Rapport de ZHPDiag v1.3.5.60 par Nicolas Coolman, Update du 12/02/2013
Run by M Bertin at 12/02/2013 19:48:45
State : Problème connexion internet
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
GCIE: Google Chrome v25.0.1364.68

---\\ Windows Product Information
~ Langage: Français
Windows XP Home Edition Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ System Information
~ Processor: x86 Family 6 Model 8 Stepping 1, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1791 MB (71% free)
System Restore: Activé (Enable)
System drive C: has 77 GB (69%) free of 112 GB

---\\ Logged in mode
~ Computer Name: M-FYZ2IATG7EJMG
~ User Name: M Bertin
~ All Users Names: SUPPORT_388945a0, monique, M Bertin, HelpAssistant, ASPNET, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\M Bertin\Application Data\
~ %Desktop% : C:\Documents and Settings\M Bertin\Bureau\
~ %Favorites% : C:\Documents and Settings\M Bertin\Favoris\
~ %LocalAppData% : C:\Documents and Settings\M Bertin\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\M Bertin\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 77 Go of 112 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.E9C2CF196F769DE332181121B37518E7] - (.Microsoft Corporation - Internet Extensions for Win32.) (.01/11/2012 - 13:17:51.) -- C:\WINDOWS\system32\wininet.dll [916992]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:09:42.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 17:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 4/39
~ Mes musiques (My Musics) : 8/164
~ Mes Videos (My Videos) : 2/3
~ Mes Favoris (My Favorites) : 3/114
~ Mes Documents (My Documents) : 6/1758
~ Mon Bureau (My Desktop) : 0/32
~ Menu demarrer (Programs) : 0/89
~ Scan Hidden Files in 00mn 00s



---\\ Processus lancés
[MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [44808] [PID.1496]
[MD5.2C41AE09BB51EA074069135F183DAA9C] - (.Acronis - Acronis Scheduler 2.) -- C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe   [660576] [PID.676]
[MD5.9BDBDA21D3BA8E374FD06A405BE10215] - (.Macrovision - Macrovision RTS Service.) -- C:\WINDOWS\System32\drivers\CDAC11BA.exe   [54784] [PID.1660]
[MD5.AB8134127F786C9603817B5318DCEEAA] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe   [73728] [PID.700]
[MD5.2D091A99624FB9E7EEF0A86D872EC0C3] - (.HP - PML Driver.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.exe   [73728] [PID.428]
[MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe   [4297136] [PID.4028]
[MD5.230AE1C6BCFDA952BEA0B789E8EC09E1] - (.Acronis - Monitor for Acronis True Image Backup Archi.) -- C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe   [961432] [PID.1672]
[MD5.D2659746CB5B1B4F2CED60F256DA1847] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe   [1274320] [PID.4072]
[MD5.8906FFADDF99ACCB5C751E75E879481F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [5676032] [PID.1052]
~ Scan Processes Running in 00mn 00s



---\\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1)
B0 - SPO: operaprefs.ini [M Bertin] Home URL=http://www.sfr.fr/fr/home-adsl.jsp?sfrintid
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin2.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin3.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin4.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin5.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin6.dll
P1 - OPN:Opera Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Opera\Program\Plugins\npqtplugin7.dll
~ Scan Opera Browser in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Chrome Web Store v.0.1 ()
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.1 ()
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 ()
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\M Bertin\Application Data\Mozilla\Firefox\Profiles\34x4vobb.default\prefs.js
C:\Documents and Settings\M Bertin\Application Data\Mozilla\Firefox\Profiles\kbgm0f9u.michel\prefs.js
M3 - MFPP: Plugins - [M Bertin] -- C:\Documents and Settings\M Bertin\Application Data\Mozilla\Firefox\Profiles\34x4vobb.default\searchplugins\wot-safe-search.xml
M0 - MFSP: prefs.js [M Bertin - 34x4vobb.default] http://www.sfr.fr
M0 - MFSP: prefs.js [M Bertin - kbgm0f9u.michel] http://www.sfr.fr
M2 - MFEP: prefs.js [M Bertin - 34x4vobb.default\personas@christopher.beard] [personas] Personas v1.6.2 (.Chris Beard.)
M2 - MFEP: prefs.js [M Bertin - 34x4vobb.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20120302 (.WOT Services Oy.)
M2 - MFEP: prefs.js [M Bertin - 34x4vobb.default\{ca0849e8-2c76-42ae-9abe-34e14d337acf}] [] BabelFish v20120302 (.NettiCat.)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.6.7.637.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw_1167637.dll
P2 - FPN: [HKLM] [@divx.com/DivX Content Upload Plugin,version=1.0.0] - (...) -- C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (.not file.)
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@pack.google.com/Google Updater;version=14] - (.Google - Google Updater plugin<br><a href="http://pack.google.com/">http://pack.) -- C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.11.2571] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.1739] - (.RealNetworks, Inc. - 6.0.12.1739.) -- C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.3] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [@zylom.com/ZylomGamesPlayer] - (.Zylom - Zylom Plugin.) -- C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.5.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll (.not file.)
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Update\1.3.21.123\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 1



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} Clé orpheline
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKLM\..\Run: [AcronisTimounterMonitor] . (.Acronis - Monitor for Acronis True Image Backup Archi.) -- C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe 
O4 - HKUS\S-1-5-21-2000478354-789336058-839522115-1004\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.)  -- C:\Program Files\Microsoft Works\msworks.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Money.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\Installer\{01A2E33A-8ADA-42D1-9173-8F65149E952F}\MnyIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\XPS Viewer EP.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\XpsRchVw.exe
O4 - Global Startup: C:\Documents And Settings\monique\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\monique\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\monique\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\M Bertin\Menu Démarrer\Programmes\Update Checker.lnk . (.FileHippo.com.)  -- C:\Program Files\FileHippo.com\UpdateChecker.exe
~ Scan Global Startup in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS\system32\nwprovau.dll
~ Scan Winsock in 00mn 00s



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
~ Scan IE Paramètres WEB in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: DirectAnimation Java Classes -  (DirectAnimation Java Classes) - (.not file.) - file:\\C:\WINDOWS\Java\classes\dajava.cab
O16 - DPF: Microsoft XML Parser for Java -  (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} ((no name)) - http://codecs.microsoft.com/codecs/i386/fhg.CAB
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} ((no name)) - http://office.microsoft.com/templates/ieawsdc.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} ((no name)) - http://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} ((no name)) - http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} ((no name)) - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1343120420421
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} ((no name)) - http://office.microsoft.com/officeupdate/content/opuc4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D0E02C7-2EDC-4592-A87F-CF0EF64C341A}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3D0E02C7-2EDC-4592-A87F-CF0EF64C341A}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{3D0E02C7-2EDC-4592-A87F-CF0EF64C341A}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\System32\wiascr.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Service Planificateur2 Acronis (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: C-DillaCdaC11BA (C-DillaCdaC11BA) . (.Macrovision - Macrovision RTS Service.) - C:\WINDOWS\System32\drivers\CDAC11BA.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling  (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.exe
~ Scan Services in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (þÿÿÿHÏ?5­?|) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\avast! Emergency Update.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Google Software Updater.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-789336058-839522115-1004Core.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-789336058-839522115-1004UA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-789336058-839522115-1005Core.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-789336058-839522115-1005UA.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\User_Feed_Synchronization-{8296D739-1046-42C0-B0D6-0B56EBE8D43D}.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Windows Update cleanprefetch.bat.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\System32\msjava.dll
O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\SwDir_1167637.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.5 r502.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_149.ocx
O40 - ASIC: Installed Component - S-1-5-21-2000478354-789336058-839522115-1004 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadécimal CLSID
O40 - ASIC: Installed Component - S-1-5-21-2000478354-789336058-839522115-1004 - >{F10A586D-EBD1-453A-B3E9-E77098D64C1E}S27891 -- Not Hexadécimal CLSID
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (AmdK7) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\amdk7.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (VIAPFD) . (.VIA Technologies. Inc. - VIA PFD driver.) - C:\WINDOWS\system32\Drivers\VIAPFD.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver
O42 - Logiciel: Acronis Drive Monitor - (.Acronis.) [HKLM] -- {706AE61D-40A4-4F50-8359-FE8F6F7FA461}
O42 - Logiciel: Acronis True Image Home - (.Acronis.) [HKLM] -- {37C8899D-FD70-481F-94AA-1F1B08765E22}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.5) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AA1000000001}
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Antidote RX v2 - (.Druide informatique inc..) [HKLM] -- {A474EA56-5DBD-4181-8230-806A4762EA7F}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Ashampoo Burning Studio 2010 Advanced - (.ashampoo GmbH & Co. KG.) [HKLM] -- Ashampoo Burning Studio 2010 Advanced_is1
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {F6B1CD0F-DB2D-4666-A168-C46390AD8C4A}
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: ConvertMovie 4.1 - (.MOVAVI.) [HKLM] -- ConvertMovie 4.1
O42 - Logiciel: CueClub  wfr - (.Boonty.) [HKLM] -- ED05E41D-FD31-44E6-A8D5-3CD292F8E128_is1
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1
O42 - Logiciel: Extension Système de Microsoft Money - (.Microsoft.) [HKLM] -- {02CA7E66-1AD1-4DE9-BA9E-86A0EEB019C7}
O42 - Logiciel: FileHippo.com Update Checker - (.Pas de propriétaire.) [HKLM] -- FileHippo.com
O42 - Logiciel: GTK+ Runtime 2.12.1 rev b (remove only) - (.Pas de propriétaire.) [HKLM] -- GTK 2.0
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: GénéaTique MX - (.CDIP.) [HKLM] -- GénéaTique MX_is1
O42 - Logiciel: Généatique 2006 - (.CDIP.) [HKLM] -- {86D9FA99-F4BF-4D8F-B2CB-8E550C32BCBE}_is1
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {6994491D-D491-48F1-AE1F-E179C1FFFC2F}
O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {15EE79F4-4ED1-4267-9B0F-351009325D7D}
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB971276-v3) - (.Microsoft Corporation.) [HKLM] -- KB971276-v3
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
O42 - Logiciel: K-Lite Mega Codec Pack 2.2.5 - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Luxor - (.Pas de propriétaire.) [HKLM] -- Luxor
O42 - Logiciel: MSP3885-E 56K PCI Modem - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_PCI_VEN_14F1&DEV_2F00&SUBSYS_8D88122D
O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Magic Ball 2 - (.Pas de propriétaire.) [HKLM] -- Magic Ball 2
O42 - Logiciel: Magic Ball 3 - (.Pas de propriétaire.) [HKLM] -- Magic Ball 3
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Media Player Classic fr - (.Pas de propriétaire.) [HKLM] -- Media Player Classic
O42 - Logiciel: Microsoft Carioca - (.Microsoft.) [HKLM] -- {49D70E70-23CB-4BE5-8A67-8770F6B1BB2F}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Data Access Components KB870669 - (.Microsoft Corporation.) [HKLM] -- KB870669
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005
O42 - Logiciel: Microsoft Money - (.Microsoft.) [HKLM] -- {01A2E33A-8ADA-42D1-9173-8F65149E952F}
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: Microsoft Works 7.0 - (.Microsoft Corporation.) [HKLM] -- {64D114CE-4234-45C2-B60A-2B07D5A48F72}
O42 - Logiciel: My Drivers 5.00 - (.Huntersoft.) [HKLM] -- My Drivers_is1
O42 - Logiciel: Need For Speed III - (.Pas de propriétaire.) [HKLM] -- Need For Speed III
O42 - Logiciel: Norton PartitionMagic 8.0 - (.Symantec.) [HKLM] -- InstallShield_{21DBBDD6-93A5-4326-9A04-C9A5C9148502}
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Photo et imagerie HP 1.0 - HP PSC - HP OfficeJet - (.Hewlett-Packard Company.) [HKLM] -- {82DFB852-9594-4668-9C66-28BB6E94BCB2}
O42 - Logiciel: Photo et imagerie HP 1.0 - HP PSC - HP OfficeJet - (.Pas de propriétaire.) [HKLM] -- PSC 2000 Series
O42 - Logiciel: Photo et imagerie HP 1.0 - HP PSC - HP OfficeJet Pilote - (.Hewlett-Packard Company.) [HKLM] -- {ED93995E-8BF2-480F-8EA4-7D29E29A7052}
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre
O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre
O42 - Logiciel: PhotoFiltre Studio X - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre Studio X
O42 - Logiciel: Photorécit 3 pour Windows - (.Microsoft Corporation.) [HKLM] -- {4F41AD68-89F2-4262-A32C-2F70B01FCE9E}
O42 - Logiciel: Photos de Famille 2004 - (.CDIP.) [HKLM] -- {A5CB9A9B-9108-4261-B9DF-1E400EC3947A}_is1
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {0E64B098-8018-4256-BA23-C316A43AD9B0}
O42 - Logiciel: Quicksys RegDefrag 2.9 - (.Pas de propriétaire.) [HKLM] -- {5D26BF7B-BEF6-477D-8FC1-0C1C159B6364}_is1
O42 - Logiciel: Radio Fr Solo 2.1 - (.Pas de propriétaire.) [HKLM] -- Radio_Fr
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
O42 - Logiciel: SafeCast Shared Components - (.Macrovision.) [HKLM] -- CdaC13Ba
O42 - Logiciel: Sandlot Games Client Services - (.Sandlot Games.) [HKLM] -- Sandlot Games Client Services_is1
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Shockwave - (.Pas de propriétaire.) [HKLM] -- Shockwave
O42 - Logiciel: Smart PC Recorder - by freebird - (.Freebird.) [HKLM] -- SmartPCRecorder
O42 - Logiciel: Speccy - (.Piriform.) [HKLM] -- Speccy
O42 - Logiciel: SpeedFan (remove only) - (.Pas de propriétaire.) [HKLM] -- SpeedFan
O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}
O42 - Logiciel: Sqirlz Water Reflections - (.xiberpix.) [HKLM] -- Sqirlz Water Reflections
O42 - Logiciel: Sélecteur d'installation de Microsoft Works Suite 2003 - (.Pas de propriétaire.) [HKLM] -- Works2003Setup
O42 - Logiciel: Update for Windows Internet Explorer 7 (KB928089) - (.Microsoft Corporation.) [HKLM] -- KB928089
O42 - Logiciel: Utilitaire de sauvegarde Windows - (.Microsoft Corporation.) [HKLM] -- {76EFFC7C-17A6-479D-9E47-8E658C1695AE}
O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Windows Genuine Advantage v1.3.0254.0 - (.Microsoft.) [HKLM] -- {63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP
O42 - Logiciel: XPS Essentials Pack - (.Microsoft Corporation.) [HKLM] -- {6A69D94E-C569-4154-9643-72E94D1DDFDA}
O42 - Logiciel: XPS Essentials Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEP
O42 - Logiciel: Zuma Deluxe RA - (.Pas de propriétaire.) [HKLM] -- Zuma Deluxe RA
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: hp psc 2100 series - (.Pas de propriétaire.) [HKLM] -- hp psc 2100 series_Driver
O42 - Logiciel: nLite 1.4.9.1 - (.Dino Nuhagic (nuhi).) [HKLM] -- nLite_is1
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AC3filter]
[HKCU\Software\ASProtect]
[HKCU\Software\AVAST Software]
[HKCU\Software\Acronis]
[HKCU\Software\Adobe]
[HKCU\Software\Alawar]
[HKCU\Software\Anuman Interactive]
[HKCU\Software\AppConf]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Ashampoo]
[HKCU\Software\Astonsoft]
[HKCU\Software\AusLogics]
[HKCU\Software\Big Fish Games]
[HKCU\Software\Boonty]
[HKCU\Software\CDDB]
[HKCU\Software\CDIP]
[HKCU\Software\Chromium]
[HKCU\Software\Classes.crx]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Commercial Research]
[HKCU\Software\CoreAAC]
[HKCU\Software\Cyberlink]
[HKCU\Software\Cycore]
[HKCU\Software\DSP-worx]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\Driver Magician]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Emulators]
[HKCU\Software\EuroSoft Software Development]
[HKCU\Software\FileHippo.com]
[HKCU\Software\Flyonoid]
[HKCU\Software\Fridgesoft]
[HKCU\Software\GNU]
[HKCU\Software\GSpot Appliance Corp]
[HKCU\Software\Gabest]
[HKCU\Software\GameHouse]
[HKCU\Software\Ganymede]
[HKCU\Software\Garmin]
[HKCU\Software\GlarySoft]
[HKCU\Software\Gmail Notifier]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Heidi Computers Ltd]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\IZSoftware]
[HKCU\Software\IncrediMail]
[HKCU\Software\Intel]
[HKCU\Software\JaboSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\Katarn Corp.]
[HKCU\Software\KraiSoft]
[HKCU\Software\Ligos]
[HKCU\Software\MOVAVI]
[HKCU\Software\Macromedia]
[HKCU\Software\MagicBall]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\N64 Emulation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Netviewer]
[HKCU\Software\Neuf]
[HKCU\Software\ODBC]
[HKCU\Software\OXXOgames]
[HKCU\Software\Oak Technology]
[HKCU\Software\Opera Software]
[HKCU\Software\PC Wizard]
[HKCU\Software\PDFCreator]
[HKCU\Software\Panda Security]
[HKCU\Software\Panda Software]
[HKCU\Software\Philips Intelligent Agent]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerArchiver]
[HKCU\Software\Qzip3]
[HKCU\Software\RadLight]
[HKCU\Software\Radio Fr Solo]
[HKCU\Software\Redemption]
[HKCU\Software\RunOneImprimCheques.exe]
[HKCU\Software\SPAMfighter]
[HKCU\Software\SampleView]
[HKCU\Software\SecuROM]
[HKCU\Software\Skyline]
[HKCU\Software\Sony Ericsson]
[HKCU\Software\SpeedFan]
[HKCU\Software\Sports Interactive Ltd]
[HKCU\Software\Sun Microsystems]
[HKCU\Software\Symantec]
[HKCU\Software\Teleca]
[HKCU\Software\Tracker Software]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\Ulead Systems]
[HKCU\Software\UnFREEz]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Wanadoo]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\XnView]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\ahead]
[HKCU\Software\dskMetrics]
[HKCU\Software\freebird]
[HKCU\Software\funkitron]
[HKCU\Software\giveawayoftheday.com]
[HKCU\Software\xiberpix]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\AceBIT]
[HKLM\Software\Acronis]
[HKLM\Software\Adobe Systems]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\Alawar]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Apple]
[HKLM\Software\Ashampoo]
[HKLM\Software\AviSynth]
[HKLM\Software\Belarc]
[HKLM\Software\Big Fish Games]
[HKLM\Software\BigFish]
[HKLM\Software\BoontyGames]
[HKLM\Software\Boonty]
[HKLM\Software\Bulldog]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Chromium]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec tweak Tool]
[HKLM\Software\Conexant]
[HKLM\Software\Copernic]
[HKLM\Software\Crystal Dew World]
[HKLM\Software\Cyberlink]
[HKLM\Software\Device Doctor]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DownloadHelper]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\EA SPORTS]
[HKLM\Software\EACOM]
[HKLM\Software\EAST_Technologies]
[HKLM\Software\Electronic Arts]
[HKLM\Software\EliaShim]
[HKLM\Software\Exent]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\Foreignword]
[HKLM\Software\FullCircle]
[HKLM\Software\GIMP_Back_Mode]
[HKLM\Software\GNU]
[HKLM\Software\GTK]
[HKLM\Software\Gabest]
[HKLM\Software\Galilea]
[HKLM\Software\GameHouse]
[HKLM\Software\Garmin]
[HKLM\Software\Gemplus]
[HKLM\Software\Generic]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\I.R.I.S.]
[HKLM\Software\IncrediMail]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Kantaris]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\LocalSoftware]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Magix]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Mozilla Thunderbird]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\Netscape]
[HKLM\Software\Neuf]
[HKLM\Software\Newton]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\Opera Software]
[HKLM\Software\PDFCreator]
[HKLM\Software\Panda Software]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\PopCap]
[HKLM\Software\PowerArchiverFR]
[HKLM\Software\Program Groups]
[HKLM\Software\Quicksys]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\Redemption]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\S3R521]
[HKLM\Software\SFRWidgetAdsl]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Savescreen]
[HKLM\Software\Schlumberger]
[HKLM\Software\Sensaura]
[HKLM\Software\Services]
[HKLM\Software\Sierra OnLine]
[HKLM\Software\SmallRockets]
[HKLM\Software\Sony Ericsson]
[HKLM\Software\Symantec]
[HKLM\Software\TEXTware A/S]
[HKLM\Software\The Silicon Realms Toolworks]
[HKLM\Software\Tracker Software]
[HKLM\Software\TuneUp]
[HKLM\Software\Via4in1Driver]
[HKLM\Software\VideoLAN]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\Wise Solutions]
[HKLM\Software\Yahoo]
[HKLM\Software\ewido]
[HKLM\Software\mozilla.org]
[HKLM\Software\optimidata]
[HKLM\Software\xiberpix]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 11/01/2011 - 22:21:01 - [56,740] ----D C:\Program Files\Acronis
O43 - CFD: 03/08/2011 - 15:16:39 - [165,944] ----D C:\Program Files\Adobe
O43 - CFD: 27/06/2010 - 10:18:45 - [28,498] ----D C:\Program Files\Alawar
O43 - CFD: 31/03/2012 - 14:25:10 - [4,469] ----D C:\Program Files\Apple Software Update
O43 - CFD: 26/08/2010 - 15:49:46 - [78,721] ----D C:\Program Files\Ashampoo
O43 - CFD: 02/04/2012 - 10:08:15 - [0,017] ----D C:\Program Files\ATI
O43 - CFD: 21/09/2012 - 11:01:49 - [0] ----D C:\Program Files\Auslogics
O43 - CFD: 26/02/2012 - 18:04:06 - [294,553] ----D C:\Program Files\AVAST Software
O43 - CFD: 05/12/2006 - 15:08:15 - [0,421] ----D C:\Program Files\AviSynth 2.5
O43 - CFD: 23/02/2011 - 10:49:33 - [0,004] ----D C:\Program Files\Belarc
O43 - CFD: 18/01/2007 - 16:57:30 - [4,809] ----D C:\Program Files\Boonty
O43 - CFD: 09/05/2008 - 09:48:47 - [82,985] ----D C:\Program Files\BoontyGames
O43 - CFD: 12/02/2013 - 15:57:04 - [5,111] ----D C:\Program Files\CCleaner
O43 - CFD: 09/07/2004 - 14:00:00 - [0,276] ----D C:\Program Files\Common Files
O43 - CFD: 08/11/2003 - 12:56:37 - [0,234] ----D C:\Program Files\CONEXANT
O43 - CFD: 16/12/2009 - 17:55:32 - [29,417] ----D C:\Program Files\ConvertHelper
O43 - CFD: 28/04/2008 - 18:50:42 - [3,252] ----D C:\Program Files\ConvertMovie 4.1
O43 - CFD: 16/08/2009 - 08:40:19 - [0,021] ----D C:\Program Files\CPUID
O43 - CFD: 04/08/2011 - 09:23:18 - [0,345] ----D C:\Program Files\DivX
O43 - CFD: 27/04/2008 - 17:06:17 - [4,097] ----D C:\Program Files\Driver-Soft
O43 - CFD: 23/12/2008 - 17:42:11 - [136,385] ----D C:\Program Files\Druide
O43 - CFD: 21/05/2005 - 11:21:29 - [0,893] ----D C:\Program Files\EACOM
O43 - CFD: 05/12/2006 - 15:07:44 - [13,047] ----D C:\Program Files\eRightSoft
O43 - CFD: 27/10/2005 - 18:54:15 - [0] ----D C:\Program Files\eSoft Imaging
O43 - CFD: 26/02/2012 - 14:07:10 - [523,086] ----D C:\Program Files\Fichiers communs
O43 - CFD: 31/03/2012 - 20:37:10 - [0,420] ----D C:\Program Files\FileHippo.com
O43 - CFD: 31/03/2012 - 14:39:05 - [1,711] ----D C:\Program Files\firefox
O43 - CFD: 21/09/2004 - 15:07:32 - [0,034] ----D C:\Program Files\Foreignword
O43 - CFD: 13/05/2007 - 14:38:43 - [0,630] ----D C:\Program Files\freebird
O43 - CFD: 15/03/2007 - 11:57:55 - [226,712] ----D C:\Program Files\Geneatique2006
O43 - CFD: 12/01/2011 - 11:55:18 - [6,836] ----D C:\Program Files\Gmail Notifier
O43 - CFD: 25/02/2012 - 10:46:12 - [114,191] ----D C:\Program Files\Google
O43 - CFD: 13/06/2006 - 09:16:48 - [37,649] ----D C:\Program Files\GénéaTiqueMX
O43 - CFD: 28/07/2006 - 22:44:31 - [172,472] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 28/07/2006 - 22:49:26 - [9,787] ----D C:\Program Files\HP
O43 - CFD: 01/08/2011 - 09:52:26 - [3,653] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 12/12/2012 - 11:10:27 - [9,264] ----D C:\Program Files\Internet Explorer
O43 - CFD: 08/11/2003 - 12:52:04 - [30,286] ----D C:\Program Files\InterVideo
O43 - CFD: 31/03/2012 - 14:21:39 - [16,382] ----D C:\Program Files\IZArc
O43 - CFD: 28/04/2011 - 09:03:08 - [64,588] ----D C:\Program Files\Java
O43 - CFD: 12/07/2007 - 09:53:40 - [38,183] ----D C:\Program Files\K-Lite Codec Pack
O43 - CFD: 15/09/2008 - 09:37:28 - [6,498] ----D C:\Program Files\Lavalys
O43 - CFD: 09/08/2011 - 11:02:40 - [17,225] ----D C:\Program Files\Luxor
O43 - CFD: 28/06/2010 - 11:23:58 - [11,594] ----D C:\Program Files\Magic Ball 2
O43 - CFD: 12/02/2013 - 11:33:39 - [12,157] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 16/07/2007 - 16:06:52 - [6,316] ----D C:\Program Files\Media Player Classic
O43 - CFD: 26/11/2007 - 11:00:53 - [0,764] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 09/08/2006 - 19:28:17 - [2,698] ----D C:\Program Files\Microsoft Carioca
O43 - CFD: 31/08/2005 - 10:48:52 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 22/12/2004 - 17:04:46 - [0,869] ----D C:\Program Files\Microsoft Games
O43 - CFD: 22/04/2011 - 21:59:06 - [42,781] ----D C:\Program Files\Microsoft Money
O43 - CFD: 23/11/2008 - 18:55:55 - [274,272] ----D C:\Program Files\Microsoft Office
O43 - CFD: 23/02/2008 - 16:55:29 - [1,745] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 18/04/2007 - 18:59:09 - [125,322] ----D C:\Program Files\Microsoft Works
O43 - CFD: 08/11/2003 - 12:33:21 - [6,602] ----D C:\Program Files\Microsoft Works Suite 2003
O43 - CFD: 14/05/2011 - 22:04:31 - [24,472] ----D C:\Program Files\MOVAVI
O43 - CFD: 13/08/2010 - 08:53:24 - [10,825] ----D C:\Program Files\Movie Maker
O43 - CFD: 11/02/2009 - 12:19:41 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 23/11/2008 - 18:55:38 - [28,414] ----D C:\Program Files\MSECache
O43 - CFD: 08/11/2003 - 12:19:32 - [35,949] ----D C:\Program Files\MSN
O43 - CFD: 03/02/2006 - 16:12:44 - [9,319] ----D C:\Program Files\MSN Apps
O43 - CFD: 08/11/2003 - 12:19:22 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 15/11/2006 - 10:16:50 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 21/02/2011 - 22:26:01 - [5,827] ----D C:\Program Files\My Drivers
O43 - CFD: 22/04/2011 - 21:55:55 - [0,019] ----D C:\Program Files\MyAshampoo
O43 - CFD: 23/05/2008 - 10:37:08 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 28/03/2011 - 10:15:26 - [9,300] ----D C:\Program Files\nLite
O43 - CFD: 17/04/2012 - 13:28:52 - [63,210] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 13/07/2011 - 20:43:17 - [1,072] ----D C:\Program Files\Opera
O43 - CFD: 16/12/2010 - 10:21:04 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 08/12/2004 - 17:28:45 - [0,000] ----D C:\Program Files\Oxford
O43 - CFD: 05/02/2011 - 15:44:11 - [25,648] ----D C:\Program Files\PDFCreator
O43 - CFD: 17/03/2007 - 17:01:20 - [15,658] ----D C:\Program Files\Photo Story 3 for Windows
O43 - CFD: 02/12/2010 - 16:09:08 - [25,894] ----D C:\Program Files\PhotoFiltre
O43 - CFD: 19/12/2010 - 10:43:12 - [42,242] ----D C:\Program Files\PhotoFiltre Studio X
O43 - CFD: 07/01/2007 - 16:19:49 - [14,496] ----D C:\Program Files\Photos de Famille
O43 - CFD: 17/08/2008 - 22:14:25 - [13,439] ----D C:\Program Files\Podmailing
O43 - CFD: 23/03/2005 - 21:24:40 - [0,998] ----D C:\Program Files\PowerArchiver
O43 - CFD: 05/02/2008 - 11:07:21 - [1,662] ----D C:\Program Files\Powerbullet
O43 - CFD: 06/08/2004 - 17:02:00 - [2,403] ----D C:\Program Files\Project64 v1.5
O43 - CFD: 25/07/2010 - 17:53:27 - [2,538] ----D C:\Program Files\Quicksys
O43 - CFD: 03/07/2012 - 15:02:32 - [72,431] ----D C:\Program Files\QuickTime
O43 - CFD: 23/03/2007 - 19:12:43 - [8,742] ----D C:\Program Files\Radio Fr Solo
O43 - CFD: 27/12/2010 - 15:44:58 - [78,051] ----D C:\Program Files\ReadIris
O43 - CFD: 23/11/2006 - 10:49:19 - [0] ----D C:\Program Files\Real
O43 - CFD: 11/02/2009 - 12:19:27 - [34,730] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 30/04/2004 - 17:45:56 - [0,043] ----D C:\Program Files\SAGEM
O43 - CFD: 09/11/2008 - 16:54:20 - [0,000] ----D C:\Program Files\Savescreen
O43 - CFD: 08/11/2003 - 12:21:44 - [0,003] ----D C:\Program Files\Services en ligne
O43 - CFD: 27/02/2009 - 18:02:23 - [14,184] ----D C:\Program Files\SFR
O43 - CFD: 24/09/2004 - 17:32:21 - [0,000] ----D C:\Program Files\SIAT
O43 - CFD: 19/09/2004 - 18:02:22 - [0] ----D C:\Program Files\SlySoft
O43 - CFD: 31/08/2005 - 10:49:36 - [0,132] ----D C:\Program Files\Snapshot Viewer
O43 - CFD: 25/08/2012 - 22:14:54 - [6,764] ----D C:\Program Files\Speccy
O43 - CFD: 31/03/2012 - 14:19:36 - [5,430] ----D C:\Program Files\SpeedFan
O43 - CFD: 18/07/2011 - 10:32:31 - [4,060] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 04/11/2007 - 18:01:08 - [4,797] ----D C:\Program Files\Sqirlz Water Reflections
O43 - CFD: 12/02/2010 - 10:08:27 - [0,852] ----D C:\Program Files\SRWare Iron
O43 - CFD: 04/03/2010 - 20:28:55 - [10,351] ----D C:\Program Files\StarDict
O43 - CFD: 24/09/2006 - 10:37:41 - [1,174] ----D C:\Program Files\StofWare
O43 - CFD: 08/07/2006 - 14:26:07 - [40,633] ----D C:\Program Files\Symantec
O43 - CFD: 08/12/2004 - 17:28:52 - [2,533] ----D C:\Program Files\TEXTware
O43 - CFD: 16/09/2005 - 14:02:40 - [0] ----D C:\Program Files\Tracker Software
O43 - CFD: 17/01/2010 - 18:07:01 - [0] ----D C:\Program Files\Trend Micro
O43 - CFD: 25/10/2009 - 22:31:48 - [0,086] ----D C:\Program Files\UnFREEz
O43 - CFD: 08/05/2004 - 15:09:12 - [12,796] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 27/04/2008 - 16:58:28 - [4,124] ----D C:\Program Files\VCOM
O43 - CFD: 02/08/2009 - 16:20:48 - [92,145] ----D C:\Program Files\VideoLAN
O43 - CFD: 26/06/2010 - 20:46:16 - [-1481,807] ----D C:\Program Files\Wanadoo
O43 - CFD: 16/06/2008 - 14:34:27 - [18,464] ----D C:\Program Files\Windows Live
O43 - CFD: 24/05/2009 - 09:27:13 - [36,417] ----D C:\Program Files\Windows Live Safety Center
O43 - CFD: 25/02/2008 - 21:21:06 - [3,415] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 23/05/2008 - 10:37:00 - [11,573] ----D C:\Program Files\Windows Media Player
O43 - CFD: 23/05/2008 - 10:36:59 - [3,765] ----D C:\Program Files\Windows NT
O43 - CFD: 29/06/2005 - 13:18:02 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 08/11/2003 - 12:23:05 - [0] ----D C:\Program Files\xerox
O43 - CFD: 09/05/2010 - 17:37:30 - [0,010] ----D C:\Program Files\xp-Iso-Builder
O43 - CFD: 08/07/2009 - 13:12:35 - [2,862] ----D C:\Program Files\Yahoo!
O43 - CFD: 12/02/2013 - 19:48:48 - [11,466] ----D C:\Program Files\ZHPDiag
O43 - CFD: 10/08/2009 - 09:34:49 - [15,574] ----D C:\Program Files\Zuma Deluxe
O43 - CFD: 11/01/2011 - 22:21:03 - [84,631] ----D C:\Program Files\Fichiers communs\Acronis
O43 - CFD: 09/01/2013 - 09:59:06 - [137,900] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 09/08/2008 - 15:28:41 - [0,069] ----D C:\Program Files\Fichiers communs\Adobe Systems Shared
O43 - CFD: 24/12/2009 - 16:08:58 - [0] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 02/10/2009 - 15:03:01 - [60,277] ----D C:\Program Files\Fichiers communs\Apple
O43 - CFD: 15/05/2005 - 16:45:10 - [0] ----D C:\Program Files\Fichiers communs\BOONTY Shared
O43 - CFD: 25/06/2007 - 18:15:51 - [1,921] ----D C:\Program Files\Fichiers communs\Borland Shared
O43 - CFD: 20/11/2008 - 11:54:27 - [0,082] ----D C:\Program Files\Fichiers communs\Designer
O43 - CFD: 04/03/2010 - 20:20:09 - [26,651] ----D C:\Program Files\Fichiers communs\GTK
O43 - CFD: 08/11/2003 - 18:09:41 - [0,111] ----D C:\Program Files\Fichiers communs\Hewlett-Packard
O43 - CFD: 28/07/2006 - 22:49:28 - [0,617] ----D C:\Program Files\Fichiers communs\HP
O43 - CFD: 22/09/2004 - 13:58:23 - [20,098] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 26/02/2012 - 14:07:11 - [1,198] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 26/02/2012 - 14:07:10 - [0,002] ----D C:\Program Files\Fichiers communs\Java(2)
O43 - CFD: 17/04/2007 - 18:51:25 - [5,383] ----D C:\Program Files\Fichiers communs\LightScribe
O43 - CFD: 01/06/2004 - 14:55:55 - [0,883] ----D C:\Program Files\Fichiers communs\Macrovision Shared
O43 - CFD: 01/04/2006 - 17:45:40 - [0,089] ----D C:\Program Files\Fichiers communs\MAGIX Shared
O43 - CFD: 22/04/2011 - 21:46:50 - [134,527] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 08/11/2003 - 12:20:37 - [0,542] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 08/11/2003 - 12:15:13 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 26/06/2009 - 10:35:00 - [0] ----D C:\Program Files\Fichiers communs\Panda Software
O43 - CFD: 12/07/2007 - 09:52:57 - [0,001] ----D C:\Program Files\Fichiers communs\Real
O43 - CFD: 17/07/2006 - 17:34:19 - [0,986] ----D C:\Program Files\Fichiers communs\Sandlot Shared
O43 - CFD: 08/11/2003 - 12:20:43 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 29/11/2006 - 12:06:01 - [1,257] ----D C:\Program Files\Fichiers communs\Simple Star Shared
O43 - CFD: 08/11/2003 - 12:15:11 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 23/05/2008 - 10:36:52 - [16,799] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 16/06/2008 - 15:31:58 - [0,325] ----D C:\Program Files\Fichiers communs\Teleca Shared
O43 - CFD: 25/11/2007 - 18:58:58 - [7,099] -SH-D C:\Program Files\Fichiers communs\WindowsLiveInstaller
O43 - CFD: 10/07/2009 - 09:24:15 - [18,015] ----D C:\Program Files\Fichiers communs\Wise Installation Wizard
O43 - CFD: 12/02/2013 - 19:34:02 - [656,536] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 12/02/2013 - 15:15:47 - [0,003] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 28/06/2010 - 09:15:43 - [1,801] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 25/02/2008 - 21:20:23 - [1,626] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 29/08/2005 - 11:16:25 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 04/08/2011 - 09:32:39 - [0,289] ----D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 17/04/2012 - 13:28:50 - [0] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 19/02/2007 - 18:21:39 - [0,003] ----D C:\Documents and Settings\M Bertin\Application Data\$CUERoot$
O43 - CFD: 24/08/2007 - 10:11:10 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\.trackballs
O43 - CFD: 14/06/2006 - 21:48:27 - [0,748] ----D C:\Documents and Settings\M Bertin\Application Data\ACD Systems
O43 - CFD: 04/01/2006 - 11:42:56 - [0,000] ----D C:\Documents and Settings\M Bertin\Application Data\AchrafCherti
O43 - CFD: 08/02/2010 - 16:47:30 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\Acronis
O43 - CFD: 03/08/2011 - 15:08:40 - [12,982] ----D C:\Documents and Settings\M Bertin\Application Data\Adobe
O43 - CFD: 30/12/2006 - 10:45:13 - [0,000] ----D C:\Documents and Settings\M Bertin\Application Data\AdobeUM
O43 - CFD: 04/05/2007 - 14:54:11 - [0,056] ----D C:\Documents and Settings\M Bertin\Application Data\Ahead
O43 - CFD: 27/01/2011 - 22:28:10 - [1,889] ----D C:\Documents and Settings\M Bertin\Application Data\Apple Computer
O43 - CFD: 26/08/2010 - 15:59:46 - [0,364] ----D C:\Documents and Settings\M Bertin\Application Data\Ashampoo
O43 - CFD: 21/09/2012 - 10:58:30 - [2,712] ----D C:\Documents and Settings\M Bertin\Application Data\Auslogics
O43 - CFD: 28/10/2009 - 17:55:01 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\com.adobe.example.widget-programmes.40247E01796E652D304FB5752B197AB47987A585.1
O43 - CFD: 16/05/2009 - 09:32:37 - [0,004] ----D C:\Documents and Settings\M Bertin\Application Data\DeepBurner
O43 - CFD: 14/02/2010 - 13:44:04 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\DeviceDoctorSoftware
O43 - CFD: 26/10/2006 - 21:31:43 - [0,013] ----D C:\Documents and Settings\M Bertin\Application Data\DivX
O43 - CFD: 16/09/2004 - 13:50:26 - [2,302] ----D C:\Documents and Settings\M Bertin\Application Data\Dossier de téléchargement Share-to-Web
O43 - CFD: 16/09/2004 - 13:50:26 - [0,022] ----D C:\Documents and Settings\M Bertin\Application Data\Dossier de téléchargement Share-to-Web 
O43 - CFD: 11/12/2008 - 09:59:51 - [0,004] ----D C:\Documents and Settings\M Bertin\Application Data\Druide
O43 - CFD: 15/10/2009 - 18:29:22 - [0,000] ----D C:\Documents and Settings\M Bertin\Application Data\dvdcss
O43 - CFD: 28/01/2006 - 16:29:55 - [0,553] ----D C:\Documents and Settings\M Bertin\Application Data\EAST Technologies
O43 - CFD: 10/11/2008 - 09:47:38 - [0,003] ----D C:\Documents and Settings\M Bertin\Application Data\FastStone
O43 - CFD: 06/05/2011 - 21:38:53 - [0,013] ----D C:\Documents and Settings\M Bertin\Application Data\FileZilla
O43 - CFD: 12/12/2004 - 10:45:03 - [0,003] ----D C:\Documents and Settings\M Bertin\Application Data\funkitron
O43 - CFD: 23/08/2010 - 20:56:55 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\GARMIN
O43 - CFD: 08/06/2010 - 09:58:17 - [0,005] ----D C:\Documents and Settings\M Bertin\Application Data\GlarySoft
O43 - CFD: 17/09/2006 - 13:14:01 - [0,110] ----D C:\Documents and Settings\M Bertin\Application Data\Google
O43 - CFD: 10/03/2008 - 15:26:41 - [0,000] ----D C:\Documents and Settings\M Bertin\Application Data\gtk-2.0
O43 - CFD: 20/02/2007 - 11:02:56 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\gtopala
O43 - CFD: 30/01/2004 - 15:58:15 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\Help
O43 - CFD: 22/10/2010 - 22:43:35 - [0,003] ----D C:\Documents and Settings\M Bertin\Application Data\Identities
O43 - CFD: 07/10/2012 - 14:48:55 - [9,304] ----D C:\Documents and Settings\M Bertin\Application Data\Image Zone Express
O43 - CFD: 27/07/2008 - 14:48:43 - [0,050] ----D C:\Documents and Settings\M Bertin\Application Data\Incredible Ink
O43 - CFD: 09/11/2003 - 11:38:31 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\InterVideo
O43 - CFD: 03/02/2004 - 19:55:43 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\Leadertech
O43 - CFD: 31/07/2005 - 16:06:33 - [0,162] ----D C:\Documents and Settings\M Bertin\Application Data\Macromedia
O43 - CFD: 04/12/2008 - 18:47:52 - [0,067] ----D C:\Documents and Settings\M Bertin\Application Data\Malwarebytes
O43 - CFD: 11/04/2011 - 10:44:56 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\Media Player Classic
O43 - CFD: 07/07/2006 - 10:27:16 - [0,023] ----D C:\Documents and Settings\M Bertin\Application Data\Micro Application
O43 - CFD: 03/08/2011 - 14:57:38 - [257,185] -S--D C:\Documents and Settings\M Bertin\Application Data\Microsoft
O43 - CFD: 31/08/2005 - 10:44:23 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\Microsoft Web Folders
O43 - CFD: 28/12/2009 - 17:51:17 - [40,039] ----D C:\Documents and Settings\M Bertin\Application Data\Mozilla
O43 - CFD: 11/08/2007 - 09:48:53 - [0,006] ----D C:\Documents and Settings\M Bertin\Application Data\MSN6
O43 - CFD: 29/11/2006 - 15:19:17 - [4,757] ----D C:\Documents and Settings\M Bertin\Application Data\Nero
O43 - CFD: 15/06/2008 - 15:58:19 - [0,961] ----D C:\Documents and Settings\M Bertin\Application Data\OfficeUpdate12
O43 - CFD: 20/11/2008 - 18:42:09 - [2,603] ----D C:\Documents and Settings\M Bertin\Application Data\OpenOffice.org
O43 - CFD: 29/03/2010 - 21:07:00 - [31,908] ----D C:\Documents and Settings\M Bertin\Application Data\Opera
O43 - CFD: 19/01/2005 - 20:52:40 - [0,001] ----D C:\Documents and Settings\M Bertin\Application Data\Oxford
O43 - CFD: 01/12/2010 - 19:22:24 - [0,000] ----D C:\Documents and Settings\M Bertin\Application Data\PhotoFiltre
O43 - CFD: 22/10/2010 - 22:46:01 - [0,002] ----D C:\Documents and Settings\M Bertin\Application Data\PhotoFiltre Studio X
O43 - CFD: 17/08/2008 - 22:11:00 - [0,003] ----D C:\Documents and Settings\M Bertin\Application Data\Podmailing
O43 - CFD: 12/07/2007 - 09:52:42 - [0,067] ----D C:\Documents and Settings\M Bertin\Application Data\Real
O43 - CFD: 24/08/2007 - 18:01:29 - [0,968] ----D C:\Documents and Settings\M Bertin\Application Data\Sony Ericsson
O43 - CFD: 10/09/2006 - 15:10:56 - [0,004] ----D C:\Documents and Settings\M Bertin\Application Data\SpamPal
O43 - CFD: 04/03/2010 - 20:29:05 - [0,002] ----D C:\Documents and Settings\M Bertin\Application Data\StarDict
O43 - CFD: 17/07/2006 - 16:04:40 - [60,125] ----D C:\Documents and Settings\M Bertin\Application Data\Sun
O43 - CFD: 03/05/2006 - 16:07:29 - [0,095] ----D C:\Documents and Settings\M Bertin\Application Data\Talkback
O43 - CFD: 16/06/2008 - 14:17:18 - [0,004] ----D C:\Documents and Settings\M Bertin\Application Data\Teleca
O43 - CFD: 04/08/2006 - 22:01:24 - [11,638] ----D C:\Documents and Settings\M Bertin\Application Data\Thunderbird
O43 - CFD: 14/03/2006 - 14:46:03 - [7,006] ----D C:\Documents and Settings\M Bertin\Application Data\TuneUp Software
O43 - CFD: 27/04/2008 - 16:59:01 - [0,011] ----D C:\Documents and Settings\M Bertin\Application Data\VCOM
O43 - CFD: 25/08/2012 - 22:12:49 - [1,148] ----D C:\Documents and Settings\M Bertin\Application Data\vlc
O43 - CFD: 27/07/2005 - 15:09:21 - [0,098] ----D C:\Documents and Settings\M Bertin\Application Data\Wildfire
O43 - CFD: 26/08/2004 - 16:16:20 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\XnView
O43 - CFD: 23/10/2005 - 19:15:28 - [0] ----D C:\Documents and Settings\M Bertin\Application Data\Zylom
O43 - CFD: 18/04/2011 - 10:22:25 - [68,439] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Adobe
O43 - CFD: 06/03/2007 - 18:08:42 - [1,860] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Ahead
O43 - CFD: 11/06/2008 - 10:34:18 - [37,094] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Apple
O43 - CFD: 25/07/2008 - 13:58:23 - [17,814] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Apple Computer
O43 - CFD: 03/06/2010 - 18:05:48 - [0,016] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 26/08/2010 - 15:50:11 - [0,330] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\ashampoo
O43 - CFD: 11/06/2011 - 10:52:01 - [0,166] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\BeAnywhere_Drive
O43 - CFD: 09/02/2010 - 17:16:31 - [0,001] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Christofer_Persson
O43 - CFD: 10/02/2010 - 10:11:23 - [18,272] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Chromium
O43 - CFD: 10/10/2008 - 08:36:11 - [0,012] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Cooliris
O43 - CFD: 06/02/2008 - 10:42:42 - [0,000] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Eraser
O43 - CFD: 03/03/2010 - 11:49:06 - [683,489] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google
O43 - CFD: 13/06/2006 - 09:16:48 - [0] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Help
O43 - CFD: 08/08/2006 - 09:59:33 - [177,411] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Identities
O43 - CFD: 27/01/2005 - 10:50:18 - [12,990] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\IM
O43 - CFD: 01/07/2010 - 17:07:45 - [0,002] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Klaus_Moster
O43 - CFD: 06/03/2007 - 10:30:10 - [0,002] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\LightScribe
O43 - CFD: 19/05/2011 - 21:19:45 - [216,702] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft
O43 - CFD: 02/04/2006 - 12:35:46 - [94,540] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Mozilla
O43 - CFD: 29/03/2010 - 21:07:00 - [4,729] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Opera
O43 - CFD: 26/06/2009 - 10:32:05 - [0,000] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Panda Software
O43 - CFD: 12/07/2007 - 09:53:38 - [0] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Real
O43 - CFD: 16/06/2008 - 16:06:26 - [0,352] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Sony Ericsson
O43 - CFD: 17/04/2012 - 14:14:54 - [0] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Temp
O43 - CFD: 26/02/2008 - 17:29:16 - [3,486] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Thunderbird
O43 - CFD: 18/06/2004 - 20:39:13 - [0,231] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\Wildtangent
O43 - CFD: 02/01/2007 - 11:43:06 - [0] ----D C:\Documents and Settings\M Bertin\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 16/11/2006 - 16:00:12 - [0,015] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 11/01/2011 - 22:21:05 - [0,001] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Acronis
O43 - CFD: 23/12/2008 - 17:45:21 - [0] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Antidote
O43 - CFD: 28/04/2008 - 18:50:42 - [0,003] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\ConvertMovie 4.1
O43 - CFD: 15/03/2010 - 18:57:35 - [0,000] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 21/03/2008 - 19:42:37 - [0] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\GPS
O43 - CFD: 28/06/2010 - 11:23:44 - [0,006] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Logiciels d'images
O43 - CFD: 28/06/2010 - 11:24:01 - [0,014] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\logiciels jeux
O43 - CFD: 24/05/2008 - 17:33:59 - [0,001] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Logiciels messageries
O43 - CFD: 19/12/2010 - 10:43:12 - [0,004] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Manuel PhotoFiltre Studio
O43 - CFD: 31/03/2012 - 15:01:19 - [0,003] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Navigateurs
O43 - CFD: 02/04/2006 - 14:23:51 - [0,000] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 04/02/2011 - 19:23:19 - [0,003] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\PhotoFiltre
O43 - CFD: 22/10/2010 - 22:43:21 - [0,003] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\PhotoFiltre Studio X
O43 - CFD: 17/12/2009 - 10:52:27 - [0,003] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Raccourcis
O43 - CFD: 22/03/2007 - 14:26:46 - [0,009] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Radio Fr Solo 2.1
O43 - CFD: 13/05/2007 - 14:38:43 - [0,001] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Smart PC Recorder
O43 - CFD: 31/03/2012 - 14:19:36 - [0,002] ----D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\SpeedFan
O43 - CFD: 31/03/2012 - 14:41:20 - [0,006] R---D C:\Documents and Settings\M Bertin\Menu Démarrer\Programmes\Sécurité
~ Scan Program Folder in 00mn 04s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.CAB5D7C23A3C747DA3DD938282336999] - 12/02/2013 - 19:44:17 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [2206]
O44 - LFC:[MD5.411D933DC9FE49129E6D6D3C7BF41C17] - 12/02/2013 - 19:37:32 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1439657]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/02/2013 - 19:36:05 ---A- . (...) -- C:\WINDOWS\0.log   [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 12/02/2013 - 19:36:01 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.43DDB746474075C61B36C7F7E6C1B0F9] - 12/02/2013 - 19:35:05 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32398]
O44 - LFC:[MD5.78B6ECEE1E24666246BEDA3311A99799] - 12/02/2013 - 19:34:39 ---A- . (...) -- C:\AdwCleaner[S1].txt   [4049]
O44 - LFC:[MD5.04DDC23EF662ADF7AE93B41119A46247] - 12/02/2013 - 18:01:32 ---A- . (...) -- C:\AdwCleaner[R1].txt   [3848]
O44 - LFC:[MD5.71909F70694EDEEFE836F93F3320B672] - 12/02/2013 - 15:22:44 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin   [512]
O44 - LFC:[MD5.629CABB0421668C9D3D402A3C3D77E14] - 12/02/2013 - 11:33:34 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\system32\Drivers\mbam.sys   [21104]
O44 - LFC:[MD5.9A580C2B5021ECF5341915277B1F9804] - 11/02/2013 - 15:44:07 ---A- . (...) -- C:\WINDOWS\popcinfo.dat   [10]
O44 - LFC:[MD5.6280A479148CAEAD59E17A0CC3789161] - 09/02/2013 - 10:36:07 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerApp.exe   [697712]
O44 - LFC:[MD5.3E5633C0E3B4FE04E6EBFFA597227617] - 09/02/2013 - 10:36:07 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl   [74096]
O44 - LFC:[MD5.09CCFC754FAD21941EB3B1CCBEE5EA0B] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [55647]
O44 - LFC:[MD5.B862B4A422AD30EE24315C2565A3E9F8] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\KB2799329-IE8.log   [8158]
O44 - LFC:[MD5.C5E0F0B55C4664607F806E6B5722763B] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\comsetup.log   [18600]
O44 - LFC:[MD5.502A9F66B7BB1A6B024024FCB7065A67] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\iis6.log   [8952]
O44 - LFC:[MD5.808977BB0D3D5F41AD56EE398FA2D6B0] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\imsins.log   [1374]
O44 - LFC:[MD5.7DA71BA967A7B1660DB7C40485924D5A] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\msgsocm.log   [2727]
O44 - LFC:[MD5.25B6EE49E75056599CDE43A03EACB696] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log   [11259]
O44 - LFC:[MD5.C73822189F1C47363367D4A69C49E6D3] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\ocgen.log   [26604]
O44 - LFC:[MD5.8ADDB2D5059A5FBCE4897ABE4F52AFBE] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\ocmsn.log   [3078]
O44 - LFC:[MD5.40D1F54B7CEA0342D35DC96CF88148E3] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\setupapi.log   [13808]
O44 - LFC:[MD5.DCB18611380635DBEA600215D2AD744B] - 15/01/2013 - 14:31:01 ---A- . (...) -- C:\WINDOWS\tsoc.log   [21232]
O44 - LFC:[MD5.E01908EB7E5C198F57CE59D31D0579AE] - 15/01/2013 - 14:30:57 ---A- . (...) -- C:\WINDOWS\updspapi.log   [5717]
~ Scan Files in 00mn 01s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.27FEC55F856F3C94D5F873A100660901] - 12/02/2013 - 11:34:54 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf
O45 - LFCP:[MD5.80987E33432A383EA3CB409EE729425F] - 12/02/2013 - 11:35:08 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf
O45 - LFCP:[MD5.0C7DF7AD68D44CE819965915B287577A] - 12/02/2013 - 11:45:10 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf
O45 - LFCP:[MD5.89D3BFDD5993DB452AD64DB18739F5C3] - 12/02/2013 - 11:56:30 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
O45 - LFCP:[MD5.1260BA5260950E887A1BF80AE3BD8FD5] - 12/02/2013 - 14:18:43 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-14484AE4.pf
O45 - LFCP:[MD5.789A15C239DA670F370110E398BAACE3] - 12/02/2013 - 14:30:18 ---A- - C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf
O45 - LFCP:[MD5.74B9C84E97521B3A228BEADEB60E34D3] - 12/02/2013 - 14:47:10 ---A- - C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf
O45 - LFCP:[MD5.D695D4414E7E6E5F5CD96ED78CE4A0B0] - 12/02/2013 - 15:16:10 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-10F48C5B.pf
O45 - LFCP:[MD5.042C07BD68A2451104A6A1CA00C300B0] - 12/02/2013 - 15:55:38 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
O45 - LFCP:[MD5.8F124E7D7FA5417CFAEFD250447A5C50] - 12/02/2013 - 19:16:55 ---A- - C:\WINDOWS\Prefetch\Layout.ini
O45 - LFCP:[MD5.2921D79A70893C996F0242C0D0EF5475] - 12/02/2013 - 19:17:01 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf
O45 - LFCP:[MD5.A6C6D562B02934E2A1C4A083718DCD36] - 12/02/2013 - 19:17:01 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf
O45 - LFCP:[MD5.431AB75169C0D364986E36C0C29372CE] - 12/02/2013 - 19:18:47 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf
O45 - LFCP:[MD5.6EFC84EA0E0BB83BD746C3D449D29392] - 12/02/2013 - 19:32:14 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-163A5BD3.pf
O45 - LFCP:[MD5.E5D7BEF79F5C7C4242FBAB3C850E5C33] - 12/02/2013 - 19:33:56 ---A- - C:\WINDOWS\Prefetch\ADWCLEANER0.EXE-19F81593.pf
O45 - LFCP:[MD5.5B7295F74B110F50B083173278924A37] - 12/02/2013 - 19:35:00 ---A- - C:\WINDOWS\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-34BC5027.pf
O45 - LFCP:[MD5.088E79D4FC50DDCB987380D7414E027F] - 12/02/2013 - 19:37:38 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf
O45 - LFCP:[MD5.A2D7C92C29BBBDC3F90C0D1F7923BC49] - 12/02/2013 - 19:37:38 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.6E53348B8C087921C37BF6F9A8E8EFC3] - 12/02/2013 - 19:37:39 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-163A5BD6.pf
O45 - LFCP:[MD5.22E4D90F27B63EF519EDF8096116761D] - 12/02/2013 - 19:40:09 ---A- - C:\WINDOWS\Prefetch\ADM.EXE-2C658B8A.pf
O45 - LFCP:[MD5.BD43867D4E112C1196A13FB8CE9F97EF] - 12/02/2013 - 19:41:05 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf
O45 - LFCP:[MD5.EA259447929191C036F05CE79EF57A15] - 12/02/2013 - 19:42:01 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-0CB0881E.pf
O45 - LFCP:[MD5.F605D20624A62BA423B44A4E563B923D] - 12/02/2013 - 19:42:06 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf
O45 - LFCP:[MD5.949F273A8EEB6A2183A2BCF3590431F3] - 12/02/2013 - 19:42:39 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-08A1B3F1.pf
O45 - LFCP:[MD5.E659245FF6B31B3F3ABF44289EDB8FD1] - 12/02/2013 - 19:42:42 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-163A5BCF.pf
O45 - LFCP:[MD5.2393E7D301C893A3F90FAB97B55464AD] - 12/02/2013 - 19:42:45 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-163A5BD2.pf
O45 - LFCP:[MD5.2A2D4E019BC9326504284F79506FD91F] - 12/02/2013 - 19:43:21 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-2EF0B884.pf
O45 - LFCP:[MD5.34B6992CDE8037C91FAFEDE6AF3921BD] - 12/02/2013 - 19:43:22 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
O45 - LFCP:[MD5.70F2739EE7E4D7EE4A8B3F6425DCC286] - 12/02/2013 - 19:43:25 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-14484AD7.pf
O45 - LFCP:[MD5.2DFF801582BBEB1E24B0432F926928A1] - 12/02/2013 - 19:43:32 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-14484ADA.pf
O45 - LFCP:[MD5.970AC4C1079D0C45C40E5D568BBFC385] - 12/02/2013 - 19:43:35 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-14484ADE.pf
O45 - LFCP:[MD5.EC583D4E1911F0119FE987E5807C207F] - 12/02/2013 - 19:44:11 ---A- - C:\WINDOWS\Prefetch\TU_LOGONUI.EXE-236DEE34.pf
O45 - LFCP:[MD5.CC3D67B3C241CE35FC1AC0243178DCD1] - 12/02/2013 - 19:44:19 ---A- - C:\WINDOWS\Prefetch\WGATRAY.EXE-0ED38BED.pf
O45 - LFCP:[MD5.C0EC5466FCE646548BB443EE02AB1C51] - 12/02/2013 - 19:44:21 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf
O45 - LFCP:[MD5.94073F3377042372EF18AEA1397CC3A3] - 12/02/2013 - 19:44:23 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-0B3C80E5.pf
O45 - LFCP:[MD5.5053EE17FA44E1812F58C2F3C1C68ECD] - 12/02/2013 - 19:44:27 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-1A47A643.pf
O45 - LFCP:[MD5.B611EEC0601A391D8C489D28CF07F8A3] - 12/02/2013 - 19:44:27 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-1D70A3EF.pf
O45 - LFCP:[MD5.B7C389EE718FEB1DD0A520C963672537] - 12/02/2013 - 19:44:27 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf
O45 - LFCP:[MD5.F4A3DF17D274B7BE2F1632A5794FB3F4] - 12/02/2013 - 19:44:27 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
O45 - LFCP:[MD5.914D5115A42F454620991116F806DB8C] - 12/02/2013 - 19:44:28 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
O45 - LFCP:[MD5.0B33E47F0DB129621086AA6A57BDB2CC] - 12/02/2013 - 19:44:32 ---A- - C:\WINDOWS\Prefetch\TIMOUNTERMONITOR.EXE-2710DF60.pf
O45 - LFCP:[MD5.9BFECC7D4FB4E21F9B96C93B4636A32B] - 12/02/2013 - 19:44:34 ---A- - C:\WINDOWS\Prefetch\AVASTEMUPDATE.EXE-033BD90D.pf
O45 - LFCP:[MD5.00B350F7426FD410C29E23367AB00D1C] - 12/02/2013 - 19:44:45 ---A- - C:\WINDOWS\Prefetch\CHROME.EXE-163A5BDC.pf
O45 - LFCP:[MD5.BD1266A3ABB16FB196612D69D82D77AF] - 12/02/2013 - 19:48:42 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf
O45 - LFCP:[MD5.33566BE942BF76CA5F4D2EE13C2569F9] - 12/02/2013 - 19:48:47 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
O45 - LFCP:[MD5.6C6B6615EA101B74E6B2E2C40C41DD8E] - 12/02/2013 - 19:48:47 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf
O45 - LFCP:[MD5.401CA135E7569B3002F22BAAFA98D162] - 12/02/2013 - 19:48:50 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-17974576.pf
~ Scan Prefetcher in 00mn 00s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ Scan ShellExecuteHooks in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Apple\Apple Application Support\WebKit2WebProcess.exe" [Enabled] .(.Apple Inc..) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\WebKit2WebProcess.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
~ Scan Keys in 00mn 00s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
~ Scan CSB in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.I420"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- C:\WINDOWS\system32\i420vfw.dll
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3filter"="ac3filter.acm" . (...) -- C:\WINDOWS\system32\ac3filter.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"L3CODECA.ACM"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\L3CODECA.ACM
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \drivers.desc\"i420vfw.dll"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- C:\WINDOWS\system32\i420vfw.dll
O52 - TDSD: \drivers.desc\"yv12vfw.dll"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll
O52 - TDSD: \drivers.desc\"ac3filter.acm"="AC3Filter ACM AC3/DTS codec" . (...) -- C:\WINDOWS\system32\ac3filter.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\APSDaemon  [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe  [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\Google Update  [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
O53 - SMSR:HKLM\...\startupreg\QuickTime Task  [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=
O56 - MWPE:[HKCU\...\policies\Explorer] - "MaxRecentDocs"=7
O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.149A8F7ADF9742554DC323E290551E3E] - 30/10/2012 - 23:51:56 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\Drivers\aavmker4.sys   [25256]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 30/08/2002 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys   [9037]
~ Scan Drivers in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC:Last File Created 11/02/2013 - 09:49:25 ---A- C:\Documents and Settings\M Bertin\UserData\index.dat   [32768]
O61 - LFC:Last File Created 11/02/2013 - 09:49:49 ---A- C:\Documents and Settings\M Bertin\Cookies\I3FUSMM4.txt   [352]
O61 - LFC:Last File Created 11/02/2013 - 09:49:55 ---A- C:\Documents and Settings\M Bertin\UserData\CDI7S1E3\oWindowsUpdate[1].xml   [28]
O61 - LFC:Last File Created 11/02/2013 - 09:51:40 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor   [13312]
O61 - LFC:Last File Created 11/02/2013 - 09:51:40 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Network Action Predictor-journal   [3608]
O61 - LFC:Last File Created 11/02/2013 - 09:52:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage   [82944]
O61 - LFC:Last File Created 11/02/2013 - 09:52:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_icmlaeflemplmjndnaapfdbbnpncnbda_0.localstorage-journal   [16384]
O61 - LFC:Last File Created 11/02/2013 - 09:55:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Archived History   [90112]
O61 - LFC:Last File Created 11/02/2013 - 09:55:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Archived History-journal   [16384]
O61 - LFC:Last File Created 11/02/2013 - 09:55:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2012-11   [233472]
O61 - LFC:Last File Created 12/02/2013 - 15:09:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000016.sst   [122]
O61 - LFC:Last File Created 12/02/2013 - 15:11:03 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\Application\25.0.1364.68\Installer\setup.exe   [1629136]
O61 - LFC:Last File Created 12/02/2013 - 15:11:24 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\Application\VisualElementsManifest.xml   [396]
O61 - LFC:Last File Created 12/02/2013 - 15:11:26 ---A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk   [2327]
O61 - LFC:Last File Created 12/02/2013 - 15:11:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\Flux RSS~\Eurosport ~.feed-ms   [495616]*
O61 - LFC:Last File Created 12/02/2013 - 15:11:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\Informations, règles~.feed-ms   [69632]
O61 - LFC:Last File Created 12/02/2013 - 15:11:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\Nos partenaires privilégiés~.feed-ms   [32768]
O61 - LFC:Last File Created 12/02/2013 - 15:11:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Galerie de composants Web Slice~.feed-ms   [32768]
O61 - LFC:Last File Created 12/02/2013 - 15:15:41 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.6.602.167\manifest.json   [2054]
O61 - LFC:Last File Created 12/02/2013 - 15:15:41 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll   [12638576]
O61 - LFC:Last File Created 12/02/2013 - 15:17:43 ---A- C:\Documents and Settings\M Bertin\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol   [543]
O61 - LFC:Last File Created 12/02/2013 - 15:23:26 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Certificate Revocation Lists   [263872]
O61 - LFC:Last File Created 12/02/2013 - 15:23:26 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\CRX_75DAF8CB7768\crl-set   [263872]
O61 - LFC:Last File Created 12/02/2013 - 15:23:26 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\CRX_75DAF8CB7768\manifest.json   [34]
O61 - LFC:Last File Created 12/02/2013 - 15:34:17 ---A- C:\Documents and Settings\M Bertin\Cookies\950KWR61.txt   [193]
O61 - LFC:Last File Created 12/02/2013 - 15:34:17 ---A- C:\Documents and Settings\M Bertin\Cookies\MOTV6XP4.txt   [278]
O61 - LFC:Last File Created 12/02/2013 - 15:56:22 ---A- C:\Documents and Settings\M Bertin\Cookies\Q26BK49B.txt   [363]
O61 - LFC:Last File Created 12/02/2013 - 15:57:46 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{5669874E-B667-11E1-AB02-0020ED907D60}.dat   [3584]
O61 - LFC:Last File Created 12/02/2013 - 15:57:46 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{8EE1489C-7524-11E2-AC9C-0020ED907D60}.dat   [15360]
O61 - LFC:Last File Created 12/02/2013 - 18:35:04 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgpdioedihjhncjafcpgbbjdpbbkikmi_0.localstorage   [3048448]
O61 - LFC:Last File Created 12/02/2013 - 18:35:04 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dgpdioedihjhncjafcpgbbjdpbbkikmi_0.localstorage-journal   [10832]
O61 - LFC:Last File Created 12/02/2013 - 18:46:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\IMT3F.xml   [2026]
O61 - LFC:Last File Created 12/02/2013 - 18:46:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\IMT40.xml   [426]
O61 - LFC:Last File Created 12/02/2013 - 18:47:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\IMT4C.xml   [2026]
O61 - LFC:Last File Created 12/02/2013 - 18:47:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\IMT4D.xml   [426]
O61 - LFC:Last File Created 12/02/2013 - 18:47:00 ---A- C:\Documents and Settings\M Bertin\Local Settings\temp\IMT4E.xml   [805418]
O61 - LFC:Last File Created 12/02/2013 - 18:58:13 ---A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\Windows\Themes\Custom.theme   [7783]
O61 - LFC:Last File Created 12/02/2013 - 18:59:45 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\HelpCtr\HelpSessionHistory.dat   [19252]
O61 - LFC:Last File Created 12/02/2013 - 19:32:10 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aapbdbdomjkkjkaonfhkkikfgjllcleb_0.localstorage   [5120]
O61 - LFC:Last File Created 12/02/2013 - 19:32:10 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aapbdbdomjkkjkaonfhkkikfgjllcleb_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 12/02/2013 - 19:32:12 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\000081.sst   [3644]
O61 - LFC:Last File Created 12/02/2013 - 19:32:14 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mihcahmgecmbnbcchbopgniflfhgnkff_0.localstorage   [3072]
O61 - LFC:Last File Created 12/02/2013 - 19:32:14 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mihcahmgecmbnbcchbopgniflfhgnkff_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 12/02/2013 - 19:32:25 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bhmmomiinigofkjcapegjjndpbikblnp_0.localstorage   [599040]
O61 - LFC:Last File Created 12/02/2013 - 19:32:25 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bhmmomiinigofkjcapegjjndpbikblnp_0.localstorage-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:32:39 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Cookies   [6144]
O61 - LFC:Last File Created 12/02/2013 - 19:32:39 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension Cookies-journal   [4640]
O61 - LFC:Last File Created 12/02/2013 - 19:34:20 ---A- C:\Documents and Settings\M Bertin\Application Data\Mozilla\Firefox\Profiles\34x4vobb.default\prefs.js   [33717]
O61 - LFC:Last File Created 12/02/2013 - 19:34:20 ---A- C:\Documents and Settings\M Bertin\Application Data\Mozilla\Firefox\Profiles\kbgm0f9u.michel\prefs.js   [33717]
O61 - LFC:Last File Created 12/02/2013 - 19:34:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences.bad   [212215]
O61 - LFC:Last File Created 12/02/2013 - 19:37:24 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\000083.sst   [3186]
O61 - LFC:Last File Created 12/02/2013 - 19:37:28 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ur\messages.json   [5085]
O61 - LFC:Last File Created 12/02/2013 - 19:37:28 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\popup.html   [5820]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\be\messages.json   [5426]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\avast_logo.png   [1796]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\background-body.jpg   [523]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\background-right-bottom.jpg   [637]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\background-right-top.jpg   [634]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\background-sitecorrect.png   [54751]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\close.png   [1156]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\disabled.png   [626]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\grey.png   [1763]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\horizontal-line-white.jpg   [743]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\horizontal-line.jpg   [1032]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icon_incorrect.png   [4733]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\corporate-small-disable.png   [2087]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\corporate-small-selected.png   [1939]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\corporate.png   [3215]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\drugs-small-disable.png   [2265]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\drugs-small-selected.png   [2263]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\drugs.png   [5828]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\gambling-small-disable.png   [2303]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\gambling-small-selected.png   [2155]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\gambling.png   [4773]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green-1.png   [3829]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green-2.png   [3549]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green-3.png   [3075]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green-hover.png   [1593]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green-selected.png   [2977]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green.png   [1590]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green1-16.png   [1416]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green1-small.png   [1408]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green2-16.png   [1430]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green2-small.png   [1426]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green3-16.png   [1406]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green3-small.png   [1396]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\grey-0.png   [3955]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\grey-3.png   [3110]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\grey-small.png   [1433]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\grey3-16.png   [1451]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\illegal-small-disable.png   [2318]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\illegal-small-selected.png   [2320]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\illegal.png   [6501]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\logo.jpg   [4975]
O61 - LFC:Last File Created 12/02/2013 - 19:37:29 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\vertical-line.jpg   [504]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\it-small-disable.png   [2139]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\it-small-selected.png   [1957]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\it.png   [3884]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\limet-hover.png   [1300]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\limet-selected.png   [2791]
O61 - LFC:Last File Created 12/02/2013 - 19:37:30 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\limet.png   [1298]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\avastwrc.js   [21020]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\dateFormat.js   [3751]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\jquery-1.5.2.js   [219227]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\jquery.1.8.js   [92556]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\jquery.js   [190963]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\anchor.js   [22643]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\background.js   [30990]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\jquery.js   [190963]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\pbj.js   [8166]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\popup.js   [10992]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\protobuf.js   [59851]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\ratings.js   [20607]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\test_rules.js   [10189]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\warnDlg.js   [26475]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\scripts\wrc_gpb.js   [3544]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\css\anchor.css   [139]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\css\popup.css   [10292]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\line-dark-horizontal.png   [1810]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\line-light-horizontal.png   [1787]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\logo128.jpg   [3601]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\logo256.jpg   [8456]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\logo48.jpg   [1391]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\logo64.jpg   [1769]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\news-small-disable.png   [2057]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\news-small-selected.png   [1961]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\news.png   [3762]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange-hover.png   [1303]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange-selected.png   [2788]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange.png   [1304]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange1-16.png   [1389]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange2-16.png   [1406]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\orange3-16.png   [1363]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\pornography-small-disable.png   [2124]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\pornography-small-selected.png   [1984]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\pornography.png   [4104]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red-1.png   [3741]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red-2.png   [3479]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red-3.png   [2716]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red-hover.png   [1549]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red-selected.png   [2939]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red.png   [1552]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red1-16.png   [1376]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red1-small.png   [1367]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red2-16.png   [1386]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red2-small.png   [1377]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red3-16.png   [1361]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\red3-small.png   [1352]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\shopping-small-disable.png   [2122]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\shopping-small-selected.png   [2075]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\shopping.png   [5208]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\social-small-disable.png   [2235]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\social-small-selected.png   [2147]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\social.png   [5147]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\violence-small-disable.png   [2245]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\violence-small-selected.png   [2109]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\violence.png   [4866]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\weapons-small-disable.png   [2245]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\weapons-small-selected.png   [2109]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\weapons.png   [6701]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow-1.png   [3818]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow-2.png   [3525]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow-3.png   [2697]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow-hover.png   [1304]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow-selected.png   [2782]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow.png   [1304]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow1-16.png   [1337]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow1-small.png   [1379]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow2-16.png   [1345]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow2-small.png   [1395]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow3-16.png   [1302]
O61 - LFC:Last File Created 12/02/2013 - 19:37:31 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\yellow3-small.png   [1363]
O61 - LFC:Last File Created 12/02/2013 - 19:37:32 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\pbj.js   [8166]
O61 - LFC:Last File Created 12/02/2013 - 19:37:32 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\protobuf.js   [59857]
O61 - LFC:Last File Created 12/02/2013 - 19:37:32 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\query.js   [45956]
O61 - LFC:Last File Created 12/02/2013 - 19:37:32 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\libs\wrc_gpb.js   [18260]
O61 - LFC:Last File Created 12/02/2013 - 19:37:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\manifest.json   [5271]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ar\messages.json   [10153]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\bg\messages.json   [10140]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\bn\messages.json   [10607]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ca\messages.json   [4769]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\cs\messages.json   [5282]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\da\messages.json   [4605]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\de\messages.json   [4735]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\el\messages.json   [10662]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\en\messages.json   [4321]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\en_GB\messages.json   [4321]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\es\messages.json   [4734]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\green3-24.png   [722]
O61 - LFC:Last File Created 12/02/2013 - 19:37:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\skin\images\icons\grey0-16.png   [537]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\et\messages.json   [4620]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\fa\messages.json   [8761]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\fi\messages.json   [4889]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\fr\messages.json   [4843]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\he\messages.json   [8683]
O61 - LFC:Last File Created 12/02/2013 - 19:37:37 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\hi\messages.json   [10046]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\hr\messages.json   [4321]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\hu\messages.json   [5349]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\id\messages.json   [4525]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\it\messages.json   [4516]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ja\messages.json   [7668]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ko\messages.json   [6375]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\lv\messages.json   [5236]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ms\messages.json   [4503]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\nb\messages.json   [4633]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\nl\messages.json   [4569]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\pl\messages.json   [4978]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\pt_BR\messages.json   [4804]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\pt_PT\messages.json   [4627]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ro\messages.json   [4914]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\ru\messages.json   [11327]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\sk\messages.json   [5106]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\sl\messages.json   [4579]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\sr\messages.json   [4542]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\sv\messages.json   [4821]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\th\messages.json   [10495]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\tr\messages.json   [4912]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\uk\messages.json   [11186]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\vi\messages.json   [6341]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\zh_CN\messages.json   [5418]
O61 - LFC:Last File Created 12/02/2013 - 19:37:38 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\_locales\zh_TW\messages.json   [5749]
O61 - LFC:Last File Created 12/02/2013 - 19:37:51 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9YKT9DSY\macromedia.com\support\flashplayer\sys\settings.sol   [379]
O61 - LFC:Last File Created 12/02/2013 - 19:40:33 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_chrome.google.com_0.localstorage   [3072]
O61 - LFC:Last File Created 12/02/2013 - 19:40:33 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_chrome.google.com_0.localstorage-journal   [3608]
O61 - LFC:Last File Created 12/02/2013 - 19:40:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites   [69632]
O61 - LFC:Last File Created 12/02/2013 - 19:40:42 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Top Sites-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:40:44 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies   [6144]
O61 - LFC:Last File Created 12/02/2013 - 19:40:44 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Cookies-journal   [4640]
O61 - LFC:Last File Created 12/02/2013 - 19:41:05 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms   [6144]
O61 - LFC:Last File Created 12/02/2013 - 19:41:05 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\Sites suggérés d’Internet Explorer~.feed-ms   [28672]
O61 - LFC:Last File Created 12/02/2013 - 19:41:13 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Visited Links   [131072]
O61 - LFC:Last File Created 12/02/2013 - 19:42:50 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\000086.sst   [219]
O61 - LFC:Last File Created 12/02/2013 - 19:42:50 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs   [8]
O61 - LFC:Last File Created 12/02/2013 - 19:42:51 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG.old   [264]
O61 - LFC:Last File Created 12/02/2013 - 19:42:54 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Session   [810]
O61 - LFC:Last File Created 12/02/2013 - 19:42:54 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000042.sst   [256]
O61 - LFC:Last File Created 12/02/2013 - 19:42:54 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG.old   [264]
O61 - LFC:Last File Created 12/02/2013 - 19:44:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History Provider Cache   [22827]
O61 - LFC:Last File Created 12/02/2013 - 19:44:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data   [114688]
O61 - LFC:Last File Created 12/02/2013 - 19:44:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:44:39 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\CURRENT   [16]
O61 - LFC:Last File Created 12/02/2013 - 19:44:39 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\MANIFEST-000088   [557]
O61 - LFC:Last File Created 12/02/2013 - 19:44:40 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extension State\LOG   [145]
O61 - LFC:Last File Created 12/02/2013 - 19:44:44 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Managed Mode Settings   [8]
O61 - LFC:Last File Created 12/02/2013 - 19:45:06 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons   [241664]
O61 - LFC:Last File Created 12/02/2013 - 19:45:06 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Favicons-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:45:06 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History   [753664]
O61 - LFC:Last File Created 12/02/2013 - 19:45:06 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-02   [811008]
O61 - LFC:Last File Created 12/02/2013 - 19:45:06 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:45:07 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\History Index 2013-02-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:45:09 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies   [58368]
O61 - LFC:Last File Created 12/02/2013 - 19:45:09 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies-journal   [16384]
O61 - LFC:Last File Created 12/02/2013 - 19:45:13 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Origin Bound Certs   [15360]
O61 - LFC:Last File Created 12/02/2013 - 19:45:13 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Origin Bound Certs-journal   [3608]
O61 - LFC:Last File Created 12/02/2013 - 19:45:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\000045.sst   [159]
O61 - LFC:Last File Created 12/02/2013 - 19:45:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\CURRENT   [16]
O61 - LFC:Last File Created 12/02/2013 - 19:45:35 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000044   [384]
O61 - LFC:Last File Created 12/02/2013 - 19:45:36 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Session Storage\LOG   [259]
O61 - LFC:Last File Created 12/02/2013 - 19:48:14 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences   [23516]
O61 - LFC:Last File Created 12/02/2013 - 19:49:14 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download   [1525552]
O61 - LFC:Last File Created 12/02/2013 - 19:49:16 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom   [13518100]
O61 - LFC:Last File Created 12/02/2013 - 19:49:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set   [1392650]
O61 - LFC:Last File Created 12/02/2013 - 19:49:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Csd Whitelist   [134512]
O61 - LFC:Last File Created 12/02/2013 - 19:49:17 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Safe Browsing Download Whitelist   [19780]
O61 - LFC:Last File Created 12/02/2013 - 19:49:23 ---A- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\User Data\Local State   [32404]
O61 - LFC:Last File Created 30/12/1899 - 15:11:45 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\Content\5C45AD19E3530EC4218F560AFC04C3F7   [533]
O61 - LFC:Last File Created 30/12/1899 - 15:11:45 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C45AD19E3530EC4218F560AFC04C3F7   [118]
O61 - LFC:Last File Created 30/12/1899 - 15:11:51 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\Content\B171751C11ECDD4C0C4BC4BBF7B99FBF   [85005]
O61 - LFC:Last File Created 30/12/1899 - 15:11:51 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\MetaData\B171751C11ECDD4C0C4BC4BBF7B99FBF   [128]
O61 - LFC:Last File Created 30/12/1899 - 15:55:29 -SHA- C:\Documents and Settings\M Bertin\IECompatCache\index.dat   [868352]
O61 - LFC:Last File Created 30/12/1899 - 15:55:29 -SHA- C:\Documents and Settings\M Bertin\PrivacIE\index.dat   [557056]
O61 - LFC:Last File Created 30/12/1899 - 15:56:44 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6   [86208]
O61 - LFC:Last File Created 30/12/1899 - 15:56:44 -S-A- C:\Documents and Settings\M Bertin\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6   [124]
O61 - LFC:Last File Created 30/12/1899 - 18:58:37 -SHA- C:\Documents and Settings\M Bertin\Local Settings\Historique\History.IE5\MSHist012013021220130213\index.dat   [32768]
O61 - LFC:Last File Created 30/12/1899 - 19:41:04 -SHA- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat   [32768]
O61 - LFC:Last File Created 30/12/1899 - 19:44:15 -SHA- C:\Documents and Settings\M Bertin\Application Data\Microsoft\Credentials\S-1-5-21-2000478354-789336058-839522115-1004\Credentials   [612]
O61 - LFC:Last File Created 30/12/1899 - 19:44:18 -SHA- C:\Documents and Settings\M Bertin\IETldCache\index.dat   [262144]
O61 - LFC:Last File Created 30/12/1899 - 19:48:32 -SHA- C:\Documents and Settings\M Bertin\Cookies\index.dat   [65536]
O61 - LFC:Last File Created 30/12/1899 - 19:48:32 -SHA- C:\Documents and Settings\M Bertin\Local Settings\Historique\History.IE5\index.dat   [49152]
~ Scan Files in 00mn 41s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.3.5 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\Aavmker4.sys (Aavmker4)  .(.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) - LEGACY_AAVMKER4
O64 - Services: CurCS - 13/08/2010 - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe (AcrSch2Svc)  .(.Acronis - Acronis Scheduler 2.) - LEGACY_ACRSCH2SVC
O64 - Services: CurCS - 09/02/2013 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc)  .(.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.5 r5.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC
O64 - Services: CurCS - 09/08/2008 - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe LM Service)  .(.Adobe Systems - System Level Service Utility.) - LEGACY_ADOBE_LM_SERVICE
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswMon2.sys (aswMon2)  .(.AVAST Software - avast! File System Filter Driver for Window.) - LEGACY_ASWMON2
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\AswRdr.sys (AswRdr)  .(.AVAST Software - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 30/10/2012 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus)  .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 01/06/2004 - C:\WINDOWS\System32\drivers\CDAC11BA.exe (C-DillaCdaC11BA)  .(.Macrovision - Macrovision RTS Service.) - LEGACY_C-DILLACDAC11BA
O64 - Services: CurCS - 01/06/2004 - C:\WINDOWS\system32\drivers\CdaC15BA.sys (CdaC15BA)  .(.Macrovision Europe Ltd - Macrovision SECURITY Driver.) - LEGACY_CDAC15BA
O64 - Services: CurCS - 03/07/2001 - C:\WINDOWS\system32\DRIVERS\cnxtdiag.sys (Cnxtdiag)  .(.Conexant Systems - Diagnostic Interface DRIVER.) - LEGACY_CNXTDIAG
O64 - Services: CurCS - ??\??\???? -  (DcomLaunch)  .(. - .) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin)  .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot)  .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 30/08/2002 - C:\WINDOWS\system32\drivers\dmload.sys (dmload)  .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\svchost.exe (Dnscache)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE
O64 - Services: CurCS - 24/06/2001 - C:\WINDOWS\system32\DRIVERS\fallback.sys (Fallback)  .(.Conexant - Fallback driver.) - LEGACY_FALLBACK
O64 - Services: CurCS - 11/03/2008 - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (FLEXnet Licensing Service)  .(.Macrovision Europe Ltd. - Activation Licensing Service.) - LEGACY_FLEXNET_LICENSING_SERVIC
O64 - Services: CurCS - 24/06/2001 - C:\WINDOWS\system32\DRIVERS\fsksnt.sys (Fsks)  .(.Conexant - FSKsNT driver.) - LEGACY_FSKS
O64 - Services: CurCS - 03/04/1996 - C:\WINDOWS\system32\giveio.sys - giveio (giveio)  .(...) - LEGACY_GIVEIO
O64 - Services: CurCS - 14/10/2010 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE
O64 - Services: CurCS - 25/09/2011 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (gusvc)  .(.Google - gusvc.) - LEGACY_GUSVC
O64 - Services: CurCS - 14/11/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe (IDriverT)  .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT
O64 - Services: CurCS - 23/06/2009 - C:\Program Files\CPUID\PC Wizard 2009\Data\pcwizntl.exe (jQYRuK)  .(.CPUID - PC Wizard NTLM Password Library.) - LEGACY_JQYRUK
O64 - Services: CurCS - 24/06/2001 - C:\WINDOWS\system32\DRIVERS\k56nt.sys (K56)  .(.Conexant - K56NT driver.) - LEGACY_K56
O64 - Services: CurCS - 17/02/2006 - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (LightScribeService)  .(.Hewlett-Packard Company - Pas de description.) - LEGACY_LIGHTSCRIBESERVICE
O64 - Services: CurCS - 04/08/2003 - C:\WINDOWS\system32\PCANDIS5.sys (PCANDIS5)  .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5
O64 - Services: CurCS - 09/08/2007 - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.exe (Pml Driver HPZ12)  .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12
O64 - Services: CurCS - ??\??\???? -  (RpcSs)  .(. - .) - LEGACY_RPCSS
O64 - Services: CurCS - 13/11/2007 - C:\WINDOWS\system32\DRIVERS\secdrv.sys (Secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 24/06/2001 - C:\WINDOWS\system32\DRIVERS\faxnt.sys (SoftFax)  .(.Conexant - FaxNT driver.) - LEGACY_SOFTFAX
O64 - Services: CurCS - 18/03/2011 - C:\WINDOWS\system32\speedfan.sys (speedfan)  .(.Almico Software - SpeedFan x32 Driver.) - LEGACY_SPEEDFAN
O64 - Services: CurCS - ??\??\???? -  (TermService)  .(. - .) - LEGACY_TERMSERVICE
O64 - Services: CurCS - 13/09/2009 - C:\WINDOWS\system32\DRIVERS\tifsfilt.sys (tifsfilter)  .(.Acronis - Acronis True Image File System Filter.) - LEGACY_TIFSFILTER
O64 - Services: CurCS - 24/06/2001 - C:\WINDOWS\system32\DRIVERS\tonesnt.sys (Tones)  .(.Conexant - TonesNT driver.) - LEGACY_TONES
O64 - Services: CurCS - 16/07/2001 - C:\WINDOWS\system32\DRIVERS\v124nt.sys (V124)  .(.Conexant Systems - V124NT driver.) - LEGACY_V124
O64 - Services: CurCS - 27/12/2002 - C:\WINDOWS\system32\DRIVERS\viaagp1.sys (viaagp)  .(.VIA Technologies, Inc. - VIA NT AGP Filter.) - LEGACY_VIAAGP
O64 - Services: CurCS - 18/12/2001 - C:\WINDOWS\system32\Drivers\VIAPFD.sys (VIAPFD)  .(.VIA Technologies. Inc. - VIA PFD driver.) - LEGACY_VIAPFD
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\svchost.exe (WebClient)  .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\monique\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <Google Chrome.monique> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\monique\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O68 - StartMenuInternet: <MSN Explorer> <>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - msn.) -- C:\Program Files\MSN\MSNCoreFiles\MSN6.exe
O68 - StartMenuInternet: <Orange Web> <>[HKLM\..\Shell\open\Command] (.Not Key.)
O68 - StartMenuInternet: <Wanadoo Web> <>[HKLM\..\Shell\open\Command] (.Not Key.)
O68 - StartMenuInternet: <WOOBrowser.exe> <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {1F8445EE-A477-4D51-9DA1-1C7806782541} - (ixquick.com) - http://eu.ixquick.com
O69 - SBI: SearchScopes [HKCU] {616571FB-1EC7-4BAF-B8D5-112BB62D0EE2} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {E6B7D6F8-4850-4948-9C60-3B6B0428028F} - (PC Astuces) - http://www.pcastuces.com
O69 - SBI: SearchScopes [HKCU] {ED02B264-F7EF-471B-841F-897D6CE257CF} - (médiadico) - http://dictionnaire.mediadico.com
O69 - SBI: SearchScopes [HKCU] {FC6B2803-2C40-4A98-9A8F-67983A9C18BB} - (Yahoo! Search) - http://fr.search.yahoo.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\system32\appmgmts.dll   [0]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll   [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll   [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll   [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll   [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll   [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll   [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\System32\es.dll   [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\hidserv.dll   [0]
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\system32\irmon.dll   [29184]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll   [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll   [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll   [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll   [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll   [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll   [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll   [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll   [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll   [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll   [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll   [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\System32\srsvc.dll   [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll   [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll   [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll   [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll   [483840]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [145408]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Service Terminal Server.) -- C:\WINDOWS\system32\termsrv.dll   [297984]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll   [6656]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll   [409088]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll   [38400]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll   [129024]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll   [80896]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll   [27136]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll   [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [61440]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.CBF470B77B2DB2F25C56E05CE391F18A] [SPRF][09/08/2009] (.Avanquest Software - IElevator Class Container.) -- C:\Documents and Settings\All Users\Application Data\hpe79.dll   [148736]
[MD5.971E0537B7F8CEE87BF083AB603EFDAD] [SPRF][11/10/2008] (...) -- C:\Documents and Settings\All Users\Application Data\vlc-0.9.4-win32.exe   [14566424]
[MD5.01881E0D0FC1A483B55D483ADE2C84E0] [SPRF][24/08/2007] (...) -- C:\Documents and Settings\M Bertin\Local Settings\Application Data\fusioncache.dat   [131]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll   [32]
[MD5.298068536300DA6DC163E394797A7C50] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\bdupd.dll   [118784]
[MD5.1CAB87DE6638846FBF51F32B5D95E482] [SPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll   [53248]
[MD5.18075B2C9F0F300BEE209744A8BEC353] [SPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll   [32]
[MD5.8DD08EBA7A663A1E8D9425DFC0B41D32] [SPRF][09/01/2004] (.RealNetworks, Inc. - RdxIE Module.) -- C:\WINDOWS\Downloaded Program Files\RdxIE.dll   [524445]
~ Scan Files in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : v2.10682 - (12/02/2013)
Clés trouvées (Keys found) : 10
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Classes\CLSID\{35b8892d-c3fb-4d88-990d-31db2ebd72bd}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}]   =>Adware.RecordNRip
[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}]   =>Adware.RecordNRip
[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}]   =>Adware.RecordNRip
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]   =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]   =>Toolbar.Agent
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSISERVER]   =>Toolbar.Kiwee
[HKLM\SoftwareCrystal Dew World\OpenCandy]   =>Adware.OpenCandy
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC]   =>Adware.Boxore^
~ Scan Additionnel in 00mn 16s



---\\ Recherche détournement de DNS routeur (O89) (None)

---\\ Product Upgrade Codes (O90)
O90 - PUC: "000021090200C0400000000000F01FEC" . (.Module de compatibilité pour Microsoft Office System 2007.) -- C:\WINDOWS\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
O90 - PUC: "057978BEDBCC3104FB5D20494DADB50D" . (.Apple Application Support.) -- C:\WINDOWS\Installer\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}\WinInstall.ico
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\WINDOWS\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "445E44DF0D7EABD4F90AA81E1A033009" . (.Windows Live installer.) -- C:\WINDOWS\Installer\{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}\WindowsLiveSetup.ico
O90 - PUC: "46B5A9879DD95AB419A50FCFA0B1B7EF" . (.Apple Software Update.) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\Installer.ico
O90 - PUC: "66E7AC201DA19ED4ABE9680AEE0B917C" . (.Extension Système de Microsoft Money.) -- C:\WINDOWS\Installer\{02CA7E66-1AD1-4DE9-BA9E-86A0EEB019C7}\MnyIco.exe
O90 - PUC: "68AB67CA7DA73301B744AA0100000010" . (.Adobe Reader X (10.1.5).) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "68AB67CA7DA746454382090000000040" . (.Spelling Dictionaries Support For Adobe Reader 9.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-5464-3428-900000000004}\ARPPRODUCTICON.exe
O90 - PUC: "6DDBBD125A396234A9409C5A9C415820" . (.Norton PartitionMagic.) -- C:\WINDOWS\Installer\{21DBBDD6-93A5-4326-9A04-C9A5C9148502}\ARPPRODUCTICON.exe
O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\WINDOWS\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
O90 - PUC: "7CC6113DCD423AC4C91E32EF8D639E2F" . (.Assistant de connexion Windows Live.) -- C:\WINDOWS\Installer\{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}\prodicon.ico
O90 - PUC: "812AF07A89569CA418D33695C7D50D86" . (.Galerie de photos Windows Live.) -- C:\WINDOWS\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe
O90 - PUC: "86DA14F42F9826243AC2F2070BF1ECE9" . (.Photorécit 3 pour Windows.) -- C:\WINDOWS\Installer\{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}\PhotoStory3_ICON
O90 - PUC: "890B46E081086524AB323C614AA39D0B" . (.QuickTime.) -- C:\WINDOWS\Installer\{0E64B098-8018-4256-BA23-C316A43AD9B0}\Installer.ico
O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\WINDOWS\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
O90 - PUC: "A33E2A10ADA81D241937F85641E959F2" . (.Microsoft Money.) -- C:\WINDOWS\Installer\{01A2E33A-8ADA-42D1-9173-8F65149E952F}\MnyIco.exe
O90 - PUC: "C040B11900063D11C8EF00054038389C" . (.Microsoft Word 2002.) -- C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\misc.exe,6
O90 - PUC: "C040FA0900063D11C8EF10054038389C" . (.Microsoft Office PowerPoint Viewer 2003.) -- C:\WINDOWS\Installer\{90AF040C-6000-11D3-8CFE-0150048383C9}\ppvwicon.exe,0
O90 - PUC: "D1944996194D1F84EAF11E971CFFCFF2" . (.HP Photosmart Essential.) -- C:\WINDOWS\Installer\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}\ARPPRODUCTICON.exe
O90 - PUC: "D9988C7307DFF18449AAF1B18067E522" . (.Acronis True Image Home.) -- C:\WINDOWS\Installer\{37C8899D-FD70-481F-94AA-1F1B08765E22}\product.ico
O90 - PUC: "E49D96A6965C45146934279ED4D1FDAD" . (.XPS Essentials Pack.) -- C:\WINDOWS\Installer\{6A69D94E-C569-4154-9643-72E94D1DDFDA}\RVIcon
O90 - PUC: "EC411D4643242C546BA0B2705D4AF827" . (.Microsoft Works 7.0.) -- C:\WINDOWS\Installer\{64D114CE-4234-45C2-B60A-2B07D5A48F72}\Win2Kico.exe
O90 - PUC: "F0DC1B6FD2BD66641A864C3609DAC8A4" . (.Complément Microsoft Word pour Microsoft Works Suite.) -- C:\WINDOWS\Installer\{F6B1CD0F-DB2D-4666-A168-C46390AD8C4A}\Win2Kico_WordAddin.exe
~ Scan Files in 00mn 00s



---\\ MyComputer Name Space (O92)
O92 - MNS: Dossiers Web - {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
~ Scan MNS in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 13/08/2010 660576 |  (AcrSch2Svc) . (.Acronis.) - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
SS - | Demand 09/08/2008 72704 |  (Adobe LM Service) . (.Adobe Systems.) - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
SS - | Demand 09/02/2013 251248 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 30/10/2012 44808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 01/06/2004 54784 |  (C-DillaCdaC11BA) . (.Macrovision.) - C:\WINDOWS\System32\drivers\CDAC11BA.exe
SS - | Demand 13/04/2008 225280 |  (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand 11/03/2008 654848 |  (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 14/10/2010 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 14/10/2010 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 25/09/2011 194104 |  (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SS - | Demand 14/11/2005 69632 |  (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
SS - | Demand 23/06/2009 22016 |  (jQYRuK) . (.CPUID.) - C:\Program Files\CPUID\PC Wizard 2009\Data\pcwizntl.exe
SR - | Auto 17/02/2006 73728 |  (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
SR - | Auto 09/08/2007 73728 |  (Pml Driver HPZ12) . (.HP.) - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.exe
~ Scan Services in 00mn 00s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by M Bertin at 12/02/2013 19:51:36

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaidexp.sys 
C:\WINDOWS\system32\drivers\viaidexp.sys VIA Technologies, Inc. VIA PCI IDE MINI Driver
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x89A86AB8]
3 CLASSPNP[0xF7657FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000070[0x89A8B9E8]
5 ACPI[0xF75AD620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x899FD940]
kernel: MBR read successfully
user & kernel MBR OK 
~ Scan MBR in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by M Bertin at 12/02/2013 19:51:38

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 04s



End of the scan (1779 lines in 02mn 53s)(0)