~ Rapport de ZHPDiag v2013.8.29.381 - Nicolas Coolman  (29/08/2013)
~ Lanc� par Kevin (29/08/2013 17:29:56)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Traduit par Nicolas Coolman
~ Etat de la version : 
~ Liste blanche : D�sactiv�e par l'utilisateur
~ El�vation des Privil�ges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 23.0.1 (Defaut)
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.2

---\\ Informations sur les produits Windows
~ Langage: Fran�ais
Windows 7 Ultimate Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : CB27T
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du syst�me
avast! Free Antivirus v8.0.1489.0
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W7

---\\ Logiciels d'optimisation du syst�me
CCleaner v4.02  =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer
Pando Media Booster v2.6.0.9
�Torrent v3.2.3.28705  =>P2P.�Torrent

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 25

---\\ Informations sur le syst�me
~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8183 MB (58% free)
System Restore: Activ� (Enable)
System drive C: has 447 GB (64%) free of 690 GB

---\\ Mode de connexion au syst�me
~ Computer Name: KEVIN-PC
~ User Name: Kevin
~ All Users Names: Kevin, fbwuser, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppData% : C:\Users\Kevin\AppData\Roaming\
~ %Desktop% : C:\Users\Kevin\Desktop\
~ %Favorites% : C:\Users\Kevin\Favorites\
~ %LocalAppData% : C:\Users\Kevin\AppData\Local\
~ %StartMenu% : C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enum�ration des unit�s disques
C:\ Hard drive, Flash drive, Thumb drive (Free 447 Go of 690 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 470 Go of 540 Go)
E:\ CD-ROM drive (Free 0 Go of 0 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)



---\\ Etat du Centre de S�curit� Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date
~ Security Center: 29 Scanned in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.5121DB613E10A46A3C5085B479026AA7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/01/2013 - 03:02:58.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/11/2010 - 04:25:07.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/158
~ Mes musiques (My Musics) : 13/326
~ Mes Videos (My Videos) : 1/21
~ Mes Favoris (My Favorites) : 1/26
~ Mes Documents (My Documents) : 1/1414
~ Mon Bureau (My Desktop) : 1/27306
~ Menu demarrer (Programs) : 1/79
~ Hidden Files:  Scanned in 00mn 18s



---\\ Processus lanc�s au d�marrage du syst�me
[MD5.B4CF3FB7E9B8EA69757541DCE6CA20ED] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [276376] [PID.2836]
[MD5.10E89F598469C60D8C87A8218089A87D] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Kevin\AppData\Local\Akamai\netsession_win.exe   [4489472] [PID.2556]
[MD5.FF786A74F62361A71AECDB8F8AC95D6F] - (.Somoto - FilesFrog.com Update Checker.) -- C:\Users\Kevin\AppData\Local\FilesFrog Update Checker\update_checker.exe   [201808] [PID.3112]  =>Adware.MegaSearch
[MD5.C156DE6EB37B6C5D6498DD87C23F3FA4] - (.SFR - Mediacenter Evolution.) -- C:\Program Files (x86)\SFR\Mediacenter Evolution\MediaCenter.exe   [2688368] [PID.3120]
[MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [4858968] [PID.3408]
[MD5.C6352C29C56077749CEEDD08680D347D] - (.Pas de propri�taire - BambooDock back-end application.) -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe   [646744] [PID.3548]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.3604]
[MD5.C0E392910782C2BB9A28C8538CC1E1A1] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [285240] [PID.3036]
[MD5.EA5B870671079786F335AC7C10846C4F] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe   [295584] [PID.1140]
[MD5.72EF708552059546B1AAA82E7AA59439] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [17304] [PID.7812]
[MD5.60B241EFB669D286C9BF636A0334B3BA] - (.Adobe Systems, Inc. - Adobe Flash Player 11.7 r700.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe   [1855880] [PID.7264]
[MD5.17DEEF93BDEA7B35EB8AE669887277B1] - (.The Document Foundation - LibreOffice Calc.) -- C:\Program Files (x86)\LibreOffice 3.6\program\scalc.exe   [58880] [PID.3620]
[MD5.58C817A1C259B23E1D5F1C7ECDFCAC9F] - (.The Document Foundation - LibreOffice 3.6.) -- C:\Program Files (x86)\LibreOffice 3.6\program\soffice.exe   [50688] [PID.5664]
[MD5.DCB89D70CDDE23A1670833586F768CDD] - (.The Document Foundation - LibreOffice 3.6.) -- C:\Program Files (x86)\LibreOffice 3.6\program\soffice.bin   [678912] [PID.3628]
[MD5.67759F6AE93DE8AE63B1934D3667A7FC] - (.PremiumSoft CyberTech Ltd. - Navicat Premium.) -- C:\Program Files (x86)\PremiumSoft\Navicat Premium\navicat.exe   [21629256] [PID.3680]
[MD5.C512DB1EA17AA1AACD450CD3477CB5E4] - (.Moustikk - D�compression et recompression des packs Me.) -- C:\moustikk-tools\Metin2 Repacker\Metin2 Repacker.exe   [1043639] [PID.1996]
[MD5.663392E75FD426EA94C75CDBF1916251] - (.Aestan Software - Aestan Tray Menu.) -- C:\wamp\wampmanager.exe   [1169920] [PID.6944]
[MD5.B141F8F8B0FF37FFC51F9B71EE7A641B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [19875432] [PID.5836]
[MD5.2155B117C832BF1B89A764D7EA9EC949] - (.Microsoft Corporation - Virtual PC 2007.) -- C:\Program Files (x86)\Microsoft Virtual PC\Virtual PC.exe   [4478320] [PID.8340]
[MD5.BDEA4833A70C6EC7C23A28D72BF50895] - (...) -- C:\Users\Kevin\Desktop\G�n�rateur de query (b�ta).exe   [335519] [PID.5532]
[MD5.0A409A5BD57C2F875FCCECB0531B1ACD] - (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) -- C:\Program Files (x86)\Notepad++\notepad++.exe   [1744896] [PID.3540]
[MD5.27502022B75551385957D223DD9CB72B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7842304] [PID.6424]
[MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [46808] [PID.1340]
[MD5.2086B10F206F150FBF55078F13A7AA42] - (...) -- C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe   [1009840] [PID.1828]
[MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65192] [PID.1600]
[MD5.5C8BC8A28798FD010E7ABC4E0D588CAA] - (.Nero AG - NService Application.) -- C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe   [87368] [PID.468]
[MD5.0AF89452A8CE3928168F4E5B2208C68B] - (...) -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe   [86016] [PID.1292]
[MD5.3CAE2BBC86FCF7F94C9696994AF30386] - (.Pas de propri�taire - PassThruSvr Application.) -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe   [167424] [PID.1844]
[MD5.3A2E85F7D90D15460C337CE80C2E3B29] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe   [76888] [PID.2100]
[MD5.402794A75A899E296AB3EDEC4ECCB9A8] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe   [4153184] [PID.2192]
[MD5.B3009DCDBCC5EFA49FA52562E9860E3C] - (.MAGIX AG - Verzeichnis�berwachung und Hilfsaufgaben f�.) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe   [1840128] [PID.4496]
[MD5.777788D9B63CCEEEF2DB353BA4EDD454] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [14904] [PID.4052]
~ Processes Running:  Scanned in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\vb85ksdo.default\prefs.js
C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\vb85ksdo.default\user.js
M3 - MFPP: Plugins - [Kevin] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\filebulldogtb.xml
M0 - MFSP: prefs.js [Kevin - vb85ksdo.default] chrome://fastdial/content/fastdial.html
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\battlefieldplay4free@ea.com] [] Battlefield Play4Free v1.0.96.0 (..)
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\cryenginebrowserplugin@crytek.com] [] GFACE Experience Plugin v0.35.0 (..)
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\fastdial@telega.phpnet.us] [fastdial] Fast Dial v4.10 (..)
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\foxyproxy@eric.h.jung] [] FoxyProxy Basic v3.2.1 (..)  =>Hijacker.Proxy
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\support@lastpass.com] [] LastPass v2.0.20 (..)
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\{91aa5abe-9de4-4347-b7b5-322c38dd9271}] [] Clippings v4.0.1 (..)
M2 - MFEP: prefs.js [Kevin - vb85ksdo.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20130515 (..)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win64 # 6.5.0.3.) -- C:\Program Files\ma-config.com\x64\nphardwaredetection.dll
P2 - FPN: [HKLM] [@wacom.com/wtPlugin,version=2.1.0.2] - (.Wacom - Plugin for Wacom tablets..) -- C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.0.1f2.) -- C:\Users\Kevin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
P2 - FPN: [HKCU] [wacom.com/WacomTabletPlugin] - (.Wacom - Plugin for Wacom tablets..) -- C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll
~ Firefox Browser: 16 Scanned in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 14 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
O1 - Hosts: 127.0.0.2 www.mefeedia.com
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 43



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft� Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O2 - BHO: (no name) [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} Cl� orpheline
O2 - BHO: (no name) [64Bits] - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Cl� orpheline
~ BHO: 10 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar: QuickShare Widget [64Bits] - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll  =>PUP.QuickShare
~ Toolbar:  Scanned in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe 
O4 - HKLM\..\Run: [Launch LCore] . (.Logitech Inc. - Logitech Gaming Framework.) -- C:\Program Files\Logitech Gaming Software\LCore.exe 
O4 - HKCU\..\Run: [AdobeBridge] Cl� orpheline 
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Kevin\AppData\Local\Akamai\netsession_win.exe 
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe� Flash� Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst� Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-2559056687-343696876-2951394358-1000\..\Run: [AdobeBridge] Cl� orpheline 
O4 - HKUS\S-1-5-21-2559056687-343696876-2951394358-1000\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Kevin\AppData\Local\Akamai\netsession_win.exe 
O4 - HKUS\S-1-5-21-2559056687-343696876-2951394358-1000\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe� Flash� Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe 
~ Application:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Microsoft Virtual PC.lnk . (.Microsoft Corporation - Virtual PC 2007.)  -- C:\Program Files (x86)\Microsoft Virtual PC\Virtual PC.exe 
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\TaskBar: Navicat Premium.lnk . (.PremiumSoft CyberTech Ltd. - Navicat Premium.)  -- C:\Program Files (x86)\PremiumSoft\Navicat Premium\navicat.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\TaskBar: WinSCP.lnk . (.Martin Prikryl - WinSCP: SFTP, FTP and SCP client.)  -- D:\Serveur_PrePa_d�di�\2012\WinScp\WinSCP.exe 
O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Microsoft Virtual PC.lnk . (.Microsoft Corporation - Virtual PC 2007.)  -- C:\Program Files (x86)\Microsoft Virtual PC\Virtual PC.exe 
O4 - GS\QuickLaunch: CodeBlocks.lnk . (...)  -- C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\QuickLaunch: Cube World Launcher.lnk . (...)  -- C:\Users\Kevin\Desktop\Cube World\Cube World Launcher.exe (.not file.)
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: TYPSoft FTP Server.lnk . (.TYPSoft - TYPSoft FTP Server.)  -- C:\TYPSoft FTP Server\ftpserv.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
~ Global Startup:  Scanned in 00mn 00s



---\\ Invisibilit� de l'ic�ne d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d�affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d�espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft� Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Winsock: 8 Scanned in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance:  Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D0C3601-2B5F-4A66-AA34-A2989E3252B0}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{2D0C3601-2B5F-4A66-AA34-A2989E3252B0}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2D0C3601-2B5F-4A66-AA34-A2989E3252B0}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Titr_HJT34=Protocole additionnel (O18)
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) -- 
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Cl� de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: Acunetix WVS Scheduler v8 (AcuWVSSchedulerv8) . (...) - C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service:  (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: FABS - Helping agent for MAGIX media dat (Fabs) . (.MAGIX AG - Verzeichnis�berwachung und Hilfsaufgaben f�.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: HTCMonitorService (HTCMonitorService) . (.Nero AG - NService Application.) - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: mental ray 3.9 Satellite for Autodesk 3d (mi-raysat_3dsmax2012_64) . (...) - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) . (.Pas de propri�taire - PassThruSvr Application.) - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) . (.TeamViewer GmbH - TeamViewer 8.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: Wacom Consumer Service (WTabletServiceCon) . (.Wacom Technology, Corp. - Tablet Service.) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
~ Services: 14 Scanned in 00mn 04s



---\\ Enum�ration Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enum�re les donn�es de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sdnclean64.exe) - File not found
~ BEX: 2 Scanned in 00mn 00s



---\\ T�ches planifi�es en automatique (O39)
[MD5.1315C5C5C54CE2AA37A155F97027DB59] [APT] [AdobeAAMUpdater-1.0-Kevin-PC-Kevin] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe   [446392]
[MD5.5CE2C1433B9B634591F0A1C4C1203A0B] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [251784]
[MD5.518545E8CBD79EBF42891A6066578118] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe   [3591960]  =>Piriform Ltd
[MD5.00000000000000000000000000000000] [APT] [Veille] (...) -- C:\Users\Kevin\Desktop\Nouveau document texte.bat"  (.not file.)   [0]
[MD5.B4CF3FB7E9B8EA69757541DCE6CA20ED] [APT] [{91F1A0DE-FA29-44C2-8B55-1E35E82BCFC6}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe   [276376]
~ Scheduled Task: 7 Scanned in 00mn 04s



---\\ Composants install�s (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d�IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 11 Scanned in 00mn 00s



---\\ Pilotes lanc�s au d�marrage du syst�me (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-syst�me de mise en m�moire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vmm) . (.Microsoft Corporation - Virtual Machine Monitor.) - C:\Windows\system32\Pilotes\vmm.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 69 Scanned in 00mn 01s



---\\ Logiciels install�s (O42)
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5E03A267-415E-5383-FA8F-3CE4145663B9}
O42 - Logiciel: Actionaz 3.0.0 (32 bits) - (.Actionaz.org.) [HKLM][64Bits] -- {968D7F40-0B23-457D-AD67-0F7C0012EF1E}_is1
O42 - Logiciel: Acunetix Web Vulnerability Scanner 8.0 - (.Acunetix.) [HKLM][64Bits] -- {DBD76811-6CF0-4A15-9436-B779C3A36929}_is1
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5AF4B3C4-C393-48D7-AC7E-8E7615579548}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C8773FDB-D0DB-BE52-D536-F48F9886B57B}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1}
O42 - Logiciel: Adobe Photoshop CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}
O42 - Logiciel: Adobe Premiere Pro CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7176B973-6011-43C1-AEBC-2D73FE7C6982}
O42 - Logiciel: Adobe Reader XI (11.0.01) - Fran�ais - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Aeria Ignite - (.Aeria Games & Entertainment.) [HKLM][64Bits] -- Aeria Ignite 1.13.3296
O42 - Logiciel: Aeria Ignite - (.Aeria Games & Entertainment.) [HKLM][64Bits] -- {22A72F06-FA80-42CB-9A8C-46C6AE53425C}
O42 - Logiciel: Age of Wulin - (.gPotato.) [HKLM][64Bits] -- {A1CD76EB-30CA-45EE-9946-5FC20BA62012}
O42 - Logiciel: Akamai NetSession Interface - (.Akamai Technologies, Inc.) [HKCU][64Bits] -- Akamai
O42 - Logiciel: Alliance of Valiant Arms FR - (...) [HKLM][64Bits] -- Alliance of Valiant Arms FR
O42 - Logiciel: Audacity 2.0.3 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1
O42 - Logiciel: AutoIt v3.3.8.1 - (.AutoIt Team.) [HKLM][64Bits] -- AutoItv3
O42 - Logiciel: Autodesk 3ds Max 2012 64-bit - French - (.Autodesk.) [HKLM][64Bits] -- Autodesk 3ds Max 2012 64-bit - French
O42 - Logiciel: Autodesk Backburner 2012.0.0 - (.Autodesk, Inc..) [HKLM][64Bits] -- {3D347E6D-5A03-4342-B5BA-6A771885F379}
O42 - Logiciel: Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit - (.Autodesk.) [HKLM][64Bits] -- Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit
O42 - Logiciel: Autodesk Material Library 2012 - (.Autodesk.) [HKLM][64Bits] -- {8F0837C2-EE09-4903-88F3-1976FE7FFF4E}
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2012 - (.Autodesk.) [HKLM][64Bits] -- {65420DC9-306E-4371-905F-F4DC3B418E52}
O42 - Logiciel: Autodesk Material Library Medium Resolution Image Library 2012 - (.Autodesk.) [HKLM][64Bits] -- {B5751715-EC10-43D9-8C95-62E1368433EF}
O42 - Logiciel: Bamboo Dock - (.Wacom Co., Ltd..) [HKLM][64Bits] -- Bamboo Dock
O42 - Logiciel: Bamboo Dock - (.Wacom Europe GmbH.) [HKLM][64Bits] -- wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
O42 - Logiciel: Bamboo Dock - (.Wacom Europe GmbH.) [HKLM][64Bits] -- {90DFD61B-8224-00C6-3D69-A983B60A394E}
O42 - Logiciel: Battlefield 1942� - (.Electronic Arts.) [HKLM][64Bits] -- {5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}
O42 - Logiciel: Battlefield Play4Free - (.EA Digital illusions.) [HKCU][64Bits] -- {87686C21-8A15-4b4d-A3F1-11141D9BE094}
O42 - Logiciel: Bundled software uninstaller - (...) [HKLM][64Bits] -- bi_uninstaller
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner  =>Piriform Ltd
O42 - Logiciel: CWAquilaTV - (...) [HKLM][64Bits] -- CWAquilaTV
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}
O42 - Logiciel: Cheat Engine 6.2 - (.Dark Byte.) [HKLM][64Bits] -- Cheat Engine 6.2_is1
O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks
O42 - Logiciel: Compl�ment Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Composite 2012 64-bit - (.Autodesk.) [HKLM][64Bits] -- {EA234BC3-39FE-4734-B72F-076086889F6D}
O42 - Logiciel: Counter-Strike: Global Offensive - (.Valve.) [HKLM][64Bits] -- Steam App 730
O42 - Logiciel: Cross Fire En - (.Z8Games.com.) [HKLM][64Bits] -- Cross Fire_is1
O42 - Logiciel: Crossfire Europe - (.SG INTERACTIVE.) [HKLM][64Bits] -- Crossfire Europe
O42 - Logiciel: Cube World version 0.0.1 - (.Picroma.) [HKLM][64Bits] -- {D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: DDS Viewer - (.IdeaMK.) [HKLM][64Bits] -- {707333E0-C796-4E2D-B0DA-5A429706C361}_is1
O42 - Logiciel: FileZilla Client 3.6.0.2 - (.FileZilla Project.) [HKCU][64Bits] -- FileZilla Client
O42 - Logiciel: FilesFrog Update Checker - (...) [HKLM][64Bits] -- FilesFrog Update Checker  =>Adware.MegaSearch
O42 - Logiciel: Firebird SQL Server - MAGIX Edition - (.MAGIX AG.) [HKLM][64Bits] -- {6C5F8503-55D2-4398-858C-362B7A7AF51C}
O42 - Logiciel: Fraps (remove only) - (...) [HKLM][64Bits] -- Fraps
O42 - Logiciel: GSview 4.9 - (...) [HKLM][64Bits] -- GSview 4.9
O42 - Logiciel: GTactix - (.default.) [HKLM][64Bits] -- {046ED2B7-14D5-4F2C-A275-09D54CEFE757}
O42 - Logiciel: Ghost Recon Online (EU) - (.Ubisoft.) [HKCU][64Bits] -- d8be6c3f847d7d92
O42 - Logiciel: Granny Viewer 2.8.46.0 - (.RAD Game Tools, Inc..) [HKLM][64Bits] -- Granny Viewer_is1
O42 - Logiciel: HTC Driver Installer - (.HTC Corporation.) [HKLM][64Bits] -- {4CEEE5D0-F905-4688-B9F9-ECC710507796}
O42 - Logiciel: HTC Sync Manager - (.HTC.) [HKLM][64Bits] -- {5002C5B1-B688-474A-AB3A-9B65DBD38FF9}
O42 - Logiciel: Hawken - (.Meteor Entertainment.) [HKCU][64Bits] -- Hawken
O42 - Logiciel: HexEdit - (.Expert Commercial Software Pty Ltd.) [HKLM][64Bits] -- {083EF76E-0760-4D7A-9508-0B88A3AF1889}
O42 - Logiciel: I Am Alive - (.Ubisoft.) [HKLM][64Bits] -- InstallShield_{62952508-8C6F-4D31-9802-099FC67B41C3}
O42 - Logiciel: I Am Alive - (.Ubisoft.) [HKLM][64Bits] -- {62952508-8C6F-4D31-9802-099FC67B41C3}
O42 - Logiciel: IPTInstaller - (.HTC.) [HKLM][64Bits] -- {08208143-777D-4A06-BB54-71BF0AD1BB70}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LastPass(D�sinstaller uniquement) - (.LastPass.) [HKLM][64Bits] -- LastPass
O42 - Logiciel: LibreOffice 3.6 - (.The Document Foundation.) [HKLM][64Bits] -- {60B2F25C-22CB-4CD9-9168-8C63708DC1A1}
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- LogMeIn Hamachi
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM][64Bits] -- {0ACC2993-2058-4BE7-9A92-9DCDAA9B3412}
O42 - Logiciel: Logitech - Assistant pour jeux vid�os 8.40 - (.Logitech Inc..) [HKLM][64Bits] -- Logitech Gaming Software
O42 - Logiciel: Logitech Gaming Software - (.Logitech Inc..) [HKLM][64Bits] -- {690285C2-2481-44FB-8402-162EA970A6DD}
O42 - Logiciel: MAGIX Contenu et Soundpools - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_GlobalContent
O42 - Logiciel: MAGIX Music Maker 2013 Premium (Synth�tiseurs et effets) - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_{24ECE0D9-4579-4A8C-A332-BF5C945C6302}
O42 - Logiciel: MAGIX Music Maker 2013 Premium (Synth�tiseurs et effets) - (.MAGIX AG.) [HKLM][64Bits] -- {24ECE0D9-4579-4A8C-A332-BF5C945C6302}
O42 - Logiciel: MAGIX Music Maker 2013 Premium - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_{A22E85ED-89D4-42E4-8A23-9A0824C7DFC2}
O42 - Logiciel: MAGIX Music Maker 2013 Premium - (.MAGIX AG.) [HKLM][64Bits] -- {A22E85ED-89D4-42E4-8A23-9A0824C7DFC2}
O42 - Logiciel: MAGIX Music Maker 2013 Premium Soundpools - (.MAGIX AG.) [HKLM][64Bits] -- {E9C22D9E-F51D-4CE5-959C-2144D8972787}
O42 - Logiciel: MAGIX Music Maker 2013 Soundpools - (.MAGIX AG.) [HKLM][64Bits] -- {BF4C9E0E-A720-46C6-9C23-1E77B17355FB}
O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX AG.) [HKLM][64Bits] -- MAGIX_{AFB707BB-B4A7-4E5C-9831-E8EFF5A59D17}
O42 - Logiciel: MAGIX Speed burnR (MSI) - (.MAGIX AG.) [HKLM][64Bits] -- {AFB707BB-B4A7-4E5C-9831-E8EFF5A59D17}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC}
O42 - Logiciel: Macromedia Extension Manager - (.Macromedia, Inc..) [HKLM][64Bits] -- {5546CDB5-2CE2-498B-B059-5B3BF81FC41F}
O42 - Logiciel: Macromedia Flash 8 - (.Macromedia.) [HKLM][64Bits] -- {2BD5C305-1B27-4D41-B690-7A61172D2FEB}
O42 - Logiciel: Macromedia Flash 8 Video Encoder - (.Macromedia.) [HKLM][64Bits] -- {8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {50816F92-1652-4A7C-B9BC-48F682742C4B}
O42 - Logiciel: Metin2 - (.Gameforge 4D GmbH.) [HKLM][64Bits] -- Metin2_is1
O42 - Logiciel: Metin2 Repacker - (...) [HKCU][64Bits] -- Metin2 Repacker
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Virtual PC 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8A7CAA24-7B23-410B-A7C3-F994B0944160}
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 1.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Help Viewer 1.0 Language Pack - FRA
O42 - Logiciel: MorphVOX Junior - (.Screaming Bee.) [HKLM][64Bits] -- {402ED8C0-824E-48A2-AB07-C8820E9CD8E9}
O42 - Logiciel: Mozilla Firefox 23.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 23.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Mumble 1.2.3 - (.Thorvald Natvig.) [HKLM][64Bits] -- {E1019541-10A2-464F-A23E-A4F23DA65160}
O42 - Logiciel: NVIDIA Photoshop Plug-ins 64 bit - (...) [HKLM][64Bits] -- {5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}
O42 - Logiciel: No-IP DUC - (.Vitalwerks Internet Solutions LLC.) [HKLM][64Bits] -- NoIPDUC
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin
O42 - Logiciel: PDF Settings CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}
O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM][64Bits] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}
O42 - Logiciel: Paradox Password by Thegrideon Software - (.Thegrideon Software.) [HKLM][64Bits] -- Paradox Password
O42 - Logiciel: PremiumSoft Navicat Premium 10.0 - (.PremiumSoft CyberTech Ltd..) [HKLM][64Bits] -- PremiumSoft Navicat Premium_is1
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: QuickShare - (.Linkury Inc..) [HKLM][64Bits] -- {6C5E8E06-AE16-48A4-866A-575745B3233C}  =>PUP.QuickShare
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek HDMI Audio Driver for ATI - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5449FB4F-1802-4D5B-A6D8-087DB1142147}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Resource Hacker Version 3.6.0 - (...) [HKLM][64Bits] -- ResourceHacker_is1
O42 - Logiciel: S4 League_EU - (...) [HKLM][64Bits] -- {63E7D20C-4B1C-49A2-9D6D-128B1CAB954E}
O42 - Logiciel: SFR - Mediacenter Evolution - (.SFR.) [HKLM][64Bits] -- SFR_Mediacenter Evolution
O42 - Logiciel: Skype� 6.6 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: TERA - (.Gameforge Productions GmbH.) [HKLM][64Bits] -- {A2S166A0-F031-4E27-A057-C69733219434}_is1
O42 - Logiciel: TYPSoft FTP Server - (.TYPSoft.) [HKLM][64Bits] -- TYPSoft FTP Server_is1
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKCU][64Bits] -- TeamSpeak 3 Client
O42 - Logiciel: TeamViewer 8 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 8
O42 - Logiciel: Tom Clancy's Ghost Recon Future Soldier - (.Ubisoft.) [HKLM][64Bits] -- {6D87CAD9-9B94-4421-A439-B25F8DE14575}
O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM][64Bits] -- {888F1505-C2B3-4FDE-835D-36353EBD4754}
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer
O42 - Logiciel: Unreal Development Kit: 2013-02 - (.Epic Games, Inc..) [HKLM][64Bits] -- UDK-39871aa4-f1eb-4e54-917f-dc4eabc81934
O42 - Logiciel: Update Manager for SweetPacks 1.1 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {EA8FA6BE-29BE-4AF2-9352-841F83215EB0}  =>PUP.SweetIM
O42 - Logiciel: VLC media player 2.0.6 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: ValMondial-Renaissance version 3.0 - (.ValMondial-Renaissance.) [HKLM][64Bits] -- {041C8892-63D0-4F49-8788-0A8F08382727}_is1
O42 - Logiciel: ValMondial-Rennaissance version 3.0 - (.ValMondial-Rennaissance.) [HKLM][64Bits] -- {678A844D-79DD-454E-AA7F-B9B99A4138C2}_is1
O42 - Logiciel: Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {D60023FA-3DF1-4537-93DD-13024CC4E366}
O42 - Logiciel: Vita Rock Drums - (.MAGIX AG.) [HKLM][64Bits] -- {6F7FC678-A676-4802-B52A-AB2D5E26A8C9}
O42 - Logiciel: Wacom - (.Wacom Technology Corp..) [HKLM][64Bits] -- Pen Tablet Driver
O42 - Logiciel: WampServer 2.4 - (.Herv� Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1
O42 - Logiciel: WebTablet FB Plugin 32 bit - (.Wacom Technology Corp..) [HKLM][64Bits] -- Wacom WebTabletPlugin for Internet Explorer and Netscape
O42 - Logiciel: WebTablet FB Plugin 64 bit - (.Wacom Technology Corp..) [HKLM][64Bits] -- Wacom WebTabletPlugin for Internet Explorer and Netscape
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: World of Tanks - (.Wargaming.net.) [HKLM][64Bits] -- {1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1
O42 - Logiciel: XSplit - (.SplitMediaLabs.) [HKLM][64Bits] -- {55EB2692-FAFE-4352-AACD-AB9379E57F08}
O42 - Logiciel: avast! Free Antivirus v8.0.1489.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: bl - (.Your Company Name.) [HKLM][64Bits] -- {2A075BB4-E976-4278-BF3F-E5C6945D84C0}
O42 - Logiciel: osu! - (.peppy.) [HKLM][64Bits] -- {C3592426-531E-4110-911D-BFECE2CE284C}
O42 - Logiciel: ph - (.Your Company Name.) [HKLM][64Bits] -- {185F9795-9663-4F13-9EF9-307A282ADB5A}
O42 - Logiciel: �Torrent - (.BitTorrent Inc..) [HKLM][64Bits] -- uTorrent  =>P2P.BitTorrent
~ Logic: 231 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\4PlayFun Entertainment Group]
[HKCU\Software\ATI]
[HKCU\Software\Actionaz]
[HKCU\Software\Acunetix]
[HKCU\Software\Adobe]
[HKCU\Software\Aeria Games]
[HKCU\Software\AhnLab]
[HKCU\Software\AnalogX]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\LastPass]
[HKCU\Software\AppDataLow\Software\PriceGong]  =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow]
[HKCU\Software\Audacity]
[HKCU\Software\AutoIt v3]
[HKCU\Software\Autodesk]
[HKCU\Software\Avast Software]
[HKCU\Software\BI]
[HKCU\Software\Battlefield 1942]
[HKCU\Software\BitTorrent]  =>P2P.BitTorrent
[HKCU\Software\Bohemia Interactive Studio]
[HKCU\Software\Bugsplat]
[HKCU\Software\Burda]
[HKCU\Software\Caphyon]
[HKCU\Software\Cheat Engine]
[HKCU\Software\ClassesB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Computer]
[HKCU\Software\Conduit]  =>Toolbar.Conduit
[HKCU\Software\DT Soft]
[HKCU\Software\Double Sigma Programming]
[HKCU\Software\ECSoftware]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Epic Games]
[HKCU\Software\Fraps3]
[HKCU\Software\Google]
[HKCU\Software\Green]
[HKCU\Software\HTC]
[HKCU\Software\HmelyoffLabs]
[HKCU\Software\IM Providers]
[HKCU\Software\InstallCore]  =>Adware.InstallCore
[HKCU\Software\JavaSoft]
[HKCU\Software\LastPass]
[HKCU\Software\Leadertech]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\MAGIX AG]
[HKCU\Software\MAGIX]
[HKCU\Software\MC4D]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix Development]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MeteorEntertainment]
[HKCU\Software\Mootools]
[HKCU\Software\Motion Analysis]
[HKCU\Software\Moustikk]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\Neuf]
[HKCU\Software\ORL]
[HKCU\Software\PACE Anti-Piracy]
[HKCU\Software\PC SOFT]
[HKCU\Software\Pando Networks]
[HKCU\Software\Pipix]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerPack]
[HKCU\Software\PremiumSoft]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Screaming Bee]
[HKCU\Software\Skype]
[HKCU\Software\SmartbarBackup]  =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog]  =>Hijacker.SmartBar
[HKCU\Software\Smartbar]  =>Hijacker.SmartBar
[HKCU\Software\SnailGame]
[HKCU\Software\Somoto]  =>Adware.MegaSearch
[HKCU\Software\SplitMediaLabs]
[HKCU\Software\SweetIM]  =>PUP.SweetIM
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\TeleCharger]
[HKCU\Software\The Document Foundation]
[HKCU\Software\Thegrideon Software]
[HKCU\Software\Trolltech]
[HKCU\Software\Tunngle.net]
[HKCU\Software\Ubisoft]
[HKCU\Software\Unity]
[HKCU\Software\UpdateStar]
[HKCU\Software\Valve]
[HKCU\Software\Vitalwerks]
[HKCU\Software\Wargaming.net]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winject]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\cybelsoft]
[HKCU\Software\gPotato]
[HKCU\Software\neowiz]
[HKCU\Software\osu!]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Adobe]
[HKLM\Software\Alienware]
[HKLM\Software\Autodesk]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\FileZilla 3]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Knowles]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Minnetonka Audio Software]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Wacom]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Acunetix]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AutoIt v3]
[HKLM\Software\Wow6432Node\Autodesk]
[HKLM\Software\Wow6432Node\Bohemia Interactive Studio]
[HKLM\Software\Wow6432Node\Bohemia Interactive]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\ECSoftware]
[HKLM\Software\Wow6432Node\Electronic Arts]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\FileZilla 3]
[HKLM\Software\Wow6432Node\Gameforge]
[HKLM\Software\Wow6432Node\Ghostgum]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HTC]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\KasperskyLab]
[HKLM\Software\Wow6432Node\Kaydara]
[HKLM\Software\Wow6432Node\LibreOffice]
[HKLM\Software\Wow6432Node\MAGIX]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Magix Development]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\Metin2_FR]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Mpath]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\Neuf]
[HKLM\Software\Wow6432Node\Nostale_FR]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Origin Games]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RaiderZ]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Runes of Magic]
[HKLM\Software\Wow6432Node\SG Interactive]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Screaming Bee]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Sonic]
[HKLM\Software\Wow6432Node\SplitMediaLabs]
[HKLM\Software\Wow6432Node\SweetIM]  =>PUP.SweetIM
[HKLM\Software\Wow6432Node\TERA]
[HKLM\Software\Wow6432Node\TeamSpeak 3 Client]
[HKLM\Software\Wow6432Node\TeamViewer]
[HKLM\Software\Wow6432Node\The Document Foundation]
[HKLM\Software\Wow6432Node\TrendMicro]
[HKLM\Software\Wow6432Node\Tunngle.net]
[HKLM\Software\Wow6432Node\Ubisoft]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Wacom]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Z8Games]
[HKLM\Software\Wow6432Node\cybelsoft]
[HKLM\Software\Wow6432Node\gPotato]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
[HKLM\Software\cybelsoft]
~ Key Software: 317 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 23/04/2013 - 23:44:10 - [48,806] ----D C:\Program Files (x86)\Actionaz
O43 - CFD: 15/08/2013 - 21:52:44 - [31,796] ----D C:\Program Files (x86)\Acunetix
O43 - CFD: 28/01/2013 - 20:56:39 - [153,692] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 14/01/2013 - 09:35:24 - [2,984] ----D C:\Program Files (x86)\Adobe Download Assistant
O43 - CFD: 17/08/2013 - 18:02:07 - [2,884] ----D C:\Program Files (x86)\Aeria Games
O43 - CFD: 12/01/2013 - 09:38:53 - [1660,900] ----D C:\Program Files (x86)\alaplaya
O43 - CFD: 01/01/2013 - 09:48:30 - [58,510] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 23/01/2013 - 23:02:32 - [44,319] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 05/08/2013 - 19:11:46 - [12,450] ----D C:\Program Files (x86)\Autodesk
O43 - CFD: 25/06/2013 - 10:22:33 - [19,456] ----D C:\Program Files (x86)\AutoIt3
O43 - CFD: 24/01/2013 - 23:00:06 - [14,075] ----D C:\Program Files (x86)\Bamboo Dock
O43 - CFD: 24/01/2013 - 15:21:00 - [27,567] ----D C:\Program Files (x86)\Cheat Engine 6.2
O43 - CFD: 04/02/2013 - 21:22:24 - [236,024] ----D C:\Program Files (x86)\CodeBlocks
O43 - CFD: 16/08/2013 - 12:44:05 - [1652,199] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 29/07/2013 - 01:09:46 - [197,123] ----D C:\Program Files (x86)\Cube World
O43 - CFD: 04/03/2013 - 10:07:17 - [26,652] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 17/08/2013 - 22:13:55 - [17,522] ----D C:\Program Files (x86)\DDS Viewer
O43 - CFD: 21/04/2013 - 09:37:54 - [1984,445] ----D C:\Program Files (x86)\EA Games
O43 - CFD: 02/04/2013 - 18:51:27 - [16,769] ----D C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 03/06/2013 - 14:18:48 - [-1519,644] ----D C:\Program Files (x86)\GameforgeLive
O43 - CFD: 13/03/2013 - 09:21:18 - [0,036] ----D C:\Program Files (x86)\Google
O43 - CFD: 16/06/2013 - 09:04:07 - [-657,090] ----D C:\Program Files (x86)\gPotato
O43 - CFD: 05/08/2013 - 19:55:14 - [3,651] ----D C:\Program Files (x86)\Granny Viewer
O43 - CFD: 24/06/2013 - 14:15:51 - [0,635] ----D C:\Program Files (x86)\GTactix
O43 - CFD: 20/06/2013 - 16:45:42 - [7,172] ----D C:\Program Files (x86)\HexEdit
O43 - CFD: 18/04/2013 - 23:27:37 - [169,911] ----D C:\Program Files (x86)\HTC
O43 - CFD: 25/08/2013 - 18:32:44 - [47,519] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 01/01/2013 - 09:26:04 - [21,441] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/01/2013 - 04:19:00 - [4,933] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 23/06/2013 - 21:37:33 - [122,488] ----D C:\Program Files (x86)\Java
O43 - CFD: 16/08/2013 - 12:44:10 - [17,992] ----D C:\Program Files (x86)\LastPass
O43 - CFD: 28/01/2013 - 20:03:09 - [294,745] ----D C:\Program Files (x86)\LibreOffice 3.6
O43 - CFD: 04/07/2013 - 12:09:57 - [4,817] ----D C:\Program Files (x86)\LogMeIn Hamachi
O43 - CFD: 24/01/2013 - 23:06:45 - [257,948] ----D C:\Program Files (x86)\Macromedia
O43 - CFD: 02/06/2013 - 21:19:27 - [343,767] ----D C:\Program Files (x86)\MAGIX
O43 - CFD: 03/06/2013 - 22:31:02 - [13,304] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 25/04/2013 - 07:59:55 - [0,506] ----D C:\Program Files (x86)\MetaClick
O43 - CFD: 15/06/2013 - 19:17:56 - [-1631,534] ----D C:\Program Files (x86)\MeteorEntertainment
O43 - CFD: 03/06/2013 - 09:01:27 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 27/03/2013 - 16:59:26 - [22,661] ----D C:\Program Files (x86)\Microsoft SDKs
O43 - CFD: 16/01/2013 - 08:59:47 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 27/03/2013 - 17:01:20 - [6,831] ----D C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 27/03/2013 - 17:00:58 - [7,440] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 27/03/2013 - 17:00:58 - [0,620] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 29/04/2013 - 09:24:37 - [36,595] ----D C:\Program Files (x86)\Microsoft Virtual PC
O43 - CFD: 27/03/2013 - 17:01:48 - [210,188] ----D C:\Program Files (x86)\Microsoft Visual Studio 10.0
O43 - CFD: 27/03/2013 - 16:59:54 - [0,244] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 17/08/2013 - 08:42:11 - [47,922] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 21/08/2013 - 07:37:52 - [0,215] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 02/06/2013 - 21:19:03 - [0,147] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 12/01/2013 - 10:32:04 - [31,006] ----D C:\Program Files (x86)\Mumble
O43 - CFD: 14/01/2013 - 11:37:40 - [0] ----D C:\Program Files (x86)\My Company Name
O43 - CFD: 04/04/2013 - 17:46:56 - [0,392] ----D C:\Program Files (x86)\No-IP
O43 - CFD: 19/08/2013 - 18:27:26 - [14,869] ----D C:\Program Files (x86)\Notepad++
O43 - CFD: 09/06/2013 - 21:44:10 - [145,720] ----D C:\Program Files (x86)\Origin
O43 - CFD: 15/05/2013 - 13:45:42 - [1248,134] ----D C:\Program Files (x86)\Origin Games
O43 - CFD: 24/06/2013 - 13:43:24 - [349,454] ----D C:\Program Files (x86)\osu!
O43 - CFD: 16/06/2013 - 10:55:29 - [8,373] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 06/03/2013 - 11:08:21 - [0,001] ----D C:\Program Files (x86)\pazera-software
O43 - CFD: 29/04/2013 - 09:56:25 - [82,635] ----D C:\Program Files (x86)\PremiumSoft
O43 - CFD: 11/01/2013 - 10:46:35 - [7,928] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [58,095] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 24/06/2013 - 01:41:03 - [2,166] ----D C:\Program Files (x86)\Resource Hacker
O43 - CFD: 19/06/2013 - 20:09:10 - [8,961] ----D C:\Program Files (x86)\Screaming Bee
O43 - CFD: 03/08/2013 - 17:08:27 - [56,204] ----D C:\Program Files (x86)\SFR
O43 - CFD: 01/01/2013 - 10:08:15 - [19,863] ----D C:\Program Files (x86)\SF_bot
O43 - CFD: 16/08/2013 - 07:24:36 - [19,224] R---D C:\Program Files (x86)\Skype
O43 - CFD: 18/04/2013 - 23:27:04 - [0,473] ----D C:\Program Files (x86)\Spirent Communications
O43 - CFD: 17/05/2013 - 16:13:45 - [83,813] ----D C:\Program Files (x86)\SplitMediaLabs
O43 - CFD: 02/08/2013 - 19:39:38 - [1,294] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 21/08/2013 - 07:39:10 - [1915,856] ----D C:\Program Files (x86)\Steam
O43 - CFD: 24/01/2013 - 22:55:39 - [1,978] ----D C:\Program Files (x86)\TabletPlugins
O43 - CFD: 15/08/2013 - 19:58:06 - [80,275] ----D C:\Program Files (x86)\TeamSpeak 3 Client
O43 - CFD: 03/03/2013 - 20:11:37 - [34,635] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 11/01/2013 - 11:01:18 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 19/06/2013 - 14:42:12 - [-488,317] ----D C:\Program Files (x86)\TERA
O43 - CFD: 08/08/2013 - 21:58:59 - [0,769] ----D C:\Program Files (x86)\Thegrideon Software
O43 - CFD: 17/06/2013 - 11:11:15 - [-1989,331] ----D C:\Program Files (x86)\Ubisoft
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 16/06/2013 - 12:28:18 - [0,765] ----D C:\Program Files (x86)\uTorrent  =>P2P.�Torrent
O43 - CFD: 02/08/2013 - 12:51:04 - [71,915] ----D C:\Program Files (x86)\ValMondial-Renaissance
O43 - CFD: 20/08/2013 - 17:49:31 - [1153,549] ----D C:\Program Files (x86)\ValMondial-Rennaissance
O43 - CFD: 06/02/2013 - 17:10:59 - [101,902] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/04/2011 - 11:16:36 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 03/06/2013 - 17:12:11 - [181,586] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 12/04/2011 - 11:16:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 12/04/2011 - 11:16:36 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 12/04/2011 - 11:16:36 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 12/04/2011 - 11:16:36 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 11/01/2013 - 11:26:29 - [4,131] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 03/09/2012 - 17:48:09 - [251,535] ----D C:\Program Files (x86)\Z8Games
O43 - CFD: 29/08/2013 - 17:30:32 - [16,486] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 28/01/2013 - 20:56:48 - [520,619] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 04/03/2013 - 15:59:16 - [44,205] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 05/08/2013 - 19:13:46 - [902,469] ----D C:\Program Files (x86)\Common Files\Autodesk Shared
O43 - CFD: 15/05/2013 - 14:30:54 - [1,244] --H-D C:\Program Files (x86)\Common Files\EAInstaller
O43 - CFD: 06/02/2013 - 17:02:07 - [8,242] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 01/01/2013 - 09:33:32 - [0,186] ----D C:\Program Files (x86)\Common Files\Intel Corporation
O43 - CFD: 23/06/2013 - 21:37:49 - [1,189] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 06/02/2013 - 17:03:46 - [0,375] ----D C:\Program Files (x86)\Common Files\Macromedia
O43 - CFD: 03/06/2013 - 12:29:49 - [47,798] ----D C:\Program Files (x86)\Common Files\MAGIX Services
O43 - CFD: 03/06/2013 - 14:24:05 - [32,556] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 18/04/2013 - 23:27:39 - [13,754] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 29/04/2013 - 18:06:25 - [13,398] ----D C:\Program Files (x86)\Common Files\PC SOFT
O43 - CFD: 14/01/2013 - 11:37:46 - [0,200] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 07/05/2013 - 15:28:18 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/01/2013 - 11:37:45 - [0,362] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 16/08/2013 - 05:40:08 - [0,538] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 12/01/2013 - 04:38:10 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 15/01/2013 - 23:11:59 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 15/08/2013 - 21:52:44 - [18,435] ----D C:\ProgramData\Acunetix WVS 8
O43 - CFD: 27/05/2013 - 18:18:50 - [426,313] ----D C:\ProgramData\Adobe
O43 - CFD: 28/02/2013 - 18:31:45 - [0,163] ----D C:\ProgramData\Aeria Games
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 01/01/2013 - 09:52:21 - [2,245] ----D C:\ProgramData\ATI
O43 - CFD: 05/08/2013 - 19:38:10 - [0,150] ----D C:\ProgramData\Autodesk
O43 - CFD: 01/01/2013 - 10:05:56 - [41,089] ----D C:\ProgramData\AVAST Software
O43 - CFD: 04/03/2013 - 11:28:13 - [0,000] ----D C:\ProgramData\Bohemia Interactive Studio
O43 - CFD: 27/08/2013 - 23:23:18 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 01/01/2013 - 07:43:00 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 04/03/2013 - 10:12:29 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 15/05/2013 - 14:31:07 - [0,001] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 01/01/2013 - 07:43:00 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 05/08/2013 - 19:37:48 - [0,030] ----D C:\ProgramData\FLEXnet
O43 - CFD: 16/06/2013 - 16:01:10 - [0,351] ----D C:\ProgramData\GFACE
O43 - CFD: 13/03/2013 - 09:21:50 - [0] ----D C:\ProgramData\Google
O43 - CFD: 18/04/2013 - 23:30:58 - [0] ----D C:\ProgramData\HTC
O43 - CFD: 25/04/2013 - 11:44:28 - [0,000] ----D C:\ProgramData\IsolatedStorage
O43 - CFD: 13/02/2013 - 14:44:01 - [0,000] ----D C:\ProgramData\LogiShrd
O43 - CFD: 01/01/2013 - 09:16:14 - [1,247] ----D C:\ProgramData\ma-config.com
O43 - CFD: 06/02/2013 - 17:03:16 - [59,410] ----D C:\ProgramData\Macromedia
O43 - CFD: 02/06/2013 - 21:40:08 - [381,626] ----D C:\ProgramData\MAGIX
O43 - CFD: 03/04/2013 - 22:24:33 - [16,371] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 01/01/2013 - 07:43:00 - [0] --H-D C:\ProgramData\Menu D�marrer
O43 - CFD: 31/07/2013 - 07:54:05 - [794,321] -S--D C:\ProgramData\Microsoft
O43 - CFD: 01/01/2013 - 07:43:00 - [0] --H-D C:\ProgramData\Mod�les
O43 - CFD: 18/04/2013 - 23:27:50 - [0,004] ----D C:\ProgramData\Motorola
O43 - CFD: 01/01/2013 - 10:03:59 - [0,035] ----D C:\ProgramData\Mozilla
O43 - CFD: 09/06/2013 - 21:56:44 - [3,926] ----D C:\ProgramData\Origin
O43 - CFD: 15/01/2013 - 10:06:05 - [0,002] ----D C:\ProgramData\PACE Anti-Piracy
O43 - CFD: 27/06/2013 - 13:11:57 - [7,036] ----D C:\ProgramData\Package Cache
O43 - CFD: 29/07/2013 - 01:09:45 - [0] ----D C:\ProgramData\Picroma
O43 - CFD: 16/06/2013 - 10:56:00 - [0,000] ----D C:\ProgramData\PMB Files  =>P2P.Pando
O43 - CFD: 15/01/2013 - 08:36:56 - [0,003] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 02/06/2013 - 21:19:14 - [0,000] ----D C:\ProgramData\simplitec
O43 - CFD: 16/08/2013 - 07:24:46 - [21,693] ----D C:\ProgramData\Skype
O43 - CFD: 29/01/2013 - 12:56:57 - [0,004] ----D C:\ProgramData\Solidshield
O43 - CFD: 25/02/2013 - 17:51:59 - [8,229] ----D C:\ProgramData\SplitMediaLabs
O43 - CFD: 20/02/2013 - 14:16:13 - [0,712] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 29/01/2013 - 00:11:27 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 08/02/2013 - 07:52:41 - [1,984] ----D C:\ProgramData\TERA
O43 - CFD: 24/01/2013 - 23:04:04 - [8,895] ----D C:\ProgramData\Wacom
O43 - CFD: 10/04/2013 - 16:44:14 - [428,703] ----D C:\Users\Kevin\AppData\Roaming\.minecraft
O43 - CFD: 29/08/2013 - 13:45:26 - [29,266] ----D C:\Users\Kevin\AppData\Roaming\Adobe
O43 - CFD: 28/02/2013 - 18:24:31 - [0,104] ----D C:\Users\Kevin\AppData\Roaming\Aeria Games & Entertainment
O43 - CFD: 18/04/2013 - 23:27:58 - [0] ----D C:\Users\Kevin\AppData\Roaming\Apple Computer
O43 - CFD: 01/01/2013 - 09:52:21 - [0] ----D C:\Users\Kevin\AppData\Roaming\ATI
O43 - CFD: 05/08/2013 - 15:03:13 - [0,001] ----D C:\Users\Kevin\AppData\Roaming\Audacity
O43 - CFD: 05/08/2013 - 19:38:10 - [0,004] ----D C:\Users\Kevin\AppData\Roaming\Autodesk
O43 - CFD: 15/06/2013 - 18:24:58 - [0] ----D C:\Users\Kevin\AppData\Roaming\Awesomium
O43 - CFD: 13/02/2013 - 18:58:54 - [0,036] ----D C:\Users\Kevin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 20/05/2013 - 11:23:24 - [0,075] ----D C:\Users\Kevin\AppData\Roaming\CodeBlocks
O43 - CFD: 14/01/2013 - 09:35:27 - [0,027] ----D C:\Users\Kevin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 01/08/2013 - 21:26:01 - [1,249] ----D C:\Users\Kevin\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 08/04/2013 - 20:28:37 - [37,102] ----D C:\Users\Kevin\AppData\Roaming\Downloaded Installations
O43 - CFD: 01/05/2013 - 10:35:18 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\dvdcss
O43 - CFD: 20/06/2013 - 16:45:42 - [0,301] ----D C:\Users\Kevin\AppData\Roaming\ECSoftware
O43 - CFD: 13/08/2013 - 22:25:54 - [0,023] ----D C:\Users\Kevin\AppData\Roaming\FileZilla
O43 - CFD: 25/02/2013 - 20:11:56 - [0] ----D C:\Users\Kevin\AppData\Roaming\GetRightToGo
O43 - CFD: 13/03/2013 - 09:21:50 - [0] ----D C:\Users\Kevin\AppData\Roaming\Google
O43 - CFD: 18/04/2013 - 23:31:08 - [0,006] ----D C:\Users\Kevin\AppData\Roaming\HTC
O43 - CFD: 18/04/2013 - 23:31:02 - [0] ----D C:\Users\Kevin\AppData\Roaming\HTC Sync
O43 - CFD: 01/01/2013 - 07:44:38 - [0] ----D C:\Users\Kevin\AppData\Roaming\Identities
O43 - CFD: 01/01/2013 - 09:25:40 - [0] ----D C:\Users\Kevin\AppData\Roaming\InstallShield
O43 - CFD: 01/01/2013 - 09:30:22 - [0,001] ----D C:\Users\Kevin\AppData\Roaming\Intel Corporation
O43 - CFD: 25/04/2013 - 11:44:28 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\IsolatedStorage
O43 - CFD: 13/02/2013 - 14:44:38 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Leadertech
O43 - CFD: 28/01/2013 - 20:11:56 - [2,415] ----D C:\Users\Kevin\AppData\Roaming\LibreOffice
O43 - CFD: 13/02/2013 - 14:42:51 - [0,007] ----D C:\Users\Kevin\AppData\Roaming\Logishrd
O43 - CFD: 13/02/2013 - 14:42:51 - [0] ----D C:\Users\Kevin\AppData\Roaming\Logitech
O43 - CFD: 06/02/2013 - 17:07:35 - [0,083] ----D C:\Users\Kevin\AppData\Roaming\Macromedia
O43 - CFD: 02/06/2013 - 21:40:08 - [0,020] ----D C:\Users\Kevin\AppData\Roaming\MAGIX
O43 - CFD: 03/04/2013 - 22:24:40 - [21,119] ----D C:\Users\Kevin\AppData\Roaming\Malwarebytes
O43 - CFD: 17/01/2013 - 18:10:45 - [1,732] ----D C:\Users\Kevin\AppData\Roaming\MAXON
O43 - CFD: 12/04/2011 - 11:27:56 - [0] ----D C:\Users\Kevin\AppData\Roaming\Media Center Programs
O43 - CFD: 27/06/2013 - 12:17:01 - [67,125] -S--D C:\Users\Kevin\AppData\Roaming\Microsoft
O43 - CFD: 26/02/2013 - 06:58:52 - [30,371] ----D C:\Users\Kevin\AppData\Roaming\Mozilla
O43 - CFD: 18/06/2013 - 22:20:55 - [1,298] ----D C:\Users\Kevin\AppData\Roaming\Mumble
O43 - CFD: 19/08/2013 - 18:27:27 - [0,455] ----D C:\Users\Kevin\AppData\Roaming\Notepad++
O43 - CFD: 17/05/2013 - 16:19:36 - [0,135] ----D C:\Users\Kevin\AppData\Roaming\OBS
O43 - CFD: 09/06/2013 - 21:56:44 - [0,068] ----D C:\Users\Kevin\AppData\Roaming\Origin
O43 - CFD: 15/01/2013 - 10:06:05 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\PACE Anti-Piracy
O43 - CFD: 15/01/2013 - 10:04:45 - [0] ----D C:\Users\Kevin\AppData\Roaming\PDAppFlex
O43 - CFD: 19/06/2013 - 20:09:58 - [0,600] ----D C:\Users\Kevin\AppData\Roaming\Screaming Bee
O43 - CFD: 01/01/2013 - 10:08:25 - [0,007] ----D C:\Users\Kevin\AppData\Roaming\SFBot
O43 - CFD: 03/08/2013 - 17:19:07 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\SFR
O43 - CFD: 29/08/2013 - 17:31:37 - [92,586] ----D C:\Users\Kevin\AppData\Roaming\Skype
O43 - CFD: 25/02/2013 - 17:51:01 - [0,885] ----D C:\Users\Kevin\AppData\Roaming\SplitMediaLabs
O43 - CFD: 29/08/2013 - 13:45:25 - [0] ----D C:\Users\Kevin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
O43 - CFD: 03/03/2013 - 20:23:06 - [0,001] ----D C:\Users\Kevin\AppData\Roaming\TeamViewer
O43 - CFD: 15/06/2013 - 15:39:32 - [1,990] ----D C:\Users\Kevin\AppData\Roaming\TERA
O43 - CFD: 26/08/2013 - 22:51:11 - [17,114] ----D C:\Users\Kevin\AppData\Roaming\TS3Client
O43 - CFD: 04/03/2013 - 11:47:33 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\Tunngle
O43 - CFD: 17/06/2013 - 10:56:00 - [8,948] ----D C:\Users\Kevin\AppData\Roaming\Ubisoft
O43 - CFD: 24/03/2013 - 09:50:27 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Unity
O43 - CFD: 17/08/2013 - 17:52:20 - [2,714] ----D C:\Users\Kevin\AppData\Roaming\uTorrent  =>P2P.�Torrent
O43 - CFD: 27/08/2013 - 11:43:52 - [0,078] ----D C:\Users\Kevin\AppData\Roaming\vlc
O43 - CFD: 24/01/2013 - 23:00:12 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Wacom
O43 - CFD: 24/01/2013 - 23:04:03 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
O43 - CFD: 25/03/2013 - 21:11:30 - [1,728] ----D C:\Users\Kevin\AppData\Roaming\Wargaming.net
O43 - CFD: 17/01/2013 - 21:09:44 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Windows Live Writer
O43 - CFD: 11/01/2013 - 11:52:51 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\WinRAR
O43 - CFD: 24/01/2013 - 23:04:25 - [0,060] ----D C:\Users\Kevin\AppData\Roaming\WTablet
O43 - CFD: 07/06/2013 - 22:23:42 - [0] ----D C:\Users\Kevin\AppData\Local\4PlayFun
O43 - CFD: 29/08/2013 - 08:58:16 - [280,569] ----D C:\Users\Kevin\AppData\Local\Adobe
O43 - CFD: 28/02/2013 - 18:32:28 - [3,378] ----D C:\Users\Kevin\AppData\Local\Aeria Games
O43 - CFD: 28/06/2013 - 18:45:07 - [42,968] ----D C:\Users\Kevin\AppData\Local\Akamai
O43 - CFD: 18/04/2013 - 23:27:58 - [0] ----D C:\Users\Kevin\AppData\Local\Apple Computer
O43 - CFD: 01/01/2013 - 07:43:06 - [0] ----D C:\Users\Kevin\AppData\Local\Application Data
O43 - CFD: 01/01/2013 - 10:03:05 - [10,225] ----D C:\Users\Kevin\AppData\Local\Apps
O43 - CFD: 04/03/2013 - 11:35:07 - [0,010] ----D C:\Users\Kevin\AppData\Local\ArmA 2
O43 - CFD: 04/03/2013 - 11:29:16 - [0,130] ----D C:\Users\Kevin\AppData\Local\ArmA 2 OA
O43 - CFD: 01/01/2013 - 09:52:20 - [0,086] ----D C:\Users\Kevin\AppData\Local\ATI
O43 - CFD: 05/08/2013 - 19:38:58 - [88,898] ----D C:\Users\Kevin\AppData\Local\Autodesk
O43 - CFD: 05/08/2013 - 19:55:52 - [0,009] ----D C:\Users\Kevin\AppData\Local\backburner
O43 - CFD: 29/06/2013 - 17:10:23 - [0,220] ----D C:\Users\Kevin\AppData\Local\Bundled software uninstaller
O43 - CFD: 28/02/2013 - 18:47:56 - [0] ----D C:\Users\Kevin\AppData\Local\Chromium
O43 - CFD: 07/06/2013 - 22:23:42 - [0,000] ----D C:\Users\Kevin\AppData\Local\CrashRpt
O43 - CFD: 23/08/2013 - 12:40:30 - [0] ----D C:\Users\Kevin\AppData\Local\Deployment
O43 - CFD: 20/08/2013 - 17:48:06 - [0,059] ----D C:\Users\Kevin\AppData\Local\Diagnostics
O43 - CFD: 18/04/2013 - 23:26:29 - [62,241] ----D C:\Users\Kevin\AppData\Local\Downloaded Installations
O43 - CFD: 29/06/2013 - 17:10:13 - [0,252] ----D C:\Users\Kevin\AppData\Local\FilesFrog Update Checker  =>Adware.MegaSearch
O43 - CFD: 16/06/2013 - 11:41:47 - [0,003] ----D C:\Users\Kevin\AppData\Local\F_Ject_v7
O43 - CFD: 05/05/2013 - 20:47:05 - [0,003] ----D C:\Users\Kevin\AppData\Local\Gameforge4d
O43 - CFD: 03/06/2013 - 14:59:04 - [0] ----D C:\Users\Kevin\AppData\Local\Google
O43 - CFD: 01/01/2013 - 07:43:06 - [0] ----D C:\Users\Kevin\AppData\Local\Historique
O43 - CFD: 21/08/2013 - 07:40:13 - [6,149] ----D C:\Users\Kevin\AppData\Local\HTC MediaHub
O43 - CFD: 09/06/2013 - 16:49:36 - [0,001] ----D C:\Users\Kevin\AppData\Local\injector
O43 - CFD: 13/02/2013 - 14:44:40 - [1,442] ----D C:\Users\Kevin\AppData\Local\Logitech
O43 - CFD: 22/08/2013 - 23:00:47 - [0,590] ----D C:\Users\Kevin\AppData\Local\LogMeIn Hamachi
O43 - CFD: 06/02/2013 - 17:07:27 - [5,446] ----D C:\Users\Kevin\AppData\Local\Macromedia
O43 - CFD: 13/04/2013 - 03:28:19 - [1268,525] ----D C:\Users\Kevin\AppData\Local\Microsoft
O43 - CFD: 12/04/2013 - 20:42:15 - [0,143] ----D C:\Users\Kevin\AppData\Local\Microsoft Games
O43 - CFD: 01/01/2013 - 10:06:31 - [1243,662] ----D C:\Users\Kevin\AppData\Local\Mozilla
O43 - CFD: 28/08/2013 - 10:24:49 - [0,001] ----D C:\Users\Kevin\AppData\Local\Neptune
O43 - CFD: 09/06/2013 - 21:44:17 - [2,718] ----D C:\Users\Kevin\AppData\Local\Origin
O43 - CFD: 16/06/2013 - 12:23:13 - [0,159] ----D C:\Users\Kevin\AppData\Local\PMB Files  =>P2P.Pando
O43 - CFD: 01/01/2013 - 10:05:39 - [0] ----D C:\Users\Kevin\AppData\Local\Programs
O43 - CFD: 17/06/2013 - 12:00:39 - [6,525] ----D C:\Users\Kevin\AppData\Local\PunkBuster
O43 - CFD: 07/06/2013 - 20:24:10 - [0,000] ----D C:\Users\Kevin\AppData\Local\SkypeFx
O43 - CFD: 11/03/2013 - 20:34:40 - [18,655] ----D C:\Users\Kevin\AppData\Local\Smartbar  =>Hijacker.SmartBar
O43 - CFD: 15/06/2013 - 19:18:03 - [1,941] ----D C:\Users\Kevin\AppData\Local\Solid State Networks
O43 - CFD: 25/02/2013 - 18:01:19 - [7,575] ----D C:\Users\Kevin\AppData\Local\SplitMediaLabs
O43 - CFD: 29/08/2013 - 17:29:06 - [91,894] ----D C:\Users\Kevin\AppData\Local\Temp
O43 - CFD: 01/01/2013 - 07:43:06 - [0] ----D C:\Users\Kevin\AppData\Local\Temporary Internet Files
O43 - CFD: 23/08/2013 - 12:40:02 - [0,001] ----D C:\Users\Kevin\AppData\Local\Ubisoft
O43 - CFD: 17/06/2013 - 12:00:16 - [0,003] ----D C:\Users\Kevin\AppData\Local\Ubisoft Game Launcher
O43 - CFD: 03/03/2013 - 23:58:37 - [0,208] ----D C:\Users\Kevin\AppData\Local\Unity
O43 - CFD: 06/03/2013 - 11:28:38 - [6,223] ----D C:\Users\Kevin\AppData\Local\VirtualStore
O43 - CFD: 04/04/2013 - 17:46:58 - [0,006] ----D C:\Users\Kevin\AppData\Local\Vitalwerks
O43 - CFD: 29/04/2013 - 18:06:19 - [0,000] ----D C:\Users\Kevin\AppData\Local\WDSetup
O43 - CFD: 10/04/2013 - 20:47:11 - [0,094] ----D C:\Users\Kevin\AppData\Local\Windows Live
O43 - CFD: 17/01/2013 - 20:48:19 - [0,618] ----D C:\Users\Kevin\AppData\Local\Windows Live Writer
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 12/01/2013 - 09:05:02 - [0,000] R---D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 28/02/2013 - 18:30:58 - [0,006] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
O43 - CFD: 04/03/2013 - 10:33:19 - [0,026] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArmA 2
O43 - CFD: 04/03/2013 - 11:27:04 - [0,001] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
O43 - CFD: 04/02/2013 - 21:22:24 - [0,004] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
O43 - CFD: 08/06/2013 - 23:46:25 - [0,001] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crossfire Europe
O43 - CFD: 21/04/2013 - 10:19:15 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
O43 - CFD: 29/06/2013 - 17:10:14 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker  =>Adware.MegaSearch
O43 - CFD: 02/04/2013 - 18:51:27 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 03/06/2013 - 14:19:30 - [0,000] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 24/06/2013 - 14:15:51 - [0,009] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GTactix
O43 - CFD: 16/08/2013 - 12:44:01 - [0,004] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 15/06/2013 - 19:17:56 - [0,003] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Meteor Entertainment
O43 - CFD: 04/04/2013 - 17:46:56 - [0,003] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
O43 - CFD: 10/03/2013 - 23:04:04 - [0] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 08/08/2013 - 21:58:59 - [0] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paradox Password
O43 - CFD: 18/02/2013 - 10:18:15 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phonetik
O43 - CFD: 19/06/2013 - 20:09:10 - [0,003] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screaming Bee
O43 - CFD: 27/06/2013 - 13:20:19 - [0,000] R---D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 20/03/2013 - 22:08:44 - [0,002] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
O43 - CFD: 23/08/2013 - 12:40:27 - [0,004] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
O43 - CFD: 11/01/2013 - 11:26:29 - [0,003] ----D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ 40 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 337 Scanned in 01mn 15s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.3D96819B1DD8A6DA68CEF985F4F9F394] - 29/08/2013 - 07:48:13 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1391462]
O44 - LFC:[MD5.3322A0457CD2CFF23CC51E5DC954CDB5] - 29/08/2013 - 07:48:05 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.FE2FFF3BB1E820FBBCC5027F95AF3919] - 27/08/2013 - 18:12:26 ---A- . (...) -- C:\Windows\setupact.log   [17803]
O44 - LFC:[MD5.2EAD1B7FF0915E81F5483CDDD374DD19] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1665524]
O44 - LFC:[MD5.38BAAA0454A803E6579CCD77FA535B5F] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [122210]
O44 - LFC:[MD5.7819008D96937FB3D3A9A87AB1426D18] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [149956]
O44 - LFC:[MD5.19C917C9542107D876A74F4EC4CEBC59] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [653780]
O44 - LFC:[MD5.DD8CFAC481508A6D5AA4CFE2BB0E87C5] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [747900]
O44 - LFC:[MD5.2EAD1B7FF0915E81F5483CDDD374DD19] - 27/08/2013 - 13:00:41 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1665524]
O44 - LFC:[MD5.38BAAA0454A803E6579CCD77FA535B5F] - 27/08/2013 - 13:00:41 RSHAD . (...) -- C:\Windows\System32\perfc009.dat   [122210]
O44 - LFC:[MD5.7819008D96937FB3D3A9A87AB1426D18] - 27/08/2013 - 13:00:41 RSHAD . (...) -- C:\Windows\System32\perfc00C.dat   [149956]
O44 - LFC:[MD5.19C917C9542107D876A74F4EC4CEBC59] - 27/08/2013 - 13:00:41 RSHAD . (...) -- C:\Windows\System32\perfh009.dat   [653780]
O44 - LFC:[MD5.DD8CFAC481508A6D5AA4CFE2BB0E87C5] - 27/08/2013 - 13:00:41 RSHAD . (...) -- C:\Windows\System32\perfh00C.dat   [747900]
O44 - LFC:[MD5.75A8453079907E69AD63D4B3EA8790BD] - 15/08/2013 - 20:53:11 ---A- . (...) -- C:\Windows\WVS_InstDBLogFile.csv   [722]
~ Files: 14 Scanned in 00mn 06s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.665D870A9C3FFAE080BF16F424413F85] - 15/08/2013 - 21:35:34 ---A- - C:\Windows\Prefetch\AgCx_SC3_465F29884CA26851.db
O45 - LFCP:[MD5.1B4A9A4747D425DA23312662103BD725] - 17/08/2013 - 17:01:29 ---A- - C:\Windows\Prefetch\AgCx_SC4.db
O45 - LFCP:[MD5.4CB5EE54A97C4CA7C284DB40EDF118A4] - 20/08/2013 - 22:10:59 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:[MD5.97920039E044E504CADC7E676A1264D4] - 21/08/2013 - 06:42:41 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.FF1D7BB9A21B247D04461E4A7BED8212] - 27/08/2013 - 09:42:55 ---A- - C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_7_700_22-4CA03018.pf
O45 - LFCP:[MD5.970315493E3B4DCA8B43BC05D0D27D23] - 28/08/2013 - 01:31:05 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7AC6742A.pf
O45 - LFCP:[MD5.EFC4A96F9790297F529DAC543C4C920E] - 28/08/2013 - 08:45:08 ---A- - C:\Windows\Prefetch\PROJECT NEPTUNE V2.0.EXE-DB7BF41C.pf
O45 - LFCP:[MD5.DCFCEF5406E96B7CBE3F45037FE800DC] - 28/08/2013 - 08:59:20 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
O45 - LFCP:[MD5.D1524BC9B6CFF7C0F8E7E3549F834068] - 28/08/2013 - 08:59:54 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-824949B9.pf
O45 - LFCP:[MD5.A2135892FEB822BCFA804274C5D1AB2A] - 28/08/2013 - 09:14:42 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-F6F01515.pf
O45 - LFCP:[MD5.BB6073AF5A15F00CE2CA4E034CAD83EC] - 28/08/2013 - 09:20:38 ---A- - C:\Windows\Prefetch\CTFMON.EXE-5E5138CF.pf
O45 - LFCP:[MD5.7512E0DC8E0D25FEC29F816995ED5644] - 28/08/2013 - 09:22:03 ---A- - C:\Windows\Prefetch\RESHACKER.EXE-2AFBAE1F.pf
O45 - LFCP:[MD5.FD5785F2CF2B3FA7A18D82C27F3EF631] - 28/08/2013 - 09:23:01 ---A- - C:\Windows\Prefetch\MSPAINT.EXE-76E10B24.pf
O45 - LFCP:[MD5.0FADC58B76E2D3A71AE686B41F9CEF24] - 28/08/2013 - 09:27:51 ---A- - C:\Windows\Prefetch\GENIUS+CRYPTER.EXE-A9B9E323.pf
O45 - LFCP:[MD5.46F91855FDDF02303B3EF0164F860CC6] - 28/08/2013 - 09:33:01 ---A- - C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
O45 - LFCP:[MD5.CD093A36E36DA29852D480EEBF4897D1] - 28/08/2013 - 09:33:01 ---A- - C:\Windows\Prefetch\VBC.EXE-7A16F53F.pf
O45 - LFCP:[MD5.DFD996BAC44047D9CFF284BA5905901B] - 28/08/2013 - 09:50:15 ---A- - C:\Windows\Prefetch\ATTRIB.EXE-A990CB86.pf
O45 - LFCP:[MD5.CA62470D14A895F12F5220B9FB476482] - 28/08/2013 - 09:55:29 ---A- - C:\Windows\Prefetch\GORC.EXE-3BCE4555.pf
O45 - LFCP:[MD5.8FC63EB60251B725B6CA8688B071B2F3] - 28/08/2013 - 09:55:30 ---A- - C:\Windows\Prefetch\GOLINK.EXE-285C3A42.pf
O45 - LFCP:[MD5.E10046B10E7BEB57652BAA6F23BC8775] - 28/08/2013 - 09:55:30 ---A- - C:\Windows\Prefetch\MPRESS.EXE-45B722E8.pf
O45 - LFCP:[MD5.65A27A680430C1A65C5CA78A5365F15F] - 28/08/2013 - 09:59:22 ---A- - C:\Windows\Prefetch\SCALC.EXE-AEEF4F40.pf
O45 - LFCP:[MD5.08A798E43041F804FC3BAF92B9418747] - 28/08/2013 - 10:01:26 ---A- - C:\Windows\Prefetch\BAT_TO_EXE_CONVERTER.EXE-74ED9F8E.pf
O45 - LFCP:[MD5.7F1ADD1695E11C325978FF03B53D8156] - 28/08/2013 - 10:01:32 ---A- - C:\Windows\Prefetch\GOLINK.EXE-51B9B74B.pf
O45 - LFCP:[MD5.16C927EF14AA210B32041095C07ADB22] - 28/08/2013 - 10:01:32 ---A- - C:\Windows\Prefetch\GORC.EXE-32ADAAEE.pf
O45 - LFCP:[MD5.DB0228A8CDA406441043F299E861D3E2] - 28/08/2013 - 10:01:33 ---A- - C:\Windows\Prefetch\MPRESS.EXE-6F149FF1.pf
O45 - LFCP:[MD5.459BD20D8FBC6370205D3D4991462218] - 28/08/2013 - 10:17:27 ---A- - C:\Windows\Prefetch\NAVICAT.EXE-733A7A2B.pf
O45 - LFCP:[MD5.84ADF1985C763E48BDB38EA174CB8B41] - 28/08/2013 - 10:17:35 ---A- - C:\Windows\Prefetch\HEXEDIT.EXE-7878D777.pf
O45 - LFCP:[MD5.98F09980C072226E17A66C20849231C7] - 28/08/2013 - 10:20:39 ---A- - C:\Windows\Prefetch\KEYTOOL.EXE-17AA66E3.pf
O45 - LFCP:[MD5.576DCC0B75E3F3AE44CEFC1920EB2FB5] - 28/08/2013 - 10:30:45 ---A- - C:\Windows\Prefetch\SOFFICE.BIN-EF0F2870.pf
O45 - LFCP:[MD5.FE7E0FB132FEE008244F21586DF5ED79] - 28/08/2013 - 10:30:45 ---A- - C:\Windows\Prefetch\SOFFICE.EXE-FB810F95.pf
O45 - LFCP:[MD5.29EB5883A5E2B89DA22E60BCDDA33D46] - 28/08/2013 - 10:30:45 ---A- - C:\Windows\Prefetch\SWRITER.EXE-79CFF902.pf
O45 - LFCP:[MD5.A7C4A6792B0EA473994B74484AF3E147] - 28/08/2013 - 10:46:07 ---A- - C:\Windows\Prefetch\3DSMAX.EXE-412340EB.pf
O45 - LFCP:[MD5.7F33A1BA5EB505F0D54D9637A2936B4C] - 28/08/2013 - 10:46:15 ---A- - C:\Windows\Prefetch\FNPLICENSINGSERVICE64.EXE-4F38CC6A.pf
O45 - LFCP:[MD5.D3C6CBC013E1568209E7A2BB106A99CC] - 28/08/2013 - 10:52:42 ---A- - C:\Windows\Prefetch\GR2TOOBJ.EXE-0EEB6D1D.pf
O45 - LFCP:[MD5.30126C517BF3111BA9ECE24C2F4EA565] - 28/08/2013 - 10:52:46 ---A- - C:\Windows\Prefetch\M2.EXE-0F0709E3.pf
O45 - LFCP:[MD5.556FCE5BE1EA77E86C6E28245CED440D] - 28/08/2013 - 12:06:55 ---A- - C:\Windows\Prefetch\FLASHUTIL32_11_6_602_168_ACTI-4F52498D.pf
O45 - LFCP:[MD5.61CBCB938FE651591EDD872757E1CE76] - 28/08/2013 - 12:12:51 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-072DB435.pf
O45 - LFCP:[MD5.4770A330E843EEFB368F46B35685B243] - 28/08/2013 - 12:39:20 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-4B6C9213.pf
O45 - LFCP:[MD5.D7147DADA7AA91031EB4BCEF24EAF071] - 28/08/2013 - 12:46:35 ---A- - C:\Windows\Prefetch\METIN2 REPACKER.EXE-371CB3E0.pf
O45 - LFCP:[MD5.E30B8414CEFA0311AC8BF770291BAC09] - 28/08/2013 - 12:46:58 ---A- - C:\Windows\Prefetch\WAMPMANAGER.EXE-CEC7E984.pf
O45 - LFCP:[MD5.069FBC877E7295E56327DF10C59D04CF] - 28/08/2013 - 13:01:05 ---A- - C:\Windows\Prefetch\PHP-WIN.EXE-2889E34C.pf
O45 - LFCP:[MD5.5E6F9956A6C49B561DDE9E915579CE0F] - 28/08/2013 - 13:01:37 ---A- - C:\Windows\Prefetch\HTTPD.EXE-9A7377AA.pf
O45 - LFCP:[MD5.C5830DA03848EEF1B41732D3321EDC38] - 28/08/2013 - 13:01:37 ---A- - C:\Windows\Prefetch\MYSQLD.EXE-FAD33D58.pf
O45 - LFCP:[MD5.C545C253AF5D3D2C34C524C8AF0FF39E] - 28/08/2013 - 13:14:40 ---A- - C:\Windows\Prefetch\DUC40.EXE-93ABF5D0.pf
O45 - LFCP:[MD5.41AD3DF3FA1E65A12F3D25D38AC01C07] - 28/08/2013 - 13:14:45 ---A- - C:\Windows\Prefetch\SKYPE.EXE-E71BF59F.pf
O45 - LFCP:[MD5.2F3C8E17E1F31D9C3AF4C9F097F8E6F9] - 28/08/2013 - 13:14:55 ---A- - C:\Windows\Prefetch\UPDATER.EXE-EA1310CB.pf
O45 - LFCP:[MD5.C3494921A1730F47DF1A7F9A3F0C1223] - 28/08/2013 - 14:55:45 ---A- - C:\Windows\Prefetch\CLI.EXE-BB402402.pf
O45 - LFCP:[MD5.7E43850919877D7CB39AFFA479C022F4] - 28/08/2013 - 17:35:21 ---A- - C:\Windows\Prefetch\GR2TOOBJ.EXE-C50BDBA0.pf
O45 - LFCP:[MD5.157D209D7E95B5A1BB73EF2BE01341F6] - 28/08/2013 - 17:35:25 ---A- - C:\Windows\Prefetch\M2.EXE-86B101F6.pf
O45 - LFCP:[MD5.345E7A9B703E3CFE5781AE7CFFDFC9A6] - 28/08/2013 - 17:35:28 ---A- - C:\Windows\Prefetch\JAVAW.EXE-2AB1E03D.pf
O45 - LFCP:[MD5.EE5855956F67E364E9736E90836B4F10] - 28/08/2013 - 17:36:03 ---A- - C:\Windows\Prefetch\CINEMA 4D 64 BIT.EXE-4965546E.pf
O45 - LFCP:[MD5.26FB6F3A0010935F9160255A2AA5E9CD] - 28/08/2013 - 17:36:04 ---A- - C:\Windows\Prefetch\QTGUIAGENT.EXE-D909710A.pf
O45 - LFCP:[MD5.A4FC0023E8ACD24367D7531B1D179A4E] - 28/08/2013 - 19:20:19 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.035746BA02509DC1636C1C52B00725D2] - 28/08/2013 - 20:58:57 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-4F28A26F.pf
O45 - LFCP:[MD5.4B54F5210CCACA20C944B26579C186B8] - 28/08/2013 - 21:13:38 ---A- - C:\Windows\Prefetch\PING.EXE-7E94E73E.pf
O45 - LFCP:[MD5.BAA9B8DBAA4ACC3526081B96DBB9D18B] - 28/08/2013 - 22:21:40 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:[MD5.AA9AA8EBAEA7B068EB4A0AB05636C2CF] - 29/08/2013 - 07:48:07 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.5533AC3A270EC41284A1CE93E8EA6228] - 29/08/2013 - 07:48:23 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:[MD5.46D6242CDEBA5F08443687E257A2D264] - 29/08/2013 - 07:49:07 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.F5E3CE540BDD0EE29C63F40BB7C95C9C] - 29/08/2013 - 08:06:55 ---A- - C:\Windows\Prefetch\HIJACKTHIS.EXE-87297147.pf
O45 - LFCP:[MD5.0C0C9CCABF507A7C9EAD624EEF43DE0C] - 29/08/2013 - 08:06:59 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-76936ED5.pf
O45 - LFCP:[MD5.0FAF4B871C9FA13AD50AB222E29B00D8] - 29/08/2013 - 08:07:04 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-1605FA5B.pf
O45 - LFCP:[MD5.D6246BE8B253E863547AB12A0503973E] - 29/08/2013 - 08:22:41 ---A- - C:\Windows\Prefetch\VIRTUAL PC.EXE-63E55DEB.pf
O45 - LFCP:[MD5.A837435B13A45F81569D8664ACABD444] - 29/08/2013 - 09:31:07 ---A- - C:\Windows\Prefetch\WLMAIL.EXE-303CEB39.pf
O45 - LFCP:[MD5.A86B6B60252DCA3C4211353AD1FE0C9E] - 29/08/2013 - 09:31:20 ---A- - C:\Windows\Prefetch\WLCOMM.EXE-324C9362.pf
O45 - LFCP:[MD5.2624163414759108E4A8CA1CE1D5B204] - 29/08/2013 - 10:08:16 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.513526AE514C7326A56A677744B3A74C] - 29/08/2013 - 10:10:00 ---A- - C:\Windows\Prefetch\LAUNCHER_ALPHA.EXE-800C2532.pf
O45 - LFCP:[MD5.EB981970299207119C221FB7F71B8C6B] - 29/08/2013 - 10:10:10 ---A- - C:\Windows\Prefetch\METIN2.BIN-EDFD393D.pf
O45 - LFCP:[MD5.2C11ED54D738045E56B30CB7A3DD4C2D] - 29/08/2013 - 10:23:21 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-67751737.pf
O45 - LFCP:[MD5.EFBC46E351617B1E58B0302854212ED3] - 29/08/2013 - 10:34:04 ---A- - C:\Windows\Prefetch\DDSVIEWER.EXE-441B0BCB.pf
O45 - LFCP:[MD5.B8DC9A450F913C43DB117B99AAFB550C] - 29/08/2013 - 10:44:30 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.651ADC51BD51322E6FBFF6A9D02EC480] - 29/08/2013 - 10:49:25 ---A- - C:\Windows\Prefetch\G�N�RATEUR DE QUERY (B�TA).EX-E0ECD4A7.pf
O45 - LFCP:[MD5.F2F7E8BF9A0446E5C9F721BF62E287E3] - 29/08/2013 - 11:50:01 ---A- - C:\Windows\Prefetch\AVASTEMUPDATE.EXE-6EF4B603.pf
O45 - LFCP:[MD5.8500D731B1CAD5406C52BF0F11BB9BA8] - 29/08/2013 - 12:07:42 ---A- - C:\Windows\Prefetch\Layout.ini
O45 - LFCP:[MD5.D08DF8DE3D14F58E8742F3415D292ED0] - 29/08/2013 - 12:10:45 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
O45 - LFCP:[MD5.D8739AD507B34AF1C4D043CDF01E9614] - 29/08/2013 - 12:17:41 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-50F8B8EA.pf
O45 - LFCP:[MD5.A8285592B35E34207374181A97486BAC] - 29/08/2013 - 12:18:51 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.89F2AC3D66ED3287E35C241C50B1E4AC] - 29/08/2013 - 12:18:59 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:[MD5.947E3ACB1E150220ADC6A2279314B054] - 29/08/2013 - 12:21:23 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
O45 - LFCP:[MD5.FFD880D8AED1BA2D0F78F170DBDC021C] - 29/08/2013 - 12:25:00 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2559056687-343696876-2951394358-1000.db
O45 - LFCP:[MD5.152E0BBAAAA6D26A141D96C119AFC16B] - 29/08/2013 - 12:25:00 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2559056687-343696876-2951394358-1000.db
O45 - LFCP:[MD5.8ADB5CC84896BC38F0676F521B2D60A3] - 29/08/2013 - 12:38:48 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:[MD5.7C915F05843A56FE8346A808A0F34E6A] - 29/08/2013 - 12:45:52 ---A- - C:\Windows\Prefetch\SWITCHBOARD.EXE-44EC7AA8.pf
O45 - LFCP:[MD5.3D6B03E0D147B84478168BC6ADBF0DA8] - 29/08/2013 - 13:26:38 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.C44A7D7AD9E28669BC1A5609E549AB52] - 29/08/2013 - 13:46:31 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
O45 - LFCP:[MD5.B0EA1A631A0995B1B19DEC3B54013BB3] - 29/08/2013 - 14:18:55 ---A- - C:\Windows\Prefetch\TEAMVIEWER.EXE-8C9D9595.pf
O45 - LFCP:[MD5.CBBAD9B4675C56723B3FDD452E893F6A] - 29/08/2013 - 14:18:58 ---A- - C:\Windows\Prefetch\TV_W32.EXE-7CD40EA9.pf
O45 - LFCP:[MD5.4315BA51A29E89F52FE90DF1D7E01843] - 29/08/2013 - 14:18:58 ---A- - C:\Windows\Prefetch\TV_X64.EXE-54D6669F.pf
O45 - LFCP:[MD5.EA9C99D177283BE78FBCF4B75695174D] - 29/08/2013 - 14:21:41 ---A- - C:\Windows\Prefetch\METIN2CLIENT.EXE-635FD0CD.pf
O45 - LFCP:[MD5.75AFFA850721D691C2F28FE5B62E5C58] - 29/08/2013 - 15:38:38 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-26C72A86.pf
O45 - LFCP:[MD5.1E7052821110F825AD03A297140794FC] - 29/08/2013 - 15:50:43 ---A- - C:\Windows\Prefetch\SNIFFER_GPU.EXE-4EDF8502.pf
O45 - LFCP:[MD5.90B31552D107F9D53BACEB9FBC1C9EF9] - 29/08/2013 - 15:50:45 ---A- - C:\Windows\Prefetch\PHOTOSHOP.EXE-B9EAAF9E.pf
O45 - LFCP:[MD5.82271E39C4FBA37C0AA0607DD82DED30] - 29/08/2013 - 15:50:46 ---A- - C:\Windows\Prefetch\AVAST.SETUP-B1D66586.pf
O45 - LFCP:[MD5.0FCB0988C87F35904B8199BED1BF7A9D] - 29/08/2013 - 15:50:46 ---A- - C:\Windows\Prefetch\AVBUGREPORT.EXE-3B5B9E84.pf
O45 - LFCP:[MD5.51086340D4882E4C8A95A8DF61E2749D] - 29/08/2013 - 15:50:51 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-61AE5AB6.pf
O45 - LFCP:[MD5.8DF029C769A0699717BE7B7C7EB7DBC2] - 29/08/2013 - 15:50:52 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
O45 - LFCP:[MD5.4591F9B89D6DAF8E7F66DF2DB638F336] - 29/08/2013 - 15:51:00 ---A- - C:\Windows\Prefetch\CS6SERVICEMANAGER.EXE-87BC6064.pf
O45 - LFCP:[MD5.2C8EF4EEC41AFD6AD09992D96031C891] - 29/08/2013 - 15:56:08 ---A- - C:\Windows\Prefetch\WINRAR.EXE-D8B532BF.pf
O45 - LFCP:[MD5.22DEAD4C39F059BCA0730A34DF4E2432] - 29/08/2013 - 16:01:29 ---A- - C:\Windows\Prefetch\GR2_VIEWER.EXE-EFE820CA.pf
O45 - LFCP:[MD5.47C5AF799FDE747BE6800EC584350EF3] - 29/08/2013 - 16:07:33 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-37549B7E.pf
O45 - LFCP:[MD5.ED664854E8A2D713E8C4D6EA6CD65C46] - 29/08/2013 - 16:07:33 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.9F282BAD82B6AB972F3821B47FF8EEBB] - 29/08/2013 - 16:08:20 ---A- - C:\Windows\Prefetch\TEAMVIEWER_DESKTOP.EXE-F28B3E42.pf
O45 - LFCP:[MD5.3E8B2F9DD4610EB9F52C3D0F888F01FF] - 29/08/2013 - 16:11:17 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.E2040987BA4C77139301ACE6361062C4] - 29/08/2013 - 16:14:35 ---A- - C:\Windows\Prefetch\NOTEPAD++.EXE-76BDBB33.pf
O45 - LFCP:[MD5.B69E3C5E6DFB235FE42EA5483EC6B765] - 29/08/2013 - 16:15:45 ---A- - C:\Windows\Prefetch\WINSCP.EXE-C79F0D1A.pf
O45 - LFCP:[MD5.A9E157ABB551F565408A809D9555C347] - 29/08/2013 - 16:22:23 ---A- - C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf
O45 - LFCP:[MD5.78A1C5154B5636A04B2832B9AB3ED3AB] - 29/08/2013 - 16:24:37 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.76AAFC3F6CAD8A61DD61C5C7FD230A06] - 29/08/2013 - 16:24:38 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.EBACFE1C5E249E43F3E5DE07B4FF2AFA] - 29/08/2013 - 16:24:38 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.51CABC5887B155C76DE4FE991DE48E60] - 29/08/2013 - 16:24:38 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.CFA7506C5E94988ED7CE637C8028A3D0] - 29/08/2013 - 16:24:46 ---A- - C:\Windows\Prefetch\METIN2CLIENT.EXE-8179BB56.pf
O45 - LFCP:[MD5.697B98CBEAA132267B0C770F8BA3B7A4] - 29/08/2013 - 16:28:38 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:[MD5.80631321AAACBC3D4B5ADEE83B5A24E4] - 29/08/2013 - 16:28:38 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
O45 - LFCP:[MD5.3E0233EE98C563A774336D48C6D80A56] - 29/08/2013 - 16:28:56 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.57A9C5A53465AEF47E6320864229AA55] - 29/08/2013 - 16:29:01 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:[MD5.C977C29974E3D548C3CD64974CB37784] - 29/08/2013 - 16:29:03 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-73655DF9.pf
O45 - LFCP:[MD5.3EF9417A89177F0A1CFE850812F42443] - 29/08/2013 - 16:29:06 ---A- - C:\Windows\Prefetch\ZHPDIAG2.EXE-471DA11A.pf
O45 - LFCP:[MD5.EEA9A4F599C910667F4D4612D12C7AB1] - 29/08/2013 - 16:29:06 ---A- - C:\Windows\Prefetch\ZHPDIAG2.TMP-2915EE75.pf
O45 - LFCP:[MD5.F245B53F6D0475D2B8CB0380210C5A65] - 29/08/2013 - 16:29:33 ---A- - C:\Windows\Prefetch\LADS.EXE-046BC4A8.pf
O45 - LFCP:[MD5.AB7BF6A832FF5A5E6F8A2CED769C84A7] - 29/08/2013 - 16:29:55 ---A- - C:\Windows\Prefetch\ZHPDIAG.EXE-0D117CAF.pf
O45 - LFCP:[MD5.5E78E2653377264B1892576480711F06] - 29/08/2013 - 16:30:06 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-0FB3F22C.pf
O45 - LFCP:[MD5.97D3AE9634D2181CE21D22C4E57D02D8] - 29/08/2013 - 16:30:07 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-6768A320.pf
O45 - LFCP:[MD5.ECCA2A9EDA5839CF18C97B13BDD859F5] - 29/08/2013 - 16:30:08 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.CF82CBF40D49670A03AA53D91A90EB29] - 29/08/2013 - 16:30:26 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
O45 - LFCP:[MD5.01AFC562F794B382815658CE0D80A680] - 29/08/2013 - 16:30:30 ---A- - C:\Windows\Prefetch\PV.EXE-34B75B82.pf
O45 - LFCP:[MD5.BE337E75BB0D7E7F53ADBA4F4B4C95DB] - 29/08/2013 - 16:30:35 ---A- - C:\Windows\Prefetch\SUBINACL.EXE-AB0CE9D9.pf
O45 - LFCP:[MD5.5216B0DCC8054A0183745C86FBBAD42F] - 29/08/2013 - 16:30:43 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-AD598958.pf
O45 - LFCP:[MD5.3EDD5CF56D87BF3C1EB198A7C12B3068] - 29/08/2013 - 16:31:42 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:[MD5.A88BA59F41B5A788F9CA13DD10031EEE] - 29/08/2013 - 16:32:05 ---A- - C:\Windows\Prefetch\CMD.EXE-AC113AA8.pf
O45 - LFCP:[MD5.D909C6B42A6E1CED2C182818B17B08E8] - 29/08/2013 - 16:32:05 ---A- - C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
O45 - LFCP:[MD5.FD9A4D6C610108381D96F90310831337] - 29/08/2013 - 16:32:05 ---A- - C:\Windows\Prefetch\M2REPACK.EXE-3A25370D.pf
~ Prefetcher: 131 Scanned in 00mn 02s



---\\ D�ni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l��diteur de configuration de s�curit� Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de s�curit� Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package�v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s



---\\ Contr�le du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris s�rie.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d�extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s



---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.FPS1"="frapsv64.dll" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"frapsv64.dll"="Fraps Video Decompressor" . (.Beepa P/L - Fraps.) -- C:\Windows\System32\frapsv64.dll
~ TDSD: 4 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\BambooCore  [Key] . (.Pas de propri�taire - BambooDock back-end application.) -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
O53 - SMSR:HKLM\...\startupreg\Browser Infrastructure Helper  [Key] . (.Smartbar - Smartbar.) -- C:\Users\Kevin\AppData\Local\Smartbar\Application\QuickShare.exe  =>PUP.QuickShare
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite  [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O53 - SMSR:HKLM\...\startupreg\LogMeIn Hamachi Ui  [Key] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
O53 - SMSR:HKLM\...\startupreg\SDP  [Key] . (.Somoto - FilesFrog.com Update Checker.) -- C:\Users\Kevin\AppData\Local\FilesFrog Update Checker\update_checker.exe  =>Adware.MegaSearch
O53 - SMSR:HKLM\...\startupreg\SFR Mediacenter  [Key] . (.SFR - Mediacenter Evolution.) -- C:\Program Files (x86)\SFR\Mediacenter Evolution\MediaCenter.exe
O53 - SMSR:HKLM\...\startupreg\Steam  [Key] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
~ SMSR Keys: 8 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Scanned in 00mn 00s



---\\ Enum�ration des cl�s de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ MWPE Keys: 3 Scanned in 00mn 00s



---\\ Liste des pilotes du syst�me (SDL) (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 18/03/2009 - 17:35:42 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys   [33856]
~ Drivers: 16 Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 26/08/2013 - 01:30:44 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc2\assassin\cheerup.gr2   [19328]
O61 - LFC: 26/08/2013 - 01:30:44 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc\assassin\cheerup.gr2   [19328]
O61 - LFC: 26/08/2013 - 01:30:44 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc2\assassin\wait.gr2   [19328]
O61 - LFC: 26/08/2013 - 01:30:44 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc\assassin\wait.gr2   [19328]
O61 - LFC: 26/08/2013 - 06:56:20 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_055620.sent   [2307]
O61 - LFC: 26/08/2013 - 06:56:34 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\WTablet\Pen_Tablet.dat   [60107]
O61 - LFC: 26/08/2013 - 07:50:33 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_065621.sent   [2089]
O61 - LFC: 26/08/2013 - 08:54:57 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_075621.sent   [681]
O61 - LFC: 26/08/2013 - 09:23:54 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\08\08a5adbf1516fa86.dat   [3364]
O61 - LFC: 26/08/2013 - 09:28:19 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Output Settings\Background Image.iros   [1647]
O61 - LFC: 26/08/2013 - 09:28:19 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Output Settings\Default Settings.iros   [41]
O61 - LFC: 26/08/2013 - 09:28:19 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Output Settings\XHTML.iros   [1647]
O61 - LFC: 26/08/2013 - 09:52:25 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_085622.sent   [891]
O61 - LFC: 26/08/2013 - 10:19:54 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc2\shaman\cheerup.gr2   [19899]
O61 - LFC: 26/08/2013 - 10:19:54 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc\shaman\cheerup.gr2   [19899]
O61 - LFC: 26/08/2013 - 10:19:54 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc2\shaman\wait.gr2   [19899]
O61 - LFC: 26/08/2013 - 10:19:54 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc\shaman\wait.gr2   [19899]
O61 - LFC: 26/08/2013 - 10:49:25 ---A- . (...) -- C:\Users\Kevin\Downloads\Nouveau dossier\serverimfo.py   [19]
O61 - LFC: 26/08/2013 - 10:49:45 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_095623.sent   [1581]
O61 - LFC: 26/08/2013 - 10:49:52 ---A- . (...) -- C:\Users\Kevin\Downloads\Nouveau dossier.rar   [1392038]
O61 - LFC: 26/08/2013 - 11:00:58 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc2\sura\cheerup.gr2   [24522]
O61 - LFC: 26/08/2013 - 11:00:58 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc\sura\cheerup.gr2   [24522]
O61 - LFC: 26/08/2013 - 11:00:58 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc2\sura\wait.gr2   [24522]
O61 - LFC: 26/08/2013 - 11:00:58 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc\sura\wait.gr2   [24522]
O61 - LFC: 26/08/2013 - 11:08:53 ---A- . (...) -- C:\Users\Kevin\Downloads\Nouveau dossier\metin2.bin   [4370432]
O61 - LFC: 26/08/2013 - 11:18:59 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\d4\d49daf06bd7251e9.dat   [14630]
O61 - LFC: 26/08/2013 - 11:43:58 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_105624.sent   [1103]
O61 - LFC: 26/08/2013 - 12:08:34 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\80\80167e99e4fd44c8.dat   [2992]
O61 - LFC: 26/08/2013 - 12:10:22 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc2\warrior\cheerup.gr2   [21424]
O61 - LFC: 26/08/2013 - 12:10:22 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\pc\warrior\cheerup.gr2   [21424]
O61 - LFC: 26/08/2013 - 12:10:22 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc2\warrior\wait.gr2   [21424]
O61 - LFC: 26/08/2013 - 12:10:22 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\pc\warrior\wait.gr2   [21424]
O61 - LFC: 26/08/2013 - 12:45:32 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_115624.sent   [892]
O61 - LFC: 26/08/2013 - 12:47:34 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\51\51f9e07e58749141.dat   [2980]
O61 - LFC: 26/08/2013 - 13:44:56 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_125625.sent   [681]
O61 - LFC: 26/08/2013 - 13:48:51 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\Pr�avis.txt   [549]
O61 - LFC: 26/08/2013 - 13:48:51 ---A- . (...) -- C:\Users\Kevin\Downloads\anim-Funky-Emu\anim-Funky-Emu\Pr�avis.txt   [549]
O61 - LFC: 26/08/2013 - 14:44:02 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_135626.sent   [892]
O61 - LFC: 26/08/2013 - 15:41:50 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_145627.sent   [1581]
O61 - LFC: 26/08/2013 - 15:50:38 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Windows Live\uxcore_MovieMaker_00.etl   [8192]
O61 - LFC: 26/08/2013 - 16:14:52 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\My Skype Received Files\IMG_26082013_171451.png   [1716744]
O61 - LFC: 26/08/2013 - 16:23:56 ---A- . (...) -- C:\Users\Kevin\Pictures\Tuto\Image_1.png   [1626349]
O61 - LFC: 26/08/2013 - 16:43:22 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_155628.sent   [681]
O61 - LFC: 26/08/2013 - 17:25:25 ---A- . (...) -- C:\Users\Kevin\Downloads\New set armor.rar   [6343579]
O61 - LFC: 26/08/2013 - 17:26:53 ---A- . (...) -- C:\Users\Kevin\Downloads\Set della disperazione by Maswa.rar   [4056125]
O61 - LFC: 26/08/2013 - 17:27:04 ---A- . (...) -- C:\Users\Kevin\Downloads\Armaduras M2M Blancas Upload By Punk.rar   [5553057]
O61 - LFC: 26/08/2013 - 17:46:04 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_165628.sent   [1758]
O61 - LFC: 26/08/2013 - 18:51:30 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_175629.sent   [1103]
O61 - LFC: 26/08/2013 - 19:49:20 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_185629.sent   [681]
O61 - LFC: 26/08/2013 - 20:38:55 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\36\36c538b5ca872b54.dat   [150761]
O61 - LFC: 26/08/2013 - 20:54:50 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_195629.sent   [1935]
O61 - LFC: 26/08/2013 - 20:58:32 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_205630.sent   [493]
O61 - LFC: 26/08/2013 - 20:59:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\chats\d3puUkxmcFJpQ3pVT2VVS2hrc2pUR21ZT1g0PQ==\server.txt   [866]
O61 - LFC: 26/08/2013 - 21:50:51 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\chats\d3puUkxmcFJpQ3pVT2VVS2hrc2pUR21ZT1g0PQ==\channel.txt   [8209]
O61 - LFC: 26/08/2013 - 21:51:08 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\cache\d3puUkxmcFJpQ3pVT2VVS2hrc2pUR21ZT1g0PQ==\channels\cache.dat   [4]
O61 - LFC: 26/08/2013 - 21:51:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\chats\d3puUkxmcFJpQ3pVT2VVS2hrc2pUR21ZT1g0PQ==\channel.html   [78110]
O61 - LFC: 26/08/2013 - 21:51:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\chats\d3puUkxmcFJpQ3pVT2VVS2hrc2pUR21ZT1g0PQ==\server.html   [309350]
O61 - LFC: 26/08/2013 - 21:51:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\resolved.dat   [188]
O61 - LFC: 26/08/2013 - 21:51:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\subscribemode.dat   [404]
O61 - LFC: 26/08/2013 - 21:51:10 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\urls.dat   [151]
O61 - LFC: 26/08/2013 - 21:51:11 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\TS3Client\settings.db   [97280]
O61 - LFC: 26/08/2013 - 22:54:01 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_215630.sent   [2066]
O61 - LFC: 26/08/2013 - 22:56:43 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_225631.sent   [105]
O61 - LFC: 26/08/2013 - 23:58:59 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130826_235631.sent   [681]
O61 - LFC: 27/08/2013 - 00:58:43 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_005632.sent   [1583]
O61 - LFC: 27/08/2013 - 01:57:48 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_015633.sent   [1583]
O61 - LFC: 27/08/2013 - 03:55:18 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_025633.sent   [2161]
O61 - LFC: 27/08/2013 - 04:51:20 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_035633.sent   [1583]
O61 - LFC: 27/08/2013 - 05:50:51 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_045634.sent   [1583]
O61 - LFC: 27/08/2013 - 06:50:35 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_055634.sent   [1581]
O61 - LFC: 27/08/2013 - 07:46:12 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_065635.sent   [1580]
O61 - LFC: 27/08/2013 - 08:42:21 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_075636.sent   [1758]
O61 - LFC: 27/08/2013 - 09:42:05 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_085636.sent   [681]
O61 - LFC: 27/08/2013 - 10:24:39 ---A- . (...) -- C:\Users\Kevin\Downloads\Icones by DarkRises.rar   [24185]
O61 - LFC: 27/08/2013 - 10:24:41 ---A- . (...) -- C:\Users\Kevin\Downloads\set d'arme.rar   [1522751]
O61 - LFC: 27/08/2013 - 10:42:03 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_095636.sent   [892]
O61 - LFC: 27/08/2013 - 11:44:59 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_105637.sent   [680]
O61 - LFC: 27/08/2013 - 12:45:05 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_115638.sent   [1491]
O61 - LFC: 27/08/2013 - 12:58:21 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\19\1956beb7bd8e175e.dat   [5644]
O61 - LFC: 27/08/2013 - 13:45:21 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_125639.sent   [1581]
O61 - LFC: 27/08/2013 - 14:47:59 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_135639.sent   [1758]
O61 - LFC: 27/08/2013 - 15:44:09 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_145640.sent   [1581]
O61 - LFC: 27/08/2013 - 15:49:27 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\MySQL\servers\Aurora\mysql\130827164926.psc   [118183]
O61 - LFC: 27/08/2013 - 15:49:32 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\MySQL\servers\Aurora\log\130827164931.psc   [100220]
O61 - LFC: 27/08/2013 - 16:46:26 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_155641.sent   [681]
O61 - LFC: 27/08/2013 - 17:48:50 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_165641.sent   [681]
O61 - LFC: 27/08/2013 - 18:54:20 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_175641.sent   [891]
O61 - LFC: 27/08/2013 - 19:51:08 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_185641.sent   [681]
O61 - LFC: 27/08/2013 - 20:56:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_195642.sent   [681]
O61 - LFC: 27/08/2013 - 20:56:44 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_205642.sent   [105]
O61 - LFC: 27/08/2013 - 21:58:06 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_215642.sent   [681]
O61 - LFC: 27/08/2013 - 22:06:50 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\55\55a6a09c0ca3e3d7.dat   [7973]
O61 - LFC: 27/08/2013 - 22:59:27 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\user\basic\dialog.xlc   [406]
O61 - LFC: 27/08/2013 - 22:59:27 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\user\basic\script.xlc   [406]
O61 - LFC: 27/08/2013 - 22:59:27 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\user\uno_packages\cache\log.txt   [3907]
O61 - LFC: 27/08/2013 - 23:01:26 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_225643.sent   [681]
O61 - LFC: 28/08/2013 - 00:05:53 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130827_235643.sent   [1581]
O61 - LFC: 28/08/2013 - 01:01:21 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_005644.sent   [1071]
O61 - LFC: 28/08/2013 - 02:00:47 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_015644.sent   [683]
O61 - LFC: 28/08/2013 - 03:03:37 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_025644.sent   [1583]
O61 - LFC: 28/08/2013 - 04:02:42 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_035645.sent   [1583]
O61 - LFC: 28/08/2013 - 04:59:44 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_045645.sent   [1760]
O61 - LFC: 28/08/2013 - 06:56:43 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_055645.sent   [2157]
O61 - LFC: 28/08/2013 - 06:56:51 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_065645.sent   [1005]
O61 - LFC: 28/08/2013 - 07:58:31 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_075645.sent   [1581]
O61 - LFC: 28/08/2013 - 08:21:11 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\.lock   [137]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Colors\Black - White.act   [772]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Colors\Grayscale.act   [772]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Colors\Mac OS.act   [768]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Colors\Windows.act   [768]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 128 Dithered.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 128 No Dither.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 32 Dithered.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 32 No Dither.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 64 Dithered.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF 64 No Dither.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\GIF Restrictive.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\JPEG High.irs   [1142]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\JPEG Low.irs   [1142]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\JPEG Medium.irs   [1142]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\PNG-24.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Optimized Settings\PNG-8 128 Dithered.irs   [1106]
O61 - LFC: 28/08/2013 - 09:23:47 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6\Recently Used Optimizations.irs   [8919]
O61 - LFC: 28/08/2013 - 09:23:47 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Plugins\Adobe Save for Web CS6\Photoshop\Adobe Save for Web CS6 Prefs   [450]
O61 - LFC: 28/08/2013 - 09:24:18 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Pr�fs Format PNG Adobe�CS6   [132]
O61 - LFC: 28/08/2013 - 09:24:49 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Neptune\Project_Neptune_v2.0.exe_Url_opnxyu5ts0guo4w2dspfcscclw0neeas\1.0.0.0\user.config   [904]
O61 - LFC: 28/08/2013 - 09:24:50 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch   [5854]
O61 - LFC: 28/08/2013 - 09:30:06 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Temptheicon.ico   [4286]
O61 - LFC: 28/08/2013 - 09:50:26 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_085646.sent   [2879]
O61 - LFC: 28/08/2013 - 10:17:35 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\ECSoftware\HexEdit\Bookmarks   [13]
O61 - LFC: 28/08/2013 - 10:17:35 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\ECSoftware\HexEdit\RecentFiles   [16022]
O61 - LFC: 28/08/2013 - 10:25:48 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\Premium\logs\LogHistory.txt   [931010]
O61 - LFC: 28/08/2013 - 10:28:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\97\975a6053c9c5036a.dat   [2967]
O61 - LFC: 28/08/2013 - 10:44:45 ---A- . (...) -- C:\Users\Kevin\Downloads\#058 Arc.rar   [370281]
O61 - LFC: 28/08/2013 - 10:46:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\plugcfg\dxdds.cfg   [12]
O61 - LFC: 28/08/2013 - 10:46:37 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\RecentDocuments.xml   [1333]
O61 - LFC: 28/08/2013 - 10:46:37 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxBackupUI.cui   [13032]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\MXS_SciTE.recent   [76]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxStartUI.bpr   [8754]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxStartUI.cui   [13032]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\maxscrpt.dsk   [120]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\plugcfg\BIPED.INI   [1500]
O61 - LFC: 28/08/2013 - 10:51:34 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\plugcfg\maxFxoCache.dat   [24862720]
O61 - LFC: 28/08/2013 - 10:51:35 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxManaged.cui   [488]
O61 - LFC: 28/08/2013 - 10:51:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxManaged.xaml   [1668090]
O61 - LFC: 28/08/2013 - 10:51:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\plugcfg\ATSPrompts.xml   [4311]
O61 - LFC: 28/08/2013 - 10:51:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\plugcfg\MapMatCol_RCMenu.cfg   [44]
O61 - LFC: 28/08/2013 - 10:51:37 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\UI\MaxTooltips.config.xml   [886]
O61 - LFC: 28/08/2013 - 10:51:37 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Autodesk\3dsMax\2012 - 64bit\fra\infocenter.xml   [218]
O61 - LFC: 28/08/2013 - 10:55:25 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_095647.sent   [1257]
O61 - LFC: 28/08/2013 - 11:56:41 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_105647.sent   [1568]
O61 - LFC: 28/08/2013 - 12:00:55 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\e1\e1b5666e695dbef1.dat   [9563]
O61 - LFC: 28/08/2013 - 12:47:56 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Logitech\Logitech Gaming Software\profiles\{09D92D75-3C8C-4723-B06C-4090BCB899C0}.xml   [45450]
O61 - LFC: 28/08/2013 - 12:56:21 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_115647.sent   [1743]
O61 - LFC: 28/08/2013 - 13:01:15 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\httpfe\cookies.dat   [2]
O61 - LFC: 28/08/2013 - 13:01:16 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\settings\restorer.queue   [55]
O61 - LFC: 28/08/2013 - 13:01:16 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\simcache\streamlist   [44]
O61 - LFC: 28/08/2013 - 13:14:46 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\shared_dynco\dc.db   [1986560]
O61 - LFC: 28/08/2013 - 13:14:46 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\shared_dynco\dc.db-journal   [8720]
O61 - LFC: 28/08/2013 - 13:15:35 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\Skype\DbTemp\temp-UePdDXrmy7GR0hy3wZmY376s   [20480]
O61 - LFC: 28/08/2013 - 13:15:36 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\~DFEBAED9C15A02F27D.TMP   [32768]
O61 - LFC: 28/08/2013 - 13:15:36 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\mmanager\mediacache.ldb   [40]
O61 - LFC: 28/08/2013 - 13:15:36 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\thmanager\thcache.ldb   [40]
O61 - LFC: 28/08/2013 - 13:15:51 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\Skype\DbTemp\temp-9iRdZ1iEL3OSi4gv4knE17yP   [4616]
O61 - LFC: 28/08/2013 - 13:50:29 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_125647.sent   [889]
O61 - LFC: 28/08/2013 - 14:46:17 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_135648.sent   [681]
O61 - LFC: 28/08/2013 - 15:43:30 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_145649.sent   [2091]
O61 - LFC: 28/08/2013 - 16:46:03 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_155650.sent   [1917]
O61 - LFC: 28/08/2013 - 17:13:27 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\MySQL\servers\Aurora\account\130828181326.psc   [3051]
O61 - LFC: 28/08/2013 - 17:13:41 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\MySQL\servers\Aurora\common\130828181341.psc   [1003]
O61 - LFC: 28/08/2013 - 17:37:41 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\MAXON\- Cinema 4D R12  -_1EE16961\prefs\CINEMA 4D.prf   [12876]
O61 - LFC: 28/08/2013 - 17:37:41 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\MAXON\- Cinema 4D R12  -_1EE16961\prefs\rm\rm.pref   [28]
O61 - LFC: 28/08/2013 - 17:37:41 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\MAXON\- Cinema 4D R12  -_1EE16961\updates\updatelist   [232]
O61 - LFC: 28/08/2013 - 17:37:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\MAXON\- Cinema 4D R12  -_1EE16961\prefs\directorycache   [66194]
O61 - LFC: 28/08/2013 - 17:37:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\MAXON\- Cinema 4D R12  -_1EE16961\prefs\python\history   [8]
O61 - LFC: 28/08/2013 - 17:49:39 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_165650.sent   [1063]
O61 - LFC: 28/08/2013 - 18:48:46 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_175651.sent   [889]
O61 - LFC: 28/08/2013 - 19:00:32 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\41\41aa804e64c86051.dat   [3303]
O61 - LFC: 28/08/2013 - 19:42:50 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_185652.sent   [681]
O61 - LFC: 28/08/2013 - 20:24:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\c3\c306e0724215bd05.dat   [8690]
O61 - LFC: 28/08/2013 - 20:35:42 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\39\3954fb6694996fc9.dat   [2009]
O61 - LFC: 28/08/2013 - 20:43:52 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_195652.sent   [1743]
O61 - LFC: 28/08/2013 - 21:11:59 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Windows Live Writer\ResourceCache\live\Writer_Config.cab   [26214]
O61 - LFC: 28/08/2013 - 21:38:52 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\52\52d649d245a06be5.dat   [15918]
O61 - LFC: 28/08/2013 - 21:47:54 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130828_205652.sent   [1568]
O61 - LFC: 28/08/2013 - 21:56:07 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\c9\c9a54fc629f5b5a9.dat   [24176]
O61 - LFC: 28/08/2013 - 21:58:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\eas.db   [53248]
O61 - LFC: 28/08/2013 - 22:15:23 ---A- . (...) -- C:\Users\Kevin\Documents\Navicat\MySQL\servers\Aurora\player\130828231521.psc   [180447]
O61 - LFC: 28/08/2013 - 22:21:19 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Microsoft\Virtual PC\Options.xml   [5768]
O61 - LFC: 29/08/2013 - 07:47:50 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_064803.sent   [477]
O61 - LFC: 29/08/2013 - 07:48:17 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Logitech\Logitech Gaming Software\settings.json   [2954]
O61 - LFC: 29/08/2013 - 07:48:25 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_074804.sent   [1452]
O61 - LFC: 29/08/2013 - 08:22:31 --HA- . (.Microsoft Corporation.) -- C:\Users\Kevin\AppData\Roaming\Microsoft\Virtual PC\VPCKeyboard.dll   [165232]
O61 - LFC: 29/08/2013 - 08:31:45 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\item_proto_repack.xml   [2616083]
O61 - LFC: 29/08/2013 - 08:40:54 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\97\9765b8be36218a81.dat   [26657]
O61 - LFC: 29/08/2013 - 08:52:56 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_084805.sent   [1568]
O61 - LFC: 29/08/2013 - 09:16:11 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\axt035_cotu.jpg.zip   [2222754]
O61 - LFC: 29/08/2013 - 09:38:48 ---A- . (...) -- C:\Users\Kevin\Downloads\#187 Armures.rar   [4318751]
O61 - LFC: 29/08/2013 - 09:54:00 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Windows Live\uxcore_wlmail_00.etl   [8192]
O61 - LFC: 29/08/2013 - 09:56:35 ---A- . (...) -- C:\Users\Kevin\Downloads\#077 Armures.rar   [24233301]
O61 - LFC: 29/08/2013 - 09:56:45 ---A- . (...) -- C:\Users\Kevin\Downloads\#080 Armures.rar   [2682242]
O61 - LFC: 29/08/2013 - 09:56:54 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_094805.sent   [681]
O61 - LFC: 29/08/2013 - 10:23:24 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Microsoft\HTML Help\hh.dat   [8634]
O61 - LFC: 29/08/2013 - 10:57:30 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_104806.sent   [1104]
O61 - LFC: 29/08/2013 - 11:28:30 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\item_proto_repack-1.xml   [2639093]
O61 - LFC: 29/08/2013 - 11:36:39 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\ef\efd0a21082d0971b.dat   [287610]
O61 - LFC: 29/08/2013 - 11:40:34 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\41\412a9a671a6131ce.dat   [1957]
O61 - LFC: 29/08/2013 - 11:46:59 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\c3\c39854df311a1e26.dat   [3000]
O61 - LFC: 29/08/2013 - 11:54:53 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_114806.sent   [1271]
O61 - LFC: 29/08/2013 - 12:38:09 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\a4\a4fad0e5323a7444.dat   [2025]
O61 - LFC: 29/08/2013 - 12:42:59 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\WorkSpaces (Modified)\New in CS 6   [28720]
O61 - LFC: 29/08/2013 - 12:44:18 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\WorkSpaces (Modified)\Painting   [19415]
O61 - LFC: 29/08/2013 - 12:44:29 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\WorkSpaces (Modified)\Typography   [19330]
O61 - LFC: 29/08/2013 - 12:45:24 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\AIR\CRLCache\5CB653B2DAF9459B6E8E3796503DD779BAD8DB50.crl   [341]
O61 - LFC: 29/08/2013 - 12:45:26 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Mini Bridge CS6\PHSP.xml   [148]
O61 - LFC: 29/08/2013 - 12:48:45 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\user\backup\Pw.ods_0.ods   [75226]
O61 - LFC: 29/08/2013 - 12:50:16 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_124807.sent   [1743]
O61 - LFC: 29/08/2013 - 12:55:04 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\item_proto_repack-2.xml   [2639093]
O61 - LFC: 29/08/2013 - 13:15:40 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\keyval.db   [57344]
O61 - LFC: 29/08/2013 - 13:15:41 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\keyval.db-journal   [41552]
O61 - LFC: 29/08/2013 - 13:16:04 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\bistats.db   [77824]
O61 - LFC: 29/08/2013 - 13:16:04 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\bistats.db-journal   [37448]
O61 - LFC: 29/08/2013 - 13:19:21 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\item_proto_repack-3.xml   [2639093]
O61 - LFC: 29/08/2013 - 13:33:05 ---A- . (...) -- C:\Users\Kevin\Downloads\#071 Armes.rar   [1472798]
O61 - LFC: 29/08/2013 - 13:53:08 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_134807.sent   [681]
O61 - LFC: 29/08/2013 - 14:12:22 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Pr�fs Format Targa Adobe�CS6   [132]
O61 - LFC: 29/08/2013 - 14:12:30 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\New Doc Sizes.psp   [6]
O61 - LFC: 29/08/2013 - 14:56:03 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\Logs\debug.log.130829_144808.sent   [679]
O61 - LFC: 29/08/2013 - 15:38:18 ---A- . (...) -- C:\Users\Kevin\AcunetixScanner\applicationLog.txt   [1505553]
O61 - LFC: 29/08/2013 - 15:50:45 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\LaunchEndFlag.psp   [13]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\Actions Palette.psp   [33071]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\Adobe Photoshop X64 CS6 Prefs.psp   [202203]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\Color Settings.csf   [560008]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\RepoussePresets.psp   [10]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\WorkSpaces (Modified)\Essentials   [19622]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Adobe Photoshop CS6\Adobe Photoshop CS6 Settings\Workspace Prefs.psp   [19893]
O61 - LFC: 29/08/2013 - 15:50:56 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Adobe\Color\ACEConfigCache2.lst   [233]
O61 - LFC: 29/08/2013 - 16:05:03 R--A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\item_proto_repack-4.xml   [2639093]
O61 - LFC: 29/08/2013 - 16:08:01 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\msn.db   [114688]
O61 - LFC: 29/08/2013 - 16:08:01 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\msn.db-journal   [37448]
O61 - LFC: 29/08/2013 - 16:12:14 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Temp\wmplog00.sqm   [1778]
O61 - LFC: 29/08/2013 - 16:16:19 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\b8\b802dde25a35c035.dat   [161710]
O61 - LFC: 29/08/2013 - 16:17:57 ---A- . (...) -- C:\Users\Kevin\AppData\Local\Akamai\euc_state.json   [4212]
O61 - LFC: 29/08/2013 - 16:20:00 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\winscp.rnd   [600]
O61 - LFC: 29/08/2013 - 16:20:11 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\LibreOffice\3\user\registrymodifications.xcu   [192961]
O61 - LFC: 29/08/2013 - 16:20:28 ---A- . (...) -- C:\Users\Kevin\Documents\Mes ordinateurs virtuels\SP_1\SP_2.vmc   [12170]
O61 - LFC: 29/08/2013 - 16:27:02 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\dc.db   [86016]
O61 - LFC: 29/08/2013 - 16:28:41 ---A- . (.Nicolas Coolman.) -- C:\Users\Kevin\Downloads\ZHPDiag2.exe   [5076950]
O61 - LFC: 29/08/2013 - 16:28:55 ---A- . (...) -- C:\Users\Kevin\AppData\Local\ATI\ACE\Profiles.xml   [41960]
O61 - LFC: 29/08/2013 - 16:31:37 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\shared.xml   [90982]
O61 - LFC: 29/08/2013 - 16:32:32 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\config.xml   [10588]
O61 - LFC: 29/08/2013 - 16:32:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Notepad++\config.xml   [8570]
O61 - LFC: 29/08/2013 - 16:32:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Notepad++\plugins\config\NppFTP\Certificates.xml   [84]
O61 - LFC: 29/08/2013 - 16:32:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Notepad++\plugins\config\NppFTP\NppFTP.xml   [208]
O61 - LFC: 29/08/2013 - 16:32:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Notepad++\session.xml   [986]
O61 - LFC: 29/08/2013 - 16:32:38 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Notepad++\shortcuts.xml   [2111]
O61 - LFC: 29/08/2013 - 16:33:14 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\chatsync\15\1597db247d98c07f.dat   [304722]
O61 - LFC: 29/08/2013 - 16:33:17 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\main.db   [3796992]
O61 - LFC: 29/08/2013 - 16:33:17 ---A- . (...) -- C:\Users\Kevin\AppData\Roaming\Skype\live#3aeternal_sword\main.db-journal   [304208]
~ 11 Fichiers temporaires (Temporary files)
~ Files: 259 Scanned in 02mn 03s



---\\ Liste des outils de d�sinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 28/12/2011 - C:\Windows\system32\drivers\afd.sys (AFD)  .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - 19/12/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)  .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 09/05/2013 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - 09/05/2013 - Pas de propri�taire (aswRvrt)  .(...) - LEGACY_ASWRVRT
O64 - Services: CurCS - 29/07/2013 - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 29/07/2013 - C:\Windows\System32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 09/05/2013 - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 29/07/2013 - Pas de propri�taire (aswVmm)  .(...) - LEGACY_ASWVMM
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\Beep.sys (Beep)  .(.Microsoft Corporation - BEEP Driver.) - LEGACY_BEEP
O64 - Services: CurCS - 04/07/2012 - C:\Windows\system32\browser.dll (bowser)  .(.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\cdfs.sys (cdfs)  .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\clfs.sys (CLFS)  .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\cng.sys (CNG)  .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\cscsvc.dll (CSC)  .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\discache.sys (discache)  .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - 21/07/2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (driverhardwarev2x64)  .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2X64
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\dxgkrnl.sys (DXGKrnl)  .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - ??\??\???? - Pas de propri�taire (EagleX64)  .(...) - LEGACY_EAGLEX64
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\fastfat.sys (fastfat)  .(.Microsoft Corporation - Fast FAT File System Driver.) - LEGACY_FASTFAT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\fileinfo.sys (FileInfo)  .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\fltmgr.sys (FltMgr)  .(.Microsoft Corporation - Gestionnaire de filtres de syst�me de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\fvevol.sys (fvevol)  .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\http.sys (HTTP)  .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy)  .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - 11/03/2011 - C:\Windows\System32\drivers\iaStorV.sys (iaStorV)  .(.Intel Corporation - Intel Matrix Storage Manager driver - x64.) - LEGACY_IASTORV
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecdd.sys (KSecDD)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - 02/06/2012 - C:\Windows\System32\Drivers\ksecpkg.sys (KSecPkg)  .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\lltdio.sys (lltdio)  .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\luafv.sys (luafv)  .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\mountmgr.sys (mountmgr)  .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\FirewallAPI.dll (mpsdrv)  .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb10)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (mrxsmb20)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\msisadrv.sys (msisadrv)  .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\mup.sys (Mup)  .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - 22/08/2012 - C:\Windows\system32\drivers\ndis.sys (NDIS)  .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\netbios.sys (NetBIOS)  .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\netbt.sys (NetBT)  .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy)  .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\pcw.sys (pcw)  .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\drivers\peauth.sys (PEAUTH)  .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\pacer.sys (Psched)  .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\qwavedrv.sys (QWAVEdrv)  .(.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) - LEGACY_QWAVEDRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\wkssvc.dll (rdbss)  .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD)  .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD)  .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP)  .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\wshrm.dll (RMCAST)  .(.Microsoft Corporation - DLL d�assistance de sockets Windows pour PG.) - LEGACY_RMCAST
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\rspndr.sys (rspndr)  .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\Drivers\spldr.sys (spldr)  .(.Microsoft Corporation - loader for security processor.) - LEGACY_SPLDR
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\srvsvc.dll (srv2)  .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - 29/04/2011 - C:\Windows\System32\DRIVERS\srvnet.sys (srvnet)  .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\vmstorfltres.dll (storflt)  .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (Tcpip)  .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TCPIP
O64 - Services: CurCS - 03/10/2012 - C:\Windows\System32\drivers\tcpipreg.sys (tcpipreg)  .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\tcpipcfg.dll (tdx)  .(.Microsoft Corporation - Objets de configuration du r�seau.) - LEGACY_TDX
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\DRIVERS\udfs.sys (udfs)  .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\drivers\vga.sys (VgaSave)  .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - 17/02/2007 - C:\Windows\system32\Pilotes\vmm.sys (vmm)  .(.Microsoft Corporation - Virtual Machine Monitor.) - LEGACY_VMM
O64 - Services: CurCS - 21/11/2010 - C:\Windows\system32\drivers\volmgrx.sys (volmgrx)  .(.Microsoft Corporation - Pilote d�extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - 21/11/2010 - C:\Windows\System32\drivers\volsnap.sys (volsnap)  .(.Microsoft Corporation - Pilote de clich� instantan� du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - 14/07/2009 - C:\Windows\system32\rascfg.dll (Wanarpv6)  .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\Wdf01000.sys (Wdf01000)  .(.Microsoft Corporation - Runtime de l�infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - 14/07/2009 - C:\Windows\System32\DRIVERS\wfplwf.sys (WfpLwf)  .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - 26/07/2012 - C:\Windows\System32\drivers\WudfPf.sys (WudfPf)  .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF
O64 - Services: CurCS - ??\??\???? - Pas de propri�taire (xhunter1)  .(...) - LEGACY_XHUNTER1
~ Legacy: 80 Scanned in 00mn 01s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d��v�nements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft � Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - �diteur du Registre.) -- C:\Windows\regedit.exe
~ FASS Keys: 19 Scanned in 00mn 00s



---\\ Menu de d�marrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [Kevin - vb85ksdo.default] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search The Web) - http://search.filebulldog.com  =>Adware.IMBooster
~ Keys:  Scanned in 00mn 00s



---\\ Enum�re les service demarr�s par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Exp�rience d�application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes � puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de strat�gie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [853504]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [679424]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de num�rotation automatique d�acc�s distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d�acc�s distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d�interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d��v�nements syst�me (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l�application d�assistance � Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de t�l�phonie Microsoft� Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur h�te de session Burea.) -- C:\Windows\System32\termsrv.dll   [680960]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise � jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2428952]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arri�re-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivit� IPv6 sur un r�seau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d�ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d�application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de d�couverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multim�dias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau � distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d�ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de t�ches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des cl�s.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux probl�mes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [209920]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des th�mes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [193536]
~ Services: 33 Scanned in 00mn 00s



---\\ Recherche particuli�re � la racine du syst�me (SPRF) (O84)
[MD5.BDEA4833A70C6EC7C23A28D72BF50895] [SPRF][26/08/2013] (...) -- C:\Users\Kevin\Desktop\G�n�rateur de query (b�ta).exe   [335519]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll   [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe   [196608]
[MD5.7DC70A3D7F132D369017A9C44158C6D5] [SPRF][15/08/2003] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll   [282624]
~ Files: 4 Scanned in 00mn 00s



---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-TCP-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-Out-UDP-Active" | Out - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-SSDPSrv-In-UDP-Active" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-DCOM-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-RAServer-Out-TCP-NoScope-Active" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-RAServer-In-TCP-NoScope-Active" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Serveur COM d�assistance � distance Windows.) -- C:\Windows\system32\raserver.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-OUT" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-PnrpSvc-UDP-In-EdgeScope" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteAssistance-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteAssistance-In-TCP-EdgeScope" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Assistance � distance Windows.) -- C:\Windows\system32\msra.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteFwAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteEventLogSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-KTMRM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MSDTC-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "MSDTC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service Microsoft Distributed Transaction Coordinator.) -- C:\Windows\system32\msdtc.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteTask-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "RemoteSvcAdmin-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contr�leur.) -- C:\Windows\system32\services.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDRESPUB-WSD-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-LLMNR-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-FDPHOST-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-UPnP-Out-TCP-Active" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-Out-UDP-Active" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NETDIS-SSDPSrv-In-UDP-Active" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-ASYNC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) -- C:\Windows\system32\wbem\unsecapp.exe
O87 - FAEL: "WMI-WINMGMT-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-WINMGMT-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMI-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MsiScsi-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "PerfLogsAlerts-DCOM-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PerfLogsAlerts-PLASrv-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Performance Logs and Alerts DCOM Server.) -- C:\Windows\system32\plasrv.exe
O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe
O87 - FAEL: "CoreNet-DNS-Out-UDP" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-GP-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-IPHTTPS-Out" | Out - None - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-Teredo-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCPV6-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-Out" | Out - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "CoreNet-DHCP-In" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-LLMNR-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Collab-P2PHost-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "Collab-P2PHost-In-TCP" | In - None - P6 - TRUE | .(.Microsoft Corporation - Voisinage imm�diat.) -- C:\Windows\system32\p2phost.exe
O87 - FAEL: "RVM-RPCSS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "RVM-RPCSS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "RVM-VDSLDR-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Virtual Disk Service Loader.) -- C:\Windows\system32\vdsldr.exe
O87 - FAEL: "RVM-VDS-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de disque virtuel.) -- C:\Windows\system32\vds.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "PNRPMNRS-PNRP-In-UDP" | In - None - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out" | Out - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out" | Out - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP" | Out - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-WMP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-WMP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMPNSS-QWave-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-Out-UDP-NoScope" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMPNSS-QWave-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WMP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "WMP-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O87 - FAEL: "SNMPTRAP-In-UDP-NoScope" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "SNMPTRAP-In-UDP" | In - Public - P17 - FALSE | .(.Microsoft Corporation - Interruption SNMP.) -- C:\Windows\system32\snmptrap.exe
O87 - FAEL: "MCX-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-QWave-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-QWave-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O87 - FAEL: "MCX-MCX2SVC-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-Prov-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe
O87 - FAEL: "MCX-PlayTo-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-McrMgr-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Media Center Extender Manager.) -- C:\Windows\ehome\mcrmgr.exe
O87 - FAEL: "MCX-PlayTo-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "MCX-FDPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-In" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "Microsoft-Windows-PeerDist-WSD-Out" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Windows Driver Foundation - Processus h�te de l�infrastructure de pilotes.) -- C:\Windows\system32\wudfhost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-SSDPSrv-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnPHost-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "WPDMTP-UPnP-Out-TCP" | Out - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe
O87 - FAEL: "RemoteDesktop-UserMode-In-TCP" | In - None - P6 - FALSE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{E785B6E1-E29B-4756-A48D-E009CF015CD5}" | In - Public - P6 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "{7C1EDC18-15A8-4C53-B066-F357241F030A}" | In - Public - P17 - TRUE | .(.CybelSoft - Service de d�tection mat�riel.) -- C:\Program Files\ma-config.com\x64\maconfservice.exe
O87 - FAEL: "TCP Query User{A219E627-506C-4D98-BC44-50FA1A05CF40}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{0CCD0AD1-3935-48E8-A29F-6A8F68178351}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{7B5B78C0-55F1-4AA1-99ED-6CDE591814BB}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Private - P6 - TRUE | .(...) -- C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "UDP Query User{0D753154-786D-4B97-BE4C-2970A5BEDFE5}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Private - P17 - TRUE | .(...) -- C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "{5A64290E-4E69-4C4B-AA2C-CCBF13CAF214}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Installateur Windows�.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{16D75B6F-E02F-4A1F-B113-10C83849C84A}" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Installateur Windows�.) -- C:\Windows\SysWOW64\msiexec.exe
O87 - FAEL: "{E95371C4-965E-4E50-B2D7-34341C19365E}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{FD1C3C90-34B3-4B2D-B391-6598019E5765}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{D63331F8-054E-4787-B6C8-F4E9599E433D}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{1649FD60-9452-4A7A-AD84-77D82D371C0B}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Communications Platform.) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
O87 - FAEL: "{8620E923-A317-4410-B666-4CA8D9ABC8F8}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O87 - FAEL: "{5E767F78-88A8-4B21-BB5B-8DD5AB621111}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Mesh Operating Environment.) -- C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
O87 - FAEL: "TCP Query User{27816412-B6EC-4D36-994E-64438F1549F8}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_488c36b75bc31b10\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_488c36b75bc31b10\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{56B8445C-AF76-4F30-9F85-CE6AF3384B4F}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_488c36b75bc31b10\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_488c36b75bc31b10\launcher.exe (.not file.)
O87 - FAEL: "{E6D357A7-CA51-4537-8FDB-068544DCC629}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe  =>P2P.BitTorrent
O87 - FAEL: "{EB2B1C8C-ECBD-46DB-948B-53B0B28BCE8B}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - �Torrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe  =>P2P.BitTorrent
O87 - FAEL: "{B74B1912-6A94-4B0F-AEF7-7F8FEBBCD690}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\I Am Alive\src\System\IAmAlive_game.exe
O87 - FAEL: "{DBF8BF25-7484-4A33-BC70-0EFFAE1952F6}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\I Am Alive\src\System\IAmAlive_game.exe
O87 - FAEL: "{F33D5AFB-8FA1-4B8F-B69C-8F229F23BADB}" | In - Private - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\I Am Alive\IAmAlive_Launcher.exe
O87 - FAEL: "{11566EEB-7885-485D-A309-6CA14E1FD462}" | In - Private - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\I Am Alive\IAmAlive_Launcher.exe
O87 - FAEL: "TCP Query User{6DBF3E99-EC90-40CB-89E1-98971BA0507C}F:\1e\vnc\winvnc.exe" |In - Private - P6 - TRUE | .(...) -- F:\1e\vnc\winvnc.exe (.not file.)
O87 - FAEL: "UDP Query User{5DFCD94D-660C-4200-B3B3-BB239F3C7AB9}F:\1e\vnc\winvnc.exe" |In - Private - P17 - TRUE | .(...) -- F:\1e\vnc\winvnc.exe (.not file.)
O87 - FAEL: "TCP Query User{D38AD0CD-F084-4E35-A9EC-271961C29124}C:\program files (x86)\tera\tera-launcher.exe" | In - Private - P6 - TRUE | .(.Solid State Networks - TERA.) -- C:\program files (x86)\tera\tera-launcher.exe
O87 - FAEL: "UDP Query User{8E5C311E-8553-47CC-B85E-9DC3B067F4C9}C:\program files (x86)\tera\tera-launcher.exe" | In - Private - P17 - TRUE | .(.Solid State Networks - TERA.) -- C:\program files (x86)\tera\tera-launcher.exe
O87 - FAEL: "TCP Query User{53190B55-DE79-4B83-8D50-03BA6C808BB8}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{64DD890E-EDA4-4F82-BBD0-7192665E2FF8}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.001e_0f529f5f0ebfb750\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{2C874623-45A4-47B2-A36D-BBDC648E498A}C:\users\kevin\appdata\local\akamai\netsession_win.exe" | In - Private - P6 - TRUE | .(.Akamai Technologies, Inc..) -- C:\users\kevin\appdata\local\akamai\netsession_win.exe
O87 - FAEL: "UDP Query User{B6C69F3A-5D81-450A-85AA-04B13D533C69}C:\users\kevin\appdata\local\akamai\netsession_win.exe" | In - Private - P17 - TRUE | .(.Akamai Technologies, Inc..) -- C:\users\kevin\appdata\local\akamai\netsession_win.exe
O87 - FAEL: "TCP Query User{B9D25D64-F60E-40CD-BEE0-AF95421AFF04}C:\users\kevin\downloads\unrealtournament\system\unrealtournament.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\downloads\unrealtournament\system\unrealtournament.exe (.not file.)
O87 - FAEL: "UDP Query User{2D87DAF0-9868-40EB-9D9E-FD74D7F1265E}C:\users\kevin\downloads\unrealtournament\system\unrealtournament.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\downloads\unrealtournament\system\unrealtournament.exe (.not file.)
O87 - FAEL: "TCP Query User{278D8CB3-A4E2-46C6-972D-ADE09CDB1274}C:\users\kevin\appdata\local\akamai\netsession_win.exe" | In - Public - P6 - TRUE | .(.Akamai Technologies, Inc..) -- C:\users\kevin\appdata\local\akamai\netsession_win.exe
O87 - FAEL: "UDP Query User{A64CD22D-7D03-4940-ADF8-A51E891FB9FA}C:\users\kevin\appdata\local\akamai\netsession_win.exe" | In - Public - P17 - TRUE | .(.Akamai Technologies, Inc..) -- C:\users\kevin\appdata\local\akamai\netsession_win.exe
O87 - FAEL: "{B0804D97-6B36-495F-B2E9-E810FBC59FDF}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{1EC36E98-47CE-4F62-86E7-7BF57F547951}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{9CE5862D-A228-4EEA-BB7E-12EE1B9D97EF}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{BBB9C956-BD9A-4BA3-A26E-B259A069A58A}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "TCP Query User{6AFCCBFE-C7A4-437B-AC55-A7020941BB6E}C:\program files (x86)\mozilla firefox\plugin-container.exe" | In - Private - P6 - TRUE | .(.Mozilla Corporation.) -- C:\program files (x86)\mozilla firefox\plugin-container.exe
O87 - FAEL: "UDP Query User{9A2CA570-568E-4FB8-8665-F70A32519EA8}C:\program files (x86)\mozilla firefox\plugin-container.exe" | In - Private - P17 - TRUE | .(.Mozilla Corporation.) -- C:\program files (x86)\mozilla firefox\plugin-container.exe
O87 - FAEL: "{A89B4A14-05E2-4034-825F-C0A48A84EF3A}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\filebulldogtb\dtUser.exe (.not file.)
O87 - FAEL: "{B07657F6-2AA3-4565-A6DE-3A65BCD5C987}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\filebulldogtb\dtUser.exe (.not file.)
O87 - FAEL: "TCP Query User{20A0C4EF-DECD-44A8-A8F3-45D181891E6D}C:\program files (x86)\arma 2\expansion\beta\arma2oa.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\arma 2\expansion\beta\arma2oa.exe (.not file.)
O87 - FAEL: "UDP Query User{DAA5A48F-4A6A-401B-BB6D-D11668F3384E}C:\program files (x86)\arma 2\expansion\beta\arma2oa.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\arma 2\expansion\beta\arma2oa.exe (.not file.)
O87 - FAEL: "TCP Query User{BC71B310-1A37-4211-8CC2-193B3F366EC0}C:\program files (x86)\arma 2\arma2.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\arma 2\arma2.exe (.not file.)
O87 - FAEL: "UDP Query User{51EC082F-2256-4F11-826B-DA5C463CD60E}C:\program files (x86)\arma 2\arma2.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\arma 2\arma2.exe (.not file.)
O87 - FAEL: "{505B951D-CF48-4547-B414-1B14EA4C1CB2}" | In - None - P6 - FALSE | .(.Microsoft Corporation - SMSvcHost.exe.) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
O87 - FAEL: "{D5A75BE3-4458-4DC8-8C07-BF1992EE9770}" | In - Private - P6 - TRUE | .(.Epic Games, Inc. - BUILT WITH UDK.) -- C:\UDK\UDK-2013-02\Binaries\Win32\UDK.exe
O87 - FAEL: "{4C6EC380-2617-459F-BD59-63A177BA0FF0}" | In - Private - P17 - TRUE | .(.Epic Games, Inc. - BUILT WITH UDK.) -- C:\UDK\UDK-2013-02\Binaries\Win32\UDK.exe
O87 - FAEL: "{D7C21F18-23F3-4D5F-ADF7-6182DD007CBD}" | In - Private - P6 - TRUE | .(.Epic Games, Inc. - BUILT WITH UDK.) -- C:\UDK\UDK-2013-02\Binaries\Win64\UDK.exe
O87 - FAEL: "{DFC2F00E-4B7A-45AD-87C7-A291BC799820}" | In - Private - P17 - TRUE | .(.Epic Games, Inc. - BUILT WITH UDK.) -- C:\UDK\UDK-2013-02\Binaries\Win64\UDK.exe
O87 - FAEL: "TCP Query User{65273E91-816B-4E04-93A0-81A5B40C0203}C:\program files (x86)\java\jre7\bin\javaw.exe" | In - Private - P6 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\javaw.exe
O87 - FAEL: "UDP Query User{684F3B8E-FE1E-48FC-89C0-894F140D6465}C:\program files (x86)\java\jre7\bin\javaw.exe" | In - Private - P17 - TRUE | .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\javaw.exe
O87 - FAEL: "TCP Query User{2E8B9EC5-9F7A-4723-8F36-DB8EC3A323B0}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "UDP Query User{A3A2067B-0FA3-4B48-B4E6-E62705C85518}C:\program files (x86)\internet explorer\iexplore.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation.) -- C:\program files (x86)\internet explorer\iexplore.exe
O87 - FAEL: "TCP Query User{AA93F0AA-DD7D-49E6-B5B4-CD63ACDEB141}C:\games\world_of_tanks\wotlauncher.exe" | In - Private - P6 - TRUE | .(.Wargaming.net - World of Tanks Launcher.) -- C:\games\world_of_tanks\wotlauncher.exe
O87 - FAEL: "UDP Query User{2CE365D7-E37A-4D51-9932-49B57DDBB7DE}C:\games\world_of_tanks\wotlauncher.exe" | In - Private - P17 - TRUE | .(.Wargaming.net - World of Tanks Launcher.) -- C:\games\world_of_tanks\wotlauncher.exe
O87 - FAEL: "TCP Query User{A02696BD-F748-49A9-9307-51A079D4BDE8}C:\games\world_of_tanks\worldoftanks.exe" | In - Private - P6 - TRUE | .(.Wargaming.net - World of Tanks.) -- C:\games\world_of_tanks\worldoftanks.exe
O87 - FAEL: "UDP Query User{ACAEA160-3B79-4886-BEB7-F46A0449D191}C:\games\world_of_tanks\worldoftanks.exe" | In - Private - P17 - TRUE | .(.Wargaming.net - World of Tanks.) -- C:\games\world_of_tanks\worldoftanks.exe
O87 - FAEL: "TCP Query User{3BD98319-2134-4339-8ECD-21F68E42BBE2}C:\typsoft ftp server\ftpserv.exe" | In - Private - P6 - TRUE | .(.TYPSoft - TYPSoft FTP Server.) -- C:\typsoft ftp server\ftpserv.exe
O87 - FAEL: "UDP Query User{50A7F152-C5D9-4088-987B-B22575D5D9ED}C:\typsoft ftp server\ftpserv.exe" | In - Private - P17 - TRUE | .(.TYPSoft - TYPSoft FTP Server.) -- C:\typsoft ftp server\ftpserv.exe
O87 - FAEL: "TCP Query User{80F2D6AC-1827-44E2-8B5B-C301F1970015}C:\windows\system32\ftp.exe" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Logiciel de transfert de fichiers.) -- C:\windows\system32\ftp.exe
O87 - FAEL: "UDP Query User{4D4C96B5-A81C-458E-A38B-4CEB3123FBB1}C:\windows\system32\ftp.exe" | In - Private - P17 - TRUE | .(.Microsoft Corporation - Logiciel de transfert de fichiers.) -- C:\windows\system32\ftp.exe
O87 - FAEL: "{BC9AC784-0EAC-4681-AD32-533FC4D71DAC}" | In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
O87 - FAEL: "TCP Query User{33F2A79F-FD83-44AA-A398-C9FC65BA101E}C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe (.not file.)
O87 - FAEL: "UDP Query User{CA0EA1C4-ABFE-4C58-B1DF-B30FFD23FE7E}C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe (.not file.)
O87 - FAEL: "{FB017117-3429-4A34-9919-26E5B6413837}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe (.not file.)
O87 - FAEL: "{697B7D4F-3598-4A73-B573-275F1E8E7A58}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3\revomondial.exe (.not file.)
O87 - FAEL: "TCP Query User{81ABE34F-CF33-4593-AB76-B36B3F30D890}D:\serveur\client 16 03 2012\metin2.bin" |In - Private - P6 - TRUE | .(...) -- D:\serveur\client 16 03 2012\metin2.bin (.not file.)
O87 - FAEL: "UDP Query User{FA0536BE-4EFC-417D-9003-4AEF99DADCB7}D:\serveur\client 16 03 2012\metin2.bin" |In - Private - P17 - TRUE | .(...) -- D:\serveur\client 16 03 2012\metin2.bin (.not file.)
O87 - FAEL: "{1D48A7AB-9C87-42F3-82F7-3C45199A373E}" |In - Public - P17 - TRUE | .(...) -- D:\serveur\client 16 03 2012\metin2.bin (.not file.)
O87 - FAEL: "{8F616660-776B-46C7-B949-F797333E7A51}" |In - Public - P6 - TRUE | .(...) -- D:\serveur\client 16 03 2012\metin2.bin (.not file.)
O87 - FAEL: "TCP Query User{5D457F6C-6272-4822-B775-D51A559BDC30}C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe (.not file.)
O87 - FAEL: "UDP Query User{8609FC0E-E86F-463B-A77E-46A3A8E6FFAD}C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe (.not file.)
O87 - FAEL: "{A8AF9681-1D7F-41A6-A97D-D55822D117BD}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe (.not file.)
O87 - FAEL: "{C13BC1A4-73AF-42B3-ADB1-DA7D2B09ECBF}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie\revomondial.exe (.not file.)
O87 - FAEL: "TCP Query User{353312E9-307F-4256-955B-2F72BAC541D1}C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe (.not file.)
O87 - FAEL: "UDP Query User{909C507C-E056-4E72-B492-EC36D285E0CF}C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe (.not file.)
O87 - FAEL: "{052958C7-642C-4CC2-A0ED-887BA49144EF}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe (.not file.)
O87 - FAEL: "{04E3CE78-34CA-422F-80E4-0CDA1FC67728}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\metin2_sp\game 2012_v3 - copie (2)\revomondial.exe (.not file.)
O87 - FAEL: "TCP Query User{D1B5178C-05F5-4B9E-A29C-E8409CD6A084}C:\program files (x86)\maniaplanet\maniaplanet.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "UDP Query User{98074883-0B5D-4A5E-AF61-CB03E38624C7}C:\program files (x86)\maniaplanet\maniaplanet.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "{96C9E74A-3780-4E77-8AF9-156B50A7DD4C}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "{2FAFA320-57DA-4FEF-8B77-89778BDD874F}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.)
O87 - FAEL: "TCP Query User{B7ECBC3A-7679-46F1-9E90-231C035896D1}C:\users\kevin\desktop\bomberman_code_source\bomber2012.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\bomberman_code_source\bomber2012.exe (.not file.)
O87 - FAEL: "UDP Query User{43604210-FA0B-4E13-95BD-FDA5FE1BDB73}C:\users\kevin\desktop\bomberman_code_source\bomber2012.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\bomberman_code_source\bomber2012.exe (.not file.)
O87 - FAEL: "TCP Query User{206B7CDF-37B7-4A2A-BBAD-DD46481E77A5}C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin" | In - Private - P6 - TRUE | .(.Ymir Entertainment.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin
O87 - FAEL: "UDP Query User{A33804BA-B3DA-4CB5-AAF8-A91B8E8958A7}C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin" | In - Private - P17 - TRUE | .(.Ymir Entertainment.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin
O87 - FAEL: "{BE1857F5-B4B4-433C-B4CD-79D97CE12475}" | In - Public - P17 - TRUE | .(.Ymir Entertainment - Metin2Client.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin
O87 - FAEL: "{E40A9722-1A10-4206-8F84-DE485CBD66B7}" | In - Public - P6 - TRUE | .(.Ymir Entertainment - Metin2Client.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2\metin2client.bin
O87 - FAEL: "TCP Query User{BCF74C3C-0887-4BBA-91D4-4191950FD662}C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin (.not file.)
O87 - FAEL: "UDP Query User{3F9EC06C-08C2-4F5D-AB05-FCFBAAB9F063}C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin (.not file.)
O87 - FAEL: "{414A3A3E-1579-4E1F-89A0-975640552DBD}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin (.not file.)
O87 - FAEL: "{CD879535-F3B0-4AEE-91F8-CCF24F237E29}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie\metin2client.bin (.not file.)
O87 - FAEL: "TCP Query User{A6A8B7AD-B8FA-421B-9BF2-63F1E598AE8E}C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin" | In - Private - P6 - TRUE | .(.Ymir Entertainment.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin
O87 - FAEL: "UDP Query User{66E37F4C-B4DF-4154-870E-F4387FE76146}C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin" | In - Private - P17 - TRUE | .(.Ymir Entertainment.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin
O87 - FAEL: "{C479B3DC-1A9C-49AB-9A78-7E21A096EF76}" | In - Public - P17 - TRUE | .(.Ymir Entertainment - Metin2Client.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin
O87 - FAEL: "{F127C9F8-9B73-4538-AC73-AF532217BFE5}" | In - Public - P6 - TRUE | .(.Ymir Entertainment - Metin2Client.) -- C:\program files (x86)\gameforgelive\games\fra_fra\metin2 - copie (2)\metin2client.bin
O87 - FAEL: "TCP Query User{49AD5D26-B0DD-4F24-BCCA-F1D7662AE260}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{EAE7DFC5-7392-4D9F-BCB8-8307F0543C62}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe (.not file.)
O87 - FAEL: "{8847C402-DC7A-4CC2-8C7C-307C4A9F6E55}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe (.not file.)
O87 - FAEL: "{18BE0658-40F8-4686-8A3A-2139572BD8E0}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_384afeaa435ce4d0\launcher.exe (.not file.)
O87 - FAEL: "{5019C186-11C0-4669-B0D0-2A2612C5D081}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
O87 - FAEL: "{804AF848-D4C8-4044-A106-945DF52DE3BF}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
O87 - FAEL: "TCP Query User{AC7CB591-4FA2-43FC-882D-920A88F480A4}C:\users\kevin\desktop\123\testsfmlserver.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\123\testsfmlserver.exe (.not file.)
O87 - FAEL: "UDP Query User{FF3E3361-377D-458D-8CC5-675B522AD63A}C:\users\kevin\desktop\123\testsfmlserver.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\123\testsfmlserver.exe (.not file.)
O87 - FAEL: "{0C609FD8-7B7A-4A83-A2B9-9A7BBFF471B4}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\123\testsfmlserver.exe (.not file.)
O87 - FAEL: "{1500DED2-AF78-47F5-8C8C-19EFC4072285}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\123\testsfmlserver.exe (.not file.)
O87 - FAEL: "TCP Query User{9DBC5782-4CE1-48FD-91F9-D6846E76E139}C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe" | In - Private - P6 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
O87 - FAEL: "UDP Query User{147B2DC7-F837-46F8-8257-FF58BAB6B8F4}C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe" | In - Private - P17 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
O87 - FAEL: "{AB560131-F8A4-497E-B944-5F5DC863AA96}" | In - Public - P17 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
O87 - FAEL: "{8ADE3EEB-C1A4-47BE-8333-B9BD91B49079}" | In - Public - P6 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
O87 - FAEL: "TCP Query User{C0248FBB-607E-4FB5-8D76-5610ECE807E1}C:\users\kevin\downloads\game 2012_1v3\revomondial.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\downloads\game 2012_1v3\revomondial.exe (.not file.)
O87 - FAEL: "UDP Query User{24EBDECA-B73A-4BBF-93E1-E5C576A5663C}C:\users\kevin\downloads\game 2012_1v3\revomondial.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\downloads\game 2012_1v3\revomondial.exe (.not file.)
O87 - FAEL: "{A5CC55FD-740E-4D5A-8596-B1A55DC12A6E}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\downloads\game 2012_1v3\revomondial.exe (.not file.)
O87 - FAEL: "{6CF1B72A-62FF-45B9-9ACD-3874A31F169F}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\downloads\game 2012_1v3\revomondial.exe (.not file.)
O87 - FAEL: "TCP Query User{22E0EC63-02B1-4CB9-999E-616FE5B06207}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{A4FB3E42-FE57-47C2-A152-5EF111BAEA2D}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe (.not file.)
O87 - FAEL: "{05EAD24C-1E99-4A8C-A831-08AD15CE3913}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe (.not file.)
O87 - FAEL: "{6C10E57A-8F53-4089-AB3E-F54CC30605A2}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0020_9bc09dd3c1a49f10\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{212F4C3A-AA8A-4B24-AC21-AB8B54BDCCBE}C:\users\kevin\desktop\deadz\deadz.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\deadz\deadz.exe (.not file.)
O87 - FAEL: "UDP Query User{2F3EE523-EC21-4FEB-A2A9-CFDCEC2B4A62}C:\users\kevin\desktop\deadz\deadz.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\deadz\deadz.exe (.not file.)
O87 - FAEL: "{2CADA316-9915-4C0D-BA11-65D86C1AA8C1}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\deadz\deadz.exe (.not file.)
O87 - FAEL: "{6C56AC39-4A74-46EA-9EEB-81BC4FF3AF1F}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\deadz\deadz.exe (.not file.)
O87 - FAEL: "TCP Query User{78FBED4B-63FC-41A2-9612-71FF0491D0F9}C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (.not file.)
O87 - FAEL: "UDP Query User{A195258C-5B77-43CD-8EBF-5EB12494220B}C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (.not file.)
O87 - FAEL: "{A639491B-456A-4180-ACDC-C82E852725FD}" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (.not file.)
O87 - FAEL: "{2D7A305B-B303-4613-A35F-F30FF1926C8A}" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\counter-strike global offensive\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (.not file.)
O87 - FAEL: "TCP Query User{48F70896-D475-4CAA-BBDC-4A43D6B00F5C}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{846B0D10-1C63-4E8A-B08B-D0CFD9BF576E}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe (.not file.)
O87 - FAEL: "{017D6C9C-1F66-4911-B8B2-F64D2105F544}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe (.not file.)
O87 - FAEL: "{A3ED6915-3355-4996-9D24-11A36A68E619}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_207224f4c72e4750\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{625B0C08-8986-4E6E-98D8-BF1B5B2A4D56}C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe" | In - Private - P6 - TRUE | .(.Epic Games, Inc..) -- C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
O87 - FAEL: "UDP Query User{1C8AD3DF-946F-49F9-9525-B06F38E2F9BB}C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe" | In - Private - P17 - TRUE | .(.Epic Games, Inc..) -- C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
O87 - FAEL: "{427278CE-7013-4AC0-BE72-AA1DB993043E}" | In - Public - P17 - TRUE | .(.Epic Games, Inc. - Pas de description.) -- C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
O87 - FAEL: "{811FF8E3-1B11-4FC4-98E9-AF01AC32D810}" | In - Public - P6 - TRUE | .(.Epic Games, Inc. - Pas de description.) -- C:\program files (x86)\meteorentertainment\hawken\installedhawkenfiles\binaries\win32\hawkengame-win32-shipping.exe
O87 - FAEL: "{50EAF114-8B7F-4843-AB6E-F9CE91B9B4F4}" | In - Domain - P6 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{53176390-3604-44CF-9402-9F375BA33BD6}" | In - Domain - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{C70754E6-654F-409C-8F81-E15C473E3C26}" | In - Private - P6 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{B82C2091-953C-4C48-9342-262B15B0183C}" | In - Private - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{AFE994F3-C581-49A2-BCFD-29B0E013A20A}" | In - None - P17 - TRUE | .(.Pas de propri�taire - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O87 - FAEL: "{2134867E-F89E-4DBA-BF81-DF0F20FE240F}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
O87 - FAEL: "{56AB4EE4-2231-4E02-A6C4-2A07067CCF71}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
O87 - FAEL: "{7057382C-8578-4E7C-AE60-BA7593EC64BC}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier.exe
O87 - FAEL: "{E3727AD8-EC70-48AE-A6EC-30F2A434E8BF}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier.exe
O87 - FAEL: "{6552E469-D0E4-4A70-B7EF-5250840A18CF}" | In - Public - P6 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\gu.exe
O87 - FAEL: "{AF5A3BB9-C4FD-4A5E-9975-5E1BE8EA6BDB}" | In - Public - P17 - TRUE | .(.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\gu.exe
O87 - FAEL: "{8C4C24B0-574A-4F5A-B967-7293BCE0B692}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier DX11.exe
O87 - FAEL: "{B595F29D-A610-48A4-A313-AE60DC6D9A9E}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier DX11.exe
O87 - FAEL: "{F8029A95-3CC5-4089-833E-1BC813201501}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier DX9.exe
O87 - FAEL: "{324A71B7-270E-4F24-B2F7-FE6AFBFFFA15}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Ghost Recon Future Soldier\Future Soldier DX9.exe
O87 - FAEL: "TCP Query User{04513A06-A001-41FE-9A57-7B259FC2E735}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{F76541BB-A468-4A70-8764-358E334EA35E}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe (.not file.)
O87 - FAEL: "{E4FCB1F0-D7E8-4F33-8C53-689FE0529E4F}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe (.not file.)
O87 - FAEL: "{EA9E61CC-1044-431D-AEB4-AF4C21EB7479}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_0a29c44eb469bfd0\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{91CA372B-5C78-49FC-85A9-3B66569C39D7}C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe" |In - Private - P6 - TRUE | .(...) -- C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe (.not file.)
O87 - FAEL: "UDP Query User{63758AB1-0494-4435-A6A1-F56B3151D590}C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe" |In - Private - P17 - TRUE | .(...) -- C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe (.not file.)
O87 - FAEL: "{E018D92A-EEC0-4C56-88BD-2F424AAE2217}" |In - Public - P17 - TRUE | .(...) -- C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe (.not file.)
O87 - FAEL: "{8349EF03-A161-4418-91F6-78CF4757F182}" |In - Public - P6 - TRUE | .(...) -- C:\ubisoft\ghostrecononline\pdc-live\ghostrecononline.exe (.not file.)
O87 - FAEL: "TCP Query User{2E0ADFAC-11C9-4C2C-9EEB-27F217A26D0E}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe (.not file.)
O87 - FAEL: "UDP Query User{46E6BF1A-00C6-420C-BA19-A281799C4BD7}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe (.not file.)
O87 - FAEL: "{0F4DAA71-A3FB-4414-B767-7A7577454A5C}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe (.not file.)
O87 - FAEL: "{FEF8D623-6F56-4C7F-BB2D-5B1185420B60}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_69ddb507cab74b90\launcher.exe (.not file.)
O87 - FAEL: "TCP Query User{ED84B3BB-4F76-468F-858C-DE91B4892447}C:\users\kevin\desktop\jeux\metin2_sp\game 2012_v3\revomondial.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\metin2_sp\game 2012_v3\revomondial.exe
O87 - FAEL: "UDP Query User{6FFF17A7-BD3C-4302-A3FB-F30398FE4092}C:\users\kevin\desktop\jeux\metin2_sp\game 2012_v3\revomondial.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\metin2_sp\game 2012_v3\revomondial.exe
O87 - FAEL: "TCP Query User{B1D56A9C-6130-4084-83D9-70C4F350106E}C:\users\kevin\desktop\jeux\deadz\deadz.exe" | In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\deadz\deadz.exe
O87 - FAEL: "UDP Query User{4589996C-07B7-4C3A-9930-63C006A637D5}C:\users\kevin\desktop\jeux\deadz\deadz.exe" | In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\deadz\deadz.exe
O87 - FAEL: "{E80185AF-9AF1-49C2-877F-C63DCC6290C4}" | In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\deadz\deadz.exe
O87 - FAEL: "{7487FC74-178D-4765-B664-5CD1381FBED9}" | In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\jeux\deadz\deadz.exe
O87 - FAEL: "{14CAC3A0-B6B3-45F9-BF85-2E9621722109}" | In - Public - P6 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "{F6C2C01A-5436-4A96-BB57-A0B4330391D3}" | In - Public - P17 - TRUE | .(.Valve Corporation - Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win.) -- C:\Program Files (x86)\Steam\Steam.exe
O87 - FAEL: "{3FC9B9B1-7C2E-4098-A90E-B5F414DE4105}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
O87 - FAEL: "{4299B748-16F5-4B43-81BE-841A93D0E4CA}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
O87 - FAEL: "TCP Query User{B26A63DF-7074-4724-8D49-2913CD2675AF}C:\users\kevin\desktop\mt2\revomondial\revomondial.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kevin\desktop\mt2\revomondial\revomondial.exe (.not file.)
O87 - FAEL: "UDP Query User{281386BA-A68B-49A2-ADF0-699FD7D0761F}C:\users\kevin\desktop\mt2\revomondial\revomondial.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kevin\desktop\mt2\revomondial\revomondial.exe (.not file.)
O87 - FAEL: "{639D036C-A7CC-4383-9072-9C8AD3E98046}" |In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\mt2\revomondial\revomondial.exe (.not file.)
O87 - FAEL: "{347381AA-1028-4CB4-9160-4BD417F14148}" |In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\mt2\revomondial\revomondial.exe (.not file.)
O87 - FAEL: "{2EBA6B20-3664-4E30-AEE3-4DDC78110520}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{7DB582B3-ABD0-47D4-9A93-9679A4083B8D}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
O87 - FAEL: "{57FA5CF1-99B1-4D33-9855-6DF8A7D934CE}" | In - Public - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "{A98E011A-F378-487B-9E95-897C3F2891C4}" | In - Public - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer 8.) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O87 - FAEL: "TCP Query User{7FE2701B-48C9-418A-83CB-BEDA36DB7298}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe" | In - Public - P6 - TRUE | .(.Ubisoft.) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe
O87 - FAEL: "UDP Query User{E3657634-CFB7-4FE8-A2A8-6963E190291F}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe" | In - Public - P17 - TRUE | .(.Ubisoft.) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0021_75874090487f0510\launcher.exe
O87 - FAEL: "{439F4C64-6ABE-44C4-B4AC-07D193511989}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{DDDB0CD9-12E4-4308-9A59-4F47E3AED253}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe
O87 - FAEL: "{444F38CE-801C-465F-8557-1B00731B526D}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "{BD063D45-5DFB-46AC-B468-045CBE8A01D3}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe
O87 - FAEL: "TCP Query User{85D7425C-87A1-476F-A415-E15FFB7DD2AE}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Public - P6 - TRUE | .(...) -- C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "UDP Query User{1B859E60-2ADB-4005-8EF4-554F38059EEF}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe" | In - Public - P17 - TRUE | .(...) -- C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
O87 - FAEL: "TCP Query User{E63CB9A7-DC2B-4360-81ED-7E7A9C7A9651}C:\program files (x86)\valmondial-rennaissance\metin2.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\valmondial-rennaissance\metin2.exe
O87 - FAEL: "UDP Query User{B6274867-7ADB-4CDD-B427-D257FE19945E}C:\program files (x86)\valmondial-rennaissance\metin2.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\valmondial-rennaissance\metin2.exe
O87 - FAEL: "TCP Query User{CC6D5872-729B-47CB-9599-DCC4034A9BDE}C:\program files (x86)\valmondial-rennaissance\metin2client.bin" | In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\valmondial-rennaissance\metin2client.bin
O87 - FAEL: "UDP Query User{101A8566-B7A3-448D-8EA8-037B8A7D31AE}C:\program files (x86)\valmondial-rennaissance\metin2client.bin" | In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\valmondial-rennaissance\metin2client.bin
O87 - FAEL: "{F21BE6A1-0647-4458-994F-AE214F736508}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-syst�me spouleur.) -- C:\Windows\system32\spoolsv.exe
O87 - FAEL: "{0C7B7DBA-3AC6-4BA5-A30A-00B93E2D1203}" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{84247AA6-B053-4C73-B160-57792D252333}" | Out - Public - P17 - TRUE | .(.Microsoft Corporation - Processus h�te pour les services Windows.) -- C:\Windows\system32\svchost.exe
O87 - FAEL: "{0AF6939C-CB33-4DD3-A91A-819A4F1E16B3}" | In - Public - P6 - TRUE | .(.SFR - Mediacenter Evolution.) -- C:\Program Files (x86)\SFR\Mediacenter Evolution\MediaCenter.exe
O87 - FAEL: "{9E837B23-243C-40BE-8026-D0013E3FD0E2}" | In - Public - P17 - TRUE | .(.SFR - Mediacenter Evolution.) -- C:\Program Files (x86)\SFR\Mediacenter Evolution\MediaCenter.exe
O87 - FAEL: "{F423B207-6735-45B2-BC03-EFF86BB3AA7B}" | In - Public - P6 - TRUE | .(.Autodesk, Inc. - Backburner Monitor Application.) -- C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
O87 - FAEL: "{F9A56D41-A663-4427-8DEB-7230C5AD0288}" | In - Public - P17 - TRUE | .(.Autodesk, Inc. - Backburner Monitor Application.) -- C:\Program Files (x86)\Autodesk\Backburner\monitor.exe
O87 - FAEL: "{E6F0F13B-FD05-47A5-897A-EBC0BB20BF53}" | In - Public - P6 - TRUE | .(.Autodesk, Inc. - Backburner Manager Application.) -- C:\Program Files (x86)\Autodesk\Backburner\manager.exe
O87 - FAEL: "{066681CB-EFCE-487A-9C8E-D45810E24C3A}" | In - Public - P17 - TRUE | .(.Autodesk, Inc. - Backburner Manager Application.) -- C:\Program Files (x86)\Autodesk\Backburner\manager.exe
O87 - FAEL: "{1EFCBA4F-AE11-481A-87D0-0888C5DFE85C}" | In - Public - P6 - TRUE | .(.Autodesk, Inc. - Backburner Server Application.) -- C:\Program Files (x86)\Autodesk\Backburner\server.exe
O87 - FAEL: "{74B73DAA-87AD-43EF-863A-C7A8CB1105DC}" | In - Public - P17 - TRUE | .(.Autodesk, Inc. - Backburner Server Application.) -- C:\Program Files (x86)\Autodesk\Backburner\server.exe
O87 - FAEL: "{601649E6-316A-4F3B-947D-D339384D8B89}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
O87 - FAEL: "{2B4E96D1-BE3A-4911-907E-6960A958CF87}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
O87 - FAEL: "{BE2A3AF8-7350-4BAA-8601-8FC9674D3D99}" | In - Public - P6 - TRUE | .(.mental images GmbH - mental ray.) -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe
O87 - FAEL: "{8152A19F-DCB8-4C1F-A6BD-CC9C8EACAA83}" | In - Public - P17 - TRUE | .(.mental images GmbH - mental ray.) -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe
O87 - FAEL: "{E7C1065F-B5C9-4C9A-A250-1DAD7F755C33}" | In - Public - P6 - TRUE | .(.Autodesk, Inc. - 3ds Max application.) -- C:\Program Files\Autodesk\3ds Max 2012\3dsmax.exe
O87 - FAEL: "{8106ACB9-FF8E-4917-9DF0-4292D07C1E22}" | In - Public - P17 - TRUE | .(.Autodesk, Inc. - 3ds Max application.) -- C:\Program Files\Autodesk\3ds Max 2012\3dsmax.exe
O87 - FAEL: "TCP Query User{629ADF38-B80F-42A2-B989-8DCFCFD36682}D:\serveur_prepa_d�di�\clientexternalmt2\metin2client.exe" |In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\clientexternalmt2\metin2client.exe (.not file.)
O87 - FAEL: "UDP Query User{2C8F11E3-4176-412D-A144-053BEDE2E99A}D:\serveur_prepa_d�di�\clientexternalmt2\metin2client.exe" |In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\clientexternalmt2\metin2client.exe (.not file.)
O87 - FAEL: "TCP Query User{9F47921E-144D-45E1-A9B4-E5257BD0859D}D:\serveur_prepa_d�di�\client\client 2012\metin2client.exe" |In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\client 2012\metin2client.exe (.not file.)
O87 - FAEL: "UDP Query User{D9A58D9D-EC84-494A-BECF-74D20339FE93}D:\serveur_prepa_d�di�\client\client 2012\metin2client.exe" |In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\client 2012\metin2client.exe (.not file.)
O87 - FAEL: "TCP Query User{2EA0F200-32CA-420E-A161-4E4927D2B7CA}D:\serveur_prepa_d�di�\client\clientexternalmt2\metin2client.exe" |In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\clientexternalmt2\metin2client.exe (.not file.)
O87 - FAEL: "UDP Query User{5150FE4A-6797-4B20-BADC-3DD0D5679CCE}D:\serveur_prepa_d�di�\client\clientexternalmt2\metin2client.exe" |In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\clientexternalmt2\metin2client.exe (.not file.)
O87 - FAEL: "TCP Query User{4F64DF60-365F-4297-A091-5EEAF95A24C5}C:\users\kevin\desktop\emperador\emperador.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\kevin\desktop\emperador\emperador.exe
O87 - FAEL: "UDP Query User{8F410ECC-BEA0-4730-8161-8EA0A8ADCE7B}C:\users\kevin\desktop\emperador\emperador.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\kevin\desktop\emperador\emperador.exe
O87 - FAEL: "TCP Query User{E993088C-2CB4-48C2-9FE8-B04440239790}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe" | In - Public - P6 - TRUE | .(.Ubisoft.) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe
O87 - FAEL: "UDP Query User{94D8222F-613A-455B-BFC6-5FB4444D1FFB}C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe" | In - Public - P17 - TRUE | .(.Ubisoft.) -- C:\users\kevin\appdata\local\apps\2.0\qbt7w605.y29\5d8dd62t.eym\laun...app_59711684aa47878d_0001.0022_711efeb1810e1c10\launcher.exe
O87 - FAEL: "TCP Query User{DE71670D-3D8B-4371-85AE-F9A6DF41A032}D:\serveur_prepa_d�di�\client\clientexternalmt2 - copie\metin2client.exe" |In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\clientexternalmt2 - copie\metin2client.exe (.not file.)
O87 - FAEL: "UDP Query User{C093BAA8-04A5-49F1-B5ED-534340EE23A5}D:\serveur_prepa_d�di�\client\clientexternalmt2 - copie\metin2client.exe" |In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\client\clientexternalmt2 - copie\metin2client.exe (.not file.)
O87 - FAEL: "TCP Query User{EC173FCB-75BC-4F93-871F-0B0481098B9E}D:\serveur_prepa_d�di�\2012\client\clientexternalmt2\metin2client.exe" | In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\clientexternalmt2\metin2client.exe
O87 - FAEL: "UDP Query User{D53BBA6B-542B-4286-8525-06B52BFAB636}D:\serveur_prepa_d�di�\2012\client\clientexternalmt2\metin2client.exe" | In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\clientexternalmt2\metin2client.exe
O87 - FAEL: "TCP Query User{A7D00EF2-B6B8-4395-9F5A-87CC9ED6F0C9}D:\serveur_prepa_d�di�\2012\client\client alpha\metin2client.exe" |In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\client alpha\metin2client.exe (.not file.)
O87 - FAEL: "UDP Query User{73021593-E636-4F9E-81DB-B56ED0961401}D:\serveur_prepa_d�di�\2012\client\client alpha\metin2client.exe" |In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\client alpha\metin2client.exe (.not file.)
O87 - FAEL: "TCP Query User{21FB75AA-E43D-4C8F-AA4A-21CF59433F35}D:\serveur_prepa_d�di�\2012\client\clientexternalmt2 - copie\metin2client.exe" | In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\clientexternalmt2 - copie\metin2client.exe
O87 - FAEL: "UDP Query User{5FEFDDC8-C3BE-4CDD-BC73-1F7C846D538D}D:\serveur_prepa_d�di�\2012\client\clientexternalmt2 - copie\metin2client.exe" | In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\clientexternalmt2 - copie\metin2client.exe
O87 - FAEL: "TCP Query User{04D19049-4FA7-4C24-864B-FDF66F469E07}D:\serveur_prepa_d�di�\2012\client\client alpha\metin2.bin" | In - Public - P6 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\client alpha\metin2.bin
O87 - FAEL: "UDP Query User{AD2D8B0C-DCBC-412B-8B5B-87F32047077F}D:\serveur_prepa_d�di�\2012\client\client alpha\metin2.bin" | In - Public - P17 - TRUE | .(...) -- D:\serveur_prepa_d�di�\2012\client\client alpha\metin2.bin
~ Firewall: 400 Scanned in 00mn 02s



---\\ Enum�re les codes produits des logiciels (PUC) (O90)
O90 - PUC: "03E9C206838F2DA4D82C62C591D2A4CA" . (.Ma-Config.com (64 bits).) -- C:\Windows\Installer\{602C9E30-F838-4AD2-8DC2-265C192D4AAC}\maconfico
O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
O90 - PUC: "0D5EEEC4509F88649B9FCE7C01057769" . (.HTC Driver Installer.) -- C:\Windows\Installer\{4CEEE5D0-F905-4688-B9F9-ECC710507796}\ARPPRODUCTICON.exe
O90 - PUC: "0D9196FA196553F4D956459F18105341" . (.Microsoft SQL Server Compact 3.5 SP2 FRA.) -- C:\Windows\Installer\{AF6919D0-5691-4F35-9D65-54F981013514}\ProductIcon
O90 - PUC: "104C2FB8EC20D424CB62C6F4F94B646B" . (.Macromedia Flash 8 Video Encoder.) -- C:\Windows\Installer\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}\ARPPRODUCTICONFLV1.exe
O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe
O90 - PUC: "1459101E2A01F4642AE34A2FD36A1506" . (.Mumble 1.2.3.) -- C:\Windows\Installer\{E1019541-10A2-464F-A23E-A4F23DA65160}\mumble.ico
O90 - PUC: "1B5C2005886BA474BAA3B956BD3DF89F" . (.HTC Sync Manager.) -- C:\Windows\Installer\{5002C5B1-B688-474A-AB3A-9B65DBD38FF9}\ARPPRODUCTICON.exe
O90 - PUC: "1C4235E6CF4867F4A9A36CE5708FE06E" . (.Compl�ment Messenger.) -- C:\Windows\Installer\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}\CompanionIcon
O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
O90 - PUC: "224BF55B308B5F1155283B66E61A9BCA" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{B55FB422-B803-11F5-5582-B3666EA1B9AC}\ARPPRODUCTICON.exe
O90 - PUC: "2962BE55EFAF2534AADCBA39975EF780" . (.XSplit.) -- C:\Windows\Installer\{55EB2692-FAFE-4352-AACD-AB9379E57F08}\XSplit.Core.exe
O90 - PUC: "29E590689591463829E0288EF1468FBF" . (.Catalyst Control Center.) -- C:\Windows\Installer\{86095E92-1959-8364-920E-82E81F64F8FB}\ARPPRODUCTICON.exe
O90 - PUC: "29F618052561C7A49BCB846F2847C2B4" . (.Messenger Companion.) -- C:\Windows\Installer\{50816F92-1652-4A7C-B9BC-48F682742C4B}\CompanionIcon
O90 - PUC: "2C7380F890EE3094883F9167EFF7FFE4" . (.Autodesk Material Library 2012.) -- C:\Windows\Installer\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}\ARPPRODUCTICON.exe
O90 - PUC: "3058F5C62D55893458C863B2A7A75FC1" . (.Firebird SQL Server - MAGIX Edition.) -- C:\Windows\Installer\{6C5F8503-55D2-4398-858C-362B7A7AF51C}\ProgramIcon.exe
O90 - PUC: "32FA0F2EF2EF2224A934556EC34CE11F" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}\ARPPRODUCTICON.exe
O90 - PUC: "3CB432AEEF9343747BF270066888F9D6" . (.Composite 2012 64-bit.) -- C:\Windows\Installer\{EA234BC3-39FE-4734-B72F-076086889F6D}\compositeIcon
O90 - PUC: "4BB570A2679E8724FBF35E6C49D5480C" . (.bl.) -- C:\Windows\Installer\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}\ARPPRODUCTICON.exe
O90 - PUC: "503C5DB272B114D46B09A71671D2F2BE" . (.Macromedia Flash 8.) -- C:\Windows\Installer\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}\ARPPRODUCTICONFL8.exe
O90 - PUC: "5171575B01CE9D34C859261E634833FE" . (.Autodesk Material Library Medium Resolution Image Library 2012.) -- C:\Windows\Installer\{B5751715-EC10-43D9-8C95-62E1368433EF}\ARPPRODUCTICON.exe
O90 - PUC: "52608575376CAEF778198EB4A7FA0596" . (.ccc-utility64.) -- C:\Windows\Installer\{57580625-C673-7FEA-8791-E84B7AAF5069}\ARPPRODUCTICON.exe
O90 - PUC: "56AFD012508FB2A1F438E87272A93E58" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{210DFA65-F805-1A2B-4F83-8E27279AE385}\ARPPRODUCTICON.exe
O90 - PUC: "5979F581366931F4E99F03A782A2BDA5" . (.ph.) -- C:\Windows\Installer\{185F9795-9663-4F13-9EF9-307A282ADB5A}\ARPPRODUCTICON.exe
O90 - PUC: "60F27A2208AFBC24A9C8646CEA3524C5" . (.Aeria Ignite.) -- C:\Windows\Installer\{22A72F06-FA80-42CB-9A8C-46C6AE53425C}\application.exe
O90 - PUC: "6242953CE135011419D1FBCE2EEC82C4" . (.osu!.) -- C:\Windows\Installer\{C3592426-531E-4110-911D-BFECE2CE284C}\osunew_0001.ico
O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.01) - Fran�ais.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
O90 - PUC: "762A30E5E5143835AFF8C34E4165369B" . (.AMD Catalyst Install Manager.) -- C:\Windows\Installer\{5E03A267-415E-5383-FA8F-3CE4145663B9}\ARPPRODUCTICON.exe
O90 - PUC: "76EA78D0BE4101C4885AADC61318BE81" . (.Windows Live Family Safety.) -- C:\Windows\Installer\{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}\fssicon.ico
O90 - PUC: "80525926F6C813D4892090F96CB7143C" . (.I Am Alive.) -- C:\Windows\Installer\{62952508-8C6F-4D31-9802-099FC67B41C3}\ARPPRODUCTICON.exe
O90 - PUC: "8928C3270B7CC0401A6B3CABF6F3AF1B" . (.Autodesk 3ds Max 2012 64-bit - French.) -- C:\Windows\Installer\{723C8298-C7B0-040C-A1B6-C3BA6F3FFAB1}\ico_product
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe
O90 - PUC: "9CD02456E603173409F54FCDB314E825" . (.Autodesk Material Library Base Resolution Image Library 2012.) -- C:\Windows\Installer\{65420DC9-306E-4371-905F-F4DC3B418E52}\ARPPRODUCTICON.exe
O90 - PUC: "AF32006D1FD3735439DD3120C44C3E66" . (.Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA.) -- C:\Windows\Installer\{D60023FA-3DF1-4537-93DD-13024CC4E366}\ProductIcon
O90 - PUC: "B4A2F9673A486849DA2DE9A54B4B1E3E" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}\ARPPRODUCTICON.exe
O90 - PUC: "C52F2B06BC229DC41986C83607D81C1A" . (.LibreOffice 3.6.) -- C:\Windows\Installer\{60B2F25C-22CB-4CD9-9168-8C63708DC1A1}\soffice.ico
O90 - PUC: "CFA7A10B6530FA343A336C9521EA8ACD" . (.Objets de gestion Microsoft SQL Server 2008 R2.) -- C:\Windows\Installer\{B01A7AFC-0356-43AF-A333-C65912AEA8DC}\ARPIco
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- c:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
O90 - PUC: "E50A609283D274B4582A3D84E573C2F8" . (.Microsoft SQL Server Compact 3.5 SP2 x64 FRA.) -- C:\Windows\Installer\{2906A05E-2D38-4B47-85A2-D3485E372C8F}\ProductIcon
O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype� 6.6.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O90 - PUC: "EBCC66208DBBC6144AF8F74CC7D65B66" . (.Microsoft SQL Server System CLR Types.) -- C:\Windows\Installer\{0266CCBE-BBD8-416C-A48F-7FC47C6DB566}\ARPIco
~ Update Products: 162 Scanned in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.3CD19859CD377AD00B30E4BEE49D374E] [WIS][11/01/2013] (.SweetIM Technologies Ltd. - Sweetpacks Communicator 1.1.) -- C:\Windows\Installer\100062.msi   [2997248]  =>PUP.SweetIM
[MD5.8162838BC8E755249501033F5BEF258D] [WIS][24/01/2013] (.Wacom Europe GmbH - Bamboo Dock.) -- C:\Windows\Installer\149816eb.msi   [26624]
[MD5.73122534D527893BDEFD1F707FFB34F6] [WIS][16/08/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\16cb1d07.msi   [21803008]
[MD5.27AC93294D781789C1E960063CD27136] [WIS][09/07/2012] (.Expert Commercial Software Pty Ltd - HexEdit Installer.) -- C:\Windows\Installer\1dd5991.msi   [10631168]
[MD5.049083AF5D3A6909D89BC836D616BA8D] [WIS][06/06/2013] (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Windows\Installer\43b7f.msi   [1923584]
[MD5.0AED483767A42ED89598B71B9F699F4A] [WIS][06/09/2012] (.SplitMediaLabs - XSplit.) -- C:\Windows\Installer\4daefe9.msi   [889856]
[MD5.ED6D5FC5CC7DCCA653F7A0BEAB01035D] [WIS][18/04/2013] (.HTC Corporation - HTC Driver.) -- C:\Windows\Installer\86062c4.msi   [17305344]
[MD5.63453EA408FB08511563F2043DD99AC0] [WIS][18/04/2013] (.HTC - HTC Sync Manager.) -- C:\Windows\Installer\86062d0.msi   [64916480]
[MD5.3B2736D2EB0CDF8AE496928E959D406C] [WIS][06/03/2013] (.Linkury Inc. - QuickShare Widget.) -- C:\Windows\Installer\a52b621.msi   [8556544]  =>PUP.QuickShare
[MD5.0FA5049FB6A5636F007EB87C1CB335DA] [WIS][08/04/2013] (.peppy - osu! installer.) -- C:\Windows\Installer\a78e02.msi   [38903808]
[MD5.D2F34AF196CCAF29A124324392FC3DFF] [WIS][28/06/2013] (.Valve Corporation - Steam.) -- C:\Windows\Installer\adf866b.msi   [8532992]
[MD5.E4AF16B0574B2598AADD353A35A3722B] [WIS][05/04/2012] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\b324dd4.msi   [2211328]
[MD5.78B41A323699DAF1C25265890733BE26] [WIS][05/04/2012] (.Adobe - Blank Project Template.) -- C:\Windows\Installer\b324ddd.msi   [1997312]
[MD5.3BEA739AF7E8189D713E28A0100E0DFA] [WIS][04/07/2013] (.LogMeIn, Inc. - LogMeIn Hamachi Installer.) -- C:\Windows\Installer\c536.msi   [4296704]
~ WIS: 169 Scanned in 00mn 20s



---\\ Etat g�n�ral des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 13/06/2012 1009840 |  (AcuWVSSchedulerv8) . (...) - C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe
SR - | Auto 18/12/2012 65192 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 19/12/2012 240640 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SR - | Auto 09/05/2013 46808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 24/05/2011 1840128 |  (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
SS - | Demand 26/04/2011 2702848 |  (FirebirdServerMAGIXInstance) . (.MAGIX�.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
SS - | Demand 05/08/2013 1431888 |  (FLEXnet Licensing Service 64) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
SS - | Auto 28/06/2013 2470736 |  (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
SR - | Auto 29/01/2013 87368 |  (HTCMonitorService) . (.Nero AG.) - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
SR - | Auto 19/11/2012 14904 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SS - | Demand 28/10/2012 427976 |  (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe
SR - | Auto 22/02/2011 86016 |  (mi-raysat_3dsmax2012_64) . (...) - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
SS - | Demand 17/08/2013 117656 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 07/12/2012 167424 |  (PassThru Service) . (...) - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
SR - | Auto 00\00\0000 0 |  (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SS - | Auto 21/06/2013 162408 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 26/07/2013 563624 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Demand 19/02/2010 517096 |  (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SR - | Auto 08/07/2013 4153184 |  (TeamViewer8) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
SR - | Demand 13/05/2012 22016 |  (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe
SR - | Demand 19/04/2012 9693696 |  (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SS - | Demand 00\00\0000 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 11/12/2012 619904 |  (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 22s



---\\ Recherche dinfection sur le Master Boot Record (MBR)(O80)
Run by Kevin at 29/08/2013 17:35:49
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s



---\\ Recherche dinfection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Kevin at 29/08/2013 17:35:51

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Liste des �mulateurs de CD/DVD (MBR Hook)
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
~ Emulateurs:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : v2.12869 - (29/08/2013)
Cl�s trouv�es (Keys found) : 56
Valeurs trouv�es (Values found) : 1
Dossiers trouv�s  (Folders found) : 7
Fichiers trouv�s  (Files found) : 7

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker]   =>Adware.MegaSearch^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6C5E8E06-AE16-48A4-866A-575745B3233C}]   =>PUP.QuickShare^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Browser Infrastructure Helper]   =>PUP.QuickShare^
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\SDP]   =>Adware.MegaSearch^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]   =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}]   =>Adware.IMBooster
[HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}]   =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}]   =>Hijacker.SmartBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}]   =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}]   =>Adware.Agent
[HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}]   =>Adware.Agent
[HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}]   =>Hijacker.SmartBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]   =>Toolbar.Ask&Record
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]   =>Toolbar.Ask&Record
[HKLM\Software\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]   =>Toolbar.Ask&Record
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]   =>Toolbar.Ask&Record
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv]   =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\PriceGong]   =>Adware.PriceGong
[HKCU\Software\SmartbarBackup]   =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog]   =>Hijacker.SmartBar
[HKCU\Software\Somoto]   =>Adware.MegaSearch
[HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B]   =>PUP.SweetIM
[HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B]   =>PUP.SweetIM
[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}]   =>PUP.SweetIM
[HKCU\Software\InstallCore]   =>Adware.InstallCore
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller]   =>Adware.MegaSearch
[HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASAPI32]   =>PUP.QuickShare
[HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASMANCS]   =>PUP.QuickShare
[HKCU\Software\BI]   =>Adware.MegaSearch
[HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{ae07101b-46d4-4a98-af68-0333ea26e113}   =>PUP.QuickShare^
C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\vb85ksdo.default\foxyproxy@eric.h.jung   =>Hijacker.Proxy^
C:\Users\Kevin\AppData\Local\FilesFrog Update Checker   =>Adware.MegaSearch^
C:\Users\Kevin\AppData\Local\Smartbar   =>Hijacker.SmartBar^
C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker   =>Adware.MegaSearch^
C:\Users\Kevin\AppData\Local\Bundled software uninstaller   =>Adware.MegaSearch
C:\Users\Kevin\AppData\LocalLow\PriceGong   =>Adware.PriceGong
C:\Users\Kevin\AppData\LocalLow\Smartbar   =>Hijacker.SmartBar
C:\Users\Kevin\AppData\Local\FilesFrog Update Checker\update_checker.exe   =>Adware.MegaSearch^
C:\Windows\System32\mscoree.dll   =>PUP.QuickShare^
[HKCU\Software\Conduit]   =>Toolbar.Conduit^
[HKCU\Software\Smartbar]   =>Hijacker.SmartBar^
C:\Users\Kevin\AppData\Local\Smartbar\Application\QuickShare.exe   =>PUP.QuickShare^
C:\Windows\Installer\100062.msi   =>PUP.SweetIM^
C:\Windows\Installer\a52b621.msi   =>PUP.QuickShare^
~ Additionnel Scan: 454961 Items scanned in 00mn 23s



---\\ R�capitulatif des d�tections trouv�es sur votre station
~ http://nicolascoolman.webs.com26919368-adware-megasearch   =>Adware.MegaSearch
~ http://nicolascoolman.webs.com27232411-hijacker-proxy    =>Hijacker.Proxy
~ http://nicolascoolman.webs.com28577022-pup-quickshare   =>PUP.QuickShare
~ http://nicolascoolman.webs.com29216159-pup-sweetim   =>PUP.SweetIM
~ http://nicolascoolman.webs.com26666995-adware-pricegong   =>Adware.PriceGong
~ http://nicolascoolman.webs.com29507721-toolbar-conduit   =>Toolbar.Conduit
~ http://nicolascoolman.webs.com29790567-adware-installcore   =>Adware.InstallCore
~ http://nicolascoolman.webs.com26990375-hijacker-smartbar   =>Hijacker.SmartBar
~ http://nicolascoolman.webs.com26684723-adware-imbooster  =>Adware.IMBooster
~ MSI: 9 link(s) detected in 00mn 24s



End of the scan (2415 lines in 06mn 20s)(0)