PC à désinfecter

[and1]

Bonjour,

 

j'ai un logiciel que je ne pouvait pas supprimer.

Après l'analyse Antivir celui ne se mets a priori plus en marche dès l'ouverture de windows. Une bonne chose de faite (ou pas), mais j'aimerais allez plus loin dans la désinfection de mon PC.

C'était un logiciel de type Key CORE.

 

Merci pour votre aide, ça faisait longtemps que je n'avais pas eu besoin de votre aide mais là je pense qu'il me faut des experts.

 

Ci dessous le rapport Antivir et après le rapport Hijackthis :

 

1 RAPPORT ANTIVIR

 

 

 

Avira AntiVir Personal

Date de création du fichier de rapport : jeudi 22 septembre 2011 09:48

 

La recherche porte sur 3404676 souches de virus.

 

Le programme fonctionne en version intégrale illimitée.

Les services en ligne sont disponibles.

 

Détenteur de la licence : Avira AntiVir Personal - Free Antivirus

Numéro de série : 0000149996-ADJIE-0000001

Plateforme : Windows 7 x64

Version de Windows : (Service Pack 1) [6.1.7601]

Mode Boot : Démarré normalement

Identifiant : BB

Nom de l'ordinateur : BB-PC

 

Informations de version :

BUILD.DAT : 10.2.0.150 Bytes 26/07/2011 11:07:00

AVSCAN.EXE : 10.3.0.7 484008 Bytes 21/07/2011 10:20:47

AVSCAN.DLL : 10.0.5.0 56680 Bytes 21/07/2011 10:22:30

LUKE.DLL : 10.3.0.5 45416 Bytes 21/07/2011 10:21:49

LUKERES.DLL : 10.0.0.0 13672 Bytes 21/04/2011 05:55:52

AVSCPLR.DLL : 10.3.0.7 119656 Bytes 21/07/2011 10:20:48

AVREG.DLL : 10.3.0.9 90472 Bytes 21/07/2011 10:20:43

VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 08:05:36

VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 05:55:46

VBASE002.VDF : 7.11.3.0 1950720 Bytes 09/02/2011 05:55:47

VBASE003.VDF : 7.11.5.225 1980416 Bytes 07/04/2011 10:22:06

VBASE004.VDF : 7.11.8.178 2354176 Bytes 31/05/2011 10:22:07

VBASE005.VDF : 7.11.10.251 1788416 Bytes 07/07/2011 10:22:08

VBASE006.VDF : 7.11.13.60 6411776 Bytes 16/08/2011 07:44:24

VBASE007.VDF : 7.11.13.61 2048 Bytes 16/08/2011 07:44:24

VBASE008.VDF : 7.11.13.62 2048 Bytes 16/08/2011 07:44:24

VBASE009.VDF : 7.11.13.63 2048 Bytes 16/08/2011 07:44:25

VBASE010.VDF : 7.11.13.64 2048 Bytes 16/08/2011 07:44:25

VBASE011.VDF : 7.11.13.65 2048 Bytes 16/08/2011 07:44:25

VBASE012.VDF : 7.11.13.66 2048 Bytes 16/08/2011 07:44:25

VBASE013.VDF : 7.11.13.95 166400 Bytes 17/08/2011 07:44:25

VBASE014.VDF : 7.11.13.125 209920 Bytes 18/08/2011 07:44:26

VBASE015.VDF : 7.11.13.157 184832 Bytes 22/08/2011 07:44:26

VBASE016.VDF : 7.11.13.201 128000 Bytes 24/08/2011 07:44:26

VBASE017.VDF : 7.11.13.234 160768 Bytes 25/08/2011 07:44:26

VBASE018.VDF : 7.11.14.16 141312 Bytes 30/08/2011 07:44:27

VBASE019.VDF : 7.11.14.48 133120 Bytes 31/08/2011 07:44:27

VBASE020.VDF : 7.11.14.78 156160 Bytes 02/09/2011 07:44:27

VBASE021.VDF : 7.11.14.109 126976 Bytes 06/09/2011 07:44:28

VBASE022.VDF : 7.11.14.137 131584 Bytes 08/09/2011 07:44:28

VBASE023.VDF : 7.11.14.166 196096 Bytes 12/09/2011 07:44:28

VBASE024.VDF : 7.11.14.193 184832 Bytes 14/09/2011 07:44:28

VBASE025.VDF : 7.11.14.215 125952 Bytes 16/09/2011 07:44:29

VBASE026.VDF : 7.11.14.239 231936 Bytes 20/09/2011 07:44:29

VBASE027.VDF : 7.11.14.240 2048 Bytes 20/09/2011 07:44:29

VBASE028.VDF : 7.11.14.241 2048 Bytes 20/09/2011 07:44:29

VBASE029.VDF : 7.11.14.242 2048 Bytes 20/09/2011 07:44:29

VBASE030.VDF : 7.11.14.243 2048 Bytes 20/09/2011 07:44:30

VBASE031.VDF : 7.11.15.3 126464 Bytes 21/09/2011 07:44:30

Version du moteur : 8.2.6.64

AEVDF.DLL : 8.1.2.1 106868 Bytes 21/04/2011 05:55:15

AESCRIPT.DLL : 8.1.3.76 1626490 Bytes 22/09/2011 07:44:36

AESCN.DLL : 8.1.7.2 127349 Bytes 21/04/2011 05:55:13

AESBX.DLL : 8.2.1.34 323957 Bytes 21/07/2011 10:20:12

AERDL.DLL : 8.1.9.15 639348 Bytes 22/09/2011 07:44:35

AEPACK.DLL : 8.2.10.10 684407 Bytes 22/09/2011 07:44:34

AEOFFICE.DLL : 8.1.2.15 201083 Bytes 22/09/2011 07:44:34

AEHEUR.DLL : 8.1.2.169 3703160 Bytes 22/09/2011 07:44:34

AEHELP.DLL : 8.1.17.7 254327 Bytes 22/09/2011 07:44:32

AEGEN.DLL : 8.1.5.9 401780 Bytes 22/09/2011 07:44:31

AEEMU.DLL : 8.1.3.0 393589 Bytes 21/04/2011 05:55:02

AECORE.DLL : 8.1.23.0 196983 Bytes 22/09/2011 07:44:31

AEBB.DLL : 8.1.1.0 53618 Bytes 21/04/2011 05:55:01

AVWINLL.DLL : 10.0.0.0 19304 Bytes 21/04/2011 05:55:23

AVPREF.DLL : 10.0.3.2 44904 Bytes 21/07/2011 10:20:42

AVREP.DLL : 10.0.0.10 174120 Bytes 21/07/2011 10:20:43

AVARKT.DLL : 10.0.26.1 255336 Bytes 21/07/2011 10:20:23

AVEVTLOG.DLL : 10.0.0.9 203112 Bytes 21/07/2011 10:20:37

SQLITE3.DLL : 3.6.19.0 355688 Bytes 21/07/2011 13:12:32

AVSMTP.DLL : 10.0.0.17 63848 Bytes 21/04/2011 05:55:22

NETNT.DLL : 10.0.0.0 11624 Bytes 21/04/2011 05:55:36

RCIMAGE.DLL : 10.0.0.35 2589544 Bytes 21/07/2011 10:22:33

RCTEXT.DLL : 10.0.64.0 100712 Bytes 21/07/2011 10:22:33

 

Configuration pour la recherche actuelle :

Nom de la tâche...............................: Lecteurs locaux

Fichier de configuration......................: C:\Program Files (x86)\Avira\AntiVir Desktop\alldrives.avp

Documentation.................................: par défaut

Action principale.............................: interactif

Action secondaire.............................: ignorer

Recherche sur les secteurs d'amorçage maître..: marche

Recherche sur les secteurs d'amorçage.........: marche

Secteurs d'amorçage...........................: C:, D:, Q:, E:,

Recherche dans les programmes actifs..........: marche

Recherche en cours sur l'enregistrement.......: marche

Recherche de Rootkits.........................: arrêt

Contrôle d'intégrité de fichiers système......: arrêt

Fichier mode de recherche.....................: Sélection de fichiers intelligente

Recherche sur les archives....................: marche

Limiter la profondeur de récursivité..........: 20

Archive Smart Extensions......................: marche

Heuristique de macrovirus.....................: marche

Heuristique fichier...........................: avancé

 

Début de la recherche : jeudi 22 septembre 2011 09:48

 

La recherche sur les processus démarrés commence :

Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés

Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés

Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés

Processus de recherche 'plugin-container.exe' - '1' module(s) sont contrôlés

Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés

Processus de recherche 'bdimguiaux.exe' - '1' module(s) sont contrôlés

Processus de recherche 'iTunesHelper.exe' - '1' module(s) sont contrôlés

Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés

Processus de recherche 'NBAgent.exe' - '1' module(s) sont contrôlés

Processus de recherche 'NkMonitor.exe' - '1' module(s) sont contrôlés

Processus de recherche 'PMBVolumeWatcher.exe' - '1' module(s) sont contrôlés

Processus de recherche 'HControlUser.exe' - '1' module(s) sont contrôlés

Processus de recherche 'DMedia.exe' - '1' module(s) sont contrôlés

Processus de recherche 'ATKOSD2.exe' - '1' module(s) sont contrôlés

Processus de recherche 'Boingo Wi-Fi.exe' - '1' module(s) sont contrôlés

Processus de recherche 'PDVD9Serv.exe' - '1' module(s) sont contrôlés

Processus de recherche 'KiesPDLR.exe' - '1' module(s) sont contrôlés

Processus de recherche 'KiesTrayAgent.exe' - '1' module(s) sont contrôlés

Processus de recherche 'TomTomHOMERunner.exe' - '1' module(s) sont contrôlés

Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés

Processus de recherche 'CLMLSvc.exe' - '1' module(s) sont contrôlés

Processus de recherche 'AsScrPro.exe' - '1' module(s) sont contrôlés

 

La recherche sur les secteurs d'amorçage maître commence :

Secteur d'amorçage maître HD0

[iNFO] Aucun virus trouvé !

[iNFO] Veuillez relancer la recherche avec les droits d'administrateur

 

La recherche sur les secteurs d'amorçage commence :

Secteur d'amorçage 'C:\'

[iNFO] Aucun virus trouvé !

[iNFO] Veuillez relancer la recherche avec les droits d'administrateur

Secteur d'amorçage 'D:\'

[iNFO] Aucun virus trouvé !

[iNFO] Veuillez relancer la recherche avec les droits d'administrateur

Secteur d'amorçage 'Q:\'

[iNFO] Aucun virus trouvé !

[iNFO] Veuillez relancer la recherche avec les droits d'administrateur

 

La recherche sur les renvois aux fichiers exécutables (registre) commence :

Le registre a été contrôlé ( '814' fichiers).

 

 

La recherche sur les fichiers sélectionnés commence :

 

Recherche débutant dans 'C:\' <OS>

C:\Users\BB\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\46c0b442-55b6e9b0

[0] Type d'archive: ZIP

--> Trollllllle.class

[RESULTAT] Contient le modèle de détection du virus Java JAVA/Agent.4653

--> a.class

[RESULTAT] Contient le modèle de détection du virus Java JAVA/Agent.10515

C:\Users\BB\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\40000834-77e31deb

[0] Type d'archive: ZIP

--> buildService/MailAgent.class

[RESULTAT] Contient le modèle de détection de l'exploit EXP/2010-0840.AO

--> buildService/VirtualTable.class

[RESULTAT] Contient le modèle de détection de l'exploit EXP/2010-0840.AO

Recherche débutant dans 'D:\' <Data>

Recherche débutant dans 'Q:\'

Impossible d'ouvrir le chemin à scanner Q:\ !

Erreur système [5]: Accès refusé.

Recherche débutant dans 'E:\'

Impossible d'ouvrir le chemin à scanner E:\ !

Erreur système [21]: Le périphérique n’est pas prêt.

 

Début de la désinfection :

C:\Users\BB\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\40000834-77e31deb

[RESULTAT] Contient le modèle de détection de l'exploit EXP/2010-0840.AO

[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '48a9bad7.qua' !

C:\Users\BB\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\46c0b442-55b6e9b0

[RESULTAT] Contient le modèle de détection du virus Java JAVA/Agent.10515

[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '504b950e.qua' !

 

 

Fin de la recherche : jeudi 22 septembre 2011 13:01

Temps nécessaire: 3:12:35 Heure(s)

 

La recherche a été effectuée intégralement

 

32426 Les répertoires ont été contrôlés

542504 Des fichiers ont été contrôlés

4 Des virus ou programmes indésirables ont été trouvés

0 Des fichiers ont été classés comme suspects

0 Des fichiers ont été supprimés

0 Des virus ou programmes indésirables ont été réparés

2 Les fichiers ont été déplacés dans la quarantaine

0 Les fichiers ont été renommés

0 Impossible de scanner des fichiers

542500 Fichiers non infectés

4447 Les archives ont été contrôlées

0 Avertissements

2 Consignes

 

 

 

2 RAPPORT HIJACKTHIS :

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 13:13:28, on 22/09/2011

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

 

Running processes:

C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

C:\Windows\AsScrPro.exe

C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe

C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe

C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files\BitDefender\BitDefender 2010\antispam32\bdimguiaux.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll

O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - "C:\Program Files\BitDefender\BitDefender 2010\Antispam32\IEToolbar.dll" (file missing)

O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"

O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"

O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"

O4 - HKLM\..\Run: [boingo Wi-Fi] "C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s

O4 - HKCU\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')

O4 - Global Startup: FancyStart daemon.lnk = ?

O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. Antivirus Software for Virus Protection - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe

O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe

O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe

O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe

O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe

O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe

O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: BitDefender Threat Scanner (scan) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe

O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe

O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

 

--

End of file - 28666 bytes

 

 

 

MERCI D'AVANCE POUR AIDE.4

 

En attente des instructions à suivre.

 

Cordialement,

[pear]

Bonjour,

 

Hijackthis ne vaut plus guère!

 

Lancez cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Double-cliquer sur ZHPDiag.exe pour installer l'outil

Sur le bureau ,il y aura 3 icônes

 

Sous XP, double clic sur l'icône ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

Clic sur la Loupe pour lancer le scan

En cas de blocage, sur O80 par exemple, cliquez sur le tournevis pour le décocher

Postez le rapport ZhpDiag.txt qui apparait sur le bureau

Comment poster les rapports

Vous copiez/collez tout ou partie des rapports dans un ou plusieurs messages.

Autre solution:

Aller sur le site :Ci-Joint

Appuyez sur Parcourir et chercher les rapports sur le disque,

Ensuite appuyez sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

[and1]

Re bonjour,

comme demandé ci dessous le rapport ZhpDiag :

 

 

RAPPORT ZHPDIAG/

 

Rapport de ZHPDiag v1.28.1350 par Nicolas Coolman, Update du 20/09/2011

Run by BB at 22/09/2011 16:09:30

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v9.0.8112.16421

MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)

OBIE: Safari v5.33.21.1

 

---\\ Windows Product Information

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Windows Server License Manager Script : OK

~ Windows® 7, OEM_SLP channel

System Locked Preinstallation (OEM_SLP) : OK

Windows ID Activation : OK

~ Windows Partial Key : 9YQTR

Windows License : OK

~ Windows Remaining Initializations Number : 3

Software Protection Service (Protection logicielle) : OK

Windows Automatic Updates : OK

Windows Activation Technologies : OK

 

---\\ System Information

~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel

~ Operating System: 64 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3948 MB (54% free)

System Restore: Activé (Enable)

System drive C: has 80 GB (53%) free of 149 GB

 

---\\ Logged in mode

~ Computer Name: BB-PC

~ User Name: BB

~ All Users Names: HomeGroupUser$, BB, Administrateur,

~ Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Users\BB\AppData\Roaming\

~ %Desktop% : C:\Users\BB\Desktop\

~ %Favorites% : C:\Users\BB\Favorites\

~ %LocalAppData% : C:\Users\BB\AppData\Local\

~ %StartMenu% : C:\Users\BB\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 80 Go of 149 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 161 Go of 428 Go)

E:\ CD-ROM drive (Not Inserted)

Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.30/04/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]

[MD5.DD81D91FF3B0763C392422865C9AC12E] - (....) (.14/07/2009 - 02:39:31.) -- C:\Windows\system32\rundll32.exe [45568]

[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\system32\Wininit.exe [129024]

[MD5.0732B49B250E306F7A6591029AF9885B] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/08/2011 - 06:36:16.) -- C:\Windows\system32\wininet.dll [1389056]

[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.11/03/2011 - 14:25:30.) -- C:\Windows\system32\Winlogon.exe [390656]

[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\drivers\atapi.sys [24128]

[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.30/04/2011 - 07:41:34.) -- C:\Windows\system32\drivers\ntfs.sys [1659776]

[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.11/03/2011 - 14:27:26.) -- C:\Windows\system32\sppcomapi.dll [232448]

[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (....) (.11/03/2011 - 14:07:20.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 1/407

~ Mes musiques (My Musics) : 3/155

~ Mes Videos (My Videos) : 1/2

~ Mes Favoris (My Favorites) : 2/23

~ Mes Documents (My Documents) : 1/13

~ Mon Bureau (My Desktop) : 1/94

~ Menu demarrer (Programs) : 7/36

~ Scan Hidden Files in 00mn 00s

 

 

 

---\\ Processus lancés

[MD5.1971D838A88F58D59543E9B3CDA5FFC4] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305720] [PID.2368]

[MD5.852EE4F61139A1B3F44EDAA0D5B3FC14] - (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [53888] [PID.2384]

[MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Pas de propriétaire - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [51768] [PID.2400]

[MD5.BDD790326FABC31FB635130810245062] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440] [PID.2424]

[MD5.9AF1C70202FB6A84F177D497D75BC5FC] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [247728] [PID.3772]

[MD5.A07E8935CC8DCE6DB787DC99129CA17C] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [1305408] [PID.3888]

[MD5.0612CE1B7B47888399E72886BB320B3A] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3373968] [PID.4048]

[MD5.963C7D7B5B083D904A7743CF052CCC2E] - (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [19856] [PID.4068]

[MD5.5C396DDE6AAFFB64ABC0E0FD88F53553] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3054136] [PID.3092]

[MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720] [PID.3192]

[MD5.BB539119480A793DE761D5DDAAF2B133] - (.BitDefender S.R.L. - BitDefender IMGUI Aux.) -- C:\Program Files\BitDefender\BitDefender 2010\antispam32\bdimguiaux.exe [34816] [PID.4984]

[MD5.F5FBA8724DE219E96D9ABAF4772D31A3] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336] [PID.5104]

[MD5.D36DA0A5C531353C5FF5E29242649257] - (.Boingo Wireless, Inc. - Boingo Wi-Fi.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe [365936] [PID.4704]

[MD5.6529C89512CE4498919BDC512572F82C] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6998656] [PID.2708]

[MD5.5666955DC9FD455A003D86A21E0483A9] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.4776]

[MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.4352]

[MD5.1144F1A221F756E05525179B5E1682C1] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [650080] [PID.4200]

[MD5.CE6892CF204645111347E008CC8C99DB] - (.Nikon Corporation - Nikon Transfer Monitor.) -- C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232] [PID.4208]

[MD5.7C4AE21DB35F7AF697370EC068C4943E] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1234216] [PID.4964]

[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696] [PID.120]

[MD5.879D74337173A6D630D3D06184D354C1] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421736] [PID.1652]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.4888]

[MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [912344] [PID.8068]

[MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856] [PID.7200]

[MD5.B26A2F3CD6459548DB6891D138080876] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [2121216] [PID.3024]

[MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.]

[MD5.63F1212FFE13E62CA1E8D8EE19ABD9A7] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.]

[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360] [PID.]

[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]

[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]

[MD5.C811032EBB2C2E9FACFC364599E91BE3] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [174720] [PID.]

[MD5.1C87705CCB2F60172B0FC86B5D82F00D] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [387944] [PID.]

[MD5.A1C148801B4AF64847AEB9F3AD9594EF] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [262144] [PID.]

[MD5.E9605A180001A6B5551112D91DE92CA1] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [428384] [PID.]

[MD5.0EC561D71A733814CFF37712CDEE2A74] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [219496] [PID.]

[MD5.39BD95A9FE72AAF5C675AD146BE456A9] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [92592] [PID.]

[MD5.08D2B597CC4E26FDE43BE9F104476F65] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [508264] [PID.]

[MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.]

[MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.]

[MD5.344546D11D7E6D9F481E9D3ABC6E76CB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [821664] [PID.]

[MD5.E4534BCCDD1EA7A7A256BB9D6688A5FC] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [490280] [PID.]

[MD5.41118D920B2B268C0ADC36421248CDCF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2314240] [PID.]

~ Scan Processes Running in 00mn 01s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npnul32.dll

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\System32\ieframe.dll

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll

O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL

O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper [64Bits] - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\

O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Google Dictionary Compression sdch [64Bits] - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

O2 - BHO: Bing Bar BHO [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll

O2 - BHO: Java Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Google Toolbar [64Bits] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

O3 - Toolbar: BitDefender Toolbar [64Bits] - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} . (.BitDefender S.R.L. - BitDefender Antiphishing Toolbar.) -- "C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll"

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [ETDWare] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe

O4 - HKLM\..\Run: [ASUS WebStorage] . (...) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe

O4 - HKLM\..\Run: [sysTrayApp] . (.IDT, Inc. - IDT PC Audio TPE.) -- C:\Program Files\IDT\WDM\sttray64.exe

O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

O4 - HKLM\..\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.)

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper 32] . (.BitDefender S.R.L. - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2010\Antispam32\IEShow.exe

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] . (.BitDefender S.R.L. - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe

O4 - HKLM\..\Run: [bDAgent] . (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

O4 - HKLM\..\Run: [OODefragTray] . (.O&O Software GmbH - O&O Defrag TrayIcon (x64).) -- C:\Program Files\OO Software\Defrag\oodtray.exe

O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe

O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKLM\..\Wow6432Node\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe

O4 - HKLM\..\Wow6432Node\Run: [updateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Wow6432Node\Run: [updateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

O4 - HKLM\..\Wow6432Node\Run: [boingo Wi-Fi] . (...) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk

O4 - HKLM\..\Wow6432Node\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

O4 - HKLM\..\Wow6432Node\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

O4 - HKLM\..\Wow6432Node\Run: [Nikon Transfer Monitor] . (.Nikon Corporation - Nikon Transfer Monitor.) -- C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

O4 - HKLM\..\Wow6432Node\Run: [NBAgent] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe

O4 - HKLM\..\Wow6432Node\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

O4 - HKLM\..\Wow6432Node\Run: [bCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe

O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe

O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe

O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

O4 - HKUS\S-1-5-21-2574184498-1482598431-2311875915-1001\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\BB\Desktop\ImgBurn.lnk . (.LIGHTNING UK!.) -- C:\Program Files (x86)\ImgBurn\ImgBurn.exe

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Users\BB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk . (.Samsung.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: &Envoyer à OneNote . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~2\MICROS~1\Office14\EXCEL.exe

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll

O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office14\ONBTTN~1.dll

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{A95C9DB2-A0F9-4707-B6E9-826795903F66}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{A95C9DB2-A0F9-4707-B6E9-826795903F66}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{A95C9DB2-A0F9-4707-B6E9-826795903F66}: DhcpNameServer = 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll

O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll

O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe

O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: (LIVESRV) - Clé orpheline

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: C:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: O&O Defrag (OODefragAgent) . (.O&O Software GmbH - O&O Defrag Agent (x64).) - C:\Program Files\OO Software\Defrag\oodag.exe

O23 - Service: PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation - Device Information Provider.) - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio TPE.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe

O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: Intel® Management & Security Application User Notification Service (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] [APT] [ACMON] (.ATK.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

[MD5.F4DCD4912B185C3AAEB92A7040832AD1] [APT] [ASUS Live Update] (...) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

[MD5.F24D232DD478C95BA3571A0E4EC8E461] [APT] [ASUS P4G] (.ATK.) -- C:\Program Files\P4G\BatteryLife.exe

[MD5.1971D838A88F58D59543E9B3CDA5FFC4] [APT] [ASUS SmartLogon Console Sensor] (.ASUS.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe

[MD5.852EE4F61139A1B3F44EDAA0D5B3FC14] [APT] [ASUSControlDeck] (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

[MD5.BDD790326FABC31FB635130810245062] [APT] [WC3] (...) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

~ Scan Scheduled Task in 00mn 06s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys

O41 - Driver: (bdfwfpf) . (.BitDefender LLC - BitDefender Firewall WFP Filter Driver.) - C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys

O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys

O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys

O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys

O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys

O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys

O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys

O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys

O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys

O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys

O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ASUS AP Bank - (.ASUSTEK.) [HKLM] -- ASUS AP Bank_is1

O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}

O42 - Logiciel: ASUS MultiFrame - (.ASUS.) [HKLM] -- {9D48531D-2135-49FC-BC29-ACCDA5396A76}

O42 - Logiciel: ASUS USB2.0 UVC VGA WebCam - (.Sonix.) [HKLM] -- ASUS USB2.0 UVC VGA WebCam

O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM] -- ASUS WebStorage

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM] -- InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}

O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}

O42 - Logiciel: ArcSoft Panorama Maker 4 - (.ArcSoft.) [HKLM] -- {D45E8C45-B601-4A80-AFD8-E16338744DE1}

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}

O42 - Logiciel: Chicken Invaders 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}

O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}

O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}

O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}

O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}

O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite

O42 - Logiciel: Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{28857979-5507-4C10-A922-FF709A19D38C}

O42 - Logiciel: Dream Day Wedding Married in Manhattan - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}

O42 - Logiciel: Game Park Console - (.Oberon Media, Inc..) [HKLM] -- {C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}

O42 - Logiciel: ImgBurn 2.3.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- {75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1

O42 - Logiciel: Intel® Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}

O42 - Logiciel: K_Series_ScreenSaver_EN - (.Pas de propriétaire.) [HKLM] -- K_Series_ScreenSaver_EN

O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0015-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0016-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0018-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0019-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001A-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001B-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0401-0000-0000000FF1CE}_Office14.PROPLUS_{1A43C155-3DDA-43C9-92C5-0E7D0B2B156D}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0413-0000-0000000FF1CE}_Office14.PROPLUS_{5072FEA2-862C-4BF0-9654-CB0DCBE2BE28}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-002A-040C-1000-0000000FF1CE}_Office14.PROPLUS_{0CCCD9C7-637C-41CA-A293-6E9992109B09}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-002C-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C8E4AA87-3E5A-4C70-8CB7-43FE25C99B74}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0044-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-006E-040C-0000-0000000FF1CE}_Office14.PROPLUS_{7C5C7E8C-F6D2-43AC-93A4-89E4FF7367E6}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-00A1-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-00BA-040C-0000-0000000FF1CE}_Office14.PROPLUS_{C3AE9E57-4CD3-44FB-802F-9B461B26E3EB}

O42 - Logiciel: Microsoft Office Professionnel Plus 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PROPLUS

O42 - Logiciel: Microsoft Office Starter 2010 - Français - (.Microsoft Corporation.) [HKLM] -- {90140011-0066-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office « Démarrer en un clic » 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.Click2Run

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)

O42 - Logiciel: MyFreeCodec - (.Pas de propriétaire.) [HKCU] -- MyFreeCodec

O42 - Logiciel: Piggly FREE - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}

O42 - Logiciel: RDesc 2.33 - (.Bllua.) [HKLM] -- {8DD0F820-3656-4AB3-A7F4-005CAA2D0897}_is1

O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Samsung Mobile phone USB driver Drive Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver Drive

O42 - Logiciel: Samsung PC Studio 3 USB Driver Installer - (.Samsung Electronics Co., Ltd..) [HKLM] -- {EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636

O42 - Logiciel: Security Update for Microsoft Excel 2010 (KB2553070) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{294BAA9E-9209-497F-A71F-7E52EFB194D4}

O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553091) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{07CA44F3-F5B3-4D12-8C91-EDC5FE91D45C}

O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553096) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{10802A6D-EDBF-4383-BCBD-9D5B32F56D35}

O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2584066) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EEB4DDD0-08EA-4787-BDAB-D38D67A35CD5}

O42 - Logiciel: Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{337A3FB9-281D-4EC8-9CC1-7F6DDAC2359F}

O42 - Logiciel: Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) - (.Microsoft.) [HKLM] -- {90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{337A3FB9-281D-4EC8-9CC1-7F6DDAC2359F}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870

O42 - Logiciel: Smileyville FREE - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}

O42 - Logiciel: TomTom HOME 2.8.1.2218 - (.TomTom.) [HKLM] -- TomTom HOME

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523

O42 - Logiciel: Update for Microsoft Office 2010 (KB2494150) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}

O42 - Logiciel: Update for Microsoft Office 2010 (KB2553065) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A8686D24-1E89-43A1-973E-05A258D2B3F8}

O42 - Logiciel: Update for Microsoft Office 2010 (KB2553092) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7AC49FC8-F8D2-4DD8-9086-09E52385A21F}

O42 - Logiciel: Update for Microsoft Office 2010 (KB2566458) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFB525A0-E1C0-4E32-9968-FE401BC87363}

O42 - Logiciel: Update for Microsoft Outlook Social Connector (KB2583935) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EDF9874C-9E37-4110-9FC3-094247E114DF}

O42 - Logiciel: Update for Microsoft Outlook Social Connector (KB2583935) - (.Microsoft.) [HKLM] -- {90140000-001A-040C-0000-0000000FF1CE}_Office14.PROPLUS_{23639AE1-CE0D-4ED2-9110-995796F53580}

O42 - Logiciel: VLC media player 1.1.10 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite

O42 - Logiciel: World of Warcraft - (.Blizzard Entertainment.) [HKLM] -- World of Warcraft

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ASUS]

[HKCU\Software\ATI]

[HKCU\Software\ATK0100]

[HKCU\Software\Adobe]

[HKCU\Software\AppDataLow\Software\Google]

[HKCU\Software\AppDataLow\Software\MarkAny]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\ArcSoft]

[HKCU\Software\Ask.com.tmp]

[HKCU\Software\Avira]

[HKCU\Software\BitDefender]

[HKCU\Software\Blizzard Entertainment]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\CyberLink]

[HKCU\Software\DT Soft]

[HKCU\Software\ECAREME]

[HKCU\Software\Elantech]

[HKCU\Software\GoBoingo]

[HKCU\Software\Google]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\IDT]

[HKCU\Software\IM Providers]

[HKCU\Software\ImgBurn]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lake]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\Mozilla]

[HKCU\Software\MyFree Codec]

[HKCU\Software\Nero]

[HKCU\Software\Netscape]

[HKCU\Software\Nikon]

[HKCU\Software\O&O]

[HKCU\Software\ODBC]

[HKCU\Software\Policies]

[HKCU\Software\PrintingModule]

[HKCU\Software\Receipts]

[HKCU\Software\RegisteredApplications]

[HKCU\Software\Samsung]

[HKCU\Software\Skype]

[HKCU\Software\Sony Corporation]

[HKCU\Software\TomTom]

[HKCU\Software\Trend Micro]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\Wow6432Node]

[HKCU\Software\YahooPartnerToolbar]

[HKLM\Software\AMD]

[HKLM\Software\ASUS]

[HKLM\Software\ATI Technologies]

[HKLM\Software\ATI]

[HKLM\Software\ATK0100]

[HKLM\Software\Adobe]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\ArcSoft]

[HKLM\Software\AsLdr]

[HKLM\Software\Avira]

[HKLM\Software\BitDefender]

[HKLM\Software\Blizzard Entertainment]

[HKLM\Software\BrowserChoice]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\CoreSecurity]

[HKLM\Software\CyberLink]

[HKLM\Software\Cyberlink]

[HKLM\Software\DT Soft]

[HKLM\Software\Debug]

[HKLM\Software\ECAREME]

[HKLM\Software\GEAR Software]

[HKLM\Software\GoBoingo]

[HKLM\Software\Google]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\IDT]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Lake]

[HKLM\Software\MCCI]

[HKLM\Software\Macromedia]

[HKLM\Software\MidasHeurScanner]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\Nero]

[HKLM\Software\Nikon]

[HKLM\Software\O&O]

[HKLM\Software\ODBC]

[HKLM\Software\Oberon Media]

[HKLM\Software\Policies]

[HKLM\Software\RDesc]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Rule Actions]

[HKLM\Software\SAMSUNG]

[HKLM\Software\SONIX]

[HKLM\Software\Samsung Electronics Co., Ltd.]

[HKLM\Software\Samsung]

[HKLM\Software\Screen Saver]

[HKLM\Software\Skype]

[HKLM\Software\Softwin]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\TomTom]

[HKLM\Software\Trad-FR]

[HKLM\Software\TrendMicro]

[HKLM\Software\VideoLAN]

[HKLM\Software\Volatile]

[HKLM\Software\WinRAR]

[HKLM\Software\Windows]

[HKLM\Software\Wow6432Node]

[HKLM\Software\X-AVCSD]

[HKLM\Software\mozilla.org]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 24/06/2010 - 12:41:44 - [1518195] ----D- C:\Program Files\ASUS

O43 - CFD: 24/06/2010 - 12:21:12 - [23088290] ----D- C:\Program Files\ATI

O43 - CFD: 02/11/2010 - 22:56:54 - [100405642] ----D- C:\Program Files\BitDefender

O43 - CFD: 06/09/2011 - 21:13:36 - [135066] ----D- C:\Program Files\Bonjour

O43 - CFD: 02/11/2010 - 22:56:54 - [861465098] ----D- C:\Program Files\Common Files

O43 - CFD: 12/03/2011 - 01:18:42 - [90256916] ----D- C:\Program Files\DVD Maker

O43 - CFD: 24/06/2010 - 11:40:20 - [11813592] ----D- C:\Program Files\Elantech

O43 - CFD: 24/06/2010 - 12:02:22 - [318960] ----D- C:\Program Files\Google

O43 - CFD: 24/06/2010 - 12:35:56 - [29748429] ----D- C:\Program Files\IDT

O43 - CFD: 13/08/2011 - 18:04:06 - [6202772] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 06/09/2011 - 21:17:10 - [1951827] ----D- C:\Program Files\iPod

O43 - CFD: 06/09/2011 - 21:17:44 - [2358288] ----D- C:\Program Files\iTunes

O43 - CFD: 14/07/2009 - 09:45:56 - [149237810] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 23/09/2010 - 21:29:24 - [22908785] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 14/09/2011 - 14:43:00 - [52419678] ----D- C:\Program Files\OO Software

O43 - CFD: 24/06/2010 - 12:48:58 - [12702913] ----D- C:\Program Files\P4G

O43 - CFD: 14/07/2009 - 07:32:40 - [36813993] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 12/03/2011 - 01:18:40 - [4039680] ----D- C:\Program Files\Windows Defender

O43 - CFD: 12/03/2011 - 01:18:42 - [9224824] ----D- C:\Program Files\Windows Journal

O43 - CFD: 26/08/2011 - 22:44:48 - [275698] ----D- C:\Program Files\Windows Live

O43 - CFD: 12/03/2011 - 01:18:42 - [6667776] ----D- C:\Program Files\Windows Mail

O43 - CFD: 12/03/2011 - 01:18:42 - [7687085] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 14/07/2009 - 07:32:40 - [12627636] ----D- C:\Program Files\Windows NT

O43 - CFD: 12/03/2011 - 01:18:42 - [5516056] ----D- C:\Program Files\Windows Photo Viewer

O43 - CFD: 12/03/2011 - 01:18:42 - [244736] ----D- C:\Program Files\Windows Portable Devices

O43 - CFD: 12/03/2011 - 01:18:42 - [11374579] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 27/10/2010 - 20:50:20 - [6580905] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 24/06/2010 - 12:21:40 - [5023232] ----D- C:\Program Files\Common Files\ATI Technologies

O43 - CFD: 02/11/2010 - 22:57:00 - [749309242] ----D- C:\Program Files\Common Files\BitDefender

O43 - CFD: 05/09/2011 - 21:02:46 - [87745958] ----D- C:\Program Files\Common Files\Microsoft Shared

O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 17/10/2010 - 14:26:44 - [12194291] ----D- C:\Program Files\Common Files\System

O43 - CFD: 19/10/2010 - 21:04:58 - [767] ----D- C:\ProgramData\Adobe

O43 - CFD: 24/06/2010 - 12:37:04 - [495] ----D- C:\ProgramData\AmUStor

O43 - CFD: 27/10/2010 - 20:50:40 - [124648180] ----D- C:\ProgramData\Apple

O43 - CFD: 27/10/2010 - 20:51:56 - [102525772] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 09/11/2010 - 21:46:58 - [8345] ----D- C:\ProgramData\ASUS

O43 - CFD: 24/06/2010 - 12:22:24 - [187] ----D- C:\ProgramData\ATI

O43 - CFD: 22/09/2011 - 09:43:28 - [56054513] ----D- C:\ProgramData\Avira

O43 - CFD: 02/11/2010 - 22:59:56 - [758571430] ----D- C:\ProgramData\BitDefender

O43 - CFD: 07/07/2011 - 10:17:00 - [529023] ----D- C:\ProgramData\Blizzard Entertainment

O43 - CFD: 20/11/2010 - 16:42:00 - [63369] ----D- C:\ProgramData\CyberLink

O43 - CFD: 03/05/2011 - 21:31:50 - [1268] ----D- C:\ProgramData\DAEMON Tools Lite

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 12/09/2010 - 14:44:50 - [410] ----D- C:\ProgramData\EnterNHelp

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 24/06/2010 - 12:02:46 - [22389746] ----D- C:\ProgramData\GoBoingo

O43 - CFD: 24/06/2010 - 12:02:24 - [12707] ----D- C:\ProgramData\Google

O43 - CFD: 18/01/2011 - 19:47:02 - [148816] ----D- C:\ProgramData\Hewlett-Packard

O43 - CFD: 05/09/2011 - 21:04:08 - [2205903469] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 18/09/2011 - 20:58:36 - [64902] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 19/01/2011 - 22:40:12 - [2457507] ----D- C:\ProgramData\Nero

O43 - CFD: 12/09/2010 - 14:43:58 - [6997856] ----D- C:\ProgramData\Nikon

O43 - CFD: 24/06/2010 - 12:04:40 - [17536868] ----D- C:\ProgramData\OberonGameConsole

O43 - CFD: 24/06/2010 - 12:48:58 - [2234] ----D- C:\ProgramData\P4G

O43 - CFD: 18/10/2010 - 08:07:08 - [695] ----D- C:\ProgramData\Partner

O43 - CFD: 25/06/2011 - 13:55:08 - [7819790] ----D- C:\ProgramData\Samsung

O43 - CFD: 24/06/2010 - 12:04:52 - [20573098] ----D- C:\ProgramData\Skype

O43 - CFD: 12/09/2010 - 14:17:20 - [133539] ----D- C:\ProgramData\Sony Corporation

O43 - CFD: 12/09/2010 - 14:42:46 - [12] ----D- C:\ProgramData\Speech Enhancer

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 04/10/2010 - 22:34:36 - [294] ----D- C:\ProgramData\Sun

O43 - CFD: 12/09/2010 - 14:44:50 - [12] ----D- C:\ProgramData\Sync Schema

O43 - CFD: 24/06/2010 - 11:53:00 - [196821] ----D- C:\ProgramData\Temp

O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 02/05/2011 - 21:29:30 - [400886] ----D- C:\ProgramData\TomTom

O43 - CFD: 12/09/2010 - 14:44:50 - [40] ----D- C:\ProgramData\Ultima_T15

O43 - CFD: 24/09/2010 - 17:23:22 - [263927632] ----D- C:\ProgramData\VirtualizedApplications

O43 - CFD: 27/10/2010 - 20:52:04 - [893135] ----D- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

O43 - CFD: 17/09/2010 - 17:35:22 - [7696533] ----D- C:\Users\BB\AppData\Roaming\Adobe

O43 - CFD: 25/08/2011 - 14:57:22 - [6099578733] ----D- C:\Users\BB\AppData\Roaming\Apple Computer

O43 - CFD: 19/09/2010 - 09:27:04 - [214] ----D- C:\Users\BB\AppData\Roaming\ArcSoft

O43 - CFD: 12/09/2010 - 00:29:04 - [40960] ----D- C:\Users\BB\AppData\Roaming\Asus WebStorage

O43 - CFD: 11/09/2010 - 22:08:10 - [0] ----D- C:\Users\BB\AppData\Roaming\ATI

O43 - CFD: 22/09/2011 - 09:46:46 - [0] ----D- C:\Users\BB\AppData\Roaming\Avira

O43 - CFD: 02/11/2010 - 22:57:04 - [21429] ----D- C:\Users\BB\AppData\Roaming\BitDefender

O43 - CFD: 11/01/2011 - 20:55:50 - [2418] ----D- C:\Users\BB\AppData\Roaming\CyberLink

O43 - CFD: 03/05/2011 - 21:38:18 - [496] ----D- C:\Users\BB\AppData\Roaming\DAEMON Tools Lite

O43 - CFD: 06/10/2010 - 14:36:34 - [0] ----D- C:\Users\BB\AppData\Roaming\EeeStorageUploader

O43 - CFD: 11/09/2010 - 22:07:38 - [0] ----D- C:\Users\BB\AppData\Roaming\Identities

O43 - CFD: 26/10/2010 - 22:31:06 - [3606] ----D- C:\Users\BB\AppData\Roaming\ImgBurn

O43 - CFD: 12/09/2010 - 11:02:14 - [0] ----D- C:\Users\BB\AppData\Roaming\InstallShield

O43 - CFD: 12/09/2010 - 00:31:34 - [3171805] ----D- C:\Users\BB\AppData\Roaming\Macromedia

O43 - CFD: 14/07/2009 - 09:44:40 - [0] ----D- C:\Users\BB\AppData\Roaming\Media Center Programs

O43 - CFD: 05/09/2011 - 21:09:16 - [96466334] -S--D- C:\Users\BB\AppData\Roaming\Microsoft

O43 - CFD: 12/09/2010 - 12:16:10 - [14036964] ----D- C:\Users\BB\AppData\Roaming\Mozilla

O43 - CFD: 19/01/2011 - 22:42:50 - [415428] ----D- C:\Users\BB\AppData\Roaming\Nero

O43 - CFD: 12/09/2010 - 14:58:00 - [27594283] ----D- C:\Users\BB\AppData\Roaming\Nikon

O43 - CFD: 04/10/2010 - 22:39:22 - [2558645] ----D- C:\Users\BB\AppData\Roaming\OpenOffice.org

O43 - CFD: 01/11/2010 - 21:17:52 - [0] ----D- C:\Users\BB\AppData\Roaming\QuickScan

O43 - CFD: 25/06/2011 - 13:55:00 - [14460816] ----D- C:\Users\BB\AppData\Roaming\Samsung

O43 - CFD: 19/01/2011 - 11:57:58 - [124548] ----D- C:\Users\BB\AppData\Roaming\Skype

O43 - CFD: 19/09/2011 - 15:53:06 - [5898243] ----D- C:\Users\BB\AppData\Roaming\SoftGrid Client

O43 - CFD: 12/09/2010 - 14:23:44 - [11561672] ----D- C:\Users\BB\AppData\Roaming\Sony Corporation

O43 - CFD: 15/12/2010 - 16:49:24 - [0] ----D- C:\Users\BB\AppData\Roaming\temp

O43 - CFD: 02/05/2011 - 21:29:04 - [9303740] ----D- C:\Users\BB\AppData\Roaming\TomTom

O43 - CFD: 23/09/2010 - 21:30:26 - [0] ----D- C:\Users\BB\AppData\Roaming\TP

O43 - CFD: 18/07/2011 - 09:26:26 - [83151] ----D- C:\Users\BB\AppData\Roaming\vlc

O43 - CFD: 05/07/2011 - 14:34:40 - [295] ----D- C:\Users\BB\AppData\Roaming\Windows Live Writer

O43 - CFD: 08/10/2010 - 21:04:28 - [12] ----D- C:\Users\BB\AppData\Roaming\WinRAR

O43 - CFD: 23/09/2010 - 13:34:22 - [455494] ----D- C:\Users\BB\AppData\Local\Adobe

O43 - CFD: 27/10/2010 - 20:50:44 - [0] ----D- C:\Users\BB\AppData\Local\Apple

O43 - CFD: 25/08/2011 - 14:57:22 - [19658425] ----D- C:\Users\BB\AppData\Local\Apple Computer

O43 - CFD: 11/09/2010 - 21:59:20 - [0] -SH-D- C:\Users\BB\AppData\Local\Application Data

O43 - CFD: 09/11/2010 - 21:46:56 - [1373753] ----D- C:\Users\BB\AppData\Local\ASUS

O43 - CFD: 11/09/2010 - 22:08:10 - [59969] ----D- C:\Users\BB\AppData\Local\ATI

O43 - CFD: 20/11/2010 - 16:43:32 - [7027] ----D- C:\Users\BB\AppData\Local\Cyberlink

O43 - CFD: 19/09/2011 - 20:29:32 - [0] ----D- C:\Users\BB\AppData\Local\Diagnostics

O43 - CFD: 14/09/2011 - 14:41:06 - [105003964] ----D- C:\Users\BB\AppData\Local\Downloaded Installations

O43 - CFD: 18/09/2011 - 11:26:08 - [61] ----D- C:\Users\BB\AppData\Local\Google

O43 - CFD: 11/09/2010 - 21:59:20 - [0] -SH-D- C:\Users\BB\AppData\Local\Historique

O43 - CFD: 25/07/2011 - 16:30:56 - [975917098] ----D- C:\Users\BB\AppData\Local\Microsoft

O43 - CFD: 05/09/2011 - 21:00:10 - [0] ----D- C:\Users\BB\AppData\Local\Microsoft Help

O43 - CFD: 12/09/2010 - 12:15:48 - [55134467] ----D- C:\Users\BB\AppData\Local\Mozilla

O43 - CFD: 27/03/2011 - 15:13:08 - [307200] ----D- C:\Users\BB\AppData\Local\Nero

O43 - CFD: 27/03/2011 - 15:12:32 - [1309] ----D- C:\Users\BB\AppData\Local\Nero_AG

O43 - CFD: 14/09/2011 - 14:43:18 - [460535] ----D- C:\Users\BB\AppData\Local\O&O

O43 - CFD: 11/09/2010 - 21:59:30 - [40960] ----D- C:\Users\BB\AppData\Local\Power2Go

O43 - CFD: 25/06/2011 - 13:57:40 - [15598] ----D- C:\Users\BB\AppData\Local\Samsung

O43 - CFD: 23/09/2010 - 21:30:18 - [684032] ----D- C:\Users\BB\AppData\Local\SoftGrid Client

O43 - CFD: 22/09/2011 - 16:09:08 - [4609647801] ----D- C:\Users\BB\AppData\Local\Temp

O43 - CFD: 11/09/2010 - 21:59:20 - [0] -SH-D- C:\Users\BB\AppData\Local\Temporary Internet Files

O43 - CFD: 02/05/2011 - 21:29:04 - [2102023] ----D- C:\Users\BB\AppData\Local\TomTom

O43 - CFD: 22/09/2011 - 13:06:12 - [128286] ----D- C:\Users\BB\AppData\Local\VirtualStore

O43 - CFD: 22/09/2011 - 09:08:00 - [204800] ----D- C:\Users\BB\AppData\Local\Windows Live

O43 - CFD: 05/07/2011 - 14:34:04 - [372494] ----D- C:\Users\BB\AppData\Local\Windows Live Writer

O43 - CFD: 15/08/2011 - 13:57:18 - [0] ----D- C:\Users\BB\AppData\Local\{006BBBD9-C44D-4E77-B9D7-330D855F1FC1}

O43 - CFD: 17/04/2011 - 13:41:18 - [0] ----D- C:\Users\BB\AppData\Local\{01556467-A2C1-4474-B825-07201AAB656E}

O43 - CFD: 23/06/2011 - 23:50:52 - [0] ----D- C:\Users\BB\AppData\Local\{037A75C4-760B-4502-AB45-0AAEA71091FD}

O43 - CFD: 02/09/2011 - 23:14:28 - [0] ----D- C:\Users\BB\AppData\Local\{03A46A90-12F9-4A70-A135-F9122BC7517A}

O43 - CFD: 06/05/2011 - 12:54:04 - [0] ----D- C:\Users\BB\AppData\Local\{06D558D6-5DF7-4E2A-8525-FFB4C9D5E7C6}

O43 - CFD: 24/04/2011 - 08:45:48 - [0] ----D- C:\Users\BB\AppData\Local\{08FD9536-A5A7-4039-8EEF-4CDCDAC69A55}

O43 - CFD: 14/09/2011 - 21:55:34 - [0] ----D- C:\Users\BB\AppData\Local\{095FF534-EC77-4B5B-A3C0-07B6BDA66A0C}

O43 - CFD: 13/07/2011 - 08:30:00 - [0] ----D- C:\Users\BB\AppData\Local\{0D64D1D8-54E5-4193-A31A-5212E382FF18}

O43 - CFD: 18/09/2011 - 11:14:46 - [0] ----D- C:\Users\BB\AppData\Local\{11182ADE-E397-4730-95C2-A7D6F774E464}

O43 - CFD: 24/04/2011 - 09:30:22 - [0] ----D- C:\Users\BB\AppData\Local\{113B7CB2-CA42-4B27-B302-834C9B371A74}

O43 - CFD: 04/09/2011 - 14:20:42 - [0] ----D- C:\Users\BB\AppData\Local\{136C8186-08CF-4010-B114-BEE1C211AF75}

O43 - CFD: 19/09/2011 - 21:19:12 - [0] ----D- C:\Users\BB\AppData\Local\{13897F5F-8D93-471C-8E33-F97BC006452A}

O43 - CFD: 11/04/2011 - 21:12:50 - [0] ----D- C:\Users\BB\AppData\Local\{14506FA8-6D48-4B35-9A6B-72DDEFD9B6F7}

O43 - CFD: 13/08/2011 - 18:07:18 - [0] ----D- C:\Users\BB\AppData\Local\{14A2B951-60C8-4EC7-8224-6E433A8194F7}

O43 - CFD: 16/09/2011 - 09:46:00 - [0] ----D- C:\Users\BB\AppData\Local\{151AEDE0-2BA1-4230-93FC-8D4790F357E3}

O43 - CFD: 03/04/2011 - 10:56:14 - [0] ----D- C:\Users\BB\AppData\Local\{1AC4B2A4-3B9C-4BCB-AF06-EA6072888F02}

O43 - CFD: 21/09/2011 - 08:51:18 - [0] ----D- C:\Users\BB\AppData\Local\{1B2AD036-D0E5-4F57-B57B-B4EA37EF7812}

O43 - CFD: 17/08/2011 - 11:45:50 - [0] ----D- C:\Users\BB\AppData\Local\{1BA55105-19BC-4444-9986-499C71AB92E7}

O43 - CFD: 29/08/2011 - 23:00:36 - [0] ----D- C:\Users\BB\AppData\Local\{1D2C3DCD-7ED1-4715-B662-EA4AB6AEC9EE}

O43 - CFD: 22/07/2011 - 11:32:24 - [0] ----D- C:\Users\BB\AppData\Local\{1EE959CC-B4AB-4EB6-A58E-3AE8572D9581}

O43 - CFD: 14/09/2011 - 21:55:22 - [0] ----D- C:\Users\BB\AppData\Local\{20351E1B-96C6-4769-A067-B4EC045056A6}

O43 - CFD: 17/07/2011 - 11:06:24 - [0] ----D- C:\Users\BB\AppData\Local\{238A27AA-C965-4277-9205-6DE591651464}

O43 - CFD: 13/08/2011 - 22:33:56 - [0] ----D- C:\Users\BB\AppData\Local\{24B0C85E-05C7-4FE7-8077-E1BE71D83288}

O43 - CFD: 04/06/2011 - 22:53:38 - [0] ----D- C:\Users\BB\AppData\Local\{27DE732F-0C09-406C-9C2F-964C59B50059}

O43 - CFD: 09/06/2011 - 14:27:02 - [0] ----D- C:\Users\BB\AppData\Local\{2894E23F-31CD-49CF-9894-4F6FB27B217A}

O43 - CFD: 25/05/2011 - 22:20:36 - [0] ----D- C:\Users\BB\AppData\Local\{29266416-D859-4F9F-A201-8D185348A777}

O43 - CFD: 03/08/2011 - 16:07:22 - [0] ----D- C:\Users\BB\AppData\Local\{2A952909-B6B6-4722-909D-95CBC0D87D9A}

O43 - CFD: 08/09/2011 - 15:51:30 - [0] ----D- C:\Users\BB\AppData\Local\{2DAF4B0D-76A1-4DE2-B128-03DF2FE92814}

O43 - CFD: 08/05/2011 - 21:30:44 - [0] ----D- C:\Users\BB\AppData\Local\{2DD715E2-54BC-4B7A-A38D-4D2DE7937A13}

O43 - CFD: 04/07/2011 - 08:28:38 - [0] ----D- C:\Users\BB\AppData\Local\{2F6A34FD-737A-482A-9A54-6534EAA1989F}

O43 - CFD: 03/06/2011 - 22:51:46 - [0] ----D- C:\Users\BB\AppData\Local\{2FCEEC2C-2B92-4279-8A12-A96A903E6843}

O43 - CFD: 21/08/2011 - 23:18:28 - [0] ----D- C:\Users\BB\AppData\Local\{31C3AC05-06F7-44A2-8BB5-CD3723431E6A}

O43 - CFD: 05/09/2011 - 21:36:24 - [0] ----D- C:\Users\BB\AppData\Local\{34F397E4-FE8A-4461-95E1-10DB0652BC08}

O43 - CFD: 10/05/2011 - 21:15:54 - [0] ----D- C:\Users\BB\AppData\Local\{385AC72B-7D00-4950-9C54-51E4B3ED96AA}

O43 - CFD: 20/05/2011 - 21:21:28 - [0] ----D- C:\Users\BB\AppData\Local\{38CA017D-2591-4955-8577-8B7B14E0B031}

O43 - CFD: 29/08/2011 - 23:00:50 - [0] ----D- C:\Users\BB\AppData\Local\{38D0EF8B-EB58-4027-BA24-7B3D918E2C73}

O43 - CFD: 04/09/2011 - 14:20:22 - [0] ----D- C:\Users\BB\AppData\Local\{390DE56A-1820-4091-A669-E512A9C1D4A3}

O43 - CFD: 14/08/2011 - 11:24:42 - [0] ----D- C:\Users\BB\AppData\Local\{3A4F9E9E-6FD4-4CCE-99EF-6C84BACF083C}

O43 - CFD: 17/09/2011 - 11:09:18 - [0] ----D- C:\Users\BB\AppData\Local\{3B159A37-4153-4D06-A192-8CE915775DC4}

O43 - CFD: 21/08/2011 - 23:17:32 - [0] ----D- C:\Users\BB\AppData\Local\{3C0A4C6B-440D-431A-9F66-0ED17B7B8B09}

O43 - CFD: 19/09/2011 - 09:18:06 - [0] ----D- C:\Users\BB\AppData\Local\{3DAFCB36-3277-4C7B-A34A-1F5B1319D1D9}

O43 - CFD: 21/09/2011 - 08:51:06 - [0] ----D- C:\Users\BB\AppData\Local\{3E37F0B3-B71B-493B-9D2B-D03C4C6DFCB6}

O43 - CFD: 09/05/2011 - 20:15:12 - [0] ----D- C:\Users\BB\AppData\Local\{3EA54F2A-282B-4F88-B200-D5CECC275CCC}

O43 - CFD: 08/07/2011 - 21:43:18 - [0] ----D- C:\Users\BB\AppData\Local\{407F1184-DD9D-41EE-9271-6FA164C0BE19}

O43 - CFD: 18/08/2011 - 11:15:06 - [0] ----D- C:\Users\BB\AppData\Local\{40EF4E9E-109E-4921-9356-42373BA6D036}

O43 - CFD: 18/07/2011 - 13:33:36 - [0] ----D- C:\Users\BB\AppData\Local\{43C5110B-2414-4344-9E9D-96E91490F423}

O43 - CFD: 13/08/2011 - 17:47:34 - [0] ----D- C:\Users\BB\AppData\Local\{43F8E1CA-6AD1-4241-BEA0-1F6346BB9729}

O43 - CFD: 20/08/2011 - 15:33:20 - [0] ----D- C:\Users\BB\AppData\Local\{45C883E0-6D26-426A-99FB-82717D962112}

O43 - CFD: 19/09/2011 - 09:18:20 - [0] ----D- C:\Users\BB\AppData\Local\{466C04FE-DA47-4BF1-8455-5F17C7C33EDA}

O43 - CFD: 23/05/2011 - 20:23:14 - [0] ----D- C:\Users\BB\AppData\Local\{4714739E-94C4-429F-A820-E085A1F591BE}

O43 - CFD: 29/07/2011 - 08:36:04 - [0] ----D- C:\Users\BB\AppData\Local\{48338FB8-F95B-4576-B8E3-6F7DAD64AB95}

O43 - CFD: 18/06/2011 - 14:29:02 - [0] ----D- C:\Users\BB\AppData\Local\{4C868AA7-9F17-429B-8EE2-7BA95CB3F74C}

O43 - CFD: 11/08/2011 - 11:02:34 - [0] ----D- C:\Users\BB\AppData\Local\{4EC86693-9F57-4148-AFA8-E42181465A8E}

O43 - CFD: 08/06/2011 - 11:16:32 - [0] ----D- C:\Users\BB\AppData\Local\{4ECFAC92-0E2F-4455-BE27-BF9A87CB06F6}

O43 - CFD: 10/07/2011 - 22:55:50 - [0] ----D- C:\Users\BB\AppData\Local\{50BCF74D-1BBA-427C-9220-3B8672E1F539}

O43 - CFD: 03/09/2011 - 13:51:06 - [0] ----D- C:\Users\BB\AppData\Local\{5123D6C6-0E87-4404-AF40-836FFA28142E}

O43 - CFD: 20/09/2011 - 10:09:54 - [0] ----D- C:\Users\BB\AppData\Local\{515B985C-2961-4D94-996B-D2B8DB10D289}

O43 - CFD: 15/06/2011 - 12:19:20 - [0] ----D- C:\Users\BB\AppData\Local\{55217EFB-A310-45CA-8219-568B8B52FD32}

O43 - CFD: 14/06/2011 - 21:33:32 - [0] ----D- C:\Users\BB\AppData\Local\{55891242-EF01-45BB-AA72-0CC12D818215}

O43 - CFD: 02/06/2011 - 09:21:20 - [0] ----D- C:\Users\BB\AppData\Local\{561F5907-4EAF-4DB8-B158-936B7E2169E4}

O43 - CFD: 27/07/2011 - 21:01:20 - [0] ----D- C:\Users\BB\AppData\Local\{56A5D65E-E89D-4A15-B3BB-9DDE95E0A075}

O43 - CFD: 30/06/2011 - 09:24:48 - [0] ----D- C:\Users\BB\AppData\Local\{579C9465-5A31-4D00-887F-796F6BF666A7}

O43 - CFD: 02/05/2011 - 14:48:46 - [0] ----D- C:\Users\BB\AppData\Local\{584ACBEE-57D3-41C9-95A5-C40AFC0B957C}

O43 - CFD: 13/09/2011 - 09:11:46 - [0] ----D- C:\Users\BB\AppData\Local\{59F604FA-F6A6-4763-A3FD-09609D6914B5}

O43 - CFD: 17/07/2011 - 23:56:30 - [0] ----D- C:\Users\BB\AppData\Local\{5A46C530-7448-4CC0-9CA4-D22970457977}

O43 - CFD: 20/09/2011 - 10:09:36 - [0] ----D- C:\Users\BB\AppData\Local\{5D657EA1-BA00-4B8E-ACCD-6D34CFD4CAE1}

O43 - CFD: 12/04/2011 - 20:52:48 - [0] ----D- C:\Users\BB\AppData\Local\{5FB76E2B-6DCB-4E17-9529-16C2C2DE9E28}

O43 - CFD: 09/04/2011 - 13:51:56 - [0] ----D- C:\Users\BB\AppData\Local\{601BDF09-64C9-42A3-83C8-A4AE0D75A018}

O43 - CFD: 20/08/2011 - 15:17:00 - [0] ----D- C:\Users\BB\AppData\Local\{60DE6BD8-455E-4BDF-ABF7-C75E960C0F6B}

O43 - CFD: 17/05/2011 - 19:54:50 - [0] ----D- C:\Users\BB\AppData\Local\{6248783E-8AAF-464A-ABAD-079E53535D7A}

O43 - CFD: 16/04/2011 - 14:46:00 - [0] ----D- C:\Users\BB\AppData\Local\{65118FBC-6B02-4F81-B17A-B17BF1FE1F57}

O43 - CFD: 15/09/2011 - 09:56:20 - [0] ----D- C:\Users\BB\AppData\Local\{6813E4EB-0238-4237-A858-9C1F50AD91ED}

O43 - CFD: 13/08/2011 - 19:27:58 - [0] ----D- C:\Users\BB\AppData\Local\{68F3AA8E-39B4-40A5-9068-812CA3C82337}

O43 - CFD: 01/07/2011 - 22:14:04 - [0] ----D- C:\Users\BB\AppData\Local\{6B2740E4-5541-467B-8D41-5F7CDD758505}

O43 - CFD: 26/08/2011 - 22:51:42 - [0] ----D- C:\Users\BB\AppData\Local\{6BD84BC7-8012-4640-8C79-40481E8C03C8}

O43 - CFD: 16/05/2011 - 20:46:16 - [0] ----D- C:\Users\BB\AppData\Local\{6C849B04-E8A2-4BB6-9C11-C272D0878649}

O43 - CFD: 03/05/2011 - 20:33:40 - [0] ----D- C:\Users\BB\AppData\Local\{6D482E72-6C79-47F7-ADF6-30F004A7A687}

O43 - CFD: 06/09/2011 - 09:37:16 - [0] ----D- C:\Users\BB\AppData\Local\{6D4ABC37-EE8A-472C-BAAD-26C7253A484B}

O43 - CFD: 02/06/2011 - 22:31:32 - [0] ----D- C:\Users\BB\AppData\Local\{6D9A2023-2FEC-4E43-B0F8-EDFA343047D1}

O43 - CFD: 28/07/2011 - 15:33:22 - [0] ----D- C:\Users\BB\AppData\Local\{6E50E043-2108-4DF2-9C24-D79F5C2A7498}

O43 - CFD: 01/09/2011 - 11:24:38 - [0] ----D- C:\Users\BB\AppData\Local\{6EEB8396-FD6A-4431-9971-ED90AFF3C56F}

O43 - CFD: 22/04/2011 - 20:04:34 - [0] ----D- C:\Users\BB\AppData\Local\{7027F7DB-94FB-4ED2-9CE4-561223496815}

O43 - CFD: 22/09/2011 - 09:07:58 - [0] ----D- C:\Users\BB\AppData\Local\{70F4957D-92C2-4C9B-9A69-9C986BC0DC83}

O43 - CFD: 18/08/2011 - 21:18:08 - [0] ----D- C:\Users\BB\AppData\Local\{71D8E057-B0C8-4CD0-BC1E-565C1F1190EC}

O43 - CFD: 18/08/2011 - 15:36:16 - [0] ----D- C:\Users\BB\AppData\Local\{72B340C3-D19E-406F-84F2-39ED208DAB7F}

O43 - CFD: 28/08/2011 - 12:33:04 - [0] ----D- C:\Users\BB\AppData\Local\{734F8CBE-4D9C-463A-A448-6CA60858D679}

O43 - CFD: 07/09/2011 - 09:38:14 - [0] ----D- C:\Users\BB\AppData\Local\{737CEC8F-654C-47EF-A6AA-82B154FE0453}

O43 - CFD: 03/06/2011 - 10:32:12 - [0] ----D- C:\Users\BB\AppData\Local\{75D7BC7A-DE6C-4846-B7B3-E69E3CE4532B}

O43 - CFD: 13/08/2011 - 22:26:00 - [0] ----D- C:\Users\BB\AppData\Local\{7ACC8CC5-62AD-4D56-A01E-3204D86FBFE3}

O43 - CFD: 02/09/2011 - 23:14:42 - [0] ----D- C:\Users\BB\AppData\Local\{7CB05E53-4338-4D4F-A14A-A94213C6626A}

O43 - CFD: 30/07/2011 - 21:39:54 - [0] ----D- C:\Users\BB\AppData\Local\{7D5B369C-634A-4E6D-9F28-8317BE5D5A2A}

O43 - CFD: 30/08/2011 - 13:40:10 - [0] ----D- C:\Users\BB\AppData\Local\{7E689C7A-70E2-4CB1-B444-735D70C07EBE}

O43 - CFD: 16/07/2011 - 22:54:28 - [0] ----D- C:\Users\BB\AppData\Local\{7FBD6DDF-947D-443A-9BFC-8B99EBFB3463}

O43 - CFD: 14/09/2011 - 09:55:02 - [0] ----D- C:\Users\BB\AppData\Local\{7FF59237-90AA-420E-9EE1-5641BE42B6FC}

O43 - CFD: 06/09/2011 - 21:37:48 - [0] ----D- C:\Users\BB\AppData\Local\{816A5C76-A37E-42BC-9446-DA99ACA05D58}

O43 - CFD: 01/05/2011 - 11:58:14 - [0] ----D- C:\Users\BB\AppData\Local\{841B45F8-F8EC-45A1-8144-3733B41737E6}

O43 - CFD: 21/09/2011 - 20:52:00 - [0] ----D- C:\Users\BB\AppData\Local\{8439247A-6B23-4FA5-807F-F07318E55787}

O43 - CFD: 26/08/2011 - 22:39:14 - [0] ----D- C:\Users\BB\AppData\Local\{859BA310-B266-4C61-9112-C532B18C101B}

O43 - CFD: 05/06/2011 - 11:40:32 - [0] ----D- C:\Users\BB\AppData\Local\{8674A07D-EA9E-4CC8-BE1F-CDB2389CF230}

O43 - CFD: 26/07/2011 - 12:56:36 - [0] ----D- C:\Users\BB\AppData\Local\{899C33D7-880A-406B-AD3E-EF4F6F515652}

O43 - CFD: 26/08/2011 - 22:38:56 - [0] ----D- C:\Users\BB\AppData\Local\{8D2900B1-B827-49E4-BDE2-6707690AD97D}

O43 - CFD: 19/04/2011 - 20:00:48 - [0] ----D- C:\Users\BB\AppData\Local\{8DD75874-1A61-49BD-BE6A-1AA7219ABA76}

O43 - CFD: 30/05/2011 - 15:55:38 - [0] ----D- C:\Users\BB\AppData\Local\{8E7DF095-5344-45B5-8D95-B61E0BB7DA49}

O43 - CFD: 13/06/2011 - 11:40:52 - [0] ----D- C:\Users\BB\AppData\Local\{8FDD2FEC-E044-4CC8-B127-6ED879D6B2B6}

O43 - CFD: 20/06/2011 - 23:09:16 - [0] ----D- C:\Users\BB\AppData\Local\{920DFD5D-02FD-4F9E-9E7D-A4C8CC253D39}

O43 - CFD: 13/04/2011 - 13:01:04 - [0] ----D- C:\Users\BB\AppData\Local\{932A3D8C-C32C-4FD4-AC41-41704C72C427}

O43 - CFD: 19/09/2011 - 21:18:58 - [0] ----D- C:\Users\BB\AppData\Local\{9562B001-4EF5-4BEA-AFFC-C05AFA217435}

O43 - CFD: 21/07/2011 - 22:06:30 - [0] ----D- C:\Users\BB\AppData\Local\{968B614B-50D4-456F-A05D-802697B45AC6}

O43 - CFD: 15/04/2011 - 13:16:32 - [0] ----D- C:\Users\BB\AppData\Local\{9ADD9A13-FD2A-43AE-AE58-D16118556B0E}

O43 - CFD: 10/09/2011 - 08:50:36 - [0] ----D- C:\Users\BB\AppData\Local\{9D1E0CFD-7545-4D80-8D52-6DF6A8D30CF8}

O43 - CFD: 13/09/2011 - 09:11:58 - [0] ----D- C:\Users\BB\AppData\Local\{9D8F74E9-D127-4B98-9443-6F9B877E168D}

O43 - CFD: 22/09/2011 - 09:07:46 - [0] ----D- C:\Users\BB\AppData\Local\{A3A3EC4E-3E03-4FE6-903D-B97C1298EE35}

O43 - CFD: 06/04/2011 - 11:44:54 - [0] ----D- C:\Users\BB\AppData\Local\{A4850A4C-34EB-478D-A80B-4E6FF3F22146}

O43 - CFD: 09/09/2011 - 09:25:06 - [0] ----D- C:\Users\BB\AppData\Local\{A69CE817-2BFE-4FC8-AA6C-2AC0B1C7AA93}

O43 - CFD: 17/09/2011 - 11:09:32 - [0] ----D- C:\Users\BB\AppData\Local\{AC8635B1-0C2B-48EC-820A-CC2FF4FD227E}

O43 - CFD: 05/07/2011 - 21:51:14 - [0] ----D- C:\Users\BB\AppData\Local\{ADBBCFB9-15B0-4855-83AC-8FC408F9F038}

O43 - CFD: 20/08/2011 - 15:05:20 - [0] ----D- C:\Users\BB\AppData\Local\{AEB34F18-CA72-40D4-86D7-B694F22F75D4}

O43 - CFD: 04/05/2011 - 20:52:40 - [0] ----D- C:\Users\BB\AppData\Local\{AEFE3A8F-3338-48BA-8B6A-0891FD32C7A2}

O43 - CFD: 30/08/2011 - 13:39:58 - [0] ----D- C:\Users\BB\AppData\Local\{B029538A-AB06-4155-A803-3C9036AFA187}

O43 - CFD: 19/05/2011 - 19:39:52 - [0] ----D- C:\Users\BB\AppData\Local\{B127EA8D-130C-4094-A604-805E9A683145}

O43 - CFD: 05/05/2011 - 18:16:36 - [0] ----D- C:\Users\BB\AppData\Local\{B2D090FC-D8C4-4204-954A-E56BF1A316B8}

O43 - CFD: 11/05/2011 - 12:40:42 - [0] ----D- C:\Users\BB\AppData\Local\{B4D37EC5-2671-490A-834A-F886642D2E1E}

O43 - CFD: 05/09/2011 - 21:36:12 - [0] ----D- C:\Users\BB\AppData\Local\{B5120478-8619-47E8-A54F-0FF5C659988F}

O43 - CFD: 18/04/2011 - 13:07:28 - [0] ----D- C:\Users\BB\AppData\Local\{B5ED587C-5A7D-4EE1-A734-A0D5493F225A}

O43 - CFD: 31/05/2011 - 18:04:18 - [0] ----D- C:\Users\BB\AppData\Local\{B6461695-38BE-4C78-A0DF-9C0632C5F3CB}

O43 - CFD: 30/04/2011 - 23:19:16 - [0] ----D- C:\Users\BB\AppData\Local\{B6769FC8-2799-42D7-972A-1AD6D5009775}

O43 - CFD: 14/04/2011 - 20:14:32 - [0] ----D- C:\Users\BB\AppData\Local\{B6B920B8-86EE-438A-A3C8-301A27EA05D6}

O43 - CFD: 10/09/2011 - 08:50:24 - [0] ----D- C:\Users\BB\AppData\Local\{B8356E32-9AA2-4D94-975F-C0BDA26B3349}

O43 - CFD: 20/05/2011 - 07:40:32 - [0] ----D- C:\Users\BB\AppData\Local\{B8694083-BFC6-4832-AA9C-8B5963B6F33B}

O43 - CFD: 27/06/2011 - 20:41:32 - [0] ----D- C:\Users\BB\AppData\Local\{B8CFE8D3-8BE2-4B75-942D-64EDFC4107A6}

O43 - CFD: 05/09/2011 - 09:35:44 - [0] ----D- C:\Users\BB\AppData\Local\{BBC12B05-3952-45A0-B646-7352DB32ECD0}

O43 - CFD: 07/06/2011 - 19:48:28 - [0] ----D- C:\Users\BB\AppData\Local\{BC13A6FE-6DBB-4DB0-94D4-48F10AEEE13A}

O43 - CFD: 24/04/2011 - 21:30:50 - [0] ----D- C:\Users\BB\AppData\Local\{BCDD54C4-76A4-4F30-AA38-A76422B23F96}

O43 - CFD: 29/06/2011 - 15:02:50 - [0] ----D- C:\Users\BB\AppData\Local\{C11B6D57-1BE0-4557-AF08-4DA6895EA49D}

O43 - CFD: 04/04/2011 - 18:37:16 - [0] ----D- C:\Users\BB\AppData\Local\{C2EE1D36-83F0-4CBA-9792-763899119A17}

O43 - CFD: 29/08/2011 - 10:29:52 - [0] ----D- C:\Users\BB\AppData\Local\{C79B0598-FC2D-4BE2-B960-206C6355CE49}

O43 - CFD: 07/07/2011 - 09:50:44 - [0] ----D- C:\Users\BB\AppData\Local\{CAEB377A-992A-4F41-AD1F-45B81FD13B3E}

O43 - CFD: 06/07/2011 - 10:04:24 - [0] ----D- C:\Users\BB\AppData\Local\{CCE4C251-FE61-4CF3-AD08-45D33CAE96C5}

O43 - CFD: 03/09/2011 - 13:50:54 - [0] ----D- C:\Users\BB\AppData\Local\{CD63079D-C8DD-4729-887E-7CD34A72B10C}

O43 - CFD: 07/05/2011 - 14:01:56 - [0] ----D- C:\Users\BB\AppData\Local\{CEC6FEA5-8D8C-4981-A6B7-089E9C121D6C}

O43 - CFD: 20/04/2011 - 21:19:44 - [0] ----D- C:\Users\BB\AppData\Local\{D1F7AF4B-D005-4246-9F3C-3CC23166F4DA}

O43 - CFD: 28/08/2011 - 12:33:16 - [0] ----D- C:\Users\BB\AppData\Local\{D4666BAE-7385-4784-8497-BBF196E683DF}

O43 - CFD: 08/07/2011 - 08:48:32 - [0] ----D- C:\Users\BB\AppData\Local\{D4F668FF-CA65-4CF4-9E67-ACA92D1B5856}

O43 - CFD: 08/09/2011 - 15:51:44 - [0] ----D- C:\Users\BB\AppData\Local\{D50E91BF-A7EC-4BB4-8B9D-EB1E245F69AF}

O43 - CFD: 29/07/2011 - 08:42:28 - [0] ----D- C:\Users\BB\AppData\Local\{D5E5B17A-D3A8-450E-8FEF-1486F37CF012}

O43 - CFD: 05/09/2011 - 09:35:32 - [0] ----D- C:\Users\BB\AppData\Local\{D6928D70-AB8E-4003-9F40-C5CA47C03A1D}

O43 - CFD: 12/09/2011 - 10:48:40 - [0] ----D- C:\Users\BB\AppData\Local\{D7801621-2974-44B0-A007-32B490BC10FA}

O43 - CFD: 24/05/2011 - 21:51:52 - [0] ----D- C:\Users\BB\AppData\Local\{D9B0D4CE-4F02-46FB-8518-439D379A43AC}

O43 - CFD: 28/06/2011 - 14:30:12 - [0] ----D- C:\Users\BB\AppData\Local\{DA88A389-AF60-4E75-84DB-A9F055D5A004}

O43 - CFD: 12/07/2011 - 11:52:34 - [0] ----D- C:\Users\BB\AppData\Local\{DB29B995-12A5-47F3-8081-C6372D4FF98A}

O43 - CFD: 21/09/2011 - 20:52:12 - [0] ----D- C:\Users\BB\AppData\Local\{DB972200-83AA-406E-BAAC-0C78C68BA158}

O43 - CFD: 16/08/2011 - 11:46:32 - [0] ----D- C:\Users\BB\AppData\Local\{DDCF93A9-6ECC-4226-AC34-8BE7D846A71A}

O43 - CFD: 13/05/2011 - 21:32:26 - [0] ----D- C:\Users\BB\AppData\Local\{DDE16103-CB66-4C7F-AEB5-11CF31914D9F}

O43 - CFD: 27/08/2011 - 11:22:26 - [0] ----D- C:\Users\BB\AppData\Local\{E0CC9F4E-24DB-4DB8-BF60-43B2F8482F60}

O43 - CFD: 12/05/2011 - 19:48:40 - [0] ----D- C:\Users\BB\AppData\Local\{E1C2EEA8-56F7-4288-BEDD-F3ED4CE61A92}

O43 - CFD: 23/04/2011 - 10:16:06 - [0] ----D- C:\Users\BB\AppData\Local\{E1D3E818-D4C1-468F-BCD9-35ECA78D2366}

O43 - CFD: 23/07/2011 - 22:55:00 - [0] ----D- C:\Users\BB\AppData\Local\{E319686F-60FF-44BE-A255-16AA0FAC4B54}

O43 - CFD: 21/05/2011 - 11:20:52 - [0] ----D- C:\Users\BB\AppData\Local\{E3218D72-41E9-47BF-B2C3-486DAB8440B5}

O43 - CFD: 08/04/2011 - 14:32:34 - [0] ----D- C:\Users\BB\AppData\Local\{E349B91C-5E13-4CAE-81BC-5406F46DD486}

O43 - CFD: 18/09/2011 - 11:15:04 - [0] ----D- C:\Users\BB\AppData\Local\{E5F51330-438A-41C8-B694-B40D1DD5F35B}

O43 - CFD: 24/05/2011 - 09:01:16 - [0] ----D- C:\Users\BB\AppData\Local\{E8936E8B-8F50-4C67-8360-BCEE6041A228}

O43 - CFD: 24/07/2011 - 20:27:16 - [0] ----D- C:\Users\BB\AppData\Local\{E89AE1D5-00FC-4AFF-9C39-D77C84662E65}

O43 - CFD: 07/04/2011 - 21:58:10 - [0] ----D- C:\Users\BB\AppData\Local\{EA7ABC71-ABF1-4DE7-8E72-31EC42BCF449}

O43 - CFD: 24/06/2011 - 14:21:12 - [0] ----D- C:\Users\BB\AppData\Local\{EC9F7E07-4138-4859-B152-D21FA7712BD8}

O43 - CFD: 25/07/2011 - 21:03:08 - [0] ----D- C:\Users\BB\AppData\Local\{ECEEA90A-1E36-4797-B19D-F313444D83B0}

O43 - CFD: 18/08/2011 - 15:35:34 - [0] ----D- C:\Users\BB\AppData\Local\{EE417A68-D06D-46E6-84CA-317BAA9CE90E}

O43 - CFD: 01/08/2011 - 19:27:22 - [0] ----D- C:\Users\BB\AppData\Local\{EE5EC7B8-B7C0-44CF-B1EF-35C1A93BA850}

O43 - CFD: 21/06/2011 - 13:54:16 - [0] ----D- C:\Users\BB\AppData\Local\{EF657751-948F-4EB6-A986-EA36586B963E}

O43 - CFD: 15/07/2011 - 11:58:10 - [0] ----D- C:\Users\BB\AppData\Local\{F11159FF-FA74-420C-8A74-287FFC374AD7}

O43 - CFD: 31/07/2011 - 10:25:20 - [0] ----D- C:\Users\BB\AppData\Local\{F5516496-203A-4A51-B40A-BB6A49136CF4}

O43 - CFD: 10/06/2011 - 08:34:04 - [0] ----D- C:\Users\BB\AppData\Local\{F5D35A32-EEC6-433A-BE28-9C39D82A7A8D}

O43 - CFD: 25/04/2011 - 13:41:34 - [0] ----D- C:\Users\BB\AppData\Local\{F617D085-AB08-42F0-8510-3044D440674B}

O43 - CFD: 23/07/2011 - 10:44:22 - [0] ----D- C:\Users\BB\AppData\Local\{F6556069-28E0-4384-93B8-317AA6B7F06A}

O43 - CFD: 15/09/2011 - 09:56:06 - [0] ----D- C:\Users\BB\AppData\Local\{F9FF7AF8-4289-4DA3-8ED3-1F02F2033916}

O43 - CFD: 17/06/2011 - 09:29:20 - [0] ----D- C:\Users\BB\AppData\Local\{FB76BA78-D467-4FFE-BD69-ADE99A4CC99A}

O43 - CFD: 16/06/2011 - 20:33:30 - [0] ----D- C:\Users\BB\AppData\Local\{FC27F8F4-BB6D-4189-9493-C8836AE36372}

O43 - CFD: 05/04/2011 - 19:44:08 - [0] ----D- C:\Users\BB\AppData\Local\{FD1E417B-A79D-429D-BA43-FC5EC83249EA}

O43 - CFD: 01/04/2011 - 13:20:12 - [0] ----D- C:\Users\BB\AppData\Local\{FD38A5A1-FA8E-48C8-AEC4-D7F5BBEFFEA9}

O43 - CFD: 10/04/2011 - 22:35:36 - [0] ----D- C:\Users\BB\AppData\Local\{FDE9B60A-CFD5-48ED-8E16-5C24046DD33B}

O43 - CFD: 23/08/2011 - 16:57:16 - [0] ----D- C:\Users\BB\AppData\Local\{FE8F7CF1-4AB2-4DCC-A893-96C34A6451D4}

O43 - CFD: 31/08/2011 - 14:22:08 - [0] ----D- C:\Users\BB\AppData\Local\{FEA4FDB8-BBC1-4D78-BD1C-D70A66DDD443}

O43 - CFD: 09/08/2011 - 10:43:12 - [0] ----D- C:\Users\BB\AppData\Local\{FEF9064A-2AAC-4157-97BF-78E9ED5018F2}

O43 - CFD: 24/06/2010 - 12:02:18 - [688609951] ----D- C:\Program Files (x86)\Adobe

O43 - CFD: 24/06/2010 - 12:37:06 - [3036551] ----D- C:\Program Files (x86)\AmIcoSingLun

O43 - CFD: 06/09/2011 - 21:09:50 - [2428606] ----D- C:\Program Files (x86)\Apple Software Update

O43 - CFD: 12/09/2010 - 14:41:20 - [15206225] ----D- C:\Program Files (x86)\ArcSoft

O43 - CFD: 24/06/2010 - 12:48:44 - [359234593] ----D- C:\Program Files (x86)\ASUS

O43 - CFD: 24/06/2010 - 12:22:06 - [89538918] ----D- C:\Program Files (x86)\ATI Technologies

O43 - CFD: 22/09/2011 - 09:43:28 - [149820382] ----D- C:\Program Files (x86)\Avira

O43 - CFD: 31/10/2010 - 11:30:26 - [999006] ----D- C:\Program Files (x86)\Bing Bar Installer

O43 - CFD: 24/06/2010 - 12:02:46 - [4358809] ----D- C:\Program Files (x86)\Boingo

O43 - CFD: 06/09/2011 - 21:13:36 - [628555] ----D- C:\Program Files (x86)\Bonjour

O43 - CFD: 06/07/2011 - 14:45:34 - [1226336639] ----D- C:\Program Files (x86)\Common Files

O43 - CFD: 24/06/2010 - 11:53:24 - [402796825] ----D- C:\Program Files (x86)\CyberLink

O43 - CFD: 03/05/2011 - 21:32:32 - [17468238] ----D- C:\Program Files (x86)\DAEMON Tools Lite

O43 - CFD: 18/09/2011 - 11:26:22 - [112837166] ----D- C:\Program Files (x86)\Google

O43 - CFD: 26/10/2010 - 20:35:30 - [2268101] ----D- C:\Program Files (x86)\ImgBurn

O43 - CFD: 25/06/2011 - 13:55:22 - [50234572] --H-D- C:\Program Files (x86)\InstallShield Installation Information

O43 - CFD: 24/06/2010 - 12:26:54 - [12971876] ----D- C:\Program Files (x86)\Intel

O43 - CFD: 13/08/2011 - 18:04:06 - [6380851] ----D- C:\Program Files (x86)\Internet Explorer

O43 - CFD: 06/09/2011 - 21:17:44 - [122400899] ----D- C:\Program Files (x86)\iTunes

O43 - CFD: 06/07/2011 - 10:06:20 - [91719674] ----D- C:\Program Files (x86)\Java

O43 - CFD: 25/06/2011 - 13:39:28 - [2530872] ----D- C:\Program Files (x86)\MarkAny

O43 - CFD: 11/09/2010 - 22:02:16 - [2664525] ----D- C:\Program Files (x86)\Microsoft

O43 - CFD: 05/09/2011 - 21:00:52 - [39848379] ----D- C:\Program Files (x86)\Microsoft Analysis Services

O43 - CFD: 15/09/2011 - 21:52:50 - [12911890] ----D- C:\Program Files (x86)\Microsoft Application Virtualization Client

O43 - CFD: 05/09/2011 - 21:04:10 - [1003197304] ----D- C:\Program Files (x86)\Microsoft Office

O43 - CFD: 17/06/2011 - 09:56:36 - [38411899] ----D- C:\Program Files (x86)\Microsoft Silverlight

O43 - CFD: 05/09/2011 - 21:04:08 - [3635637] ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

O43 - CFD: 05/09/2011 - 21:04:08 - [793991] ----D- C:\Program Files (x86)\Microsoft Sync Framework

O43 - CFD: 05/09/2011 - 21:04:46 - [326800] ----D- C:\Program Files (x86)\Microsoft Synchronization Services

O43 - CFD: 05/09/2011 - 21:02:12 - [1378033] ----D- C:\Program Files (x86)\Microsoft Visual Studio 8

O43 - CFD: 19/01/2011 - 22:26:44 - [8167779] ----D- C:\Program Files (x86)\Microsoft.NET

O43 - CFD: 18/09/2011 - 11:22:18 - [31559968] ----D- C:\Program Files (x86)\Mozilla Firefox

O43 - CFD: 05/09/2011 - 21:05:22 - [26521] ----D- C:\Program Files (x86)\MSBuild

O43 - CFD: 31/10/2010 - 11:30:10 - [6834838] ----D- C:\Program Files (x86)\MSN Toolbar

O43 - CFD: 24/06/2010 - 12:07:26 - [154033] ----D- C:\Program Files (x86)\MSXML 4.0

O43 - CFD: 25/06/2011 - 14:05:52 - [10980822] ----D- C:\Program Files (x86)\MyFree Codec

O43 - CFD: 19/01/2011 - 22:40:12 - [1383687309] ----D- C:\Program Files (x86)\Nero

O43 - CFD: 12/09/2010 - 14:45:30 - [56119920] ----D- C:\Program Files (x86)\Nikon

O43 - CFD: 18/09/2011 - 11:22:18 - [13295290] ----D- C:\Program Files (x86)\OpenOffice.org 3

O43 - CFD: 25/06/2011 - 13:54:20 - [0] ----D- C:\Program Files (x86)\PC Connectivity Solution

O43 - CFD: 06/09/2011 - 21:14:46 - [75697179] ----D- C:\Program Files (x86)\QuickTime

O43 - CFD: 14/07/2009 - 07:32:40 - [39159041] ----D- C:\Program Files (x86)\Reference Assemblies

O43 - CFD: 14/06/2011 - 21:07:54 - [42294986] ----D- C:\Program Files (x86)\Safari

O43 - CFD: 25/06/2011 - 13:45:04 - [247265232] ----D- C:\Program Files (x86)\Samsung

O43 - CFD: 24/06/2010 - 12:04:52 - [30284495] R---D- C:\Program Files (x86)\Skype

O43 - CFD: 12/09/2010 - 14:18:32 - [303595423] ----D- C:\Program Files (x86)\Sony

O43 - CFD: 02/05/2011 - 21:27:42 - [50585502] ----D- C:\Program Files (x86)\TomTom HOME 2

O43 - CFD: 02/05/2011 - 21:27:48 - [22486] ----D- C:\Program Files (x86)\TomTom International B.V

O43 - CFD: 22/09/2011 - 13:10:46 - [416764] ----D- C:\Program Files (x86)\Trend Micro

O43 - CFD: 14/07/2009 - 06:57:08 - [0] --H-D- C:\Program Files (x86)\Uninstall Information

O43 - CFD: 18/07/2011 - 09:25:06 - [84283890] ----D- C:\Program Files (x86)\VideoLAN

O43 - CFD: 17/10/2010 - 14:26:44 - [524800] ----D- C:\Program Files (x86)\Windows Defender

O43 - CFD: 26/08/2011 - 22:45:12 - [155927663] ----D- C:\Program Files (x86)\Windows Live

O43 - CFD: 12/03/2011 - 01:18:44 - [6181376] ----D- C:\Program Files (x86)\Windows Mail

O43 - CFD: 12/03/2011 - 01:18:44 - [5024017] ----D- C:\Program Files (x86)\Windows Media Player

O43 - CFD: 14/07/2009 - 07:32:40 - [12197556] ----D- C:\Program Files (x86)\Windows NT

O43 - CFD: 12/03/2011 - 01:18:44 - [4417800] ----D- C:\Program Files (x86)\Windows Photo Viewer

O43 - CFD: 12/03/2011 - 01:18:44 - [189952] ----D- C:\Program Files (x86)\Windows Portable Devices

O43 - CFD: 12/03/2011 - 01:18:44 - [5994626] ----D- C:\Program Files (x86)\Windows Sidebar

O43 - CFD: 08/10/2010 - 21:04:10 - [3887186] ----D- C:\Program Files (x86)\WinRAR

O43 - CFD: 26/07/2011 - 16:33:06 - [12216793653] ----D- C:\Program Files (x86)\World of Warcraft

O43 - CFD: 22/09/2011 - 16:09:46 - [5468172] ----D- C:\Program Files (x86)\ZHPDiag

O43 - CFD: 15/12/2010 - 17:03:10 - [16512706] ----D- C:\Program Files (x86)\Common Files\Adobe

O43 - CFD: 24/06/2010 - 12:02:12 - [31787256] ----D- C:\Program Files (x86)\Common Files\Adobe AIR

O43 - CFD: 06/09/2011 - 21:17:10 - [99626459] ----D- C:\Program Files (x86)\Common Files\Apple

O43 - CFD: 02/11/2010 - 22:00:36 - [335815888] ----D- C:\Program Files (x86)\Common Files\BitDefender

O43 - CFD: 06/07/2011 - 14:45:48 - [1708974] ----D- C:\Program Files (x86)\Common Files\Blizzard Entertainment

O43 - CFD: 24/06/2010 - 12:41:20 - [53563] ----D- C:\Program Files (x86)\Common Files\ControlDeck

O43 - CFD: 24/06/2010 - 11:52:10 - [138024] ----D- C:\Program Files (x86)\Common Files\CyberLink

O43 - CFD: 23/09/2010 - 21:29:24 - [99136] ----D- C:\Program Files (x86)\Common Files\DESIGNER

O43 - CFD: 12/09/2010 - 14:42:42 - [4510156] ----D- C:\Program Files (x86)\Common Files\InstallShield

O43 - CFD: 06/07/2011 - 10:06:58 - [1258951] ----D- C:\Program Files (x86)\Common Files\Java

O43 - CFD: 13/09/2011 - 14:38:12 - [223422555] ----D- C:\Program Files (x86)\Common Files\microsoft shared

O43 - CFD: 12/09/2010 - 14:43:58 - [4177705] ----D- C:\Program Files (x86)\Common Files\muvee Technologies

O43 - CFD: 19/01/2011 - 22:33:12 - [19958275] ----D- C:\Program Files (x86)\Common Files\Nero

O43 - CFD: 12/09/2010 - 14:57:46 - [31681685] ----D- C:\Program Files (x86)\Common Files\Nikon

O43 - CFD: 24/06/2010 - 12:03:16 - [354896] ----D- C:\Program Files (x86)\Common Files\Oberon Media

O43 - CFD: 24/06/2010 - 12:27:00 - [166332] ----D- C:\Program Files (x86)\Common Files\postureAgent

O43 - CFD: 12/09/2010 - 11:08:48 - [532896] ----D- C:\Program Files (x86)\Common Files\PX Storage Engine

O43 - CFD: 25/06/2011 - 13:39:48 - [140027] ----D- C:\Program Files (x86)\Common Files\Samsung

O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files (x86)\Common Files\Services

O43 - CFD: 24/06/2010 - 12:04:52 - [2135336] ----D- C:\Program Files (x86)\Common Files\Skype

O43 - CFD: 12/09/2010 - 11:08:04 - [583203] ----D- C:\Program Files (x86)\Common Files\Sonic Shared

O43 - CFD: 14/07/2009 - 05:20:10 - [41103783] ----D- C:\Program Files (x86)\Common Files\SpeechEngines

O43 - CFD: 13/09/2011 - 14:36:12 - [10861683] ----D- C:\Program Files (x86)\Common Files\System

O43 - CFD: 11/09/2010 - 22:00:02 - [399704448] ----D- C:\Program Files (x86)\Common Files\Windows Live

~ Scan Program Folder in 00mn 23s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.F3664FC5488C08FE33BD36C149289F71] - 22/09/2011 - 14:47:18 ---A- . (...) -- C:\Windows\setupact.log [67250]

O44 - LFC:[MD5.9EF728A48D9C2980803CB86841968F51] - 22/09/2011 - 14:37:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.FBF73F576188F39C79CF9150A99EEF3D] - 22/09/2011 - 12:16:44 ---A- . (...) -- C:\Windows\SysNative\AutoRunFilter.ini [2362]

O44 - LFC:[MD5.FBF73F576188F39C79CF9150A99EEF3D] - 22/09/2011 - 12:16:44 RSHAD . (...) -- C:\Windows\system32\AutoRunFilter.ini [2362]

O44 - LFC:[MD5.C001D2EF641C7FB7550F7E8673C56D7C] - 22/09/2011 - 12:16:21 ---A- . (...) -- C:\Windows\SysNative\ServiceFilter.ini [1302]

O44 - LFC:[MD5.C001D2EF641C7FB7550F7E8673C56D7C] - 22/09/2011 - 12:16:21 RSHAD . (...) -- C:\Windows\system32\ServiceFilter.ini [1302]

O44 - LFC:[MD5.DD2AF7AFAA4D8854341BDCC34FAC593C] - 22/09/2011 - 12:15:44 ---A- . (...) -- C:\Windows\SysNative\oodbs.lor [16864]

O44 - LFC:[MD5.DD2AF7AFAA4D8854341BDCC34FAC593C] - 22/09/2011 - 12:15:44 RSHAD . (...) -- C:\Windows\system32\oodbs.lor [16864]

O44 - LFC:[MD5.EDB98905A97720982611F8F4DA404973] - 22/09/2011 - 12:15:15 ---A- . (...) -- C:\Windows\SysNative\ashttpstats.csv [52]

O44 - LFC:[MD5.EDB98905A97720982611F8F4DA404973] - 22/09/2011 - 12:15:15 RSHAD . (...) -- C:\Windows\system32\ashttpstats.csv [52]

O44 - LFC:[MD5.B6253F819217DE44464947542E5E026E] - 22/09/2011 - 12:15:10 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1324586]

O44 - LFC:[MD5.ED45F12CFA62B83765C9C1496758CC87] - 22/09/2011 - 08:43:28 RSHAD . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [123784]

O44 - LFC:[MD5.B1224E6B086CD6548315B04AB575A23E] - 22/09/2011 - 08:43:28 RSHAD . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [88288]

O44 - LFC:[MD5.C1217BD13E1973EA84D11AD77EC8AC86] - 21/09/2011 - 21:20:22 ---A- . (...) -- C:\Windows\PFRO.log [155032]

O44 - LFC:[MD5.CD05DD74C7A2B14C6632A2C4D4855026] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1563966]

O44 - LFC:[MD5.7184A56F6AE3F2C05BA271D59182F01E] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [108556]

O44 - LFC:[MD5.C158F516EE0A70B12454E710695596AC] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [133058]

O44 - LFC:[MD5.90B4A9ADA8306C4F8378306F6FBB8588] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [620632]

O44 - LFC:[MD5.267D4CA71521F823895D6478E654EEB5] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [709334]

O44 - LFC:[MD5.CD05DD74C7A2B14C6632A2C4D4855026] - 20/09/2011 - 20:04:55 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1563966]

O44 - LFC:[MD5.7184A56F6AE3F2C05BA271D59182F01E] - 20/09/2011 - 20:04:55 RSHAD . (...) -- C:\Windows\system32\perfc009.dat [108556]

O44 - LFC:[MD5.C158F516EE0A70B12454E710695596AC] - 20/09/2011 - 20:04:55 RSHAD . (...) -- C:\Windows\system32\perfc00C.dat [133058]

O44 - LFC:[MD5.90B4A9ADA8306C4F8378306F6FBB8588] - 20/09/2011 - 20:04:55 RSHAD . (...) -- C:\Windows\system32\perfh009.dat [620632]

O44 - LFC:[MD5.267D4CA71521F823895D6478E654EEB5] - 20/09/2011 - 20:04:55 RSHAD . (...) -- C:\Windows\system32\perfh00C.dat [709334]

O44 - LFC:[MD5.2465EBC8CD6E412CDC1AB9FEF40BCAE6] - 13/09/2011 - 13:36:10 ---A- . (...) -- C:\Windows\win.ini [478]

O44 - LFC:[MD5.3C65FE5B2BBA564B9511A659362060B3] - 06/09/2011 - 08:11:21 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [430416]

O44 - LFC:[MD5.3C65FE5B2BBA564B9511A659362060B3] - 06/09/2011 - 08:11:21 RSHAD . (...) -- C:\Windows\system32\FNTCACHE.DAT [430416]

O44 - LFC:[MD5.A2172A50014F8B3B4C56273A88400547] - 26/08/2011 - 21:43:32 ---A- . (...) -- C:\Windows\DirectX.log [65093]

~ Scan Files in 00mn 50s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe

O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe

O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

~ Scan SMSR Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 10/06/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088]

O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536]

O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864]

O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 RSHAD . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440]

O58 - SDL:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 30/04/2011 - 07:41:12 RSHAD . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [107904]

O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 10/06/2009 - 02:52:20 RSHAD . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128]

O58 - SDL:[MD5.540DAF1CEA6094886D72126FD7C33048] - 30/04/2011 - 07:41:12 RSHAD . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [27008]

O58 - SDL:[MD5.9C7F164B49CADC658D1B3C575782F346] - 24/06/2010 - 07:48:17 RSHAD . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\Windows\system32\drivers\AmUStor.sys [44032]

O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632]

O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856]

O58 - SDL:[MD5.0ACC06FCF46F64ED4F11E57EE461C1F4] - 05/10/2009 - 02:33:59 RSHAD . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athrx.sys [1542656]

O58 - SDL:[MD5.FB7602C5C508BE281368AAE0B61B51C6] - 24/06/2010 - 02:34:31 RSHAD . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtiHdmi.sys [121872]

O58 - SDL:[MD5.52679612D742BF74CA1BA6AB86DDF431] - 24/06/2010 - 02:13:23 RSHAD . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [6233088]

O58 - SDL:[MD5.414E0788920A8C856032BE2CBF29F984] - 24/06/2010 - 01:07:55 RSHAD . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\system32\drivers\atikmpag.sys [161280]

O58 - SDL:[MD5.52679612D742BF74CA1BA6AB86DDF431] - 24/06/2010 - 02:13:23 RSHAD . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atipmdag.sys [6233088]

O58 - SDL:[MD5.032D35C996F21D19A205A7C8F0B76F3C] - 24/06/2010 - 17:07:20 RSHAD . (.ASUS - ATK0100 ACPI Utility.) -- C:\Windows\system32\drivers\ATK64AMD.sys [15928]

O58 - SDL:[MD5.B1224E6B086CD6548315B04AB575A23E] - 22/09/2011 - 11:22:37 RSHAD . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [88288]

O58 - SDL:[MD5.ED45F12CFA62B83765C9C1496758CC87] - 22/09/2011 - 11:22:38 RSHAD . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [123784]

O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848]

O58 - SDL:[MD5.F050E487A787239C182C279CA97E8CF4] - 02/11/2010 - 14:47:04 RSHAD . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender Active Virus Control Filter Driver.) -- C:\Windows\system32\drivers\bdfm.sys [163936]

O58 - SDL:[MD5.ABD97BFB299713A51FE36AAAB71F73A2] - 02/11/2010 - 14:57:54 RSHAD . (.BitDefender - BitDefender AntiVirus FS filter driver.) -- C:\Windows\system32\drivers\bdfsfltr.sys [347336]

O58 - SDL:[MD5.F647CDF4123B7E24E33A313E5BFFEFC1] - 02/11/2010 - 14:46:34 RSHAD . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender AntiVirus Hypervisor driver.) -- C:\Windows\system32\drivers\bdhv.sys [102720]

O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 14/07/2009 - 21:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432]

O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 14/07/2009 - 21:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704]

O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 RSHAD . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720]

O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104]

O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976]

O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720]

O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480]

O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 RSHAD . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488]

O58 - SDL:[MD5.DEF365F0F6E017888C4B869D3BA4B8E0] - 25/06/2011 - 06:51:52 RSHAD . (.Devguru Co., Ltd - Device Error Recovery SDK(x64).) -- C:\Windows\system32\drivers\dgderdrv.sys [20552]

O58 - SDL:[MD5.FB9BEF3401EE5ECC2603311B9C64F44A] - 03/05/2011 - 20:32:30 RSHAD . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\system32\drivers\dtsoftbus01.sys [254528]

O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 10/06/2009 - 02:47:48 RSHAD . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496]

O58 - SDL:[MD5.06C94BE9D9E1E6411429433A64A76936] - 18/01/2010 - 13:37:57 RSHAD . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Windows\system32\drivers\ETD.sys [128512]

O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016]

O58 - SDL:[MD5.E403AACF8C7BB11375122D2464560311] - 27/10/2010 - 12:17:08 RSHAD . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [34152]

O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 14/07/2009 - 21:31:59 RSHAD . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [31232]

O58 - SDL:[MD5.B6AC71AAA2B10848F57FC49D55A651AF] - 24/06/2010 - 20:54:54 RSHAD . (.Intel Corporation - Intel® Management Engine Interface.) -- C:\Windows\system32\drivers\HECIx64.sys [56344]

O58 - SDL:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 11/03/2011 - 14:33:35 RSHAD . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [78720]

O58 - SDL:[MD5.BBB3B6DF1ABB0FE35802EDE85CC1C011] - 06/08/2009 - 22:24:13 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStor.sys [408600]

O58 - SDL:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 30/04/2011 - 07:41:26 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys [410496]

O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 13/07/2009 - 02:48:04 RSHAD . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44112]

O58 - SDL:[MD5.E63EF8C3271D014F14E2469CE75FECB4] - 20/07/2009 - 10:29:39 RSHAD . (.Pas de propriétaire - Keyboard Filter Driver.) -- C:\Windows\system32\drivers\kbfiltr.sys [15416]

O58 - SDL:[MD5.9C46A5421DE9D116C47155317CABB522] - 13/11/2009 - 10:47:35 RSHAD . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controller.) -- C:\Windows\system32\drivers\L1C62x64.sys [67072]

O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [114752]

O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [106560]

O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [65600]

O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [115776]

O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 10/06/2009 - 02:48:04 RSHAD . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys [35392]

O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [284736]

O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 13/07/2009 - 02:48:26 RSHAD . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51264]

O58 - SDL:[MD5.0A92CB65770442ED0DC44834632F66AD] - 30/04/2011 - 07:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [148352]

O58 - SDL:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 30/04/2011 - 07:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [166272]

O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 10/06/2009 - 02:45:46 RSHAD . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1524816]

O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 13/07/2009 - 02:45:45 RSHAD . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [128592]

O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 14/07/2009 - 21:37:19 RSHAD . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040]

O58 - SDL:[MD5.1BC348CF6BAA90EC8E533EF6E6A69933] - 10/06/2009 - 21:35:57 RSHAD . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSG664.sys [56832]

O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 10/06/2009 - 02:45:45 RSHAD . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [43584]

O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 13/07/2009 - 02:45:46 RSHAD . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [80464]

O58 - SDL:[MD5.1CDADE078F46F10919F21E08E22D227D] - 29/12/2008 - 10:14:27 RSHAD . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys [35456]

O58 - SDL:[MD5.F06A6DE8438F7446BFF9E61F31356521] - 12/08/2009 - 04:38:01 RSHAD . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys [1799680]

O58 - SDL:[MD5.6CAE4773A8EE33B2A6DAD8B336DBC762] - 14/06/2011 - 19:41:32 RSHAD . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudbus.sys [93496]

O58 - SDL:[MD5.79F550F9AF8A1C198E50F8D338BCF511] - 14/06/2011 - 19:41:40 RSHAD . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudmdm.sys [203320]

O58 - SDL:[MD5.FA93D528183467C4E2A68F272ED9E940] - 14/06/2011 - 19:42:00 RSHAD . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (MSS Ver.3).) -- C:\Windows\system32\drivers\ssudserd.sys [203320]

O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 02:45:55 RSHAD . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [24656]

O58 - SDL:[MD5.DDB811B13D827081E7C1DDFF302AB334] - 24/06/2010 - 04:39:45 RSHAD . (.IDT, Inc. - IDT PC Audio TPE.) -- C:\Windows\system32\drivers\stwrt64.sys [505344]

O58 - SDL:[MD5.CE4B6956E4E12492715A53076E58761F] - 25/06/2011 - 14:00:14 ---A- . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\system32\drivers\TFsExDisk.sys [16392]

O58 - SDL:[MD5.AA33FC47ED58C34E6E9261E4F850B7EB] - 14/06/2011 - 07:06:08 RSHAD . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl64.sys [51712]

O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 RSHAD . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17488]

O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 10/06/2009 - 02:45:55 RSHAD . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [161872]

O58 - SDL:[MD5.CE4B6956E4E12492715A53076E58761F] - 25/06/2011 - 14:00:14 ---A- . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys [16392]

~ Scan Drivers in 00mn 04s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 22/01/2010 - C:\Windows\system32\DRIVERS\atipmdag.sys - No object(No service) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG

O64 - Services: CurCS - 03/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys - No object(No service) .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64

O64 - Services: CurCS - 21/07/2011 - C:\Windows\system32\DRIVERS\avgntflt.sys - No object(No service) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 21/07/2011 - C:\Windows\system32\DRIVERS\avipbb.sys - No object(No service) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB

O64 - Services: CurCS - 02/11/2010 - C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys - No object(No service) .(.BitDefender LLC - BitDefender Firewall WFP Filter Driver.) - LEGACY_BDFWFPF

O64 - Services: CurCS - 30/07/2010 - C:\Windows\system32\drivers\dgderdrv.sys - No object(No service) .(.Devguru Co., Ltd - Device Error Recovery SDK(x64).) - LEGACY_DGDERDRV

O64 - Services: CurCS - 24/06/2010 - C:\Windows\system32\Drivers\TFsExDisk.sys - No object(No service) .(.Teruten Inc - File System Mini Filter Drvier.) - LEGACY_TFSEXDISK

~ Scan Services in 00mn 01s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.ED92900BF225E26A4E54C2C14FA1424F] [sPRF][09/09/2011] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users\BB\AppData\Local\Temp\AskSLib.dll [246440]

[MD5.8AD2485047CC64CB04B66040E62FE5FD] [sPRF][23/02/2010] (.Microsoft Corporation - ATL Module for Windows (Unicode).) -- C:\Users\BB\AppData\Local\Temp\atl80.dll [113152]

[MD5.DB5D2225E502A7E6329C8A0CAC2CBF1A] [sPRF][05/08/2010] (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Users\BB\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe [875296]

[MD5.676A86173A1FE2698C6F049D74DC6EB2] [sPRF][16/09/2010] (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Users\BB\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe [875296]

[MD5.B561AE170381399A4D825E4731458679] [sPRF][06/01/2011] (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Users\BB\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe [884512]

[MD5.A8D666FCE8EFD0788FA0DF14FB3491B4] [sPRF][10/02/2011] (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Users\BB\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe [885536]

[MD5.67DC0277321064080BAD0E9E3BC3CBAB] [sPRF][05/05/2011] (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Users\BB\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe [901408]

[MD5.AB8DD098B5859271BC338C83D1EBE498] [sPRF][22/09/2011] (...) -- C:\Users\BB\AppData\Local\Temp\KeyGen O&O Defrag 14.exe [158208]

[MD5.9173F70AF60C0A864EECDFB3342DC789] [sPRF][23/02/2010] (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\Users\BB\AppData\Local\Temp\mfc80.dll [1656320]

[MD5.21EE912784A013DC44071ECC4F932388] [sPRF][23/02/2010] (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\Users\BB\AppData\Local\Temp\mfc80u.dll [1652736]

[MD5.4FF468C640DEBC678D6E57617D523806] [sPRF][23/02/2010] (.Microsoft Corporation - MFC Managed Library - Retail Version.) -- C:\Users\BB\AppData\Local\Temp\mfcm80.dll [65536]

[MD5.47ACD0AEA4A32EF2B446B01076C62D28] [sPRF][23/02/2010] (.Microsoft Corporation - MFC Managed Library - Retail Version.) -- C:\Users\BB\AppData\Local\Temp\mfcm80u.dll [64000]

[MD5.60A6DE55AA50D57A01B7148B0A7EA139] [sPRF][23/02/2010] (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Users\BB\AppData\Local\Temp\msvcm80.dll [516096]

[MD5.C332DB81197E6E5D4A67D3789DBEB02A] [sPRF][23/02/2010] (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Users\BB\AppData\Local\Temp\msvcp80.dll [1061376]

[MD5.4D89F6191DB56CFA659388378F3DD688] [sPRF][23/02/2010] (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Users\BB\AppData\Local\Temp\msvcr80.dll [796672]

[MD5.C72263A0B16B36E0B4BD2FD442FFFD54] [sPRF][08/07/2011] (...) -- C:\Users\BB\AppData\Local\Temp\SIntf16.dll [12067]

[MD5.9A7A95E48E629A075C6D883D0EE524C8] [sPRF][08/07/2011] (...) -- C:\Users\BB\AppData\Local\Temp\SIntf32.dll [17212]

[MD5.BAE6A1DD9B99A42D883469BDD47C9F87] [sPRF][08/07/2011] (...) -- C:\Users\BB\AppData\Local\Temp\SIntfNT.dll [24516]

[MD5.6EAEABE4977A71C60AE539469EC1FBD0] [sPRF][23/02/2010] (.Trend Micro Inc. - TmDbgLog Dynamic Link Library.) -- C:\Users\BB\AppData\Local\Temp\TmDbg32.dll [126208]

[MD5.D7F38104C4B31C0B4405FCDA927B52D4] [sPRF][23/02/2010] (.Trend Micro Inc. - TmDbgLog Dynamic Link Library.) -- C:\Users\BB\AppData\Local\Temp\TmDbg64.dll [147904]

[MD5.34AA912DEFA18C2C129F1E09D75C1D7E] [sPRF][05/11/2010] (.Microsoft Corporation - Visual Basic Command Line Compiler.) -- C:\Users\BB\AppData\Local\Temp\vbc.exe [1169224]

[MD5.57217CEEB649B57D0D23F14FB2DEFB52] [sPRF][18/06/2002] (.Blizzard Entertainment - Warcraft III Installer.) -- C:\Users\BB\AppData\Local\Temp\war3_Install.exe [299008]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF][31/08/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\BB\AppData\Local\Temp\_is3967.exe [460248]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF][31/08/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\BB\AppData\Local\Temp\_is8F91.exe [460248]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF][31/08/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\BB\AppData\Local\Temp\_is9AA9.exe [460248]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF][31/08/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\BB\AppData\Local\Temp\_is9E70.exe [460248]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF][31/08/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\BB\AppData\Local\Temp\_isA581.exe [460248]

~ Scan Files in 00mn 08s

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "{06DE5244-014F-40D5-B8A8-FC69A1EECAFE}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema Main Program.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe

O87 - FAEL: "{F8CA133C-D527-4A89-825E-36B35772550D}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDVD 9.0.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.exe

O87 - FAEL: "{20739DE7-7724-49F8-82D9-EE34C581DA70}" | In - None - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe

O87 - FAEL: "{1BC2E28B-8F87-4BCD-A7E3-AD233EB945CC}" | In - Private - P6 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe

O87 - FAEL: "{31711503-B75F-404C-9FF7-D0F82A0C4FD1}" | In - Private - P17 - TRUE | .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe

O87 - FAEL: "{612EAAB6-9EE3-4023-81D3-571A185FAB43}" | In - Private - P6 - TRUE | .(.Blizzard Entertainment - Blizzard Launcher.) -- C:\Program Files (x86)\World of Warcraft\Launcher.exe

O87 - FAEL: "{B688A344-DB57-4128-B940-5C51C1003F04}" | In - Private - P17 - TRUE | .(.Blizzard Entertainment - Blizzard Launcher.) -- C:\Program Files (x86)\World of Warcraft\Launcher.exe

O87 - FAEL: "{E775BF2E-E71F-4E58-A992-A93E2622640F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\World of Warcraft\Launcher.patch.exe (.not file.)

O87 - FAEL: "{07514C5C-A396-4FE8-B22F-6B9930172603}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\World of Warcraft\Launcher.patch.exe (.not file.)

O87 - FAEL: "TCP Query User{44B8C2B5-849A-4E80-B190-90F1F56ED0A2}C:\program files (x86)\world of warcraft\backgrounddownloader.exe" | In - Private - P6 - TRUE | .(.Blizzard Entertainment.) -- C:\program files (x86)\world of warcraft\backgrounddownloader.

O87 - FAEL: "UDP Query User{565AF808-369D-4595-B5A3-AFB2ACE4CB94}C:\program files (x86)\world of warcraft\backgrounddownloader.exe" | In - Private - P17 - TRUE | .(.Blizzard Entertainment.) -- C:\program files (x86)\world of warcraft\backgrounddownloader

O87 - FAEL: "{054D4DB7-90A0-42F5-B933-2237B5D27A0F}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O87 - FAEL: "{2B56F7CD-67E2-4BDC-AC16-2F28C397C0A4}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O87 - FAEL: "{BD567A87-4B52-4CA9-960C-690CA6310D35}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe

~ Scan Firewall in 00mn 02s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8634 - (20/09/2011)

Clés trouvées (Keys found) : 3

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 1

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}] =>Adware.Hotbar

[HKLM\Software\WOW6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Toolbar.AskSBar

[HKCU\Software\Ask.com.tmp] =>Toolbar.Ask

C:\Users\BB\AppData\Local\Temp\log =>Worm.Silly

~ Scan Additionnel in 00mn 06s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : neufbox

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 74.125.39.99

74.125.39.105

74.125.39.147

74.125.39.104

74.125.39.106

74.125.39.103

Aliases: www.google.fr

www.google.com

~ Scan DNS in 00mn 02s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 24/06/2010 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe

SR - | Auto 24/06/2010 202752 | (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe

SR - | Auto 22/09/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

SR - | Auto 22/09/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 27/03/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SS - | Demand 02/11/2010 278224 | (Arrakis3) . (.BitDefender S.R.L. http://www.bitdefender.c.) - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe

SR - | Auto 24/06/2010 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

SR - | Auto 24/06/2010 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

SR - | Auto 06/09/2011 387944 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe

SS - | Auto 24/06/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 24/06/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 24/06/2010 182768 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 12/09/2010 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

SR - | Demand 06/09/2011 934760 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 02/11/2010 409672 | (LIVESRV) . (.BitDefender S.R.L..) - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

SR - | Auto 24/06/2010 262144 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

SR - | Auto 19/01/2011 490280 | C:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe

SR - | Auto 14/09/2011 3152200 | (OODefragAgent) . (.O&O Software GmbH.) - C:\Program Files\OO Software\Defrag\oodag.exe

SR - | Auto 16/09/2011 428384 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

SR - | Auto 24/06/2010 243712 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe

SR - | Auto 02/05/2011 92592 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

SR - | Auto 24/06/2010 2314240 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

SR - | Auto 02/11/2010 2299656 | (VSSERV) . (.BitDefender S.R.L..) - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

SR - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

~ Scan Services in 00mn 06s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by BB at 22/09/2011 16:11:42

 

device: opened successfully

user: error reading MBR

 

Disk trace:

error: Read Descripteur non valide

kernel: error reading MBR

~ Scan MBR in 00mn 08s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by BB at 22/09/2011 16:11:45

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 10s

 

 

 

End of the scan (1437 lines in 02mn 14s)(0)

 

 

 

En attendant de nouvelles instructions à suivre :

 

cordialement,

[pear]

Suivez cette procédure:

 

Lien CJoint.com AIwrgsHhzcB

[and1]

re,

 

désolé mais je n'arrive pas à suivre ta demande.

Ceci apparait dans un lien avec beaucoup de coupure du type

Cliquez ensuite sur le H-

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

Cliquer sur "Tous" puis sur "Nettoyer" .

Redémarrer pour achever le nettoyage.

Un rapport apparait:

Si le rapport n'apparait pas,cliquer sur

Copier-coller le rapport de suppression dans la prochaine réponse.

 

et surtout la phrase Copiez/Collez les lignes vertes dans le cadre ci dessous:

Je ne peut rien inscrire dans ce lien.

 

 

Ceci est trop complexe pour moi.

 

Que dois je faire?

 

Désolé pour mes lacunes, je coince.

[and1]

Tiens, ce que j'écrit en réponse et ce que je vois dans le lien n'est pas conforme au lien,

cela apparait comme par magie en forme?

 

afin de suivre la procédure ,pourrais je avoir le lien avec les images?

 

Merci d'avance

[pear]

Vous vous prenez la tête sans raison.

Copiez collez les lignes vertes.

Pour cela ,baladez votre souris , clic droit enfoncé,de droite à à gauche et de haut en bas sur le texte à copier.

Dans Zhpfix , cliquez sur le H

Modifié le 22 septembre 2011 par pear

[and1]

Cliquer sur l'icône Zhpfix qui est sur votre bureau

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Copiez/Collez les lignes vertes dans le cadre ci dessous:

 

[MD5.34AA912DEFA18C2C129F1E09D75C1D7E] [sPRF][05/11/2010] (.Microsoft Corporation - Visual Basic Command Line Compiler.) -- C:\Users\BB\AppData\Local\Temp\vbc.exe [1169224] => Infection FakeAlert (Trojan.Agent)

[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}] => Infection BT (Adware.Hotbar)

[HKLM\Software\WOW6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] => Infection BT (Adware.BHO)

O4 - HKLM\..\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.) => Fichier absent

O23 - Service: (LIVESRV) - Clé orpheline => Orphean Key not necessary

O43 - CFD: 18/10/2010 - 08:07:08 - [695] ----D- C:\ProgramData\Partner => Game

O43 - CFD: 15/08/2011 - 13:57:18 - [0] ----D- C:\Users\BB\AppData\Local\{006BBBD9-C44D-4E77-B9D7-330D855F1FC1} => Empty Folder not necessary

O43 - CFD: 17/04/2011 - 13:41:18 - [0] ----D- C:\Users\BB\AppData\Local\{01556467-A2C1-4474-B825-07201AAB656E} => Empty Folder not necessary

O43 - CFD: 23/06/2011 - 23:50:52 - [0] ----D- C:\Users\BB\AppData\Local\{037A75C4-760B-4502-AB45-0AAEA71091FD} => Empty Folder not necessary

O43 - CFD: 02/09/2011 - 23:14:28 - [0] ----D- C:\Users\BB\AppData\Local\{03A46A90-12F9-4A70-A135-F9122BC7517A} => Empty Folder not necessary

O43 - CFD: 06/05/2011 - 12:54:04 - [0] ----D- C:\Users\BB\AppData\Local\{06D558D6-5DF7-4E2A-8525-FFB4C9D5E7C6} => Empty Folder not necessary

O43 - CFD: 24/04/2011 - 08:45:48 - [0] ----D- C:\Users\BB\AppData\Local\{08FD9536-A5A7-4039-8EEF-4CDCDAC69A55} => Empty Folder not necessary

O43 - CFD: 14/09/2011 - 21:55:34 - [0] ----D- C:\Users\BB\AppData\Local\{095FF534-EC77-4B5B-A3C0-07B6BDA66A0C} => Empty Folder not necessary

O43 - CFD: 13/07/2011 - 08:30:00 - [0] ----D- C:\Users\BB\AppData\Local\{0D64D1D8-54E5-4193-A31A-5212E382FF18} => Empty Folder not necessary

O43 - CFD: 18/09/2011 - 11:14:46 - [0] ----D- C:\Users\BB\AppData\Local\{11182ADE-E397-4730-95C2-A7D6F774E464} => Empty Folder not necessary

O43 - CFD: 24/04/2011 - 09:30:22 - [0] ----D- C:\Users\BB\AppData\Local\{113B7CB2-CA42-4B27-B302-834C9B371A74} => Empty Folder not necessary

O43 - CFD: 04/09/2011 - 14:20:42 - [0] ----D- C:\Users\BB\AppData\Local\{136C8186-08CF-4010-B114-BEE1C211AF75} => Empty Folder not necessary

O43 - CFD: 19/09/2011 - 21:19:12 - [0] ----D- C:\Users\BB\AppData\Local\{13897F5F-8D93-471C-8E33-F97BC006452A} => Empty Folder not necessary

O43 - CFD: 11/04/2011 - 21:12:50 - [0] ----D- C:\Users\BB\AppData\Local\{14506FA8-6D48-4B35-9A6B-72DDEFD9B6F7} => Empty Folder not necessary

O43 - CFD: 13/08/2011 - 18:07:18 - [0] ----D- C:\Users\BB\AppData\Local\{14A2B951-60C8-4EC7-8224-6E433A8194F7} => Empty Folder not necessary

O43 - CFD: 16/09/2011 - 09:46:00 - [0] ----D- C:\Users\BB\AppData\Local\{151AEDE0-2BA1-4230-93FC-8D4790F357E3} => Empty Folder not necessary

O43 - CFD: 03/04/2011 - 10:56:14 - [0] ----D- C:\Users\BB\AppData\Local\{1AC4B2A4-3B9C-4BCB-AF06-EA6072888F02} => Empty Folder not necessary

O43 - CFD: 21/09/2011 - 08:51:18 - [0] ----D- C:\Users\BB\AppData\Local\{1B2AD036-D0E5-4F57-B57B-B4EA37EF7812} => Empty Folder not necessary

O43 - CFD: 17/08/2011 - 11:45:50 - [0] ----D- C:\Users\BB\AppData\Local\{1BA55105-19BC-4444-9986-499C71AB92E7} => Empty Folder not necessary

O43 - CFD: 29/08/2011 - 23:00:36 - [0] ----D- C:\Users\BB\AppData\Local\{1D2C3DCD-7ED1-4715-B662-EA4AB6AEC9EE} => Empty Folder not necessary

O43 - CFD: 22/07/2011 - 11:32:24 - [0] ----D- C:\Users\BB\AppData\Local\{1EE959CC-B4AB-4EB6-A58E-3AE8572D9581} => Empty Folder not necessary

O43 - CFD: 14/09/2011 - 21:55:22 - [0] ----D- C:\Users\BB\AppData\Local\{20351E1B-96C6-4769-A067-B4EC045056A6} => Empty Folder not necessary

O43 - CFD: 17/07/2011 - 11:06:24 - [0] ----D- C:\Users\BB\AppData\Local\{238A27AA-C965-4277-9205-6DE591651464} => Empty Folder not necessary

O43 - CFD: 13/08/2011 - 22:33:56 - [0] ----D- C:\Users\BB\AppData\Local\{24B0C85E-05C7-4FE7-8077-E1BE71D83288} => Empty Folder not necessary

O43 - CFD: 04/06/2011 - 22:53:38 - [0] ----D- C:\Users\BB\AppData\Local\{27DE732F-0C09-406C-9C2F-964C59B50059} => Empty Folder not necessary

O43 - CFD: 09/06/2011 - 14:27:02 - [0] ----D- C:\Users\BB\AppData\Local\{2894E23F-31CD-49CF-9894-4F6FB27B217A} => Empty Folder not necessary

O43 - CFD: 25/05/2011 - 22:20:36 - [0] ----D- C:\Users\BB\AppData\Local\{29266416-D859-4F9F-A201-8D185348A777} => Empty Folder not necessary

O43 - CFD: 03/08/2011 - 16:07:22 - [0] ----D- C:\Users\BB\AppData\Local\{2A952909-B6B6-4722-909D-95CBC0D87D9A} => Empty Folder not necessary

O43 - CFD: 08/09/2011 - 15:51:30 - [0] ----D- C:\Users\BB\AppData\Local\{2DAF4B0D-76A1-4DE2-B128-03DF2FE92814} => Empty Folder not necessary

O43 - CFD: 08/05/2011 - 21:30:44 - [0] ----D- C:\Users\BB\AppData\Local\{2DD715E2-54BC-4B7A-A38D-4D2DE7937A13} => Empty Folder not necessary

O43 - CFD: 04/07/2011 - 08:28:38 - [0] ----D- C:\Users\BB\AppData\Local\{2F6A34FD-737A-482A-9A54-6534EAA1989F} => Empty Folder not necessary

O43 - CFD: 03/06/2011 - 22:51:46 - [0] ----D- C:\Users\BB\AppData\Local\{2FCEEC2C-2B92-4279-8A12-A96A903E6843} => Empty Folder not necessary

O43 - CFD: 21/08/2011 - 23:18:28 - [0] ----D- C:\Users\BB\AppData\Local\{31C3AC05-06F7-44A2-8BB5-CD3723431E6A} => Empty Folder not necessary

O43 - CFD: 05/09/2011 - 21:36:24 - [0] ----D- C:\Users\BB\AppData\Local\{34F397E4-FE8A-4461-95E1-10DB0652BC08} => Empty Folder not necessary

O43 - CFD: 10/05/2011 - 21:15:54 - [0] ----D- C:\Users\BB\AppData\Local\{385AC72B-7D00-4950-9C54-51E4B3ED96AA} => Empty Folder not necessary

O43 - CFD: 20/05/2011 - 21:21:28 - [0] ----D- C:\Users\BB\AppData\Local\{38CA017D-2591-4955-8577-8B7B14E0B031} => Empty Folder not necessary

O43 - CFD: 29/08/2011 - 23:00:50 - [0] ----D- C:\Users\BB\AppData\Local\{38D0EF8B-EB58-4027-BA24-7B3D918E2C73} => Empty Folder not necessary

O43 - CFD: 04/09/2011 - 14:20:22 - [0] ----D- C:\Users\BB\AppData\Local\{390DE56A-1820-4091-A669-E512A9C1D4A3} => Empty Folder not necessary

O43 - CFD: 14/08/2011 - 11:24:42 - [0] ----D- C:\Users\BB\AppData\Local\{3A4F9E9E-6FD4-4CCE-99EF-6C84BACF083C} => Empty Folder not necessary

O43 - CFD: 17/09/2011 - 11:09:18 - [0] ----D- C:\Users\BB\AppData\Local\{3B159A37-4153-4D06-A192-8CE915775DC4} => Empty Folder not necessary

O43 - CFD: 21/08/2011 - 23:17:32 - [0] ----D- C:\Users\BB\AppData\Local\{3C0A4C6B-440D-431A-9F66-0ED17B7B8B09} => Empty Folder not necessary

O43 - CFD: 19/09/2011 - 09:18:06 - [0] ----D- C:\Users\BB\AppData\Local\{3DAFCB36-3277-4C7B-A34A-1F5B1319D1D9} => Empty Folder not necessary

O43 - CFD: 21/09/2011 - 08:51:06 - [0] ----D- C:\Users\BB\AppData\Local\{3E37F0B3-B71B-493B-9D2B-D03C4C6DFCB6} => Empty Folder not necessary

O43 - CFD: 09/05/2011 - 20:15:12 - [0] ----D- C:\Users\BB\AppData\Local\{3EA54F2A-282B-4F88-B200-D5CECC275CCC} => Empty Folder not necessary

O43 - CFD: 08/07/2011 - 21:43:18 - [0] ----D- C:\Users\BB\AppData\Local\{407F1184-DD9D-41EE-9271-6FA164C0BE19} => Empty Folder not necessary

O43 - CFD: 18/08/2011 - 11:15:06 - [0] ----D- C:\Users\BB\AppData\Local\{40EF4E9E-109E-4921-9356-42373BA6D036} => Empty Folder not necessary

O43 - CFD: 18/07/2011 - 13:33:36 - [0] ----D- C:\Users\BB\AppData\Local\{43C5110B-2414-4344-9E9D-96E91490F423} => Empty Folder not necessary

O43 - CFD: 13/08/2011 - 17:47:34 - [0] ----D- C:\Users\BB\AppData\Local\{43F8E1CA-6AD1-4241-BEA0-1F6346BB9729} => Empty Folder not necessary

O43 - CFD: 20/08/2011 - 15:33:20 - [0] ----D- C:\Users\BB\AppData\Local\{45C883E0-6D26-426A-99FB-82717D962112} => Empty Folder not necessary

O43 - CFD: 19/09/2011 - 09:18:20 - [0] ----D- C:\Users\BB\AppData\Local\{466C04FE-DA47-4BF1-8455-5F17C7C33EDA} => Empty Folder not necessary

O43 - CFD: 23/05/2011 - 20:23:14 - [0] ----D- C:\Users\BB\AppData\Local\{4714739E-94C4-429F-A820-E085A1F591BE} => Empty Folder not necessary

O43 - CFD: 29/07/2011 - 08:36:04 - [0] ----D- C:\Users\BB\AppData\Local\{48338FB8-F95B-4576-B8E3-6F7DAD64AB95} => Empty Folder not necessary

O43 - CFD: 18/06/2011 - 14:29:02 - [0] ----D- C:\Users\BB\AppData\Local\{4C868AA7-9F17-429B-8EE2-7BA95CB3F74C} => Empty Folder not necessary

O43 - CFD: 11/08/2011 - 11:02:34 - [0] ----D- C:\Users\BB\AppData\Local\{4EC86693-9F57-4148-AFA8-E42181465A8E} => Empty Folder not necessary

O43 - CFD: 08/06/2011 - 11:16:32 - [0] ----D- C:\Users\BB\AppData\Local\{4ECFAC92-0E2F-4455-BE27-BF9A87CB06F6} => Empty Folder not necessary

O43 - CFD: 10/07/2011 - 22:55:50 - [0] ----D- C:\Users\BB\AppData\Local\{50BCF74D-1BBA-427C-9220-3B8672E1F539} => Empty Folder not necessary

O43 - CFD: 03/09/2011 - 13:51:06 - [0] ----D- C:\Users\BB\AppData\Local\{5123D6C6-0E87-4404-AF40-836FFA28142E} => Empty Folder not necessary

O43 - CFD: 20/09/2011 - 10:09:54 - [0] ----D- C:\Users\BB\AppData\Local\{515B985C-2961-4D94-996B-D2B8DB10D289} => Empty Folder not necessary

O43 - CFD: 15/06/2011 - 12:19:20 - [0] ----D- C:\Users\BB\AppData\Local\{55217EFB-A310-45CA-8219-568B8B52FD32} => Empty Folder not necessary

O43 - CFD: 14/06/2011 - 21:33:32 - [0] ----D- C:\Users\BB\AppData\Local\{55891242-EF01-45BB-AA72-0CC12D818215} => Empty Folder not necessary

O43 - CFD: 02/06/2011 - 09:21:20 - [0] ----D- C:\Users\BB\AppData\Local\{561F5907-4EAF-4DB8-B158-936B7E2169E4} => Empty Folder not necessary

O43 - CFD: 27/07/2011 - 21:01:20 - [0] ----D- C:\Users\BB\AppData\Local\{56A5D65E-E89D-4A15-B3BB-9DDE95E0A075} => Empty Folder not necessary

O43 - CFD: 30/06/2011 - 09:24:48 - [0] ----D- C:\Users\BB\AppData\Local\{579C9465-5A31-4D00-887F-796F6BF666A7} => Empty Folder not necessary

O43 - CFD: 02/05/2011 - 14:48:46 - [0] ----D- C:\Users\BB\AppData\Local\{584ACBEE-57D3-41C9-95A5-C40AFC0B957C} => Empty Folder not necessary

O43 - CFD: 13/09/2011 - 09:11:46 - [0] ----D- C:\Users\BB\AppData\Local\{59F604FA-F6A6-4763-A3FD-09609D6914B5} => Empty Folder not necessary

O43 - CFD: 17/07/2011 - 23:56:30 - [0] ----D- C:\Users\BB\AppData\Local\{5A46C530-7448-4CC0-9CA4-D22970457977} => Empty Folder not necessary

O43 - CFD: 20/09/2011 - 10:09:36 - [0] ----D- C:\Users\BB\AppData\Local\{5D657EA1-BA00-4B8E-ACCD-6D34CFD4CAE1} => Empty Folder not necessary

O43 - CFD: 12/04/2011 - 20:52:48 - [0] ----D- C:\Users\BB\AppData\Local\{5FB76E2B-6DCB-4E17-9529-16C2C2DE9E28} => Empty Folder not necessary

O43 - CFD: 09/04/2011 - 13:51:56 - [0] ----D- C:\Users\BB\AppData\Local\{601BDF09-64C9-42A3-83C8-A4AE0D75A018} => Empty Folder not necessary

O43 - CFD: 20/08/2011 - 15:17:00 - [0] ----D- C:\Users\BB\AppData\Local\{60DE6BD8-455E-4BDF-ABF7-C75E960C0F6B} => Empty Folder not necessary

O43 - CFD: 17/05/2011 - 19:54:50 - [0] ----D- C:\Users\BB\AppData\Local\{6248783E-8AAF-464A-ABAD-079E53535D7A} => Empty Folder not necessary

O43 - CFD: 16/04/2011 - 14:46:00 - [0] ----D- C:\Users\BB\AppData\Local\{65118FBC-6B02-4F81-B17A-B17BF1FE1F57} => Empty Folder not necessary

O43 - CFD: 15/09/2011 - 09:56:20 - [0] ----D- C:\Users\BB\AppData\Local\{6813E4EB-0238-4237-A858-9C1F50AD91ED} => Empty Folder not necessary

O43 - CFD: 13/08/2011 - 19:27:58 - [0] ----D- C:\Users\BB\AppData\Local\{68F3AA8E-39B4-40A5-9068-812CA3C82337} => Empty Folder not necessary

O43 - CFD: 01/07/2011 - 22:14:04 - [0] ----D- C:\Users\BB\AppData\Local\{6B2740E4-5541-467B-8D41-5F7CDD758505} => Empty Folder not necessary

O43 - CFD: 26/08/2011 - 22:51:42 - [0] ----D- C:\Users\BB\AppData\Local\{6BD84BC7-8012-4640-8C79-40481E8C03C8} => Empty Folder not necessary

O43 - CFD: 16/05/2011 - 20:46:16 - [0] ----D- C:\Users\BB\AppData\Local\{6C849B04-E8A2-4BB6-9C11-C272D0878649} => Empty Folder not necessary

O43 - CFD: 03/05/2011 - 20:33:40 - [0] ----D- C:\Users\BB\AppData\Local\{6D482E72-6C79-47F7-ADF6-30F004A7A687} => Empty Folder not necessary

O43 - CFD: 06/09/2011 - 09:37:16 - [0] ----D- C:\Users\BB\AppData\Local\{6D4ABC37-EE8A-472C-BAAD-26C7253A484B} => Empty Folder not necessary

O43 - CFD: 02/06/2011 - 22:31:32 - [0] ----D- C:\Users\BB\AppData\Local\{6D9A2023-2FEC-4E43-B0F8-EDFA343047D1} => Empty Folder not necessary

O43 - CFD: 28/07/2011 - 15:33:22 - [0] ----D- C:\Users\BB\AppData\Local\{6E50E043-2108-4DF2-9C24-D79F5C2A7498} => Empty Folder not necessary

O43 - CFD: 01/09/2011 - 11:24:38 - [0] ----D- C:\Users\BB\AppData\Local\{6EEB8396-FD6A-4431-9971-ED90AFF3C56F} => Empty Folder not necessary

O43 - CFD: 22/04/2011 - 20:04:34 - [0] ----D- C:\Users\BB\AppData\Local\{7027F7DB-94FB-4ED2-9CE4-561223496815} => Empty Folder not necessary

O43 - CFD: 22/09/2011 - 09:07:58 - [0] ----D- C:\Users\BB\AppData\Local\{70F4957D-92C2-4C9B-9A69-9C986BC0DC83} => Empty Folder not necessary

O43 - CFD: 18/08/2011 - 21:18:08 - [0] ----D- C:\Users\BB\AppData\Local\{71D8E057-B0C8-4CD0-BC1E-565C1F1190EC} => Empty Folder not necessary

O43 - CFD: 18/08/2011 - 15:36:16 - [0] ----D- C:\Users\BB\AppData\Local\{72B340C3-D19E-406F-84F2-39ED208DAB7F} => Empty Folder not necessary

O43 - CFD: 28/08/2011 - 12:33:04 - [0] ----D- C:\Users\BB\AppData\Local\{734F8CBE-4D9C-463A-A448-6CA60858D679} => Empty Folder not necessary

O43 - CFD: 07/09/2011 - 09:38:14 - [0] ----D- C:\Users\BB\AppData\Local\{737CEC8F-654C-47EF-A6AA-82B154FE0453} => Empty Folder not necessary

O43 - CFD: 03/06/2011 - 10:32:12 - [0] ----D- C:\Users\BB\AppData\Local\{75D7BC7A-DE6C-4846-B7B3-E69E3CE4532B} => Empty Folder not necessary

O43 - CFD: 13/08/2011 - 22:26:00 - [0] ----D- C:\Users\BB\AppData\Local\{7ACC8CC5-62AD-4D56-A01E-3204D86FBFE3} => Empty Folder not necessary

O43 - CFD: 02/09/2011 - 23:14:42 - [0] ----D- C:\Users\BB\AppData\Local\{7CB05E53-4338-4D4F-A14A-A94213C6626A} => Empty Folder not necessary

O43 - CFD: 30/07/2011 - 21:39:54 - [0] ----D- C:\Users\BB\AppData\Local\{7D5B369C-634A-4E6D-9F28-8317BE5D5A2A} => Empty Folder not necessary

O43 - CFD: 30/08/2011 - 13:40:10 - [0] ----D- C:\Users\BB\AppData\Local\{7E689C7A-70E2-4CB1-B444-735D70C07EBE} => Empty Folder not necessary

O43 - CFD: 16/07/2011 - 22:54:28 - [0] ----D- C:\Users\BB\AppData\Local\{7FBD6DDF-947D-443A-9BFC-8B99EBFB3463} => Empty Folder not necessary

O43 - CFD: 14/09/2011 - 09:55:02 - [0] ----D- C:\Users\BB\AppData\Local\{7FF59237-90AA-420E-9EE1-5641BE42B6FC} => Empty Folder not necessary

O43 - CFD: 06/09/2011 - 21:37:48 - [0] ----D- C:\Users\BB\AppData\Local\{816A5C76-A37E-42BC-9446-DA99ACA05D58} => Empty Folder not necessary

O43 - CFD: 01/05/2011 - 11:58:14 - [0] ----D- C:\Users\BB\AppData\Local\{841B45F8-F8EC-45A1-8144-3733B41737E6} => Empty Folder not necessary

O43 - CFD: 21/09/2011 - 20:52:00 - [0] ----D- C:\Users\BB\AppData\Local\{8439247A-6B23-4FA5-807F-F07318E55787} => Empty Folder not necessary

O43 - CFD: 26/08/2011 - 22:39:14 - [0] ----D- C:\Users\BB\AppData\Local\{859BA310-B266-4C61-9112-C532B18C101B} => Empty Folder not necessary

O43 - CFD: 05/06/2011 - 11:40:32 - [0] ----D- C:\Users\BB\AppData\Local\{8674A07D-EA9E-4CC8-BE1F-CDB2389CF230} => Empty Folder not necessary

O43 - CFD: 26/07/2011 - 12:56:36 - [0] ----D- C:\Users\BB\AppData\Local\{899C33D7-880A-406B-AD3E-EF4F6F515652} => Empty Folder not necessary

O43 - CFD: 26/08/2011 - 22:38:56 - [0] ----D- C:\Users\BB\AppData\Local\{8D2900B1-B827-49E4-BDE2-6707690AD97D} => Empty Folder not necessary

O43 - CFD: 19/04/2011 - 20:00:48 - [0] ----D- C:\Users\BB\AppData\Local\{8DD75874-1A61-49BD-BE6A-1AA7219ABA76} => Empty Folder not necessary

O43 - CFD: 30/05/2011 - 15:55:38 - [0] ----D- C:\Users\BB\AppData\Local\{8E7DF095-5344-45B5-8D95-B61E0BB7DA49} => Empty Folder not necessary

O43 - CFD: 13/06/2011 - 11:40:52 - [0] ----D- C:\Users\BB\AppData\Local\{8FDD2FEC-E044-4CC8-B127-6ED879D6B2B6} => Empty Folder not necessary

O43 - CFD: 20/06/2011 - 23:09:16 - [0] ----D- C:\Users\BB\AppData\Local\{920DFD5D-02FD-4F9E-9E7D-A4C8CC253D39} => Empty Folder not necessary

O43 - CFD: 13/04/2011 - 13:01:04 - [0] ----D- C:\Users\BB\AppData\Local\{932A3D8C-C32C-4FD4-AC41-41704C72C427} => Empty Folder not necessary

O43 - CFD: 19/09/2011 - 21:18:58 - [0] ----D- C:\Users\BB\AppData\Local\{9562B001-4EF5-4BEA-AFFC-C05AFA217435} => Empty Folder not necessary

O43 - CFD: 21/07/2011 - 22:06:30 - [0] ----D- C:\Users\BB\AppData\Local\{968B614B-50D4-456F-A05D-802697B45AC6} => Empty Folder not necessary

O43 - CFD: 15/04/2011 - 13:16:32 - [0] ----D- C:\Users\BB\AppData\Local\{9ADD9A13-FD2A-43AE-AE58-D16118556B0E} => Empty Folder not necessary

O43 - CFD: 10/09/2011 - 08:50:36 - [0] ----D- C:\Users\BB\AppData\Local\{9D1E0CFD-7545-4D80-8D52-6DF6A8D30CF8} => Empty Folder not necessary

O43 - CFD: 13/09/2011 - 09:11:58 - [0] ----D- C:\Users\BB\AppData\Local\{9D8F74E9-D127-4B98-9443-6F9B877E168D} => Empty Folder not necessary

O43 - CFD: 22/09/2011 - 09:07:46 - [0] ----D- C:\Users\BB\AppData\Local\{A3A3EC4E-3E03-4FE6-903D-B97C1298EE35} => Empty Folder not necessary

O43 - CFD: 06/04/2011 - 11:44:54 - [0] ----D- C:\Users\BB\AppData\Local\{A4850A4C-34EB-478D-A80B-4E6FF3F22146} => Empty Folder not necessary

O43 - CFD: 09/09/2011 - 09:25:06 - [0] ----D- C:\Users\BB\AppData\Local\{A69CE817-2BFE-4FC8-AA6C-2AC0B1C7AA93} => Empty Folder not necessary

O43 - CFD: 17/09/2011 - 11:09:32 - [0] ----D- C:\Users\BB\AppData\Local\{AC8635B1-0C2B-48EC-820A-CC2FF4FD227E} => Empty Folder not necessary

O43 - CFD: 05/07/2011 - 21:51:14 - [0] ----D- C:\Users\BB\AppData\Local\{ADBBCFB9-15B0-4855-83AC-8FC408F9F038} => Empty Folder not necessary

O43 - CFD: 20/08/2011 - 15:05:20 - [0] ----D- C:\Users\BB\AppData\Local\{AEB34F18-CA72-40D4-86D7-B694F22F75D4} => Empty Folder not necessary

O43 - CFD: 04/05/2011 - 20:52:40 - [0] ----D- C:\Users\BB\AppData\Local\{AEFE3A8F-3338-48BA-8B6A-0891FD32C7A2} => Empty Folder not necessary

O43 - CFD: 30/08/2011 - 13:39:58 - [0] ----D- C:\Users\BB\AppData\Local\{B029538A-AB06-4155-A803-3C9036AFA187} => Empty Folder not necessary

O43 - CFD: 19/05/2011 - 19:39:52 - [0] ----D- C:\Users\BB\AppData\Local\{B127EA8D-130C-4094-A604-805E9A683145} => Empty Folder not necessary

O43 - CFD: 05/05/2011 - 18:16:36 - [0] ----D- C:\Users\BB\AppData\Local\{B2D090FC-D8C4-4204-954A-E56BF1A316B8} => Empty Folder not necessary

O43 - CFD: 11/05/2011 - 12:40:42 - [0] ----D- C:\Users\BB\AppData\Local\{B4D37EC5-2671-490A-834A-F886642D2E1E} => Empty Folder not necessary

O43 - CFD: 05/09/2011 - 21:36:12 - [0] ----D- C:\Users\BB\AppData\Local\{B5120478-8619-47E8-A54F-0FF5C659988F} => Empty Folder not necessary

O43 - CFD: 18/04/2011 - 13:07:28 - [0] ----D- C:\Users\BB\AppData\Local\{B5ED587C-5A7D-4EE1-A734-A0D5493F225A} => Empty Folder not necessary

O43 - CFD: 31/05/2011 - 18:04:18 - [0] ----D- C:\Users\BB\AppData\Local\{B6461695-38BE-4C78-A0DF-9C0632C5F3CB} => Empty Folder not necessary

O43 - CFD: 30/04/2011 - 23:19:16 - [0] ----D- C:\Users\BB\AppData\Local\{B6769FC8-2799-42D7-972A-1AD6D5009775} => Empty Folder not necessary

O43 - CFD: 14/04/2011 - 20:14:32 - [0] ----D- C:\Users\BB\AppData\Local\{B6B920B8-86EE-438A-A3C8-301A27EA05D6} => Empty Folder not necessary

O43 - CFD: 10/09/2011 - 08:50:24 - [0] ----D- C:\Users\BB\AppData\Local\{B8356E32-9AA2-4D94-975F-C0BDA26B3349} => Empty Folder not necessary

O43 - CFD: 20/05/2011 - 07:40:32 - [0] ----D- C:\Users\BB\AppData\Local\{B8694083-BFC6-4832-AA9C-8B5963B6F33B} => Empty Folder not necessary

O43 - CFD: 27/06/2011 - 20:41:32 - [0] ----D- C:\Users\BB\AppData\Local\{B8CFE8D3-8BE2-4B75-942D-64EDFC4107A6} => Empty Folder not necessary

O43 - CFD: 05/09/2011 - 09:35:44 - [0] ----D- C:\Users\BB\AppData\Local\{BBC12B05-3952-45A0-B646-7352DB32ECD0} => Empty Folder not necessary

O43 - CFD: 07/06/2011 - 19:48:28 - [0] ----D- C:\Users\BB\AppData\Local\{BC13A6FE-6DBB-4DB0-94D4-48F10AEEE13A} => Empty Folder not necessary

O43 - CFD: 24/04/2011 - 21:30:50 - [0] ----D- C:\Users\BB\AppData\Local\{BCDD54C4-76A4-4F30-AA38-A76422B23F96} => Empty Folder not necessary

O43 - CFD: 29/06/2011 - 15:02:50 - [0] ----D- C:\Users\BB\AppData\Local\{C11B6D57-1BE0-4557-AF08-4DA6895EA49D} => Empty Folder not necessary

O43 - CFD: 04/04/2011 - 18:37:16 - [0] ----D- C:\Users\BB\AppData\Local\{C2EE1D36-83F0-4CBA-9792-763899119A17} => Empty Folder not necessary

O43 - CFD: 29/08/2011 - 10:29:52 - [0] ----D- C:\Users\BB\AppData\Local\{C79B0598-FC2D-4BE2-B960-206C6355CE49} => Empty Folder not necessary

O43 - CFD: 07/07/2011 - 09:50:44 - [0] ----D- C:\Users\BB\AppData\Local\{CAEB377A-992A-4F41-AD1F-45B81FD13B3E} => Empty Folder not necessary

O43 - CFD: 06/07/2011 - 10:04:24 - [0] ----D- C:\Users\BB\AppData\Local\{CCE4C251-FE61-4CF3-AD08-45D33CAE96C5} => Empty Folder not necessary

O43 - CFD: 03/09/2011 - 13:50:54 - [0] ----D- C:\Users\BB\AppData\Local\{CD63079D-C8DD-4729-887E-7CD34A72B10C} => Empty Folder not necessary

O43 - CFD: 07/05/2011 - 14:01:56 - [0] ----D- C:\Users\BB\AppData\Local\{CEC6FEA5-8D8C-4981-A6B7-089E9C121D6C} => Empty Folder not necessary

O43 - CFD: 20/04/2011 - 21:19:44 - [0] ----D- C:\Users\BB\AppData\Local\{D1F7AF4B-D005-4246-9F3C-3CC23166F4DA} => Empty Folder not necessary

O43 - CFD: 28/08/2011 - 12:33:16 - [0] ----D- C:\Users\BB\AppData\Local\{D4666BAE-7385-4784-8497-BBF196E683DF} => Empty Folder not necessary

O43 - CFD: 08/07/2011 - 08:48:32 - [0] ----D- C:\Users\BB\AppData\Local\{D4F668FF-CA65-4CF4-9E67-ACA92D1B5856} => Empty Folder not necessary

O43 - CFD: 08/09/2011 - 15:51:44 - [0] ----D- C:\Users\BB\AppData\Local\{D50E91BF-A7EC-4BB4-8B9D-EB1E245F69AF} => Empty Folder not necessary

O43 - CFD: 29/07/2011 - 08:42:28 - [0] ----D- C:\Users\BB\AppData\Local\{D5E5B17A-D3A8-450E-8FEF-1486F37CF012} => Empty Folder not necessary

O43 - CFD: 05/09/2011 - 09:35:32 - [0] ----D- C:\Users\BB\AppData\Local\{D6928D70-AB8E-4003-9F40-C5CA47C03A1D} => Empty Folder not necessary

O43 - CFD: 12/09/2011 - 10:48:40 - [0] ----D- C:\Users\BB\AppData\Local\{D7801621-2974-44B0-A007-32B490BC10FA} => Empty Folder not necessary

O43 - CFD: 24/05/2011 - 21:51:52 - [0] ----D- C:\Users\BB\AppData\Local\{D9B0D4CE-4F02-46FB-8518-439D379A43AC} => Empty Folder not necessary

O43 - CFD: 28/06/2011 - 14:30:12 - [0] ----D- C:\Users\BB\AppData\Local\{DA88A389-AF60-4E75-84DB-A9F055D5A004} => Empty Folder not necessary

O43 - CFD: 12/07/2011 - 11:52:34 - [0] ----D- C:\Users\BB\AppData\Local\{DB29B995-12A5-47F3-8081-C6372D4FF98A} => Empty Folder not necessary

O43 - CFD: 21/09/2011 - 20:52:12 - [0] ----D- C:\Users\BB\AppData\Local\{DB972200-83AA-406E-BAAC-0C78C68BA158} => Empty Folder not necessary

O43 - CFD: 16/08/2011 - 11:46:32 - [0] ----D- C:\Users\BB\AppData\Local\{DDCF93A9-6ECC-4226-AC34-8BE7D846A71A} => Empty Folder not necessary

O43 - CFD: 13/05/2011 - 21:32:26 - [0] ----D- C:\Users\BB\AppData\Local\{DDE16103-CB66-4C7F-AEB5-11CF31914D9F} => Empty Folder not necessary

O43 - CFD: 27/08/2011 - 11:22:26 - [0] ----D- C:\Users\BB\AppData\Local\{E0CC9F4E-24DB-4DB8-BF60-43B2F8482F60} => Empty Folder not necessary

O43 - CFD: 12/05/2011 - 19:48:40 - [0] ----D- C:\Users\BB\AppData\Local\{E1C2EEA8-56F7-4288-BEDD-F3ED4CE61A92} => Empty Folder not necessary

O43 - CFD: 23/04/2011 - 10:16:06 - [0] ----D- C:\Users\BB\AppData\Local\{E1D3E818-D4C1-468F-BCD9-35ECA78D2366} => Empty Folder not necessary

O43 - CFD: 23/07/2011 - 22:55:00 - [0] ----D- C:\Users\BB\AppData\Local\{E319686F-60FF-44BE-A255-16AA0FAC4B54} => Empty Folder not necessary

O43 - CFD: 21/05/2011 - 11:20:52 - [0] ----D- C:\Users\BB\AppData\Local\{E3218D72-41E9-47BF-B2C3-486DAB8440B5} => Empty Folder not necessary

O43 - CFD: 08/04/2011 - 14:32:34 - [0] ----D- C:\Users\BB\AppData\Local\{E349B91C-5E13-4CAE-81BC-5406F46DD486} => Empty Folder not necessary

O43 - CFD: 18/09/2011 - 11:15:04 - [0] ----D- C:\Users\BB\AppData\Local\{E5F51330-438A-41C8-B694-B40D1DD5F35B} => Empty Folder not necessary

O43 - CFD: 24/05/2011 - 09:01:16 - [0] ----D- C:\Users\BB\AppData\Local\{E8936E8B-8F50-4C67-8360-BCEE6041A228} => Empty Folder not necessary

O43 - CFD: 24/07/2011 - 20:27:16 - [0] ----D- C:\Users\BB\AppData\Local\{E89AE1D5-00FC-4AFF-9C39-D77C84662E65} => Empty Folder not necessary

O43 - CFD: 07/04/2011 - 21:58:10 - [0] ----D- C:\Users\BB\AppData\Local\{EA7ABC71-ABF1-4DE7-8E72-31EC42BCF449} => Empty Folder not necessary

O43 - CFD: 24/06/2011 - 14:21:12 - [0] ----D- C:\Users\BB\AppData\Local\{EC9F7E07-4138-4859-B152-D21FA7712BD8} => Empty Folder not necessary

O43 - CFD: 25/07/2011 - 21:03:08 - [0] ----D- C:\Users\BB\AppData\Local\{ECEEA90A-1E36-4797-B19D-F313444D83B0} => Empty Folder not necessary

O43 - CFD: 18/08/2011 - 15:35:34 - [0] ----D- C:\Users\BB\AppData\Local\{EE417A68-D06D-46E6-84CA-317BAA9CE90E} => Empty Folder not necessary

O43 - CFD: 01/08/2011 - 19:27:22 - [0] ----D- C:\Users\BB\AppData\Local\{EE5EC7B8-B7C0-44CF-B1EF-35C1A93BA850} => Empty Folder not necessary

O43 - CFD: 21/06/2011 - 13:54:16 - [0] ----D- C:\Users\BB\AppData\Local\{EF657751-948F-4EB6-A986-EA36586B963E} => Empty Folder not necessary

O43 - CFD: 15/07/2011 - 11:58:10 - [0] ----D- C:\Users\BB\AppData\Local\{F11159FF-FA74-420C-8A74-287FFC374AD7} => Empty Folder not necessary

O43 - CFD: 31/07/2011 - 10:25:20 - [0] ----D- C:\Users\BB\AppData\Local\{F5516496-203A-4A51-B40A-BB6A49136CF4} => Empty Folder not necessary

O43 - CFD: 10/06/2011 - 08:34:04 - [0] ----D- C:\Users\BB\AppData\Local\{F5D35A32-EEC6-433A-BE28-9C39D82A7A8D} => Empty Folder not necessary

O43 - CFD: 25/04/2011 - 13:41:34 - [0] ----D- C:\Users\BB\AppData\Local\{F617D085-AB08-42F0-8510-3044D440674B} => Empty Folder not necessary

O43 - CFD: 23/07/2011 - 10:44:22 - [0] ----D- C:\Users\BB\AppData\Local\{F6556069-28E0-4384-93B8-317AA6B7F06A} => Empty Folder not necessary

O43 - CFD: 15/09/2011 - 09:56:06 - [0] ----D- C:\Users\BB\AppData\Local\{F9FF7AF8-4289-4DA3-8ED3-1F02F2033916} => Empty Folder not necessary

O43 - CFD: 17/06/2011 - 09:29:20 - [0] ----D- C:\Users\BB\AppData\Local\{FB76BA78-D467-4FFE-BD69-ADE99A4CC99A} => Empty Folder not necessary

O43 - CFD: 16/06/2011 - 20:33:30 - [0] ----D- C:\Users\BB\AppData\Local\{FC27F8F4-BB6D-4189-9493-C8836AE36372} => Empty Folder not necessary

O43 - CFD: 05/04/2011 - 19:44:08 - [0] ----D- C:\Users\BB\AppData\Local\{FD1E417B-A79D-429D-BA43-FC5EC83249EA} => Empty Folder not necessary

O43 - CFD: 01/04/2011 - 13:20:12 - [0] ----D- C:\Users\BB\AppData\Local\{FD38A5A1-FA8E-48C8-AEC4-D7F5BBEFFEA9} => Empty Folder not necessary

O43 - CFD: 10/04/2011 - 22:35:36 - [0] ----D- C:\Users\BB\AppData\Local\{FDE9B60A-CFD5-48ED-8E16-5C24046DD33B} => Empty Folder not necessary

O43 - CFD: 23/08/2011 - 16:57:16 - [0] ----D- C:\Users\BB\AppData\Local\{FE8F7CF1-4AB2-4DCC-A893-96C34A6451D4} => Empty Folder not necessary

O43 - CFD: 31/08/2011 - 14:22:08 - [0] ----D- C:\Users\BB\AppData\Local\{FEA4FDB8-BBC1-4D78-BD1C-D70A66DDD443} => Empty Folder not necessary

O43 - CFD: 09/08/2011 - 10:43:12 - [0] ----D- C:\Users\BB\AppData\Local\{FEF9064A-2AAC-4157-97BF-78E9ED5018F2} => Empty Folder not necessary

[MD5.AB8DD098B5859271BC338C83D1EBE498] [sPRF][22/09/2011] (...) -- C:\Users\BB\AppData\Local\Temp\KeyGen O&O Defrag 14.exe [158208]

C:\Users\BB\AppData\Local\Temp\log

[HKCU\Software\Ask.com.tmp] => Toolbar.Ask

[MD5.ED92900BF225E26A4E54C2C14FA1424F] [sPRF][09/09/2011] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users\BB\AppData\Local\Temp\AskSLib.dll [246440]

[HKCU\Software\Ask.com.tmp] => Toolbar.Ask

O87 - FAEL: "{054D4DB7-90A0-42F5-B933-2237B5D27A0F}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O87 - FAEL: "{2B56F7CD-67E2-4BDC-AC16-2F28C397C0A4}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

EmptyTemp

Cliquez ensuite sur le H-

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

Cliquer sur "Tous" puis sur "Nettoyer" .

Redémarrer pour achever le nettoyage.

Un rapport apparait:

Si le rapport n'apparait pas,cliquer sur

Copier-coller le rapport de suppression dans la prochaine réponse.

[and1]

Re bonjuor,

 

désolé pour le message précédent mais c'était ma seule solution afin de voir apparaitre le message en clair.

 

Ci dessous le rapport

 

Rapport de ZHPFix 1.12.3361 par Nicolas Coolman, Update du 06/09/2011

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-23-09-2011-10-01-36.txt

Run by BB at 23/09/2011 10:01:36

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Web site : ZHPFix Fix de rapport

 

========== Processus mémoire ==========

SUPPRIME Memory Process: C:\Users\BB\AppData\Local\Temp\vbc.exe

SUPPRIME Memory Process: C:\Users\BB\AppData\Local\Temp\KeyGen O&O Defrag 14.exe

 

========== Module(s) mémoire ==========

SUPPRIME Memory Module: C:\Users\BB\AppData\Local\Temp\AskSLib.dll

 

========== Clé(s) du Registre ==========

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}

SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

ABSENT Key: Service: LIVESRV

SUPPRIME Key: HKCU\Software\Ask.com.tmp

 

========== Valeur(s) du Registre ==========

SUPPRIME RunValue: Setwallpaper

SUPPRIME {054D4DB7-90A0-42F5-B933-2237B5D27A0F}

SUPPRIME {2B56F7CD-67E2-4BDC-AC16-2F28C397C0A4}

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\ProgramData\Partner

SUPPRIME Folder: C:\Users\BB\AppData\Local\{006BBBD9-C44D-4E77-B9D7-330D855F1FC1}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{01556467-A2C1-4474-B825-07201AAB656E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{037A75C4-760B-4502-AB45-0AAEA71091FD}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{03A46A90-12F9-4A70-A135-F9122BC7517A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{06D558D6-5DF7-4E2A-8525-FFB4C9D5E7C6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{08FD9536-A5A7-4039-8EEF-4CDCDAC69A55}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{095FF534-EC77-4B5B-A3C0-07B6BDA66A0C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{0D64D1D8-54E5-4193-A31A-5212E382FF18}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{11182ADE-E397-4730-95C2-A7D6F774E464}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{113B7CB2-CA42-4B27-B302-834C9B371A74}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{136C8186-08CF-4010-B114-BEE1C211AF75}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{13897F5F-8D93-471C-8E33-F97BC006452A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{14506FA8-6D48-4B35-9A6B-72DDEFD9B6F7}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{14A2B951-60C8-4EC7-8224-6E433A8194F7}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{151AEDE0-2BA1-4230-93FC-8D4790F357E3}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{1AC4B2A4-3B9C-4BCB-AF06-EA6072888F02}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{1B2AD036-D0E5-4F57-B57B-B4EA37EF7812}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{1BA55105-19BC-4444-9986-499C71AB92E7}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{1D2C3DCD-7ED1-4715-B662-EA4AB6AEC9EE}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{1EE959CC-B4AB-4EB6-A58E-3AE8572D9581}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{20351E1B-96C6-4769-A067-B4EC045056A6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{238A27AA-C965-4277-9205-6DE591651464}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{24B0C85E-05C7-4FE7-8077-E1BE71D83288}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{27DE732F-0C09-406C-9C2F-964C59B50059}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2894E23F-31CD-49CF-9894-4F6FB27B217A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{29266416-D859-4F9F-A201-8D185348A777}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2A952909-B6B6-4722-909D-95CBC0D87D9A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2DAF4B0D-76A1-4DE2-B128-03DF2FE92814}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2DD715E2-54BC-4B7A-A38D-4D2DE7937A13}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2F6A34FD-737A-482A-9A54-6534EAA1989F}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{2FCEEC2C-2B92-4279-8A12-A96A903E6843}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{31C3AC05-06F7-44A2-8BB5-CD3723431E6A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{34F397E4-FE8A-4461-95E1-10DB0652BC08}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{385AC72B-7D00-4950-9C54-51E4B3ED96AA}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{38CA017D-2591-4955-8577-8B7B14E0B031}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{38D0EF8B-EB58-4027-BA24-7B3D918E2C73}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{390DE56A-1820-4091-A669-E512A9C1D4A3}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3A4F9E9E-6FD4-4CCE-99EF-6C84BACF083C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3B159A37-4153-4D06-A192-8CE915775DC4}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3C0A4C6B-440D-431A-9F66-0ED17B7B8B09}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3DAFCB36-3277-4C7B-A34A-1F5B1319D1D9}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3E37F0B3-B71B-493B-9D2B-D03C4C6DFCB6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{3EA54F2A-282B-4F88-B200-D5CECC275CCC}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{407F1184-DD9D-41EE-9271-6FA164C0BE19}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{40EF4E9E-109E-4921-9356-42373BA6D036}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{43C5110B-2414-4344-9E9D-96E91490F423}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{43F8E1CA-6AD1-4241-BEA0-1F6346BB9729}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{45C883E0-6D26-426A-99FB-82717D962112}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{466C04FE-DA47-4BF1-8455-5F17C7C33EDA}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{4714739E-94C4-429F-A820-E085A1F591BE}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{48338FB8-F95B-4576-B8E3-6F7DAD64AB95}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{4C868AA7-9F17-429B-8EE2-7BA95CB3F74C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{4EC86693-9F57-4148-AFA8-E42181465A8E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{4ECFAC92-0E2F-4455-BE27-BF9A87CB06F6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{50BCF74D-1BBA-427C-9220-3B8672E1F539}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{5123D6C6-0E87-4404-AF40-836FFA28142E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{515B985C-2961-4D94-996B-D2B8DB10D289}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{55217EFB-A310-45CA-8219-568B8B52FD32}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{55891242-EF01-45BB-AA72-0CC12D818215}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{561F5907-4EAF-4DB8-B158-936B7E2169E4}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{56A5D65E-E89D-4A15-B3BB-9DDE95E0A075}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{579C9465-5A31-4D00-887F-796F6BF666A7}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{584ACBEE-57D3-41C9-95A5-C40AFC0B957C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{59F604FA-F6A6-4763-A3FD-09609D6914B5}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{5A46C530-7448-4CC0-9CA4-D22970457977}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{5D657EA1-BA00-4B8E-ACCD-6D34CFD4CAE1}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{5FB76E2B-6DCB-4E17-9529-16C2C2DE9E28}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{601BDF09-64C9-42A3-83C8-A4AE0D75A018}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{60DE6BD8-455E-4BDF-ABF7-C75E960C0F6B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6248783E-8AAF-464A-ABAD-079E53535D7A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{65118FBC-6B02-4F81-B17A-B17BF1FE1F57}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6813E4EB-0238-4237-A858-9C1F50AD91ED}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{68F3AA8E-39B4-40A5-9068-812CA3C82337}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6B2740E4-5541-467B-8D41-5F7CDD758505}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6BD84BC7-8012-4640-8C79-40481E8C03C8}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6C849B04-E8A2-4BB6-9C11-C272D0878649}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6D482E72-6C79-47F7-ADF6-30F004A7A687}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6D4ABC37-EE8A-472C-BAAD-26C7253A484B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6D9A2023-2FEC-4E43-B0F8-EDFA343047D1}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6E50E043-2108-4DF2-9C24-D79F5C2A7498}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{6EEB8396-FD6A-4431-9971-ED90AFF3C56F}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7027F7DB-94FB-4ED2-9CE4-561223496815}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{70F4957D-92C2-4C9B-9A69-9C986BC0DC83}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{71D8E057-B0C8-4CD0-BC1E-565C1F1190EC}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{72B340C3-D19E-406F-84F2-39ED208DAB7F}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{734F8CBE-4D9C-463A-A448-6CA60858D679}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{737CEC8F-654C-47EF-A6AA-82B154FE0453}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{75D7BC7A-DE6C-4846-B7B3-E69E3CE4532B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7ACC8CC5-62AD-4D56-A01E-3204D86FBFE3}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7CB05E53-4338-4D4F-A14A-A94213C6626A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7D5B369C-634A-4E6D-9F28-8317BE5D5A2A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7E689C7A-70E2-4CB1-B444-735D70C07EBE}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7FBD6DDF-947D-443A-9BFC-8B99EBFB3463}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{7FF59237-90AA-420E-9EE1-5641BE42B6FC}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{816A5C76-A37E-42BC-9446-DA99ACA05D58}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{841B45F8-F8EC-45A1-8144-3733B41737E6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8439247A-6B23-4FA5-807F-F07318E55787}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{859BA310-B266-4C61-9112-C532B18C101B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8674A07D-EA9E-4CC8-BE1F-CDB2389CF230}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{899C33D7-880A-406B-AD3E-EF4F6F515652}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8D2900B1-B827-49E4-BDE2-6707690AD97D}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8DD75874-1A61-49BD-BE6A-1AA7219ABA76}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8E7DF095-5344-45B5-8D95-B61E0BB7DA49}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{8FDD2FEC-E044-4CC8-B127-6ED879D6B2B6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{920DFD5D-02FD-4F9E-9E7D-A4C8CC253D39}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{932A3D8C-C32C-4FD4-AC41-41704C72C427}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{9562B001-4EF5-4BEA-AFFC-C05AFA217435}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{968B614B-50D4-456F-A05D-802697B45AC6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{9ADD9A13-FD2A-43AE-AE58-D16118556B0E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{9D1E0CFD-7545-4D80-8D52-6DF6A8D30CF8}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{9D8F74E9-D127-4B98-9443-6F9B877E168D}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{A3A3EC4E-3E03-4FE6-903D-B97C1298EE35}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{A4850A4C-34EB-478D-A80B-4E6FF3F22146}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{A69CE817-2BFE-4FC8-AA6C-2AC0B1C7AA93}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{AC8635B1-0C2B-48EC-820A-CC2FF4FD227E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{ADBBCFB9-15B0-4855-83AC-8FC408F9F038}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{AEB34F18-CA72-40D4-86D7-B694F22F75D4}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{AEFE3A8F-3338-48BA-8B6A-0891FD32C7A2}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B029538A-AB06-4155-A803-3C9036AFA187}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B127EA8D-130C-4094-A604-805E9A683145}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B2D090FC-D8C4-4204-954A-E56BF1A316B8}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B4D37EC5-2671-490A-834A-F886642D2E1E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B5120478-8619-47E8-A54F-0FF5C659988F}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B5ED587C-5A7D-4EE1-A734-A0D5493F225A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B6461695-38BE-4C78-A0DF-9C0632C5F3CB}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B6769FC8-2799-42D7-972A-1AD6D5009775}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B6B920B8-86EE-438A-A3C8-301A27EA05D6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B8356E32-9AA2-4D94-975F-C0BDA26B3349}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B8694083-BFC6-4832-AA9C-8B5963B6F33B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{B8CFE8D3-8BE2-4B75-942D-64EDFC4107A6}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{BBC12B05-3952-45A0-B646-7352DB32ECD0}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{BC13A6FE-6DBB-4DB0-94D4-48F10AEEE13A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{BCDD54C4-76A4-4F30-AA38-A76422B23F96}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{C11B6D57-1BE0-4557-AF08-4DA6895EA49D}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{C2EE1D36-83F0-4CBA-9792-763899119A17}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{C79B0598-FC2D-4BE2-B960-206C6355CE49}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{CAEB377A-992A-4F41-AD1F-45B81FD13B3E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{CCE4C251-FE61-4CF3-AD08-45D33CAE96C5}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{CD63079D-C8DD-4729-887E-7CD34A72B10C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{CEC6FEA5-8D8C-4981-A6B7-089E9C121D6C}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D1F7AF4B-D005-4246-9F3C-3CC23166F4DA}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D4666BAE-7385-4784-8497-BBF196E683DF}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D4F668FF-CA65-4CF4-9E67-ACA92D1B5856}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D50E91BF-A7EC-4BB4-8B9D-EB1E245F69AF}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D5E5B17A-D3A8-450E-8FEF-1486F37CF012}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D6928D70-AB8E-4003-9F40-C5CA47C03A1D}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D7801621-2974-44B0-A007-32B490BC10FA}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{D9B0D4CE-4F02-46FB-8518-439D379A43AC}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{DA88A389-AF60-4E75-84DB-A9F055D5A004}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{DB29B995-12A5-47F3-8081-C6372D4FF98A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{DB972200-83AA-406E-BAAC-0C78C68BA158}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{DDCF93A9-6ECC-4226-AC34-8BE7D846A71A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{DDE16103-CB66-4C7F-AEB5-11CF31914D9F}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E0CC9F4E-24DB-4DB8-BF60-43B2F8482F60}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E1C2EEA8-56F7-4288-BEDD-F3ED4CE61A92}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E1D3E818-D4C1-468F-BCD9-35ECA78D2366}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E319686F-60FF-44BE-A255-16AA0FAC4B54}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E3218D72-41E9-47BF-B2C3-486DAB8440B5}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E349B91C-5E13-4CAE-81BC-5406F46DD486}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E5F51330-438A-41C8-B694-B40D1DD5F35B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E8936E8B-8F50-4C67-8360-BCEE6041A228}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{E89AE1D5-00FC-4AFF-9C39-D77C84662E65}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{EA7ABC71-ABF1-4DE7-8E72-31EC42BCF449}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{EC9F7E07-4138-4859-B152-D21FA7712BD8}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{ECEEA90A-1E36-4797-B19D-F313444D83B0}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{EE417A68-D06D-46E6-84CA-317BAA9CE90E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{EE5EC7B8-B7C0-44CF-B1EF-35C1A93BA850}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{EF657751-948F-4EB6-A986-EA36586B963E}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F11159FF-FA74-420C-8A74-287FFC374AD7}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F5516496-203A-4A51-B40A-BB6A49136CF4}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F5D35A32-EEC6-433A-BE28-9C39D82A7A8D}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F617D085-AB08-42F0-8510-3044D440674B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F6556069-28E0-4384-93B8-317AA6B7F06A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{F9FF7AF8-4289-4DA3-8ED3-1F02F2033916}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FB76BA78-D467-4FFE-BD69-ADE99A4CC99A}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FC27F8F4-BB6D-4189-9493-C8836AE36372}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FD1E417B-A79D-429D-BA43-FC5EC83249EA}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FD38A5A1-FA8E-48C8-AEC4-D7F5BBEFFEA9}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FDE9B60A-CFD5-48ED-8E16-5C24046DD33B}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FE8F7CF1-4AB2-4DCC-A893-96C34A6451D4}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FEA4FDB8-BBC1-4D78-BD1C-D70A66DDD443}

SUPPRIME Folder: C:\Users\BB\AppData\Local\{FEF9064A-2AAC-4157-97BF-78E9ED5018F2}

SUPPRIME Folder: c:\users\bb\appdata\local\temp\log

SUPPRIME Temporaires Windows: : 862

 

========== Fichier(s) ==========

SUPPRIME File: c:\users\bb\appdata\local\temp\vbc.exe

ABSENT File: c:\programdata\setwallpaper.cmd

SUPPRIME File: c:\users\bb\appdata\local\temp\keygen o&o defrag 14.exe

SUPPRIME File: c:\users\bb\appdata\local\temp\askslib.dll

SUPPRIME Temporaires Windows: : 16782

 

 

========== Récapitulatif ==========

2 : Processus mémoire

1 : Module(s) mémoire

4 : Clé(s) du Registre

3 : Valeur(s) du Registre

185 : Dossier(s)

5 : Fichier(s)

 

 

End of clean in 01mn 33s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 22/09/2011 21:41:02 [558]

C:\ZHP\ZHPFix[R2].txt - 23/09/2011 10:01:36 [16933]

 

 

 

En attendant d'autres instructions.

Cordialament

[pear]

C'est bon.

 

Encore un souci ?