System Optimizer CCleaner v4.01 =>Piriform Ltd ---\\ Peer To Peer (P2P) ---\\ Software Update Adobe Flash Player 11 Plugin Adobe Reader X Java 7 Update 21 ---\\ System Information ~ Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 8116 MB (65% free) System Restore: Activé (Enable) System drive C: has 9 GB (7%) free of 116 GB ---\\ Logged in mode ~ Computer Name: GUILHEM-LAPTOP ~ User Name: Guilhem ~ All Users Names: HomeGroupUser$, Guilhem, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Guilhem\AppData\Roaming\ ~ %Desktop% : C:\Users\Guilhem\Desktop\ ~ %Favorites% : C:\Users\Guilhem\Favorites\ ~ %LocalAppData% : C:\Users\Guilhem\AppData\Local\ ~ %StartMenu% : C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 9 Go of 116 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 28 Go of 330 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 349 Go of 349 Go) F:\ CD-ROM drive (Free 0 Go of 6 Go) G:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 34 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 10:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 05:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/04/2013 - 10:52:14.) -- C:\Windows\System32\wininet.dll [2242048] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 17:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 17:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 07:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 05:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 03:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 13:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 13:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 14:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 03:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 04:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 06:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 13:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 18:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 04:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 14:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 04:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 13:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 17:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 6/11887 ~ Mes musiques (My Musics) : 156/7049 ~ Mes Videos (My Videos) : 2/314 ~ Mes Favoris (My Favorites) : 1/28 ~ Mes Documents (My Documents) : 5/81525 ~ Mon Bureau (My Desktop) : 2/25 ~ Menu demarrer (Programs) : 1/65 ~ Hidden Files: Scanned in 01mn 06s ---\\ Processus lancés [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.1688] [MD5.63F1212FFE13E62CA1E8D8EE19ABD9A7] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1900] [MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832] [PID.2084] [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.2156] [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.2212] [MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592] [PID.2356] [MD5.868E3486E7EC522330344152A5535783] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305720] [PID.2796] [MD5.3021028CD5F5402BD2B68CF4F4517D51] - (...) -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe [1593128] [PID.2952] [MD5.BDD790326FABC31FB635130810245062] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440] [PID.3004] [MD5.C811032EBB2C2E9FACFC364599E91BE3] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [174720] [PID.3056] [MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Pas de propriétaire - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [51768] [PID.3064] [MD5.1355EBE184F9DAB1718BC587F8A7E05E] - (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376] [PID.2096] [MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144] [PID.3104] [MD5.D8E559F4CDDBF7BB5A10C373843D8D25] - (...) -- C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe [125088] [PID.3128] [MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [75136] [PID.3176] [MD5.753D254205E0A62100A050BD8B458D06] - (.Skype Technologies S.A. - Skype C2C Service.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000] [PID.3208] [MD5.7148E74FADFDDF59D02EE5504791B9B9] - (.VMware, Inc. - VMware NAT Service.) -- C:\Windows\SysWOW64\vmnat.exe [434256] [PID.3916] [MD5.A1993250DD28B823D0B2477CFE9B331F] - (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe [59720] [PID.4080] [MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.3352] [MD5.6529C89512CE4498919BDC512572F82C] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656] [PID.4152] [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.4208] [MD5.7D2F9C1D614644AC0439195973325596] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [79360] [PID.4320] [MD5.5666955DC9FD455A003D86A21E0483A9] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.4392] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.4400] [MD5.B818EE2ABA25F4228AE5B0E3FE8A77AD] - (.Creative Technology Ltd - VolPanlu.exe.) -- C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe [237693] [PID.4452] [MD5.0C670049434B39DA2E00028CC9ED1958] - (...) -- C:\Program Files (x86)\Media center Bbox\media center\external\MediaServerTray.exe [728224] [PID.0] [MD5.F7E1CCBAD109329203AACB1E87BE614C] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe [27776968] [PID.4584] [MD5.8A86F41B857DA166033B1795FE69BF37] - (.Almico Software (www.almico.com) - Pas de description.) -- C:\Program Files (x86)\SpeedFan\speedfan.exe [4683768] [PID.4592] [MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720] [PID.4636] [MD5.90A3525C7399B7784D28F99EA1A51C4C] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [673616] [PID.4760] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.5664] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.5680] [MD5.DBE59E293685878EF48F7F29006F7AB9] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\Windows\SysWOW64\vmnetdhcp.exe [354896] [PID.6044] [MD5.7BB63ACBC2094D4BEA51D06BE9575CFD] - (...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [11840512] [PID.6064] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.4704] [MD5.4CD7987ECD754CE8D59FD898DB406532] - (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [104016] [PID.5864] [MD5.D4C772C8A3F79F64B78ABB7DA7F2A4D4] - (.Broadcom Corporation. - Bluetooth Headset Skype Proxy.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe [13600] [PID.7036] [MD5.D5543E09953C8A8B12801A3A7AFEE155] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720] [PID.7104] [MD5.61E4289E91E88C90478D7F4BEB10DCF7] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720] [PID.3516] [MD5.FF00844CCD1A614C94818C10E422411B] - (.asus - ControlDeck.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [1079936] [PID.312] [MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240] [PID.6992] [MD5.E23A2BEA01988A0C2E5DA74F5F526793] - (.Pas de propriétaire - Tray MFC Application.) -- C:\Program Files (x86)\Gaming Mouse\Tray.exe [221184] [PID.3232] [MD5.95110A1C5A1D228AC1DDF6AB67D00BEB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [920472] [PID.7728] [MD5.639B783F5BC546D8D9662881730AFF9B] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [310224] [PID.6652] [MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4020] [MD5.5DBDC85A9AB1C338E82DB4F118C04D6E] - (.Apple Inc. - distnoted.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe [13712] [PID.6180] [MD5.C027976360520038D17C64EFFEFA61F4] - (.Apple Inc. - SyncServer.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe [56416] [PID.4896] [MD5.6FC79A950476A5F539EEB65F9097C0A8] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [17304] [PID.7704] [MD5.23AA0FDCBDD87D0B78092798C68312D8] - (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe [1855880] [PID.3828] [MD5.BA58BE8F544B058C160E7CCDB7A6EA72] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7472128] [PID.6656] ~ Processes Running: Scanned in 00mn 04s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\prefs.js C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\user.js M3 - MFPP: Plugins - [Guilhem] -- C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\searchplugins\web-search.xml M3 - MFPP: Plugins - [Guilhem] -- C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\searchplugins\wot-safe-search.xml M0 - MFSP: prefs.js [Guilhem - tbrtjdal.default] http://www.google.fr M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\battlefieldheroespatcher@ea.com] [] Battlefield Heroes Updater v5.0.199.0 (..) M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\DeviceDetection@logitech.com] [] ????????? ????????? Logitech v1.24.0.9 (..) M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20130515 (..) M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.15 (..) M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}] [] Cookies Manager+ v1.5.1.1 (..) M2 - MFEP: prefs.js [Guilhem - tbrtjdal.default\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}] [] Flash and Video Download v1.33 (..) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 4.0.1.13525.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll P2 - FPN: [HKCU] [@talk.google.com/O1DPlugin] - (.Google - Version 4.0.1.13525.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npo1d.dll P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propriétaire - Google Talk Plugin Video Accelerator version:0.1.44.29.) -- C:\Users\Guilhem\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Guilhem\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Guilhem\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.5.6f4.) -- C:\Users\Guilhem\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll ~ Firefox Browser: 17 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 17 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.) O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll ~ BHO: 5 Scanned in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Run: [RunDLLEntry] . (.Creative Technology Ltd. - AmbRun Endpoints Dynamic Link Library.) -- C:\Windows\system32\AmbRunE.dll O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe O4 - HKLM\..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.) O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [Start WingMan Profiler] . (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe O4 - HKCU\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe O4 - HKCU\..\Run: [JumiController] Clé orpheline O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.) O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] . (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe O4 - HKCU\..\Run: [RGSC] D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe O4 - HKCU\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe O4 - HKLM\..\Wow6432Node\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [VolPanel] . (.Creative Technology Ltd - VolPanlu.exe.) -- C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe O4 - HKLM\..\Wow6432Node\Run: [UpdReg] . (.Creative Technology Ltd. - Creative UpdReg.) -- C:\Windows\UpdReg.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ASUS Cloud Corporation - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe O4 - HKLM\..\Wow6432Node\Run: [Gaming Mouse Hid] . (.Pas de propriétaire - hid MFC Application.) -- C:\Program Files (x86)\Gaming Mouse\hid.exe O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Wow6432Node\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [vmware-tray] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [JumiController] Clé orpheline O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.) O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [com.apple.dav.bookmarks.daemon] . (.Apple Inc. - BookmarkDAV_client.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [RGSC] D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe O4 - HKUS\S-1-5-21-1495036114-1722307083-3936051245-1000\..\Run: [EPSON Stylus SX400 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEGE.exe ~ Application: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: iTunes.lnk . (.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe O4 - GS\TaskBar: Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\QuickLaunch: Picasa 3.lnk . (.Google Inc. - Picasa.) -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe O4 - GS\QuickLaunch: SolidWorks 2010 x64 Edition.lnk . (.Acresso Software Inc. - InstallShield.) -- C:\Windows\Installer\{E9173A5F-22A6-4152-848E-45851DB99162}\i386_SldWorks.exe O4 - GS\QuickLaunch: SolidWorks eDrawings 2010.lnk . (.Dassault Systèmes SolidWorks Corp. - EModelViewer Module.) -- D:\Logiciels\SolidWorks Corp\SolidWorks eDrawings\EModelViewer.exe O4 - GS\QuickLaunch: SolidWorks Explorer 2010.lnk . (.Acresso Software Inc. - InstallShield.) -- C:\Windows\Installer\{2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D}\NewShortcut1.exe O4 - GS\QuickLaunch: VMware Workstation.lnk . (.VMware, Inc. - VMware Workstation.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: AVS Mobile Uploader.lnk . (.Online Media Technologies Ltd. - AVS Mobile Uploader.) -- C:\Program Files (x86)\Common Files\AVSMedia\MobileUploader\AVSMobileUploader.exe O4 - GS\SendTo: AVS Video Burner.lnk . (.Online Media Technologies Ltd. - AVS Video Burner.) -- C:\Program Files (x86)\Common Files\AVSMedia\BurnerService\AVSVideoBurner.exe O4 - GS\SendTo: AVS Video Uploader.lnk . (.Online Media Technologies Ltd. - AVS Video Uploader.) -- C:\Program Files (x86)\Common Files\AVSMedia\VideoUploader\AVSVideoUploader.exe O4 - GS\SendTo: Dropbox.lnk . (...) -- C:\Users\Guilhem\Desktop\DropBox\Dropbox O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\fsquirt.exe O4 - GS\SendTo: WinSCP (pour envoi).lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.) -- C:\Program Files (x86)\WinSCP\WinSCP.exe O4 - GS\Desktop: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe ~ Global Startup: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll ~ Winsock: 10 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.129.203 62.201.129.201 O17 - HKLM\System\CCS\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan O17 - HKLM\System\CS1\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.129.203 62.201.129.201 O17 - HKLM\System\CS1\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan O17 - HKLM\System\CS2\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{C726FE16-049D-4E61-8C90-1C96B19AACBB}: DhcpNameServer = 62.201.129.203 62.201.129.201 O17 - HKLM\System\CS2\Services\Tcpip\..\{87A18263-EA67-4BC7-9470-2EC4E4835576}: DhcpDomain = lan O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: media center Bouygues Telecom (BytelMediaServer) . (...) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe O23 - Service: CyberLink Product - 2012/06/15 22:29:47 (CLKMSVC10_9EC60124) . (.CyberLink - CyberLink KM Service.) - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe O23 - Service: FABS - Helping agent for MAGIX media dat (Fabs) . (.MAGIX AG - Verzeichnisüberwachung und Hilfsaufgaben fü.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Mobiola Wave Service (Mobiola Wave Service) . (...) - C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe O23 - Service: Skype C2C Service (Skype C2C Service) . (.Skype Technologies S.A. - Skype C2C Service.) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: Intel(R) Management & Security Applicati (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\Windows\SysWOW64\vmnetdhcp.exe O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\Windows\SysWOW64\vmnat.exe O23 - Service: VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe O23 - Service: Power Control [2010/04/22 19:17:50] ({B154377D-700F-42cc-9474-23858FBDF4BD}) . (.CyberLink Corp. - Pas de description.) - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl ~ Services: 27 Scanned in 00mn 05s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000Core.job [1034] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000UA.job [1086] [MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] [APT] [ACMON] (.ATK.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [684544] [MD5.F040037B149FD0F5A5044AE563390FA7] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [256904] [MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-Guilhem-Laptop-Guilhem] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208] [MD5.F4DCD4912B185C3AAEB92A7040832AD1] [APT] [ASUS Live Update] (...) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [51768] [MD5.6ACAB6D198B1B804719D662FE03BCA8D] [APT] [ASUS P4G] (.ATK.) -- C:\Program Files\P4G\BatteryLife.exe [310912] [MD5.868E3486E7EC522330344152A5535783] [APT] [ASUS SmartLogon Console Sensor] (.ASUS.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305720] [MD5.FF00844CCD1A614C94818C10E422411B] [APT] [ASUSControlDeck] (.asus.) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [1079936] [MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe [3545880] =>Piriform Ltd [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000Core] (.Google Inc..) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1495036114-1722307083-3936051245-1000UA] (.Google Inc..) -- C:\Users\Guilhem\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [MD5.BDD790326FABC31FB635130810245062] [APT] [WC3] (...) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440] [MD5.25A96E3CE5740C32F24544C9C27685A6] [APT] [{00ED5C2F-B47C-4982-8537-1F7C060DEFEA}] (.VMware, Inc..) -- C:\ProgramData\VMware\VMware Workstation\Uninstaller\uninstall.exe [937992] [MD5.00000000000000000000000000000000] [APT] [{16865AF1-46AB-4900-9EEA-F503B1DE3DD9}] (...) -- D:\Documents\Guilhem\WBFSManager3.0.1-RTW-x86\setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{8A1E3290-67E7-4096-8B27-7AA37A10EC9B}] (...) -- D:\Documents\Guilhem\epson324601eu.exe (.not file.) [0] [MD5.CBEC06E32D0AC9C3D0A9199EDC1FB959] [APT] [{CB705FFD-E4DF-4DEF-9CA8-7FDA70C64F11}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928] [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] ~ Scheduled Task: 19 Scanned in 00mn 07s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\Windows\System32\DRIVERS\cmdguard.sys O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\Windows\System32\DRIVERS\cmdhlp.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys O41 - Driver: (inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\System32\DRIVERS\inspect.sys O41 - Driver: (MpKsld99bbf2e) . (.Microsoft Corporation - KSLDriver.) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{41BF9C27-979B-4721-A75D-E48F363401EA}\MpKsld99bbf2e.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) - C:\Windows\system32\drivers\ws2ifsl.sys O41 - Driver: (MpKsl5be58252) . (. - .) - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0F9F920A-7733-44C1-941C-8CDC2F60006D}\MpKsl5be58252.sys (.not file.) ~ Drivers: 78 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F800CF18-6470-D909-B460-73F2F41030B4} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F37A899E-1745-52F5-658F-9A4DA4D46BB7} O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {06585B02-F20D-4AB2-9A64-86EF2AE0F8F0} O42 - Logiciel: ASUS AP Bank - (.ASUSTEK.) [HKLM][64Bits] -- ASUS AP Bank_is1 O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {2B81872B-A054-48DA-BE3B-FA5C164C303A} O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158} O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0} O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {91EFE3A1-585E-4F66-B5F6-F118F56C4C47} O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5} O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D} O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1} O42 - Logiciel: ASUS WebStorage - (.ASUS Cloud Corporation.) [HKLM][64Bits] -- ASUS WebStorage O42 - Logiciel: ASUS_Notebook_G73 Screen Saver - (...) [HKLM][64Bits] -- ASUS_Notebook_G73 O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE} O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS Update Manager_is1 O42 - Logiciel: AVS Video Converter 8 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Video Converter 7_is1 O42 - Logiciel: AVS4YOU Software Navigator 1.4 - (.Online Media Technologies Ltd..) [HKLM][64Bits] -- AVS4YOU Software Navigator_is1 O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5AF4B3C4-C393-48D7-AC7E-8E7615579548} O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {15FEDA5F-141C-4127-8D7E-B962D1742728} O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Photoshop Elements 6 O42 - Logiciel: Adobe Reader X (10.1.7) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001} O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Arcus Drivers and Tools 1.08 - (.Arcus Technology.) [HKLM][64Bits] -- {EF38BD3C-9BAE-4AC1-9913-1DF00AFE2BF4} O42 - Logiciel: Arcus Technology, Inc. Performax USB 1.30.2 - (.Arcus Technology.) [HKLM][64Bits] -- {54523412-951D-447E-9189-EF10DFCA97F6} O42 - Logiciel: Astroburn Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- Astroburn Lite O42 - Logiciel: Audacity 1.3.9 (Unicode) - (.Audacity Team.) [HKLM][64Bits] -- Audacity 1.3 Beta (Unicode)_is1 O42 - Logiciel: Battlefield Heroes - (.EA Digital illusions.) [HKLM][64Bits] -- {8DC910CD-8EE3-4ffc-A4EB-9B02701059C4} O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {B4089055-D468-45A4-A6BA-5A138DD715FC} O42 - Logiciel: Bing Bureau - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D095455-D971-4D4C-9EFD-9AF6A6584F3A} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>Piriform Ltd O42 - Logiciel: COMODO Internet Security - (.COMODO.) [HKLM][64Bits] -- COMODO Internet Security O42 - Logiciel: COSMOSM 2010 x64 Edition (2009/330) - (.SolidWorks Corporation.) [HKLM][64Bits] -- {F54D7268-3768-4F77-B1AC-094CAC44E767} O42 - Logiciel: CamStudio Lossless Codec v1.5 - (.CamStudio.) [HKLM][64Bits] -- camcodec O42 - Logiciel: CamStudio version 2.7 - (.CamStudio Open Source.) [HKLM][64Bits] -- {04B83666-3A62-452B-85D3-70F8117F2329}_is1 O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E72F1051-B87E-4EF4-AE9F-8FDD229CC438} O42 - Logiciel: ControlDeck - (.ASUS.) [HKLM][64Bits] -- {5B65EF64-1DFA-414A-8C94-7BB726158E21} O42 - Logiciel: Creative MediaSource 5 - (.Creative Technology Limited.) [HKLM][64Bits] -- {BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD} O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM][64Bits] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite O42 - Logiciel: DWGeditor - (.SolidWorks.) [HKLM][64Bits] -- {56DCD20A-E558-4396-AF59-14D15AA737BB} O42 - Logiciel: DiRT 3 - (.Codemasters.) [HKLM][64Bits] -- GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200} O42 - Logiciel: DiRT 3 - (.Codemasters.) [HKLM][64Bits] -- {434D0FA0-1558-4D8E-AC3D-BD1000008200} O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox O42 - Logiciel: EPSON SX210 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON SX210 Series O42 - Logiciel: EPSON Scan - (...) [HKLM][64Bits] -- EPSON Scanner O42 - Logiciel: EPSON Stylus SX400 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON Stylus SX400 Series O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {87C2248A-C7DD-49ED-9BCD-B312A9D0819E} O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- {48F22622-1CC2-4A83-9C1E-644DD96F832D} O42 - Logiciel: Epson Stylus SX210_SX410_TX210_TX410 Manuel - (...) [HKLM][64Bits] -- Epson Stylus SX210_SX410_TX210_TX410 Guide d'utilisation O42 - Logiciel: Express Gate - (.DeviceVM, Inc..) [HKLM][64Bits] -- {B5A5627C-0173-4DB2-ADA8-740479370F67} O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755} O42 - Logiciel: Firebird SQL Server - MAGIX Edition - (.MAGIX AG.) [HKLM][64Bits] -- {34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485} O42 - Logiciel: Fraps - (...) [HKLM][64Bits] -- Fraps O42 - Logiciel: Gaming Mouse - (.ASUS.) [HKLM][64Bits] -- {C52DE33F-117A-4EC8-8A32-084E828D7B1E} O42 - Logiciel: GanttProject - (...) [HKLM][64Bits] -- GanttProject O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM][64Bits] -- {51268A7D-4E1A-371A-9849-496D48930952} O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485-BF17-1110000D8301} O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games.) [HKLM][64Bits] -- {579BA58C-F33D-4970-9953-B94B43768AC3} O42 - Logiciel: Hitman Absolution - (...) [HKLM][64Bits] -- Hitman Absolution_is1 O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} O42 - Logiciel: Intel(R) Turbo Boost Technology Monitor - (.Intel.) [HKLM][64Bits] -- {39F4C6F9-618A-4E5B-8FB2-6BD661174E32} O42 - Logiciel: JDownloader 0.9 - (.AppWork GmbH.) [HKLM][64Bits] -- 5513-1208-7298-9440 O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Logitech Gaming Software 5.10 - (.Logitech.) [HKLM][64Bits] -- {1444D2EE-C7AD-44A8-844F-2634B49353D1} O42 - Logiciel: MAGIX Screenshare - (.MAGIX AG.) [HKLM][64Bits] -- {3677B336-9F6D-45DF-9543-C049E35EE590} O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX AG.) [HKLM][64Bits] -- {A72DAA6B-A81F-4EE5-B1B2-C7620888776B} O42 - Logiciel: MAGIX Vidéo deluxe 17 Premium (Effets de transition) - (.MAGIX AG.) [HKLM][64Bits] -- {7AE635E5-932C-43A9-9EE7-0499BEDEB266} O42 - Logiciel: MAGIX Vidéo deluxe 17 Premium (effets de titres) - (.MAGIX AG.) [HKLM][64Bits] -- {A53698E0-3A6E-408C-AA7C-7DFB4583C194} O42 - Logiciel: MAGIX Vidéo deluxe 17 Premium Version à télécharger - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_MSI_Videodeluxe17_premium O42 - Logiciel: MAGIX Vidéo deluxe 17 Premium Version à télécharger - (.MAGIX AG.) [HKLM][64Bits] -- {655513BD-A11F-4937-BCD4-A21E316E66AC} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36} O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44} O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Media center Bbox - (.Bouygues Télécom.) [HKLM][64Bits] -- {1A6D94E5-37D1-4F14-908B-61B7E08105B2} O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8} O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D954C6C2-544B-4091-A47F-11E77162883E} O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {45CD67FD-3218-4207-A0A2-BC41245189E3} O42 - Logiciel: Mobiola WebCamera for iPhone 2.2.0 - (.SHAPE Services.) [HKLM][64Bits] -- com.shapeservices.webcamera_iphone_is1 O42 - Logiciel: MozBackup 1.4.10 - (.Pavel Cvrcek.) [HKLM][64Bits] -- MozBackup O42 - Logiciel: Mozilla Firefox 21.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 21.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM][64Bits] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6} O42 - Logiciel: Outil de téléchargement USB/DVD Windows 7 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F8683B5-5056-411C-B808-B289E29E9BBB} O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392} O42 - Logiciel: PhotoFiltre - (...) [HKLM][64Bits] -- PhotoFiltre O42 - Logiciel: PhotoView 360 - (.SolidWorks Corporation.) [HKLM][64Bits] -- {736D2DAD-3D87-4CAA-8646-83D238AD68E0} O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc O42 - Logiciel: Rapture3D 2.4.8 Game - (.Blue Ripple Sound.) [HKLM][64Bits] -- {D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1 O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM][64Bits] -- RocketDock_is1 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8} O42 - Logiciel: SolidWorks 2010 x64 Edition SP02.1 - (.SolidWorks Corporation.) [HKLM][64Bits] -- SolidWorks Installation Manager 20100-40201-1100-100 O42 - Logiciel: SolidWorks 2010 x64 Edition SP02.1 - (.SolidWorks.) [HKLM][64Bits] -- {E9173A5F-22A6-4152-848E-45851DB99162} O42 - Logiciel: SolidWorks Explorer 2010 SP02.1 x64 Edition - (.SolidWorks Corporation.) [HKLM][64Bits] -- {2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D} O42 - Logiciel: SolidWorks Flow Simulation 2010 SP02.1 x64 Edition - (.SolidWorks Corporation.) [HKLM][64Bits] -- {792F51F9-C200-445D-AC7A-15C2F082A715} O42 - Logiciel: SolidWorks eDrawings 2010 - (.Dassault Systèmes SolidWorks Corp..) [HKLM][64Bits] -- {A786161E-959C-4B4B-AA6D-7424C13CCCF2} O42 - Logiciel: Sound Blaster Audigy HD - (.Creative Technology Limited.) [HKLM][64Bits] -- {38F8D823-008D-4E5A-BBCE-867A86C2BF2B} O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM][64Bits] -- SpeedFan O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: TI Connect 1.6 - (.Texas Instruments Incorporated.) [HKLM][64Bits] -- {A8B94669-8654-4126-BD28-D0D2412CDED6} O42 - Logiciel: Test Drive Unlimited - (.Nom de votre société.) [HKLM][64Bits] -- {C37A0BC1-52EE-4F97-8223-5CA9FC0357B0} O42 - Logiciel: Test Drive Unlimited 2 - (.Atari.) [HKLM][64Bits] -- Test Drive Unlimited 2_is1 O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM][64Bits] -- TmNationsForever_is1 O42 - Logiciel: USB 2.0 2.0M UVC WebCam - (...) [HKLM][64Bits] -- USB 2.0 2.0M UVC WebCam O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player O42 - Logiciel: VMware Workstation - (.VMware, Inc.) [HKLM][64Bits] -- VMware_Workstation O42 - Logiciel: VMware Workstation - (.VMware, Inc..) [HKLM][64Bits] -- {0D94F75A-0EA6-4951-B3AF-B145FA9E05C6} O42 - Logiciel: VmciSockets - (.VMware, Inc..) [HKLM][64Bits] -- {A1F2E701-F148-4359-84CF-4CDA51FDF55F} O42 - Logiciel: WBFS Manager 3.0 - (.AlexDP.) [HKLM][64Bits] -- WBFS Manager 3.0 O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM][64Bits] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E} O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D} O42 - Logiciel: WinSCP 4.3.7 - (.Martin Prikryl.) [HKLM][64Bits] -- winscp3_is1 O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (07/17/2009 6.2.0.9403) - (.Broadcom.) [HKLM][64Bits] -- F9FD5BBF579A4BFD40D38BE291F731666B27DC28 O42 - Logiciel: Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0) - (.Broadcom.) [HKLM][64Bits] -- 2AA10AB519DC7432D599A0E860206A7DDCC27764 O42 - Logiciel: Windows Driver Package - Broadcom HIDClass (06/11/2009 6.2.0.9500) - (.Broadcom.) [HKLM][64Bits] -- 0E74EB10C05C955C24243E6D3120CDC972FC5B1D O42 - Logiciel: Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 - (.Texas Instruments Inc..) [HKLM][64Bits] -- EC3E466026556D3EB760B01C4772277614354E11 O42 - Logiciel: Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 - (.Texas Instruments Inc..) [HKLM][64Bits] -- 7511B29C86C398B4D11A0B0E4176CAD68D1B7057 O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2} O42 - Logiciel: Worms Revolution - (...) [HKLM][64Bits] -- Worms Revolution_is1 O42 - Logiciel: XnView 1.96 - (.Gougelet Pierre-e.) [HKLM][64Bits] -- XnView_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {76FF0F03-B707-4332-B5D1-A56C8303514E} O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} O42 - Logiciel: tools-freebsd - (.VMware, Inc..) [HKLM][64Bits] -- {003BFBBD-6C67-419E-A24D-0DCAFC3A5249} O42 - Logiciel: tools-linux - (.VMware, Inc..) [HKLM][64Bits] -- {D102611A-6466-4101-A51D-51069303AC65} O42 - Logiciel: tools-netware - (.VMware, Inc..) [HKLM][64Bits] -- {197597A7-AD33-4898-9D8E-73066818B464} O42 - Logiciel: tools-solaris - (.VMware, Inc..) [HKLM][64Bits] -- {AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4} O42 - Logiciel: tools-winPre2k - (.VMware, Inc..) [HKLM][64Bits] -- {AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D} O42 - Logiciel: tools-windows - (.VMware, Inc..) [HKLM][64Bits] -- {FFD9383C-01D5-4897-A954-43AF599AED30} ~ Logic: 269 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\ASUS] [HKCU\Software\ATI] [HKCU\Software\ATK0100] [HKCU\Software\AVS4YOU] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Unity] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Audacity] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\BlueRippleSound] [HKCU\Software\CamStudioOpenSource for Nick] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\ComodoGroup] [HKCU\Software\Creative Tech] [HKCU\Software\CyberLink] [HKCU\Software\DSS] [HKCU\Software\DT Soft] [HKCU\Software\Digital River] [HKCU\Software\Disc Soft] [HKCU\Software\ECAREME] [HKCU\Software\EPSON] [HKCU\Software\EaseUS] [HKCU\Software\EpmNewsInfo] [HKCU\Software\FLT] [HKCU\Software\Fraps3] [HKCU\Software\GameSpy] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IGA] [HKCU\Software\IM Providers] [HKCU\Software\InstallCore] =>PUP.InstallCore [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\JumiTech] [HKCU\Software\Lake] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Logitech] [HKCU\Software\MAGIX AG] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Magix] [HKCU\Software\MainConcept (Consumer)] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Martin Prikryl] [HKCU\Software\MimarSinan] [HKCU\Software\Mozilla Backup] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\ORL] [HKCU\Software\Oberon Media] [HKCU\Software\OpenOffice.org] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Realtek] [HKCU\Software\RocketDock] [HKCU\Software\SEIKO EPSON] [HKCU\Software\SHAPE Services] [HKCU\Software\SSSI] [HKCU\Software\SecuROM] [HKCU\Software\Skype] [HKCU\Software\Smart Projects] [HKCU\Software\SolidWorks] [HKCU\Software\SpeedFan] [HKCU\Software\Stardock] [HKCU\Software\Synaptics] [HKCU\Software\TeleCharger] [HKCU\Software\Texas Instruments] [HKCU\Software\Trolltech] [HKCU\Software\Unity] [HKCU\Software\VMware, Inc.] [HKCU\Software\Valve] [HKCU\Software\Widcomm] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Wow6432Node] [HKCU\Software\Xara] [HKCU\Software\e-academy Inc.] [HKCU\Software\eDrawings] [HKCU\Software\ej-technologies] [HKCU\Software\i-FunBox.com] [HKCU\Software\shockwave.com] [HKCU\Software\srac] [HKCU\Software\techPowerUp] [HKCU\Software\testapp] [HKLM\Software\AMD] [HKLM\Software\ASUS] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\ATK0100] [HKLM\Software\Adobe] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\ComodoGroup] [HKLM\Software\CoreSecurity] [HKLM\Software\Creative Tech] [HKLM\Software\Cyberlink] [HKLM\Software\DeviceVM] [HKLM\Software\ECAREME] [HKLM\Software\EPSON] [HKLM\Software\FLEXlm License Manager] [HKLM\Software\GEAR Software] [HKLM\Software\Google] [HKLM\Software\Hewlett-Packard] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\Martin Prikryl] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SONIX] [HKLM\Software\SRS Labs] [HKLM\Software\SolidWorks] [HKLM\Software\Sonic] [HKLM\Software\Srac] [HKLM\Software\Synaptics] [HKLM\Software\Tarma Installer] =>Toolbar.Tarma [HKLM\Software\VMware, Inc.] [HKLM\Software\Waves Audio] [HKLM\Software\Widcomm] [HKLM\Software\WinRAR] [HKLM\Software\Wow6432Node\AGEIA Technologies] [HKLM\Software\Wow6432Node\ASUS] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\AVS4YOU] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\Apple Computer, Inc.] [HKLM\Software\Wow6432Node\Apple Inc.] [HKLM\Software\Wow6432Node\AsLdr] [HKLM\Software\Wow6432Node\Atari] [HKLM\Software\Wow6432Node\Auran] [HKLM\Software\Wow6432Node\Autodesk] [HKLM\Software\Wow6432Node\BioWare] [HKLM\Software\Wow6432Node\BlueRippleSound] [HKLM\Software\Wow6432Node\Bouygues Télécom] [HKLM\Software\Wow6432Node\Bunndle] [HKLM\Software\Wow6432Node\CDDB] [HKLM\Software\Wow6432Node\CODEMASTERS] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\Creative Labs] [HKLM\Software\Wow6432Node\Creative Tech] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\DT Soft] [HKLM\Software\Wow6432Node\Debug] [HKLM\Software\Wow6432Node\DeviceVM] [HKLM\Software\Wow6432Node\Disc Soft] [HKLM\Software\Wow6432Node\DivXNetworks] [HKLM\Software\Wow6432Node\EASEUS] [HKLM\Software\Wow6432Node\ECAREME] [HKLM\Software\Wow6432Node\EPSON] [HKLM\Software\Wow6432Node\Electronic Arts] [HKLM\Software\Wow6432Node\Even Balance] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\InterVideo] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Lake] [HKLM\Software\Wow6432Node\Logitech] [HKLM\Software\Wow6432Node\MAGIX] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Macrovision] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\Martin Prikryl] [HKLM\Software\Wow6432Node\McAfee.com] [HKLM\Software\Wow6432Node\MimarSinan] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\Oberon Media] [HKLM\Software\Wow6432Node\OpenOffice.org] [HKLM\Software\Wow6432Node\Persits Software] [HKLM\Software\Wow6432Node\PoINT] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\PowerDVD9_Upgrade] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\Rockstar Games] [HKLM\Software\Wow6432Node\SHAPE Services] [HKLM\Software\Wow6432Node\SRAC] [HKLM\Software\Wow6432Node\Sierra] [HKLM\Software\Wow6432Node\Silicon Laboratories, Inc.] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\SolidWorks Corporation] [HKLM\Software\Wow6432Node\SolidWorks] [HKLM\Software\Wow6432Node\Sonic] [HKLM\Software\Wow6432Node\Stardock] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\Systray] [HKLM\Software\Wow6432Node\Team17] [HKLM\Software\Wow6432Node\Texas Instruments] [HKLM\Software\Wow6432Node\ThinPrint] [HKLM\Software\Wow6432Node\VMware, Inc.] [HKLM\Software\Wow6432Node\Valve] [HKLM\Software\Wow6432Node\VideoLAN] [HKLM\Software\Wow6432Node\WinRAR] [HKLM\Software\Wow6432Node\Wondershare] [HKLM\Software\Wow6432Node\Xara] [HKLM\Software\Wow6432Node\XnView] [HKLM\Software\Wow6432Node\eDrawings] [HKLM\Software\Wow6432Node\ej-technologies] [HKLM\Software\Wow6432Node\mcafeeupdater] [HKLM\Software\Wow6432Node\media center Bouygues Telecom] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node] ~ Key Software: 344 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 22/08/2012 - 23:58:55 - [509,058] ----D C:\Program Files (x86)\Adobe O43 - CFD: 15/04/2012 - 19:29:33 - [7,133] ----D C:\Program Files (x86)\AGEIA Technologies O43 - CFD: 14/04/2013 - 17:59:28 - [2,145] ----D C:\Program Files (x86)\AMD APP O43 - CFD: 14/04/2013 - 17:59:30 - [0,397] ----D C:\Program Files (x86)\AMD AVT O43 - CFD: 23/04/2010 - 07:04:15 - [2,896] ----D C:\Program Files (x86)\AmIcoSingLun O43 - CFD: 14/04/2012 - 23:35:10 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 02/07/2012 - 20:56:45 - [12,550] ----D C:\Program Files (x86)\Arcus Technology O43 - CFD: 26/03/2013 - 23:24:43 - [13,076] ----D C:\Program Files (x86)\Astroburn Lite O43 - CFD: 09/05/2012 - 16:32:43 - [151,333] ----D C:\Program Files (x86)\ASUS O43 - CFD: 19/02/2013 - 14:43:22 - [313,988] ----D C:\Program Files (x86)\Atari O43 - CFD: 14/04/2013 - 15:32:03 - [59,541] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 16/05/2010 - 15:51:10 - [29,376] ----D C:\Program Files (x86)\Audacity 1.3 Beta (Unicode) O43 - CFD: 15/04/2012 - 04:26:15 - [64,691] ----D C:\Program Files (x86)\AVS4YOU O43 - CFD: 25/02/2013 - 03:07:55 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 13/08/2012 - 14:48:55 - [7,576] ----D C:\Program Files (x86)\BRS O43 - CFD: 04/04/2013 - 20:51:40 - [20,420] ----D C:\Program Files (x86)\CamStudio 2.7 O43 - CFD: 22/05/2013 - 16:30:59 - [11,329] ----D C:\Program Files (x86)\CCleaner =>Piriform Ltd O43 - CFD: 23/04/2013 - 14:15:13 - [1104,949] ----D C:\Program Files (x86)\Common Files O43 - CFD: 23/04/2010 - 07:03:32 - [55,371] ----D C:\Program Files (x86)\Creative O43 - CFD: 23/04/2010 - 07:04:02 - [23,578] --H-D C:\Program Files (x86)\Creative Installation Information O43 - CFD: 23/04/2010 - 06:22:03 - [455,104] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 17/03/2013 - 07:58:10 - [25,855] ----D C:\Program Files (x86)\DAEMON Tools Lite O43 - CFD: 23/04/2010 - 07:04:35 - [308,985] ----D C:\Program Files (x86)\Downloaded Installations O43 - CFD: 13/03/2013 - 23:37:47 - [7,337] --H-D C:\Program Files (x86)\Dr.Fone_Temp O43 - CFD: 04/05/2013 - 12:16:24 - [0] ----D C:\Program Files (x86)\EaseUS O43 - CFD: 18/04/2012 - 18:55:40 - [19,723] ----D C:\Program Files (x86)\epson O43 - CFD: 18/04/2012 - 18:57:42 - [114,305] ----D C:\Program Files (x86)\Epson Software O43 - CFD: 31/03/2013 - 16:56:17 - [14,204] ----D C:\Program Files (x86)\Gaming Mouse O43 - CFD: 18/03/2013 - 16:11:52 - [12,606] ----D C:\Program Files (x86)\GanttProject-2.5 O43 - CFD: 14/04/2012 - 23:16:48 - [76,996] ----D C:\Program Files (x86)\Google O43 - CFD: 19/02/2013 - 21:30:11 - [0] ----D C:\Program Files (x86)\i-Funbox DevTeam O43 - CFD: 31/03/2013 - 16:56:14 - [129,323] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 23/04/2010 - 06:55:53 - [12,384] ----D C:\Program Files (x86)\Intel O43 - CFD: 18/05/2013 - 17:03:33 - [4,885] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 09/06/2013 - 17:32:31 - [155,998] ----D C:\Program Files (x86)\iTunes O43 - CFD: 23/04/2013 - 14:06:24 - [122,344] ----D C:\Program Files (x86)\Java O43 - CFD: 15/03/2013 - 00:00:40 - [64,864] ----D C:\Program Files (x86)\JDownloader O43 - CFD: 16/05/2010 - 14:48:51 - [15,892] ----D C:\Program Files (x86)\JRE O43 - CFD: 24/05/2012 - 13:37:40 - [8,469] ----D C:\Program Files (x86)\Jumi O43 - CFD: 01/07/2012 - 01:15:22 - [10,334] ----D C:\Program Files (x86)\Logitech O43 - CFD: 01/08/2012 - 13:38:33 - [51,661] ----D C:\Program Files (x86)\MAGIX O43 - CFD: 29/05/2013 - 18:38:31 - [13,265] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 04/03/2013 - 00:16:42 - [57,933] ----D C:\Program Files (x86)\Media center Bbox O43 - CFD: 30/03/2013 - 15:55:27 - [30,207] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 16/04/2012 - 01:17:41 - [0] ----D C:\Program Files (x86)\Microsoft Antimalware O43 - CFD: 17/04/2012 - 05:18:45 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 20/02/2013 - 21:05:14 - [8,929] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE O43 - CFD: 17/04/2012 - 15:04:37 - [578,635] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 19/02/2013 - 21:20:15 - [1,252] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 14/03/2013 - 06:21:56 - [40,835] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 15/05/2010 - 04:43:23 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 15/04/2012 - 04:19:41 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 15/04/2012 - 19:27:44 - [54,040] ----D C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 16/04/2012 - 01:11:02 - [3,554] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 16/04/2012 - 09:14:58 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 23/04/2013 - 14:15:53 - [15,575] ----D C:\Program Files (x86)\Mobiola WebCamera for iPhone O43 - CFD: 14/04/2012 - 22:48:01 - [1,294] ----D C:\Program Files (x86)\MozBackup O43 - CFD: 24/05/2013 - 13:07:10 - [50,948] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 27/05/2013 - 20:38:51 - [0,214] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 15/04/2012 - 04:19:50 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 15/04/2012 - 19:27:03 - [19,263] ----D C:\Program Files (x86)\MSECache O43 - CFD: 23/04/2010 - 06:53:58 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 19/02/2013 - 02:18:55 - [5,439] ----D C:\Program Files (x86)\Object Desktop O43 - CFD: 13/08/2012 - 14:48:52 - [0,772] ----D C:\Program Files (x86)\OpenAL O43 - CFD: 16/05/2010 - 14:48:51 - [346,667] ----D C:\Program Files (x86)\OpenOffice.org 3 O43 - CFD: 16/05/2010 - 15:54:47 - [3,389] ----D C:\Program Files (x86)\PhotoFiltre O43 - CFD: 14/06/2012 - 10:56:28 - [0] ----D C:\Program Files (x86)\Program Files (x86) O43 - CFD: 23/04/2010 - 07:00:56 - [4,526] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 09:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 16/05/2010 - 15:42:14 - [11,655] ----D C:\Program Files (x86)\RocketDock O43 - CFD: 29/05/2012 - 22:34:03 - [46,079] R---D C:\Program Files (x86)\Skype O43 - CFD: 15/04/2012 - 19:32:36 - [0,187] ----D C:\Program Files (x86)\SolidWorksx86 O43 - CFD: 08/06/2013 - 09:40:29 - [5,612] ----D C:\Program Files (x86)\SpeedFan O43 - CFD: 22/05/2013 - 16:32:15 - [466,850] ----D C:\Program Files (x86)\Steam O43 - CFD: 23/04/2010 - 07:01:16 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 13/03/2013 - 13:00:24 - [0,000] ----D C:\Program Files (x86)\The KMPlayer FR O43 - CFD: 13/05/2012 - 19:15:46 - [14,339] ----D C:\Program Files (x86)\TI Education O43 - CFD: 14/07/2009 - 08:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 12/09/2012 - 14:45:03 - [92,145] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 04/05/2013 - 12:30:38 - [722,712] ----D C:\Program Files (x86)\VMware O43 - CFD: 14/04/2012 - 21:45:00 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 30/06/2012 - 16:07:19 - [148,694] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 17/04/2012 - 15:19:18 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 17/04/2012 - 15:19:18 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 09:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 17/04/2012 - 15:19:17 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 17/04/2012 - 15:19:18 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 17/04/2012 - 15:19:18 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 07/05/2012 - 00:41:28 - [8,800] ----D C:\Program Files (x86)\WinSCP O43 - CFD: 13/03/2013 - 23:37:45 - [0] ----D C:\Program Files (x86)\Wondershare O43 - CFD: 16/05/2010 - 15:59:38 - [32,953] ----D C:\Program Files (x86)\XnView O43 - CFD: 09/06/2013 - 21:26:58 - [22,273] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 27/05/2012 - 12:51:34 - [309,750] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 04/03/2013 - 00:16:03 - [44,205] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 09/06/2013 - 17:31:57 - [148,177] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 14/04/2013 - 17:59:30 - [2,238] ----D C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 15/04/2012 - 04:25:56 - [92,122] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 14/04/2012 - 23:23:11 - [0,259] ----D C:\Program Files (x86)\Common Files\ControlDeck O43 - CFD: 23/04/2010 - 07:03:27 - [3,054] ----D C:\Program Files (x86)\Common Files\Creative O43 - CFD: 23/04/2010 - 07:03:17 - [0,151] ----D C:\Program Files (x86)\Common Files\Creative Labs Shared O43 - CFD: 23/04/2010 - 06:17:39 - [0,132] ----D C:\Program Files (x86)\Common Files\CyberLink O43 - CFD: 15/04/2012 - 19:29:33 - [0,195] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 15/04/2012 - 19:12:24 - [37,125] ----D C:\Program Files (x86)\Common Files\Gestionnaire d'installation SolidWorks O43 - CFD: 18/04/2012 - 18:56:17 - [12,036] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 23/04/2013 - 14:06:32 - [1,189] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 16/05/2010 - 15:51:51 - [0,827] ----D C:\Program Files (x86)\Common Files\Macrovision Shared O43 - CFD: 01/08/2012 - 13:38:14 - [11,146] ----D C:\Program Files (x86)\Common Files\MAGIX Services O43 - CFD: 01/08/2012 - 13:40:31 - [1,700] ----D C:\Program Files (x86)\Common Files\MAGIX Shared O43 - CFD: 30/06/2012 - 16:05:18 - [263,034] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 23/04/2010 - 06:45:46 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media O43 - CFD: 23/04/2010 - 06:55:56 - [0,159] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 14/07/2009 - 07:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 23/04/2013 - 14:15:33 - [0,426] ----D C:\Program Files (x86)\Common Files\SHAPE Services O43 - CFD: 29/05/2012 - 22:33:39 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 15/04/2012 - 19:39:25 - [51,727] ----D C:\Program Files (x86)\Common Files\SolidWorks Shared O43 - CFD: 14/07/2009 - 07:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 19/02/2013 - 02:47:34 - [0] ----D C:\Program Files (x86)\Common Files\Stardock O43 - CFD: 20/02/2013 - 23:45:44 - [0,302] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 17/04/2012 - 15:19:17 - [47,878] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 13/05/2012 - 19:15:48 - [10,246] ----D C:\Program Files (x86)\Common Files\TI Shared O43 - CFD: 27/03/2013 - 22:34:18 - [8,022] ----D C:\Program Files (x86)\Common Files\VMware O43 - CFD: 15/05/2010 - 04:41:04 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 13/05/2012 - 19:14:10 - [14,179] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard O43 - CFD: 13/03/2013 - 12:51:31 - [3,074] ----D C:\Program Files (x86)\Common Files\Wondershare O43 - CFD: 09/06/2013 - 17:32:36 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 21/04/2013 - 18:09:07 - [399,026] ----D C:\ProgramData\Adobe O43 - CFD: 14/04/2013 - 17:59:31 - [0] ----D C:\ProgramData\AMD O43 - CFD: 23/04/2010 - 07:04:14 - [0,000] ----D C:\ProgramData\AmUStor O43 - CFD: 14/04/2012 - 23:35:12 - [231,277] ----D C:\ProgramData\Apple O43 - CFD: 14/04/2012 - 23:35:42 - [58,611] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 26/03/2013 - 23:24:41 - [0,001] ----D C:\ProgramData\Astroburn Lite O43 - CFD: 16/05/2010 - 13:31:22 - [0,134] ----D C:\ProgramData\ASUS O43 - CFD: 19/02/2013 - 21:28:02 - [0,002] ----D C:\ProgramData\ASUS WebStorage O43 - CFD: 14/04/2013 - 18:09:06 - [0,000] ----D C:\ProgramData\ATI O43 - CFD: 15/04/2012 - 04:26:33 - [0] ----D C:\ProgramData\AVS4YOU O43 - CFD: 13/06/2012 - 15:43:24 - [0] ----D C:\ProgramData\boost_interprocess O43 - CFD: 14/08/2012 - 00:00:54 - [1899,844] ----D C:\ProgramData\Codemasters O43 - CFD: 16/05/2010 - 15:34:54 - [0,141] ----D C:\ProgramData\Comodo O43 - CFD: 23/04/2010 - 07:03:00 - [0,000] ----D C:\ProgramData\Creative O43 - CFD: 23/04/2010 - 07:02:59 - [0,006] ----D C:\ProgramData\Creative Labs O43 - CFD: 16/06/2012 - 00:30:45 - [0,080] ----D C:\ProgramData\CyberLink O43 - CFD: 07/10/2012 - 21:11:38 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite O43 - CFD: 02/04/2013 - 14:28:38 - [0] ----D C:\ProgramData\DassaultSystemes O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 14/08/2012 - 00:00:55 - [0,010] -SH-D C:\ProgramData\DSS O43 - CFD: 20/09/2012 - 20:20:30 - [15,996] ----D C:\ProgramData\EPSON O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 26/09/2012 - 13:25:26 - [0] ----D C:\ProgramData\Flash Video Capture Data O43 - CFD: 15/04/2012 - 19:48:58 - [0,004] ----D C:\ProgramData\FLEXnet O43 - CFD: 16/05/2010 - 13:25:50 - [0] ----D C:\ProgramData\Google O43 - CFD: 20/08/2012 - 19:17:38 - [0,035] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 01/08/2012 - 13:40:39 - [679,154] ----D C:\ProgramData\MAGIX O43 - CFD: 29/05/2013 - 18:38:11 - [7,237] ----D C:\ProgramData\Malwarebytes O43 - CFD: 12/06/2012 - 20:48:52 - [0] ----D C:\ProgramData\McAfee O43 - CFD: 04/03/2013 - 00:17:13 - [174,284] ----D C:\ProgramData\media center Bouygues Telecom O43 - CFD: 15/04/2013 - 21:40:24 - [1386,904] -S--D C:\ProgramData\Microsoft O43 - CFD: 02/06/2013 - 21:23:39 - [0,430] ----D C:\ProgramData\Microsoft Help O43 - CFD: 04/05/2012 - 11:48:17 - [0,001] ----D C:\ProgramData\Mozilla O43 - CFD: 23/04/2010 - 07:05:43 - [0,002] ----D C:\ProgramData\P4G O43 - CFD: 16/05/2010 - 13:29:33 - [0,000] ----D C:\ProgramData\Partner O43 - CFD: 23/04/2013 - 14:30:51 - [0,003] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 20/02/2013 - 21:09:05 - [0,092] -SH-D C:\ProgramData\SecuROM O43 - CFD: 22/05/2013 - 16:18:33 - [68,176] ----D C:\ProgramData\Skype O43 - CFD: 15/04/2012 - 19:33:47 - [834,147] ----D C:\ProgramData\SolidWorks O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 29/09/2012 - 17:40:54 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 22/05/2013 - 16:32:00 - [1,195] ----D C:\ProgramData\Tarma Installer =>Toolbar.Tarma O43 - CFD: 16/06/2012 - 00:24:26 - [0,239] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 09:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 25/06/2012 - 15:03:38 - [6,055] ----D C:\ProgramData\Test Drive Unlimited O43 - CFD: 02/07/2012 - 07:34:27 - [407,850] ----D C:\ProgramData\TmForever O43 - CFD: 18/04/2012 - 18:58:19 - [0,003] ----D C:\ProgramData\UDL O43 - CFD: 08/06/2013 - 09:40:43 - [7,911] ----D C:\ProgramData\VMware O43 - CFD: 14/04/2012 - 23:36:33 - [0,002] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 08/04/2013 - 22:39:52 - [24,904] ----D C:\Users\Guilhem\AppData\Roaming\Adobe O43 - CFD: 19/02/2013 - 21:16:48 - [-274,445] ----D C:\Users\Guilhem\AppData\Roaming\Apple Computer O43 - CFD: 19/02/2013 - 21:28:08 - [15,700] ----D C:\Users\Guilhem\AppData\Roaming\Asus WebStorage O43 - CFD: 15/05/2010 - 04:47:44 - [0] ----D C:\Users\Guilhem\AppData\Roaming\ATI O43 - CFD: 16/05/2010 - 15:52:00 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Audacity O43 - CFD: 15/04/2012 - 04:26:34 - [0] ----D C:\Users\Guilhem\AppData\Roaming\AVS4YOU O43 - CFD: 22/05/2013 - 16:34:32 - [4,422] ----D C:\Users\Guilhem\AppData\Roaming\BitTorrent =>P2P.BitTorrent O43 - CFD: 04/03/2013 - 00:17:13 - [3,793] ----D C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter O43 - CFD: 16/06/2012 - 00:05:50 - [0,284] ----D C:\Users\Guilhem\AppData\Roaming\CyberLink O43 - CFD: 22/05/2013 - 16:32:16 - [1,505] ----D C:\Users\Guilhem\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 02/04/2013 - 14:28:39 - [0] ----D C:\Users\Guilhem\AppData\Roaming\DassaultSystemes O43 - CFD: 09/06/2013 - 17:26:25 - [66,088] ----D C:\Users\Guilhem\AppData\Roaming\Dropbox O43 - CFD: 07/10/2012 - 19:29:00 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\e-academy Inc O43 - CFD: 19/02/2013 - 21:27:19 - [0] ----D C:\Users\Guilhem\AppData\Roaming\EeeStorageUploader O43 - CFD: 19/04/2012 - 00:17:37 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\Epson O43 - CFD: 26/09/2012 - 13:25:26 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Flash Video Capture Data O43 - CFD: 31/03/2013 - 16:56:20 - [0,000] ----D C:\Users\Guilhem\AppData\Roaming\Gaming Mouse O43 - CFD: 13/03/2013 - 12:50:59 - [0] ----D C:\Users\Guilhem\AppData\Roaming\GetRightToGo O43 - CFD: 16/05/2010 - 13:25:31 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Google O43 - CFD: 15/05/2010 - 04:47:18 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Identities O43 - CFD: 01/10/2012 - 22:45:42 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\iFunbox_UserCache O43 - CFD: 18/04/2012 - 18:53:05 - [0] ----D C:\Users\Guilhem\AppData\Roaming\InstallShield O43 - CFD: 16/05/2010 - 14:38:58 - [0,063] ----D C:\Users\Guilhem\AppData\Roaming\Macromedia O43 - CFD: 01/08/2012 - 13:40:40 - [0,041] ----D C:\Users\Guilhem\AppData\Roaming\MAGIX O43 - CFD: 29/05/2013 - 18:38:38 - [0,638] ----D C:\Users\Guilhem\AppData\Roaming\Malwarebytes O43 - CFD: 14/07/2009 - 11:44:38 - [0] ----D C:\Users\Guilhem\AppData\Roaming\Media Center Programs O43 - CFD: 02/06/2013 - 21:23:39 - [10,342] -S--D C:\Users\Guilhem\AppData\Roaming\Microsoft O43 - CFD: 07/06/2013 - 20:45:55 - [125,682] ----D C:\Users\Guilhem\AppData\Roaming\Mozilla O43 - CFD: 03/06/2012 - 12:36:38 - [2,138] ----D C:\Users\Guilhem\AppData\Roaming\OpenOffice.org O43 - CFD: 15/04/2012 - 18:39:22 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Rovio O43 - CFD: 25/06/2012 - 13:21:11 - [0,010] R-H-D C:\Users\Guilhem\AppData\Roaming\SecuROM O43 - CFD: 23/04/2013 - 14:15:53 - [0,033] ----D C:\Users\Guilhem\AppData\Roaming\SHAPE Services O43 - CFD: 15/04/2012 - 18:44:50 - [8,984] ----D C:\Users\Guilhem\AppData\Roaming\Sierra O43 - CFD: 22/05/2013 - 16:18:31 - [4,750] ----D C:\Users\Guilhem\AppData\Roaming\Skype O43 - CFD: 08/04/2013 - 22:59:35 - [4,444] ----D C:\Users\Guilhem\AppData\Roaming\SolidWorks O43 - CFD: 04/04/2013 - 22:19:22 - [0] ----D C:\Users\Guilhem\AppData\Roaming\SolidWorks 2010 O43 - CFD: 26/05/2012 - 02:51:05 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Teeworlds O43 - CFD: 19/02/2013 - 21:27:11 - [0] ----D C:\Users\Guilhem\AppData\Roaming\temp O43 - CFD: 04/06/2013 - 17:28:27 - [0,078] ----D C:\Users\Guilhem\AppData\Roaming\vlc O43 - CFD: 06/06/2013 - 13:12:27 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\VMware O43 - CFD: 16/05/2010 - 15:49:06 - [0,000] ----D C:\Users\Guilhem\AppData\Roaming\WinRAR O43 - CFD: 22/08/2012 - 23:58:49 - [16,256] ----D C:\Users\Guilhem\AppData\Local\Adobe O43 - CFD: 14/04/2012 - 23:35:11 - [0] ----D C:\Users\Guilhem\AppData\Local\Apple O43 - CFD: 19/02/2013 - 21:16:13 - [103,524] ----D C:\Users\Guilhem\AppData\Local\Apple Computer O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Application Data O43 - CFD: 26/03/2013 - 22:47:19 - [2,979] ----D C:\Users\Guilhem\AppData\Local\Apps O43 - CFD: 16/05/2010 - 13:31:20 - [1,310] ----D C:\Users\Guilhem\AppData\Local\ASUS O43 - CFD: 15/05/2010 - 04:47:44 - [0,090] ----D C:\Users\Guilhem\AppData\Local\ATI O43 - CFD: 15/05/2010 - 04:47:52 - [0] ----D C:\Users\Guilhem\AppData\Local\Broadcom O43 - CFD: 19/02/2013 - 15:54:39 - [25,800] ----D C:\Users\Guilhem\AppData\Local\CrashRpt O43 - CFD: 16/06/2012 - 00:30:46 - [0,009] ----D C:\Users\Guilhem\AppData\Local\Cyberlink O43 - CFD: 02/04/2013 - 14:28:38 - [0] ----D C:\Users\Guilhem\AppData\Local\DassaultSystemes O43 - CFD: 14/06/2012 - 12:35:31 - [36,332] ----D C:\Users\Guilhem\AppData\Local\Downloaded Installations O43 - CFD: 01/06/2013 - 14:02:17 - [4,960] ----D C:\Users\Guilhem\AppData\Local\ElevatedDiagnostics O43 - CFD: 20/02/2013 - 23:31:22 - [0,296] ----D C:\Users\Guilhem\AppData\Local\FLT O43 - CFD: 02/10/2012 - 17:23:57 - [601,867] ----D C:\Users\Guilhem\AppData\Local\Google O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Historique O43 - CFD: 15/07/2012 - 19:09:22 - [0,005] ----D C:\Users\Guilhem\AppData\Local\libimobiledevice O43 - CFD: 12/06/2012 - 20:49:07 - [0] ----D C:\Users\Guilhem\AppData\Local\Macromedia O43 - CFD: 07/04/2013 - 00:09:44 - [0,002] ----D C:\Users\Guilhem\AppData\Local\MAGIX_AG O43 - CFD: 25/04/2013 - 15:29:28 - [489,453] ----D C:\Users\Guilhem\AppData\Local\Microsoft O43 - CFD: 29/05/2012 - 22:18:42 - [0,186] ----D C:\Users\Guilhem\AppData\Local\Microsoft Games O43 - CFD: 15/04/2012 - 04:16:35 - [0] ----D C:\Users\Guilhem\AppData\Local\Microsoft Help O43 - CFD: 16/05/2010 - 14:37:12 - [475,056] ----D C:\Users\Guilhem\AppData\Local\Mozilla O43 - CFD: 15/05/2010 - 04:40:51 - [0,039] ----D C:\Users\Guilhem\AppData\Local\Power2Go O43 - CFD: 04/04/2013 - 20:46:52 - [0] ----D C:\Users\Guilhem\AppData\Local\Programs O43 - CFD: 26/05/2012 - 08:00:12 - [1,387] ----D C:\Users\Guilhem\AppData\Local\PunkBuster O43 - CFD: 20/02/2013 - 21:01:36 - [0,003] ----D C:\Users\Guilhem\AppData\Local\Rockstar Games O43 - CFD: 16/05/2010 - 13:27:12 - [0,272] ----D C:\Users\Guilhem\AppData\Local\Seven Zip O43 - CFD: 09/06/2013 - 21:25:17 - [23,481] ----D C:\Users\Guilhem\AppData\Local\Temp O43 - CFD: 15/05/2010 - 04:40:39 - [0] ----D C:\Users\Guilhem\AppData\Local\Temporary Internet Files O43 - CFD: 28/09/2012 - 01:06:26 - [0,200] ----D C:\Users\Guilhem\AppData\Local\Unity O43 - CFD: 15/05/2010 - 04:47:45 - [0,000] ----D C:\Users\Guilhem\AppData\Local\VirtualStore O43 - CFD: 06/06/2013 - 13:12:30 - [0] ----D C:\Users\Guilhem\AppData\Local\VMware O43 - CFD: 14/03/2013 - 00:04:15 - [0,003] ----D C:\Users\Guilhem\AppData\Local\WBFSManager O43 - CFD: 01/06/2013 - 14:02:37 - [0,043] ----D C:\Users\Guilhem\AppData\Local\Windows Live O43 - CFD: 13/03/2013 - 12:51:32 - [0,000] ----D C:\Users\Guilhem\AppData\Local\Wondershare O43 - CFD: 01/08/2012 - 13:40:44 - [0,048] ----D C:\Users\Guilhem\AppData\Local\Xara O43 - CFD: 14/07/2009 - 08:54:32 - [0,014] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 18/05/2013 - 17:07:01 - [0,000] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 25/06/2012 - 13:19:26 - [0,005] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari O43 - CFD: 15/04/2012 - 04:26:05 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU O43 - CFD: 16/05/2010 - 14:49:44 - [0,004] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner =>Piriform Ltd O43 - CFD: 23/04/2010 - 06:22:22 - [0,013] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite O43 - CFD: 16/06/2012 - 00:05:46 - [0,001] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9 O43 - CFD: 03/06/2013 - 06:25:49 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 25/05/2012 - 00:15:46 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 03/05/2012 - 20:51:32 - [0,002] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jumi O43 - CFD: 14/07/2009 - 08:49:38 - [0,001] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 26/03/2013 - 22:47:20 - [0,004] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outil de téléchargement USB DVD Windows 7 O43 - CFD: 03/06/2013 - 06:25:57 - [0,002] R---D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 14/03/2013 - 00:01:12 - [0,001] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WBFS Manager O43 - CFD: 16/05/2010 - 14:46:11 - [0,003] ----D C:\Users\Guilhem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ~ 5 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 274 Scanned in 00mn 16s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.8AD98996E0B92F953BE2F1104AB0E13A] - 09/06/2013 - 20:23:20 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1493943] O44 - LFC:[MD5.662D3285145CF36719FF4C852DCEB6EF] - 09/06/2013 - 17:26:08 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.F6EA568CBA2CBD69E0A87F1646F5C290] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1565992] O44 - LFC:[MD5.DF4225A7DCFAAF9A098F0AFEF3C41DCA] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [108714] O44 - LFC:[MD5.7C2DE9F40EB98DF03E17D19B240BFEAB] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [133114] O44 - LFC:[MD5.58165A3DB36C6199CF41950FDB5CA1F6] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [621868] O44 - LFC:[MD5.CD50D3F79669DE61182B556B54A4C010] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [710192] O44 - LFC:[MD5.F6EA568CBA2CBD69E0A87F1646F5C290] - 08/06/2013 - 09:49:27 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1565992] O44 - LFC:[MD5.DF4225A7DCFAAF9A098F0AFEF3C41DCA] - 08/06/2013 - 09:49:27 RSHAD . (...) -- C:\Windows\System32\perfc009.dat [108714] O44 - LFC:[MD5.7C2DE9F40EB98DF03E17D19B240BFEAB] - 08/06/2013 - 09:49:27 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat [133114] O44 - LFC:[MD5.58165A3DB36C6199CF41950FDB5CA1F6] - 08/06/2013 - 09:49:27 RSHAD . (...) -- C:\Windows\System32\perfh009.dat [621868] O44 - LFC:[MD5.CD50D3F79669DE61182B556B54A4C010] - 08/06/2013 - 09:49:27 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat [710192] O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 08/06/2013 - 09:40:17 ---A- . (...) -- C:\Windows\SysNative\acovcnt.exe [45056] O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 08/06/2013 - 09:40:17 RSHAD . (...) -- C:\Windows\System32\acovcnt.exe [45056] O44 - LFC:[MD5.11E02C9130C1BDC75C9F800D6CF9945A] - 08/06/2013 - 09:39:56 ---A- . (...) -- C:\Windows\setupact.log [1533] O44 - LFC:[MD5.DC7BFC5152B9C8EB5312BBFFF8A5E9DE] - 08/06/2013 - 09:39:47 ---A- . (...) -- C:\Windows\PFRO.log [826] O44 - LFC:[MD5.C70EC6AB31A1869BDB12C83478169347] - 03/06/2013 - 12:19:21 ---A- . (...) -- C:\Windows\SysNative\AutoRunFilter.ini [3032] O44 - LFC:[MD5.C70EC6AB31A1869BDB12C83478169347] - 03/06/2013 - 12:19:21 RSHAD . (...) -- C:\Windows\System32\AutoRunFilter.ini [3032] O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 29/05/2013 - 18:38:07 RSHAD . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25928] O44 - LFC:[MD5.B684DA6AF038B3CC8ED5F3EAB3C73DC1] - 29/05/2013 - 12:58:18 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] ~ Files: 20 Scanned in 00mn 06s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.0BBCA6E78CC34E5D85C15B34ABE158C7] - 04/06/2013 - 17:24:57 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.1B8BF24484B4448D1AC3D52771496AF4] - 08/06/2013 - 09:38:59 ---A- - C:\Windows\Prefetch\CLI.EXE-BB402402.pf O45 - LFCP:[MD5.D0D4F63DA9B9648019F5A0346D855701] - 08/06/2013 - 09:39:11 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin O45 - LFCP:[MD5.57E53C79FA30499107AE1CD316DB74A1] - 08/06/2013 - 09:41:07 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-D5170E12.pf O45 - LFCP:[MD5.4BDF82D502A99D0D78DB7F5F5C1B40AA] - 08/06/2013 - 09:42:15 ---A- - C:\Windows\Prefetch\CONTROLDECK.EXE-1EFEC479.pf O45 - LFCP:[MD5.3B33FF6D9F804DF04BE4C998DEA15230] - 08/06/2013 - 09:42:29 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf O45 - LFCP:[MD5.9526A41F14CAF5E4005FD243F40BE43C] - 08/06/2013 - 09:42:45 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf O45 - LFCP:[MD5.45CB657BC2C1DE55B87C7A46F22C7B47] - 08/06/2013 - 09:42:46 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf O45 - LFCP:[MD5.FF07FDEBA8BBB323C6803BC510AD18B0] - 08/06/2013 - 09:42:56 ---A- - C:\Windows\Prefetch\UNS.EXE-E6E49771.pf O45 - LFCP:[MD5.8B201522AE370376E39BB22B00309DF4] - 08/06/2013 - 09:43:37 ---A- - C:\Windows\Prefetch\WMIAPSRV.EXE-29F35ED0.pf O45 - LFCP:[MD5.1100E7BACF1A5F39779CA06A402DC4B9] - 08/06/2013 - 09:44:20 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf O45 - LFCP:[MD5.2CA1055F6564D17ADC34FA1EE7CAE6E9] - 08/06/2013 - 09:45:16 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf O45 - LFCP:[MD5.501ADBD1A15EC0E8E36CC5A56A57872E] - 08/06/2013 - 09:46:06 ---A- - C:\Windows\Prefetch\CCC.EXE-B637C9BF.pf O45 - LFCP:[MD5.0B7EDA749E6AEFCB52534D98F7AC8862] - 08/06/2013 - 09:50:29 ---A- - C:\Windows\Prefetch\LIVEUPDT.EXE-DAF7AD9D.pf O45 - LFCP:[MD5.DB1C89F611D592C7E52D029418282641] - 08/06/2013 - 09:53:05 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf O45 - LFCP:[MD5.7377E1562BF643FC41638727091ADD2C] - 08/06/2013 - 09:55:10 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-E7777CC4.pf O45 - LFCP:[MD5.BB78D017D8E477496D20FA9933532220] - 08/06/2013 - 10:46:54 ---A- - C:\Windows\Prefetch\MMLOADDRV.EXE-4072A3B8.pf O45 - LFCP:[MD5.D429B38DC2019B34272BFBC46041BD0A] - 08/06/2013 - 10:48:55 ---A- - C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf O45 - LFCP:[MD5.3C218E6C39C43A153223DDA4A6AE5958] - 08/06/2013 - 12:21:27 ---A- - C:\Windows\Prefetch\WINWORD.EXE-CEA9B574.pf O45 - LFCP:[MD5.B414D1D38C7B9F0E362A69219D5D8C03] - 08/06/2013 - 14:29:15 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.151.1790.0.E-AF65F0D8.pf O45 - LFCP:[MD5.F2967A64DAA3203ED60D5858502146F0] - 08/06/2013 - 20:37:04 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx O45 - LFCP:[MD5.5E0BE79C10987725880F0576FB760B4E] - 08/06/2013 - 20:37:04 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf O45 - LFCP:[MD5.209BE8907E072F59C7AEE3C133D9D50C] - 09/06/2013 - 17:26:14 ---A- - C:\Windows\Prefetch\SMARTLOGON.EXE-8F794AF5.pf O45 - LFCP:[MD5.871BF5A8FA5DBBAEDC378A4267595029] - 09/06/2013 - 17:26:14 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf O45 - LFCP:[MD5.46216EB04E5EC7A9D2A68ED84F78CE78] - 09/06/2013 - 17:26:21 ---A- - C:\Windows\Prefetch\TRAY.EXE-8CB7B65D.pf O45 - LFCP:[MD5.92C6545BC1AF9D3239FA847089540B0E] - 09/06/2013 - 17:26:23 ---A- - C:\Windows\Prefetch\CFPUPDAT.EXE-18E3EE2C.pf O45 - LFCP:[MD5.22CAE0C52E29EC0A3AE0C2D5FBFFA3CE] - 09/06/2013 - 17:26:30 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf O45 - LFCP:[MD5.E3EA533EE815CE1E5A14BD6F2FB4E66B] - 09/06/2013 - 17:26:41 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-03FFF510.pf O45 - LFCP:[MD5.0AEEC514ACA88BEF902763BBEF1183BA] - 09/06/2013 - 17:26:46 ---A- - C:\Windows\Prefetch\ZHPFIX.EXE-32786FC2.pf O45 - LFCP:[MD5.DA9096F3E0AFC6F07976DFD4DD848880] - 09/06/2013 - 17:26:47 ---A- - C:\Windows\Prefetch\AgCx_SC1.db O45 - LFCP:[MD5.D43624CBB37D42819C2B76C2ADFFDC2C] - 09/06/2013 - 17:27:13 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf O45 - LFCP:[MD5.2A1908B1DAFA891BD1A2F0B982026334] - 09/06/2013 - 17:28:11 ---A- - C:\Windows\Prefetch\AgCx_SC2.db O45 - LFCP:[MD5.60A0B8296267E42AE930D4B309084BE8] - 09/06/2013 - 17:29:22 ---A- - C:\Windows\Prefetch\SETUPADMIN.EXE-AF8AE332.pf O45 - LFCP:[MD5.8867C8C419A6D465E19F63BBF54BC997] - 09/06/2013 - 17:32:37 ---A- - C:\Windows\Prefetch\DIFXINST64.EXE-7636E2E8.pf O45 - LFCP:[MD5.153B23A36FDC3783C512D7A3AB1D9E59] - 09/06/2013 - 17:32:37 ---A- - C:\Windows\Prefetch\GEARDIFX.EXE-923B8EE5.pf O45 - LFCP:[MD5.5E4B3E6F8CABA42ADCB35C91007BA798] - 09/06/2013 - 17:32:40 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf O45 - LFCP:[MD5.C8DC3B93059457B2301B60DAD728423D] - 09/06/2013 - 17:32:41 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-E09A077A.pf O45 - LFCP:[MD5.5E0FBA0FAF2E36A47B6E5ABEC241FCE9] - 09/06/2013 - 17:32:53 ---A- - C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf O45 - LFCP:[MD5.A408462EB06430AB27D976FBCC3A7AB5] - 09/06/2013 - 17:33:05 ---A- - C:\Windows\Prefetch\ITUNESHELPER.EXE-010C3851.pf O45 - LFCP:[MD5.29953D8D197ECDB7916467989A7B6FF9] - 09/06/2013 - 17:33:13 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-97229F6A.pf O45 - LFCP:[MD5.CD85890B53A04C55F3A604B218FBDFF4] - 09/06/2013 - 17:33:18 ---A- - C:\Windows\Prefetch\SOFTWAREUPDATE.EXE-6F5E018F.pf O45 - LFCP:[MD5.9936BF6F36CB9649F0721D6C9010D51B] - 09/06/2013 - 17:53:19 ---A- - C:\Windows\Prefetch\AM_DELTA_PATCH_1.151.1858.0.E-343869B1.pf O45 - LFCP:[MD5.A273B4EBE7F127A7E7BEA514776B106D] - 09/06/2013 - 17:53:19 ---A- - C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf O45 - LFCP:[MD5.FBB9E51E6B438521C6DC98B75E65F7FF] - 09/06/2013 - 17:53:19 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf O45 - LFCP:[MD5.BCE77BBF3C8FEB66E985641E43B8A5EE] - 09/06/2013 - 17:54:07 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf O45 - LFCP:[MD5.DA606F5172D5CA809D88696D0E29F5C5] - 09/06/2013 - 17:54:08 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf O45 - LFCP:[MD5.80C49E9D0F7638F5D04C00D1445938F3] - 09/06/2013 - 17:54:23 ---A- - C:\Windows\Prefetch\DISTNOTED.EXE-9671246C.pf O45 - LFCP:[MD5.93138DCBA82512E686742A32DD388D53] - 09/06/2013 - 17:55:59 ---A- - C:\Windows\Prefetch\APPLEMOBILEDEVICEHELPER.EXE-EDD411E2.pf O45 - LFCP:[MD5.4E14AC221E677963FE9790CEAD38BBEC] - 09/06/2013 - 17:55:59 ---A- - C:\Windows\Prefetch\ITUNES.EXE-6E101229.pf O45 - LFCP:[MD5.77BD2DBB534EB8CDCB1336DF07A22B61] - 09/06/2013 - 17:56:02 ---A- - C:\Windows\Prefetch\COM.APPLE.WINDOWSCONTACTS.CLI-8BD1031C.pf O45 - LFCP:[MD5.30E70DB8C97F0100A13D4A0AD7C2872D] - 09/06/2013 - 17:56:04 ---A- - C:\Windows\Prefetch\ATH.EXE-B2B4A349.pf O45 - LFCP:[MD5.723C1591980277076751E6339D441770] - 09/06/2013 - 17:56:10 ---A- - C:\Windows\Prefetch\SYNCSERVER.EXE-71F05404.pf O45 - LFCP:[MD5.9EF648B3F8492B2CABD011B9791AFE9F] - 09/06/2013 - 17:56:25 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf O45 - LFCP:[MD5.6BFA61EA4C6D81D17447B92E8E318DD3] - 09/06/2013 - 18:12:34 ---A- - C:\Windows\Prefetch\Layout.ini O45 - LFCP:[MD5.93C70BD074965BF85A7A26BA39802461] - 09/06/2013 - 18:13:37 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-6AA90EA5.pf O45 - LFCP:[MD5.9658D72F5EE4DD239C26BCE21A926490] - 09/06/2013 - 18:15:43 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf O45 - LFCP:[MD5.6D755801BA1084278C72B7531B8CB549] - 09/06/2013 - 18:22:43 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf O45 - LFCP:[MD5.D6592F6B6E43372912204BE81D8C192D] - 09/06/2013 - 18:22:44 ---A- - C:\Windows\Prefetch\SDIAGNHOST.EXE-8D72177C.pf O45 - LFCP:[MD5.0F6C663D9D93EABA286D0D5028D77A8C] - 09/06/2013 - 18:22:45 ---A- - C:\Windows\Prefetch\CSC.EXE-BE9AC2DF.pf O45 - LFCP:[MD5.C5AA340EF342F0FB5DC6F218086FC848] - 09/06/2013 - 18:22:45 ---A- - C:\Windows\Prefetch\CVTRES.EXE-2B9D810D.pf O45 - LFCP:[MD5.5ED85190F66046DB9D301B0BCB45399D] - 09/06/2013 - 18:22:46 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf O45 - LFCP:[MD5.0B9F607FB215A0837B4480BF0704B76C] - 09/06/2013 - 18:22:46 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf O45 - LFCP:[MD5.68AE391C8348DB3DFE907E3118A5EAA9] - 09/06/2013 - 18:22:48 ---A- - C:\Windows\Prefetch\W32TM.EXE-1101AF41.pf O45 - LFCP:[MD5.DF969D0F01346CB9ED4D7AD3E818C818] - 09/06/2013 - 18:22:57 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf O45 - LFCP:[MD5.F9D73752B0DEB7BF8AC75F7839124119] - 09/06/2013 - 18:24:32 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf O45 - LFCP:[MD5.5B7DCE83EA63BC39EE07988FAB3C1DBD] - 09/06/2013 - 19:00:02 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-5CBB3772.pf O45 - LFCP:[MD5.9FC3755447621482538E046711F6541E] - 09/06/2013 - 20:18:46 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1495036114-1722307083-3936051245-1000.db O45 - LFCP:[MD5.6D78F9335C10B50F52A58BB88399245B] - 09/06/2013 - 20:18:46 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1495036114-1722307083-3936051245-1000.db O45 - LFCP:[MD5.FF84FD9F2A47151062F9B69897116A34] - 09/06/2013 - 20:29:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf O45 - LFCP:[MD5.49E9FD508E5E0910CAEE5D856996ADE0] - 09/06/2013 - 20:29:10 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf O45 - LFCP:[MD5.E226B9435F4E52CC80CD1320B29671D1] - 09/06/2013 - 20:44:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-422688FE.pf O45 - LFCP:[MD5.AF41FD63A13656BB0F7339193EDE4834] - 09/06/2013 - 20:57:06 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db O45 - LFCP:[MD5.522F04318055ACD4C87FE4AE850F842E] - 09/06/2013 - 20:57:06 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db O45 - LFCP:[MD5.BEE39F02B8E19EEF701FC02FC4D2ABCA] - 09/06/2013 - 20:57:06 ---A- - C:\Windows\Prefetch\AgRobust.db O45 - LFCP:[MD5.F03FDA3D8097D0F8172D16A5B454CE77] - 09/06/2013 - 20:57:07 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db O45 - LFCP:[MD5.1D48A1A7559599817CFAA2DD5B93E46A] - 09/06/2013 - 21:23:55 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_7_700_20-5B0FD894.pf O45 - LFCP:[MD5.F212F5AF29985906715E4CE10EF68943] - 09/06/2013 - 21:23:55 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf O45 - LFCP:[MD5.0A19C96C26D8098941B9AB057C6B8EB5] - 09/06/2013 - 21:24:09 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf O45 - LFCP:[MD5.BC064D0BE9053044E67991854D83F01B] - 09/06/2013 - 21:24:28 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-829F2D51.pf O45 - LFCP:[MD5.7E89E9F5F9BA670B4B65AFC995804774] - 09/06/2013 - 21:24:28 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-80D8B2DE.pf O45 - LFCP:[MD5.27E72341647B6ACBA32A322A648430B8] - 09/06/2013 - 21:24:41 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf O45 - LFCP:[MD5.26143F3C37753128BA5860F5AAAC75A6] - 09/06/2013 - 21:24:45 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf O45 - LFCP:[MD5.6775F2FDF907EA776456E469541028F2] - 09/06/2013 - 21:24:45 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf O45 - LFCP:[MD5.6ED6E04D246E254DF1F6CDA854C92051] - 09/06/2013 - 21:25:22 ---A- - C:\Windows\Prefetch\ZHPHEP.EXE-EBD3B8D7.pf O45 - LFCP:[MD5.219A2583B4432D80BFC9C1B57A82EB90] - 09/06/2013 - 21:25:28 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf O45 - LFCP:[MD5.F55596A2A3B441D00ECC3F8B0842AEEE] - 09/06/2013 - 21:25:32 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-0D117CAF.pf O45 - LFCP:[MD5.18394EAA25F8483576F8EF8A6911CA6A] - 09/06/2013 - 21:25:45 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf O45 - LFCP:[MD5.850C29E010FDDFE01962B0992962E14F] - 09/06/2013 - 21:25:45 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf O45 - LFCP:[MD5.53788FFF0E00C9EB203C1B6AE3BB2DB0] - 09/06/2013 - 21:25:51 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf O45 - LFCP:[MD5.968B77DE2D3C5856BF84151F63D5DC50] - 09/06/2013 - 21:25:51 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-6768A320.pf O45 - LFCP:[MD5.82F06ECDAE8755C35823CEA86EC4A657] - 09/06/2013 - 21:26:02 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf O45 - LFCP:[MD5.31B9520EE686C8FBB74BAA4E557772C8] - 09/06/2013 - 21:26:53 ---A- - C:\Windows\Prefetch\PV.EXE-34B75B82.pf O45 - LFCP:[MD5.F0298178F21C65CDD07D3CBC1AB38B0C] - 09/06/2013 - 21:27:00 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf O45 - LFCP:[MD5.8003AED1260E2E218973791A8738D938] - 09/06/2013 - 21:27:00 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AB0CE9D9.pf O45 - LFCP:[MD5.0B78DD843CB936B24656DA78F4FAC64B] - 09/06/2013 - 21:27:12 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-AD598958.pf ~ Prefetcher: 95 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{605a835d-4e7c-11df-b7fc-806e6f6e6963}\AutoRun\command. (.Eden Games - Test Drive Unlimited 2 Autorun.) -- F:\AUTORUN.exe O51 - MPSK:{7dca8809-a668-11e1-b6ac-1c4bd60d5a46}\AutoRun\command. (...) -- I:\WD SmartWare.exe (.not file.) ~ Keys: Scanned in 00mn 02s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll ~ TDSD: 4 Scanned in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe O53 - SMSR:HKLM\...\startupreg\AdobeCS5ServiceManager [Key] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe O53 - SMSR:HKLM\...\startupreg\ApplePhotoStreams [Key] . (.Apple Inc. - ApplePhotoStreams.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe O53 - SMSR:HKLM\...\startupreg\BDRegion [Key] . (.cyberlink - brs.) -- C:\Program Files (x86)\Cyberlink\Shared files\brs.exe O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe O53 - SMSR:HKLM\...\startupreg\iCloudServices [Key] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O53 - SMSR:HKLM\...\startupreg\RemoteControl9 [Key] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O53 - SMSR:HKLM\...\startupreg\TrayServer [Key] . (.Magix - Trayserver.) -- D:\Logiciels\Video_Deluxe_17\TrayServer_fr.exe O53 - SMSR:HKLM\...\startupreg\vmware-tray [Key] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe ~ SMSR Keys: 15 Scanned in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Scanned in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowLegacyWebView"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "AllowUnhashedWebView"=1 ~ MWPE Keys: 7 Scanned in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 05:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.6107E33A30C0B923F31C872E1980D2D1] - 08/07/2011 - 18:32:58 ---A- . (.VMware, Inc. - VMware Virtual Storage Volume Driver.) -- C:\Windows\SysWOW64\drivers\vstor2-mntapi10-shared.sys [33392] O58 - SDL:[MD5.0FFE35F0B0CD5A324BBE22F02569AE3B] - 30/12/2012 - 00:59:38 ---A- . (.Almico Software - SpeedFan x64 Driver.) -- C:\Windows\SysWOW64\speedfan.sys [28664] ~ Drivers: Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 06/06/2013 - 12:19:57 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b0462d [124] O61 - LFC: 06/06/2013 - 12:20:23 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b04647 [152] O61 - LFC: 06/06/2013 - 13:11:08 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b0522c [156] O61 - LFC: 06/06/2013 - 13:12:21 ---A- C:\Users\Guilhem\AppData\Local\Temp\cdstmp_2120_0 [0] O61 - LFC: 06/06/2013 - 13:12:27 ---A- C:\Users\Guilhem\AppData\Roaming\VMware\inventory.vmls [1518] O61 - LFC: 07/06/2013 - 10:15:29 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b17a81 [124] O61 - LFC: 07/06/2013 - 10:15:49 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b17a95 [152] O61 - LFC: 07/06/2013 - 10:16:23 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b17ab7 [136] O61 - LFC: 07/06/2013 - 10:18:26 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b17b32 [136] O61 - LFC: 07/06/2013 - 19:03:42 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b1f64e [144] O61 - LFC: 07/06/2013 - 19:10:44 ---A- C:\Users\Guilhem\AppData\Local\Apple Computer\iTunes\StoreLocalStorage.plist [323] O61 - LFC: 07/06/2013 - 19:12:04 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b1f844 [156] O61 - LFC: 07/06/2013 - 19:12:18 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\Téléchargements.LNK [782] O61 - LFC: 07/06/2013 - 21:14:07 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\Rapport [Intermediaire]-Origam'UTT.docx.LNK [1407] O61 - LFC: 07/06/2013 - 21:14:15 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b214e7 [164] O61 - LFC: 07/06/2013 - 21:20:53 ---A- C:\Users\Guilhem\AppData\Local\Temp\39961356.od [134] O61 - LFC: 07/06/2013 - 21:20:53 ---A- C:\Users\Guilhem\AppData\Local\Temp\CVRC30C.tmp.cvr [0] O61 - LFC: 07/06/2013 - 21:38:17 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b21a89 [156] O61 - LFC: 07/06/2013 - 23:03:24 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b22e7c [156] O61 - LFC: 07/06/2013 - 23:04:33 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b22ec1 [156] O61 - LFC: 07/06/2013 - 23:06:47 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b22f47 [164] O61 - LFC: 07/06/2013 - 23:45:34 ---A- C:\Users\Guilhem\AppData\Local\Rockstar Games\GTA IV\User Music\cpuinfo.txt [73] O61 - LFC: 08/06/2013 - 00:20:18 ---A- C:\Users\Guilhem\AppData\Local\Rockstar Games\GTA IV\Settings\SETTINGS.CFG [1469] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\0429182574.data [705] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\0429182574.quar [445952] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1636505050.data [708] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\1636505050.quar [195072] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7276964684.data [915] O61 - LFC: 08/06/2013 - 09:38:31 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\7276964684.quar [12800] O61 - LFC: 08/06/2013 - 09:38:32 ---A- C:\Users\Guilhem\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-06-07 (23-06-52).txt [3106] O61 - LFC: 08/06/2013 - 09:38:43 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b2c363 [128] O61 - LFC: 08/06/2013 - 09:38:44 ---A- C:\Users\Guilhem\AppData\Roaming\Asus WebStorage\Logs\AWS-notepad.txt [0] O61 - LFC: 08/06/2013 - 09:39:02 --HA- C:\Users\Guilhem\AppData\Local\IconCache.db [7186426] O61 - LFC: 08/06/2013 - 09:40:10 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b2c3ba [124] O61 - LFC: 08/06/2013 - 09:40:29 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b2c3cd [152] O61 - LFC: 08/06/2013 - 09:40:31 ---A- C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter\Local Store\port.xml [6] O61 - LFC: 08/06/2013 - 09:40:32 ---A- C:\Users\Guilhem\AppData\Local\Temp\sfamcc00001.dll [192512] O61 - LFC: 08/06/2013 - 09:40:32 ---A- C:\Users\Guilhem\AppData\Local\Temp\sfareca00001.dll [158720] O61 - LFC: 08/06/2013 - 09:40:33 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\Preferences\com.apple.bookmarkdav.plist [133] O61 - LFC: 08/06/2013 - 09:40:44 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\host.db [97] O61 - LFC: 08/06/2013 - 09:40:44 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\host.dbx [229] O61 - LFC: 08/06/2013 - 09:40:44 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\unlink.db [232] O61 - LFC: 08/06/2013 - 09:40:45 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\notifications.dbx [2048] O61 - LFC: 08/06/2013 - 09:40:46 ---A- C:\Users\Guilhem\AppData\Local\Temp\Twain001.Mtx [4] O61 - LFC: 08/06/2013 - 09:40:46 ---A- C:\Users\Guilhem\AppData\Local\Temp\Twunk001.MTX [156] O61 - LFC: 08/06/2013 - 09:40:47 ---A- C:\Users\Guilhem\AppData\Local\Temp\TWAIN.LOG [1514] O61 - LFC: 08/06/2013 - 09:45:56 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Manifest.Bin [27266] O61 - LFC: 08/06/2013 - 09:45:56 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Manifest.xml [19630] O61 - LFC: 08/06/2013 - 12:19:01 ---A- C:\Users\Guilhem\AppData\Local\Temp\msohtmlclip1\01\clip_colorschememapping.xml [314] O61 - LFC: 08/06/2013 - 12:19:01 ---A- C:\Users\Guilhem\AppData\Local\Temp\msohtmlclip1\01\clip_themedata.thmx [3103] O61 - LFC: 08/06/2013 - 12:19:01 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Word12.pip [1744] O61 - LFC: 08/06/2013 - 12:19:01 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Word\ListGal.dat [13873] O61 - LFC: 08/06/2013 - 12:19:25 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b2e90d [156] O61 - LFC: 08/06/2013 - 12:21:21 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\Origam'UTT.LNK [1215] O61 - LFC: 08/06/2013 - 12:21:21 ---A- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\Rapport [Final]-Origam'UTT.docx.LNK [1383] O61 - LFC: 08/06/2013 - 12:21:21 --H-- C:\Users\Guilhem\AppData\Roaming\Microsoft\Office\Recent\index.dat [529] O61 - LFC: 08/06/2013 - 12:40:14 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b2edee [144] O61 - LFC: 08/06/2013 - 14:26:24 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b306d0 [156] O61 - LFC: 09/06/2013 - 17:26:22 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\config.dbx [7168] O61 - LFC: 09/06/2013 - 17:26:22 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\photo.dbx [13312] O61 - LFC: 09/06/2013 - 17:26:22 ---A- C:\Users\Guilhem\AppData\Roaming\com.bouyguestelecom.mediacenter\Local Store\Systray_Logs.txt [1048512] O61 - LFC: 09/06/2013 - 17:26:24 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\deleted.dbx [6144] O61 - LFC: 09/06/2013 - 17:26:24 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\filecache.dbx [36864] O61 - LFC: 09/06/2013 - 17:26:25 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\aggregation.dbx [4096] O61 - LFC: 09/06/2013 - 17:26:25 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\sigstore.dbx [44032] O61 - LFC: 09/06/2013 - 17:26:47 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b48297 [136] O61 - LFC: 09/06/2013 - 17:45:20 ---A- C:\Users\Guilhem\AppData\Local\Temp\plugtmp-3\plugin-1 [0] O61 - LFC: 09/06/2013 - 17:49:07 ---A- C:\Users\Guilhem\AppData\Local\ATI\ACE\Profiles.xml [47869] O61 - LFC: 09/06/2013 - 17:54:14 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b48906 [144] O61 - LFC: 09/06/2013 - 17:55:50 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b48966 [144] O61 - LFC: 09/06/2013 - 17:56:00 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\Preferences\ByHost\com.apple.syncservices.{846ee340-7039-11de-9d20-806e6f6e6963}.plist [73] O61 - LFC: 09/06/2013 - 17:56:01 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\schemas.adminarchive [133381] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\Preferences\com.apple.WindowsContacts.client.exe.plist [84] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\admin.syncdb [102400] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\clientdata\352340fc1280163e9adf24c655737a5d9bf4c5ed\20ed0b0a4c6365776999cb73bd09d202be8d77a9 [882] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\clientdata\352340fc1280163e9adf24c655737a5d9bf4c5ed\52eb5aa338177eb25ec4efba9e7030a7f362fed4 [291] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\clientdata\352340fc1280163e9adf24c655737a5d9bf4c5ed\9f987652719c5b673155eea4c58592b30c686772 [246] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\clientdata\352340fc1280163e9adf24c655737a5d9bf4c5ed\a6977b4a6ef2d7bef16c216c838fb68cf0ca8e72 [266] O61 - LFC: 09/06/2013 - 17:56:02 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\SyncServices\Local\clientdata\352340fc1280163e9adf24c655737a5d9bf4c5ed\ccc3799a754185ab670f4b88ffee44b4a4fa93c4 [231] O61 - LFC: 09/06/2013 - 17:56:10 ---A- C:\Users\Guilhem\AppData\Local\Apple Computer\iTunes\iPodDevices.xml [2120] O61 - LFC: 09/06/2013 - 17:56:34 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\Preferences\com.apple.iTunes.plist [682] O61 - LFC: 09/06/2013 - 17:58:00 ---A- C:\Users\Guilhem\AppData\Local\Apple Computer\iTunes\iTunesPrefs.xml [1440375] O61 - LFC: 09/06/2013 - 17:58:00 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\iTunes\Cookies\Cookies.binarycookies [2691] O61 - LFC: 09/06/2013 - 17:58:00 ---A- C:\Users\Guilhem\AppData\Roaming\Apple Computer\iTunes\iTunesPrefs.xml [575101] O61 - LFC: 09/06/2013 - 18:39:25 ---A- C:\Users\Guilhem\AppData\Roaming\Dropbox\shellext\l\51b4939d [156] ~ 11 Fichiers temporaires (Temporary files) ~ 1 Fichiers cookies (Cookies files) ~ Files: 85 Scanned in 06mn 57s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - 20/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 03/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASMMAP64) .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64 O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\atapi.sys (atapi) .(.Microsoft Corporation - ATAPI IDE Miniport Driver.) - LEGACY_ATAPI O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep) .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP O64 - Services: CurCS - 05/07/2012 - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\cmdguard.sys (cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\cmdhlp.sys (cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\cng.sys (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE O64 - Services: CurCS - 10/04/2013 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\exfat.sys (exfat) .(.Microsoft Corporation - Microsoft Extended FAT File System.) - LEGACY_EXFAT O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat) .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - 24/01/2013 - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL O64 - Services: CurCS - 30/08/2011 - C:\Windows\system32\drivers\hcmon.sys (hcmon) .(.VMware, Inc. - VMware USB monitor.) - LEGACY_HCMON O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY O64 - Services: CurCS - 16/05/2010 - C:\Windows\System32\DRIVERS\inspect.sys (inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\ipnat.sys (IPNAT) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - 24/08/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR O64 - Services: CurCS - 20/01/2013 - C:\Windows\System32\DRIVERS\MpFilter.sys (MpFilter) .(.Microsoft Corporation - Microsoft antimalware file system filter dr.) - LEGACY_MPFILTER O64 - Services: CurCS - 09/06/2013 - C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{41BF9C27-979B-4721-A75D-E48F363401EA}\MpKsld99bbf2e.sys (MpKsld99bbf2e) .(.Microsoft Corporation - KSLDriver.) - LEGACY_MPKSLD99BBF2E O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10 O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20 O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\msahci.sys (msahci) .(.Microsoft Corporation - MS AHCI 1.0 Standard Driver.) - LEGACY_MSAHCI O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\nwifi.sys (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\ndisuio.sys (Ndisuio) .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - 20/01/2013 - C:\Windows\System32\DRIVERS\NisDrvWFP.sys (NisDrv) .(.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) - LEGACY_NISDRV O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pciide.sys (pciide) .(.Microsoft Corporation - Generic PCI IDE Bus Driver.) - LEGACY_PCIIDE O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - 11/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 30/12/2012 - C:\Windows\Syswow64\speedfan.sys (speedfan) .(.Almico Software - SpeedFan x64 Driver.) - LEGACY_SPEEDFAN O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr) .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR O64 - Services: CurCS - 17/09/2012 - C:\Windows\system32\Drivers\sptd.sys (sptd) .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2 O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - 07/08/2009 - Pas de propriétaire (TurboB) .(...) - LEGACY_TURBOB O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - 01/03/2013 - C:\Windows\System32\DRIVERS\vmnetbridge.sys (VMnetBridge) .(.VMware, Inc. - VMware bridge driver (64-bit).) - LEGACY_VMNETBRIDGE O64 - Services: CurCS - 01/03/2013 - C:\Windows\system32\drivers\vmnetuserif.sys (VMnetuserif) .(.VMware, Inc. - VMware network application interface driver.) - LEGACY_VMNETUSERIF O64 - Services: CurCS - 01/03/2013 - C:\Windows\system32\drivers\vmx86.sys (vmx86) .(.VMware, Inc. - VMware kernel driver.) - LEGACY_VMX86 O64 - Services: CurCS - 20/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX O64 - Services: CurCS - 20/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - 08/07/2011 - C:\Windows\Syswow64\drivers\vstor2-mntapi10-shared.sys (vstor2-mntapi10-shared) .(.VMware, Inc. - VMware Virtual Storage Volume Driver.) - LEGACY_VSTOR2-MNTAPI10-SHARED O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\vwififlt.sys (vwififlt) .(.Microsoft Corporation - Virtual WiFi Filter Driver.) - LEGACY_VWIFIFLT O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6 O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000 O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF O64 - Services: CurCS - 24/05/2008 - C:\Windows\System32\DRIVERS\wimfltr.sys (WimFltr) .(.Microsoft Corporation - Windows Image File Mini-Filter Driver.) - LEGACY_WIMFLTR O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\ws2ifsl.sys (ws2ifsl) .(.Microsoft Corporation - Couche IFS Winsock2.) - LEGACY_WS2IFSL O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF O64 - Services: CurCS - 02/09/2009 - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl ({B154377D-700F-42cc-9474-23858FBDF4BD}) .(.CyberLink Corp. - Pas de description.) - LEGACY_{B154377D-700F-42CC-9474-23858FBDF4BD} ~ Legacy: 92 Scanned in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ FASS Keys: 19 Scanned in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: prefs.js [Guilhem - tbrtjdal.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search"); O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Goo) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {75B18FEC-49C4-45B8-8E90-BECD10B9D379} [DefaultScope] - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.1FE339E72FE03A27DD9D5A9A357CFE7D] [SPRF][24/12/2009] (...) -- C:\ProgramData\FullRemove.exe [131368] [MD5.7E7EB7AFF595774E5E500B34058CC1A7] [SPRF][08/06/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\sfamcc00001.dll [192512] [MD5.51151D3AD8DA0DFA0E7A681AA2FF8870] [SPRF][08/06/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\sfareca00001.dll [158720] [MD5.F815231F1B538088B2CA20121AD82E9E] [SPRF][22/05/2013] (...) -- C:\Users\Guilhem\AppData\Local\Temp\utt730E.tmp.bat [103] [MD5.A6F37EA54559A524D570A4AABBADA1C4] [SPRF][29/05/2009] (.Arcus Technology - Arcus HID Host Dynamic Link Library.) -- C:\Program Files (x86)\HidApiDll.dll [11776] [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [172032] ~ Files: Scanned in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe O87 - FAEL: "WMP-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMP-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d’assistance à distance Windows.) -- C:\Windows\system32\raserver.exe O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance à distance Windows.) -- C:\Windows\system32\msra.exe O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.) O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{C2F5DBD7-1732-49FC-B3E7-2BE46D38889D}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe O87 - FAEL: "{10C229B5-8DF0-4FEE-8779-A8219363B88F}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{8344B3FF-0E60-414C-9511-0BC67F771826}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{F3ECD7FA-1906-40DD-B79B-1BD6327359DF}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{FFA4A438-5AFE-42A6-B72D-BF63306D63C9}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{8F6B0833-AA63-4E99-B3C2-9D0BE4D7CD36}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{573A4D90-6DFB-4AE2-9BBD-0352806958D5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{9E21EB4A-AC06-4F4F-A62C-9A38E35E28E5}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{5BF99E2E-1419-45FD-B59F-844C4D6A0511}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{BEEA918E-407D-4F88-9E7D-21CDFF8A6792}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{CB2176B7-19B9-4A89-ACDA-FE1D1FEB8617}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{4DCA2F70-4928-43EA-AC3A-9050BD08E67F}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{F74EA1DB-3E18-43D4-B07A-AB1BE7564007}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{787F853A-DA2D-42FC-BF44-9E2480FAE85B}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{63FDDE1F-3D44-45AD-8CC1-C59BF5F4ACDA}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O87 - FAEL: "{520FC1EF-0567-4AE8-9113-FA571BC8BF8D}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{21DF1DDD-A0D3-460D-8163-72D5A0170905}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{5CC20249-D905-4AB6-8341-6EBCABD7FCBB}" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{7FEA604C-3C19-4B82-A517-9A2DAB065FEE}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{E60C4A0B-D3AC-43C5-82FF-562A883D1EFD}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{93BF5CA0-D3EC-4057-906E-C188B3B96591}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{BD3CD3E7-D651-439B-864E-10A9A0B1AF90}" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{FE9DC034-AF8D-4A10-B5D7-CB8CBE694AE5}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "{1205D9E3-8564-4C44-8F6B-58AD32E2BF1E}" | In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe O87 - FAEL: "{BC467201-0EF0-4A87-8454-D227102F535E}" | In - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe O87 - FAEL: "{4BB9ADE0-02BB-45FD-901A-FB73016DE15C}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "{87D75AB2-866B-4866-9C10-EE7DA746E12A}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{84DF3144-B4B0-429C-991A-1E92F65900E3}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\outlook.exe O87 - FAEL: "{E5663BF2-DF53-4910-AD07-3513FC14D551}" | In - Private - P6 - TRUE | .(.Dassault Systèmes SolidWorks Corp. - DTSCoordinator.) -- D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe O87 - FAEL: "{902F3D70-E7D2-4A37-A953-F122164EA64B}" | In - Private - P17 - TRUE | .(.Dassault Systèmes SolidWorks Corp. - DTSCoordinator.) -- D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe O87 - FAEL: "{E7650142-4E0C-4B83-BEDD-C75543DDA596}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{1EC71A2E-6A5B-454A-9EC4-2A69F621FAD9}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{A0A5BEEC-C397-49C1-AF93-005B842C6B17}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{1B71DF06-CF1E-4ABB-8A06-0EAD09975211}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{175EC3FB-4268-43B3-83C8-08DD7E8DC54E}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema Main Program.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe O87 - FAEL: "{FD6723E4-5BA1-403B-828C-9225EC27B63A}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD 9.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.exe O87 - FAEL: "{88CE7A10-1AF9-44CE-BF78-B3DC5323454A}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O87 - FAEL: "{9D482126-2B49-42A7-A85E-ADD7029D6FDB}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\System32\svchost.exe O87 - FAEL: "{B43183CD-8E74-4100-9551-BDFEB433F2DC}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Communications Platform.) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe O87 - FAEL: "{9A8897B6-BAD3-493B-99D9-8F3FA717D4FC}" |In - Public - P6 - TRUE | .(...) -- D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) O87 - FAEL: "{4F9649DA-A3B1-4104-97FD-C92ADD5C01D0}" |In - Public - P17 - TRUE | .(...) -- D:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (.not file.) O87 - FAEL: "{EFB6AB4C-78C3-4A84-B97F-906F42C96B23}" | In - Public - P6 - TRUE | .(.Codemasters Software Company Limited - DiRT3 Executable.) -- D:\Jeux\Dirt 3\dirt3_game.exe O87 - FAEL: "{C7859AE4-59E4-49B7-A42F-E45780EF905C}" | In - Public - P17 - TRUE | .(.Codemasters Software Company Limited - DiRT3 Executable.) -- D:\Jeux\Dirt 3\dirt3_game.exe O87 - FAEL: "{B3D1575D-100D-41ED-BAF3-A5EFD83CCF02}" | In - Private - P6 - TRUE | .(.Google - Hangouts Plugin.) -- C:\Users\Guilhem\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe O87 - FAEL: "{D0E87022-5BF8-433C-9CCE-4F3DA500BB18}" | In - Private - P17 - TRUE | .(.Google - Hangouts Plugin.) -- C:\Users\Guilhem\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe O87 - FAEL: "{36FD7B61-FACC-4260-8A7B-2C1D71A02AB4}" | In - Private - P6 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- D:\Jeux\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe O87 - FAEL: "{BCE15BDC-0C8A-4404-A338-62D34E9D0A84}" | In - Private - P17 - TRUE | .(.Sony DADC Austria AG - SecuROM Launcher.) -- D:\Jeux\GTA IV\Grand Theft Auto IV\LaunchGTAIV.exe O87 - FAEL: "{329A1A6E-BD67-447B-BD8A-BB8DDF28F4EB}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe O87 - FAEL: "{53705A0D-4120-4C46-9604-D3C875CBF50F}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe O87 - FAEL: "{2F7486D0-A29C-4638-9581-423D45E6F6CA}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{8E3F7BB4-3B26-47F3-A196-B1C9BC0CFF35}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{30B714BD-82FA-4590-B633-899C05CF031D}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{CE751D4D-47D9-4F8B-859E-8CAB65B2BB58}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe O87 - FAEL: "{8FBB7283-73B6-475C-8A30-33521A0A6858}" | In - Private - P17 - TRUE | .(...) -- c:\Program Files (x86)\Media center Bbox\media center\external\MediaServerTray.exe O87 - FAEL: "{A9EA4152-0023-4896-96B3-395CFC334490}" | In - None - P17 - TRUE | .(...) -- C:\ProgramData\media center Bouygues Telecom\MediaServer.exe O87 - FAEL: "{661C8D93-B0C9-4C1B-96EB-2700810036CB}" | In - Domain - P17 - TRUE | .(.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe O87 - FAEL: "{E87110CD-FF29-4E57-8368-9EF245656EA0}" | In - Private - P17 - TRUE | .(.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe O87 - FAEL: "{BF3EE14F-46DA-472A-BDAA-FEAB52F220CC}" | In - Domain - P17 - TRUE | .(...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe O87 - FAEL: "{140B827D-520B-4B35-95DC-E6C264D16C38}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe O87 - FAEL: "RemoteDesktop-UserMode-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe O87 - FAEL: "TCP Query User{DE08D2CE-A7C6-4804-9169-EEE991B46E8B}C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe O87 - FAEL: "UDP Query User{CD672A99-2C1B-4B14-9693-3299D743191D}C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\media center bbox\media center\external\mediaservertray.exe O87 - FAEL: "TCP Query User{29FD5D15-43E5-46C3-A39D-DEC03E4C3FB0}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{FFDCA781-6364-406D-8A57-21256560144C}C:\program files (x86)\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe O87 - FAEL: "{03324E2E-94A7-4780-813A-DBC8C6691A24}" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe O87 - FAEL: "{B3551EA9-271F-463F-9F5D-C60296E14502}" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\program files (x86)\epson software\event manager\eeventmanager.exe O87 - FAEL: "TCP Query User{808A82C6-43CD-4243-BF2C-70810C47E47F}C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe" | In - Private - P6 - TRUE | .(.SHAPE Services.) -- C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe O87 - FAEL: "UDP Query User{11F63DE3-C5BB-456A-A173-E593B085C9E2}C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe" | In - Private - P17 - TRUE | .(.SHAPE Services.) -- C:\program files (x86)\mobiola webcamera for iphone\webcamforiphone.exe O87 - FAEL: "{6094980D-5D5C-41C7-922A-D5B36F88ED05}" | In - Private - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "{35EE75CA-59AA-476A-A6C2-4F0C33B26C5E}" | In - Private - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "{C649961C-EF3B-4303-9F5E-81DAFE411ED0}" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "{429EEA5E-685E-4475-8882-834717DD925A}" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Guilhem\AppData\Roaming\Dropbox\bin\Dropbox.exe O87 - FAEL: "{0393CAC1-6077-405A-8326-37964E7E042F}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe ~ Firewall: 240 Scanned in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : v2.12437 - (07/06/2013) Clés trouvées (Keys found) : 16 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 1 [HKLM\Software\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}] =>Adware.Yontoo [HKLM\Software\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}] =>Adware.Yontoo [HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}] =>Adware.Yontoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Adware.Yontoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] =>Adware.Yontoo [HKLM\Software\Tarma Installer] =>Toolbar.Tarma [HKCU\Software\InstallCore] =>Adware.InstallCore C:\ProgramData\Partner =>Spyware.Partner C:\Users\Guilhem\AppData\Roaming\Mozilla\Firefox\Profiles\tbrtjdal.default\SearchPlugins\web-search.xml =>Adware.DoubleD ~ Additionnel Scan: 503890 Items scanned in 00mn 24s ---\\ Product Upgrade Codes (O90) O90 - PUC: "000021094A0090400000000000F01FEC" . (.Microsoft Office 2003 Web Components.) -- C:\Windows\Installer\{90120000-00A4-0409-0000-0000000FF1CE}\misc.exe,6 O90 - PUC: "00004159A700C0400000000000F01FEC" . (.Microsoft Office Outlook Connector.) -- C:\Windows\Installer\{95140000-007A-040C-0000-0000000FF1CE}\OLCIcon.exe O90 - PUC: "045F27F206F16624596059B2126D46D0" . (.Apple Mobile Device Support.) -- C:\Windows\Installer\{2F72F540-1F60-4266-9506-952B21D6640D}\Installer.ico O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "09FA5C348550E095033AA7F8EE4A4BB5" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{43C5AF90-0558-590E-30A3-7A8FEEA4B45B}\ARPPRODUCTICON.exe O90 - PUC: "0D00D7E8E552480F823A04D0DCE58F7A" . (.ccc-utility64.) -- C:\Windows\Installer\{8E7D00D0-255E-F084-28A3-400DCD5EF8A7}\ARPPRODUCTICON.exe O90 - PUC: "0E89635AE6A3C804AAC7D7BF54381C49" . (.MAGIX Vidéo deluxe 17 Premium (effets de titres).) -- C:\Windows\Installer\{A53698E0-3A6E-408C-AA7C-7DFB4583C194}\ProgramIcon.exe O90 - PUC: "0ED9D238CFA898648991D4BBEDDBE3F4" . (.Microsoft Games for Windows - LIVE Redistributable.) -- C:\Windows\Installer\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}\GameForWindowsLiveRedist.exe O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe O90 - PUC: "1501F27EE78B4FE4EAF9F8DD22C94C83" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E72F1051-B87E-4EF4-AE9F-8FDD229CC438}\ARPPRODUCTICON.exe O90 - PUC: "16525446F96163A42AFF5B1E81CE565F" . (.ASUS SmartLogon.) -- C:\Windows\Installer\{64452561-169F-4A36-A2FF-B5E118EC65F5}\_4ae13d6c.exe O90 - PUC: "19DA96544F74E9D4F89C17E73CD2A71E" . (.Microsoft_VC80_CRT_x86_x64.) -- C:\Windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe O90 - PUC: "1A3EFE19E58566F45B6F1F815FC6C474" . (.ASUS Power4Gear Hybrid.) -- C:\Windows\Installer\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}\_6FEFF9B68218417F98F549.exe O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "20B58560D02F2BA4A94668FEA20E8F0F" . (.ASUS AI Recovery.) -- C:\Windows\Installer\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}\_6FEFF9B68218417F98F549.exe O90 - PUC: "20B91A1DE71869244AB57058F37DD475" . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe O90 - PUC: "21432545D159E7441998FE01FDAC796F" . (.Arcus Technology, Inc. Performax USB 1.30.2.) -- C:\Windows\Installer\{54523412-951D-447E-9189-EF10DFCA97F6}\ARPPRODUCTICON.exe O90 - PUC: "21F1DBD139DE0C947ACC65BCED841885" . (.ASUS LifeFrame3.) -- C:\Windows\Installer\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}\_6FEFF9B68218417F98F549.exe O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe O90 - PUC: "277C90D53BCEB244C96C4B43C187DF2C" . (.Apple Application Support.) -- C:\Windows\Installer\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}\WinInstall.ico O90 - PUC: "2A7527EE2A93F2D4D9CA9F2FB5A81E8D" . (.Skype™ 5.10.) -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe O90 - PUC: "2B0163E6D0340BE4183EB2758E9BEDD8" . (.Bonjour.) -- C:\Windows\Installer\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}\Bonjour.ico O90 - PUC: "3030C407C02DFA54DBB255E6FA13EB90" . (.iCloud.) -- C:\Windows\Installer\{704C0303-D20C-45AF-BD2B-556EAF31BE09}\ARP.ico O90 - PUC: "30F0FF67707B23345B1D5AC6383015E4" . (.iTunes.) -- C:\Windows\Installer\{76FF0F03-B707-4332-B5D1-A56C8303514E}\Installer.ico O90 - PUC: "38E1FB04BE028D11795C00905C206085" . (.Power2Go.) -- C:\Windows\Installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}\ARPPRODUCTICON.exe O90 - PUC: "3F7A4F31CBAE1624FAB6317177F77055" . (.Fast Boot.) -- C:\Windows\Installer\{13F4A7F3-EABC-4261-AF6B-1317777F0755}\_6FEFF9B68218417F98F549.exe O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico O90 - PUC: "46FE56B5AFD1A414C849B77B6251E812" . (.ControlDeck.) -- C:\Windows\Installer\{5B65EF64-1DFA-414A-8C94-7BB726158E21}\_6FEFF9B68218417F98F549.exe O90 - PUC: "4A94D9E94FD183147BBDD5788A3980E8" . (.WIDCOMM Bluetooth Software.) -- C:\Windows\Installer\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}\ARPPRODUCTICON.exe O90 - PUC: "4E9B274AFFA0B7F42BD56FF4E829A8BA" . (.Microsoft_VC90_MFC_x86_x64.) -- C:\Windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe O90 - PUC: "5426BE430D8CA8D48B8DEEFB7F9A4158" . (.Firebird SQL Server - MAGIX Edition.) -- C:\Windows\Installer\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}\ProgramIcon.exe O90 - PUC: "5509804B864D4A546AABA531D87D51CF" . (.Bing Bar.) -- C:\Windows\Installer\{B4089055-D468-45A4-A6BA-5A138DD715FC}\icon_installer_ico O90 - PUC: "554590D7179DC4D4E9DFA96F6A85F4A3" . (.Bing Bureau.) -- C:\Windows\Installer\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}\icon.ico O90 - PUC: "5DAB1C8C6E456414DA70A3A83D56963C" . (.Microsoft_VC80_MFC_x86_x64.) -- C:\Windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe O90 - PUC: "5E49D6A11D7341F409B8167B0E18502B" . (.Media center Bbox.) -- c:\Windows\Installer\{1A6D94E5-37D1-4F14-908B-61B7E08105B2}\btel_w.exe O90 - PUC: "5E536EA7C2399A34E97E4099EBED2B66" . (.MAGIX Vidéo deluxe 17 Premium (Effets de transition).) -- C:\Windows\Installer\{7AE635E5-932C-43A9-9EE7-0499BEDEB266}\ProgramIcon.exe O90 - PUC: "633B7763D6F9FD5459340C943EE55E09" . (.MAGIX Screenshare.) -- C:\Windows\Installer\{3677B336-9F6D-45DF-9543-C049E35EE590}\ProgramIcon.exe O90 - PUC: "654485612DA94AF38C5B2BEED258E6C6" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{16584456-9AD2-3FA4-C8B5-B2EE2D856E6C}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.7) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico O90 - PUC: "7692FC6BE18C0C0489510C7547EF1F02" . (.Skype Click to Call.) -- C:\Windows\Installer\{B6CF2967-C81E-40C0-9815-C05774FEF120}\IconUninstallIco O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe O90 - PUC: "7CEBB04F4A2C00A4B942A750A5C22526" . (.Microsoft Office Live Add-in 1.5.) -- C:\Windows\Installer\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}\ProductIcon O90 - PUC: "811CF9E1D156439479EB5EC3EAC5D754" . (.Microsoft_VC80_MFCLOC_x86_x64.) -- C:\Windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe O90 - PUC: "81FC008F0746909D4B06372F4F01034B" . (.AMD Accelerated Video Transcoding.) -- C:\Windows\Installer\{F800CF18-6470-D909-B460-73F2F41030B4}\ARPPRODUCTICON.exe O90 - PUC: "849FDF02DE8C34545A937F4FEA5FFA2A" . (.Wireless Console 3.) -- C:\Windows\Installer\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}\_294823.exe O90 - PUC: "8627D45F867377F41BCA90C4CA447E76" . (.COSMOSM 2010 x64 Edition (2009/330).) -- C:\Windows\Installer\{F54D7268-3768-4F77-B1AC-094CAC44E767}\ARPPRODUCTICON.exe O90 - PUC: "8F7463F0D15ECCF48826A9D8C0A5FC52" . (.Microsoft_VC80_ATL_x86.) -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe O90 - PUC: "97E44AF0D7DCD8E42AEE62EF505F906B" . (.OpenOffice.org 3.1.) -- C:\Windows\Installer\{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}\soffice.exe O90 - PUC: "9CA6158A1FAA9F747966302E4DDCCB8F" . (.PowerDVD.) -- C:\Windows\Installer\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\ARPPRODUCTICON.exe O90 - PUC: "9F15F297002CD544CAA7512C0F287A51" . (.SolidWorks Flow Simulation 2010 SP02.1 x64 Edition.) -- C:\Windows\Installer\{792F51F9-C200-445D-AC7A-15C2F082A715}\ARPPRODUCTICON.exe O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\Windows\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico O90 - PUC: "9F6C4F93A816B5E4F82BB66D1671E423" . (.Intel(R) Turbo Boost Technology Monitor.) -- C:\Windows\Installer\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}\ARPPRODUCTICON.exe O90 - PUC: "A02DCD65855E6934FA95411DA57A73BB" . (.DWGeditor.) -- C:\Windows\Installer\{56DCD20A-E558-4396-AF59-14D15AA737BB}\ARPPRODUCTICON.exe O90 - PUC: "A57F49D06AE015943BFA1B54AFE9506C" . (.VMware Workstation.) -- C:\Windows\Installer\{0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}\ARP.ico1 O90 - PUC: "B27818B2450AAD84EBB3AFC561C403A3" . (.ASUS FancyStart.) -- C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_6FEFF9B68218417F98F549.exe O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe O90 - PUC: "B6AAD27AF18A5EE41B2B7C26808877B6" . (.MAGIX Speed burnR (MSI).) -- C:\Windows\Installer\{A72DAA6B-A81F-4EE5-B1B2-C7620888776B}\ProgramIcon.exe O90 - PUC: "B6F5FB4F596F2674EA2B0D594A3CD498" . (.Alcor Micro USB Card Reader.) -- C:\Windows\Installer\{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}\ARPPRODUCTICON.exe O90 - PUC: "B850D529A465A3444B2BE7096C34E255" . (.Microsoft_VC80_ATL_x86_x64.) -- C:\Windows\Installer\{925D058B-564A-443A-B4B2-7E90C6432E55}\ARPPRODUCTICON.exe O90 - PUC: "C3130D7651F4D734A9D21C6504882AA6" . (.Windows Live Sync.) -- C:\Windows\Installer\{67D0313C-4F15-437D-9A2D-C1564088A26A}\FolderShare48x48.ico O90 - PUC: "C3DB83FEEAB91CA49931D10FA0EFB24F" . (.Arcus Drivers and Tools 1.08.) -- C:\Windows\Installer\{EF38BD3C-9BAE-4AC1-9913-1DF00AFE2BF4}\ARPPRODUCTICON.exe O90 - PUC: "C7030BC4E565144468EBD02F4EBF28C8" . (.Microsoft Games for Windows Marketplace.) -- C:\Windows\Installer\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}\GameForWindowsLiveDash.exe O90 - PUC: "C7265A5B37102BD4DA8A47409773F076" . (.Express Gate.) -- C:\Windows\Installer\{B5A5627C-0173-4DB2-ADA8-740479370F67}\ARPPRODUCTICON.exe O90 - PUC: "C7937558D24AF684793B2ABC2C735239" . (.Microsoft_VC90_ATL_x86_x64.) -- C:\Windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe O90 - PUC: "C82712DB5C2296D2F2254C34E7F80FE2" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{BD21728C-22C5-2D69-2F52-C4437E8FF02E}\ARPPRODUCTICON.exe O90 - PUC: "C971C95CD8669A946BAE1012CCCF2134" . (.LabelPrint.) -- C:\Windows\Installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\ARPPRODUCTICON.exe O90 - PUC: "CC41D8D213B59B4478CFEB3C8DFADFD1" . (.SolidWorks Explorer 2010 SP02.1 x64 Edition.) -- C:\Windows\Installer\{2D8D14CC-5B31-44B9-87FC-BEC3D8AFFD1D}\ARPPRODUCTICON.exe O90 - PUC: "D0AC3A29DC55D5C4AB59C562002CF062" . (.Microsoft_VC90_CRT_x86_x64.) -- C:\Windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "DAD2D63778D3AAC46864382D83DA860E" . (.PhotoView 360.) -- C:\Windows\Installer\{736D2DAD-3D87-4CAA-8646-83D238AD68E0}\ARPPRODUCTICON.exe O90 - PUC: "DF76DC54812370240A2ACB144215983E" . (.Microsoft Xbox 360 Accessories 1.2.) -- C:\Windows\Installer\{45CD67FD-3218-4207-A0A2-BC41245189E3}\ARPIcon O90 - PUC: "E161687AC959B4B4AAD647421CC3CC2F" . (.SolidWorks eDrawings 2010.) -- C:\Windows\Installer\{A786161E-959C-4B4B-AA6D-7424C13CCCF2}\eModelViewer1.exe O90 - PUC: "E19212F84440D1B49B9F34077AE343D6" . (.WinFlash.) -- C:\Windows\Installer\{8F21291E-0444-4B1D-B9F9-4370A73E346D}\MyIcon O90 - PUC: "E339C5BAD7C503D43B41C9384AB949EB" . (.ATK Package.) -- C:\Windows\Installer\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}\_294823.exe O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe O90 - PUC: "E998A73F54715F2556F8A9D44A4DB67B" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{F37A899E-1745-52F5-658F-9A4DA4D46BB7}\ARPPRODUCTICON.exe O90 - PUC: "EE2D4441DA7C8A4448F462434B39351D" . (.Logitech Gaming Software 5.10.) -- C:\Windows\Installer\{1444D2EE-C7AD-44A8-844F-2634B49353D1}\ARPPRODUCTICON.exe O90 - PUC: "F0D6147B2828A864C5D3AC75316B4F0C" . (.Catalyst Control Center.) -- C:\Windows\Installer\{B7416D0F-8282-468A-5C3D-CA5713B6F4C0}\ARPPRODUCTICON.exe O90 - PUC: "F5A3719E6A22251448E85458D19B1926" . (.SolidWorks 2010 x64 Edition SP02.1.) -- C:\Windows\Installer\{E9173A5F-22A6-4152-848E-45851DB99162}\i386_SldWorks.exe ~ Update Products: 199 Scanned in 00mn 00s ---\\ MyComputer Name Space (O92) O92 - MNS: ASUS WebStorage Drive - {d6044399-0b9e-4084-a9ac-c4b7c7800fcf} O92 - MNS: Flux de photos - {F0D63F85-37EC-4097-B30D-61B4A8917118} ~ MNS: 2 Scanned in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 124832 | (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe SR - | Auto 10/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 17/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 08/12/2009 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe SR - | Auto 19/12/2012 240640 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 16/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe SR - | Auto 10/11/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe SS - | Auto 21/10/2011 196176 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe SR - | Auto 13/10/2011 249648 | (BBUpdate) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe SR - | Auto 31/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 03/08/2009 864032 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe SR - | Auto 1593128 | (BytelMediaServer) . (...) - C:\ProgramData\media center Bouygues Telecom\MediaServer.exe SS - | Auto 18/11/2010 240112 | (CLKMSVC10_9EC60124) . (.CyberLink.) - C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe SR - | Auto 16/05/2010 1079048 | (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe SS - | Demand 20/01/2010 87336 | (CoordinatorServiceHost) . (.Dassault Systèmes SolidWorks Corp..) - D:\Logiciels\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe SS - | Demand 23/04/2010 79360 | (Creative ALchemy AL6 Licensing Service) . (.Creative Labs.) - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe SS - | Demand 23/04/2010 79360 | (Creative Audio Engine Licensing Service) . (.Creative Labs.) - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe SR - | Auto 18/12/2007 163840 | (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe SR - | Auto 12/01/2007 126464 | (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe SR - | Auto 27/08/2009 1253376 | (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe SS - | Demand 07/08/2008 3276800 | (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe SS - | Demand 15/04/2012 867080 | (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Demand 15/04/2012 1315592 | (FLEXnet Licensing Service 64) . (.Acresso Software Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe SS - | Demand 10/05/2011 136120 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SR - | Demand 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 01/10/2009 262144 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 125088 | (Mobiola Wave Service) . (...) - C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe SS - | Demand 24/05/2013 117144 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SS - | Demand 23/11/2009 93992 | (Remote Solver for Flow Simulation 2010) . (.Mentor Graphics Corporation.) - D:\Logiciels\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe SR - | Auto 13/08/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe SS - | Auto 13/07/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 15/04/2012 79360 | (SolidWorks Licensing Service) . (.SolidWorks.) - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe SS - | Demand 16/07/2009 316664 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe SS - | Demand 07/08/2009 118672 | (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe SR - | Auto 01/10/2009 2314240 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 01/03/2013 79360 | (VMAuthdService) . (.VMware, Inc..) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe SR - | Auto ??\??\???? 0 | (VMnetDHCP) . (.VMware, Inc..) - C:\Windows\system32\vmnetdhcp.exe SR - | Auto 30/08/2011 846448 | (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe SR - | Auto ??\??\???? 0 | (VMware NAT Service) . (.VMware, Inc..) - C:\Windows\system32\vmnat.exe SR - | Auto 11840512 | (VMwareHostd) . (...) - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 02/09/2009 146928 | ({B154377D-700F-42cc-9474-23858FBDF4BD}) . (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl ~ Services: Scanned in 00mn 01s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Guilhem at 09/06/2013 21:39:08 device: opened successfully user: error reading MBR Disk trace: error: Read Descripteur non valide kernel: error reading MBR ~ MBR: 9 Scanned in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Guilhem at 09/06/2013 21:39:10 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Liste des émulateurs de CD/DVD (Hook du MBR) O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite ~ Emulateurs: Scanned in 00mn 04s End of the scan (2160 lines in 13mn 29s)(0)