AIde pour un virus

[bondioune]

Bonjour à tous,

 

 

Voilà je me demandais si sur le forum, des gens pourraient m'aider à me débarrasser d'un virus ?

Car vous l'aurez compris j'en ai chopé un bien beau au vu des messages que je lis sur internet à son sujet.

 

Alors les caractéristiques:

- D'après l'antivirus en ce moment il est ici: c:\Windows\Assembly\GAC_MSI\desktop.ini mais au scan précédent il était dans nvidia et encore avant dans hotspotshield. Chaque fois que je le supprime il part ailleurs.

- Avast quand il le trouve me demande de redémarrer le pc et de faire un scan au démarrage qui ne sert à rien puisque le virus "bouge"

- Quand je branche une clé usb sur le pc, le virus et efface tous les fichiers présents et les remplace par des exe de même nom tous infectés. J'ai essayé de formaté mes clés mais quand je clic droit ça freeze.

- Il essaie de prendre le contrôle d'avast de temps en temps mais comme j'ai lui ai mis un mot de passe, il y arrive plus

- Je ne vais plus avec le Pc sur internet parce qu'jai vu que ça parlait dans MAM de keylogger, backdoor etc du coup je l'ai "isolé"

- Apparemment il essaye d'ouvrir MOzilla pour m'emmener sur un lecteur media Gino

- Ca fait gratter mon DD d'une drole de façon.

- J'ai essayé les basiques:

MAM, Adaware, spybot, AVG antirootkit (dépassé depuis 2 ans je crois arf), Scan au démarrage d'avast. mais j'ai l'impression d'attaquer un mammouth avec un matraque..

Tous mes utilitaires sont à jour du 11/01, date ou j'ai attraper la bête.

 

Est ce que faire un restauration pourrait marcher ? vu comme il a l'air efficace j'ai déjà l'impression que soit je pourrais pas, soit ça fera rien.

Est ce que quelqu'un pourrait m'aider ? ... parce que j'ai un peu zieuté sur Google mais y font des trucs de pro avec rogue et des rapports en veux tu en voila.. que je comprends rien.

 

Est ce que se connecter à internet avec ça dans le ventre est sans risque ? j'ai un peu peur qu'il ait chopé tous mes mots de passe, voire peut-être récupéré je sais pas comment un numéro de CB ?

 

Là je vais essayer avec norman et un autre que je me rappelle plus mais bon..

 

Merci de votre attention et aide éventuelle.

 

PS:

on peut pas éditer le titre du message?

[pear]

Bonjour,

 

on peut pas éditer le titre du message?

 

éditez l'en tête de votre premier message en choisissant l'option "utiliser l'éditeur complet"

 

Lancez cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Double-cliquer sur ZHPDiag.exe pour installer l'outil

Sur le bureau ,il y aura 3 icônes

 

Sous XP, double clic sur l'icône ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

Cliquez sur le tournevis et choisissez Tous

En cas de blocage, sur O80 par exemple, cliquez sur le tournevis pour le décocher

 

Clic sur la Loupe pour lancer le scan

Postez le rapport ZhpDiag.txt qui apparait sur le bureau

Comment poster les rapports

Vous copiez/collez tout ou partie des rapports dans un ou plusieurs messages.

Autre solution:

Aller sur le site :Ci-Joint

Appuyez sur Parcourir et chercher les rapports sur le disque,

Ensuite appuyez sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

[bondioune]

Bonsoir et merci de m'avoir pris en main.... j'ai essayé cjoint mais j'ai des restes de comodo qui m'empéchent d'accéder au site. J'ai 79 pages de rapport alors c'est parti:

 

SI c'est plus simple j'ai aussi réussi à le mettre ici finalement: http://pjjoint.malekal.com/files.php?read=ZHPDiag_20120116_d7y8d15p14c10

 

 

 

 

Rapport de ZHPDiag v1.28.311 par Nicolas Coolman, Update du 14/01/2012

Run by Ken Hutchinson at 16/01/2012 17:29:53

Web site : ZHPDiag Outil de diagnostic

Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com

State : Problème connexion internet

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox 9.0.1 v9.0.1 (Defaut)

OPIE: Opera v11.60

 

---\\ Windows Product Information

~ Langage: Français

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : OK

 

---\\ System Information

~ Processor: x86 Family 15 Model 63 Stepping 2, AuthenticAMD

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 2047 MB (69% free)

System Restore: Activé (Enable)

System drive C: has 18 GB (9%) free of 190 GB

 

---\\ Logged in mode

~ Computer Name: CHAZAL-EDBC611A

~ User Name: Ken Hutchinson

~ All Users Names: UpdatusUser, SUPPORT_388945a0, Session rapide, postgres, HelpAssistant, Ken Hutchinson, ASPNET, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\Ken Hutchinson\Application Data\

~ %Desktop% : C:\Documents and Settings\Ken Hutchinson\Bureau\

~ %Favorites% : C:\Documents and Settings\Ken Hutchinson\Favoris\

~ %LocalAppData% : C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\Ken Hutchinson\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

C:\ Hard drive, Flash drive, Thumb drive (Free 18 Go of 190 Go)

D:\ CD-ROM drive (Free 0 Go of 0 Go)

E:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 1 Go)

F:\ Hard drive, Flash drive, Thumb drive (Free 160 Go of 466 Go)

H:\ Floppy drive, Flash card reader, USB Key (Free 10 Go of 14 Go)

I:\ Hard drive, Flash drive, Thumb drive (Free 690 Go of 932 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 19:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.13/04/2008 - 19:34:22.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.B0DF02C2326381D64149F3EEFAE5E09D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.04/11/2011 - 20:13:29.) -- C:\WINDOWS\system32\wininet.dll [916992]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 19:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 12:14:22.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 11:40:48.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 18:57:40.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 09:36:06.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 19:00:54.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 11:41:00.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 11:57:16.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 12:19:44.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]

[MD5.05F5FBF6641FB23340DAD28A5C375CDA] - (....) (.13/04/2008 - 12:21:02.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 12:15:54.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 19:09:42.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 12:19:44.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 11:32:52.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 18:57:36.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]

[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 18:56:06.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 65/5722

~ Mes musiques (My Musics) : 15/21

~ Mes Videos (My Videos) : 1/8

~ Mes Favoris (My Favorites) : 4/111

~ Mes Documents (My Documents) : 401/73406

~ Mon Bureau (My Desktop) : 8/8310

~ Menu demarrer (Programs) : 7/139

~ Scan Hidden Files in 01mn 47s

 

 

 

---\\ Processus lancés

[MD5.ED60FFD305AC0424920D146DB9F9ED78] - (.Lavasoft Limited - Ad-Aware Service Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2152152] [PID.]

[MD5.996E6D052438E8D8DFD501F31560B2E0] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [44768] [PID.]

[MD5.941E435E5A903CC60E50E72037FA39D0] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [1466476] [PID.]

[MD5.D87ACAED61E417BBA546CED5E7E36D9C] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [69632] [PID.]

[MD5.19EF7FB809D3073EE60F85464E9C4C51] - (.Iomega Corporation - AppServices.) -- C:\PROGRA~1\Iomega\System32\AppServices.exe [73728] [PID.]

[MD5.381B25DC8E958D905B33130D500BBF29] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [PID.]

[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [322120] [PID.]

[MD5.0573C75A2895D973EA6EF2495620BA49] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 285.5.) -- C:\WINDOWS\system32\nvsvc32.exe [298304] [PID.]

[MD5.DA345DE3B450E9E1691E7B9956D8FFC3] - (...) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112] [PID.]

[MD5.3A2BDD76E7D2A5F40A7174793D1BA794] - (...) -- C:\WINDOWS\system32\PnkBstrA.exe [75136] [PID.]

[MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [PID.]

[MD5.B624180218BB196AD9869D5D6B454318] - (.Iomega Corporation - Active Disk Service.) -- C:\Program Files\Iomega\AutoDisk\ADService.exe [151552] [PID.]

[MD5.6986302B57BFFC135414488FA67464F1] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [102503] [PID.]

[MD5.7FBEAD79082A406CA657B0BA5EC92F34] - (.Lavasoft Limited - Ad-Aware Tray Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [1191216] [PID.3864]

[MD5.3996AB635B3F87D708BC9DE4FE49ADEC] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.EXE [90112] [PID.380]

[MD5.ED42614423D852FA30460FBF17BF0561] - (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\WINDOWS\V0230Mon.exe [32768] [PID.2172]

[MD5.4A2462FF36EF6A5BCE9611A41A2987DE] - (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe [88365] [PID.2916]

[MD5.F7226AA410954185160067D5FA82F3F2] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3744552] [PID.3960]

[MD5.4DEEE0D77498D818B486E3172053BD03] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe [315478] [PID.512]

[MD5.1E361F31E4C10AEFCAAE2643E01C26C4] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [252296] [PID.2648]

[MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [PID.2744]

[MD5.C25CA8B25132DAB46338C815C0F6ABCA] - (.Robert Misiak - ChronosXP.) -- C:\Program Files\ChronosXP\ChronosXP.exe [599040] [PID.1808]

[MD5.90C37384C41F486F19786BF420125966] - (...) -- C:\Documents and Settings\Ken Hutchinson\ciiteb.exe [266240] [PID.1868]

[MD5.AC684D0AC7A8F43E6081B203390E214B] - (.Realtek Semiconductor Corp. - RtWLan ( For WinXP/2003) Application.) -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe [1048576] [PID.3084]

[MD5.C9E27369BE36DE0BCDED061FA4A557F6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2210816] [PID.2780]

[MD5.9C84945FEEE40EA42D3BCA5C22250D47] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2253120] [PID.]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1)

B0 - SPO: operaprefs.ini [Ken Hutchinson] Home URL=http://www.ecofree.org

P1 - OPN:Opera Plugin Navigator . (.The OpenSSL Project, OpenSSL: The Open Source toolkit for SSL/TLS - OpenSSL Shared Library.) -- C:\Program Files\Opera\Program\Plugins\libdivx.dll

P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Program Files\Opera\Program\Plugins\msvcp90.dll

P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Program Files\Opera\Program\Plugins\msvcr90.dll

P1 - OPN:Opera Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.5.0.52.) -- C:\Program Files\Opera\Program\Plugins\npdivx32.dll

P1 - OPN:Opera Plugin Navigator . (...) -- C:\Program Files\Opera\Program\Plugins\NPSibelius.dll

P1 - OPN:Opera Plugin Navigator . (.PDFTron Systems Inc. - PDFNet Dynamic Link Library for C/C++/JAVA.) -- C:\Program Files\Opera\Program\Plugins\PDFNetC.dll

P1 - OPN:Opera Plugin Navigator . (...) -- C:\Program Files\Opera\Program\Plugins\ScorchPDFWrapper.dll

P1 - OPN:Opera Plugin Navigator . (.The OpenSSL Project, OpenSSL: The Open Source toolkit for SSL/TLS - OpenSSL Shared Library.) -- C:\Program Files\Opera\Program\Plugins\ssldivx.dll

~ Scan Opera Browser in 00mn 00s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\prefs.js

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\ecofreeorg---france.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-1.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-10.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-11.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-12.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-13.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-14.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-2.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-3.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-4.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-5.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-6.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-7.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-8.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-9.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\radioblogclub.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Ken Hutchinson] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

M0 - MFSP: prefs.js [Ken Hutchinson - 63lyuoo9.default] EcoFree.org - Moteur de recherche écologique - Chaque geste compte

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\[email protected]] [] United States English Spellchecker v5.0.1 (.Giuliano Masseroni.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\[email protected]] [] external IP v0.9.9.6 (.Erik Morlin.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\[email protected]] [] Cooliris v1.12.3.55472 (.Cooliris Inc..)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}] [] Image Zoom v0.4.6 (.Jason Adams.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{3d7eb24f-2740-49df-8937-200b1cc08f8a}] [] Flashblock v1.5.15.1 (.The Flashblock Team.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{800b5000-a755-47e1-992b-48a1c1357f07}] [] ICQ Toolbar v1.5.15.1 (.The Flashblock Team.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{ada4b710-8346-4b82-8199-5de2b400a6ae}] [] ReminderFox v1.9.9.4.3 (.Tom Mutdosch and Daniel Lee.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}] [] BitComet 视频下载器 v1.29 (.BitComet.)

M2 - MFEP: prefs.js [Ken Hutchinson - 63lyuoo9.default\{B5EDFBB0-9827-11DA-A72B-0800200C9A66}] [] Forecastfox l10n v0.7.2008093001 (.Thomas Bertels.)

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 10.2.) -- C:\Program Files\Mozilla Firefox\Plugins\np32dsw.dll

P2 - FPN:Firefox Plugin Navigator . (.BitComet - BitCometAgent v1.27 for Firefox.) -- C:\Program Files\Mozilla Firefox\Plugins\npBitCometAgent.dll

P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll

P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\npGoogleGadgetPluginFirefoxWin.dll

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.2.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.448.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll

P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\NPSibelius.dll

P2 - FPN:Firefox Plugin Navigator . (.PDFTron Systems Inc. - PDFNet Dynamic Link Library for C/C++/JAVA.) -- C:\Program Files\Mozilla Firefox\Plugins\PDFNetC.dll

P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files\Mozilla Firefox\Plugins\ScorchPDFWrapper.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@bittorrent.com/BitTorrentDNA] - (.BitTorrent, Inc. - Delivery Network Acceleration by BitTorrent™.) -- C:\Program Files\DNA\plugins\npbtdna.dll

P2 - FPN: [HKLM] [@canon.com/EPPEX] - (.CANON INC. - CANON iMAGE GATEWAY Album Plugin Utility Module.) -- C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.2.1] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\WINDOWS\system32\npdeployJava1.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.2.1] - (.Oracle Corporation - Next Generation Java Plug-in 10.2.1 for Mozilla browsers.) -- C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win # 5.2.2.0.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6] - (.Yahoo! Inc. - Yahoo Application State Plugin version 1.0.0.7.) -- C:\Program Files\Yahoo!\Shared\npYState.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@playstation.com/PsndlCheck,version=1.00] - (.Sony Computer Entertainment Inc. - PlayStation®Network Downloader Check Plug-in.) -- C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.448] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.448] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.448] - (.RealNetworks, Inc. - 6.0.12.448.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Network Entertainment International LL - 2.0.) -- C:\Program Files\Sony\Media Go\npmediago.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll

P2 - FPN: [HKLM] [Adobe Acrobat] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.2.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.3.0f4.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll

~ Scan Firefox Browser in 00mn 03s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = roonic.com

R3 - URLSearchHook: (no name) - . (...) (No version) -- (.not file.)

R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} . (...) (No version) -- (.not file.)

R3 - URLSearchHook: (no name) - {CA3EB689-8F09-4026-AA10-B9534C691CE0} . (...) (No version) -- (.not file.)

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 01s

~ Nombre de lignes (Lines number): 15310

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Click to Call with Skype for Internet Explo.) -- C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java Platform SE binary.) -- C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: TBSB07458 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\Sony Ericsson PC Suite 6.009.00\mybarnsq102.tmp\tbcore3.dll

~ Scan BHO in 00mn 01s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} . (...) -- (.not file.)

O3 - Toolbar: (no name) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (...) -- (.not file.)

O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} . (...) -- (.not file.)

O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} . (...) -- (.not file.)

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O3 - Toolbar: Free software Gooofull toolbar - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\Sony Ericsson PC Suite 6.009.00\mybarnsq102.tmp\tbcore3.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [soundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\soundman.exe

O4 - HKLM\..\Run: [V0230Mon.exe] . (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\WINDOWS\V0230Mon.exe

O4 - HKLM\..\Run: [AGRSMMSG] . (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe

O4 - HKLM\..\Run: [btTray] . (.IVT Corporation - Bluetooth Application.) -- C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\nvcpl.dll

O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\nvmctray.dll

O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [ChronosXP] . (.Robert Misiak - ChronosXP.) -- C:\Program Files\ChronosXP\ChronosXP.exe

O4 - HKCU\..\Run: [ciiteb] . (...) -- C:\Documents and Settings\Ken Hutchinson\ciiteb.exe

O4 - HKCU\..\Run: [Camfrog] C:\Program Files\Camfrog\Camfrog Video Chat\CamfrogNet.exe (.not file.)

O4 - HKCU\..\Run: [CANON_SC] . (...) -- E:\CANON_SC.exe

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [ChronosXP] . (.Robert Misiak - ChronosXP.) -- C:\Program Files\ChronosXP\ChronosXP.exe

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [ciiteb] . (...) -- C:\Documents and Settings\Ken Hutchinson\ciiteb.exe

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [Camfrog] C:\Program Files\Camfrog\Camfrog Video Chat\CamfrogNet.exe (.not file.)

O4 - HKUS\S-1-5-21-1229272821-1220945662-725345543-1013-1229272821-1220945662-725345543-1004\..\Run: [CANON_SC] . (...) -- E:\CANON_SC.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat Distiller X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000005}\_SC_Distiller.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat X Pro.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000005}\_SC_Acrobat.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A71000000002}\SC_Reader_PM.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\outicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN Reaper.lnk . (...) -- C:\Program Files\MSN Reaper\MSNReapr.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Opera.lnk . (.Opera Software.) -- C:\Program Files\Opera\opera.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\UltraMon.lnk . (...) -- C:\WINDOWS\Installer\{B49673F8-7AB6-4A14-8213-C8A7BE370010}\IcoUltraMon.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\postgres\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\postgres\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\ANPSEDIC.lnk . (.Sébastien Bourgasser.) -- C:\Program Files\ANPSEDIC\ANPSEDIC.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Chess+.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Chess+\Chess+.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Facebook widget.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Facebook widget\Facebook widget.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Friday countdown.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Friday countdown\Friday countdown.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Golden Coin.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Golden Coin\Golden Coin.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Google Translator.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Google Translator\Google Translator.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\multiWeather.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\multiWeather\multiWeather.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\MyCamera.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\MyCamera\MyCamera.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\O-Knife.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\O-Knife\O-Knife.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\OMG_Opera Mouse Gestures.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\OMG_Opera Mouse Gestures\OMG_Opera Mou

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Penalty.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Penalty\Penalty.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\SimAquarium.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\SimAquarium\SimAquarium.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Wasserkuppe Germany.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Wasserkuppe Germany\Wasserkuppe Germany.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\????.??.lnk - Clé orpheline

O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat Distiller X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000005}\_SC_Distiller.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat X Pro.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000005}\_SC_Acrobat.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 7.0.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A71000000002}\SC_Reader_PM.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\accicons.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft FrontPage.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\misc.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\outicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\pptico.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN Reaper.lnk . (...) -- C:\Program Files\MSN Reaper\MSNReapr.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Opera.lnk . (.Opera Software.) -- C:\Program Files\Opera\opera.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\UltraMon.lnk . (...) -- C:\WINDOWS\Installer\{B49673F8-7AB6-4A14-8213-C8A7BE370010}\IcoUltraMon.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Session rapide\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\postgres\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\postgres\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\ANPSEDIC.lnk . (.Sébastien Bourgasser.) -- C:\Program Files\ANPSEDIC\ANPSEDIC.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Chess+.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Chess+\Chess+.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Facebook widget.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Facebook widget\Facebook widget.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Friday countdown.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Friday countdown\Friday countdown.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Golden Coin.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Golden Coin\Golden Coin.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Google Translator.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Google Translator\Google Translator.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\multiWeather.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\multiWeather\multiWeather.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\MyCamera.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\MyCamera\MyCamera.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\O-Knife.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\O-Knife\O-Knife.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\OMG_Opera Mouse Gestures.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\OMG_Opera Mouse Gestures\OMG_Opera Mou

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Penalty.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Penalty\Penalty.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\SimAquarium.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\SimAquarium\SimAquarium.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\Wasserkuppe Germany.lnk . (.Opera Software.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Wasserkuppe Germany\Wasserkuppe Germany.exe

O4 - Global Startup: C:\Documents And Settings\Ken Hutchinson\Menu Démarrer\Programmes\????.??.lnk - Clé orpheline

O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 04s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O8 - Extra context menu item: Ajouter à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O8 - Extra context menu item: Tout télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe

O8 - Extra context menu item: Télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: PMU Poker - {06568ceb-5721-47d4-9d93-7e604fcbaeab} . (...) -- C:\Program Files\PMUPoker\Images\ppicon.ico

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\toolbars\Internet Explorer\icon.ico

O9 - Extra button: Click to call with Skype - {90EAE591-7E7E-434a-8E28-ECFD00071806} . (...) -- C:\Program Files\Skype\toolbars\Internet Explorer\icon.ico

O9 - Extra button: Free software Gooofull toolbar - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} . (...) -- C:\Program Files\Sony Ericsson PC Suite 6.009.00\mybarnsq102.tmp\favicon.ico

O9 - Extra button: Free software Gooofull toolbar - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} . (.ICQ, LLC. - ICQ.) -- C:\Program Files\ICQ6.5\ICQ.exe

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Onglet supplémentaire dans les options avancées d'Internet Explorer (O11)

O11 - Options group: [java_sun] Java (Oracle). (.Oracle Corporation - Java Deployment Library .) - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\deploy.dll

~ Scan IE Plugins in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - C:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab

O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} () - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/es/mjss/MJSS.cab109791.cab

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab

O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{574FFBEC-1063-4A2A-9B06-1A604B64986D}: NameServer = 84.103.237.142,86.64.145.142

O17 - HKLM\System\CS1\Services\Tcpip\..\{574FFBEC-1063-4A2A-9B06-1A604B64986D}: NameServer = 84.103.237.142,86.64.145.142

O17 - HKLM\System\CS2\Services\Tcpip\..\{574FFBEC-1063-4A2A-9B06-1A604B64986D}: NameServer = 194.117.200.10,194.117.200.15

O17 - HKLM\System\CS2\Services\Tcpip\..\{574FFBEC-1063-4A2A-9B06-1A604B64986D}: DhcpNameServer = 192.168.1.1 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) --

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.dll

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Click to Call with Skype for Internet Explo.) -- C:\Program Files\Skype\toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\WINDOWS\system32\skype4com.dll

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

~ Scan Protocole Additionnel in 00mn 02s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: avgrsstarter . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Starter.) -- C:\WINDOWS\system32\avgrsstx.dll

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: BlueSoleilCS (BlueSoleilCS) . (.IVT Corporation - Bluetooth Application.) - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Iomega App Services (Iomega App Services) . (.Iomega Corporation - AppServices.) - C:\Program Files\Iomega\System32\AppServices.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 285.5.) - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O23 - Service: Sony Ericsson OMSI download service (OMSI download service) . (...) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) . (.PostgreSQL Global Development Group - pg_ctl - starts/stops/restarts the PostgreS.) - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe

O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Yahoo! Updater (YahooAUService) . (.Yahoo! Inc. - AutoUpater Service Module.) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) . (.Iomega Corporation - Active Disk Service.) - C:\Program Files\Iomega\AutoDisk\ADService.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O34 - HKLM BootExecute: (lsdelete) - File not found

O34 - HKLM BootExecute: (aswBoot.exe /M:3e2c57de7d) - File not found

~ Scan Keys in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

~ Scan Scheduled Task in 00mn 00s

 

 

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui

O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll

O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LSRunOnce.exe

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Adobe Shockwave Director 10.2 - {233C1507-6A77-46A4-9443-F871F945D258} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Macromed\Director\SwDir.dll

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp.inf

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll

O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.3 r183.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10v.ocx

~ Scan Active Setup in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\WINDOWS\system32\DRIVERS\AmdK8.sys

O41 - Driver: (AvgArCln) . (.GRISOFT, s.r.o. - AVG7 Clean Driver.) - C:\WINDOWS\system32\DRIVERS\AvgArCln.sys

O41 - Driver: (AvgLdx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\WINDOWS\system32\Drivers\avgldx86.sys

O41 - Driver: (AvgMfx86) . (.GRISOFT, s.r.o. - AVG Resident Shield Minifilter Driver.) - C:\WINDOWS\system32\Drivers\avgmfx86.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (EIO) . (.ASUSTeK Computer Inc. - ASUS Kernel Mode Driver for NT.) - C:\WINDOWS\system32\drivers\EIO.sys

O41 - Driver: (hidfltr) . (...) - C:\WINDOWS\system32\drivers\MWhid.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (...) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

~ Scan Drivers in 00mn 01s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: AC3Filter (remove only) - (.Pas de propriétaire.) [HKLM] -- AC3Filter

O42 - Logiciel: ANPSEDIC - (.Sébastien Bourgasser.) [HKLM] -- {5A682D37-E093-40A0-BF74-A4A6D1861B92}

O42 - Logiciel: AVG Anti-Rootkit Free - (.GRISOFT.) [HKLM] -- AVGantiRootkit

O42 - Logiciel: Active Disk - (.Pas de propriétaire.) [HKLM] -- Active Disk

O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- Ad-Aware

O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- {DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

O42 - Logiciel: Adobe Acrobat X Pro - English, Français, Deutsch - (.Adobe Systems.) [HKLM] -- {AC76BA86-1033-F400-7760-000000000005}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 7.0.5 Language Support - (.Adobe Systems.) [HKLM] -- {AC76BA86-7AD7-5464-3428-7050000000A7}

O42 - Logiciel: Adobe Reader 7.1.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A71000000002}

O42 - Logiciel: Adobe Reader Japanese Fonts - (.Adobe Systems.) [HKLM] -- {AC76BA86-7AD7-5760-0000-705000000001}

O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player

O42 - Logiciel: Advanced Video FX Engine - (.Pas de propriétaire.) [HKLM] -- Advanced Video FX Engine

O42 - Logiciel: Age of Empires III - (.Microsoft Game Studios.) [HKLM] -- InstallShield_{485775E8-AEB8-46BD-922B-242879E03DD5}

O42 - Logiciel: Ancestrologie 2011 - (.PCM.) [HKLM] -- Ancestrologie_is1

O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Athlon 64 Processor Driver - (.Pas de propriétaire.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798}

O42 - Logiciel: AutoCAD 2005 - English - (.Autodesk.) [HKLM] -- {5783F2D7-0301-0409-0002-0060B0CE6BBA}

O42 - Logiciel: Autodesk DWF Viewer - (.Autodesk, Inc..) [HKLM] -- Autodesk DWF Viewer

O42 - Logiciel: Autodesk Design Review 2009 - (.Autodesk, Inc..) [HKLM] -- Autodesk Design Review 2009

O42 - Logiciel: Avanquest update - (.Avanquest Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}

O42 - Logiciel: BOINC - (.Space Sciences Laboratory, U.C. Berkeley.) [HKLM] -- {341E1C05-5091-418F-B862-C28253A99F25}

O42 - Logiciel: Best Hand Monitor 1.1 - (.eniksoft.) [HKLM] -- Best Hand Monitor

O42 - Logiciel: BitComet 1.29 - (.CometNetwork.) [HKLM] -- BitComet

O42 - Logiciel: Bluesoleil 5.4.277.0 - (.IVT Corporation.) [HKLM] -- {25887983-54F3-4F55-A7C5-91229AD67C16}

O42 - Logiciel: BroadJump Client Foundation - (.Pas de propriétaire.) [HKLM] -- BroadJump Client Foundation

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CD-LabelPrint - (.Pas de propriétaire.) [HKLM] -- MediaNavigation.CDLabelPrint

O42 - Logiciel: CVitaeV4 - (.Pas de propriétaire.) [HKCU] -- CVitaeV4

O42 - Logiciel: Call of Duty® 4 - Modern Warfare - (.Activision.) [HKLM] -- InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}

O42 - Logiciel: Canon Easy-WebPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-WebPrint EX

O42 - Logiciel: Canon IJ Network Scan Utility - (.Pas de propriétaire.) [HKLM] -- Canon_IJ_Network_Scan_UTILITY

O42 - Logiciel: Canon IJ Network Tool - (.Pas de propriétaire.) [HKLM] -- Canon_IJ_Network_UTILITY

O42 - Logiciel: Canon MP Navigator EX 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 3.0

O42 - Logiciel: Canon MP640 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP640_series

O42 - Logiciel: Chess+ - (.Sven Vahar.) [HKCU] -- Chess+

O42 - Logiciel: ChronosXP (32-bit) - (.Robert Misiak.) [HKLM] -- {E2D2C0EE-64F6-4D64-A237-91B7D176395F}

O42 - Logiciel: Click to Call with Skype - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}

O42 - Logiciel: Creative Live! Cam Center - (.Pas de propriétaire.) [HKLM] -- Creative Live! Cam Center

O42 - Logiciel: Creative Live! Cam Doodling - (.Pas de propriétaire.) [HKLM] -- Creative Live! Cam Doodling

O42 - Logiciel: Creative Live! Cam FX Creator - (.Pas de propriétaire.) [HKLM] -- Creative Live! Cam FX Creator

O42 - Logiciel: Creative Live! Cam Manager - (.Pas de propriétaire.) [HKLM] -- Creative Live! Cam Manager

O42 - Logiciel: Creative Live! Cam Video IM Pro Driver (1.02.02.1018) - (.Pas de propriétaire.) [HKLM] -- Creative VF0230

O42 - Logiciel: Creative Photo Calendar - (.Pas de propriétaire.) [HKLM] -- Creative Photo Calendar

O42 - Logiciel: Creative Photo Manager - (.Pas de propriétaire.) [HKLM] -- Creative Photo Manager

O42 - Logiciel: Creative Software AutoUpdate - (.Pas de propriétaire.) [HKLM] -- Creative Software AutoUpdate

O42 - Logiciel: Creative System Information - (.Pas de propriétaire.) [HKLM] -- SysInfo

O42 - Logiciel: DNA - (.BitTorrent Inc..) [HKCU] -- BitTorrent DNA

O42 - Logiciel: DesignPro 5 - (.Avery Dennison.) [HKLM] -- InstallShield_{F82C6574-AD88-4B40-A432-970BC77F1BD2}

O42 - Logiciel: Earth Alerts - (.South Wind Technologies.) [HKLM] -- {B12970A3-DBD3-4D2B-A7FB-952972311E17}

O42 - Logiciel: Empire of Sports - (.F4.) [HKLM] -- EoS-{5CCCD423-F673-4CD8-9464-9D950F49BBC3}

O42 - Logiciel: Enemy Territory - QUAKE Wars 1.2 Patch - (.Pas de propriétaire.) [HKLM] -- InstallShield_{2EC66D1C-4AF5-4811-BEDE-849D90461AF5}

O42 - Logiciel: Enemy Territory - QUAKE Wars Demo 1.1 Patch - (.Pas de propriétaire.) [HKLM] -- InstallShield_{B7B6C0BE-C919-425C-A493-DF9FF11249F5}

O42 - Logiciel: Enregistrement utilisateur de Canon MP640 series - (.Pas de propriétaire.) [HKLM] -- Enregistrement utilisateur de Canon MP640 series

O42 - Logiciel: EssentialPIM - (.Pas de propriétaire.) [HKLM] -- EssentialPIM

O42 - Logiciel: European Mappack Patch 1.1 - (.Pas de propriétaire.) [HKLM] -- European Mappack Patch 1.1

O42 - Logiciel: FUJIFILM USB Driver - (.Pas de propriétaire.) [HKLM] -- {5490882C-6961-11D5-BAE5-00E0188E010B}

O42 - Logiciel: Facebook widget - (.Opera Software.) [HKCU] -- Facebook widget

O42 - Logiciel: Far Cry - (.Nom de votre société.) [HKLM] -- InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}

O42 - Logiciel: FastStone Image Viewer 4.0 - (.FastStone Soft.) [HKLM] -- FastStone Image Viewer

O42 - Logiciel: FinePix Studio - (.Pas de propriétaire.) [HKLM] -- {E3B3AB03-8ABC-46CF-8CA9-DB5581E1F368}

O42 - Logiciel: FinePixViewer Resource - (.FUJIFILM Corporation.) [HKLM] -- {B44529FF-501E-47CD-A06D-223C161BE058}

O42 - Logiciel: FinePixViewer Ver.5.4 - (.FUJIFILM Corporation.) [HKLM] -- {24ED4D80-8294-11D5-96CD-0040266301AD}

O42 - Logiciel: Friday countdown - (.The 500 Widget Project.) [HKCU] -- Friday countdown

O42 - Logiciel: Future Pinball - (.Chris Leathley.) [HKLM] -- Future Pinball_is1

O42 - Logiciel: Futuremark SystemInfo - (.Futuremark Corporation.) [HKLM] -- {BEE64C14-BEF1-4610-8A68-A16EAA47B882}

O42 - Logiciel: GBoost - (.GZero.) [HKLM] -- {235B7B98-EAC3-4953-AE2C-EABCE1CD65C9}_is1

O42 - Logiciel: GIMP 2.6.8 - (.Pas de propriétaire.) [HKLM] -- WinGimp-2.0_is1

O42 - Logiciel: GPL MPEG-1/2 DirectShow Decoder Filter - (.Peter Wimmer.) [HKLM] -- {870815CA-6B60-47B6-88DD-A67F42D2F03E}

O42 - Logiciel: GTK+ 2.10.13 runtime environment - (.Tor Lillqvist.) [HKLM] -- WinGTK-2_is1

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}

O42 - Logiciel: GameFace Messenger - (.AceGain, Inc..) [HKLM] -- GameFace_Messenger

O42 - Logiciel: Glary Utilities 2.40.0.1326 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1

O42 - Logiciel: Golden Coin - (.grafio.) [HKCU] -- Golden Coin

O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop

O42 - Logiciel: Google Translator - (.Kyle Baker.) [HKCU] -- Google Translator

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}

O42 - Logiciel: Grisbi 0.5.9 - (.grisbi.org.) [HKLM] -- GRISBI

O42 - Logiciel: Holdem Manager - (.Pas de propriétaire.) [HKLM] -- HoldemManager

O42 - Logiciel: Horoscope & Thèmes Astral - (.Pas de propriétaire.) [HKLM] -- Horoscope & Thèmes Astral

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399

O42 - Logiciel: ICQ6.5 - (.ICQ.) [HKLM] -- {60DE4033-9503-48D1-A483-7846BD217CA9}

O42 - Logiciel: IP Camera - (.Pas de propriétaire.) [HKLM] -- IP Camera

O42 - Logiciel: Image Resizer Powertoy for Windows XP - (.Microsoft Corporation.) [HKLM] -- {1CB92574-96F2-467B-B793-5CEB35C40C29}

O42 - Logiciel: Indeo® Software - (.Pas de propriétaire.) [HKLM] -- Indeo® Software

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Installer Yahoo! Messenger - (.Pas de propriétaire.) [HKLM] -- Get Yahoo! Messenger

O42 - Logiciel: IomegaWare 4.0.2 - (.Pas de propriétaire.) [HKLM] -- IomegaWare

O42 - Logiciel: Java 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020}

O42 - Logiciel: Java 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: Java 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030}

O42 - Logiciel: Java 7 Update 2 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217002FF}

O42 - Logiciel: Java SE Runtime Environment 6 Update 1 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160010}

O42 - Logiciel: JavaFX 2.0.2 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-202328764D10}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: LE COMPAGNON CLUB - (.Pas de propriétaire.) [HKLM] -- TONLFR.MCCInstall

O42 - Logiciel: Lanceur Club Internet v6 - (.Pas de propriétaire.) [HKLM] -- {DDB20844-4874-11D6-B55D-0050DA3C7AAA}

O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {6AFDE3BE-BC01-45A4-9D06-BBF5AD207313}

O42 - Logiciel: LightScribe Template Labeler - (.LightScribe.) [HKLM] -- {7FD71A9E-C4D3-42ED-A998-CDA8290C39A3}

O42 - Logiciel: LinuxLive USB Creator - (.Thibaut Lauziere.) [HKLM] -- LinuxLive USB Creator

O42 - Logiciel: Lock Folder XP - (.Everstrike Software.) [HKLM] -- {57CDBAE6-0896-4E78-88F0-C673E4BB44FD}

O42 - Logiciel: LockHunter version 1.0 beta 3, 32 bit edition - (.Crystal Rich, Ltd.) [HKLM] -- LockHunter_is1

O42 - Logiciel: MPEG4 NVR - (.Pas de propriétaire.) [HKLM] -- {8602E368-679B-4EFA-AD91-56F851032F57}

O42 - Logiciel: MSN Polygamy 8.1 - (.Pas de propriétaire.) [HKLM] -- {952DEE45-7C0B-4CDF-80B3-D14BE6B02678}

O42 - Logiciel: MSN Reaper - (.KoroSoft.) [HKLM] -- MSNReaper

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}

O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {1B19A54C-3692-4D12-BFD9-1362DD34CE78}

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Manuel d'utilisation de Creative Live! Cam Video IM Pro (Français) - (.Pas de propriétaire.) [HKLM] -- Manuel d'utilisation de Creative Live! Cam Video IM Pro French

O42 - Logiciel: ManyCam 2.6.55 (remove only) - (.ManyCam LLC.) [HKLM] -- ManyCam

O42 - Logiciel: MapInfo Professional 8.0 Evaluation - (.MapInfo Corporation.) [HKLM] -- {309AFCC1-C343-40A0-B23A-568073036409}

O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {167A1F6A-9BF2-4B24-83DB-C6D659F680EA}

O42 - Logiciel: Media Go Video Playback Engine 1.84.109.07010 - (.Sony.) [HKLM] -- {34EF7358-ABC7-8469-5FB6-C5C0146F099E}

O42 - Logiciel: MegaStore Game Controller (Ver. 3.0) - (.Mega World Holdings Ltd..) [HKLM] -- InstallShield_{8A827E50-7DF0-4876-BB20-92549B117C99}

O42 - Logiciel: Messenger Plus! 5 - (.Yuna Software.) [HKLM] -- Messenger Plus!

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2656353) - (.Pas de propriétaire.) [HKLM] -- M2656353

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs

O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping

O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}

O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Minilyrics(remove only) - (.Pas de propriétaire.) [HKLM] -- MiniLyrics

O42 - Logiciel: Mises à jour NVIDIA 1.5.20 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update

O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0 Language Pack - FRA

O42 - Logiciel: Morgan Stream Switcher - (.Pas de propriétaire.) [HKLM] -- mmswitch

O42 - Logiciel: Moto Racer 3 - (.Pas de propriétaire.) [HKLM] -- {BA1FD8C5-0760-40F1-B3D8-DDDD8B55EEBB}

O42 - Logiciel: Mozilla Firefox 9.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 9.0.1 (x86 fr)

O42 - Logiciel: Mozilla Thunderbird (3.1.7) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.7)

O42 - Logiciel: MpcStar 2.1 - (.www.mpcstar.com.) [HKLM] -- MpcStar

O42 - Logiciel: MyCamera - (.Giovanni Di Mingo.) [HKCU] -- MyCamera

O42 - Logiciel: NVIDIA Logiciel système PhysX 9.11.0621 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}

O42 - Logiciel: NVIDIA Pilote graphique 285.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: NVIDIA nView 135.95 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView

O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager

O42 - Logiciel: Need For Speed™ World - (.Electronic Arts.) [HKLM] -- {7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1

O42 - Logiciel: Nero OEM - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey

O42 - Logiciel: Nero Suite - (.Pas de propriétaire.) [HKLM] -- NeroMultiInstaller!UninstallKey

O42 - Logiciel: Network Camera Recorder - (.Panasonic.) [HKLM] -- {8B0527BE-427B-459B-93B1-D30ED8CB4F93}

O42 - Logiciel: Neuratron PhotoScore Professional Demo - (.Neuratron Limited.) [HKLM] -- Neuratron PhotoScore Professional Demo

O42 - Logiciel: Noiseware Community Edition - (.Imagenomic.) [HKLM] -- {CB3B7C24-30A1-4961-8039-94919F5ED2EE}

O42 - Logiciel: Notebook Hardware Control 2.0 Pre-Release-06 Bugfix - (.Manfred Jaider.) [HKLM] -- Notebook Hardware Control

O42 - Logiciel: O-Knife - (.Brian Henk.) [HKCU] -- O-Knife

O42 - Logiciel: OLITEC PCI V92 V4 Modem - (.Pas de propriétaire.) [HKLM] -- Agere Systems Soft Modem

O42 - Logiciel: OMG:Opera Mouse Gestures - (.Albert Rosa.) [HKCU] -- OMG_Opera Mouse Gestures

O42 - Logiciel: OkMap - (.GianPaoloSaliola.) [HKLM] -- {36C2DF4B-B0EF-4C41-B6DC-B59CDEB4C3E6}

O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL

O42 - Logiciel: Opera 11.60 - (.Opera Software ASA.) [HKLM] -- Opera 11.60.1185

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: Outils Club Internet - (.Pas de propriétaire.) [HKLM] -- OutilsCI

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: PMU Poker - (.PMU.) [HKLM] -- PMUPoker

O42 - Logiciel: Panzer Elite Action - (.Nom de votre société.) [HKLM] -- {B75EF7C9-E289-4EEF-8676-B46349F210C2}

O42 - Logiciel: Panzer Elite Action - Dunes Of War - (.JoWooD.) [HKLM] -- {2F5C7A13-3B83-45A4-AAA8-ADE6497E1B42}

O42 - Logiciel: PeerGuardian 2.0 - (.Methlabs Productions.) [HKLM] -- PeerGuardian_is1

O42 - Logiciel: Penalty - (.mujtaba.) [HKCU] -- Penalty

O42 - Logiciel: PlayStation®Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}

O42 - Logiciel: PlayStation®Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}

O42 - Logiciel: PokerProba 0.2 - (.Xfou.com.) [HKLM] -- PokerProba

O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM] -- PokerStars.fr

O42 - Logiciel: PostgreSQL 8.3 - (.PostgreSQL Global Development Group.) [HKLM] -- {B823632F-3B72-4514-8861-B961CE263224}

O42 - Logiciel: Privoxy 3.0.6 - (.Pas de propriétaire.) [HKLM] -- Privoxy

O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime

O42 - Logiciel: REALTEK Wireless LAN Driver and Utility - (.REALTEK Semiconductor Corp..) [HKLM] -- {9C049499-055C-4a0c-A916-1D8CA1FF45EB}

O42 - Logiciel: RFG 2008 - (.Pas de propriétaire.) [HKLM] -- RFG 2008

O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}

O42 - Logiciel: Reason 3.0 - (.Propellerhead Software AB.) [HKLM] -- Reason_is1

O42 - Logiciel: Revo Uninstaller 1.93 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424

O42 - Logiciel: SecurityManager 99 - (.Pas de propriétaire.) [HKLM] -- SecurityManager 99

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Shutdown-IT - (.Pas de propriétaire.) [HKLM] -- Shutdown-IT

O42 - Logiciel: Sibelius Scorch (Firefox, Opera, Netscape only) - (.Sibelius Software.) [HKLM] -- {10ABE49D-343A-463E-9753-C4C5A05ECEF9}

O42 - Logiciel: SightSpeed (remove only) - (.SightSpeed Inc..) [HKLM] -- SightSpeed

O42 - Logiciel: SimAquarium - (.grafio.) [HKCU] -- SimAquarium

O42 - Logiciel: Skype™ 5.5 - (.Skype Technologies S.A..) [HKLM] -- {AA59DDE4-B672-4621-A016-4C248204957A}

O42 - Logiciel: Sony Ericsson File Manager - (.Sony Ericsson.) [HKLM] -- {60E5B847-2353-4AE3-829E-685937EDDC40}

O42 - Logiciel: Sony Ericsson PC Companion 2.02.002 - (.Sony Ericsson.) [HKLM] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}

O42 - Logiciel: Sony Ericsson PC Suite 6.009.00 - (.Sony Ericsson.) [HKLM] -- {2FFE93F0-BB72-4E52-8761-354D1AAA9387}

O42 - Logiciel: SopCast 2.0.4 - (.SopCast.com.) [HKLM] -- SopCast

O42 - Logiciel: SpeedFan (remove only) - (.Pas de propriétaire.) [HKLM] -- SpeedFan

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Spybot - Search & Destroy 1.5.2.20 - (.Safer Networking Ltd..) [HKLM] -- Spybot - Search & Destroy_is1

O42 - Logiciel: StuffPlug 3 - (.iAvatars.com.) [HKLM] -- StuffPlug3

O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) [HKLM] -- SystemRequirementsLab

O42 - Logiciel: System Requirements Lab CYRI - (.Husdawg, LLC.) [HKLM] -- {1F77C418-2C90-459C-BD33-B56A4182B9FA}

O42 - Logiciel: TRENDnet TEW-648UB Wireless N USB Adapter - (.TRENDnet.) [HKLM] -- {74A8117D-07C6-4222-AFFD-51421B69DEF0}

O42 - Logiciel: TVAnts 1.0 - (.Pas de propriétaire.) [HKLM] -- TVAnts 1.0

O42 - Logiciel: TVUPlayer 2.4.7.2 - (.TVU networks.) [HKLM] -- TVUPlayer

O42 - Logiciel: TeLL me More - (.Pas de propriétaire.) [HKLM] -- TeLLmeMoreV40

O42 - Logiciel: TmNationsForever Update 2010-03-15 - (.Nadeo.) [HKLM] -- TmNationsForever_is1

O42 - Logiciel: Tor 0.2.0.34 - (.Pas de propriétaire.) [HKLM] -- Tor

O42 - Logiciel: TrackMania Nations ESWC 1.7.9 - (.Nadeo.) [HKLM] -- TmNations_is1

O42 - Logiciel: True Combat: Elite 0.49 - (.GrooveSix, TeamTerminator.) [HKLM] -- True Combat: Elite

O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM] -- {888F1505-C2B3-4FDE-835D-36353EBD4754}

O42 - Logiciel: UltraCover - (.Pas de propriétaire.) [HKCU] -- UltraCover

O42 - Logiciel: UltraMon - (.Realtime Soft Ltd.) [HKLM] -- {B49673F8-7AB6-4A14-8213-C8A7BE370010}

O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: Vidalia 0.1.10 - (.Pas de propriétaire.) [HKLM] -- Vidalia

O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}

O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01

O42 - Logiciel: Visual Install Pack - (.Phoenixx1771.) [HKLM] -- {4477B93C-01D3-48E7-AC38-8AD313F2A3C1}

O42 - Logiciel: Vodei Multimedia Processor 2.10 - (.S.V.R. Consulting Ltd..) [HKLM] -- Vodei Multimedia Processor

O42 - Logiciel: Wasserkuppe Germany - (.linuxhelp.) [HKCU] -- Wasserkuppe Germany

O42 - Logiciel: WebCam 5.00 - (.TrueTech Canada Inc.) [HKLM] -- WebCam_is1

O42 - Logiciel: Weezo - (.Peer 2 World.) [HKLM] -- Weezo_is1

O42 - Logiciel: Weezo DLL Pack - (.Pas de propriétaire.) [HKLM] -- ST6UNST #1

O42 - Logiciel: What Watch 3.6 - (.Robert Amlung.) [HKLM] -- What Watch_is1

O42 - Logiciel: WinPcap 3.1 - (.CACE Technologies.) [HKLM] -- WinPcapInst

O42 - Logiciel: WinStars 2.0 - (.Franck RICHARD.) [HKLM] -- WinStars 2.0_is1

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}

O42 - Logiciel: Windows Media Encoder 9 Series - (.Microsoft Corporation.) [HKLM] -- {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}

O42 - Logiciel: Windows Media Encoder 9 Series - (.Pas de propriétaire.) [HKLM] -- Windows Media Encoder 9

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: Wise Disk Cleaner 6.22 - (.WiseCleaner.com, Inc..) [HKLM] -- Wise Disk Cleaner_is1

O42 - Logiciel: Wise Registry Cleaner 6.21 - (.WiseCleaner.com, Inc..) [HKLM] -- Wise Registry Cleaner_is1

O42 - Logiciel: Wolfenstein - Enemy Territory - (.Pas de propriétaire.) [HKLM] -- Wolfenstein - Enemy Territory

O42 - Logiciel: XviD 1.1 final uninstall - (.XviD team (Koepi).) [HKLM] -- XviD_is1

O42 - Logiciel: XviD MPEG4 Video Codec (remove only) - (.Pas de propriétaire.) [HKLM] -- XviD MPEG4 Video Codec

O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM] -- Yahoo! Messenger

O42 - Logiciel: Yahoo! Software Update - (.Pas de propriétaire.) [HKLM] -- Yahoo! Software Update

O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast

O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

O42 - Logiciel: jv16 PowerTools 1.3 - (.Pas de propriétaire.) [HKLM] -- jv16 PowerTools_is1

O42 - Logiciel: multiWeather - (.Isidoro Russo.) [HKCU] -- multiWeather

O42 - Logiciel: muvee autoProducer 4.1 - (.muvee Technologies.) [HKLM] -- {76B78008-3832-42FD-AE55-C8F946ED3C7E}

O42 - Logiciel: nullDC 1.0.0 Public Beta 1 Setup - (.nullDC.) [HKLM] -- {C3FDA1E4-1E17-48D8-B4F0-C141E9FFB4BA}

O42 - Logiciel: scrabbleproB 1.1.2 - (.scrabblepro.) [HKLM] -- scrabbleproB_is1

O42 - Logiciel: winpcap-nmap 4.02 - (.Pas de propriétaire.) [HKLM] -- winpcap-nmap

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\99fd74b2]

[HKCU\Software\AC3Filter]

[HKCU\Software\ALWIL Software]

[HKCU\Software\ASProtect]

[HKCU\Software\ASUS]

[HKCU\Software\AVAST Software]

[HKCU\Software\AVS4YOU]

[HKCU\Software\Adobe]

[HKCU\Software\Ahead]

[HKCU\Software\AncestrArbres]

[HKCU\Software\AppDataLow\AskToolbarInfo]

[HKCU\Software\AppDataLow\F-Secure]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\{12DC4491-92E0-3A61-8205-B0C670EB295A}]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Applications WinDev]

[HKCU\Software\ArcSoft]

[HKCU\Software\Ask.com]

[HKCU\Software\Auralog]

[HKCU\Software\Autodesk, Inc.]

[HKCU\Software\Autodesk]

[HKCU\Software\Avery Dennison]

[HKCU\Software\Binary Noise]

[HKCU\Software\BitComet eMule plugin]

[HKCU\Software\BitComet]

[HKCU\Software\BitTorrent]

[HKCU\Software\CDDB]

[HKCU\Software\CToolbar]

[HKCU\Software\CanonBJ]

[HKCU\Software\Canon]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Club-Internet v5]

[HKCU\Software\CoreAAC]

[HKCU\Software\CoverSearch]

[HKCU\Software\Creative Tech]

[HKCU\Software\DameWare Development]

[HKCU\Software\Depicus]

[HKCU\Software\Digital River]

[HKCU\Software\DivXNetworks]

[HKCU\Software\DownloadManager]

[HKCU\Software\EasyBits]

[HKCU\Software\Eset]

[HKCU\Software\EyePower Games]

[HKCU\Software\F4]

[HKCU\Software\FC]

[HKCU\Software\FUJIFILM]

[HKCU\Software\FastReport]

[HKCU\Software\FlashFXP]

[HKCU\Software\Freeware]

[HKCU\Software\Future Pinball]

[HKCU\Software\Futuremark]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\GameSpy]

[HKCU\Software\Gameface]

[HKCU\Software\GlarySoft]

[HKCU\Software\Google]

[HKCU\Software\HoldemIndicator]

[HKCU\Software\HoldemManager]

[HKCU\Software\HookNetwork]

[HKCU\Software\IE]

[HKCU\Software\IGA]

[HKCU\Software\IM Providers]

[HKCU\Software\INCAInternet]

[HKCU\Software\Imagenomic]

[HKCU\Software\Intel]

[HKCU\Software\Iomega Corp]

[HKCU\Software\JEDI-VCL]

[HKCU\Software\JavaSoft]

[HKCU\Software\JoWooD]

[HKCU\Software\KasperskyLab]

[HKCU\Software\KoroSoft]

[HKCU\Software\LAVResearch]

[HKCU\Software\Lavalys]

[HKCU\Software\Lavasoft]

[HKCU\Software\Licenses]

[HKCU\Software\LightScribe]

[HKCU\Software\Ligos]

[HKCU\Software\LinuxLive]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\LockHunter]

[HKCU\Software\MGS]

[HKCU\Software\Macromedia]

[HKCU\Software\MadOnion.com]

[HKCU\Software\Malfador Machinations]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\ManyCam]

[HKCU\Software\MapInfo]

[HKCU\Software\MediaNavigation]

[HKCU\Software\Minilyrics]

[HKCU\Software\Mirabilis]

[HKCU\Software\Motive]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Nadeo]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\OfferBox]

[HKCU\Software\Opera Software]

[HKCU\Software\PC SOFT]

[HKCU\Software\PDFCreator]

[HKCU\Software\PMU]

[HKCU\Software\Panasonic]

[HKCU\Software\PartyGaming]

[HKCU\Software\PepiMK Software]

[HKCU\Software\Pinnacle Systems]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Privoxy]

[HKCU\Software\Propellerhead Software]

[HKCU\Software\Raxco]

[HKCU\Software\RealNetworks]

[HKCU\Software\Realtime Soft]

[HKCU\Software\Robert Misiak]

[HKCU\Software\SOFTWIN]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\SecuROM]

[HKCU\Software\Secway]

[HKCU\Software\SightSpeed Inc]

[HKCU\Software\Skyline]

[HKCU\Software\Skype]

[HKCU\Software\SoftLogica]

[HKCU\Software\Softonic]

[HKCU\Software\Sony Corporation]

[HKCU\Software\Sony Ericsson]

[HKCU\Software\South Wind Technologies]

[HKCU\Software\Space Sciences Laboratory, U.C. Berkeley]

[HKCU\Software\SpeedFan]

[HKCU\Software\Spointer]

[HKCU\Software\Sysinternals]

[HKCU\Software\System Requirements Lab]

[HKCU\Software\TBSB07458]

[HKCU\Software\TCP Optimizer]

[HKCU\Software\TVANTS]

[HKCU\Software\TVU networks]

[HKCU\Software\Tiny Software]

[HKCU\Software\Trolltech]

[HKCU\Software\Unity]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VOB]

[HKCU\Software\VSRevoGroup]

[HKCU\Software\Visual Pinball]

[HKCU\Software\Vodafone]

[HKCU\Software\WNR]

[HKCU\Software\WinRAR]

[HKCU\Software\WinStars2]

[HKCU\Software\Wise Solutions]

[HKCU\Software\Xenocode]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yahoo]

[HKCU\Software\Yuna Software]

[HKCU\Software\cybelsoft]

[HKCU\Software\eMule]

[HKCU\Software\etoro]

[HKCU\Software\muvee Technologies]

[HKCU\Software\techPowerUp]

[HKLM\Software\ACE Compression Software]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\ALWIL Software]

[HKLM\Software\AMD]

[HKLM\Software\ANPSEDIC]

[HKLM\Software\ASIO]

[HKLM\Software\ASUS]

[HKLM\Software\AVAST Software]

[HKLM\Software\AVG]

[HKLM\Software\AVS4YOU]

[HKLM\Software\AceGain]

[HKLM\Software\Activision]

[HKLM\Software\Adaptec]

[HKLM\Software\Adobe]

[HKLM\Software\Agere]

[HKLM\Software\Ahead]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Autodesk]

[HKLM\Software\Avance]

[HKLM\Software\Avery Dennison]

[HKLM\Software\AviSynth]

[HKLM\Software\Avnex]

[HKLM\Software\BVRP Software]

[HKLM\Software\BroadJump]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CToolbar]

[HKLM\Software\Canon]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Club-Internet V5]

[HKLM\Software\Creative Tech]

[HKLM\Software\Crytek]

[HKLM\Software\Debug]

[HKLM\Software\DelphineSoft]

[HKLM\Software\DivXNetworks]

[HKLM\Software\DivX]

[HKLM\Software\Electronic Arts]

[HKLM\Software\Ericsson]

[HKLM\Software\Even Balance]

[HKLM\Software\F4]

[HKLM\Software\FUJIFILM]

[HKLM\Software\FlashFXP]

[HKLM\Software\FullCircle]

[HKLM\Software\Futuremark]

[HKLM\Software\GNU]

[HKLM\Software\GTK]

[HKLM\Software\GZero]

[HKLM\Software\Gabest]

[HKLM\Software\Gemplus]

[HKLM\Software\GlarySoft]

[HKLM\Software\Google]

[HKLM\Software\Grisoft]

[HKLM\Software\HighCriteria]

[HKLM\Software\Hilchner]

[HKLM\Software\HoldemIndicator]

[HKLM\Software\IGG]

[HKLM\Software\IVT Corporation]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\InterVideo]

[HKLM\Software\Invictus-Games]

[HKLM\Software\Iomega Corp]

[HKLM\Software\JavaSoft]

[HKLM\Software\JoWooD]

[HKLM\Software\JreMetrics]

[HKLM\Software\KONAMIPES6]

[HKLM\Software\Khronos]

[HKLM\Software\L&H]

[HKLM\Software\Lavasoft]

[HKLM\Software\Licenses]

[HKLM\Software\LightScribeTemplateLabeler]

[HKLM\Software\LightScribe]

[HKLM\Software\Look@LAN]

[HKLM\Software\MAXSOFT-OCRON]

[HKLM\Software\MDC]

[HKLM\Software\Macromedia]

[HKLM\Software\MadOnion.com]

[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Mapinfo]

[HKLM\Software\McAfee.com]

[HKLM\Software\MimarSinan]

[HKLM\Software\Mirabilis]

[HKLM\Software\Morgan]

[HKLM\Software\Motive]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\Neodivx2006]

[HKLM\Software\Nero]

[HKLM\Software\Netscape]

[HKLM\Software\Neuratron]

[HKLM\Software\Notepad]

[HKLM\Software\ODBC]

[HKLM\Software\Opera Software]

[HKLM\Software\Oracle]

[HKLM\Software\PTECH]

[HKLM\Software\Panda Software]

[HKLM\Software\Phonemonitor]

[HKLM\Software\Piriform]

[HKLM\Software\PocketSoft]

[HKLM\Software\Policies]

[HKLM\Software\PostgreSQL]

[HKLM\Software\Program Groups]

[HKLM\Software\Propellerhead Software]

[HKLM\Software\QQcam]

[HKLM\Software\QTAlternative]

[HKLM\Software\RVG Software]

[HKLM\Software\Realtek]

[HKLM\Software\Realtime Soft]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\Robert Misiak]

[HKLM\Software\RtWLan]

[HKLM\Software\S3R521]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Schlumberger]

[HKLM\Software\Seagate Software]

[HKLM\Software\Secunia]

[HKLM\Software\Set8188SU]

[HKLM\Software\Set8191SU]

[HKLM\Software\Set8192GU]

[HKLM\Software\Set8192SU]

[HKLM\Software\Set8712]

[HKLM\Software\SightSpeed Inc]

[HKLM\Software\Skyline]

[HKLM\Software\Skype]

[HKLM\Software\SoftNyx]

[HKLM\Software\Sony Corporation]

[HKLM\Software\Sony Ericsson]

[HKLM\Software\Sony]

[HKLM\Software\Space Sciences Laboratory, U.C. Berkeley]

[HKLM\Software\Steinberg]

[HKLM\Software\Sunbelt Software]

[HKLM\Software\TROT-PEDIGREE]

[HKLM\Software\TVU networks]

[HKLM\Software\TeamTerminator]

[HKLM\Software\The Silicon Realms Toolworks]

[HKLM\Software\Thraex Software]

[HKLM\Software\Torquemada Games]

[HKLM\Software\Ubisoft]

[HKLM\Software\Uniblue]

[HKLM\Software\VideoLAN]

[HKLM\Software\VirtualDubMOD 1.5.10.2 b2540 Fr]

[HKLM\Software\Visicom Media]

[HKLM\Software\VodeiMPAVI]

[HKLM\Software\WexTech Systems]

[HKLM\Software\WinPcap]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Wise Solutions]

[HKLM\Software\WiseCleaner]

[HKLM\Software\XHEO INC]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\Yahoo]

[HKLM\Software\Yuna Software]

[HKLM\Software\cameo]

[HKLM\Software\cybelsoft]

[HKLM\Software\iAvatars.com]

[HKLM\Software\illiminable]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

[HKLM\Software\pgAdmin III]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 13/01/2012 - 19:28:02 - [0] ----D- C:\Program Files\50250

O43 - CFD: 05/01/2012 - 20:45:46 - [3,393] ----D- C:\Program Files\7-Zip

O43 - CFD: 29/04/2008 - 19:51:14 - [1,310] ----D- C:\Program Files\AC3Filter

O43 - CFD: 20/10/2011 - 23:34:44 - [-1814,216] ----D- C:\Program Files\Activision

O43 - CFD: 21/10/2010 - 00:39:30 - [0] ----D- C:\Program Files\Activision Value

O43 - CFD: 15/11/2008 - 20:16:28 - [2,080] ----D- C:\Program Files\Actual Moon 3D

O43 - CFD: 09/10/2011 - 13:18:12 - [1688,815] ----D- C:\Program Files\Adobe

O43 - CFD: 28/12/2006 - 14:58:40 - [190,233] ----D- C:\Program Files\Ahead

O43 - CFD: 31/07/2010 - 23:56:08 - [174,704] ----D- C:\Program Files\Alwil Software

O43 - CFD: 26/12/2006 - 17:25:18 - [0,119] ----D- C:\Program Files\AMD

O43 - CFD: 11/01/2012 - 17:43:14 - [48,118] ----D- C:\Program Files\Ancestrologie

O43 - CFD: 18/01/2010 - 18:37:18 - [3,274] ----D- C:\Program Files\ANPSEDIC

O43 - CFD: 14/03/2009 - 23:07:42 - [4,173] ----D- C:\Program Files\AnswerWorks 4.0

O43 - CFD: 14/03/2009 - 23:08:34 - [221,885] ----D- C:\Program Files\AutoCAD 2005

O43 - CFD: 16/04/2008 - 21:07:20 - [178,451] ----D- C:\Program Files\Autodesk

O43 - CFD: 23/12/2011 - 16:17:06 - [2,745] ----D- C:\Program Files\Avanquest update

O43 - CFD: 02/04/2010 - 02:18:04 - [12,527] ----D- C:\Program Files\Avery Dennison

O43 - CFD: 18/10/2011 - 13:42:10 - [0,138] ----D- C:\Program Files\AviSynth 2.5

O43 - CFD: 28/12/2006 - 12:15:48 - [5,226] ----D- C:\Program Files\AvRack

O43 - CFD: 15/10/2011 - 14:58:36 - [14,746] ----D- C:\Program Files\AVS4YOU

O43 - CFD: 30/12/2011 - 15:08:18 - [0,382] ----D- C:\Program Files\BestHandMonitor

O43 - CFD: 08/01/2012 - 22:13:56 - [40,022] ----D- C:\Program Files\BitComet

O43 - CFD: 17/03/2011 - 18:26:30 - [122,847] ----D- C:\Program Files\BitDefender

O43 - CFD: 09/09/2011 - 12:44:22 - [20,069] ----D- C:\Program Files\BOINC

O43 - CFD: 22/07/2010 - 18:10:40 - [4,694] ----D- C:\Program Files\BroadJump

O43 - CFD: 29/03/2010 - 19:29:58 - [342,067] ----D- C:\Program Files\Canon

O43 - CFD: 29/03/2010 - 19:04:20 - [15,233] --H-D- C:\Program Files\CanonBJ

O43 - CFD: 12/12/2011 - 19:08:16 - [4,885] ----D- C:\Program Files\CCleaner

O43 - CFD: 22/12/2011 - 20:32:10 - [6,027] ----D- C:\Program Files\chrome

O43 - CFD: 16/07/2011 - 00:04:16 - [1,336] ----D- C:\Program Files\ChronosXP

O43 - CFD: 27/12/2010 - 22:23:52 - [0,905] ----D- C:\Program Files\CHRYOPROD

O43 - CFD: 22/07/2010 - 18:29:28 - [32,112] ----D- C:\Program Files\Club-Internet

O43 - CFD: 22/07/2010 - 18:19:42 - [26,813] ----D- C:\Program Files\Common Files

O43 - CFD: 17/03/2011 - 15:15:42 - [0,000] ----D- C:\Program Files\COMODO

O43 - CFD: 22/12/2011 - 20:32:14 - [9,469] ----D- C:\Program Files\components

O43 - CFD: 23/07/2007 - 21:51:14 - [281,198] ----D- C:\Program Files\Creative

O43 - CFD: 20/10/2010 - 19:52:42 - [0,779] ----D- C:\Program Files\DAEMON Tools

O43 - CFD: 22/12/2011 - 20:32:14 - [0,059] ----D- C:\Program Files\defaults

O43 - CFD: 19/05/2007 - 13:09:44 - [532,337] ----D- C:\Program Files\DelphineSoft

O43 - CFD: 19/05/2007 - 15:36:50 - [0] ----D- C:\Program Files\directx

O43 - CFD: 15/10/2011 - 21:21:20 - [1,617] ----D- C:\Program Files\DivX

O43 - CFD: 12/01/2012 - 18:16:56 - [0,390] ----D- C:\Program Files\DNA

O43 - CFD: 26/11/2011 - 15:06:46 - [0,541] ----D- C:\Program Files\Download Manager

O43 - CFD: 23/09/2011 - 20:56:10 - [17,388] ----D- C:\Program Files\Earth Alerts

O43 - CFD: 03/05/2011 - 15:53:26 - [0,430] ----D- C:\Program Files\Earth Resource Mapping

O43 - CFD: 14/11/2010 - 22:40:40 - [0,150] ----D- C:\Program Files\eEye Digital Security

O43 - CFD: 23/07/2011 - 19:41:38 - [18,575] ----D- C:\Program Files\Electronic Arts

O43 - CFD: 14/04/2011 - 18:38:20 - [1700,236] ----D- C:\Program Files\Empire of Sports

O43 - CFD: 09/05/2010 - 13:29:40 - [-355,321] ----D- C:\Program Files\eMule

O43 - CFD: 05/12/2011 - 12:15:08 - [14,394] ----D- C:\Program Files\ESET

O43 - CFD: 18/01/2010 - 00:04:16 - [6,014] ----D- C:\Program Files\EssentialPIM

O43 - CFD: 10/02/2011 - 17:53:42 - [8,144] ----D- C:\Program Files\FastStone Image Viewer

O43 - CFD: 05/01/2012 - 20:40:56 - [1356,081] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 26/11/2011 - 14:13:56 - [166,899] ----D- C:\Program Files\FinePixViewer

O43 - CFD: 03/01/2012 - 19:45:58 - [0] ----D- C:\Program Files\Futuremark

O43 - CFD: 20/01/2010 - 22:42:56 - [29,311] ----D- C:\Program Files\GameFace Messenger

O43 - CFD: 27/07/2011 - 17:57:42 - [1127,261] ----D- C:\Program Files\GAMIGO

O43 - CFD: 30/12/2011 - 13:39:36 - [1,639] ----D- C:\Program Files\GBoost

O43 - CFD: 11/10/2011 - 18:03:14 - [0] ----D- C:\Program Files\Ghostgum

O43 - CFD: 26/01/2010 - 00:41:48 - [95,431] ----D- C:\Program Files\GIMP-2.0

O43 - CFD: 12/12/2011 - 19:15:30 - [25,515] ----D- C:\Program Files\Glary Utilities

O43 - CFD: 20/11/2011 - 17:33:56 - [120,682] ----D- C:\Program Files\Google

O43 - CFD: 29/04/2008 - 19:51:08 - [0,264] ----D- C:\Program Files\GPL MPEG Decoder

O43 - CFD: 22/12/2011 - 20:32:14 - [0,082] ----D- C:\Program Files\greprefs

O43 - CFD: 14/01/2007 - 14:16:12 - [21,988] ----D- C:\Program Files\Grisbi

O43 - CFD: 13/01/2012 - 20:14:26 - [2,292] ----D- C:\Program Files\GRISOFT

O43 - CFD: 03/11/2010 - 02:47:58 - [10,341] ----D- C:\Program Files\i2p

O43 - CFD: 30/07/2009 - 18:49:38 - [16,046] ----D- C:\Program Files\ICQ6

O43 - CFD: 01/08/2009 - 09:21:26 - [36,776] ----D- C:\Program Files\ICQ6.5

O43 - CFD: 18/01/2010 - 14:23:00 - [1,607] ----D- C:\Program Files\Imagenomic

O43 - CFD: 16/09/2010 - 14:41:26 - [0,002] ----D- C:\Program Files\images

O43 - CFD: 03/01/2012 - 19:42:56 - [245,258] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 15/12/2011 - 15:03:00 - [5,191] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 01/02/2011 - 00:13:04 - [9,898] ----D- C:\Program Files\Iomega

O43 - CFD: 24/12/2011 - 12:30:18 - [6,256] ----D- C:\Program Files\IVT Corporation

O43 - CFD: 30/12/2011 - 20:59:18 - [375,829] ----D- C:\Program Files\Java

O43 - CFD: 03/07/2007 - 21:24:04 - [1615,326] ----D- C:\Program Files\JoWooD

O43 - CFD: 30/09/2009 - 21:48:00 - [23,739] ----D- C:\Program Files\JoyToKey

O43 - CFD: 12/01/2012 - 16:22:32 - [2,829] ----D- C:\Program Files\jv16 PowerTools

O43 - CFD: 14/12/2011 - 23:49:22 - [0] ----D- C:\Program Files\KONAMI

O43 - CFD: 02/11/2010 - 12:04:04 - [0,393] ----D- C:\Program Files\Language

O43 - CFD: 17/03/2011 - 18:04:12 - [94,684] ----D- C:\Program Files\Lavasoft

O43 - CFD: 18/03/2010 - 19:10:20 - [20,107] ----D- C:\Program Files\LightScribe Template Labeler

O43 - CFD: 19/05/2007 - 13:16:18 - [2,592] ----D- C:\Program Files\Ligos

O43 - CFD: 26/01/2011 - 12:20:42 - [5,768] ----D- C:\Program Files\LinuxLive USB Creator

O43 - CFD: 05/01/2012 - 20:41:04 - [3,729] ----D- C:\Program Files\Lock Folder XP

O43 - CFD: 05/08/2011 - 19:01:20 - [2,759] ----D- C:\Program Files\LockHunter

O43 - CFD: 13/01/2012 - 19:27:40 - [0,098] ----D- C:\Program Files\LP

O43 - CFD: 30/12/2011 - 19:18:40 - [6,206] ----D- C:\Program Files\ma-config.com

O43 - CFD: 13/01/2012 - 20:16:22 - [4,694] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 09/10/2011 - 19:42:12 - [12,814] ----D- C:\Program Files\ManyCam

O43 - CFD: 25/07/2010 - 16:31:28 - [125,049] ----D- C:\Program Files\MapInfo

O43 - CFD: 05/01/2012 - 00:11:26 - [1,982] ----D- C:\Program Files\MB Free Complete Numerology Software

O43 - CFD: 30/07/2007 - 18:56:52 - [4,125] ----D- C:\Program Files\Media Player Classic

O43 - CFD: 24/09/2007 - 20:53:56 - [3,008] ----D- C:\Program Files\MegaWorld

O43 - CFD: 12/02/2009 - 22:03:42 - [2,053] ----D- C:\Program Files\Messenger

O43 - CFD: 01/11/2010 - 19:50:40 - [12,546] ----D- C:\Program Files\Messenger Plus! Live

O43 - CFD: 18/09/2011 - 21:57:04 - [0,783] ----D- C:\Program Files\Microsoft

O43 - CFD: 26/12/2006 - 17:10:16 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 03/10/2007 - 21:33:12 - [-2016,805] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 24/09/2007 - 18:27:02 - [215,298] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 14/10/2011 - 12:15:26 - [36,633] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 16/09/2009 - 00:53:14 - [1,745] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 16/09/2009 - 00:54:16 - [2,087] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 25/01/2007 - 21:55:30 - [0,014] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 15/10/2009 - 20:30:20 - [143,405] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 14/12/2011 - 12:14:18 - [244,977] ----D- C:\Program Files\Mindscape

O43 - CFD: 28/08/2007 - 19:53:42 - [8,793] ----D- C:\Program Files\Minilyrics

O43 - CFD: 18/01/2010 - 17:47:40 - [1,944] ----D- C:\Program Files\MonProduit

O43 - CFD: 29/04/2008 - 21:54:06 - [0,092] ----D- C:\Program Files\Morgan

O43 - CFD: 22/07/2010 - 18:47:32 - [1,254] ----D- C:\Program Files\Motive

O43 - CFD: 06/09/2010 - 23:56:38 - [9,894] ----D- C:\Program Files\Movie Maker

O43 - CFD: 30/12/2011 - 21:34:08 - [277,009] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 30/09/2011 - 23:20:10 - [34,758] ----D- C:\Program Files\Mozilla Thunderbird

O43 - CFD: 13/01/2010 - 19:46:08 - [21,551] ----D- C:\Program Files\MpcStar

O43 - CFD: 20/10/2010 - 16:50:44 - [2,761] ----D- C:\Program Files\MPEG4 NVR

O43 - CFD: 30/08/2009 - 22:08:38 - [0,025] ----D- C:\Program Files\MSBuild

O43 - CFD: 30/01/2011 - 22:37:16 - [18,385] ----D- C:\Program Files\MSN

O43 - CFD: 15/12/2007 - 12:22:26 - [0,637] ----D- C:\Program Files\MSN Content Plus Inc

O43 - CFD: 26/12/2006 - 17:06:54 - [8,341] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 16/09/2009 - 00:52:16 - [5,411] ----D- C:\Program Files\MSN Messenger

O43 - CFD: 16/05/2009 - 16:35:58 - [0,164] ----D- C:\Program Files\MSN Reaper

O43 - CFD: 23/07/2007 - 21:16:48 - [17,303] ----D- C:\Program Files\muvee Technologies

O43 - CFD: 01/06/2008 - 00:01:40 - [0] ----D- C:\Program Files\My Company Name

O43 - CFD: 30/04/2008 - 17:49:08 - [5,436] ----D- C:\Program Files\neodivx2006

O43 - CFD: 12/02/2009 - 21:49:24 - [3,133] ----D- C:\Program Files\NetMeeting

O43 - CFD: 20/04/2008 - 18:39:34 - [10,376] ----D- C:\Program Files\Neuratron PhotoScore Demo

O43 - CFD: 23/09/2011 - 20:28:02 - [4,820] ----D- C:\Program Files\Notebook Hardware Control

O43 - CFD: 18/09/2007 - 19:39:32 - [7,358] ----D- C:\Program Files\nullDC

O43 - CFD: 30/12/2011 - 21:12:52 - [567,510] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 02/07/2011 - 00:11:36 - [3,139] ----D- C:\Program Files\OfferBox

O43 - CFD: 03/05/2011 - 15:53:26 - [73,684] ----D- C:\Program Files\OkMap

O43 - CFD: 26/12/2006 - 17:07:02 - [0,002] ----D- C:\Program Files\Online Services

O43 - CFD: 21/10/2010 - 23:19:46 - [0,746] ----D- C:\Program Files\OpenAL

O43 - CFD: 14/12/2011 - 00:31:54 - [56,601] ----D- C:\Program Files\Opera

O43 - CFD: 02/01/2012 - 21:41:26 - [29,288] ----D- C:\Program Files\Oracle

O43 - CFD: 27/12/2010 - 22:31:36 - [4,176] ----D- C:\Program Files\Outlook Express

O43 - CFD: 20/10/2010 - 17:08:04 - [17,360] ----D- C:\Program Files\Panasonic

O43 - CFD: 30/09/2007 - 20:52:32 - [-638,650] ----D- C:\Program Files\Panzer Elite Action

O43 - CFD: 20/04/2008 - 18:53:16 - [32,307] ----D- C:\Program Files\PDFCreator

O43 - CFD: 05/01/2012 - 00:04:46 - [-857,433] ----D- C:\Program Files\PeerGuardian2

O43 - CFD: 25/11/2009 - 18:19:08 - [1,984] ----D- C:\Program Files\Pinball

O43 - CFD: 14/07/2007 - 20:46:00 - [2,386] ----D- C:\Program Files\Pinnacle

O43 - CFD: 16/09/2010 - 14:41:28 - [3,654] ----D- C:\Program Files\plugins

O43 - CFD: 11/01/2012 - 22:19:58 - [33,546] ----D- C:\Program Files\PMUPoker

O43 - CFD: 08/01/2012 - 15:15:30 - [0] ----D- C:\Program Files\Poker Pro Labs

O43 - CFD: 16/12/2011 - 18:11:56 - [20,745] ----D- C:\Program Files\PokerProba

O43 - CFD: 13/01/2012 - 20:08:32 - [98,710] ----D- C:\Program Files\PokerStars.FR

O43 - CFD: 07/10/2010 - 19:10:20 - [-1717,668] ----D- C:\Program Files\PostgreSQL

O43 - CFD: 03/07/2007 - 19:20:44 - [1393,402] ----D- C:\Program Files\Propellerhead

O43 - CFD: 04/01/2012 - 19:00:00 - [0,518] ----D- C:\Program Files\PTS Software

O43 - CFD: 14/12/2011 - 13:43:26 - [9,277] ----D- C:\Program Files\QuickTime

O43 - CFD: 16/01/2010 - 19:59:30 - [107,724] ----D- C:\Program Files\Raxco

O43 - CFD: 13/01/2007 - 21:28:34 - [65,732] ----D- C:\Program Files\Real

O43 - CFD: 30/12/2011 - 20:26:56 - [9,577] ----D- C:\Program Files\REALTEK

O43 - CFD: 28/12/2006 - 12:15:46 - [37,960] ----D- C:\Program Files\Realtek AC97

O43 - CFD: 30/08/2009 - 22:08:28 - [34,715] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 24/04/2007 - 19:41:50 - [1,449] ----D- C:\Program Files\RegCleaner

O43 - CFD: 07/01/2010 - 14:15:32 - [0,051] ----D- C:\Program Files\REGSHAVE

O43 - CFD: 22/12/2011 - 20:32:24 - [0,355] ----D- C:\Program Files\res

O43 - CFD: 06/01/2008 - 00:50:40 - [8,957] ----D- C:\Program Files\RFG2008

O43 - CFD: 07/10/2010 - 20:19:16 - [108,271] ----D- C:\Program Files\RVG Software

O43 - CFD: 08/04/2010 - 19:31:54 - [6,785] ----D- C:\Program Files\scrabbleproB

O43 - CFD: 23/07/2010 - 21:19:08 - [3,026] ----D- C:\Program Files\scrabbleproB1.1

O43 - CFD: 25/07/2010 - 16:31:40 - [1,803] ----D- C:\Program Files\Seagate Software

O43 - CFD: 26/12/2006 - 17:08:50 - [0,001] ----D- C:\Program Files\Services en ligne

O43 - CFD: 01/07/2011 - 23:53:44 - [18,459] ----D- C:\Program Files\Sibelius Software

O43 - CFD: 23/07/2007 - 21:13:58 - [19,956] ----D- C:\Program Files\SightSpeed

O43 - CFD: 21/09/2007 - 21:50:42 - [24,597] ----D- C:\Program Files\Skyline

O43 - CFD: 27/08/2011 - 21:38:24 - [34,825] R---D- C:\Program Files\Skype

O43 - CFD: 31/12/2011 - 14:07:30 - [0,643] ----D- C:\Program Files\SmartUpgrader

O43 - CFD: 23/12/2011 - 16:40:06 - [105,326] ----D- C:\Program Files\Sony

O43 - CFD: 24/12/2011 - 14:20:34 - [121,854] ----D- C:\Program Files\Sony Ericsson

O43 - CFD: 24/12/2011 - 14:18:40 - [8,104] ----D- C:\Program Files\Sony Ericsson PC Suite 6.009.00

O43 - CFD: 23/12/2011 - 16:30:24 - [0,061] ----D- C:\Program Files\Sony Media Go Install

O43 - CFD: 31/08/2008 - 21:18:24 - [36,125] ----D- C:\Program Files\SopCast

O43 - CFD: 16/01/2012 - 00:11:56 - [5,593] ----D- C:\Program Files\SpeedFan

O43 - CFD: 01/12/2009 - 11:44:12 - [105,015] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 09/09/2007 - 21:10:38 - [0,016] ----D- C:\Program Files\Steinberg

O43 - CFD: 23/02/2010 - 14:17:24 - [1,931] ----D- C:\Program Files\StuffPlug3

O43 - CFD: 14/02/2009 - 21:51:04 - [1,252] ----D- C:\Program Files\SuperPI

O43 - CFD: 30/12/2011 - 19:41:40 - [2,501] ----D- C:\Program Files\SystemRequirementsLab

O43 - CFD: 26/07/2009 - 20:48:02 - [103,618] ----D- C:\Program Files\TeLLmeMore

O43 - CFD: 11/01/2012 - 20:35:30 - [0] ----D- C:\Program Files\Temp

O43 - CFD: 03/06/2010 - 16:45:58 - [713,534] ----D- C:\Program Files\TmNationsForever

O43 - CFD: 16/09/2010 - 14:40:02 - [19,544] ----D- C:\Program Files\tmpUpgrade

O43 - CFD: 19/10/2011 - 18:38:52 - [546,091] ----D- C:\Program Files\TrackMania Nations ESWC

O43 - CFD: 09/07/2010 - 17:58:46 - [10,115] ----D- C:\Program Files\TRENDnet

O43 - CFD: 01/02/2009 - 21:48:58 - [5,377] ----D- C:\Program Files\TVAnts

O43 - CFD: 14/03/2011 - 00:14:42 - [13,518] ----D- C:\Program Files\TVUPlayer

O43 - CFD: 21/10/2010 - 11:56:04 - [43,057] ----D- C:\Program Files\Ubisoft

O43 - CFD: 29/07/2010 - 13:49:58 - [1,516] ----D- C:\Program Files\UltraCover

O43 - CFD: 25/01/2011 - 19:27:30 - [2,648] ----D- C:\Program Files\UltraMon

O43 - CFD: 12/01/2012 - 15:54:28 - [0] ----D- C:\Program Files\Uniblue

O43 - CFD: 14/03/2009 - 22:55:02 - [0,000] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 10/04/2009 - 17:31:52 - [23,385] ----D- C:\Program Files\Vidalia Bundle

O43 - CFD: 08/01/2009 - 23:33:38 - [0,232] ----D- C:\Program Files\Video2Webcam

O43 - CFD: 16/01/2007 - 21:36:38 - [116,928] ----D- C:\Program Files\VideoLAN

O43 - CFD: 20/09/2007 - 20:35:20 - [3,669] ----D- C:\Program Files\Vodei

O43 - CFD: 03/11/2011 - 19:22:38 - [6,502] ----D- C:\Program Files\VS Revo Group

O43 - CFD: 04/01/2012 - 22:57:26 - [10,019] ----D- C:\Program Files\watch

O43 - CFD: 19/08/2011 - 23:48:26 - [1,942] ----D- C:\Program Files\WebCam

O43 - CFD: 08/11/2011 - 15:05:46 - [858,320] ----D- C:\Program Files\Weezo

O43 - CFD: 30/04/2008 - 17:41:50 - [0] ----D- C:\Program Files\WinASPI

O43 - CFD: 21/08/2011 - 13:45:12 - [132,487] ----D- C:\Program Files\Windows Live

O43 - CFD: 16/09/2009 - 00:51:08 - [0,234] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 12/05/2008 - 22:12:40 - [13,508] ----D- C:\Program Files\Windows Media Components

O43 - CFD: 08/11/2009 - 11:24:50 - [4,962] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 12/02/2009 - 21:49:22 - [3,760] ----D- C:\Program Files\Windows NT

O43 - CFD: 26/12/2006 - 17:08:54 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 04/01/2012 - 19:25:12 - [0,396] ----D- C:\Program Files\WinPcap

O43 - CFD: 14/03/2009 - 19:25:20 - [4,766] ----D- C:\Program Files\WinRAR

O43 - CFD: 15/11/2008 - 20:50:58 - [58,971] ----D- C:\Program Files\WinStars2

O43 - CFD: 12/01/2012 - 19:18:02 - [3,291] ----D- C:\Program Files\Wise Disk Cleaner

O43 - CFD: 12/01/2012 - 19:16:36 - [2,878] ----D- C:\Program Files\Wise Registry Cleaner

O43 - CFD: 16/04/2011 - 13:18:30 - [-1436,640] ----D- C:\Program Files\Wolfenstein - Enemy Territory

O43 - CFD: 26/12/2006 - 17:10:16 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 29/04/2008 - 21:53:36 - [0,730] ----D- C:\Program Files\XviD

O43 - CFD: 15/10/2011 - 14:45:46 - [39,638] ----D- C:\Program Files\Yahoo!

O43 - CFD: 24/03/2011 - 00:08:40 - [22,096] ----D- C:\Program Files\Yuna Software

O43 - CFD: 16/01/2012 - 17:31:54 - [10,093] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 30/04/2008 - 18:06:34 - [13,268] ----D- C:\Program Files\Common Files\INCA Shared

O43 - CFD: 22/07/2010 - 18:58:22 - [13,545] ----D- C:\Program Files\Common Files\Motive

O43 - CFD: 09/10/2011 - 18:41:42 - [114,832] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 28/12/2006 - 14:56:12 - [28,536] ----D- C:\Program Files\Fichiers Communs\Ahead

O43 - CFD: 07/10/2010 - 01:18:26 - [0] ----D- C:\Program Files\Fichiers Communs\Auto

O43 - CFD: 14/03/2009 - 23:09:04 - [66,650] ----D- C:\Program Files\Fichiers Communs\Autodesk Shared

O43 - CFD: 20/08/2011 - 13:49:10 - [0] ----D- C:\Program Files\Fichiers Communs\AVSMedia

O43 - CFD: 17/03/2011 - 18:26:30 - [632,921] ----D- C:\Program Files\Fichiers Communs\BitDefender

O43 - CFD: 29/03/2010 - 19:10:28 - [0,001] ----D- C:\Program Files\Fichiers Communs\CANON

O43 - CFD: 14/03/2009 - 23:07:38 - [0,180] ----D- C:\Program Files\Fichiers Communs\Designer

O43 - CFD: 05/01/2012 - 20:40:56 - [0,004] ----D- C:\Program Files\Fichiers Communs\Everstrike Software

O43 - CFD: 25/03/2009 - 19:00:12 - [4,306] ----D- C:\Program Files\Fichiers Communs\Futuremark Shared

O43 - CFD: 18/07/2007 - 18:54:44 - [28,729] ----D- C:\Program Files\Fichiers Communs\GTK

O43 - CFD: 09/09/2007 - 20:23:44 - [24,818] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 30/12/2011 - 21:05:40 - [32,911] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 18/03/2010 - 19:09:34 - [36,116] ----D- C:\Program Files\Fichiers Communs\LightScribe

O43 - CFD: 16/09/2009 - 00:51:16 - [256,157] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 22/07/2010 - 18:58:20 - [0] ----D- C:\Program Files\Fichiers Communs\Motive

O43 - CFD: 26/12/2006 - 17:08:14 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 23/07/2007 - 21:16:56 - [13,637] ----D- C:\Program Files\Fichiers Communs\muvee Technologies

O43 - CFD: 28/12/2006 - 14:58:20 - [2,169] ----D- C:\Program Files\Fichiers Communs\Nero

O43 - CFD: 26/12/2006 - 17:36:12 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 06/07/2007 - 16:47:30 - [0,215] ----D- C:\Program Files\Fichiers Communs\Palo Alto Software Inc

O43 - CFD: 25/01/2009 - 12:59:12 - [37,498] ----D- C:\Program Files\Fichiers Communs\PC SOFT

O43 - CFD: 06/10/2009 - 20:16:26 - [19,894] ----D- C:\Program Files\Fichiers Communs\Real

O43 - CFD: 25/01/2011 - 19:27:34 - [0,016] ----D- C:\Program Files\Fichiers Communs\Realtime Soft

O43 - CFD: 26/12/2006 - 17:08:16 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 06/12/2009 - 21:49:30 - [13,185] ----D- C:\Program Files\Fichiers Communs\Softwin

O43 - CFD: 23/12/2011 - 19:10:24 - [20,404] ----D- C:\Program Files\Fichiers Communs\Sony Shared

O43 - CFD: 26/12/2006 - 17:36:08 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 12/02/2009 - 21:49:22 - [18,676] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 16/09/2009 - 00:46:30 - [0] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 06/10/2009 - 20:16:02 - [0,336] ----D- C:\Program Files\Fichiers Communs\xing shared

O43 - CFD: 14/01/2012 - 01:08:30 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\74050

O43 - CFD: 06/05/2011 - 14:45:44 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Active Disk

O43 - CFD: 22/12/2011 - 12:30:20 - [49,521] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Adobe

O43 - CFD: 30/11/2010 - 19:48:34 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\AdobeUM

O43 - CFD: 08/09/2007 - 12:26:44 - [0,068] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Ahead

O43 - CFD: 14/07/2010 - 23:40:12 - [3,491] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\AIMP

O43 - CFD: 10/07/2011 - 23:14:02 - [0,049] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Ancestrologie

O43 - CFD: 25/03/2009 - 19:20:22 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Apple Computer

O43 - CFD: 18/10/2010 - 22:15:40 - [1,281] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\ArcSoft

O43 - CFD: 12/02/2009 - 22:11:08 - [0,002] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Auslogics

O43 - CFD: 14/03/2009 - 22:50:52 - [4,673] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Autodesk

O43 - CFD: 24/11/2008 - 19:55:58 - [0,081] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\AVGTOOLBAR

O43 - CFD: 14/03/2009 - 23:26:40 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\AVS4YOU

O43 - CFD: 23/12/2011 - 21:29:46 - [0,481] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\BitComet

O43 - CFD: 17/03/2011 - 18:27:10 - [0,040] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\BitDefender

O43 - CFD: 27/07/2010 - 17:49:28 - [0,049] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Canon

O43 - CFD: 13/04/2010 - 10:30:56 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Canon Easy-WebPrint EX

O43 - CFD: 31/03/2010 - 09:54:52 - [0,052] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\CD-LabelPrint

O43 - CFD: 16/12/2007 - 20:00:38 - [0,002] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Classes de site

O43 - CFD: 30/03/2011 - 17:46:04 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\COWON

O43 - CFD: 23/07/2007 - 22:18:22 - [0,003] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Creative

O43 - CFD: 15/11/2010 - 23:36:56 - [1,721] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\CVitae

O43 - CFD: 05/06/2008 - 18:51:04 - [0,003] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\DameWare Development

O43 - CFD: 22/12/2011 - 10:50:36 - [19,794] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Delivery

O43 - CFD: 09/05/2010 - 13:57:24 - [0,265] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\DivX

O43 - CFD: 12/01/2012 - 19:53:40 - [0,014] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\DNA

O43 - CFD: 08/09/2010 - 19:33:36 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Download Manager

O43 - CFD: 05/10/2011 - 23:13:56 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\dvdcss

O43 - CFD: 16/12/2007 - 20:00:00 - [0,071] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Dynamique

O43 - CFD: 23/09/2011 - 20:56:08 - [0,080] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Earth Alerts

O43 - CFD: 18/01/2010 - 00:04:40 - [6,411] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\EssentialPIM

O43 - CFD: 27/05/2010 - 13:12:54 - [0,016] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\F4

O43 - CFD: 10/01/2010 - 13:47:12 - [14,705] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\FastStone

O43 - CFD: 21/12/2007 - 20:58:38 - [0,014] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\FileZilla

O43 - CFD: 25/01/2010 - 02:12:30 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\FreeAudioPack

O43 - CFD: 09/12/2009 - 00:12:02 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\FreeVideoConverter

O43 - CFD: 07/01/2010 - 14:25:24 - [0,135] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\FUJIFILM

O43 - CFD: 20/08/2011 - 15:03:34 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\GetRightToGo

O43 - CFD: 03/05/2011 - 15:55:10 - [12,281] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\GianPaoloSaliola

O43 - CFD: 12/02/2009 - 21:14:28 - [0,150] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\GlarySoft

O43 - CFD: 10/07/2007 - 18:27:32 - [0,021] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Google

O43 - CFD: 14/01/2007 - 14:15:36 - [0,004] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Grisbi

O43 - CFD: 20/09/2011 - 22:15:12 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\gtk-2.0

O43 - CFD: 30/12/2011 - 13:40:00 - [2,627] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\GZero

O43 - CFD: 25/07/2010 - 17:06:34 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Help

O43 - CFD: 08/10/2010 - 16:03:24 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\HEM Data

O43 - CFD: 15/09/2009 - 21:46:14 - [0,573] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\I2P

O43 - CFD: 08/07/2008 - 18:59:28 - [2,365] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\ICQ

O43 - CFD: 01/02/2007 - 22:12:46 - [0,039] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\ICQLite

O43 - CFD: 17/03/2011 - 18:47:18 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Identities

O43 - CFD: 13/01/2008 - 00:06:38 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\images

O43 - CFD: 23/09/2011 - 19:07:44 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\ImgBurn

O43 - CFD: 30/08/2007 - 19:30:20 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Lavasoft

O43 - CFD: 05/08/2011 - 19:02:08 - [0,003] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\LockHunter

O43 - CFD: 21/01/2008 - 19:04:50 - [5,066] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Macromedia

O43 - CFD: 26/11/2010 - 00:00:56 - [4,796] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Malwarebytes

O43 - CFD: 09/10/2011 - 19:42:38 - [7,984] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\ManyCam

O43 - CFD: 25/07/2010 - 16:41:24 - [1,142] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\MapInfo

O43 - CFD: 12/01/2012 - 19:38:04 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Media Player Classic

O43 - CFD: 22/12/2011 - 12:30:20 - [28,709] -S--D- C:\Documents and Settings\Ken Hutchinson\Application Data\Microsoft

O43 - CFD: 07/01/2012 - 15:00:52 - [2,817] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\MiniLyrics

O43 - CFD: 10/07/2010 - 21:28:40 - [0,564] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\moovida-1

O43 - CFD: 23/06/2010 - 15:46:00 - [93,625] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Mozilla

O43 - CFD: 23/07/2007 - 22:18:08 - [0,007] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\muvee Technologies

O43 - CFD: 23/07/2011 - 21:57:18 - [0,043] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Need for Speed World

O43 - CFD: 04/03/2007 - 22:53:12 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\NeroDCTemplates

O43 - CFD: 04/01/2012 - 22:57:58 - [0,050] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\NVIDIA

O43 - CFD: 20/09/2011 - 20:07:12 - [7,024] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Opera

O43 - CFD: 30/12/2011 - 21:00:36 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Oracle

O43 - CFD: 30/12/2011 - 17:29:00 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\PlayerPlug

O43 - CFD: 06/07/2007 - 17:01:14 - [0,017] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Propellerhead Software

O43 - CFD: 30/12/2011 - 17:29:00 - [0,000] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\PropMgrAsync

O43 - CFD: 06/10/2009 - 20:17:00 - [1,042] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Real

O43 - CFD: 25/01/2011 - 19:27:50 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Realtime Soft

O43 - CFD: 16/12/2007 - 20:00:18 - [0,196] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Sites

O43 - CFD: 05/01/2012 - 00:39:02 - [17,657] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Skype

O43 - CFD: 05/10/2011 - 19:51:38 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\skypePM

O43 - CFD: 23/12/2011 - 19:09:46 - [59,039] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Sony

O43 - CFD: 27/01/2008 - 21:27:04 - [0,159] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\SopCast

O43 - CFD: 14/07/2007 - 20:56:10 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Steinberg

O43 - CFD: 04/01/2007 - 22:24:18 - [70,977] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Sun

O43 - CFD: 01/10/2011 - 11:29:50 - [2,623] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\SystemRequirementsLab

O43 - CFD: 06/12/2007 - 20:49:28 - [0,007] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Talkback

O43 - CFD: 12/07/2007 - 19:07:22 - [0,006] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\teamspeak2

O43 - CFD: 24/09/2007 - 18:28:02 - [0,008] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Template

O43 - CFD: 31/01/2011 - 19:01:32 - [464,865] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Thunderbird

O43 - CFD: 24/12/2011 - 14:22:46 - [0,008] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Toolbar4

O43 - CFD: 11/04/2009 - 11:22:10 - [3,367] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\tor

O43 - CFD: 28/11/2008 - 20:12:10 - [10,646] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\TVU networks

O43 - CFD: 12/01/2012 - 15:33:34 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Uniblue

O43 - CFD: 22/03/2011 - 18:55:44 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Unity

O43 - CFD: 05/10/2011 - 18:38:08 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\uTorrent

O43 - CFD: 11/04/2009 - 11:22:10 - [0,171] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Vidalia

O43 - CFD: 25/12/2011 - 23:55:08 - [1,047] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\vlc

O43 - CFD: 16/09/2009 - 01:09:20 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Windows Live Writer

O43 - CFD: 30/04/2008 - 19:12:16 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\WinRAR

O43 - CFD: 12/01/2012 - 19:44:50 - [0,007] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Wise Disk Cleaner

O43 - CFD: 12/01/2012 - 19:49:16 - [0,098] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Wise Registry Cleaner

O43 - CFD: 06/01/2008 - 22:57:16 - [0,258] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\WNR

O43 - CFD: 15/10/2011 - 14:43:10 - [0,545] ----D- C:\Documents and Settings\Ken Hutchinson\Application Data\Yahoo!

O43 - CFD: 13/01/2012 - 19:28:10 - [0,057] -SH-D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\99fd74b2

O43 - CFD: 13/11/2008 - 13:43:52 - [24,745] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Adobe

O43 - CFD: 25/01/2007 - 20:22:16 - [1,860] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Ahead

O43 - CFD: 23/09/2010 - 22:10:30 - [0,000] --H-D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\AlterGeo

O43 - CFD: 25/03/2009 - 19:19:56 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Apple

O43 - CFD: 15/01/2007 - 22:49:12 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Apple Computer

O43 - CFD: 23/09/2011 - 19:33:42 - [0,016] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 07/07/2010 - 21:54:46 - [0,007] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\AskToolbar

O43 - CFD: 14/03/2009 - 22:53:42 - [14,906] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Autodesk

O43 - CFD: 24/12/2011 - 12:38:28 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\bluesoleil

O43 - CFD: 10/02/2011 - 17:49:10 - [0,083] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Canon Easy-PhotoPrint EX

O43 - CFD: 24/11/2010 - 21:08:32 - [0,945] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Chess+

O43 - CFD: 23/07/2010 - 00:33:02 - [0,038] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris

O43 - CFD: 29/09/2011 - 10:55:50 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\CrashRpt

O43 - CFD: 21/07/2011 - 23:41:46 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\DNA

O43 - CFD: 23/12/2011 - 16:38:36 - [19,649] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Downloaded Installations

O43 - CFD: 23/07/2011 - 19:42:34 - [0,003] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Electronic_Arts_Inc

O43 - CFD: 29/03/2011 - 18:31:56 - [166,802] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\F4

O43 - CFD: 24/11/2010 - 21:08:44 - [0,936] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Facebook widget

O43 - CFD: 24/11/2010 - 21:08:30 - [1,056] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Friday countdown

O43 - CFD: 03/05/2011 - 15:55:34 - [0,062] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\GianPaoloSaliola

O43 - CFD: 24/11/2010 - 21:08:42 - [1,093] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Golden Coin

O43 - CFD: 05/07/2010 - 15:49:02 - [370,955] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Google

O43 - CFD: 24/11/2010 - 21:08:38 - [0,926] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Google Translator

O43 - CFD: 30/12/2011 - 13:40:22 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\GZero

O43 - CFD: 29/12/2006 - 14:13:12 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Help

O43 - CFD: 01/04/2007 - 14:22:16 - [0,216] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Identities

O43 - CFD: 07/10/2010 - 21:07:04 - [0,180] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\In The Money

O43 - CFD: 07/10/2010 - 20:20:20 - [0,001] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\IsolatedStorage

O43 - CFD: 19/03/2007 - 22:26:52 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\LightScribe

O43 - CFD: 30/12/2011 - 18:31:18 - [0,034] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\LiveGBoost

O43 - CFD: 09/10/2011 - 19:42:36 - [1,700] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\ManyCam

O43 - CFD: 25/07/2010 - 16:41:24 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\MapInfo

O43 - CFD: 22/12/2011 - 12:30:20 - [645,707] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft

O43 - CFD: 10/07/2010 - 21:28:34 - [0,173] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\moovida Air

O43 - CFD: 13/01/2007 - 21:44:18 - [63,523] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla

O43 - CFD: 24/11/2010 - 21:08:50 - [1,360] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\multiWeather

O43 - CFD: 24/11/2010 - 21:08:52 - [0,839] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\MyCamera

O43 - CFD: 24/11/2010 - 21:09:14 - [0,876] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\O-Knife

O43 - CFD: 24/11/2010 - 21:09:10 - [1,347] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\OMG_Opera Mouse Gestures

O43 - CFD: 24/11/2010 - 21:09:14 - [6,033] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Opera

O43 - CFD: 12/01/2012 - 15:33:06 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\PackageAware

O43 - CFD: 31/12/2011 - 12:57:24 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\PCHealth

O43 - CFD: 24/11/2010 - 21:08:36 - [1,040] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Penalty

O43 - CFD: 08/01/2012 - 14:59:54 - [9,914] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Poker Pro Labs

O43 - CFD: 21/10/2011 - 00:19:08 - [0,921] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\PunkBuster

O43 - CFD: 05/10/2011 - 18:14:04 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\RevoUnistallerPro

O43 - CFD: 24/11/2010 - 21:08:24 - [2,424] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\SimAquarium

O43 - CFD: 23/12/2011 - 19:11:26 - [0,358] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Sony

O43 - CFD: 24/12/2011 - 13:56:40 - [0,091] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Sony Ericsson

O43 - CFD: 30/12/2011 - 21:25:20 - [0,076] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Sun

O43 - CFD: 30/09/2010 - 11:55:44 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Sunbelt Software

O43 - CFD: 22/12/2011 - 12:30:20 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Temp

O43 - CFD: 29/11/2007 - 22:06:44 - [3,832] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Thunderbird

O43 - CFD: 23/10/2008 - 19:45:48 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\TVU Networks

O43 - CFD: 22/03/2011 - 20:30:36 - [880,844] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Unity

O43 - CFD: 05/10/2011 - 18:54:52 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\VS Revo Group

O43 - CFD: 24/11/2010 - 21:08:58 - [0,836] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Wasserkuppe Germany

O43 - CFD: 16/09/2009 - 01:09:22 - [0,340] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Windows Live Writer

O43 - CFD: 22/12/2009 - 18:33:10 - [0] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\WMTools Downloaded Files

O43 - CFD: 04/08/2010 - 16:40:54 - [0,264] ----D- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\Yahoo

O43 - CFD: 15/01/2012 - 14:30:34 - [0] RSHADC C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\????.??

~ Scan Program Folder in 01mn 53s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.92572C07C92017A8DA8D570AEEA0168F] - 16/01/2012 - 17:03:08 ---A- . (...) -- C:\RCX2F.tmp [262144]

O44 - LFC:[MD5.18BC0E6E0D9FB46D40FA4EEA83535C5A] - 16/01/2012 - 17:02:50 ---A- . (...) -- C:\RCX2D.tmp [266240]

O44 - LFC:[MD5.18BC0E6E0D9FB46D40FA4EEA83535C5A] - 16/01/2012 - 17:02:28 ---A- . (...) -- C:\RCX2C.tmp [266240]

O44 - LFC:[MD5.26865055A98E8B42C9ED57C44E526991] - 16/01/2012 - 17:01:49 ---A- . (...) -- C:\RCX2B.tmp [266240]

O44 - LFC:[MD5.26865055A98E8B42C9ED57C44E526991] - 16/01/2012 - 17:01:07 ---A- . (...) -- C:\RCX2A.tmp [266240]

O44 - LFC:[MD5.26865055A98E8B42C9ED57C44E526991] - 16/01/2012 - 17:00:30 ---A- . (...) -- C:\RCX29.tmp [266240]

O44 - LFC:[MD5.D5BEF6F45CE7D1194BC8BAD8840A5DA0] - 16/01/2012 - 16:53:58 ---A- . (...) -- C:\WINDOWS\setupapi.log [7714]

O44 - LFC:[MD5.F26D2D03BFEDD18F7DFB21C21E7D1AFC] - 16/01/2012 - 14:31:08 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1951944]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/01/2012 - 14:30:54 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.0301A234C7BDCA63ED2BEB5D2DB63F01] - 16/01/2012 - 14:27:38 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.C00E85BE7056ECB527139AEAAD9475A3] - 16/01/2012 - 14:27:36 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.E9DEE22A613BDBD76FBF1F4D5DA45D7B] - 16/01/2012 - 14:27:01 ---A- . (...) -- C:\WINDOWS\system32\bscs.ini [1036]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 16/01/2012 - 14:23:05 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/01/2012 - 14:23:02 ---A- . (...) -- C:\WINDOWS\MEMORY.DMP [0]

O44 - LFC:[MD5.10AD23149BC7262CB3DF45C951414532] - 16/01/2012 - 14:23:00 ---A- . (...) -- C:\aaw7boot.log [99737]

O44 - LFC:[MD5.18BC0E6E0D9FB46D40FA4EEA83535C5A] - 16/01/2012 - 14:21:51 ---A- . (...) -- C:\RCX34.tmp [266240]

O44 - LFC:[MD5.18BC0E6E0D9FB46D40FA4EEA83535C5A] - 16/01/2012 - 14:21:28 ---A- . (...) -- C:\RCX33.tmp [266240]

O44 - LFC:[MD5.18BC0E6E0D9FB46D40FA4EEA83535C5A] - 16/01/2012 - 14:21:10 ---A- . (...) -- C:\RCX32.tmp [266240]

O44 - LFC:[MD5.CB17A47D090938A02DACB066D6D5A124] - 16/01/2012 - 12:18:51 ---A- . (...) -- C:\WINDOWS\system32\rp_rules.dat [44]

O44 - LFC:[MD5.8A3D5B46FF8C9CED46304F1EBB5F9AFE] - 16/01/2012 - 12:18:51 ---A- . (...) -- C:\WINDOWS\system32\rp_stats.dat [64]

O44 - LFC:[MD5.AF8BDB7460655A7CCA45E124D1D54220] - 16/01/2012 - 12:18:35 ---A- . (...) -- C:\WINDOWS\system32\LOCALDEVICE.INI [107]

O44 - LFC:[MD5.CF0800A477B8A094D942F20C7E9D4C43] - 16/01/2012 - 12:18:35 ---A- . (...) -- C:\WINDOWS\system32\LOCALSERVICE.INI [5324]

O44 - LFC:[MD5.85DA006A105E4E6B9CBB98457C2CD94F] - 16/01/2012 - 01:11:10 ---A- . (...) -- C:\WINDOWS\system32\REMOTEDEVICE.INI [134]

O44 - LFC:[MD5.9BB67249AB98F34C838C024FD657E7A3] - 16/01/2012 - 00:22:50 ---A- . (...) -- C:\WINDOWS\system32\SHORTCUT.INI [4470]

O44 - LFC:[MD5.8B999E1D1CC22CFD2D3F3C8C9A0E26F2] - 16/01/2012 - 00:01:00 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32260]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/01/2012 - 12:23:45 -SHA- . (...) -- C:\WINDOWS\system32\dds_log_trash.cmd [0]

O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 13/01/2012 - 20:16:18 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]

O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 13/01/2012 - 20:16:06 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]

O44 - LFC:[MD5.EC08D1625F5C6CF2A57B79EB35186F8C] - 13/01/2012 - 20:14:27 ---A- . (.GRISOFT, s.r.o. - AVG7 Clean Driver.) -- C:\WINDOWS\system32\drivers\AvgArCln.sys [3968]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/01/2012 - 20:02:49 ---A- . (...) -- C:\WINDOWS\RTacDbg.txt [0]

O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 13/01/2012 - 16:19:24 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [116]

O44 - LFC:[MD5.8B664568604EAC9C0C2D70EE32353130] - 12/01/2012 - 18:15:13 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [411880]

O44 - LFC:[MD5.52103D2D0B5ED539EDA6BE3F92BDC4B4] - 12/01/2012 - 13:44:03 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13646]

O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 09/01/2012 - 18:08:20 ---A- . (...) -- C:\WINDOWS\system32\CONFIG.NT [3121]

O44 - LFC:[MD5.6DBA8CA5D784A6D869DCBCD0E65A9C7C] - 06/01/2012 - 11:34:34 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [664]

O44 - LFC:[MD5.F40CB663AB4584E2759C3A3BAE0986B1] - 05/01/2012 - 00:11:25 ---A- . (...) -- C:\WINDOWS\system32\comnum [34]

O44 - LFC:[MD5.7C1729EB259A4D908227C449F470F250] - 04/01/2012 - 19:17:42 ---A- . (...) -- C:\WINDOWS\Secman.ini [177]

O44 - LFC:[MD5.72827D5D38D38A46231CB38E1F3FC5E3] - 04/01/2012 - 18:59:26 ---A- . (.InstallShield Corporation, Inc. - InstallShield unInstaller.) -- C:\WINDOWS\uninst.exe [299520]

O44 - LFC:[MD5.D4761D8CDB9DEF6C39253C4166C610A7] - 04/01/2012 - 13:26:38 ---A- . (...) -- C:\WINDOWS\ODBC.INI [385]

O44 - LFC:[MD5.0650B2F7B1FCD731CC3EE0DFE2C1EDA2] - 02/01/2012 - 01:25:21 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1079890]

O44 - LFC:[MD5.FE47183E85AA55FAD919FAE706BE5EE5] - 02/01/2012 - 01:25:21 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [71964]

O44 - LFC:[MD5.796361FAE6DF464142DF7CAD794430DD] - 02/01/2012 - 01:25:21 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [85568]

O44 - LFC:[MD5.8C14FCBFBBA8E6ABD4FF9F68DD91258C] - 02/01/2012 - 01:25:21 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [442028]

O44 - LFC:[MD5.41335EDE69E0B305F7B6F33C6A93350B] - 02/01/2012 - 01:25:21 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [511528]

O44 - LFC:[MD5.A4001C78F2806662B3BD91ACB44E6330] - 30/12/2011 - 21:34:08 ---A- . (...) -- C:\WINDOWS\system32\initdebug.nfo [45]

O44 - LFC:[MD5.005A938091A35F9A158787B9D4BF74B6] - 30/12/2011 - 21:09:55 ---A- . (.NVIDIA Corporation - NVIDIA Chinese (Traditional) language resou.) -- C:\WINDOWS\system32\nvrszht.dll [126976]

O44 - LFC:[MD5.71F41A752821C5173F85E9B7388204EB] - 30/12/2011 - 21:09:55 ---A- . (.NVIDIA Corporation - NVIDIA Simplified Chinese language resource.) -- C:\WINDOWS\system32\nvrszhc.dll [229376]

O44 - LFC:[MD5.C67B96EF570F5A1B7CE034CF8445E77B] - 30/12/2011 - 21:09:55 ---A- . (.NVIDIA Corporation - NVIDIA Turkish language resource library.) -- C:\WINDOWS\system32\nvrstr.dll [258048]

O44 - LFC:[MD5.894CD4E1876D1995E653C0722F47859A] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Iberian Portuguese language resource.) -- C:\WINDOWS\system32\nvrspt.dll [274432]

O44 - LFC:[MD5.32F56F3E713EE66E927F2BC8C7D67A5F] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Portuguese (Brazilian) language reso.) -- C:\WINDOWS\system32\nvrsptb.dll [270336]

O44 - LFC:[MD5.5DE6C3ECC8FB2AECD064D96B659A8729] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Russian language resource library.) -- C:\WINDOWS\system32\nvrsru.dll [270336]

O44 - LFC:[MD5.11BC2649CC558ED5FFA511B71E20E9AD] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Slovak language resource library.) -- C:\WINDOWS\system32\nvrssk.dll [258048]

O44 - LFC:[MD5.2BF9D6B2F16A63760A12EBACDCA13EC7] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Slovenian language resource library.) -- C:\WINDOWS\system32\nvrssl.dll [258048]

O44 - LFC:[MD5.C417C36990AE30079743B92B631099CF] - 30/12/2011 - 21:09:54 ---A- . (.NVIDIA Corporation - NVIDIA Swedish language resource library.) -- C:\WINDOWS\system32\nvrssv.dll [253952]

O44 - LFC:[MD5.FBC7C83A4659C8BFA89EF59A3917D9AB] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Dutch language resource library.) -- C:\WINDOWS\system32\nvrsnl.dll [274432]

O44 - LFC:[MD5.A2F4DEEE637DBEEF23E06D06E8DED3A8] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Hungarian language resource library.) -- C:\WINDOWS\system32\nvrshu.dll [262144]

O44 - LFC:[MD5.333F6F9A6DB61B9CE4207F2EDADB2A22] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Italian language resource library.) -- C:\WINDOWS\system32\nvrsit.dll [282624]

O44 - LFC:[MD5.C97A47F3057EF80306C8D28B0A77A4F8] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Japanese language resource library.) -- C:\WINDOWS\system32\nvrsja.dll [270336]

O44 - LFC:[MD5.3A8B5C19A9730B5DFAEE3FBC08B35DA4] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Korean language resource library.) -- C:\WINDOWS\system32\nvrsko.dll [266240]

O44 - LFC:[MD5.AC1FDD8D540BBD960D91981AE962F0D1] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Norwegian language resource library.) -- C:\WINDOWS\system32\nvrsno.dll [253952]

O44 - LFC:[MD5.9D05638E50D4234959A6CF7EAFD92081] - 30/12/2011 - 21:09:53 ---A- . (.NVIDIA Corporation - NVIDIA Polish language resource library.) -- C:\WINDOWS\system32\nvrspl.dll [258048]

O44 - LFC:[MD5.ABE8DC279639C4C631B1E1EFF689E0A0] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Arabic language resource library.) -- C:\WINDOWS\system32\nvrsar.dll [335872]

O44 - LFC:[MD5.0B13FD431ED8AD66F4482B3D33F54986] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Czech language resource library.) -- C:\WINDOWS\system32\nvrscs.dll [249856]

O44 - LFC:[MD5.E2A8AFCA9EB4B16BBF85C2D321FB9F3C] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Danish language resource library.) -- C:\WINDOWS\system32\nvrsda.dll [253952]

O44 - LFC:[MD5.45E739265BB8BD06C82AC48E1724AC08] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Finnish language resource library.) -- C:\WINDOWS\system32\nvrsfi.dll [249856]

O44 - LFC:[MD5.3BE219C1796812EF3A95C7F737399A09] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA French language resource library.) -- C:\WINDOWS\system32\nvrsfr.dll [286720]

O44 - LFC:[MD5.D21F6D7A5646B7BEAB6052B3287E3AF8] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA German language resource library.) -- C:\WINDOWS\system32\nvrsde.dll [278528]

O44 - LFC:[MD5.872C1E08C7A5D383138D4C9516212BC9] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Greek language resource library.) -- C:\WINDOWS\system32\nvrsel.dll [282624]

O44 - LFC:[MD5.643483D27F1B4B3247F62D6F4AAABB02] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Hebrew language resource library.) -- C:\WINDOWS\system32\nvrshe.dll [331776]

O44 - LFC:[MD5.0AC66FC100AA1CD4A866EB204C311CC7] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Latin American Spanish language reso.) -- C:\WINDOWS\system32\nvrsesm.dll [274432]

O44 - LFC:[MD5.6F1015A010C6738C9A30E38441070777] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA Spanish language resource library.) -- C:\WINDOWS\system32\nvrses.dll [282624]

O44 - LFC:[MD5.02D76F02E48315B52C61DD0B450219F0] - 30/12/2011 - 21:09:52 ---A- . (.NVIDIA Corporation - NVIDIA UK English language resource library.) -- C:\WINDOWS\system32\nvrseng.dll [249856]

O44 - LFC:[MD5.1CE1460973F483DEF2EBA8D1E58D7072] - 30/12/2011 - 21:09:05 ---A- . (.NVIDIA Corporation - Easy daemon API.) -- C:\WINDOWS\system32\easyupdatusapiu.dll [602432]

O44 - LFC:[MD5.6D7BC2C1B77E77F6FF4A2A780E6FC317] - 30/12/2011 - 21:08:43 ---A- . (...) -- C:\WINDOWS\system32\nvdrsdb1.bin [285176]

O44 - LFC:[MD5.55A54008AD1BA589AA210D2629C1DF41] - 30/12/2011 - 21:08:43 ---A- . (...) -- C:\WINDOWS\system32\nvdrssel.bin [1]

O44 - LFC:[MD5.D72F22D380553E395C8D0D99C21948B1] - 30/12/2011 - 21:08:36 ---A- . (...) -- C:\WINDOWS\system32\nvdrsdb0.bin [285176]

O44 - LFC:[MD5.13CF5529FCE074A1E598585809A900A0] - 30/12/2011 - 21:00:08 ---A- . (.Oracle Corporation - Java Web Start Launcher.) -- C:\WINDOWS\system32\javaws.exe [223112]

O44 - LFC:[MD5.0E13AC887BFC49E1E2AE672D94E629C2] - 30/12/2011 - 21:00:08 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\WINDOWS\system32\npdeployJava1.dll [637848]

O44 - LFC:[MD5.BDD6664E0D9D9A5550038F33637265EA] - 30/12/2011 - 20:59:35 ---A- . (.Oracle Corporation - Java Platform SE binary.) -- C:\WINDOWS\system32\javaw.exe [173960]

O44 - LFC:[MD5.078C041AC65593A812F5B2A10F53C4E8] - 30/12/2011 - 20:59:34 ---A- . (.Oracle Corporation - Java Platform SE binary.) -- C:\WINDOWS\system32\java.exe [173960]

O44 - LFC:[MD5.8F71A250C4A8257EE0CDA01F6791B3E9] - 30/12/2011 - 19:12:23 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [414368]

O44 - LFC:[MD5.9C24ED831DDFA8319382B2BFD9691AA9] - 30/12/2011 - 17:13:15 ---A- . (.Creative Labs - OpenAL32.) -- C:\WINDOWS\system32\wrap_oal.dll [413696]

O44 - LFC:[MD5.CE0CDC5459EAA1D574AF781DDB8F2685] - 30/12/2011 - 17:13:15 ---A- . (.Portions © Creative Labs Inc. and NVIDIA - Standard OpenAL Implementation.) -- C:\WINDOWS\system32\OpenAL32.dll [110592]

O44 - LFC:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 29/12/2011 - 00:57:26 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\taphss.sys [32768]

O44 - LFC:[MD5.87E5AAE1AA9431EF1DDEDC46D2145BDB] - 24/12/2011 - 12:32:02 ---A- . (...) -- C:\WINDOWS\0 [32]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/12/2011 - 12:30:02 ---A- . (...) -- C:\WINDOWS\system32\0 [0]

O44 - LFC:[MD5.5B1078D9E27DF63656C39449492AE3E9] - 23/12/2011 - 16:22:36 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emul.) -- C:\WINDOWS\system32\drivers\s0017cr.sys [10792]

O44 - LFC:[MD5.DF5E7360A0AFA5956BF75DA683D0679F] - 23/12/2011 - 16:22:35 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emul.) -- C:\WINDOWS\system32\drivers\s0017unic.sys [109736]

O44 - LFC:[MD5.9814E6BACC06D2526CD52981C7EEEDF0] - 23/12/2011 - 16:22:34 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Device Ma.) -- C:\WINDOWS\system32\drivers\s0017mgmt.sys [108328]

O44 - LFC:[MD5.F87C3422E84B2FB1B43E0A26247AD5A5] - 23/12/2011 - 16:22:34 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC OBEX Inte.) -- C:\WINDOWS\system32\drivers\s0017obex.sys [104616]

O44 - LFC:[MD5.2C62CD58225973F26682CD4F783DDEDE] - 23/12/2011 - 16:22:32 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emul.) -- C:\WINDOWS\system32\drivers\s0017nd5.sys [26024]

O44 - LFC:[MD5.7258F550419D543BC5C8E80C578A5D54] - 23/12/2011 - 16:22:31 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Modem Fil.) -- C:\WINDOWS\system32\drivers\s0017mdfl.sys [15016]

O44 - LFC:[MD5.1DE4F6607FEB17A15DBD4F1B139E6D2F] - 23/12/2011 - 16:22:31 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Modem WDM.) -- C:\WINDOWS\system32\drivers\s0017mdm.sys [114600]

O44 - LFC:[MD5.3FA76516F21FC7CF04689834B2B7325E] - 23/12/2011 - 16:22:31 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017cm.sys [12200]

O44 - LFC:[MD5.3FA76516F21FC7CF04689834B2B7325E] - 23/12/2011 - 16:22:31 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017cmnt.sys [12200]

O44 - LFC:[MD5.594FF5620661D1386475406E78CB6F2F] - 23/12/2011 - 16:22:29 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 Driver.) -- C:\WINDOWS\system32\drivers\s0017bus.sys [86824]

O44 - LFC:[MD5.985E0A43CF844A573FF254C847AD0BA9] - 23/12/2011 - 16:22:29 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017wh.sys [12200]

O44 - LFC:[MD5.985E0A43CF844A573FF254C847AD0BA9] - 23/12/2011 - 16:22:29 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017whnt.sys [12200]

O44 - LFC:[MD5.93CAEC06D6F156AA28DE23465FB156FC] - 23/12/2011 - 13:22:51 ---A- . (.Realtek Semiconductor Corp. - ALCFDRTM.) -- C:\WINDOWS\ALCFDRTM.VER [60416]

O44 - LFC:[MD5.96A478EDFB1FBF1FC663BEB09B4175A8] - 19/12/2011 - 14:11:58 ---A- . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys [91440]

O44 - LFC:[MD5.FA85E26C796C8B447B08848DB1CE8474] - 08/10/2011 - 05:50:00 ---A- . (...) -- C:\WINDOWS\system32\nvdata.data [2130002]

O44 - LFC:[MD5.15EE1D8DAE5DB9CEC3DA6DC28B503661] - 08/10/2011 - 05:50:00 ---A- . (...) -- C:\WINDOWS\system32\nvinfo.pb [3250]

O44 - LFC:[MD5.EDD400CC92C6D43F98D3D3AFC97C2559] - 01/12/2010 - 09:31:18 ---A- . (...) -- C:\WINDOWS\system32\ISSRemoveSP.exe [451072]

O44 - LFC:[MD5.E192F8DC396EF27E479A0476E4A38433] - 14/09/1999 - 14:21:00 ---A- . (...) -- C:\WINDOWS\system32\RegOnline-e.exe [175131]

O44 - LFC:[MD5.B9D7FADD5D36D1846045D5E850E5E43A] - 14/09/1999 - 14:21:00 ---A- . (...) -- C:\WINDOWS\system32\RegOnline.exe [156288]

O44 - LFC:[MD5.6497EA83E59C8A513DD09368DAC7BF7D] - 20/09/1999 - 09:43:58 ---A- . (...) -- C:\WINDOWS\system32\regonline.reg [150]

~ Scan Files in 00mn 13s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.9FC3434BF3A882875E5DB51622A7429A] - 12/01/2012 - 18:20:52 ---A- - C:\WINDOWS\Prefetch\YAHOOMESSENGER.EXE-0613336C.pf

O45 - LFCP:[MD5.6ABDD83178DDD9660EC4912A58548E22] - 12/01/2012 - 20:24:59 ---A- - C:\WINDOWS\Prefetch\INITIALIZE.EXE-2316EC09.pf

O45 - LFCP:[MD5.33356296B34FCD5F34EB88224AFB5E00] - 12/01/2012 - 20:24:59 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-0743FDA9.pf

O45 - LFCP:[MD5.25B296D360094D34228B32B33385D0D6] - 12/01/2012 - 20:25:00 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5868764E.pf

O45 - LFCP:[MD5.0E46E70B24863859E5F8807BF19D4A7A] - 12/01/2012 - 20:26:11 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1DD87B58.pf

O45 - LFCP:[MD5.27D834ACAFB719D769940BE124D0B9DF] - 12/01/2012 - 20:34:24 ---A- - C:\WINDOWS\Prefetch\REGSEEKER.EXE-1B858DD2.pf

O45 - LFCP:[MD5.6337C829F042251F1BD30941AB3210B4] - 13/01/2012 - 00:18:22 ---A- - C:\WINDOWS\Prefetch\MSNMSGR.EXE-0EBDBC56.pf

O45 - LFCP:[MD5.13C0BBAC9D7E41F450A05939A055D31E] - 13/01/2012 - 13:01:57 ---A- - C:\WINDOWS\Prefetch\JAVAWS.EXE-24608AEB.pf

O45 - LFCP:[MD5.5774F3DF33418677A4A0EC16F119D847] - 13/01/2012 - 13:02:18 ---A- - C:\WINDOWS\Prefetch\JAVAW.EXE-0D86ABB1.pf

O45 - LFCP:[MD5.0D504D90479EE200FA378A924D86E728] - 13/01/2012 - 15:48:10 ---A- - C:\WINDOWS\Prefetch\WISEREGCLEANER.EXE-26C9622F.pf

O45 - LFCP:[MD5.9789D6B08A311C36EAF6278D7526AC8D] - 13/01/2012 - 16:07:46 ---A- - C:\WINDOWS\Prefetch\MANYCAM.EXE-34847744.pf

O45 - LFCP:[MD5.02C886653BB1EDB0BFBB5FFDE9E28283] - 13/01/2012 - 16:07:50 ---A- - C:\WINDOWS\Prefetch\STARTFX.EXE-1F51B62D.pf

O45 - LFCP:[MD5.C30D8476ED08B1F77EBABDD79C41733B] - 13/01/2012 - 16:10:25 ---A- - C:\WINDOWS\Prefetch\LF30.EXE-00FD0143.pf

O45 - LFCP:[MD5.48FB18CF46FE119426BA2ECE270ED2AC] - 13/01/2012 - 16:10:38 ---A- - C:\WINDOWS\Prefetch\SF.BIN-0A384AE2.pf

O45 - LFCP:[MD5.BB70BDC9BC28CFC0518EC8E745946DD4] - 13/01/2012 - 16:10:56 ---A- - C:\WINDOWS\Prefetch\LFSERVICE.EXE-089E8645.pf

O45 - LFCP:[MD5.A12BE0055968B78D864EB957B09390AF] - 13/01/2012 - 16:19:40 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-66EC1293.pf

O45 - LFCP:[MD5.D965396D13F11195493E6535FD0AA783] - 13/01/2012 - 17:08:44 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-0EB365FC.pf

O45 - LFCP:[MD5.C5DDACDBEC2A41F13F4F6A60F1DF2819] - 13/01/2012 - 18:27:43 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5ACE91DC.pf

O45 - LFCP:[MD5.422A29A0F39D3295018803772C1944E8] - 13/01/2012 - 18:27:47 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-7183D8DA.pf

O45 - LFCP:[MD5.D130886B71DC26373A3C852A04C46EFA] - 13/01/2012 - 18:27:59 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B5E532E.pf

O45 - LFCP:[MD5.E1139F7A810A50A7DB9D96174447E0D0] - 13/01/2012 - 18:28:00 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4371932F.pf

O45 - LFCP:[MD5.07187EB19C5C9883DE8F0C7D3B14400C] - 13/01/2012 - 19:02:16 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.B40A52A988737FEA1D38B0B691DAD26F] - 13/01/2012 - 19:02:29 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-2858C7E2.pf

O45 - LFCP:[MD5.4D5A5B4F57C8289480532BC00A8ACB4E] - 13/01/2012 - 19:02:29 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-38C3807C.pf

O45 - LFCP:[MD5.67CA1FAA9BBC4EC550C297A1029ADE75] - 13/01/2012 - 19:20:05 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-6D8B694E.pf

O45 - LFCP:[MD5.3A963087A1CE03F8C6A7C6C8B87B79B0] - 13/01/2012 - 19:20:55 ---A- - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-10255AA7.pf

O45 - LFCP:[MD5.47CCA771040727F2AD64F311D1A50BE1] - 13/01/2012 - 19:23:21 ---A- - C:\WINDOWS\Prefetch\ACROBAT.EXE-1E8129FA.pf

O45 - LFCP:[MD5.5D8C5D3CE4124238ACB6455257E2F209] - 13/01/2012 - 19:23:47 ---A- - C:\WINDOWS\Prefetch\PDAPP.EXE-1E507A1E.pf

O45 - LFCP:[MD5.245520D73112B6B27878889A3202B696] - 13/01/2012 - 19:24:11 ---A- - C:\WINDOWS\Prefetch\EMULE.EXE-01299854.pf

O45 - LFCP:[MD5.255F6C1A5C3914E98967FA7C5C4DF994] - 13/01/2012 - 19:25:53 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-1CE22EA3.pf

O45 - LFCP:[MD5.236D8514C160BA7F1A5C937022BD225E] - 13/01/2012 - 19:27:12 ---A- - C:\WINDOWS\Prefetch\MDDYASUPL1.EXE-2A1F10B9.pf

O45 - LFCP:[MD5.CED5A0C3111E0AEA4FA8A33EF5794162] - 13/01/2012 - 19:27:13 ---A- - C:\WINDOWS\Prefetch\ADOBE ACROBAT X PRO 10.0.0 KE-01801737.pf

O45 - LFCP:[MD5.5C3FE642D3C0A045664FD09A84AA159D] - 13/01/2012 - 19:27:31 ---A- - C:\WINDOWS\Prefetch\2EAJ.EXE-126A323B.pf

O45 - LFCP:[MD5.15E3EE100A015A5F3DE5041F407868F8] - 13/01/2012 - 19:28:11 ---A- - C:\WINDOWS\Prefetch\4EAJ.EXE-021C9032.pf

O45 - LFCP:[MD5.615261B59A4150F64B2A0502C4010AC3] - 13/01/2012 - 19:28:12 ---A- - C:\WINDOWS\Prefetch\3EAJ.EXE-15A693FF.pf

O45 - LFCP:[MD5.2B21D9CAED22A98A198687A3D6097CED] - 13/01/2012 - 20:02:29 ---A- - C:\WINDOWS\Prefetch\CUEGOJ.EXE-1411E6AA.pf

O45 - LFCP:[MD5.213E9CFFE291B58FA92DCD63B03D7259] - 13/01/2012 - 20:03:17 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F056E79.pf

O45 - LFCP:[MD5.69EC345157ADDE6781FCAA182F401CA3] - 13/01/2012 - 20:04:43 ---A- - C:\WINDOWS\Prefetch\B41NQ7F4.EXE-1A792A1D.pf

O45 - LFCP:[MD5.31498E4E7F064ED9E9A7690E5F4C8645] - 13/01/2012 - 20:04:44 ---A- - C:\WINDOWS\Prefetch\WOAXIL.COM-11F3F266.pf

O45 - LFCP:[MD5.AFE0CD45AA13435955331CA3362CB442] - 13/01/2012 - 20:04:56 ---A- - C:\WINDOWS\Prefetch\2BUJ.EXE-04DC7890.pf

O45 - LFCP:[MD5.A6285999B8E56FF9F40A9E905FC8CBCC] - 13/01/2012 - 20:04:59 ---A- - C:\WINDOWS\Prefetch\3BUJ.EXE-20426321.pf

O45 - LFCP:[MD5.0FE3A087DBD1DB607D4D37A5F45811A7] - 13/01/2012 - 20:05:04 ---A- - C:\WINDOWS\Prefetch\4BUJ.EXE-07CE6319.pf

O45 - LFCP:[MD5.A4DE984C21AE4D31E5477BE071855531] - 13/01/2012 - 20:05:04 ---A- - C:\WINDOWS\Prefetch\X-05CCB265.pf

O45 - LFCP:[MD5.CC0BEC118AE4E3E5C5B6D882AF89490D] - 13/01/2012 - 20:05:50 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1FD21FD2.pf

O45 - LFCP:[MD5.595FD3A1E4F6609AD0109BEB602CEB2E] - 13/01/2012 - 20:06:04 ---A- - C:\WINDOWS\Prefetch\SDUPDATE.EXE-2A88E3BA.pf

O45 - LFCP:[MD5.4C0A3325C1F58BE069B7F6FC99D4A992] - 13/01/2012 - 20:07:25 ---A- - C:\WINDOWS\Prefetch\POKERSTARSUPDATE.EXE-2BF79298.pf

O45 - LFCP:[MD5.FB43674A8118D41D37F955C71AC6E9A3] - 13/01/2012 - 20:08:44 ---A- - C:\WINDOWS\Prefetch\POKERSTARS.EXE-31BF2E1E.pf

O45 - LFCP:[MD5.B9FF3FE518D5C43B635E13F6A2024E0E] - 13/01/2012 - 20:11:07 ---A- - C:\WINDOWS\Prefetch\FLASHGOT.EXE-36D2A312.pf

O45 - LFCP:[MD5.2DCF1180DAC87F329C5ABEFA7063FB2C] - 13/01/2012 - 20:14:25 ---A- - C:\WINDOWS\Prefetch\AVG-ANTI-ROOTKIT_AVG_ANTI-ROO-00E51C34.pf

O45 - LFCP:[MD5.278E56B84560224906FD8C8DB78185D6] - 13/01/2012 - 20:14:27 ---A- - C:\WINDOWS\Prefetch\HU6IOONS.EXE-1F7A5535.pf

O45 - LFCP:[MD5.4774C7FA63385FE7F59A6BF09B8F130F] - 13/01/2012 - 20:15:58 ---A- - C:\WINDOWS\Prefetch\MALWAREBYTES-ANTI-MALWARE_MAL-19CB31DE.pf

O45 - LFCP:[MD5.F1AC8007167C347C292B1777244C658E] - 13/01/2012 - 20:16:06 ---A- - C:\WINDOWS\Prefetch\MALWAREBYTES-ANTI-MALWARE_MAL-11BAF485.pf

O45 - LFCP:[MD5.721D6A164A2ED8291496BF79094AE76C] - 13/01/2012 - 20:16:11 ---A- - C:\WINDOWS\Prefetch\MBAMGUI.EXE-17BFFE8F.pf

O45 - LFCP:[MD5.E72D4B7BA22E138EF8F55238B83884F4] - 13/01/2012 - 20:16:56 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-396DEA2C.pf

O45 - LFCP:[MD5.CD1270BD73A78DE45396CF6BA5093A39] - 13/01/2012 - 20:23:33 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4C50DFCF.pf

O45 - LFCP:[MD5.46A13665A1FE25239C00E11D923A801E] - 13/01/2012 - 20:25:31 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-1120D71A.pf

O45 - LFCP:[MD5.700BF5B613ACAE5F53896E9AE591C91A] - 13/01/2012 - 20:27:36 ---A- - C:\WINDOWS\Prefetch\4D1.EXE-2FD77DFE.pf

O45 - LFCP:[MD5.7BA23886CAD319D4871B859CD482E001] - 13/01/2012 - 20:28:34 ---A- - C:\WINDOWS\Prefetch\REGEDIT.EXE-2AE3423E.pf

O45 - LFCP:[MD5.EB3471392C6D97A1866E3A044CF5F876] - 13/01/2012 - 20:30:22 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-0B14C27D.pf

O45 - LFCP:[MD5.7DBEFC0C9B6F721D8C5256811BBB2A7A] - 13/01/2012 - 20:38:08 ---A- - C:\WINDOWS\Prefetch\AVGARKT.EXE-11059116.pf

O45 - LFCP:[MD5.7119559CDEBF1B8D7461F5F0230ECE87] - 13/01/2012 - 20:47:41 ---A- - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1702AD5F.pf

O45 - LFCP:[MD5.9072070D7F6694D6445A3E5FFF25D4F5] - 14/01/2012 - 00:46:11 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0D37CDF0.pf

O45 - LFCP:[MD5.A60FABF9EEE20EFA90CB5A002B18035D] - 14/01/2012 - 23:12:36 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-1505313E.pf

O45 - LFCP:[MD5.921CE35267378EC0389D5C33F838F7EA] - 14/01/2012 - 23:14:15 ---A- - C:\WINDOWS\Prefetch\HSSSRV.EXE-23717768.pf

O45 - LFCP:[MD5.9A51189600D42F4F13564BC6DB1754B8] - 14/01/2012 - 23:15:13 ---A- - C:\WINDOWS\Prefetch\HSSWD.EXE-08D93BED.pf

O45 - LFCP:[MD5.B4A7668558CE115BD8796333A324EFA1] - 14/01/2012 - 23:15:15 ---A- - C:\WINDOWS\Prefetch\OPENVPNAS.EXE-389EC57D.pf

O45 - LFCP:[MD5.6549FDBAC590E4F0775453E29F87F1D9] - 14/01/2012 - 23:27:54 ---A- - C:\WINDOWS\Prefetch\JV16 POWERTOOLS.EXE-0547901D.pf

O45 - LFCP:[MD5.038B3FC6C388D49D13C8480F792C7A82] - 14/01/2012 - 23:36:56 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-09CFC2BC.pf

O45 - LFCP:[MD5.67EF70C27E77DDB35D0723582E69875C] - 16/01/2012 - 00:12:01 ---A- - C:\WINDOWS\Prefetch\SPEEDFAN.EXE-1CEF34A2.pf

O45 - LFCP:[MD5.0B3DD1838C4969B72DD65C0F309E6AF4] - 16/01/2012 - 01:16:17 ---A- - C:\WINDOWS\Prefetch\RTLDHCP.EXE-02AEA178.pf

O45 - LFCP:[MD5.410B271FDA7799F04DD831D7A766555F] - 16/01/2012 - 01:16:23 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-312BE1BF.pf

O45 - LFCP:[MD5.E1B01C6B9DB388024EA90BE1F89BF35C] - 16/01/2012 - 12:15:02 ---A- - C:\WINDOWS\Prefetch\JUSCHED.EXE-0E6FA1F7.pf

O45 - LFCP:[MD5.8B25FFBD2D272F9A4ED1CB2C524E814E] - 16/01/2012 - 12:19:37 ---A- - C:\WINDOWS\Prefetch\AAWSERVICE.EXE-1942D955.pf

O45 - LFCP:[MD5.609A66E53265350282EE6F811DC15766] - 16/01/2012 - 14:11:58 ---A- - C:\WINDOWS\Prefetch\AD-AWARE.EXE-02FDAFAE.pf

O45 - LFCP:[MD5.BDD202A2E59D75396F4A333324A2AD7C] - 16/01/2012 - 14:12:05 ---A- - C:\WINDOWS\Prefetch\AUTOLAUNCH.EXE-30046F7C.pf

O45 - LFCP:[MD5.FC1698240EBC3245195C59BC27E7FD66] - 16/01/2012 - 14:13:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-753F1DF3.pf

O45 - LFCP:[MD5.116D74D39C6342917376BB4948916ACB] - 16/01/2012 - 14:21:39 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-02121B1A.pf

O45 - LFCP:[MD5.0B8235F76EB07330677781750229DB98] - 16/01/2012 - 14:27:27 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.E499035EE1C7598D9B7DED11300F8CDE] - 16/01/2012 - 14:27:27 ---A- - C:\WINDOWS\Prefetch\SPOOLSV.EXE-3A613CE3.pf

O45 - LFCP:[MD5.C0D675C086B73A62849B85F0EC434914] - 16/01/2012 - 14:27:28 ---A- - C:\WINDOWS\Prefetch\APPSERVICES.EXE-0AC659C8.pf

O45 - LFCP:[MD5.FD50374313F6AB0C9881CA9D23AE9AA5] - 16/01/2012 - 14:27:28 ---A- - C:\WINDOWS\Prefetch\BLUESOLEILCS.EXE-264A70E9.pf

O45 - LFCP:[MD5.75C4C42B9D8AC8709B1955CDC86A663A] - 16/01/2012 - 14:27:28 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-0756FC6B.pf

O45 - LFCP:[MD5.33E7F02EB0686F65A77E61A7AD17ABA7] - 16/01/2012 - 14:27:29 ---A- - C:\WINDOWS\Prefetch\JQS.EXE-31B60334.pf

O45 - LFCP:[MD5.D0B6295180B9B76DA1BDBF81C148A6C8] - 16/01/2012 - 14:27:29 ---A- - C:\WINDOWS\Prefetch\MDM.EXE-1C8F90CC.pf

O45 - LFCP:[MD5.8F11DCC244AF039F173EB667B8F01124] - 16/01/2012 - 14:27:29 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-41C4C933.pf

O45 - LFCP:[MD5.63F0FA47E5A58E98660EC4A33E1A51CC] - 16/01/2012 - 14:27:31 ---A- - C:\WINDOWS\Prefetch\DAEMONU.EXE-2E3B89ED.pf

O45 - LFCP:[MD5.EC10E79C86ADE7CAF55EF0CC203D62BC] - 16/01/2012 - 14:27:31 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-692A3348.pf

O45 - LFCP:[MD5.A22E179E6200AF82A2BE40DFAD71E28E] - 16/01/2012 - 14:27:31 ---A- - C:\WINDOWS\Prefetch\SUPSERV.EXE-3B914DB7.pf

O45 - LFCP:[MD5.3299860001838E85FD51E9394BFA2EBE] - 16/01/2012 - 14:27:35 ---A- - C:\WINDOWS\Prefetch\PG_CTL.EXE-15979D5F.pf

O45 - LFCP:[MD5.784A5E2B522362163E60A9F3A7BC4B56] - 16/01/2012 - 14:27:42 ---A- - C:\WINDOWS\Prefetch\PNKBSTRA.EXE-10E31BEE.pf

O45 - LFCP:[MD5.5504C32BB0844C5DBF8CF2B5387A9DBE] - 16/01/2012 - 14:27:43 ---A- - C:\WINDOWS\Prefetch\POSTGRES.EXE-12E9C268.pf

O45 - LFCP:[MD5.5E8DB6EC43DBA796516CECF0262C167B] - 16/01/2012 - 14:27:46 ---A- - C:\WINDOWS\Prefetch\YAHOOAUSERVICE.EXE-0228763B.pf

O45 - LFCP:[MD5.9A208C4215A5AC01B4498D93B849C252] - 16/01/2012 - 14:27:47 ---A- - C:\WINDOWS\Prefetch\ADSERVICE.EXE-20CF41FB.pf

O45 - LFCP:[MD5.021A685655E9365EE5DA0B6DB37B4A4C] - 16/01/2012 - 14:27:51 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf

O45 - LFCP:[MD5.FE9968177259DB46B60E7390AD5D0D7C] - 16/01/2012 - 14:29:07 ---A- - C:\WINDOWS\Prefetch\COMUPDATUS.EXE-32769A2C.pf

O45 - LFCP:[MD5.2B899B66D48C9EA4A7A6C9652A79B316] - 16/01/2012 - 14:29:26 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0D449B4F.pf

O45 - LFCP:[MD5.9C98E3E100F4E53E435C81E69A892BEA] - 16/01/2012 - 14:30:03 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-34E8E471.pf

O45 - LFCP:[MD5.07211CF27984AE720E4274B170D247E4] - 16/01/2012 - 14:30:56 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3F872CE5.pf

O45 - LFCP:[MD5.61D3E258FB91E96724E094A97D605F18] - 16/01/2012 - 14:30:59 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F120771.pf

O45 - LFCP:[MD5.150B6BBE1F9ACB510B58903F358684D5] - 16/01/2012 - 14:31:02 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf

O45 - LFCP:[MD5.69807AD53877C89D6BC302347765B35C] - 16/01/2012 - 14:31:04 ---A- - C:\WINDOWS\Prefetch\BSHELPCS.EXE-09AEE70F.pf

O45 - LFCP:[MD5.D5CF9B2A62BB739032234133E305837A] - 16/01/2012 - 14:31:05 ---A- - C:\WINDOWS\Prefetch\UNSECAPP.EXE-16EB9856.pf

O45 - LFCP:[MD5.8D4E1FA484E13AFFC8E3710B2906EF31] - 16/01/2012 - 14:31:14 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf

O45 - LFCP:[MD5.7C6ACDB2A9E0EAA40F926147B8FF8E11] - 16/01/2012 - 14:31:24 ---A- - C:\WINDOWS\Prefetch\AAWTRAY.EXE-20780BC6.pf

O45 - LFCP:[MD5.53E5D4311606C99BE5E676844D828936] - 16/01/2012 - 14:32:10 ---A- - C:\WINDOWS\Prefetch\AWSC.EXE-1F3072F8.pf

O45 - LFCP:[MD5.FBBD1E1A5347D28F12190A5FF61CB799] - 16/01/2012 - 14:32:22 ---A- - C:\WINDOWS\Prefetch\AD-AWAREADMIN.EXE-08F79ADD.pf

O45 - LFCP:[MD5.93A5BF20A6CF18EB0DE13A607B153356] - 16/01/2012 - 15:38:14 ---A- - C:\WINDOWS\Prefetch\SOUNDMAN.EXE-2979F3F4.pf

O45 - LFCP:[MD5.237C2A06545B15AEE14A9BB091D81AE7] - 16/01/2012 - 15:38:15 ---A- - C:\WINDOWS\Prefetch\AGRSMMSG.EXE-071EDC2A.pf

O45 - LFCP:[MD5.2023DC3957968284F5C91D65693AAE7E] - 16/01/2012 - 15:38:16 ---A- - C:\WINDOWS\Prefetch\V0230MON.EXE-1C6A8DD5.pf

O45 - LFCP:[MD5.7B54CA319A1F77ED5FE8D53453F131D8] - 16/01/2012 - 15:38:22 ---A- - C:\WINDOWS\Prefetch\BTTRAY.EXE-2E78B9D8.pf

O45 - LFCP:[MD5.85F433090F4270DE8316A41EF28F2715] - 16/01/2012 - 15:38:23 ---A- - C:\WINDOWS\Prefetch\NWIZ.EXE-15CFC77C.pf

O45 - LFCP:[MD5.3D0890655DE1A42385081C8252367466] - 16/01/2012 - 15:38:23 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-764DD81D.pf

O45 - LFCP:[MD5.42EB6A3D42B5A0D650D58D542F5869AB] - 16/01/2012 - 15:38:24 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-31808646.pf

O45 - LFCP:[MD5.14D7A8FA365B483A38428E2F74E79A52] - 16/01/2012 - 15:38:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-6ACD0C83.pf

O45 - LFCP:[MD5.CE466487D579FCF3094CA36584780913] - 16/01/2012 - 15:38:29 ---A- - C:\WINDOWS\Prefetch\CTFMON.EXE-05E57A5E.pf

O45 - LFCP:[MD5.A43172E7A89C097FC38B7D11D259F8A9] - 16/01/2012 - 15:38:31 ---A- - C:\WINDOWS\Prefetch\CIITEB.EXE-27943EA5.pf

O45 - LFCP:[MD5.34AF0E7E884AE84E547BC76D35757A10] - 16/01/2012 - 15:38:31 ---A- - C:\WINDOWS\Prefetch\TEATIMER.EXE-0390E8A7.pf

O45 - LFCP:[MD5.5144B707EB5B1AEFD6239393337B6D4F] - 16/01/2012 - 15:38:34 ---A- - C:\WINDOWS\Prefetch\CHRONOSXP.EXE-2E004263.pf

O45 - LFCP:[MD5.4CB223F6DBD9E50923C3A1BEC359BD01] - 16/01/2012 - 15:38:47 ---A- - C:\WINDOWS\Prefetch\RTWLAN.EXE-0E6FD18F.pf

O45 - LFCP:[MD5.43AD4956EC7365E317A757EB2DA8854C] - 16/01/2012 - 15:46:44 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4847B08D.pf

O45 - LFCP:[MD5.0E24A92362E12C2018EBBA7FA0F6DFCE] - 16/01/2012 - 16:08:05 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-06188867.pf

O45 - LFCP:[MD5.E542AAC66184697FAAC18D998A75A9EA] - 16/01/2012 - 17:07:38 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-6E8D4657.pf

O45 - LFCP:[MD5.DB552DD8D590C2BF90D97DA87F98E03E] - 16/01/2012 - 17:07:48 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-201490BB.pf

O45 - LFCP:[MD5.95574885AEE0C03FC6F2EBA84D5CDD03] - 16/01/2012 - 17:18:29 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf

O45 - LFCP:[MD5.759F877DC3609EE46AF7D8FA6264E3E6] - 16/01/2012 - 17:24:19 ---A- - C:\WINDOWS\Prefetch\MSCORSVW.EXE-310BC412.pf

O45 - LFCP:[MD5.DE93EBBA321C3E732C552A169B0CCB9C] - 16/01/2012 - 17:28:28 ---A- - C:\WINDOWS\Prefetch\TASKMGR.EXE-06144C13.pf

O45 - LFCP:[MD5.9AFB5DA55AC3564D07EDB2246879F4E2] - 16/01/2012 - 17:30:16 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-160E1F62.pf

O45 - LFCP:[MD5.C1C75C20F2C2056C1CA176CC7ECF327A] - 16/01/2012 - 17:32:06 ---A- - C:\WINDOWS\Prefetch\SF.BIN-054CBBDF.pf

O45 - LFCP:[MD5.FE14AA182D5076DE4B550B927F14230F] - 16/01/2012 - 17:32:08 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-034B0549.pf

O45 - LFCP:[MD5.3A11E07A1661A7E9970769BE02047BD8] - 16/01/2012 - 17:32:14 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-2D5FBD18.pf

~ Scan Prefetcher in 00mn 02s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\BitComet\BitComet.exe" [Enabled] .(.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe" [Enabled] .(...) -- C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe" [Enabled] .(.Crytek - Far Cry.) -- C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Games\Age of Empires III\age3.exe" [Enabled] .(.Ensemble Studios - Age of Empires 3.) -- C:\Program Files\Microsoft Games\Age of Empires III\age3.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Wolfenstein - Enemy Territory\ET.exe" [Enabled] .(...) -- C:\Program Files\Wolfenstein - Enemy Territory\ET.exe

O47 - AAKE:Key Export SP - "C:\Program Files\DelphineSoft\Moto Racer 3\MR3.EXE" [Disabled] .(.Delphine Software International - Moto Racer 3 PC.) -- C:\Program Files\DelphineSoft\Moto Racer 3\MR3.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpnsvr.exe" [Disabled] .(.Microsoft Corporation - Microsoft DirectPlay8 Server.) -- C:\WINDOWS\system32\dpnsvr.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\rtcshare.exe" [Enabled] .(.Microsoft Corporation - Partage de l'application RTC.) -- C:\WINDOWS\system32\rtcshare.exe

O47 - AAKE:Key Export SP - "C:\Program Files\NetMeeting\conf.exe" [Enabled] .(.Microsoft Corporation - Windows® NetMeeting®.) -- C:\Program Files\NetMeeting\conf.exe

O47 - AAKE:Key Export SP - "C:\Program Files\JoWooD\Panzer Elite Action - Dunes Of War\pea.exe" [Enabled] .(...) -- C:\Program Files\JoWooD\Panzer Elite Action - Dunes Of War\pea.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\PnkBstrA.exe" [Enabled] .(...) -- C:\WINDOWS\system32\PnkBstrA.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\PnkBstrB.exe" [Enabled] .(...) -- C:\WINDOWS\system32\PnkBstrB.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Panzer Elite Action\Panzer Elite Action\pea.exe" [Enabled] .(...) -- C:\Program Files\Panzer Elite Action\Panzer Elite Action\pea.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [Enabled] .(.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre1.6.0_03\bin\javaw.exe" [Disabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_03\bin\javaw.exe

O47 - AAKE:Key Export SP - "C:\Program Files\SopCast\SopCast.exe" [Enabled] .(.www.sopcast.com - SopCast Main Application.) -- C:\Program Files\SopCast\SopCast.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TVAnts\Tvants.exe" [Enabled] .(.Zhejiang University - TVAnts.) -- C:\Program Files\TVAnts\Tvants.exe

O47 - AAKE:Key Export SP - "C:\Program Files\SopCast\adv\SopAdver.exe" [Enabled] .(.www.sopcast.com - SopCast Adver.) -- C:\Program Files\SopCast\adv\SopAdver.exe

O47 - AAKE:Key Export SP - "C:\Program Files\SopCast\sopvod.exe" [Enabled] .(...) -- C:\Program Files\SopCast\sopvod.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe" [Enabled] .(.Nero Software AG - Nero ShowTime.) -- C:\Program Files\Ahead\Nero ShowTime\ShowTime.exe

O47 - AAKE:Key Export SP - "C:\Program Files\SightSpeed\SightSpeed.exe" [Enabled] .(.SightSpeed Inc. - SightSpeed.) -- C:\Program Files\SightSpeed\SightSpeed.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TmNationsForever\TmForever.exe" [Enabled] .(...) -- C:\Program Files\TmNationsForever\TmForever.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TVUPlayer\TVUPlayer.exe" [Enabled] .(.TVU networks - TVUPlayer Component.) -- C:\Program Files\TVUPlayer\TVUPlayer.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" [Enabled] .(.Mozilla Messaging - Thunderbird.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe

O47 - AAKE:Key Export SP - "C:\Program Files\ICQ6.5\ICQ.exe" [Enabled] .(.ICQ, LLC. - ICQ.) -- C:\Program Files\ICQ6.5\ICQ.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\javaw.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\java.exe" [Enabled] .(.Oracle Corporation - Java Platform SE binary.) -- C:\WINDOWS\system32\java.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Opera\opera.exe" [Enabled] .(.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\opera.exe

O47 - AAKE:Key Export SP - "C:\Program Files\eMule\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- C:\Program Files\eMule\emule.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\IPCamera.exe" [Enabled] .(.Pas de propriétaire - IPCamera MFC Application.) -- C:\WINDOWS\system32\IPCamera.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe" [Enabled] .(.Ubisoft - launcher Application.) -- C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

O47 - AAKE:Key Export SP - "E:\Netcam\Config.exe" [Enabled] .(...) -- E:\Netcam\Config.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Earth\plugin\geplugin.exe" [Enabled] .(.Google - Google Earth.) -- C:\Program Files\Google\Google Earth\plugin\geplugin.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Earth\client\googleearth.exe" [Enabled] .(.Google - Google Earth.) -- C:\Program Files\Google\Google Earth\client\googleearth.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

O47 - AAKE:Key Export SP - "C:\Program Files\VideoLAN\VLC\vlc.exe" [Enabled] .(...) -- C:\Program Files\VideoLAN\VLC\vlc.exe

O47 - AAKE:Key Export SP - "C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\F4\ClientUpdater\ClientUpdater.exe" [Enabled] .(.F4.) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\F4\ClientUpdater\Clie

O47 - AAKE:Key Export SP - "C:\Program Files\Empire of Sports\EmpireOfSports.exe" [Enabled] .(.Empire of Sports Developments Ltd - Empire of Sports.) -- C:\Program Files\Empire of Sports\EmpireOfSports.exe

O47 - AAKE:Key Export SP - "C:\Program Files\OkMap\bin\OkMap.exe" [Enabled] .(.GianPaoloSaliola - OkMap - Mapping software.) -- C:\Program Files\OkMap\bin\OkMap.exe

O47 - AAKE:Key Export SP - "C:\Program Files\DNA\btdna.exe" [Enabled] .(.BitTorrent, Inc. - DNA.) -- C:\Program Files\DNA\btdna.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" [Enabled] .(...) -- C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Weezo\Apache\bin\weezoHttpd.exe" [Enabled] .(.Apache Software Foundation - Apache HTTP Server.) -- C:\Program Files\Weezo\Apache\bin\weezoHttpd.exe

O47 - AAKE:Key Export SP - "C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe" [Enabled] .(.IVT Corporation - Bluetooth Application.) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe

O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O47 - AAKE:Key Export SP - "C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe" [Enabled] .(.Realtek Semiconductor Corp. - RtWLan ( For WinXP/2003) Application.) -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe

O47 - AAKE:Key Export SP - "C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe" [Enabled] .(.Realtek - RtlDHCP.) -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RTLDHCP.exe

O47 - AAKE:Key Export SP - "C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" [Enabled] .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

~ Scan Keys in 00mn 08s

 

 

 

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nm.sys . (...) -- C:\WINDOWS\system32\Drivers\nm.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{00fd8610-06bf-11e0-96a5-0014d16c7245}\AutoRun\command - Clé orpheline

O51 - MPSK:{026052c1-94ff-11db-a14a-806d6172696f}\AutoRun\command. (...) -- D:\ASUSACPI.exe (.not file.)

O51 - MPSK:{130e8e66-0168-11e0-96a3-0013d4bc8042}\AutoRun\command - Clé orpheline

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers\"MSVideo.V0230VFW"="V0230Vfw.drv" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Ligos Corporation - Ligos Indeo® Video 3.2.) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Ligos Corporation - Ligos Indeo® Video 3.2.) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Ligos Corporation - Indeo® Audio Software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Ligos Corporation - Ligos Indeo® Video 5.11.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"VIDC.I420"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- C:\WINDOWS\system32\i420vfw.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \Drivers32\"msacm.voxacm160"="vct3216.acm" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm

O52 - TDSD: \Drivers32\"msacm.scg726"="scg726.acm" . (.SHARP Corporation - SHARP G.726 ACM Audio Decoder.) -- C:\WINDOWS\system32\Scg726.acm

O52 - TDSD: \Drivers32\"msacm.alf2cd"="alf2cd.acm" . (.NCT Company - NCT ALF2CD Audio CODEC.) -- C:\WINDOWS\system32\alf2cd.acm

O52 - TDSD: \Drivers32\"msacm.ac3acm"="AC3ACM.acm" . (.fccHandler - AC-3 ACM Decompressor.) -- C:\WINDOWS\system32\AC3ACM.acm

O52 - TDSD: \Drivers32\"vidc.dvsd"="mcdvd_32.dll" . (.MainConcept - MainConcept DV Codec.) -- C:\WINDOWS\system32\mcdvd_32.dll

O52 - TDSD: \Drivers32\"vidc.asv2"="asusasv2.dll" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\system32\yv12vfw.dll

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® Audio Software" . (.Ligos Corporation - Indeo® Audio Software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Ligos Indeo® Video 5.11" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"mpg4c32.dll"="MS MPEG-4 v1,2,3 driver 4.1.0.3927" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"ir41_32.ax"="Indeo® Video Interactive R4.5" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"iyvu9_32.dll"="Indeo® Video RAW YVU9" . (...) -- C:\WINDOWS\system32\iyvu9_32.dll

O52 - TDSD: \drivers.desc\"ir32_32.dll"="Indeo® Video R3.2" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"vct3216.acm"="Voxware Compression Toolkit" . (.Voxware, Inc. - Voxware Audio Compression Manager Driver.) -- C:\WINDOWS\system32\vct3216.acm

O52 - TDSD: \drivers.desc\"scg726.acm"="Sharp G.726 Audio Decoder" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"alf2cd.acm"="alf2cd.acm" . (.NCT Company - NCT ALF2CD Audio CODEC.) -- C:\WINDOWS\system32\alf2cd.acm

O52 - TDSD: \drivers.desc\"AC3ACM.acm"="AC-3 ACM Decompressor" . (.fccHandler - AC-3 ACM Decompressor.) -- C:\WINDOWS\system32\AC3ACM.acm

O52 - TDSD: \drivers.desc\"mcdvd_32.dll"="mcdvd_32.dll" . (.MainConcept - MainConcept DV Codec.) -- C:\WINDOWS\system32\mcdvd_32.dll

O52 - TDSD: \drivers.desc\"asusasv2.dll"="ASUS ASV2 CODEC" . (...) -- (.not file.)

~ Scan Keys in 00mn 01s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\AVFX Engine [Key] . (.Creative Technology Ltd. - Start Advanced Video FX Engine Application.) -- C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe

O53 - SMSR:HKLM\...\startupreg\BJCFD [Key] . (...) -- C:\Program Files\BroadJump\Client Foundation\CFD.exe

O53 - SMSR:HKLM\...\startupreg\boincmgr [Key] . (.Space Sciences Laboratory - BOINC Manager for Windows.) -- C:\Program Files\BOINC\boincmgr.exe

O53 - SMSR:HKLM\...\startupreg\boinctray [Key] . (.Space Sciences Laboratory - BOINC System Tray for Windows.) -- C:\Program Files\BOINC\boinctray.exe

O53 - SMSR:HKLM\...\startupreg\CanonMyPrinter [Key] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

O53 - SMSR:HKLM\...\startupreg\CanonSolutionMenu [Key] . (.CANON INC. - CNSLMAIN.) -- C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe

O53 - SMSR:HKLM\...\startupreg\Creative Live! Cam Manager [Key] . (.Creative Technology Ltd. - Live! Cam Manager Application.) -- C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe

O53 - SMSR:HKLM\...\startupreg\DAEMON Tools [Key] . (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe

O53 - SMSR:HKLM\...\startupreg\EssentialPIM [Key] . (...) -- C:\Program Files\EssentialPIM\EssentialPIM.exe

O53 - SMSR:HKLM\...\startupreg\Google Desktop Search [Key] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O53 - SMSR:HKLM\...\startupreg\ICQ [Key] . (.ICQ, LLC. - ICQ.) -- C:\Program Files\ICQ6.5\ICQ.exe

O53 - SMSR:HKLM\...\startupreg\IJNetworkScanUtility [Key] . (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe

O53 - SMSR:HKLM\...\startupreg\LightScribe Control Panel [Key] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe

O53 - SMSR:HKLM\...\startupreg\Messenger (Yahoo!) [Key] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\MESSEN~1\YahooMessenger.exe

O53 - SMSR:HKLM\...\startupreg\Motive SmartBridge [Key] . (.Motive Communications, Inc. - Motive SmartBridge.) -- C:\Program Files\Club-Internet\Le Compagnon Club\SmartBridge\MotiveSB.exe

O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O53 - SMSR:HKLM\...\startupreg\NeroFilterCheck [Key] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe

O53 - SMSR:HKLM\...\startupreg\NotebookHardwareControl [Key] . (.http://www.pbus-167.com - Notebook Hardware Control.) -- C:\Program Files\Notebook Hardware Control\nhc.exe

O53 - SMSR:HKLM\...\startupreg\PeerGuardian [Key] . (.Methlabs - PeerGuardian 2.) -- C:\Program Files\PeerGuardian2\pg2.exe

O53 - SMSR:HKLM\...\startupreg\Sony Ericsson PC Suite [Key] . (.Sony Ericsson Mobile Communications AB - Sony Ericsson PC Suite.) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe

O53 - SMSR:HKLM\...\startupreg\TkBellExe [Key] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

O53 - SMSR:HKLM\...\startupreg\Vidalia [Key] . (...) -- C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe

O53 - SMSR:HKLM\...\startupreg\Yahoo! Pager [Key] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

~ Scan SMSR Keys in 00mn 02s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=157

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.B6DE0336F9F4B687B4FF57939F7B657A] - 28/11/2011 - 18:48:49 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [30808]

O58 - SDL:[MD5.023867B6606FBABCDD52E089C4A507DA] - 09/07/2010 - 17:58:52 ---A- . (.Cisco Systems, Inc. - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\system32\drivers\AegisP.sys [21361]

O58 - SDL:[MD5.D9F2F301A6907C7C77EC4CC7E59C011F] - 07/06/2006 - 16:55:09 R--A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [2410076]

O58 - SDL:[MD5.C881453898EEC64027274EBB3C8CBC0F] - 26/10/2005 - 09:08:26 R---- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\alcxwdm.sys [3786944]

O58 - SDL:[MD5.62271FF14BAA810323AC816C5D355BA9] - 09/03/2005 - 15:53:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdK8.sys [43008]

O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 13/08/2004 - 03:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys [5810]

O58 - SDL:[MD5.B979979AB8027F7F53FB16EC4229B7DB] - 10/09/1999 - 11:06:00 ---A- . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\WINDOWS\system32\drivers\Aspi32.sys [25244]

O58 - SDL:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 29/03/2000 - 15:17:42 ---A- . (...) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS [5824]

O58 - SDL:[MD5.94442E3029FF6C9F08140FE6718AF4FB] - 29/01/2007 - 16:12:52 ---A- . (.ASUSTeK COMPUTER INC. - AsusVRC.) -- C:\WINDOWS\system32\drivers\AsusVRC.sys [18432]

O58 - SDL:[MD5.054DF24C92B55427E0757CFFF160E4F2] - 28/11/2011 - 18:51:50 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [20568]

O58 - SDL:[MD5.05A9CF1C69B553260C4927E33F0BF3EC] - 28/11/2011 - 18:51:59 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [105176]

O58 - SDL:[MD5.EF0E9AD83380724BD6FBBB51D2D0F5B8] - 28/11/2011 - 18:52:02 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [111320]

O58 - SDL:[MD5.352D5A48EBAB35A7693B048679304831] - 28/11/2011 - 18:52:19 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [34392]

O58 - SDL:[MD5.8D34D2B24297E27D93E847319ABFDEC4] - 28/11/2011 - 18:53:53 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\system32\drivers\aswSnx.sys [435032]

O58 - SDL:[MD5.010012597333DA1F46C3243F33F8409E] - 28/11/2011 - 18:53:35 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [314456]

O58 - SDL:[MD5.F9F84364416658E9786235904D448D37] - 28/11/2011 - 18:52:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [52952]

O58 - SDL:[MD5.5B80E84AF6B02ECAB72DAE9AFEE06309] - 30/09/2007 - 21:00:44 ---A- . (...) -- C:\WINDOWS\system32\drivers\atksgt.sys [165376]

O58 - SDL:[MD5.EC08D1625F5C6CF2A57B79EB35186F8C] - 18/01/2007 - 13:00:28 ---A- . (.GRISOFT, s.r.o. - AVG7 Clean Driver.) -- C:\WINDOWS\system32\drivers\AvgArCln.sys [3968]

O58 - SDL:[MD5.E8054A423E5D2BDAE6062BAB6DA159C4] - 31/01/2007 - 14:33:46 ---A- . (.GRISOFT, s.r.o. - AVG Anti-Rootkit Driver.) -- C:\WINDOWS\system32\drivers\avgarkt.sys [5632]

O58 - SDL:[MD5.2903D25016F12415834D4EC88901D258] - 05/06/2009 - 12:00:59 ---A- . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) -- C:\WINDOWS\system32\drivers\avgldx86.sys [96520]

O58 - SDL:[MD5.1068D68BB3180E16B32985E329E474CD] - 05/06/2009 - 12:00:59 ---A- . (.GRISOFT, s.r.o. - AVG Resident Shield Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgmfx86.sys [26184]

O58 - SDL:[MD5.ECE6C4E9E241FA7849B88805F4359653] - 05/06/2009 - 12:00:59 ---A- . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) -- C:\WINDOWS\system32\drivers\avgtdix.sys [75272]

O58 - SDL:[MD5.B990976940E0E93B4932CCCB536F446D] - 19/03/2007 - 10:59:16 ---A- . (.Broadcom Corporation - USB Driver for Bluetooth Adapter.) -- C:\WINDOWS\system32\drivers\bcbthub.sys [148830]

O58 - SDL:[MD5.05C2204229CADC0A74553ED71A6E3E6F] - 17/06/2009 - 14:02:08 ---A- . (.IVT Corporation. - Bluelet Audio Driver.) -- C:\WINDOWS\system32\drivers\blueletaudio.sys [33800]

O58 - SDL:[MD5.61CC3E8FE7A041630EC8C701A2594A36] - 17/06/2009 - 14:02:16 ---A- . (.IVT Corporation. - Bluelet Audio Driver.) -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys [27528]

O58 - SDL:[MD5.CD4113699CE34FE4B63C99AAA13F10C1] - 08/07/2009 - 10:17:36 ---A- . (.IVT Corporation. - Bluetooth USB Device Driver.) -- C:\WINDOWS\system32\drivers\btcusb.sys [39304]

O58 - SDL:[MD5.AC2E61482A57EA50730F8C2679F37040] - 17/06/2009 - 14:01:36 ---A- . (.IVT Corporation. - Bluetooth HID BUS Driver.) -- C:\WINDOWS\system32\drivers\BtHidBus.sys [20744]

O58 - SDL:[MD5.6783C5C81BFB640469468A80DFA1CCB3] - 17/06/2009 - 14:02:46 ---A- . (...) -- C:\WINDOWS\system32\drivers\btnetBus.sys [29192]

O58 - SDL:[MD5.43467DE7DB414AC70A88FC2FA0916EF3] - 17/06/2009 - 14:01:50 ---A- . (.IVT Corporation. - Bluetooth PAN Network Adapter Driver.) -- C:\WINDOWS\system32\drivers\btnetdrv.sys [14088]

O58 - SDL:[MD5.4F26303BECBB7CC5CA8FF39593124CF2] - 22/11/2006 - 13:41:18 ---A- . (.IVT Corporation. - Bluetooth Network Filter Driver.) -- C:\WINDOWS\system32\drivers\BTNetFilter.sys [22416]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 05/08/2004 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.097A0A4899B759A4F032BD464963B4BE] - 27/03/2009 - 01:16:28 ---A- . (.Windows ® Codename Longhorn DDK provider - CPUID Driver.) -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys [12672]

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/01/2007 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\dtscsi.sys [223128]

O58 - SDL:[MD5.0DAF3544804650526751C478AECCCE63] - 14/06/2006 - 12:44:30 ---A- . (.ASUSTeK Computer Inc. - ASUS Kernel Mode Driver for NT.) -- C:\WINDOWS\system32\drivers\EIO.sys [12288]

O58 - SDL:[MD5.1FF5CBB0147FBB2859AB3F505D220D79] - 31/01/2011 - 13:30:38 ---A- . (.Ekahau Inc. - Ekahau Protocol Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\ekauio.sys [12800]

O58 - SDL:[MD5.16EBD8BF1D5090923694CC972C7CE1B4] - 17/09/2008 - 13:14:00 R--A- . (.EnTech Taiwan - Pas de description.) -- C:\WINDOWS\system32\drivers\Entech.sys [27672]

O58 - SDL:[MD5.4198F23618E7C8BCD24CC108C36F93A3] - 19/03/2007 - 10:59:18 ---A- . (.Broadcom - BBTFW_2_15_007.) -- C:\WINDOWS\system32\drivers\fw203x.sys [116021]

O58 - SDL:[MD5.0E4BB313310498015856F35473E119F7] - 18/11/2007 - 22:05:56 ---A- . (.GMER - GMER Driver http://www.gmer.net.) -- C:\WINDOWS\system32\drivers\gmer.sys [69905]

O58 - SDL:[MD5.01CBB39001AFDA1152F3FCE15AB646EA] - 17/06/2009 - 14:01:42 ---A- . (.IVT Corporation. - IVT Bluetooth Bus Device Driver.) -- C:\WINDOWS\system32\drivers\IvtBtBus.sys [25480]

O58 - SDL:[MD5.B7C19EC8B0DD7EFA58AD41FFEB8B8CDA] - 12/08/2010 - 13:15:20 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\WINDOWS\system32\drivers\Lbd.sys [64288]

O58 - SDL:[MD5.708AD0B2DB1E5869FB9EB4F682317E75] - 28/10/2011 - 11:49:20 ---A- . (.© Everstrike Software - Lock Folder XP Filter Driver.) -- C:\WINDOWS\system32\drivers\LFSys.sys [75096]

O58 - SDL:[MD5.975B6CF65F44E95883F3855BAE8CECAF] - 30/09/2007 - 21:00:43 ---A- . (...) -- C:\WINDOWS\system32\drivers\lirsgt.sys [18048]

O58 - SDL:[MD5.C6D085C7045200143528136A43A65FDE] - 14/01/2008 - 11:06:32 ---A- . (.ManyCam LLC. - ManyCam Virtual Webcam, WDM Video Capture Driver.) -- C:\WINDOWS\system32\drivers\ManyCam.sys [21632]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.A9D90DA8C0033C34AE867A3378CB491B] - 03/11/2004 - 05:20:24 ---A- . (...) -- C:\WINDOWS\system32\drivers\MWhid.sys [13332]

O58 - SDL:[MD5.05F5FBF6641FB23340DAD28A5C375CDA] - 13/04/2008 - 12:21:02 ---A- . (...) -- C:\WINDOWS\system32\drivers\netbt.sys [162816]

O58 - SDL:[MD5.37260A293B6A89373AE76791E6CC5A12] - 23/09/2011 - 20:26:56 ---A- . (.pBUS-167 Software - Notebook Hardware Control (NHC) - Homepage, Downloads, Help, Docu, FAQ, News - www.NotebookHardwareControl.net - Notebook Hardware Control Device Driver.) -- C:\WINDOWS\system32\drivers\nhcDriver.sys [22528]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.6623E51595C0076755C29C00846C4EB2] - 01/06/2008 - 08:13:10 ---A- . (.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\system32\drivers\npf.sys [34064]

O58 - SDL:[MD5.4B54DCD6ADEE535DF80F07C59DDD8F14] - 08/10/2011 - 05:50:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows XP Miniport Driver, Version 285.58.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [12791488]

O58 - SDL:[MD5.0344AA9113DC16EEC379F4652020849D] - 18/08/2005 - 10:52:06 R--A- . (.NVIDIA Corporation - NVIDIA® nForce IDE Performance Driver.) -- C:\WINDOWS\system32\drivers\nvata.sys [93568]

O58 - SDL:[MD5.720CC533EECB65553BD86B139CA04433] - 05/04/2005 - 20:22:28 R--A- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\drivers\NVENETFD.sys [33536]

O58 - SDL:[MD5.5F9F545CC5904DD8765F84EE1D056406] - 05/04/2005 - 20:22:30 R--A- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\drivers\nvnetbus.sys [12928]

O58 - SDL:[MD5.F0C8AE1FEFB954367E2DA224AA97537D] - 05/04/2005 - 20:22:12 R--A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\drivers\nvnrm.sys [261888]

O58 - SDL:[MD5.3F7DF8E70889F74D0F8B5CAD7BC3BA45] - 05/04/2005 - 20:22:02 R--A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\drivers\nvsnpu.sys [208256]

O58 - SDL:[MD5.6C1618A07B49E3873582B6449E744088] - 19/09/2003 - 14:45:48 ---A- . (.Padus, Inc. - Padus® ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [21248]

O58 - SDL:[MD5.FBB543EE813688A8FDD8EE6F0E947744] - 24/10/2011 - 17:16:16 ---A- . (...) -- C:\WINDOWS\system32\drivers\PnkBstrK.sys [138160]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.B1DB1E76D94788B48D9C579F4439C71D] - 11/08/2011 - 13:46:46 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8192S USB NDIS Driver.) -- C:\WINDOWS\system32\drivers\RTL8192su.sys [606440]

O58 - SDL:[MD5.594FF5620661D1386475406E78CB6F2F] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 Driver.) -- C:\WINDOWS\system32\drivers\s0017bus.sys [86824]

O58 - SDL:[MD5.3FA76516F21FC7CF04689834B2B7325E] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017cm.sys [12200]

O58 - SDL:[MD5.3FA76516F21FC7CF04689834B2B7325E] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017cmnt.sys [12200]

O58 - SDL:[MD5.5B1078D9E27DF63656C39449492AE3E9] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emulation (WDM class reg.) -- C:\WINDOWS\system32\drivers\s0017cr.sys [10792]

O58 - SDL:[MD5.7258F550419D543BC5C8E80C578A5D54] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Modem Filter Driver.) -- C:\WINDOWS\system32\drivers\s0017mdfl.sys [15016]

O58 - SDL:[MD5.1DE4F6607FEB17A15DBD4F1B139E6D2F] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Modem WDM Driver.) -- C:\WINDOWS\system32\drivers\s0017mdm.sys [114600]

O58 - SDL:[MD5.9814E6BACC06D2526CD52981C7EEEDF0] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC Device Management Driver.) -- C:\WINDOWS\system32\drivers\s0017mgmt.sys [108328]

O58 - SDL:[MD5.2C62CD58225973F26682CD4F783DDEDE] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emulation (NDIS 5 Minipo.) -- C:\WINDOWS\system32\drivers\s0017nd5.sys [26024]

O58 - SDL:[MD5.F87C3422E84B2FB1B43E0A26247AD5A5] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB WMC OBEX Interface Device Driver.) -- C:\WINDOWS\system32\drivers\s0017obex.sys [104616]

O58 - SDL:[MD5.DF5E7360A0AFA5956BF75DA683D0679F] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Sony Ericsson Device 0017 USB Ethernet Emulation.) -- C:\WINDOWS\system32\drivers\s0017unic.sys [109736]

O58 - SDL:[MD5.985E0A43CF844A573FF254C847AD0BA9] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017wh.sys [12200]

O58 - SDL:[MD5.985E0A43CF844A573FF254C847AD0BA9] - 21/10/2008 - 10:22:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s0017whnt.sys [12200]

O58 - SDL:[MD5.AA786AD3A2684D39630744787B00E6F4] - 10/12/2007 - 14:22:14 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 Driver.) -- C:\WINDOWS\system32\drivers\s3017bus.sys [83880]

O58 - SDL:[MD5.9AC79D52487FF3B578CD5D914C49BF6F] - 10/12/2007 - 14:22:16 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s3017cm.sys [12200]

O58 - SDL:[MD5.9AC79D52487FF3B578CD5D914C49BF6F] - 10/12/2007 - 14:22:16 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s3017cmnt.sys [12200]

O58 - SDL:[MD5.C9C5D8BF5D9FDC8F80A5C7D8F545C02D] - 10/12/2007 - 14:22:16 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB Ethernet Emulation (WDM class reg.) -- C:\WINDOWS\system32\drivers\s3017cr.sys [10792]

O58 - SDL:[MD5.CBA4CA5BCE44084E98CE420FD6692D3A] - 10/12/2007 - 14:22:18 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB WMC Modem Filter Driver.) -- C:\WINDOWS\system32\drivers\s3017mdfl.sys [15016]

O58 - SDL:[MD5.68036EFF647970D6C0399789C8707CAD] - 10/12/2007 - 14:22:18 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB WMC Modem WDM Driver.) -- C:\WINDOWS\system32\drivers\s3017mdm.sys [110632]

O58 - SDL:[MD5.3672E7F9349BD98FD3F5AC33E7B2B1A6] - 10/12/2007 - 14:22:20 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB WMC Device Management Driver.) -- C:\WINDOWS\system32\drivers\s3017mgmt.sys [104616]

O58 - SDL:[MD5.B1133B37EB184AEF81D56B4302DBAE9C] - 10/12/2007 - 14:22:20 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB Ethernet Emulation (NDIS 5 Minipo.) -- C:\WINDOWS\system32\drivers\s3017nd5.sys [25512]

O58 - SDL:[MD5.D81B1D504AA1426622E7EC09F25130A9] - 10/12/2007 - 14:22:22 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB WMC OBEX Interface Device Driver.) -- C:\WINDOWS\system32\drivers\s3017obex.sys [100648]

O58 - SDL:[MD5.7B95C53EA8BB585013767EEF2875C0A0] - 10/12/2007 - 14:22:22 ---A- . (.MCCI Corporation - Sony Ericsson Device 3017 USB Ethernet Emulation.) -- C:\WINDOWS\system32\drivers\s3017unic.sys [110120]

O58 - SDL:[MD5.C40B55BA0CA3FC298AFA628BEC2D06BD] - 10/12/2007 - 14:22:22 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s3017wh.sys [12200]

O58 - SDL:[MD5.C40B55BA0CA3FC298AFA628BEC2D06BD] - 10/12/2007 - 14:22:22 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\s3017whnt.sys [12200]

O58 - SDL:[MD5.0505DA5D357F18A5D42FC5DEDE6BC9A0] - 30/06/2011 - 20:24:42 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\WINDOWS\system32\drivers\SBREDrv.sys [101720]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/11/2007 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.E5B56569A9F79B70314FEDE6C953641E] - 09/01/2008 - 12:28:34 ---A- . (.Sony Ericsson Mobile Communications - seehcri Driver.) -- C:\WINDOWS\system32\drivers\seehcri.sys [27632]

O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 10/08/2005 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\drivers\sfdrv01.sys [50688]

O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 16/05/2005 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\drivers\sfhlp02.sys [6656]

O58 - SDL:[MD5.D5A7E09D2C6A702809E49190D52ADC9F] - 03/11/2005 - 15:40:07 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\WINDOWS\system32\drivers\sfvfs02.sys [63488]

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 26/01/2007 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [664064]

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/02/2009 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd2365.sys [96384]

O58 - SDL:[MD5.16767DCE5814BC80AAA9B9C6CD2596A7] - 22/10/2002 - 12:58:06 R--A- . (.Susteen Inc. - USB-to-Serial Cable Driver.) -- C:\WINDOWS\system32\drivers\SUSCOM.SYS [40448]

O58 - SDL:[MD5.85557234B421D99C87D46E57248793F0] - 25/11/2002 - 03:46:16 ---A- . (.Syncrosoft GmbH - SynasUSB.sys.) -- C:\WINDOWS\system32\drivers\SynasUSB.sys [16896]

O58 - SDL:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 29/12/2011 - 00:57:26 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\taphss.sys [32768]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 05/08/2004 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.A0C643D5F8C60F12FAA6E3454DFE9C32] - 24/03/2006 - 00:00:00 ---A- . (.EyePower Games Pte. Ltd. - Advanced Video FX Filter Driver.) -- C:\WINDOWS\system32\drivers\V0230Vfx.sys [6272]

O58 - SDL:[MD5.5A2D30399A114FC4863539F02C484B11] - 20/11/2006 - 00:02:00 ---A- . (.Creative Technology Ltd. - Video Streaming and Capture Device Driver.) -- C:\WINDOWS\system32\drivers\V0230VID.sys [500608]

O58 - SDL:[MD5.34115E1AA46CC40D2AE127F7D4A3F13C] - 08/05/2008 - 17:32:48 ---A- . (...) -- C:\WINDOWS\system32\drivers\V2WCDRV.sys [1056984]

O58 - SDL:[MD5.96A478EDFB1FBF1FC663BEB09B4175A8] - 19/12/2011 - 14:11:58 ---A- . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys [91440]

O58 - SDL:[MD5.025C2A8CBA0AB595D3461D278EFF5793] - 17/06/2009 - 14:01:04 ---A- . (.IVT Corporation. - Bluetooth Serial Port Driver.) -- C:\WINDOWS\system32\drivers\VComm.sys [14856]

O58 - SDL:[MD5.95DDF14292354887D7D8C8A0881C7485] - 17/06/2009 - 14:01:10 ---A- . (.IVT Corporation. - Bluetooth VcommMgr Driver.) -- C:\WINDOWS\system32\drivers\VcommMgr.sys [32392]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.87ABB3DE0A2D8936245579316C7BB87C] - 17/06/2009 - 14:01:18 ---A- . (.IVT Corporation. - Bluetooth HID Mini driver.) -- C:\WINDOWS\system32\drivers\VHIDMini.sys [17416]

O58 - SDL:[MD5.BB2C5A7A555B387B85481B8BDE5370D7] - 27/02/2008 - 09:54:00 ---A- . (.Pas de propriétaire - WLAN NDIS 5.0 User Mode Control Driver.) -- C:\WINDOWS\system32\drivers\WLNdis50.sys [20480]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.77EBF3E9386DAA51551AF429052D88D0] - 03/04/1996 - 20:33:26 ---A- . (...) -- C:\WINDOWS\system32\giveio.sys [5248]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 01/01/2005 - 01:43:08 ---A- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\WINDOWS\system32\npptNT2.sys [4682]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.D74375BE63DCA31E6145248E4278893E] - 22/10/2003 - 09:54:14 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis4.sys [16848]

O58 - SDL:[MD5.FC6BAFC20114160A6291C1C45545F137] - 22/10/2003 - 09:54:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis5.sys [17162]

O58 - SDL:[MD5.3FA2E254BFBCE52B3C6F1BF23AAB6911] - 18/03/2011 - 17:08:54 ---A- . (.Almico Software - SpeedFan x32 Driver.) -- C:\WINDOWS\system32\speedfan.sys [25240]

~ Scan Drivers in 00mn 10s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\APPEND.EX_ [6905]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ARP.EX_ [7828]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\BCKGZM.EX_ [18419]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\BOOTOK.EX_ [1689]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\BOOTVRFY.EX_ [2111]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CALC.EX_ [41191]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CB32.EX_ [1321]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHANGE.EX_ [5193]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHARMAP.EX_ [36622]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHGLOGON.EX_ [7349]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHGPORT.EX_ [8778]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHGUSR.EX_ [7867]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHKDSK.EX_ [4977]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHKNTFS.EX_ [5000]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CHKRZM.EX_ [19107]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CIDAEMON.EX_ [4083]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CKCNV.EX_ [3536]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CLEANRI.EX_ [2078]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\COMEMPTY.DA_ [18429]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\COMP.EX_ [6969]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\COMPACT.EX_ [7128]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CONTROL.EX_ [3138]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CONVERT.EX_ [6454]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CPROFILE.EX_ [10055]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DEBUG.EX_ [14062]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DISKPERF.EX_ [7275]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DLLHST3G.EX_ [2103]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DOSKEY.EX_ [4957]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DRWATSON.EX_ [15627]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DRWTSN32.EX_ [19259]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DSSEC.DA_ [9162]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EDLIN.EX_ [8894]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ESENTUTL.EX_ [16365]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EVENTVWR.EX_ [3929]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EXE2BIN.EX_ [5690]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FASTOPEN.EX_ [483]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FC.EX_ [6855]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FILELIST.DA_ [34177]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FIND.EX_ [4361]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FINGER.EX_ [3825]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FIXMAPI.EX_ [1186]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FLATTEMP.EX_ [7795]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FONT.DA_ [459]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FREECELL.EX_ [27545]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FSUTIL.EX_ [17385]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FXSSEND.EX_ [5314]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\GDI.EX_ [10844]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HELPHOST.EX_ [43531]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HOSTNAME.EX_ [3249]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HRTZZM.EX_ [18841]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HYPERTRM.EX_ [15531]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ICWTUTOR.EX_ [39431]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IPSEC6.EX_ [21303]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ISIGNUP.EX_ [2366]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LABEL.EX_ [4318]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMEKRMIG.EX_ [24627]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMEPADSV.EX_ [103857]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPDADM.EX_ [20793]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPUEX.EX_ [12270]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMKRINST.EX_ [32633]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LIGHTS.EX_ [5727]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LNKSTUB.EX_ [10910]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LODCTR.EX_ [2247]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LOGOFF.EX_ [8205]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LPQ.EX_ [2668]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LPR.EX_ [3626]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MEM.EX_ [24718]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGISOL.EX_ [18326]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGPWD.EX_ [25873]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGWIZ_A.EX_ [67843]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MLANG.DA_ [111290]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MOUNTVOL.EX_ [3463]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MPNOTIFY.EX_ [11359]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MRINFO.EX_ [4877]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSCDEXNT.EX_ [447]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSG.EX_ [10316]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSHEARTS.EX_ [51953]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSINFO32.EX_ [18821]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSSWCHX.EX_ [2988]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSTSC.EX_ [117524]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NBTSTAT.EX_ [7796]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NLSFUNC.EX_ [4862]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NOISE.DA_ [494]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NOTIFLAG.EX_ [16663]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OEMBIOS.DA_ [4562]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OSCHOICE.EX_ [78317]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OSUNINST.EX_ [17877]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PATHPING.EX_ [9077]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PEER.EX_ [37147]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PENTNT.EX_ [4615]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFC009.DA_ [4931]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFC00C.DA_ [5601]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFD009.DA_ [4931]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFD00C.DA_ [5601]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFH009.DA_ [25761]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFH00C.DA_ [28987]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFI009.DA_ [25761]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFI00C.DA_ [28987]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PINBALL.DA_ [416896]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PING6.EX_ [17852]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PORTMON.EX_ [48780]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PRINT.EX_ [4088]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\QAPPSRV.EX_ [9174]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\QUERY.EX_ [5200]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\QUSER.EX_ [8984]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\QWINSTA.EX_ [10584]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RASAUTOU.EX_ [5649]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RASDIAL.EX_ [5698]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RECOVER.EX_ [3224]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REGEDT32.EX_ [1325]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REGINI.EX_ [16385]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REGISTER.EX_ [8019]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REGWIZ.EX_ [1877]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REPLACE.EX_ [5680]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RESET.EX_ [5190]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ROUTE.EX_ [7860]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ROUTEMON.EX_ [12991]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSM.EX_ [14794]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSMSINK.EX_ [11920]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSMUI.EX_ [22650]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSVP.EX_ [69403]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RUNAS.EX_ [7156]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RVSEZM.EX_ [18099]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RWINSTA.EX_ [8276]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SAPISVR.EX_ [15066]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SC.EX_ [11155]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETVER.EX_ [6123]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SFC.EX_ [4002]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHADOW.EX_ [8013]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHARE.EX_ [480]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHVLZM.EX_ [18077]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SNDVOL32.EX_ [56645]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SOL.EX_ [26370]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SPRESTRT.EX_ [4865]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SRDIAG.EX_ [20509]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SUBST.EX_ [4120]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SYNCAPP.EX_ [21070]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SYSEDIT.EX_ [8686]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SYSKEY.EX_ [11707]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SYSTRAY.EX_ [1370]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TASKMAN.EX_ [7280]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TCMSETUP.EX_ [4947]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TCPSVCS.EX_ [10520]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TFTP.EX_ [7785]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TFTPD.EX_ [9338]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TOURP.EX_ [3100518]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TRACERT6.EX_ [17171]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSCON.EX_ [8062]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSCUPGRD.EX_ [20663]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSDISCON.EX_ [7883]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSKILL.EX_ [8661]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSPROF.EX_ [7547]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TSSHUTDN.EX_ [8863]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TWUNK_16.EX_ [17001]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TWUNK_32.EX_ [10361]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UNLODCTR.EX_ [1663]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UNSECAPP.EX_ [9275]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\USER.EX_ [23407]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\VERIFIER.EX_ [32967]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\VSSADMIN.EX_ [13467]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\W32TM.EX_ [21516]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WATCHER.EX_ [18088]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WB32.EX_ [1581]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WCOM32.EX_ [34117]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINCHAT.EX_ [15768]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINHELP.EX_ [123100]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINHSTB.EX_ [3426]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINMGMT.EX_ [6166]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINMINE.EX_ [77990]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINMSD.EX_ [5349]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINSPOOL.EX_ [865]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WMPSTUB.EX_ [27756]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WOWDEB.EX_ [1237]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WOWEXEC.EX_ [5178]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WRITE.EX_ [2184]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WUPDMGR.EX_ [14490]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\XCCIHELP.EX_ [7203]

O61 - LFC:Last File Created 05/08/2004 - 13:00:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ZCLIENTM.EX_ [16951]

O61 - LFC:Last File Created 05/09/2001 - 04:24:02 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Petits utilitaires\ALC850_V5870_WHQL\ikernel.ex_ [344923]

O61 - LFC:Last File Created 06/06/2006 - 08:00:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\SESAER\Nouveau dossier (5)\philippe.chazal\Trouvé_sur_le_c_du_ panasonic\AEP ARCY\SOFREL\Sys_Install_FRA\disk1\_INST32I.EX_ [317092]

O61 - LFC:Last File Created 06/07/2002 - 09:22:28 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Décompressions\Horoscope et thème astral 1.01\_INST32I.EX_ [297989]

O61 - LFC:Last File Created 09/02/2007 - 10:27:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\SESAER\Nouveau dossier (5)\s_subventions\Doc_Pedago_Papyrus.ex_ [1323008]

O61 - LFC:Last File Created 13/01/2012 - 00:03:30 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\bookmarkbackups\bookmarks-2012-01-13.json [533288]

O61 - LFC:Last File Created 13/01/2012 - 00:18:23 ---A- C:\Documents And Settings\All Users\Application Data\Messenger Plus!\Promotions\Cache\p_199.dat [935]

O61 - LFC:Last File Created 13/01/2012 - 00:18:23 ---A- C:\Documents And Settings\All Users\Application Data\Messenger Plus!\Promotions\Cache\p_528.dat [1111]

O61 - LFC:Last File Created 13/01/2012 - 00:18:23 ---A- C:\Documents And Settings\All Users\Application Data\Messenger Plus!\Promotions\Cache\p_540.dat [1138]

O61 - LFC:Last File Created 13/01/2012 - 00:18:23 ---A- C:\Documents And Settings\All Users\Application Data\Messenger Plus!\Promotions\Listing.dat [2920]

O61 - LFC:Last File Created 13/01/2012 - 13:03:05 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d2651a8 [20]

O61 - LFC:Last File Created 13/01/2012 - 13:03:05 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-4d2651a8.idx [487]

O61 - LFC:Last File Created 13/01/2012 - 13:03:05 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\lastAccessed [1]

O61 - LFC:Last File Created 13/01/2012 - 13:07:14 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Acrobat\7.0\UserCache.bin [92997]

O61 - LFC:Last File Created 13/01/2012 - 15:51:14 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Wise Registry Cleaner\Backup\2012-13-01 155114.reg [21659]

O61 - LFC:Last File Created 13/01/2012 - 15:55:52 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Wise Registry Cleaner\Backup\2012-13-01 155552.reg [427]

O61 - LFC:Last File Created 13/01/2012 - 16:02:28 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Wise Registry Cleaner\Backup\2012-13-01 160228.reg [18943]

O61 - LFC:Last File Created 13/01/2012 - 16:02:28 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Wise Registry Cleaner\Log.txt [1244]

O61 - LFC:Last File Created 13/01/2012 - 16:06:27 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Flash Player\AssetCache\YDRBTNWQ\8F903698240FE799F61EEDA8595181137B996156.heu [149]

O61 - LFC:Last File Created 13/01/2012 - 16:06:29 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Flash Player\AssetCache\YDRBTNWQ\8165D3AF89956F505BBF7B18667E0B2CCB9EC367.heu [148]

O61 - LFC:Last File Created 13/01/2012 - 16:06:30 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Flash Player\AssetCache\YDRBTNWQ\5270C4CDF61AB3F586B06B3D5F3E87624A1D7223.heu [148]

O61 - LFC:Last File Created 13/01/2012 - 16:06:30 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Flash Player\AssetCache\YDRBTNWQ\A61663F0EB79848070C225295C549D272D01B228.heu [148]

O61 - LFC:Last File Created 13/01/2012 - 16:06:30 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Adobe\Flash Player\AssetCache\YDRBTNWQ\B2302138B70206DAAF6737166713BEC5280D4A90.heu [148]

O61 - LFC:Last File Created 13/01/2012 - 17:01:21 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\adblockplus\cache.js [2354]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Avatars\Bear Mask.mce [182059]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Avatars\Cow Mask.mce [116641]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Avatars\Frog Mask.mce [165606]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Avatars\Rabbit Mask.mce [140218]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Avatars\Santa Mask.mce [182457]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\Canadian Flag.mce [165891]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\French Flag.mce [139185]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\German Flag.mce [138619]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\Italian Flag.mce [152862]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\UK Flag.mce [302579]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Flags\USA Flag.mce [280846]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Ballon.mce [83659]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Be Right Back.mce [738913]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Frog.mce [84325]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Gun.mce [26872]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Hearts.mce [138793]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Fun\Sun.mce [96690]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Holidays\Bell.mce [72412]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Holidays\Candle.mce [181553]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Holidays\Candy Cane.mce [113940]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Holidays\Christmas Tree.mce [155707]

O61 - LFC:Last File Created 13/01/2012 - 17:04:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Effects\Objects\Holidays\Snow Man.mce [97213]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\Playlist.pst [488]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\Playlist.pst_files\thumbail0.png [34817]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistImages.pst [521]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistImages.pst_files\thumbail0.png [39889]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistMovies.pst [940]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistMovies.pst_files\thumbail0.png [30896]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistMovies.pst_files\thumbail1.png [31044]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistMovies.pst_files\thumbail2.png [30738]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\PlaylistSnapshots.pst [202]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Layer0\Profile.xml [875]

O61 - LFC:Last File Created 13/01/2012 - 17:04:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\ManyCam\Settings\Profile.xml [1907]

O61 - LFC:Last File Created 13/01/2012 - 17:10:23 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\ua\br_log.pb.1326471022515 [410]

O61 - LFC:Last File Created 13/01/2012 - 17:11:26 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\content-prefs.sqlite [10240]

O61 - LFC:Last File Created 13/01/2012 - 17:11:26 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\permissions.sqlite [1641472]

O61 - LFC:Last File Created 13/01/2012 - 19:23:23 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\AcLang_exlang32.fra [10515968]

O61 - LFC:Last File Created 13/01/2012 - 19:27:04 ---A- C:\Documents And Settings\Ken Hutchinson\MDdyAsuPL1.exe [262144]

O61 - LFC:Last File Created 13/01/2012 - 19:27:19 ---A- C:\Documents And Settings\Ken Hutchinson\3eaj.exe [289792]

O61 - LFC:Last File Created 13/01/2012 - 19:32:11 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\3-0-0000F491.lsf [5226]

O61 - LFC:Last File Created 13/01/2012 - 20:04:33 ---A- C:\Documents And Settings\Ken Hutchinson\woaxil.com [937984]

O61 - LFC:Last File Created 13/01/2012 - 20:04:34 ---A- C:\Documents And Settings\Ken Hutchinson\b41Nq7f4.exe [266240]

O61 - LFC:Last File Created 13/01/2012 - 20:04:47 ---A- C:\Documents And Settings\Ken Hutchinson\3buj.exe [289280]

O61 - LFC:Last File Created 13/01/2012 - 20:05:29 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\news.dat [728]

O61 - LFC:Last File Created 13/01/2012 - 20:06:13 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0]

O61 - LFC:Last File Created 13/01/2012 - 20:09:17 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000015 [3080]

O61 - LFC:Last File Created 13/01/2012 - 20:09:17 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000016 [3080]

O61 - LFC:Last File Created 13/01/2012 - 20:09:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000017 [13320]

O61 - LFC:Last File Created 13/01/2012 - 20:09:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000018 [23560]

O61 - LFC:Last File Created 13/01/2012 - 20:09:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000019 [16904]

O61 - LFC:Last File Created 13/01/2012 - 20:09:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001A [3080]

O61 - LFC:Last File Created 13/01/2012 - 20:09:25 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001B [45976]

O61 - LFC:Last File Created 13/01/2012 - 20:11:51 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\hf_config.pb [5674]

O61 - LFC:Last File Created 13/01/2012 - 20:11:51 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\prefs.sqlite [13312]

O61 - LFC:Last File Created 13/01/2012 - 20:12:38 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\search.sqlite [4096]

O61 - LFC:Last File Created 13/01/2012 - 20:12:38 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\icqplugin-1.xml [950]

O61 - LFC:Last File Created 13/01/2012 - 20:12:38 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\searchplugins\radioblogclub.xml [1918]

O61 - LFC:Last File Created 13/01/2012 - 20:13:39 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\ua\br_log.pb.1326482019437 [434]

O61 - LFC:Last File Created 13/01/2012 - 20:14:27 ---A- C:\Documents And Settings\All Users\Bureau\AVG Anti-Rootkit Free.lnk [828]

O61 - LFC:Last File Created 13/01/2012 - 20:14:27 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\AVG Anti-Rootkit Free\AVG Anti-Rootkit Free.lnk [840]

O61 - LFC:Last File Created 13/01/2012 - 20:16:18 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk [784]

O61 - LFC:Last File Created 13/01/2012 - 20:16:18 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk [820]

O61 - LFC:Last File Created 13/01/2012 - 20:16:18 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [796]

O61 - LFC:Last File Created 13/01/2012 - 20:16:18 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [796]

O61 - LFC:Last File Created 13/01/2012 - 20:16:18 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk [802]

O61 - LFC:Last File Created 13/01/2012 - 20:16:42 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115]

O61 - LFC:Last File Created 13/01/2012 - 20:16:42 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78]

O61 - LFC:Last File Created 13/01/2012 - 20:16:42 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6221676]

O61 - LFC:Last File Created 13/01/2012 - 20:16:43 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778]

O61 - LFC:Last File Created 13/01/2012 - 20:16:43 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [99]

O61 - LFC:Last File Created 13/01/2012 - 20:16:56 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\ignore.dat [0]

O61 - LFC:Last File Created 13/01/2012 - 20:20:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{3D0DE37D-9B4E-41D8-9A03-94C4AB608073}.suspic [2134]

O61 - LFC:Last File Created 13/01/2012 - 20:20:09 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js [1439]

O61 - LFC:Last File Created 13/01/2012 - 20:22:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{A3EAA794-2F79-41C5-B3DC-5C7B65E715E6}.suspic [4906]

O61 - LFC:Last File Created 13/01/2012 - 20:22:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{F1E625B6-9AEC-4742-B404-6B8418B46A76}.suspic [4894]

O61 - LFC:Last File Created 13/01/2012 - 20:22:42 ---A- C:\Documents And Settings\LocalService\Cookies\VUO0V8O0.txt [82]

O61 - LFC:Last File Created 13/01/2012 - 20:22:43 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{B89183C4-F7AF-44B4-9F07-326F11EF57AA}.suspic [4966]

O61 - LFC:Last File Created 13/01/2012 - 20:22:43 ---A- C:\Documents And Settings\LocalService\Cookies\F32P31A3.txt [155]

O61 - LFC:Last File Created 13/01/2012 - 20:22:44 ---A- C:\Documents And Settings\LocalService\Cookies\DG0RXIUB.txt [107]

O61 - LFC:Last File Created 13/01/2012 - 20:22:53 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{15C8DCFA-8711-471D-94E2-5902A02A99F4}.suspic [4882]

O61 - LFC:Last File Created 13/01/2012 - 20:22:53 ---A- C:\Documents And Settings\LocalService\Cookies\MDLKMZTU.txt [68]

O61 - LFC:Last File Created 13/01/2012 - 20:22:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{8DF6246B-3F93-4056-B370-2B3F046F1CA4}.suspic [4826]

O61 - LFC:Last File Created 13/01/2012 - 20:22:54 ---A- C:\Documents And Settings\LocalService\Cookies\0OXFAIAI.txt [69]

O61 - LFC:Last File Created 13/01/2012 - 20:22:54 ---A- C:\Documents And Settings\LocalService\Cookies\45WEZH6L.txt [70]

O61 - LFC:Last File Created 13/01/2012 - 20:22:54 ---A- C:\Documents And Settings\LocalService\Cookies\NRPWNQ6X.txt [70]

O61 - LFC:Last File Created 13/01/2012 - 20:22:55 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT [16384]

O61 - LFC:Last File Created 13/01/2012 - 20:22:57 ---A- C:\Documents And Settings\LocalService\Cookies\2Y7XJLDP.txt [179]

O61 - LFC:Last File Created 13/01/2012 - 20:23:00 ---A- C:\Documents And Settings\LocalService\Cookies\T4916365.txt [374]

O61 - LFC:Last File Created 13/01/2012 - 20:23:01 ---A- C:\Documents And Settings\LocalService\Cookies\6YPQJRI3.txt [367]

O61 - LFC:Last File Created 13/01/2012 - 20:23:01 ---A- C:\Documents And Settings\LocalService\Cookies\GJ2N6THP.txt [383]

O61 - LFC:Last File Created 13/01/2012 - 20:23:01 ---A- C:\Documents And Settings\LocalService\Cookies\PWST1LJ1.txt [388]

O61 - LFC:Last File Created 13/01/2012 - 20:23:02 ---A- C:\Documents And Settings\LocalService\Cookies\0A3PL68N.txt [394]

O61 - LFC:Last File Created 13/01/2012 - 20:23:03 ---A- C:\Documents And Settings\LocalService\Cookies\CT44H249.txt [397]

O61 - LFC:Last File Created 13/01/2012 - 20:23:05 ---A- C:\Documents And Settings\LocalService\Cookies\7CU0W8BO.txt [335]

O61 - LFC:Last File Created 13/01/2012 - 20:23:09 ---A- C:\Documents And Settings\LocalService\Cookies\HQX5W9LA.txt [346]

O61 - LFC:Last File Created 13/01/2012 - 20:23:10 ---A- C:\Documents And Settings\LocalService\Cookies\T6N36RB2.txt [99]

O61 - LFC:Last File Created 13/01/2012 - 20:23:13 ---A- C:\Documents And Settings\LocalService\Cookies\V22YJPST.txt [168]

O61 - LFC:Last File Created 13/01/2012 - 20:23:19 ---A- C:\Documents And Settings\LocalService\Cookies\PV3XLA23.txt [154]

O61 - LFC:Last File Created 13/01/2012 - 20:23:19 ---A- C:\Documents And Settings\LocalService\Cookies\YDUNS04V.txt [119]

O61 - LFC:Last File Created 13/01/2012 - 20:23:27 ---A- C:\Documents And Settings\LocalService\Cookies\8TYOX81N.txt [85]

O61 - LFC:Last File Created 13/01/2012 - 20:23:27 ---A- C:\Documents And Settings\LocalService\Cookies\VRR3B5HA.txt [111]

O61 - LFC:Last File Created 13/01/2012 - 20:23:32 ---A- C:\Documents And Settings\LocalService\Cookies\VBTB23PV.txt [103]

O61 - LFC:Last File Created 13/01/2012 - 20:23:33 ---A- C:\Documents And Settings\LocalService\Cookies\QYX89P1A.txt [93]

O61 - LFC:Last File Created 13/01/2012 - 20:23:34 ---A- C:\Documents And Settings\LocalService\Cookies\9QTX2FLY.txt [178]

O61 - LFC:Last File Created 13/01/2012 - 20:23:34 ---A- C:\Documents And Settings\LocalService\Cookies\DJNOS3A0.txt [270]

O61 - LFC:Last File Created 13/01/2012 - 20:23:34 ---A- C:\Documents And Settings\LocalService\Cookies\H9S49N50.txt [75]

O61 - LFC:Last File Created 13/01/2012 - 20:23:34 ---A- C:\Documents And Settings\LocalService\Cookies\XRIFV3B8.txt [97]

O61 - LFC:Last File Created 13/01/2012 - 20:23:36 ---A- C:\Documents And Settings\LocalService\Cookies\5SPS5FNA.txt [188]

O61 - LFC:Last File Created 13/01/2012 - 20:23:36 ---A- C:\Documents And Settings\LocalService\Cookies\SD9NCR91.txt [340]

O61 - LFC:Last File Created 13/01/2012 - 20:23:37 ---A- C:\Documents And Settings\LocalService\Cookies\NP7NASQP.txt [734]

O61 - LFC:Last File Created 13/01/2012 - 20:23:38 ---A- C:\Documents And Settings\LocalService\Cookies\31LJ9U5T.txt [983]

O61 - LFC:Last File Created 13/01/2012 - 20:23:38 ---A- C:\Documents And Settings\LocalService\Cookies\YGY7R4XS.txt [271]

O61 - LFC:Last File Created 13/01/2012 - 20:23:39 ---A- C:\Documents And Settings\LocalService\Cookies\883MA6VQ.txt [637]

O61 - LFC:Last File Created 13/01/2012 - 20:23:39 ---A- C:\Documents And Settings\LocalService\Cookies\GYKR19FU.txt [1022]

O61 - LFC:Last File Created 13/01/2012 - 20:23:44 ---A- C:\Documents And Settings\LocalService\Cookies\5DMRYY36.txt [586]

O61 - LFC:Last File Created 13/01/2012 - 20:23:44 ---A- C:\Documents And Settings\LocalService\Cookies\Z80EJZCP.txt [111]

O61 - LFC:Last File Created 13/01/2012 - 20:23:47 ---A- C:\Documents And Settings\LocalService\Cookies\L9GUIZL1.txt [112]

O61 - LFC:Last File Created 13/01/2012 - 20:23:51 ---A- C:\Documents And Settings\LocalService\Cookies\XD89ZU8D.txt [764]

O61 - LFC:Last File Created 13/01/2012 - 20:23:52 ---A- C:\Documents And Settings\LocalService\Cookies\IVYH6HYU.txt [100]

O61 - LFC:Last File Created 13/01/2012 - 20:23:59 ---A- C:\Documents And Settings\LocalService\Cookies\5LKPQ3SQ.txt [202]

O61 - LFC:Last File Created 13/01/2012 - 20:23:59 ---A- C:\Documents And Settings\LocalService\Cookies\SUT3M30B.txt [1025]

O61 - LFC:Last File Created 13/01/2012 - 20:24:03 ---A- C:\Documents And Settings\LocalService\Cookies\BXD7WQIE.txt [238]

O61 - LFC:Last File Created 13/01/2012 - 20:24:04 ---A- C:\Documents And Settings\LocalService\Cookies\A1AMJ3YM.txt [246]

O61 - LFC:Last File Created 13/01/2012 - 20:24:05 ---A- C:\Documents And Settings\LocalService\Cookies\X1CBF0C4.txt [108]

O61 - LFC:Last File Created 13/01/2012 - 20:24:07 ---A- C:\Documents And Settings\LocalService\Cookies\P8Y1KJJZ.txt [107]

O61 - LFC:Last File Created 13/01/2012 - 20:24:07 ---A- C:\Documents And Settings\LocalService\Cookies\XWO2CW6X.txt [453]

O61 - LFC:Last File Created 13/01/2012 - 20:24:08 ---A- C:\Documents And Settings\LocalService\Cookies\2J1DEIDE.txt [8582]

O61 - LFC:Last File Created 13/01/2012 - 20:24:09 ---A- C:\Documents And Settings\LocalService\Cookies\0HHPZHUJ.txt [111]

O61 - LFC:Last File Created 13/01/2012 - 20:24:10 ---A- C:\Documents And Settings\LocalService\Cookies\L0MRCC9A.txt [369]

O61 - LFC:Last File Created 13/01/2012 - 20:24:10 ---A- C:\Documents And Settings\LocalService\Cookies\W8XOM434.txt [393]

O61 - LFC:Last File Created 13/01/2012 - 20:24:36 ---A- C:\Documents And Settings\LocalService\Cookies\ZKDA6L2G.txt [230]

O61 - LFC:Last File Created 13/01/2012 - 20:24:52 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001C [124424]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.22024 [100]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.63889 [80]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.71178 [83]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.22024 [122880]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.63889 [41984]

O61 - LFC:Last File Created 13/01/2012 - 20:28:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.71178 [5120]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.46140 [84]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP3.90164 [96]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP4.37834 [176]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP4.46743 [173]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP4.56669 [233]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.46140 [289792]

O61 - LFC:Last File Created 13/01/2012 - 20:28:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR3.90164 [156]

O61 - LFC:Last File Created 13/01/2012 - 20:28:39 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\unp201004719.tmp.mdmp [812011]

O61 - LFC:Last File Created 13/01/2012 - 20:28:45 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2012-01-13 (20-28-45).txt [2044]

O61 - LFC:Last File Created 13/01/2012 - 20:29:53 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\HtmlRemoteContent.old [680]

O61 - LFC:Last File Created 13/01/2012 - 20:30:38 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\rc.dat [9]

O61 - LFC:Last File Created 13/01/2012 - 20:51:32 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\ua\br_log.pb.1326484292109 [407]

O61 - LFC:Last File Created 13/01/2012 - 20:54:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{376BD499-2D1E-4231-9CA6-FAFD41DB7456}.suspic [163280]

O61 - LFC:Last File Created 13/01/2012 - 21:02:10 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\aswResp.dat [20]

O61 - LFC:Last File Created 13/01/2012 - 23:13:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001D [135176]

O61 - LFC:Last File Created 13/01/2012 - 23:13:23 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001E [124424]

O61 - LFC:Last File Created 13/01/2012 - 23:40:43 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\0000001F [25096]

O61 - LFC:Last File Created 13/04/2008 - 09:43:34 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\CPLEXE.EX_ [19783]

O61 - LFC:Last File Created 13/04/2008 - 09:43:38 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMSCINST.EX_ [28139]

O61 - LFC:Last File Created 13/04/2008 - 09:43:38 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\PINTLPHR.EX_ [34625]

O61 - LFC:Last File Created 13/04/2008 - 09:43:40 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\CINTSETP.EX_ [168685]

O61 - LFC:Last File Created 13/04/2008 - 09:43:46 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPDCT.EX_ [108552]

O61 - LFC:Last File Created 13/04/2008 - 09:43:48 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPDSVR.EX_ [57937]

O61 - LFC:Last File Created 13/04/2008 - 09:43:50 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPINST.EX_ [76627]

O61 - LFC:Last File Created 13/04/2008 - 09:43:52 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPMIG.EX_ [77896]

O61 - LFC:Last File Created 13/04/2008 - 09:43:52 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\TINTLPHR.EX_ [20507]

O61 - LFC:Last File Created 13/04/2008 - 09:43:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\TINTSETP.EX_ [9231]

O61 - LFC:Last File Created 13/04/2008 - 09:44:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPRW.EX_ [88015]

O61 - LFC:Last File Created 13/04/2008 - 09:44:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LANG\IMJPUTY.EX_ [90012]

O61 - LFC:Last File Created 13/04/2008 - 09:52:34 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REDIR.EX_ [1626]

O61 - LFC:Last File Created 13/04/2008 - 09:53:38 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\KRNL386.EX_ [55118]

O61 - LFC:Last File Created 13/04/2008 - 09:54:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DOSX.EX_ [12289]

O61 - LFC:Last File Created 13/04/2008 - 11:31:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OSLOADER.EX_ [115349]

O61 - LFC:Last File Created 13/04/2008 - 11:32:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETUPLDR.EX_ [118953]

O61 - LFC:Last File Created 13/04/2008 - 11:53:34 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\XPNETDG.EX_ [129842]

O61 - LFC:Last File Created 13/04/2008 - 19:07:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NTKRNLMP.EX_ [1045229]

O61 - LFC:Last File Created 13/04/2008 - 19:08:04 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NTOSKRNL.EX_ [1014771]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ACCWIZ.EX_ [47025]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ACTMOVIE.EX_ [1683]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AGENTSVR.EX_ [102735]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AHUI.EX_ [48821]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ALG.EX_ [17710]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AT.EX_ [11601]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ATMADM.EX_ [4593]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ATTRIB.EX_ [5553]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AUDITUSR.EX_ [6169]

O61 - LFC:Last File Created 13/04/2008 - 19:33:54 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AUTOCONV.EX_ [191073]

O61 - LFC:Last File Created 13/04/2008 - 19:33:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\AUTOLFN.EX_ [5618]

O61 - LFC:Last File Created 13/04/2008 - 19:33:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\BLASTCLN.EX_ [34017]

O61 - LFC:Last File Created 13/04/2008 - 19:33:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CACLS.EX_ [9120]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CISVC.EX_ [2454]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CLEANMGR.EX_ [27261]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CLICONFG.EX_ [4167]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CLIPBRD.EX_ [42950]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CLIPSRV.EX_ [15850]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CMD.EX_ [93236]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CMDL32.EX_ [12783]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CMMON32.EX_ [17882]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CMSTP.EX_ [25584]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\COMREPL.EX_ [4640]

O61 - LFC:Last File Created 13/04/2008 - 19:33:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\COMREREG.EX_ [2613]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CONF.EX_ [260335]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CONIME.EX_ [13239]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CSCRIPT.EX_ [55062]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CSRSS.EX_ [2894]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\CTFMON.EX_ [8607]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DCOMCNFG.EX_ [2579]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DDESHARE.EX_ [11733]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DEFRAG.EX_ [11189]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DFRGFAT.EX_ [37596]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DFRGNTFS.EX_ [46883]

O61 - LFC:Last File Created 13/04/2008 - 19:34:00 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DIALER.EX_ [152243]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DIANTZ.EX_ [43151]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DISKPART.EX_ [67859]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DLIMPORT.EX_ [101413]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DLLHOST.EX_ [2522]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DMADMIN.EX_ [95584]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DMREMOTE.EX_ [5259]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DPLAYSVR.EX_ [16087]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DPNSVR.EX_ [9637]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DPVSETUP.EX_ [37563]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DUMPREP.EX_ [5052]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DVDUPGRD.EX_ [9717]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DWWIN.EX_ [87128]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DXDIAG.EX_ [229025]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EUDCEDIT.EX_ [75775]

O61 - LFC:Last File Created 13/04/2008 - 19:34:02 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EVNTCMD.EX_ [9322]

O61 - LFC:Last File Created 13/04/2008 - 19:34:04 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EVNTWIN.EX_ [34752]

O61 - LFC:Last File Created 13/04/2008 - 19:34:04 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EXPLORER.EX_ [351135]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\EXTRAC32.EX_ [12579]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FINDSTR.EX_ [13224]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FLTMC.EX_ [7254]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FONTVIEW.EX_ [10801]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FORCEDOS.EX_ [3263]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FSQUIRT.EX_ [43478]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FTP.EX_ [17132]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FXSCLNT.EX_ [56724]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FXSCOVER.EX_ [77977]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\FXSSVC.EX_ [109761]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\GRPCONV.EX_ [17192]

O61 - LFC:Last File Created 13/04/2008 - 19:34:06 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HELP.EX_ [5277]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HELPCTR.EX_ [266232]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HELPSVC.EX_ [237174]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HH.EX_ [3757]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\HSCUPD.EX_ [8723]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ICWCONN1.EX_ [57973]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ICWCONN2.EX_ [33847]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ICWRMIND.EX_ [6545]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IE4UINIT.EX_ [15139]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IEDW.EX_ [10487]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IEXPLORE.EX_ [37879]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IEXPRESS.EX_ [47791]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IMAPI.EX_ [69598]

O61 - LFC:Last File Created 13/04/2008 - 19:34:08 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\INETWIZ.EX_ [5174]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IPCONFIG.EX_ [19593]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IPV6.EX_ [26373]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\IPXROUTE.EX_ [8875]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LHMSTSC.EX_ [293694]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LOCATOR.EX_ [31126]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LOGAGENT.EX_ [48485]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LOGMAN.EX_ [23631]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LOGONUI.EX_ [128412]

O61 - LFC:Last File Created 13/04/2008 - 19:34:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\LSASS.EX_ [9344]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MAGNIFY.EX_ [31946]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MAKECAB.EX_ [27202]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGLOAD.EX_ [48628]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGRATE.EX_ [275370]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGREGDB.EX_ [3679]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGWIZ.EX_ [71237]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MIGWIZA.EX_ [70168]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MMC.EX_ [455994]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MMCPERF.EX_ [13866]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MNMSRVC.EX_ [11302]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MOBSYNC.EX_ [64832]

O61 - LFC:Last File Created 13/04/2008 - 19:34:12 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MOFCOMP.EX_ [7214]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MOVIEMK.EX_ [1244980]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MPLAY32.EX_ [52030]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MPLAYER2.EX_ [1281]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSCONFIG.EX_ [63773]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSDTC.EX_ [2416]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSHTA.EX_ [13874]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSIEXEC.EX_ [29304]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSIMN.EX_ [18910]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSIREGMV.EX_ [15077]

O61 - LFC:Last File Created 13/04/2008 - 19:34:14 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSOOBE.EX_ [13349]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSPAINT.EX_ [135988]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSTINIT.EX_ [5670]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MTSTOCOM.EX_ [45343]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NAPSTAT.EX_ [77298]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NARRATOR.EX_ [23747]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NDDEAPIR.EX_ [1721]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NET.EX_ [19708]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NET1.EX_ [55631]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NETDDE.EX_ [46761]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NETSH.EX_ [22590]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NETSTAT.EX_ [12320]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NMPGMGRP.EX_ [6113]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NOTEPAD.EX_ [33004]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NPPAGENT.EX_ [6581]

O61 - LFC:Last File Created 13/04/2008 - 19:34:16 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NSLOOKUP.EX_ [29507]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NTVDM.EX_ [198808]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ODBCAD32.EX_ [6683]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\ODBCCONF.EX_ [29269]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OEMIG50.EX_ [28680]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OOBEBALN.EX_ [23259]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\OSK.EX_ [59640]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PACKAGER.EX_ [26149]

O61 - LFC:Last File Created 13/04/2008 - 19:34:18 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PERFMON.EX_ [6708]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PINBALL.EX_ [112918]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PING.EX_ [7429]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\POWERCFG.EX_ [19965]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PROGMAN.EX_ [21332]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PROQUOTA.EX_ [26535]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\PROXYCFG.EX_ [3877]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\QPROCESS.EX_ [10747]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RASPHONE.EX_ [26233]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RCIMLBY.EX_ [15256]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RCP.EX_ [8298]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RDPCLIP.EX_ [27410]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RDSADDIN.EX_ [6673]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RDSHOST.EX_ [27750]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REG.EX_ [17274]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REGSVR32.EX_ [5447]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\REXEC.EX_ [5882]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSH.EX_ [6094]

O61 - LFC:Last File Created 13/04/2008 - 19:34:20 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RSTRUI.EX_ [117439]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RTCSHARE.EX_ [43293]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RUNDLL32.EX_ [11905]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\RUNONCE.EX_ [7024]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SAVEDUMP.EX_ [6241]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SCARDSVR.EX_ [36767]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SCRCONS.EX_ [18610]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SDBINST.EX_ [35692]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SERVICES.EX_ [50053]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SESSMGR.EX_ [55266]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETHC.EX_ [15192]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETUP.EX_ [11984]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETUP50.EX_ [32760]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETUPN.EX_ [10183]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SETUP_WM.EX_ [212103]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHMGRATE.EX_ [17893]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHRPUBW.EX_ [19222]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SHUTDOWN.EX_ [9473]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SIGVERIF.EX_ [18285]

O61 - LFC:Last File Created 13/04/2008 - 19:34:22 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SKEYS.EX_ [12388]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SLRUNDLL.EX_ [10081]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SLSERV.EX_ [30501]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SMBINST.EX_ [3814]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SMI2SMIR.EX_ [80653]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SMLOGSVC.EX_ [40281]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SMSS.EX_ [24193]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SNDREC32.EX_ [57201]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SNMP.EX_ [16379]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SNMPTRAP.EX_ [4353]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SORT.EX_ [10201]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SPIDER.EX_ [258645]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SPOOLSV.EX_ [21956]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\STIMON.EX_ [4131]

O61 - LFC:Last File Created 13/04/2008 - 19:34:24 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SVCHOST.EX_ [7278]

O61 - LFC:Last File Created 13/04/2008 - 19:34:26 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\SYSOCMGR.EX_ [36303]

O61 - LFC:Last File Created 13/04/2008 - 19:34:26 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TASKMGR.EX_ [51838]

O61 - LFC:Last File Created 13/04/2008 - 19:34:26 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TOURSTRT.EX_ [98099]

O61 - LFC:Last File Created 13/04/2008 - 19:34:26 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TRACERT.EX_ [5430]

O61 - LFC:Last File Created 13/04/2008 - 19:34:26 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\TZCHANGE.EX_ [25019]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UNREGMP2.EX_ [60331]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UPLOADM.EX_ [60636]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UPNPCONT.EX_ [7265]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UPS.EX_ [7980]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\USERINIT.EX_ [11833]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\UTILMAN.EX_ [22600]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\VERCLSID.EX_ [15147]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\VSSVC.EX_ [85478]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WAB.EX_ [20546]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WABMIG.EX_ [14943]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WBEMTEST.EX_ [44789]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WEXTRACT.EX_ [28369]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WIAACMGR.EX_ [153379]

O61 - LFC:Last File Created 13/04/2008 - 19:34:28 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINHLP32.EX_ [131911]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINLOGON.EX_ [265687]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WINVER.EX_ [2329]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WMIADAP.EX_ [74636]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WMIAPSRV.EX_ [51029]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WMIPRVSE.EX_ [66945]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WMPLAYER.EX_ [28949]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WORDPAD.EX_ [78406]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WPABALN.EX_ [15354]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WPNPINST.EX_ [5525]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WSCNTFY.EX_ [6660]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WSCRIPT.EX_ [59804]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WUAUCLT.EX_ [48316]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\WUAUCLT1.EX_ [60453]

O61 - LFC:Last File Created 13/04/2008 - 19:34:30 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\XCOPY.EX_ [13364]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.19824 [142]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.80663 [147]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.83577 [144]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.19824 [193368]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.80663 [32768]

O61 - LFC:Last File Created 14/01/2012 - 00:35:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.83577 [1536]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.13660 [219]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.17843 [218]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.20157 [142]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.20650 [275]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.29027 [171]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.34166 [249]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.35726 [274]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.51580 [185]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.68998 [305]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.93889 [154]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP4.70653 [233]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.13660 [58703]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.17843 [79360]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.20157 [193368]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.20650 [58703]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.29027 [463080]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.34166 [707072]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.35726 [79360]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.51580 [991711]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.68998 [707072]

O61 - LFC:Last File Created 14/01/2012 - 00:35:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.93889 [991711]

O61 - LFC:Last File Created 14/01/2012 - 00:37:34 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2012-01-14 (00-35-45).txt [5253]

O61 - LFC:Last File Created 14/01/2012 - 00:40:01 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\rp_rules.dat [2641]

O61 - LFC:Last File Created 14/01/2012 - 00:40:01 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\rp_stats.dat [3443]

O61 - LFC:Last File Created 14/01/2012 - 00:40:08 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1cba90fa05e0b34-ce42564.dat [1010472]

O61 - LFC:Last File Created 14/01/2012 - 00:45:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [1095]

O61 - LFC:Last File Created 14/01/2012 - 00:46:36 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{21D695D3-3BDD-475A-B4AD-162B2A226F9E}.suspic [630]

O61 - LFC:Last File Created 14/01/2012 - 00:46:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUNTCVWL-Ken Hutchinson.reg [453]

O61 - LFC:Last File Created 14/01/2012 - 01:44:01 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\My Downloads\Poker\PTV3.rar [31123408]

O61 - LFC:Last File Created 14/01/2012 - 11:15:09 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{F6D90174-40FB-44D0-95DA-A75810BE5D5B}.suspic [630]

O61 - LFC:Last File Created 14/01/2012 - 23:04:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000020 [1466784]

O61 - LFC:Last File Created 14/01/2012 - 23:04:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt [16664]

O61 - LFC:Last File Created 14/01/2012 - 23:08:33 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\ScriptShield.txt [21425]

O61 - LFC:Last File Created 14/01/2012 - 23:10:21 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1SM-Global.reg [315]

O61 - LFC:Last File Created 14/01/2012 - 23:11:53 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{DFDEC741-506F-479A-8480-F48878B41335}.suspic [630]

O61 - LFC:Last File Created 14/01/2012 - 23:14:58 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\HssInstaller\HssInstaller.txt [223]

O61 - LFC:Last File Created 14/01/2012 - 23:15:00 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegBHO-Global.reg [2237]

O61 - LFC:Last File Created 14/01/2012 - 23:16:46 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\ua\br_log.pb.1326579406593 [407]

O61 - LFC:Last File Created 14/01/2012 - 23:17:04 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\bookmarkbackups\bookmarks-2012-01-14.json [533552]

O61 - LFC:Last File Created 14/01/2012 - 23:21:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\cookies.sqlite [1572864]

O61 - LFC:Last File Created 14/01/2012 - 23:21:42 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\webappsstore.sqlite [460800]

O61 - LFC:Last File Created 14/01/2012 - 23:21:43 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [509]

O61 - LFC:Last File Created 14/01/2012 - 23:22:24 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\cc_20120114_232221.reg [2976]

O61 - LFC:Last File Created 14/01/2012 - 23:22:40 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\places.sqlite [10485760]

O61 - LFC:Last File Created 14/01/2012 - 23:26:11 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\~gu-ver.dat [0]

O61 - LFC:Last File Created 14/01/2012 - 23:27:32 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\GlarySoft\Glary Utilities\Backups\40922,9774631018 [905]

O61 - LFC:Last File Created 14/01/2012 - 23:34:25 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\1-7-0018771F.lsf [1819]

O61 - LFC:Last File Created 15/01/2012 - 12:27:29 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{DFBE2EF9-BB81-441C-85D3-341F60D0A923}.suspic [656]

O61 - LFC:Last File Created 15/01/2012 - 12:29:51 ---A- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\Cookies\index.dat [16384]

O61 - LFC:Last File Created 15/01/2012 - 12:29:51 ---A- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 15/01/2012 - 12:57:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{ADE4420E-0880-4FD4-8093-F70F1E84D59C}.suspic [163280]

O61 - LFC:Last File Created 15/01/2012 - 13:44:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000021 [745]

O61 - LFC:Last File Created 15/01/2012 - 13:44:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{EAED9709-AE81-486B-932E-8D044C2E3A1D}.suspic [528]

O61 - LFC:Last File Created 15/01/2012 - 13:44:04 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{CA4EA936-1575-45C3-85E7-A3C624D4FF44}.suspic [267726]

O61 - LFC:Last File Created 16/01/2012 - 00:12:01 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\Perflib_Perfdata_ca4.dat [16384]

O61 - LFC:Last File Created 16/01/2012 - 00:12:32 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\sfareca00001.dll [172032]

O61 - LFC:Last File Created 16/01/2012 - 00:12:33 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\sfamcc00001.dll [192512]

O61 - LFC:Last File Created 16/01/2012 - 01:09:10 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Microsoft\Windows\Themes\Custom.theme [7808]

O61 - LFC:Last File Created 16/01/2012 - 01:14:03 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\A0550422.exe.86d0bc3c7b9a6962297d96f429e65e7.249b2cb84eb0d81f649227a439dec990.aawqff [79364]

O61 - LFC:Last File Created 16/01/2012 - 01:14:03 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\A0550425.exe.86d0bc3c7b9a6962297d96f429e65e7.f018843c6c6f91668034ef1fcf156a6.aawqff [463092]

O61 - LFC:Last File Created 16/01/2012 - 01:14:04 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\GetDataBack Data Recovery 3.3.exe.619598c7432d04c64cf59ee5b4d39a.75cf5a3bb93b7c6a128381d2a50da8f.aawqff [6316244]

O61 - LFC:Last File Created 16/01/2012 - 01:14:08 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Horoscope Explorer Pro 3.7.exe.115f1c84373a54b54c45f8ece0139ebe.bb8b55e98648cf21319093059e21a.aawqff [10940420]

O61 - LFC:Last File Created 16/01/2012 - 01:14:14 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\1-7-02C21B8C.lsf [4189]

O61 - LFC:Last File Created 16/01/2012 - 01:15:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000022 [25096]

O61 - LFC:Last File Created 16/01/2012 - 12:12:02 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\3-0-0000DFC1.lsf [9983]

O61 - LFC:Last File Created 16/01/2012 - 12:12:06 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws.ori [8236]

O61 - LFC:Last File Created 16/01/2012 - 12:15:19 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{57EB97F3-C3CD-4BAA-813A-227574C6A43A}.suspic [594]

O61 - LFC:Last File Created 16/01/2012 - 12:18:33 ---A- C:\Documents And Settings\Ken Hutchinson\SendTo\Bluetooth\Autres dispositifs....lnk [1759]

O61 - LFC:Last File Created 16/01/2012 - 12:18:59 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Skype\shared_dynco\dc.db [1314816]

O61 - LFC:Last File Created 16/01/2012 - 12:19:00 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Skype\shared_dynco\dc.db-journal [4616]

O61 - LFC:Last File Created 16/01/2012 - 12:19:33 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\3-0-0007C4B5.lsf [1213]

O61 - LFC:Last File Created 16/01/2012 - 12:19:33 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Macromedia\Flash Player\#SharedObjects\Y2PPSASV\skype.com\#ui\preferences.sol [215]

O61 - LFC:Last File Created 16/01/2012 - 12:19:54 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\AAWQF20120116121954.aawqif [16052]

O61 - LFC:Last File Created 16/01/2012 - 12:27:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Run Entry History.txt [568]

O61 - LFC:Last File Created 16/01/2012 - 12:46:06 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{F02DE0B0-C578-48F2-99AF-263A55DF1306}.suspic [163280]

O61 - LFC:Last File Created 16/01/2012 - 14:07:36 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\whitelist.dat [9]

O61 - LFC:Last File Created 16/01/2012 - 14:07:37 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\quarantine.dat [72038]

O61 - LFC:Last File Created 16/01/2012 - 14:07:38 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\1-7-006AB7D3.lsf [2864]

O61 - LFC:Last File Created 16/01/2012 - 14:08:48 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000023 [479]

O61 - LFC:Last File Created 16/01/2012 - 14:08:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{4E63623A-8EFC-4FDE-B561-256944134C70}.suspic [528]

O61 - LFC:Last File Created 16/01/2012 - 14:08:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{83220B9F-C2D2-4959-8616-EEEC1831655E}.suspic [267726]

O61 - LFC:Last File Created 16/01/2012 - 14:15:54 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\1-7-00724AE9.lsf [1821]

O61 - LFC:Last File Created 16/01/2012 - 14:17:51 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000024 [793]

O61 - LFC:Last File Created 16/01/2012 - 14:18:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{EAD6CA19-ADB4-4304-839E-0CB6AAC0BC2E}.suspic [486]

O61 - LFC:Last File Created 16/01/2012 - 14:18:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{BEDB49CE-143A-46A6-9008-528436EC80E3}.suspic [526]

O61 - LFC:Last File Created 16/01/2012 - 14:20:09 ---A- C:\Documents And Settings\All Users\Application Data\NVIDIA\Updatus\updtclient.log.bak [3649]

O61 - LFC:Last File Created 16/01/2012 - 14:21:20 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000025 [793]

O61 - LFC:Last File Created 16/01/2012 - 14:21:26 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{605776E3-5E53-4861-8F35-ACBE87EFE020}.suspic [534]

O61 - LFC:Last File Created 16/01/2012 - 14:22:55 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\snx_lconfig.xml [446]

O61 - LFC:Last File Created 16/01/2012 - 14:23:08 ---A- C:\Documents And Settings\NetworkService\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb [3596]

O61 - LFC:Last File Created 16/01/2012 - 14:23:12 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [49152]

O61 - LFC:Last File Created 16/01/2012 - 14:23:12 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [32768]

O61 - LFC:Last File Created 16/01/2012 - 14:23:14 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\3-0-0000B507.lsf [5997]

O61 - LFC:Last File Created 16/01/2012 - 14:23:14 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Statistics\3-0-0000B640.lsf [761]

O61 - LFC:Last File Created 16/01/2012 - 14:23:14 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\usage_statistics.dat [9]

O61 - LFC:Last File Created 16/01/2012 - 14:23:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws [12354]

O61 - LFC:Last File Created 16/01/2012 - 14:23:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\EmailShield.txt [25531]

O61 - LFC:Last File Created 16/01/2012 - 14:23:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\IMShield.txt [25531]

O61 - LFC:Last File Created 16/01/2012 - 14:23:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\NetworkShield.txt [25531]

O61 - LFC:Last File Created 16/01/2012 - 14:23:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\P2PShield.txt [39470]

O61 - LFC:Last File Created 16/01/2012 - 14:23:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\WebShield.txt [25683]

O61 - LFC:Last File Created 16/01/2012 - 14:23:32 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb [3596]

O61 - LFC:Last File Created 16/01/2012 - 14:26:37 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\FileInfo.db [17408]

O61 - LFC:Last File Created 16/01/2012 - 14:26:56 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{F0CC391A-7E96-4B3D-A1A2-BB926C1880F8}.suspic [594]

O61 - LFC:Last File Created 16/01/2012 - 14:27:21 ---A- C:\Documents And Settings\All Users\Application Data\NVIDIA\Updatus\journalBS.jour.dat [0]

O61 - LFC:Last File Created 16/01/2012 - 14:27:22 ---A- C:\Documents And Settings\UpdatusUser\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb [3596]

O61 - LFC:Last File Created 16/01/2012 - 14:27:35 ---A- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb [3596]

O61 - LFC:Last File Created 16/01/2012 - 14:30:51 ---A- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\ntuser.dat [4980736]

O61 - LFC:Last File Created 16/01/2012 - 14:30:56 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5580]

O61 - LFC:Last File Created 16/01/2012 - 14:30:56 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [7120]

O61 - LFC:Last File Created 16/01/2012 - 14:31:06 ---A- C:\Documents And Settings\LocalService\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb [3596]

O61 - LFC:Last File Created 16/01/2012 - 14:32:02 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Backup\backup.dat [614]

O61 - LFC:Last File Created 16/01/2012 - 14:32:02 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\Backup\userinit.exe.117c65cb6109b4a65a5f9bcc2027c463.e74ddb12188c2ff57a78624dbf7332fc.aawbackup [26628]

O61 - LFC:Last File Created 16/01/2012 - 14:32:03 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\statistics.dat [664279]

O61 - LFC:Last File Created 16/01/2012 - 14:44:13 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{62E2C08D-67EA-47C9-9ECE-6FA98E562587}.suspic [163280]

O61 - LFC:Last File Created 16/01/2012 - 15:23:15 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\License\guid.dat [72]

O61 - LFC:Last File Created 16/01/2012 - 15:23:16 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\settings.dat [82409]

O61 - LFC:Last File Created 16/01/2012 - 15:37:54 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterFirewallBypass.zip [757]

O61 - LFC:Last File Created 16/01/2012 - 15:37:54 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer.zip [732]

O61 - LFC:Last File Created 16/01/2012 - 15:37:54 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Opera\Opera\profile\global.dat [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [101]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [126]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0]

O61 - LFC:Last File Created 16/01/2012 - 15:37:58 ---A- C:\Documents And Settings\Invité\ntuser.dat [5767168]

O61 - LFC:Last File Created 16/01/2012 - 15:38:44 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86]

O61 - LFC:Last File Created 16/01/2012 - 15:46:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\ZHPDiag2.exe [3900757]

O61 - LFC:Last File Created 16/01/2012 - 16:05:02 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Windows Firewall-Global.reg [7252]

O61 - LFC:Last File Created 16/01/2012 - 16:08:11 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\extensions.sqlite [393216]

O61 - LFC:Last File Created 16/01/2012 - 16:08:22 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\search.json [15533]

O61 - LFC:Last File Created 16/01/2012 - 16:08:26 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\places.sqlite-shm [32768]

O61 - LFC:Last File Created 16/01/2012 - 16:08:26 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\urlclassifierkey3.txt [154]

O61 - LFC:Last File Created 16/01/2012 - 16:08:36 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\downloads.sqlite [65536]

O61 - LFC:Last File Created 16/01/2012 - 16:08:41 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\places.sqlite-wal [329632]

O61 - LFC:Last File Created 16/01/2012 - 16:08:56 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\urlclassifier.pset [1375034]

O61 - LFC:Last File Created 16/01/2012 - 16:08:56 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\urlclassifier3.sqlite [49262592]

O61 - LFC:Last File Created 16/01/2012 - 16:09:05 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\pluginreg.dat [18400]

O61 - LFC:Last File Created 16/01/2012 - 16:09:16 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\prefs.js [65578]

O61 - LFC:Last File Created 16/01/2012 - 16:09:23 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\sessionstore.js [484]

O61 - LFC:Last File Created 16/01/2012 - 16:09:23 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Cooliris\ac1d2fa0-23c7-074b-894a-682e7da28a07\ua\br_log.pb.1326726563515 [409]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\bookmarkbackups\bookmarks-2012-01-16.json [533552]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\cert8.db [360448]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\flashgot.log.bak [2155552]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\key3.db [16384]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\localstore.rdf [55287]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\Cache\_CACHE_001_ [16384]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\Cache\_CACHE_002_ [4096]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\Cache\_CACHE_003_ [1024]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\Cache\_CACHE_MAP_ [8468]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\OfflineCache\index.sqlite [262144]

O61 - LFC:Last File Created 16/01/2012 - 16:09:24 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\startupCache\startupCache.4.little [783155]

O61 - LFC:Last File Created 16/01/2012 - 16:15:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\Log.db [113664]

O61 - LFC:Last File Created 16/01/2012 - 16:22:59 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1cb3104944bbb94-c87c20d7.dat [1046952]

O61 - LFC:Last File Created 16/01/2012 - 16:27:30 ---A- C:\Documents And Settings\Ken Hutchinson\Recent\FixDwndp.log.lnk [1059]

O61 - LFC:Last File Created 16/01/2012 - 16:27:31 ---A- C:\Documents And Settings\Ken Hutchinson\Recent\Symantec removal tool.lnk [784]

O61 - LFC:Last File Created 16/01/2012 - 16:29:18 ----- C:\Documents And Settings\Ken Hutchinson\Local Settings\Historique\History.IE5\index.dat [327680]

O61 - LFC:Last File Created 16/01/2012 - 16:30:50 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{D3D4BC0C-4056-11E1-977A-0013D4BC8042}.dat [3584]

O61 - LFC:Last File Created 16/01/2012 - 16:30:50 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{1110C18E-4057-11E1-977A-0013D4BC8042}.dat [3584]

O61 - LFC:Last File Created 16/01/2012 - 16:30:50 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{1110C18F-4057-11E1-977A-0013D4BC8042}.dat [4608]

O61 - LFC:Last File Created 16/01/2012 - 16:54:05 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\00000026 [793]

O61 - LFC:Last File Created 16/01/2012 - 16:54:05 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\chest\index.xml [14944]

O61 - LFC:Last File Created 16/01/2012 - 16:54:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{402A9F4A-1BEA-4A42-8042-FB4E964D03E2}.suspic [486]

O61 - LFC:Last File Created 16/01/2012 - 16:54:32 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\FileSystemShield.txt [32010]

O61 - LFC:Last File Created 16/01/2012 - 16:54:32 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\spool\suspic\{D17A65A6-1B13-47D9-9668-459DACB676DC}.suspic [526]

O61 - LFC:Last File Created 16/01/2012 - 17:00:51 ---A- C:\Documents And Settings\Ken Hutchinson\Recent\folder.png.lnk [706]

O61 - LFC:Last File Created 16/01/2012 - 17:00:51 ---A- C:\Documents And Settings\Ken Hutchinson\Recent\html.lnk [551]

O61 - LFC:Last File Created 16/01/2012 - 17:15:09 ---A- C:\Documents And Settings\Ken Hutchinson\Local Settings\Temp\lfcontext.txt [24]

O61 - LFC:Last File Created 16/01/2012 - 17:23:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1c72c2403c751ac-74050250.dat [8365920]

O61 - LFC:Last File Created 16/01/2012 - 17:28:28 ---A- C:\Documents And Settings\All Users\Bureau\MBRCheck.lnk [673]

O61 - LFC:Last File Created 16/01/2012 - 17:28:28 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [666]

O61 - LFC:Last File Created 16/01/2012 - 17:28:28 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [661]

O61 - LFC:Last File Created 16/01/2012 - 17:28:28 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\ZHP\ZHPDiag.lnk [678]

O61 - LFC:Last File Created 16/01/2012 - 17:28:33 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\URL.db [14029824]

O61 - LFC:Last File Created 16/01/2012 - 17:32:31 ---A- C:\Documents And Settings\All Users\Application Data\NVIDIA\Updatus\updtConfig.xml [2468]

O61 - LFC:Last File Created 16/01/2012 - 17:34:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt [68238450]

O61 - LFC:Last File Created 16/01/2012 - 17:36:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [31760]

O61 - LFC:Last File Created 16/01/2012 - 17:37:27 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS1-Ken Hutchinson.reg [534]

O61 - LFC:Last File Created 16/06/2031 - 23:28:04 ---A- C:\Documents And Settings\All Users\Application Data\Lavasoft\Ad-Aware\nag.ng [16]

O61 - LFC:Last File Created 16/06/2031 - 23:28:16 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\reminderfox\reminderfox.ics [985]

O61 - LFC:Last File Created 16/06/2031 - 23:28:16 ---A- C:\Documents And Settings\Ken Hutchinson\Application Data\Mozilla\Firefox\Profiles\63lyuoo9.default\reminderfox\reminderfox.ics.bak1 [985]

O61 - LFC:Last File Created 20/08/2008 - 14:58:56 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\NHELPER.EX_ [40653]

O61 - LFC:Last File Created 28/03/2007 - 06:08:58 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\DIGCORE.EX_ [842500]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\Netsetup\stub.ex_ [200704]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\Windows System Drivers\HP\FRA\NT_Win2000\HPLTLNK.EX_ [19541]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\Windows System Drivers\HP\FRA\NT_Win2000\hpltcol1.ex_ [52424]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\Windows System Drivers\HP\FRA\Win9X\HPLOTCHG.EX_ [19819]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\Windows System Drivers\HP\FRA\Win9X\HPLTLNK.EX_ [23294]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\support\aw\_inst32i.ex_ [290586]

O61 - LFC:Last File Created 30/10/2006 - 19:59:10 ---A- C:\Documents And Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\AUTOCAD\vve\_inst32i.ex_ [320411]

O61 - LFC:Last File Created 30/12/1899 - 12:29:51 -SHA- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\IETldCache\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 14:23:12 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 30/12/1899 - 14:23:20 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1229272821-1220945662-725345543-1004\Credentials [378]

O61 - LFC:Last File Created 30/12/1899 - 14:23:32 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Historique\History.IE5\MSHist012012011620120117\index.dat [32768]

O61 - LFC:Last File Created 30/12/1899 - 14:26:58 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 14:26:58 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 30/12/1899 - 14:26:58 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 14:30:51 --HA- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:30:51 --HA- C:\Documents And Settings\postgres.CHAZAL-EDBC611A\NtUser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:31:24 --HA- C:\Documents And Settings\Administrateur\NtUser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:31:24 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:31:24 --HA- C:\Documents And Settings\Invité\NtUser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:31:24 --HA- C:\Documents And Settings\Session rapide\NtUser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 14:31:24 --HA- C:\Documents And Settings\postgres\NtUser.dat.LOG [1024]

O61 - LFC:Last File Created 30/12/1899 - 15:37:58 --HA- C:\Documents And Settings\Administrateur\ntuser.dat [5242880]

O61 - LFC:Last File Created 30/12/1899 - 15:37:58 --HA- C:\Documents And Settings\Session rapide\NTUSER.DAT [5505024]

O61 - LFC:Last File Created 30/12/1899 - 16:29:16 -SHA- C:\Documents And Settings\Ken Hutchinson\IECompatCache\index.dat [884736]

O61 - LFC:Last File Created 30/12/1899 - 16:29:16 -SHA- C:\Documents And Settings\Ken Hutchinson\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 30/12/1899 - 16:29:16 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 16:29:16 -SHA- C:\Documents And Settings\Ken Hutchinson\PrivacIE\index.dat [1261568]

O61 - LFC:Last File Created 30/12/1899 - 16:29:18 -SHA- C:\Documents And Settings\Ken Hutchinson\Cookies\index.dat [49152]

O61 - LFC:Last File Created 30/12/1899 - 19:59:27 -SHA- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 19:59:27 -SHA- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 20:04:38 RSH-- C:\Documents And Settings\Ken Hutchinson\ciiteb.exe [266240]

O61 - LFC:Last File Created 30/12/1899 - 20:05:02 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\99fd74b2\@ [2048]

O61 - LFC:Last File Created 30/12/1899 - 20:05:02 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\99fd74b2\X [57344]

O61 - LFC:Last File Created 30/12/1899 - 20:14:13 -S-A- C:\Documents And Settings\Ken Hutchinson\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96124]

O61 - LFC:Last File Created 30/12/1899 - 20:14:13 -S-A- C:\Documents And Settings\Ken Hutchinson\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]

O61 - LFC:Last File Created 30/12/1899 - 23:21:09 -SHA- C:\Documents And Settings\Ken Hutchinson\Application Data\Microsoft\Internet Explorer\UserData\index.dat [16384]

O61 - LFC:Last File Created 30/12/1899 - 23:21:09 -SHA- C:\Documents And Settings\Ken Hutchinson\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [16384]

O61 - LFC:Last File Created 30/12/2006 - 06:16:10 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSNCLI.EX_ [11058961]

O61 - LFC:Last File Created 30/12/2006 - 06:18:52 ---A- C:\Documents And Settings\Ken Hutchinson\Bureau\A ranger\win xp\I386\MSNSUSII.EX_ [865347]

~ Scan Files in 21mn 52s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\Aavmker4.sys (Aavmker4) .(.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) - LEGACY_AAVMKER4

O64 - Services: CurCS - 09/07/2010 - C:\WINDOWS\system32\DRIVERS\AegisP.sys (AegisP) .(.Cisco Systems, Inc. - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswMon2.sys (aswMon2) .(.AVAST Software - avast! File System Filter Driver for Window.) - LEGACY_ASWMON2

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswRdr.sys (aswRdr) .(.AVAST Software - avast! TDI RDR Driver.) - LEGACY_ASWRDR

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI

O64 - Services: CurCS - 30/09/2007 - C:\WINDOWS\system32\DRIVERS\atksgt.sys - atksgt (atksgt) .(...) - LEGACY_ATKSGT

O64 - Services: CurCS - 14/03/2009 - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe (Autodesk Licensing Service) .(.Autodesk, Inc. - System Level Service Utility.) - LEGACY_AUTODESK_LICENSING_SERVICE

O64 - Services: CurCS - 28/11/2011 - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS

O64 - Services: CurCS - 18/01/2007 - C:\WINDOWS\system32\DRIVERS\AvgArCln.sys (AvgArCln) .(.GRISOFT, s.r.o. - AVG7 Clean Driver.) - LEGACY_AVGARCLN

O64 - Services: CurCS - 05/06/2009 - C:\WINDOWS\system32\Drivers\avgldx86.sys (AvgLdx86) .(.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - LEGACY_AVGLDX86

O64 - Services: CurCS - 05/06/2009 - C:\WINDOWS\system32\Drivers\avgmfx86.sys (AvgMfx86) .(.GRISOFT, s.r.o. - AVG Resident Shield Minifilter Driver.) - LEGACY_AVGMFX86

O64 - Services: CurCS - 05/06/2009 - C:\WINDOWS\system32\Drivers\avgtdix.sys (AvgTdiX) .(.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - LEGACY_AVGTDIX

O64 - Services: CurCS - 31/01/2007 - C:\WINDOWS\system32\DRIVERS\avgarkt.sys (AVG Anti-Rootkit) .(.GRISOFT, s.r.o. - AVG Anti-Rootkit Driver.) - LEGACY_AVG_ANTI-ROOTKIT

O64 - Services: CurCS - 02/09/2009 - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe (BlueSoleilCS) .(.IVT Corporation - Bluetooth Application.) - LEGACY_BLUESOLEILCS

O64 - Services: CurCS - 02/09/2009 - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe (BsHelpCS) .(.IVT Corporation - Bluetooth Application.) - LEGACY_BSHELPCS

O64 - Services: CurCS - 22/11/2006 - C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys (BTNetFilter) .(.IVT Corporation. - Bluetooth Network Filter Driver.) - LEGACY_BTNETFILTER

O64 - Services: CurCS - ??\??\???? - (COMSysApp) .(. - .) - LEGACY_COMSYSAPP

O64 - Services: CurCS - 27/03/2009 - C:\WINDOWS\system32\drivers\cpuz132_x32.sys (cpuz132) .(.Windows ® Codename Longhorn DDK provider - CPUID Driver.) - LEGACY_CPUZ132

O64 - Services: CurCS - ??\??\???? - (DcomLaunch) .(. - .) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 21/07/2011 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - 14/06/2006 - C:\WINDOWS\system32\drivers\EIO.sys (EIO) .(.ASUSTeK Computer Inc. - ASUS Kernel Mode Driver for NT.) - LEGACY_EIO

O64 - Services: CurCS - 17/09/2008 - C:\WINDOWS\system32\DRIVERS\ENTECH.sys (ENTECH) .(.EnTech Taiwan - Pas de description.) - LEGACY_ENTECH

O64 - Services: CurCS - 03/04/1996 - C:\WINDOWS\system32\giveio.sys - giveio (giveio) .(...) - LEGACY_GIVEIO

O64 - Services: CurCS - 18/11/2007 - C:\WINDOWS\system32\DRIVERS\gmer.sys (gmer) .(.GMER - GMER Driver http://www.gmer.net.) - LEGACY_GMER

O64 - Services: CurCS - 29/08/2008 - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (GoogleDesktopManager-061008-081103) .(.Google - Google Desktop.) - LEGACY_GOOGLEDESKTOPMANAGER-061008-081103

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\msgpc.sys (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC

O64 - Services: CurCS - 24/02/2010 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE

O64 - Services: CurCS - 22/10/2004 - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - 04/09/2002 - C:\Program Files\Iomega\System32\AppServices.exe (Iomega App Services) .(.Iomega Corporation - AppServices.) - LEGACY_IOMEGA_APP_SERVICES

O64 - Services: CurCS - 03/10/2011 - C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - 02/09/2011 - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Ad-Aware Service) .(.Lavasoft Limited - Ad-Aware Service Application.) - LEGACY_LAVASOFT_AD-AWARE_SERVICE

O64 - Services: CurCS - 16/06/2011 - C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys - Lavasoft helper driver (Lavasoft Kernexplorer) .(...) - LEGACY_LAVASOFT_KERNEXPLORER

O64 - Services: CurCS - 12/08/2010 - C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lbd) .(.Lavasoft AB - Boot Driver.) - LEGACY_LBD

O64 - Services: CurCS - 28/10/2011 - C:\WINDOWS\system32\Drivers\LFsys.sys (LFSys) .(.© Everstrike Software - Lock Folder XP Filter Driver.) - LEGACY_LFSYS

O64 - Services: CurCS - 22/02/2010 - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (LightScribeService) .(.Hewlett-Packard Company - LightScribe Service.) - LEGACY_LIGHTSCRIBESERVICE

O64 - Services: CurCS - 30/09/2007 - C:\WINDOWS\system32\DRIVERS\lirsgt.sys - lirsgt (lirsgt) .(...) - LEGACY_LIRSGT

O64 - Services: CurCS - 25/11/2011 - C:\Program Files\ma-config.com\maconfservice.exe (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE

O64 - Services: CurCS - 22/11/2004 - C:\Program Files\COMMON~1\Motive\MRENDIS5.sys (MRENDIS5) .(.Motive, Inc. - Motive NDIS 5.0 Protocol Driver.) - LEGACY_MRENDIS5

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(...) - LEGACY_NETBT

O64 - Services: CurCS - 23/09/2011 - C:\WINDOWS\system32\drivers\nhcDriver.sys (nhcDriverDevice) .(.pBUS-167 Software - Notebook Hardware Control (NHC) - Homepage, Downloads, Help, Docu, FAQ, News - www.NotebookHardwareControl.net - Notebook Hardware Control Device Driver.) - LEGACY_NHCDRIVERDEVICE

O64 - Services: CurCS - 01/06/2008 - C:\WINDOWS\system32\drivers\npf.sys (NPF) .(.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF

O64 - Services: CurCS - 08/10/2011 - C:\WINDOWS\system32\nvsvc32.exe (NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 285.5.) - LEGACY_NVSVC

O64 - Services: CurCS - 08/10/2011 - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (nvUpdatusService) .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) - LEGACY_NVUPDATUSSERVICE

O64 - Services: CurCS - 30/04/2009 - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe - Sony Ericsson OMSI download service (OMSI download service) .(...) - LEGACY_OMSI_DOWNLOAD_SERVICE

O64 - Services: CurCS - ??\??\???? - (pgsql-8.3) .(. - .) - LEGACY_PGSQL-8.3

O64 - Services: CurCS - 21/10/2011 - C:\WINDOWS\system32\PnkBstrA.exe - PnkBstrA (PnkBstrA) .(...) - LEGACY_PNKBSTRA

O64 - Services: CurCS - ??\??\???? - (RpcSs) .(. - .) - LEGACY_RPCSS

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS

O64 - Services: CurCS - 13/11/2007 - C:\WINDOWS\system32\DRIVERS\secdrv.sys (Secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV

O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\drivers\sfdrv01.sys (sfdrv01) .(.Protection Technology - StarForce Protection Environment Driver.) - LEGACY_SFDRV01

O64 - Services: CurCS - 16/05/2005 - C:\WINDOWS\system32\drivers\sfhlp02.sys (sfhlp02) .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02

O64 - Services: CurCS - 03/11/2005 - C:\WINDOWS\system32\drivers\sfvfs02.sys (sfvfs02) .(.Protection Technology - StarForce Protection VFS Driver.) - LEGACY_SFVFS02

O64 - Services: CurCS - 29/06/2011 - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Sony Ericsson PCCompanion) .(.Avanquest Software - Sony Ericsson PCCompanion Service.) - LEGACY_SONY_ERICSSON_PCCOMPANION

O64 - Services: CurCS - 18/03/2011 - C:\WINDOWS\system32\speedfan.sys (speedfan) .(.Almico Software - SpeedFan x32 Driver.) - LEGACY_SPEEDFAN

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD

O64 - Services: CurCS - ??\??\???? - (TermService) .(. - .) - LEGACY_TERMSERVICE

O64 - Services: CurCS - 14/11/2008 - C:\Program Files\Fichiers communs\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys (UltraMonUtility) .(.Realtime Soft Ltd - UltraMon Utility Driver.) - LEGACY_ULTRAMONUTILITY

O64 - Services: CurCS - 27/02/2008 - C:\WINDOWS\system32\DRIVERS\wlndis50.sys (WLNdis50) .(.Pas de propriétaire - WLAN NDIS 5.0 User Mode Control Driver.) - LEGACY_WLNDIS50

O64 - Services: CurCS - 11/02/2009 - C:\Program Files\TRENDnet\TEW-648UB\WLSVC.exe (WLSVC) .(.Pas de propriétaire - WlanSvc.) - LEGACY_WLSVC

O64 - Services: CurCS - 09/11/2008 - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (YahooAUService) .(.Yahoo! Inc. - AutoUpater Service Module.) - LEGACY_YAHOOAUSERVICE

O64 - Services: CurCS - 24/09/2002 - C:\Program Files\Iomega\AutoDisk\ADService.exe (_IOMEGA_ACTIVE_DISK_SERVICE_) .(.Iomega Corporation - Active Disk Service.) - LEGACY__IOMEGA_ACTIVE_DISK_SERVICE_

~ Scan Services in 00mn 04s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:27/02/2008 (.Pas de propriétaire - Windows ® DDK driver.) (1.0.0.50) - c:\windows\system32\drivers\WLNdis50.sys

~ Scan Sigcheck in 25mn 40s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\PROGRAM FILES\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\PROGRAM FILES\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Opera.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\PROGRAM FILES\Mozilla Firefox\uninstall\helper.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Opera.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\PROGRAM FILES\Mozilla Firefox\uninstall\helper.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Opera.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\PROGRAM FILES\Mozilla Firefox\uninstall\helper.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Opera.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.cbid", "HL");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.default-channel-url-mask", "http://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.fresh-install", false);

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.l", "dis");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.last-config-req", "1278451219765");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.locale", "fr_FR");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.o", "15673");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.options-lang", "fr");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.options-locale", "UK");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.overlay-reloaded-using-restart", true);

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.qsrc", "2871");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.r", "4");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("extensions.asktb.search-suggestions-enabled", true);

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("surfcanyon.fractions", "0.0_0.0\r\n");

O69 - SBI: prefs.js [Ken Hutchinson - 63lyuoo9.default] user_pref("surfcanyon.last_checked_ts", "1267011995800");

O69 - SBI: SearchScopes [HKCU] {0633EE93-1111-472f-A0FF-E1416B8B2E3B} - (Google Customized Web Search) - Gooofullsearch.com

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {6552C7DD-90A4-4387-B795-F8F96747DE19} - (ICQ Search) - Download ICQ for mobile – Free SMS to your friends!

O69 - SBI: SearchScopes [HKCU] {7DBBEDD2-0FA8-421E-9CD2-4FED9984658B} - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {A38C34D2-AF7B-4D75-BD55-9BA2CA830047} - (Wikipédia (fr)) - Wikipédia, l'encyclopédie libre

~ Scan Keys in 00mn 00s

 

 

 

---\\ Crack & Keygen Files (O82)

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.95ef6cc1e6e2f666c5cc3b534d75122c.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.e2ff16d1b13bcce72bfd442439bb2.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\Map info Professional v8.0 Cracked.rar

C:\Documents and Settings\Ken Hutchinson\Mes documents\Reason\Propellerheads - Reason 3.0 Keygenerator + REG Files (RISE).rar

C:\Program Files\eMule\Incoming\key pour covadis\Keygen COVADIS 10.rar

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\keygen texas calculatem crack(osloskop.net)(1).zip

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\SHSetup.exe

C:\Program Files\eMule\Incoming\WinACE WinRAR WinZip WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\Winzip Winiso Password & Cracker.rar

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.95ef6cc1e6e2f666c5cc3b534d75122c.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.e2ff16d1b13bcce72bfd442439bb2.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\Map info Professional v8.0 Cracked.rar

C:\Documents and Settings\Ken Hutchinson\Mes documents\Reason\Propellerheads - Reason 3.0 Keygenerator + REG Files (RISE).rar

C:\Program Files\eMule\Incoming\key pour covadis\Keygen COVADIS 10.rar

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\keygen texas calculatem crack(osloskop.net)(1).zip

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\SHSetup.exe

C:\Program Files\eMule\Incoming\WinACE WinRAR WinZip WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\Winzip Winiso Password & Cracker.rar

F:\Maxtor 500\Mes téléchargements_270909\Programmes\Gros Utilitaires\MapInfo 8.0\Map info Professional v8.0 Cracked.rar

F:\Maxtor 500\Mes téléchargements_270909\Programmes\Petits utilitaires\RARPAsswordCracker\rpc412_setup.exe

I:\Sauvegarde Maxtor 500 31122010\Maxtor 500\décompressions\Map info Professional v8.0 Cracked.rar

I:\Sauvegarde Maxtor 500 31122010\Maxtor 500\Mes téléchargements_270909\Programmes\Gros Utilitaires\MapInfo 8.0\Map info Professional v8.0 Cracked.rar

~ Scan Files in 05mn 24s

 

 

 

---\\ Recherche des services démarrés par Svchost (O83)

O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]

O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [77824]

O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464]

O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576]

O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488]

O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040]

O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952]

O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]

O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504]

O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840]

O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096]

O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792]

O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144]

O83 - Search Svchost Services: Nla (Nla) . (...) -- C:\WINDOWS\system32\mswsock.dll [247808]

O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]

O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576]

O83 - Search Svchost Services: icm10blk (icm10blk) . (...) -- C:\WINDOWS\system32\PSSdk23.dll [0]

O83 - Search Svchost Services: ichaud (ichaud) . (.Iomega - Iomega® Active Disk™.) -- C:\WINDOWS\system32\rslinx.dll [5120]

O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368]

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248]

O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]

O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll [18944]

O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]

O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll [332800]

O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]

O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\WINDOWS\system32\tapisrv.dll [249856]

O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]

O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]

O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]

O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]

O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]

O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024]

O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]

O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]

O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680]

O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]

O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [27136]

O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376]

O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440]

~ Scan Services in 00mn 01s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.BF791E4EF90D56028533B2A7627CB599] [sPRF][17/03/2011] (...) -- C:\Documents and Settings\All Users\Application Data\bdinstall.bin [1459819]

[MD5.5D913E5FD12E344EA0132358BDE24F59] [sPRF][06/02/2008] (...) -- C:\Documents and Settings\All Users\Application Data\ezsid.dat [32]

[MD5.CBF470B77B2DB2F25C56E05CE391F18A] [sPRF][24/12/2011] (.Avanquest Software - IElevator Class Container.) -- C:\Documents and Settings\All Users\Application Data\hpe106.dll [148736]

[MD5.E2791F044E9B77AB653160C63CF88034] [sPRF][25/01/2007] (...) -- C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\fusioncache.dat [138]

[MD5.A719B9EE6116B496F4000C0B1311EA13] [sPRF][20/10/2011] (...) -- C:\Documents and Settings\Ken Hutchinson\Application Data\PnkBstrK.sys [22328]

[MD5.914B2F4771AA209244625ED923CCAC9E] [sPRF][13/10/2009] (...) -- C:\Documents and Settings\Ken Hutchinson\Application Data\wklnhst.dat [972]

[MD5.BBF5B917B98607EBB0C688D2DAE07863] [sPRF][16/01/2012] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Ken Hutchinson\Bureau\ZHPDiag2.exe [3900757]

[MD5.B2D0B3FE6F8958BC5C4D565FF9D93FD3] [sPRF][08/11/2011] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\AccessibleMarshal.dll [12288]

[MD5.B140014439012AF93613C1B2111ECDA3] [sPRF][08/11/2011] (.Pas de propriétaire - ArticleManager DLL.) -- C:\Program Files\ArticleManager.dll [37888]

[MD5.F776568714C3C7D1F0B6C91057320F8E] [sPRF][08/09/2010] (...) -- C:\Program Files\CleanUp.exe [110592]

[MD5.14866D7400BE01A08C0930229C5F6F84] [sPRF][08/11/2011] (.Pas de propriétaire - UCID DLL.) -- C:\Program Files\DID.dll [28672]

[MD5.0BE50B182522B79B83D765C15D261DD9] [sPRF][21/12/2011] (.Pas de propriétaire - DM DLL.) -- C:\Program Files\DM.dll [130560]

[MD5.47A07AF9B86BBF18D91749EA3023D4F8] [sPRF][08/11/2011] (.Mozilla Foundation - NSS freebl Library.) -- C:\Program Files\freebl3.dll [239616]

[MD5.B2EA0CDF32399C04240C31B195751E86] [sPRF][01/12/2010] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\gkgfx.dll [90112]

[MD5.61B9E78257B5B753EC86213075160DF2] [sPRF][08/11/2011] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\IA2Marshal.dll [27136]

[MD5.E810E5138DFC16F3C36DE49721BBEB8C] [sPRF][08/11/2011] (...) -- C:\Program Files\js3250.dll [842752]

[MD5.DD64C9008C440AF47C60863E249BEBFA] [sPRF][01/12/2010] (...) -- C:\Program Files\libeay32.dll [679936]

[MD5.B9030D821E099C79DE1C9125B790E2DA] [sPRF][01/12/2010] (.Microsoft Corporation - MFCDLL Shared Library - Retail Version.) -- C:\Program Files\mfc90u.dll [1162744]

[MD5.F3E555E877C942863E6DFC7EA6880E85] [sPRF][01/12/2010] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\mozz.dll [69632]

[MD5.17D9C1DB8FC4E195F5B4CA52C49C162B] [sPRF][23/06/2010] (.Sample Corporation - User-Generated Microsoft ® C/C++ Runtime Library.) -- C:\Program Files\MSLUP60.dll [393216]

[MD5.537BEC88BC9A1AFD4C1B73D21F552507] [sPRF][23/06/2010] (.Sample Corporation - User-Generated Microsoft ® C/C++ Runtime Library.) -- C:\Program Files\MSLURT.dll [237568]

[MD5.6DE5C66E434A9C1729575763D891C6C2] [sPRF][01/12/2010] (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Program Files\msvcp90.dll [568832]

[MD5.E7D91D008FE76423962B91C43C88E4EB] [sPRF][01/12/2010] (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Program Files\msvcr90.dll [655872]

[MD5.8DBBBCA8ECF227851266CD17E534EAE9] [sPRF][08/11/2011] (.Mozilla Foundation - NSPR Library.) -- C:\Program Files\nspr4.dll [154624]

[MD5.4EFED1B6E98454AFC773C9A84D26EA06] [sPRF][08/11/2011] (.Mozilla Foundation - NSS Base Library.) -- C:\Program Files\nss3.dll [625664]

[MD5.FDD239A85AD5738C4CD354DCFCA80F35] [sPRF][08/11/2011] (.Mozilla Foundation - NSS Builtin Trusted Root CAs.) -- C:\Program Files\nssckbi.dll [324608]

[MD5.2D5367A8D3AC6B16C330FF08DE59FB8D] [sPRF][08/11/2011] (.Mozilla Foundation - Legacy Database Driver.) -- C:\Program Files\nssdbm3.dll [88064]

[MD5.31AE5FC4E85A436A76377F5B1BF67317] [sPRF][08/11/2011] (.Mozilla Foundation - NSS Utility Library.) -- C:\Program Files\nssutil3.dll [67584]

[MD5.C0B9FC59475B295426A28C9D6E503D8B] [sPRF][16/11/2011] (.Pas de propriétaire - BrowserComponent DLL.) -- C:\Program Files\PGBrowser.dll [154624]

[MD5.0969E884ABBFC35A2645E2C0DBDF0970] [sPRF][08/11/2011] (...) -- C:\Program Files\PGDetector.exe [114688]

[MD5.C875A9819403F9440C6B03278AE58764] [sPRF][01/12/2010] (.Pas de propriétaire - CxImageDll DLL.) -- C:\Program Files\PGImageDll.dll [434176]

[MD5.F56AF40312C4734F3292E4F9E4044F60] [sPRF][08/11/2011] (.Pas de propriétaire - WMIRetriever DLL.) -- C:\Program Files\PGWMIRetriever.dll [33280]

[MD5.1CFB32490DEEB208C7769491715D621D] [sPRF][08/11/2011] (.Mozilla Foundation - PLC Library.) -- C:\Program Files\plc4.dll [14848]

[MD5.B337CB0ED3F15919F4CB77BDB3F8E875] [sPRF][08/11/2011] (.Mozilla Foundation - PLDS Library.) -- C:\Program Files\plds4.dll [11776]

[MD5.50A7896F3E84BC5AC359C4060C182BFC] [sPRF][08/11/2011] (.Mozilla Corporation - Plugin Container for Namoroka.) -- C:\Program Files\plugin-container.exe [9728]

[MD5.2B8D988ADA29EA548A43663FE783E65E] [sPRF][24/12/2011] (.Pas de propriétaire - PMU MFC Application.) -- C:\Program Files\PMU.exe [3046912]

[MD5.472F7225119ED7C6F34EA15CA445B80F] [sPRF][08/11/2011] (.Mozilla Foundation - NSS S/MIME Library.) -- C:\Program Files\smime3.dll [83968]

[MD5.48A9F478CFB3CDF13438483F849D30B3] [sPRF][08/11/2011] (.Mozilla Foundation - NSS PKCS #11 Library.) -- C:\Program Files\softokn3.dll [141312]

[MD5.8BEA6251A11D5E12FCA360B80FC5B9DB] [sPRF][08/11/2011] (.sqlite.org - SQLite Database Library.) -- C:\Program Files\sqlite3.dll [473600]

[MD5.6A48EF51893BC78A844A82B0381781B2] [sPRF][08/11/2011] (.Mozilla Foundation - NSS SSL Library.) -- C:\Program Files\ssl3.dll [122880]

[MD5.5EEA698C89F37158F4ABC0F5AE374953] [sPRF][01/12/2010] (...) -- C:\Program Files\ssleay32.dll [147456]

[MD5.677AB59EAC8EDA5027A8F437A216382B] [sPRF][08/11/2011] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\xpcom.dll [12800]

[MD5.CCD62573E6B21A9CC98ADF223AEB2CB5] [sPRF][01/12/2010] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\xpcom_compat.dll [81920]

[MD5.C49654BFB4CA2B59E4A707A29FE81AC2] [sPRF][01/12/2010] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\xpcom_core.dll [430080]

[MD5.AD0E4A13D41F0E488B799A9E6ECEA88A] [sPRF][08/11/2011] (.Mozilla Foundation - Pas de description.) -- C:\Program Files\xul.dll [10193920]

[MD5.B3FA3EE6218FFA2854202350E9A10D60] [sPRF][01/12/2010] (.Pas de propriétaire - zlib data compression library.) -- C:\Program Files\zlib1.dll [59904]

[MD5.18075B2C9F0F300BEE209744A8BEC353] [sPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\bdcore.dll [32]

[MD5.298068536300DA6DC163E394797A7C50] [sPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\bdupd.dll [118784]

[MD5.A9F8AB66D9D05A13843623EE6B92D259] [sPRF][13/04/2007] (.Microsoft - Uno Messenger.) -- C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll [382344]

[MD5.1CB82F147E9642F8058AF695DBA34125] [sPRF][05/03/2005] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\WINDOWS\Downloaded Program Files\IDropENU.dll [113784]

[MD5.8DA688046A13090E0ACD1366A5DEF0A6] [sPRF][07/03/2005] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\WINDOWS\Downloaded Program Files\IDropFRA.dll [114256]

[MD5.1CAB87DE6638846FBF51F32B5D95E482] [sPRF][25/05/2006] (...) -- C:\WINDOWS\Downloaded Program Files\ipsupd.dll [53248]

[MD5.18075B2C9F0F300BEE209744A8BEC353] [sPRF][07/12/2004] (...) -- C:\WINDOWS\Downloaded Program Files\libfn.dll [32]

[MD5.B069B555A00AA026F657AA4FD13AE154] [sPRF][29/05/2003] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll [160864]

[MD5.8945CCA5FC4F25168E8B6F401EFAF51F] [sPRF][22/02/2007] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll [304544]

[MD5.E661E91B5929632665683222D509D271] [sPRF][28/02/2007] (.Microsoft Corporation - Zone.com Minesweeper Flags for MSN Messenger.) -- C:\WINDOWS\Downloaded Program Files\MineSweeper.dll [130472]

[MD5.1E5CFDF9AEBDD84305A4C8154277A269] [sPRF][28/02/2007] (.Microsoft Corporation - Zone.com Checkers for MSN Messenger.) -- C:\WINDOWS\Downloaded Program Files\msgrchkr.dll [131472]

[MD5.D2FB109C3F0DAAAA4A73E5921656DB3E] [sPRF][20/06/2006] (.Microsoft® Corporation - MSN Photo Upload Tool.) -- C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll [379704]

[MD5.F06A42348DAFD569A82DF4A61F57B8E4] [sPRF][20/06/2006] (.Microsoft® Corporation - MSN Photo Upload Tool.) -- C:\WINDOWS\Downloaded Program Files\PURen-us.dll [117560]

[MD5.732CACA8E848F6E721B093E51FC50B1D] [sPRF][09/01/2007] (.Microsoft® Corporation - Outil MSN Téléchargement de photos.) -- C:\WINDOWS\Downloaded Program Files\PURfr-fr.dll [110592]

~ Scan Files in 00mn 10s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8966 - (14/01/2012)

Clés trouvées (Keys found) : 87

Valeurs trouvées (Values found) : 4

Dossiers trouvés (Folders found) : 6

Fichiers trouvés (Files found) : 0

 

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]:Shell =>Hijack.Shell.Gen

[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Toolbar.AskSBar

[HKLM\Software\Classes\AppID\TbCommonUtils.DLL] =>Toolbar.Agent

[HKLM\Software\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent

[HKLM\Software\Classes\TbCommonUtils.CommonUtils] =>Toolbar.Agent

[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbRequest] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbTask] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.TbTask.1] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent

[HKLM\Software\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.SearchProviderManager] =>Toolbar.Agent

[HKLM\Software\Classes\Toolbar3.SearchProviderManager.1] =>Toolbar.Agent

[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook] =>Toolbar.Agent

[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook] =>Adware.Agent

[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1] =>Adware.Agent

[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}] =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}] =>Toolbar.Agent

[HKLM\Software\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent

[HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}] =>Adware.SocialSkinz

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}] =>Toolbar.AskTBar

[HKLM\Software\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz

[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}] =>Toolbar.Conduit

[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz

[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz

[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz

[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.AskSBar

[HKLM\Software\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}] =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar

[HKLM\Software\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}] =>Adware.SocialSkinz

[HKLM\Software\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz

[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}] =>Hijacker.Seeearch

[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz

[HKLM\Software\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}] =>Adware.SocialSkinz

[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}] =>Hijacker.Seeearch

[HKLM\Software\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}] =>Adware.SocialSkinz

[HKLM\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz

[HKLM\Software\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}] =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}] =>Adware.SPointer

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}] =>Adware.SPointer

[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware. BullseyeToolbar

[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] =>Trojan.Adclicker

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] =>Trojan.Adclicker

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz

[HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}] =>Adware.SocialSkinz

[HKLM\Software\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}] =>Adware.SocialSkinz

[HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom] =>PUP.OfferBox

[HKCU\Software\Ask.com] =>Toolbar.AskBar

[HKCU\Software\Ask.com] =>Toolbar.AskBarDis

[HKCU\Software\AppDataLow\AskToolbarInfo] =>Toolbar.AskTBar

[HKCU\Software\CToolbar] =>Toolbar.Crawler

[HKLM\Software\CToolbar] =>Toolbar.Crawler

[HKLM\Software\iavatars.com] =>Adware.BHO

[HKCU\Software\OfferBox] =>PUP.OfferBox

[HKCU\Software\PartyGaming] =>Casino.OnlineGames

[HKCU\Software\Spointer] =>Adware.SPointer

[HKLM\Software\Classes\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}] =>Adware.Bandoo

[HKLM\SOFTWARE\Microsoft\RFC1156Agent] =>Adware.Bandoo

[HKLM\Software\Messenger Plus!\OpenCandy] =>Adware.OpenCandy

[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{CA3EB689-8F09-4026-AA10-B9534C691CE0} =>Adware.SocialSkinz

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar

[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar

[HKLM\Software\Mozilla\Firefox\Extensions]:[email protected] =>PUP.OfferBox

C:\Program Files\OfferBox =>PUP.OfferBox

C:\Documents and Settings\Ken Hutchinson\Application Data\Toolbar4 =>Toolbar.Conduit

C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\AskToolbar =>Toolbar.AskTBar

C:\Documents and Settings\Ken Hutchinson\Local Settings\Application Data\moovida air =>Adware.SPointer

~ Scan Additionnel in 00mn 12s

 

 

 

---\\ Recherche détournement de DNS routeur (O89) (None)

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Demand 14/03/2009 74360 | (Autodesk Licensing Service) . (.Autodesk, Inc..) - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe

SR - | Auto 28/11/2011 44768 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SR - | Auto 02/09/2009 1466476 | (BlueSoleilCS) . (.IVT Corporation.) - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe

SR - | Demand 02/09/2009 102503 | (BsHelpCS) . (.IVT Corporation.) - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe

SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe

SS - | Demand 29/08/2008 29744 | Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

SS - | Auto 24/02/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 24/02/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

SR - | Auto 04/09/2002 73728 | (Iomega App Services) . (.Iomega Corporation.) - C:\Program Files\Iomega\System32\AppServices.exe

SR - | Auto 03/10/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 02/09/2011 2152152 | (Lavasoft Ad-Aware Service) . (.Lavasoft Limited.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

SS - | Disabled 22/02/2010 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

SS - | Demand 25/11/2011 311928 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SS - | Demand 12/01/2010 3461904 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\WINDOWS\system32\GameMon.des

SR - | Auto 08/10/2011 298304 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

SR - | Auto 08/10/2011 2253120 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

SR - | Auto 90112 | (OMSI download service) . (...) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

SR - | Auto 75136 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe

SS - | Demand 01/06/2008 92792 | Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies.) - C:\Program Files\WinPcap\rpcapd.exe

SS - | Demand 29/06/2011 155344 | (Sony Ericsson PCCompanion) . (.Avanquest Software.) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

SS - | Disabled 167936 | (WLSVC) . (...) - C:\Program Files\TRENDnet\TEW-648UB\WLSVC.exe

SR - | Auto 09/11/2008 602392 | (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

SR - | Auto 24/09/2002 151552 | (_IOMEGA_ACTIVE_DISK_SERVICE_) . (.Iomega Corporation.) - C:\Program Files\Iomega\AutoDisk\ADService.exe

~ Scan Services in 00mn 49s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

~ Scan MBR in 00mn 05s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) (None)

 

---\\ Liste des émulateurs de CD/DVD (Hook du MBR)

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 26/01/2007 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [664064]

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/02/2009 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd2365.sys [96384]

~ Scan Emulateurs in 00mn 07s

 

 

 

End of the scan (3539 lines in 59mn 27s)(24)

Modifié le 16 janvier 2012 par bondioune

[pear]

Bonsoir,

 

Télécharger AdwCleaner

Sous Vista et Windows 7-> Exécuter en tant qu'administrateur

 

Cliquez sur Recherche et postez le rapport généré C:\AdwCleaner[R1].txt

 

Nettoyage

Relancez AdwCleaner avec droits administrateur

Cliquez sur Suppression et postez le rapport C:\AdwCleaner[s1].txt

 

1)Télécharger Rogue Killer par Tigzy sur le bureau

Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur

Si le programme bloque, cliquez droit sur le lien ci-dessus->Enregistrer sous..

Dans la fenêtre qui s'ouvre renommez Roguekiller ->Winlogon.exe

Quittez tous tes programmes en cours et lancez le

Quand on vous le demande, tapez 1 et valider

Un rapport (RKreport.txt) apparait sur le bureau

montrant les processus infectieux

Copier/Coller le contenu dans la réponse

 

 

2)Relancez Rogue Killer

Nettoyage du registre Passer en Mode 2

 

 

 

3)Téléchargez MBAM

ICI

ou LA

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

Cliquer ici

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Exécuter avec droits d'administrateur.

Sous Vista , désactiver l'Uac

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant de mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Et un fichier Mbam.log apparaitra

 

 

 

4)Nettoyage

Relancez Mbam(Malewares'Bytes)

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

[bondioune]

Bonsoir,

 

J'ai fait tourner Adwcleaner et Rogue et j'ai mis en route MbAM en pensant poster tous les rapports en même temps mais j'ai un petit souci.

MbAM est en train de tourner en rond sur une de mes clés USB. En effet je sais pas si ça vient du virus ou du contenu de départ de la clé mais dans la fenêtre de Mbam, quand je lis le fichier scanné en cours, j'ai:

 

H:\.disk\exemple.exe puis une dizaine de fichier sont passés en revue et ensuite je me retrouve avec

H:\.disk\.disk\exemple.exe .... et les mêmes fichiers sont scannés et on repart avec

H:\.disk\.disk\.disk\exemple.exe etc etc etc...

 

j'en suis à 20\.disk\ je pense que je vais débrancher la clé ?

Je n'ai pas eu ce problème avec la clé précédente (sur laquelle j'ai pu voir que mes fichiers originaux étaient toujours, puisque scanné, mais invisible avec l'explorateur windows et aussi que les faux fichiers implantés par le virus tous en .exe et faisant 260 Ko n'ont pas été détectés)

 

Donc je disais ça vient peut être du contenu de la clé: c'est une minilinuxlive

 

je crois un truc comme ça:http://www.toocharger.com/fiches/windows/lili-linux-live-usb-creator/39322.htm

 

 

Bon je débranche la clé.... si fallait pas, bah je referais.

[bondioune]

Alors finalement ma clé a été analysée le temps que je tape le message, voici les rapports:

 

Adwcleaner après suppression

http://pjjoint.malekal.com/files.php?read=20120117_z7e10y6u5g7

 

RogueKiller après bouton 1:

http://pjjoint.malekal.com/files.php?read=20120117_o12j12e5w11g7

 

RogueKiller après bouton 2:

http://pjjoint.malekal.com/files.php?read=20120117_h12t13s9l14t13

 

MbAM rapport après analyse:

http://pjjoint.malekal.com/files.php?read=20120117_i8u7y8y9r15

 

MbAM rapport après supprimer:

http://pjjoint.malekal.com/files.php?read=20120117_k11u12r11k15l12

Modifié le 17 janvier 2012 par bondioune

[pear]

Vous avez des infections graves dont voici l'origine:

---\\ Crack & Keygen Files (O82)

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.95ef6cc1e6e2f666c5cc3b534d75122c.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.e2ff16d1b13bcce72bfd442439bb2.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\Map info Professional v8.0 Cracked.rar

C:\Documents and Settings\Ken Hutchinson\Mes documents\Reason\Propellerheads - Reason 3.0 Keygenerator + REG Files (RISE).rar

C:\Program Files\eMule\Incoming\key pour covadis\Keygen COVADIS 10.rar

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\keygen texas calculatem crack(osloskop.net)(1).zip

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\SHSetup.exe

C:\Program Files\eMule\Incoming\WinACE WinRAR WinZip WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\Winzip Winiso Password & Cracker.rar

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.95ef6cc1e6e2f666c5cc3b534d75122c.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Quarantine\Windows & Office XP Keygen & Activation Crack.zip.e2ff16d1b13bcce72bfd442439bb2.496c87dac0c3a729d0527462637066ba.aawqff

C:\Documents and Settings\Ken Hutchinson\Mes documents\Mes téléchargements\Programmes\Gros Utilitaires\Map info Professional v8.0 Cracked.rar

C:\Documents and Settings\Ken Hutchinson\Mes documents\Reason\Propellerheads - Reason 3.0 Keygenerator + REG Files (RISE).rar

C:\Program Files\eMule\Incoming\key pour covadis\Keygen COVADIS 10.rar

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\keygen texas calculatem crack(osloskop.net)(1).zip

C:\Program Files\eMule\Incoming\Keygen pour calculatem mais trouvé comme vmalware par comodo\SHSetup.exe

C:\Program Files\eMule\Incoming\WinACE WinRAR WinZip WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\WinISO + password & cracker.rar

C:\Program Files\eMule\Incoming\Winzip Winiso Password & Cracker.rar

F:\Maxtor 500\Mes téléchargements_270909\Programmes\Gros Utilitaires\MapInfo 8.0\Map info Professional v8.0 Cracked.rar

F:\Maxtor 500\Mes téléchargements_270909\Programmes\Petits utilitaires\RARPAsswordCracker\rpc412_setup.exe

I:\Sauvegarde Maxtor 500 31122010\Maxtor 500\décompressions\Map info Professional v8.0 Cracked.rar

I:\Sauvegarde Maxtor 500 31122010\Maxtor 500\Mes téléchargements_270909\Programmes\Gros Utilitaires\MapInfo 8.0\Map info Professional v8.0 Cracked.rar

~ Scan Files in 05mn 24s

 

 

Tout ce qu'on vous propose sera inutile si vous n'y mettez bon ordre.

 

Seulement sur système 32 bits:Remove "Rootkit.Win32.ZAccess.c" automatically par DRWeb

http://www.drwebhk.com/en/virus_removal/729202/Rootkit.Win32.ZAccess.c.html

 

Télécharger Dr.Web CureIt! et l'enregistrer sur le bureau.

Télécharger Space Security Pro (32-bit)

ou Space Security Pro (64 bits), l'enregistrer dans bureau.

Redémarrez l'ordinateur en mode sans échec (appuyez sur F8 avant que le logo Microsoft apparaît).

DoubleClick "cureit.exe" sur le bureau, suivez les instructions à l'écran pour scanner le disque dur.

(Attendez patiemment, cela peut prendre 20-60 minutes pour effectuer un balayage express.)

Une fois la numérisation effectuée, sélectionnez tous les virus trouvés et choisissez «guérir».

(A défaut, choisissez "Quarantaine" ou "Supprimer".)

Lorsque tous les virus trouvés sont traités, redémarrez en mode normal.

Désinstaller votre anti-virus qui ne peut pas tuer le virus, puis redémarrer à nouveau.

Sur le bureau , double cliquez Sécurité Pro pour l'exécuter.

 

Pendant l'installation, choisir d'obtenir une clé de démonstration.

Dès la mise à jour, le scanner sera lancé à nouveau, quittez le scanner à ce point.

Terminez l'installation en redémarrant l'ordinateur.

Patientez le temps nécessaire(peut-être plusieurs heures), effectuez une analyse complète de Dr.Web scanner.

 

Relancez Rogue Killer

Pour corriger les Dns Passer en Mode 5

[bondioune]

Bonjour et toujours merci pour votre aide,

 

J'ai viré la liste (corbeille et vidage de corbeille) et j'ai lancé DrWEB Cureit en mode sans échec mais au bout de 5 mn, j'ai un message d'erreur qui me dit:

 

Une erreur système s'est produite au démarrage ou durant le scan

RC=0xC0000005

 

Les questions les plus fréquemment posées trouveront réponses sur notre site etc etc

 

J'ai essayé de jeter un oeil sur le forum de dr Web et j'ai trouvé 2 ou 3 trucs que j'ai réussi à traduire du russe en informatique et de l'informatique au français mais ça n'avance pas bien. Ils disent de passer en mode sans échec et j'y suis déjà.

 

Sinon j'ai vu que Adaware tournait toujours en mode sans échec alors ça pourrait venir de là(?) mais j'arrive pas à le stopper. Enfin, j'y arrive mais y se relance tout seul en 2 secondes.

J'ai lu aussi que cette erreur pouvait etre liée à des problème d'extinction de pc et effectivement quand j'éteinds ou redémarre mon pc, l'écran se mets bien en veille mais la tour ne s'arrete jamais depuis que j'ai le virus. Je suis toujours obligé de l'éteindre via le bouton en façade.

 

Voila voila.

 

Edit:

 

- sans ad aware, ça marche pas

- tout antivirus arrêtés en mode normal, même problème.

Modifié le 18 janvier 2012 par bondioune

[pear]

Avez vous relancé Rogue killer option 5 comme demandé ?

 

Laissez tomber Dr web et tentez ceci:

Webroot ZeroAcces Remover.

 

Webroot a sorti un programme qui tue le malware et il fonctionne.

sur système 64 bits, il y a un doute

Si vous êtes dans ce cas, passez au point 3)

 

Télécharger AntiZeroAcces

Lancez le:

Répondre Yes (oui) à la question, en tapant sur Y puis Entrée

 

Si le fix trouve l’infection, des lignes rouges doivent apparaître.

Le fix vous informe qu’un des fichiers systèmes a été patché et vous propose de le nettoyer.

Tapez Y (oui) et Entrée pour lancer le nettoyage.

Si l’opération a réussi, vous devez avoir le message Cleaned en vert.

Appuyez sur une touche et redémarrer l’ordinateur.

[bondioune]

Alors alors

 

- Dans l'étape précedente: Dr Web, Space Security et RogueK.. comme Dr Web ne fonctionnait pas, je ne suis pas allé plus loin et je n'ai pas fait space security ni RogueK.

 

Dois je les executer ?

 

 

- Dans l'étape ZeroaccesRemover

 

Je lance l'outil et le résultat est (les lignes importantes):

Check Rootkit Device: Found !

...

System Disk class driver: Infected

...

Check file "dtscsi.sys" .. Error !

Check file "sptd.sys" .. Error !

Check file "sptd2365.sys" .. Error

 

Warning votre système est infecté

mais pas par zeroacces ni max++

 

Et comme c'est pas 0acces ni max++, y me propose pas de réparer.

 

Du coup je pige plus... Y me semble pas avoir un Windows 64 bits.... Sandra ou everest le dis ça ? C'est un Windows xp familial sp 3

 

Je vais essayer le space security et RK et faire un coup de MbAM voir si y me trouve toujours 0access.

 

 

Est ce qu'il faut laisser les clés USB branchées pendant tous ces scans (RK, dr Web, antizero etc etc) ?

Est ce que le "virus" a pu se loger dans une clé ? j'ai un processus bidon kooho.exe qui vient d'une de mes clés.

 

 

Edit:

 

Bon alors après m'etre battu avec mes clés USB, j'ai pas fait RK ni space security, j'ai refait plusieurs fois antizero et le log est toujours le même:

 

 

Webroot AntiZeroAccess 0.8 Log File

Execution time: 18/01/2012 - 18:42

Host operation System: Windows Xp X86 version 5.1.2600 Service Pack 3

18:42:57 - CheckSystem - Begin to check system...

18:42:57 - OpenRootDrive - Opening system root volume and physical drive....

18:42:57 - C Root Drive: Disk number: 1 Start sector: 0x0000003F Partition Size: 0x17BD13D8 sectors.

18:42:57 - PrevX Main driver extracted in "C:\WINDOWS\system32\drivers\ZeroAccess.sys".

18:42:57 - InstallAndStartDriver - Main driver was installed and now is running.

18:42:57 - CheckSystem - Warning! Disk class driver is INFECTED.

18:42:59 - CheckFile - Unable to read "dtscsi.sys" file. CreateFile last eror: 0x00000020.

18:43:03 - CheckFile - Unable to read "sptd.sys" file. CreateFile last eror: 0x00000020.

18:43:03 - CheckFile - Unable to read "sptd2365.sys" file. CreateFile last eror: 0x00000020.

18:43:04 - StopAndRemoveDriver - AntiZeroAccess Driver is stopped and removed.

18:43:04 - StopAndRemoveDriver - File "ZeroAccess.sys" was deleted!

18:43:04 - Execution Ended!

 

 

Webroot AntiZeroAccess 0.8 Log File

Execution time: 18/01/2012 - 18:43

Host operation System: Windows Xp X86 version 5.1.2600 Service Pack 3

18:44:00 - CheckSystem - Begin to check system...

18:44:00 - OpenRootDrive - Opening system root volume and physical drive....

18:44:00 - C Root Drive: Disk number: 1 Start sector: 0x0000003F Partition Size: 0x17BD13D8 sectors.

18:44:00 - PrevX Main driver extracted in "C:\WINDOWS\system32\drivers\ZeroAccess.sys".

18:44:00 - InstallAndStartDriver - Main driver was installed and now is running.

18:44:00 - CheckSystem - Warning! Disk class driver is INFECTED.

18:44:02 - CheckFile - Unable to read "dtscsi.sys" file. CreateFile last eror: 0x00000020.

18:44:04 - CheckFile - Unable to read "sptd.sys" file. CreateFile last eror: 0x00000020.

18:44:04 - CheckFile - Unable to read "sptd2365.sys" file. CreateFile last eror: 0x00000020.

18:44:05 - StopAndRemoveDriver - AntiZeroAccess Driver is stopped and removed.

18:44:05 - StopAndRemoveDriver - File "ZeroAccess.sys" was deleted!

18:44:05 - Execution Ended!

 

 

Alors dans la fenetre à la fin, y me dit qu'y trouve pas zeroaccess, dans le log y dit qu'il le trouve et l'efface... mais je l'ai fait tourner 10 fois, et il le trouve et l'efface 10 fois.

 

J'ai refait un tour de MbAM et en 38 secondes y me trouve zeroacces dans C/WINDOWS/system32/nvnet

 

Que fais je ?

Modifié le 18 janvier 2012 par bondioune