Comment supprimer le virus "ads not by this site" ?

Résolu
Jeck666 Messages postés 37 Statut Membre -  
2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,
j'ai ce virus depuis quelques jours sur Firefox et Chrome (j'ai l'impression que cela bloque le fonctionnement normal de certains sites).
J'ai essayé Ccleaner, Malwarebytes, Spybot et adwc cleaner. Des éléments infectés ont été trouvés et nettoyés mais le problème persiste !
Si je fais une restauration à une date antérieure au problème cela fonctionnera-t-il ?
D'avance un grand merci à qui pourra m'aider.
Cordialement.

42 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

Le problème décrit est la détection d’un virus affectant Firefox et Chrome, qui semble perturber le fonctionnement de certains sites et soulève la question de savoir si une restauration système antérieure peut résoudre le souci. Plusieurs outils de nettoyage ont été proposés et testés, notamment CCleaner, Malwarebytes et AdwCleaner, avec des éléments infectés trouvés puis nettoyés sans éliminer le problème. D'autres interventions mentionnées incluent USBFix et DELFix, et des rapports détaillés ont été partagés pour expliciter les éléments supprimés et l'état des systèmes à titre indicatif. En cas de restauration, l’efficacité dépendra de la nature précise de l’infection et des sauvegardes disponibles, et les rapports indiquent que plusieurs outils ont généré des journaux et des éléments supprimés.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Bonjour,

    Désinstalle Spybot il est obsolète.

    As-tu les rapports AdwCleaner et MBAM ?

    Gabriel.
    0
  2. Jeck666 Messages postés 37 Statut Membre
     
    Bonjour,
    je pense que oui, ils doivent être dans les dossiers des logiciels.
    0
  3. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Oui, AdwCleaner sous C:\AdwCleaner[S0].txt et MBAM dans l'onglet Rapports/Logs du logiciel.

    Poste-les si possible stp. :)

    Gabriel.
    0
  4. Jeck666 Messages postés 37 Statut Membre
     
    Pour Adw (avant nettoyage) :

    # AdwCleaner v3.007 - Rapport créé le 13/10/2013 à 16:29:48
    # Mis à jour le 09/10/2013 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Nom d'utilisateur : Jeck666 - JECK666-HOUSE
    # Exécuté depuis : C:\Users\Jeck666\Desktop\adwcleaner.exe
    # Option : Scanner

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Présent C:\Program Files (x86)\Vittalia

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
    Clé Présente : HKLM\Software\Vittalia

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v10.0.9200.16720

    -\\ Mozilla Firefox v24.0 (fr)

    [ Fichier : C:\Users\Jeck666\AppData\Roaming\Mozilla\Firefox\Profiles\35ngg5ye.default\prefs.js ]

    Ligne Trouvée : user_pref("extensions.IlSqlIPA9A.scode", "(function(){if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};(function(){if(window.self==window.top){var a=document.createElement(\"script[...]

    -\\ Google Chrome v30.0.1599.69

    [ Fichier : C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    *************************

    AdwCleaner[R0].txt - [19144 octets] - [13/10/2013 11:08:39]
    AdwCleaner[R1].txt - [1262 octets] - [13/10/2013 16:29:48]
    AdwCleaner[S0].txt - [19153 octets] - [13/10/2013 11:10:56]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1383 octets] ##########

    Pour Malware (avant nettoyage) :

    Malwarebytes Anti-Malware 1.75.0.1300
    www.malwarebytes.org

    Version de la base de données: v2013.10.13.02

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16721
    Jeck666 :: JECK666-HOUSE [administrateur]

    13/10/2013 16:37:24
    mbam-log-2013-10-13 (16-37-24).txt

    Type d'examen: Examen complet (C:\|D:\|E:\|G:\|)
    Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
    Options d'examen désactivées: P2P
    Elément(s) analysé(s): 352470
    Temps écoulé: 1 heure(s), 48 minute(s), 28 seconde(s)

    Processus mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Module(s) mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Clé(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre détecté(s): 0
    (Aucun élément nuisible détecté)

    Dossier(s) détecté(s): 0
    (Aucun élément nuisible détecté)

    Fichier(s) détecté(s): 1
    C:\Users\Jeck666\Downloads\installer_ccleaner_French.exe (PUP.Optional.VIT) -> Mis en quarantaine et supprimé avec succès.

    (fin)
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Jeck666 Messages postés 37 Statut Membre
     
    Ok je fais ça dès que possible, je ne garantis pas pour ce soir (avec les enfants et tout le reste !!!)
    Au plus tard ce sera posté demain en fin d'après-midi.
    Grand merci dans tous les cas.
    0
  7. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Pas de problème, bonne soirée. :)

    Gabriel.
    0
    1. saigon1971 Messages postés 158 Date d'inscription   Statut Membre Dernière intervention   3
       
      jai le meme probleme jai fais un scan avec adwcleaner voici le rapport:# AdwCleaner v3.009 - Rapport créé le 19/10/2013 à 22:21:49
      # Mis à jour le 19/10/2013 par Xplode
      # Système d'exploitation : Windows 7 Professional Service Pack 1 (64 bits)
      # Nom d'utilisateur : Utilisateur - UTILISATEUR-PC
      # Exécuté depuis : C:\Users\Utilisateur\Downloads\adwcleaner.exe
      # Option : Nettoyer

      ***** [ Services ] *****


      ***** [ Fichiers / Dossiers ] *****

      Dossier Supprimé : C:\ProgramData\blekko toolbars
      Dossier Supprimé : C:\Program Files (x86)\Toolbar Cleaner
      Dossier Supprimé : C:\Users\Utilisateur\AppData\LocalLow\adawaretb

      ***** [ Raccourcis ] *****


      ***** [ Registre ] *****

      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
      Clé Supprimée : HKLM\Software\adawaretb
      Clé Supprimée : HKLM\Software\Toolbar Cleaner
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner

      ***** [ Navigateurs ] *****

      -\\ Internet Explorer v10.0.9200.16720


      -\\ Mozilla Firefox v

      [ Fichier : C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\zz7b3dno.default-1368330758225\prefs.js ]


      -\\ Google Chrome v30.0.1599.101

      [ Fichier : C:\Users\Utilisateur\AppData\Local\Google\Chrome\User Data\Default\preferences ]

      Supprimée : homepage
      Supprimée : icon_url
      Supprimée : search_url
      Supprimée : suggest_url
      Supprimée : keyword

      *************************

      AdwCleaner[R0].txt - [6853 octets] - [27/08/2013 21:02:24]
      AdwCleaner[R1].txt - [1321 octets] - [15/09/2013 20:33:47]
      AdwCleaner[R2].txt - [7673 octets] - [08/10/2013 21:05:32]
      AdwCleaner[R3].txt - [2429 octets] - [13/10/2013 08:45:18]
      AdwCleaner[R4].txt - [2256 octets] - [19/10/2013 22:18:02]
      AdwCleaner[S0].txt - [6529 octets] - [27/08/2013 21:03:43]
      AdwCleaner[S1].txt - [1384 octets] - [15/09/2013 20:34:37]
      AdwCleaner[S2].txt - [6731 octets] - [08/10/2013 21:06:10]
      AdwCleaner[S3].txt - [2247 octets] - [13/10/2013 08:46:54]
      AdwCleaner[S4].txt - [2056 octets] - [19/10/2013 22:21:49]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [2116 octets] ##########
      0
    2. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
       
      Bonjour,

      Ouvre un nouveau sujet.

      Gabriel.
      0
  8. Jeck666 Messages postés 37 Statut Membre
     
    Voici les 2 rapports :

    Rapport de SFTGC (Pierre13) du Dimanche 13 Octobre 2013 à 19:51:06 version : 2.0.0.55
    Mis à jour le 12/09/2013
    Outil lancé en Mode normal et En tant qu'administrateur
    Windows 7 Home Premium Service Pack 1 64 bits

    Tool start in C:\Users\Jeck666\Downloads

    365 éléments supprimés => 359.3 Mo libérés. (1 mn 48 s)

    C:\Users\Jeck666\AppData\Local\Temp\25623-671937-ccleaner.exe
    C:\Users\Jeck666\AppData\Local\Temp\5072_26146
    C:\Users\Jeck666\AppData\Local\Temp\5428_15738
    C:\Users\Jeck666\AppData\Local\Temp\624_5981
    C:\Users\Jeck666\AppData\Local\Temp\acro_rd_dir
    C:\Users\Jeck666\AppData\Local\Temp\AdobeARM.log
    C:\Users\Jeck666\AppData\Local\Temp\AdwCleaner.jpg
    C:\Users\Jeck666\AppData\Local\Temp\axtan.ico
    C:\Users\Jeck666\AppData\Local\Temp\Cleaning.ico
    C:\Users\Jeck666\AppData\Local\Temp\config.xml
    C:\Users\Jeck666\AppData\Local\Temp\DMIDA68.tmp
    C:\Users\Jeck666\AppData\Local\Temp\DMIFAF2.tmp
    C:\Users\Jeck666\AppData\Local\Temp\Donate.ico
    C:\Users\Jeck666\AppData\Local\Temp\en-us
    C:\Users\Jeck666\AppData\Local\Temp\fr-fr
    C:\Users\Jeck666\AppData\Local\Temp\HP Support Framework
    C:\Users\Jeck666\AppData\Local\Temp\hsperfdata_Jeck666
    C:\Users\Jeck666\AppData\Local\Temp\instloffer.exe
    C:\Users\Jeck666\AppData\Local\Temp\iTehfTwC.EXE.part
    C:\Users\Jeck666\AppData\Local\Temp\JavaDeployReg.log
    C:\Users\Jeck666\AppData\Local\Temp\jusched.log
    C:\Users\Jeck666\AppData\Local\Temp\Low
    C:\Users\Jeck666\AppData\Local\Temp\manifest.xml
    C:\Users\Jeck666\AppData\Local\Temp\plugtmp
    C:\Users\Jeck666\AppData\Local\Temp\Report.ico
    C:\Users\Jeck666\AppData\Local\Temp\resource.h
    C:\Users\Jeck666\AppData\Local\Temp\Scan.ico
    C:\Users\Jeck666\AppData\Local\Temp\Uninstall.ico
    C:\Users\Jeck666\AppData\Local\Temp\WPDNSE
    C:\Users\Jeck666\AppData\Local\Temp\~DF0B1255B51BED5887.TMP
    C:\Users\Jeck666\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll
    C:\Users\Jeck666\AppData\Local\Temp\fr-fr\strings.fr-fr.xml
    C:\Users\Jeck666\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5
    C:\Users\Jeck666\AppData\Local\Temp\en-us\strings.en-us.xml
    C:\Users\Jeck666\AppData\Local\Temp\624_5981\crl-set
    C:\Users\Jeck666\AppData\Local\Temp\624_5981\manifest.fingerprint
    C:\Users\Jeck666\AppData\Local\Temp\624_5981\manifest.json
    C:\Users\Jeck666\AppData\Local\Temp\5428_15738\crl-set
    C:\Users\Jeck666\AppData\Local\Temp\5428_15738\manifest.fingerprint
    C:\Users\Jeck666\AppData\Local\Temp\5428_15738\manifest.json
    C:\Users\Jeck666\AppData\Local\Temp\5072_26146\crl-set
    C:\Users\Jeck666\AppData\Local\Temp\5072_26146\manifest.fingerprint
    C:\Users\Jeck666\AppData\Local\Temp\5072_26146\manifest.json
    C:\Users\Jeck666\AppData\LocalLow\Temp\Logs
    C:\Users\Jeck666\AppData\LocalLow\Temp\Microsoft\OPC
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\AU
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_05
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_07
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_07_x64
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_09
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_11
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_13
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_17
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_21
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_25
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_40
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_40\Data1.cab
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_40\jre1.7.0_40.msi
    C:\Users\Jeck666\AppData\LocalLow\Sun\Java\jre1.7.0_40\jre1036.MST
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\desktop.ini
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\Low\desktop.ini
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\Low\History.IE5
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\Low\History.IE5\container.dat
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013101320131014
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013101320131014\container.dat
    C:\Users\Jeck666\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner.lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner[R1].lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AdwCleaner[S1].lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\changes.lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\Documents.lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\Malwarebytes' Anti-Malware.lnk
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\27120106fa37318.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28c8b86deab549a1.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\330457123f292452.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\337ed59af273c758.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5877d92c15fc9892.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5afe4de1b92fc382.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d6f13ed567aa2da.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\72b368e0c4440e5e.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9027fe24326910d2.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\969252ce11249fdd.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\bc07a331706fdeb6.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\dbceaae2fd1c8d04.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\f1d98ea8c21b6f19.customDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms
    C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\9b9cdc69c1c24e2b.automaticDestinations-ms
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_1E562C75E6CFA21DBFA4413069869356
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\130ADF60D1B7B3CF82CC6CA82D961601_BFF3E82445C199812E8EC4CC74EA6FD4
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\140B4CDED8ED877CDC65B54BA965BD39
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1F39B5CFACECFDE48DB25BCA2231FAC6_659E8B339CB5D4A3440EE573BB1175E7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\21EA03E12A6F9D076B6BC3318EA9363E_5490FAFD83650250F68EC8EFC84013B2
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C3948BE6E525B8A8CEE9FAC91C9E392_5BEB6C6453DB87D996BDBC5D90D34AE1
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C3948BE6E525B8A8CEE9FAC91C9E392_C8FA2A733FE2A95A8ABEB57315278F81
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4DD39726D4B55AC3B4119B35A893323C_50F3B88E5A932F328F05720F24F31A7C
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5C45AD19E3530EC4218F560AFC04C3F7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77FBC64BA73370EC2F659BAD977FF2AD_9767A5403B067D539A02E2AD0F3C2C4A
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_355DF12EAABE3F04A4C1AF592920E175
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_3741936C58CE6ADFCE0F389F03AA0F8D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_4B02564C12552D3A7F9CD4F616DF9DC2
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_4E8F6C8278BCBC42EAD0560F6112023C
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_8102C2D9BECD09FCBB2BC1857DCCAD50
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_AE80968B09655437A4C6DA8671FF8BB7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_BF06EC7AA7F146CE2BCC7BD2A3659BA9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A574ED5927B3CEC9626151D220C7448
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\930D1D196EE05A60D0FD6680AB99D0D5
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_EE1C98F0DB5A340329CFBF08DA0DFEC3
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA7B2D59B4E9BC2D316D1AECDFC12F63_3B7B0D8E3506B50E2CC65692E07F89C1
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D4F348B882DF3F205ECCB6243795CB3A
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_1E562C75E6CFA21DBFA4413069869356
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\130ADF60D1B7B3CF82CC6CA82D961601_BFF3E82445C199812E8EC4CC74EA6FD4
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\140B4CDED8ED877CDC65B54BA965BD39
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1F39B5CFACECFDE48DB25BCA2231FAC6_659E8B339CB5D4A3440EE573BB1175E7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\21EA03E12A6F9D076B6BC3318EA9363E_5490FAFD83650250F68EC8EFC84013B2
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3130B1871A126520A8C47861EFE3ED4D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C3948BE6E525B8A8CEE9FAC91C9E392_5BEB6C6453DB87D996BDBC5D90D34AE1
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C3948BE6E525B8A8CEE9FAC91C9E392_C8FA2A733FE2A95A8ABEB57315278F81
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4DD39726D4B55AC3B4119B35A893323C_50F3B88E5A932F328F05720F24F31A7C
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5C45AD19E3530EC4218F560AFC04C3F7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_35BFA9D40D21E81B408449EB9D85CCA4
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AA3321A15A787985201D7A6820782F0_4E35DE6F4FCFB7BE2C045F6B5ED89FC8
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77FBC64BA73370EC2F659BAD977FF2AD_9767A5403B067D539A02E2AD0F3C2C4A
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_355DF12EAABE3F04A4C1AF592920E175
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_3741936C58CE6ADFCE0F389F03AA0F8D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_4B02564C12552D3A7F9CD4F616DF9DC2
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_4E8F6C8278BCBC42EAD0560F6112023C
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_8102C2D9BECD09FCBB2BC1857DCCAD50
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_96E18C6F7F11D436D50EB658BB37DA57
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_AE80968B09655437A4C6DA8671FF8BB7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_BF06EC7AA7F146CE2BCC7BD2A3659BA9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8A574ED5927B3CEC9626151D220C7448
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\930D1D196EE05A60D0FD6680AB99D0D5
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ACF244F1A10D4DBED0D88EBA0C43A9B5_EE1C98F0DB5A340329CFBF08DA0DFEC3
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3BB9C1BA2D19E090AE305B2683903A0_3A991EF068DA80925661324DEEB3A2FC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CA7B2D59B4E9BC2D316D1AECDFC12F63_3B7B0D8E3506B50E2CC65692E07F89C1
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D4F348B882DF3F205ECCB6243795CB3A
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
    C:\Users\Jeck666\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
    C:\Users\Jeck666\AppData\Local\Temp\Fichiers Internet temporaires
    C:\Windows\TEMP\ACLM
    C:\Windows\TEMP\avginfo.id
    C:\Windows\TEMP\fwtsqmfile00.sqm
    C:\Windows\TEMP\fwtsqmfile01.sqm
    C:\Windows\TEMP\lpksetup-20131012-154125-0.log
    C:\Windows\TEMP\lpksetup-20131013-081153-0.log
    C:\Windows\TEMP\lpksetup-20131013-111402-0.log
    C:\Windows\TEMP\lpksetup-20131013-134554-0.log
    C:\Windows\TEMP\lpksetup-20131013-143430-0.log
    C:\Windows\TEMP\lpksetup-20131013-163540-0.log
    C:\Windows\TEMP\lpksetup-20131013-183201-0.log
    C:\Windows\TEMP\tmp00005e6d
    C:\Windows\TEMP\TSpybotUpdaterThread.log
    C:\Windows\TEMP\tmp00005e6d\tmp00000000
    C:\Windows\TEMP\ACLM\ACLMLog.txt
    C:\Windows\Prefetch\ACRORD32.EXE-D066635E.pf
    C:\Windows\Prefetch\ADDINUTIL.EXE-FEF23417.pf
    C:\Windows\Prefetch\ADOBEARM.EXE-7105D3A2.pf
    C:\Windows\Prefetch\ADOBEARMHELPER.EXE-DF32211A.pf
    C:\Windows\Prefetch\AgAppLaunch.db
    C:\Windows\Prefetch\AgCx_SC1.db
    C:\Windows\Prefetch\AgCx_SC1.db.trx
    C:\Windows\Prefetch\AgCx_SC4.db
    C:\Windows\Prefetch\AgGlFaultHistory.db
    C:\Windows\Prefetch\AgGlFgAppHistory.db
    C:\Windows\Prefetch\AgGlGlobalHistory.db
    C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2235466581-1794939714-1588381200-1001.db
    C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2235466581-1794939714-1588381200-1001.db
    C:\Windows\Prefetch\AgRobust.db
    C:\Windows\Prefetch\ARMSVC.EXE-E7A9D6CF.pf
    C:\Windows\Prefetch\ASOELNCH.EXE-E0F27009.pf
    C:\Windows\Prefetch\ATIESRXX.EXE-B8FDA008.pf
    C:\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
    C:\Windows\Prefetch\BCSSYNC.EXE-3F6C64A2.pf
    C:\Windows\Prefetch\CCC.EXE-B637C9BF.pf
    C:\Windows\Prefetch\CCSVCHST.EXE-A83C58F5.pf
    C:\Windows\Prefetch\CLI.EXE-BB402402.pf
    C:\Windows\Prefetch\CLTLMH.EXE-CE0162F4.pf
    C:\Windows\Prefetch\CLTRT.EXE-310D65FD.pf
    C:\Windows\Prefetch\CNMSE83.EXE-C8F5C1E2.pf
    C:\Windows\Prefetch\COCIMANAGER.EXE-EE10785A.pf
    C:\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
    C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
    C:\Windows\Prefetch\CSC.EXE-A3B8D95D.pf
    C:\Windows\Prefetch\CVTRES.EXE-069169FB.pf
    C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf
    C:\Windows\Prefetch\DEVICEDISPLAYOBJECTPROVIDER.E-17410B90.pf
    C:\Windows\Prefetch\DLLHOST.EXE-40DD444D.pf
    C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
    C:\Windows\Prefetch\DLLHOST.EXE-74857ABA.pf
    C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
    C:\Windows\Prefetch\DLLHOST.EXE-A8DE6D5B.pf
    C:\Windows\Prefetch\DLLHOST.EXE-B2EB1806.pf
    C:\Windows\Prefetch\DLLHOST.EXE-E7777CC4.pf
    C:\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
    C:\Windows\Prefetch\DXPSERVER.EXE-02DD8117.pf
    C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
    C:\Windows\Prefetch\FIREFOX.EXE-18ACFCFF.pf
    C:\Windows\Prefetch\FLASHPLAYERPLUGIN_11_8_800_94-5FD421D3.pf
    C:\Windows\Prefetch\GOOGLEUPDATE.EXE-B95715F5.pf
    C:\Windows\Prefetch\HH.EXE-0A439DDA.pf
    C:\Windows\Prefetch\HPCEE.EXE-6A33E4FB.pf
    C:\Windows\Prefetch\HPQWMIEX.EXE-FAAC8C6F.pf
    C:\Windows\Prefetch\HPSA_SERVICE.EXE-AD6579F0.pf
    C:\Windows\Prefetch\HPSF.EXE-C90ABEF1.pf
    C:\Windows\Prefetch\HPTASKBAR1.EXE-7F6D18DB.pf
    C:\Windows\Prefetch\HPTASKBAR2.EXE-92C2D360.pf
    C:\Windows\Prefetch\IELOWUTIL.EXE-903B8AC1.pf
    C:\Windows\Prefetch\JAVA.EXE-07FE5A9A.pf
    C:\Windows\Prefetch\JAVAW.EXE-2AB1E03D.pf
    C:\Windows\Prefetch\JAVAWS.EXE-6F609AD4.pf
    C:\Windows\Prefetch\Layout.ini
    C:\Windows\Prefetch\LOGITECHUPDATE.EXE-4F06E135.pf
    C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
    C:\Windows\Prefetch\LPKSETUP.EXE-90F505D8.pf
    C:\Windows\Prefetch\LULNCHR.EXE-37E1482B.pf
    C:\Windows\Prefetch\MMLOADDRV.EXE-4072A3B8.pf
    C:\Windows\Prefetch\MOM.EXE-42E9F9DF.pf
    C:\Windows\Prefetch\MPSYSCHK.EXE-933ADA9A.pf
    C:\Windows\Prefetch\MRT.EXE-851529F7.pf
    C:\Windows\Prefetch\MRTSTUB.EXE-4B4C177D.pf
    C:\Windows\Prefetch\MSCORSVW.EXE-57D17DAF.pf
    C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
    C:\Windows\Prefetch\MSFEEDSSYNC.EXE-6E6FBDF4.pf
    C:\Windows\Prefetch\MSID92E.TMP-4B1F9160.pf
    C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
    C:\Windows\Prefetch\MSIEXEC.EXE-E09A077A.pf
    C:\Windows\Prefetch\MSOHTMED.EXE-68E5AB1E.pf
    C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
    C:\Windows\Prefetch\OSPPSVC.EXE-E53D3CC0.pf
    C:\Windows\Prefetch\PfSvPerfStats.bin
    C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-F1B02F03.pf
    C:\Windows\Prefetch\POQEXEC.EXE-69592829.pf
    C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-73BE9E78.pf
    C:\Windows\Prefetch\RAPPORTMGMTSERVICE.EXE-4A4290DA.pf
    C:\Windows\Prefetch\ReadyBoot
    C:\Windows\Prefetch\RUNDLL32.EXE-043CA59A.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-0A6128C7.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-0E61097D.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-1F56FDA3.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-2942816B.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-2B2FEF49.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-3722ED93.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-3B22CE49.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-4C141C33.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-501FEC8D.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-619167F7.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-6B8D473C.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-6E4E20C4.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-8A48D946.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-A480147C.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-B2325DA3.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-B8847A02.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-C2842EED.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-DA8EF99D.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
    C:\Windows\Prefetch\RUNDLL32.EXE-F8B9BC04.pf
    C:\Windows\Prefetch\SDCLT.EXE-E10B972A.pf
    C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
    C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf
    C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
    C:\Windows\Prefetch\SETDEFAULT.EXE-2B7FB0EB.pf
    C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
    C:\Windows\Prefetch\SPLWOW64.EXE-297C4568.pf
    C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
    C:\Windows\Prefetch\SVCHOST.EXE-3AB35CA7.pf
    C:\Windows\Prefetch\SVCHOST.EXE-5901D5E8.pf
    C:\Windows\Prefetch\SVCHOST.EXE-63699C7D.pf
    C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
    C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf
    C:\Windows\Prefetch\SVCHOST.EXE-A1476A17.pf
    C:\Windows\Prefetch\SVCHOST.EXE-C871F054.pf
    C:\Windows\Prefetch\SVCHOST.EXE-CF79EE4C.pf
    C:\Windows\Prefetch\SVCHOST.EXE-E2C2633A.pf
    C:\Windows\Prefetch\SYMERR.EXE-35DDF45A.pf
    C:\Windows\Prefetch\SYNTPHELPER.EXE-0A20AAC4.pf
    C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
    C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
    C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf
    C:\Windows\Prefetch\THUNDERBIRD.EXE-A0DA674F.pf
    C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
    C:\Windows\Prefetch\UTORRENT.EXE-AE62E46F.pf
    C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
    C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
    C:\Windows\Prefetch\WINDOWS-KB890830-X64-V5.4-DEL-D460D9BD.pf
    C:\Windows\Prefetch\WINRAR.EXE-D8B532BF.pf
    C:\Windows\Prefetch\WINWORD.EXE-778F7C2B.pf
    C:\Windows\Prefetch\WIRELESSOFFMSG.EXE-286C32A5.pf
    C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
    C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf
    C:\Windows\Prefetch\WMPLAYER.EXE-26C72A86.pf
    C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
    C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
    C:\Windows\Prefetch\WSCSTUB.EXE-D8415CDF.pf
    C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf
    C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
    C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
    C:\Windows\Prefetch\ReadyBoot\Trace1.fx
    C:\Windows\Prefetch\ReadyBoot\Trace10.fx
    C:\Windows\Prefetch\ReadyBoot\Trace2.fx
    C:\Windows\Prefetch\ReadyBoot\Trace8.fx
    C:\Windows\Prefetch\ReadyBoot\Trace9.fx

    Corbeille vidée.

    Fin du rapport.
    ----------------------------------------------------------------------------------------------------

    ~ Rapport de ZHPDiag v2013.10.13.35 - Nicolas Coolman (13/10/2013)
    ~ Lancé par Jeck666 (13/10/2013 20:00:40)
    ~ Adresse du Site Web https://nicolascoolman.webs.com/
    ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
    ~ Traduit par Nicolas Coolman
    ~ Etat de la version :
    ~ Liste blanche : Désactivée par l'utilisateur
    ~ Elévation des Privilèges : OK
    ~ User Account Control (UAC): Activate by user

    ---\\ Navigateurs Internet
    MSIE: Internet Explorer v10.0.9200.16721
    MFIE: Mozilla Firefox 24.0 (Defaut)
    GCIE: Google Chrome v30.0.1599.69

    ---\\ Informations sur les produits Windows
    ~ Langage: Français
    Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    Software Protection Service (Protection logicielle) : OK
    Key Management Service client information : KO
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ Logiciels de protection du système
    AVG 2014 v14.0.4158
    Trusteer Sécurité des points d'accès v3.5.1302.61
    Malwarebytes Anti-Malware version 1.75.0.1300
    Spybot - Search & Destroy v2.1.19
    Windows Defender W7

    ---\\ Logiciels d'optimisation du système
    CCleaner v4.02 =>Piriform Ltd

    ---\\ Logiciels de partage PeerToPeer
    µTorrent v2.2.1 =>P2P.µTorrent

    ---\\ Surveillance de Logiciels
    Adobe Flash Player 11 Plugin
    Adobe Reader XI
    Java 7 Update 7
    Java 7 Update 40

    ---\\ Informations sur le système
    ~ Processor: AMD64 Family 20 Model 2 Stepping 0, AuthenticAMD
    ~ Operating System: 64 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3690 MB (50% free)
    System Restore: Activé (Enable)
    System drive C: has 71 GB (49%) free of 144 GB

    ---\\ Mode de connexion au système
    ~ Computer Name: JECK666-HOUSE
    ~ User Name: Jeck666
    ~ All Users Names: Jeck666, HomeGroupUser$, Administrateur,
    ~ Unselected Option: None
    Logged in as Administrator

    ---\\ Variables d'environnement
    ~ System Unit : C:\
    ~ %AppZHP% : C:\Users\Jeck666\AppData\Roaming\ZHP\
    ~ %AppData% : C:\Users\Jeck666\AppData\Roaming\
    ~ %Desktop% : C:\Users\Jeck666\Desktop\
    ~ %Favorites% : C:\Users\Jeck666\Favorites\
    ~ %LocalAppData% : C:\Users\Jeck666\AppData\Local\
    ~ %StartMenu% : C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ Enumération des unités disques
    C: Hard drive, Flash drive, Thumb drive (Free 71 Go of 144 Go)
    D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 20 Go)
    E: Hard drive, Flash drive, Thumb drive (Free 1 Go of 4 Go)
    F: CD-ROM drive (Not Inserted)
    G: Hard drive, Flash drive, Thumb drive (Free 53 Go of 130 Go)

    ---\\ Etat du Centre de Sécurité Windows
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
    [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
    ~ Security Center: 33 Scanned in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.17/10/2011 - 20:45:56.) -- C:\Windows\Explorer.exe [2871808]
    [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
    [MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/09/2013 - 23:55:10.) -- C:\Windows\System32\wininet.dll [2241024]
    [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
    [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
    [MD5.314C17917AC8523EC77A710215012A65] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 02:10:19.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
    [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
    [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
    [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
    [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
    [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
    [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
    [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
    [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.17/10/2011 - 20:51:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
    [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
    [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
    [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
    [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
    [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
    [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
    [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.17/10/2011 - 20:41:13.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
    ~ Generic Processes: Scanned in 00mn 01s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 2/3507
    ~ Mes musiques (My Musics) : 3/219
    ~ Mes Videos (My Videos) : 2/3
    ~ Mes Favoris (My Favorites) : 1/12
    ~ Mes Documents (My Documents) : 1/2115
    ~ Mon Bureau (My Desktop) : 1/5
    ~ Menu demarrer (Programs) : 1/29
    ~ Hidden Files: Scanned in 00mn 12s

    ---\\ Processus lancés
    [MD5.D565CAB5D617B563CF0DD4C19AA172CA] - (.Trusteer Ltd. - RapportService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [2476312] [PID.1976]
    [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [PID.3808]
    [MD5.9A0ED916D786A2CDCA1E34D57DCAF57A] - (.Hewlett-Packard Company - HP QuickWeb Utilities.) -- C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528] [PID.4252]
    [MD5.8A3B69683E63808719D24E1C68C21CC7] - (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960] [PID.4284]
    [MD5.2589FFE360BED8F824CBC6171CB5B874] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304] [PID.4444]
    [MD5.8192B2E274607D1D530F5C191698C544] - (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944] [PID.4572]
    [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.4644]
    [MD5.0F288D457DEFF897C7A4037350533414] - (.PC Tools - SSDMonit Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120] [PID.4692]
    [MD5.38392CC7CDCA0C2C247B0B279EC2FCE3] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592] [PID.4808]
    [MD5.09E9425AD8C61664A37ED84B8B58BDCF] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224] [PID.4864]
    [MD5.98D472ECFBC0E8ED25A0483E765F42B6] - (...) -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe [560472] [PID.4324]
    [MD5.4DE931F513FC13F7C450E2B163DD7AE7] - (.Advanced Micro Devices, Inc. - Load MMdriver application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe [49664] [PID.1868]
    [MD5.62F9CE710D10EE08219C4135C744DBC3] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [390256] [PID.4332]
    [MD5.22DA0DDAF1BF9E0FB5C705319024429B] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe [399224] [PID.1152] =>P2P.BitTorrent
    [MD5.A9182CE59CFC56F9C1DDE8B3C0AE8378] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [274840] [PID.6800]
    [MD5.12FD4EF8F2CBBF98E0A5CED88258DDF3] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [17816] [PID.3864]
    [MD5.8D4AFD5F4955A52C39C8C424FE5516D9] - (.Adobe Systems, Inc. - Adobe Flash Player 11.8 r800.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe [1862024] [PID.4220]
    [MD5.2176B4590387405E5F2405C3CEF0C02A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8078848] [PID.2084]
    [MD5.96759B4647AC26E2FA9F8D256700B5DC] - (.Trusteer Ltd. - RapportMgmtService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1435928] [PID.504]
    [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1160]
    [MD5.332AEB8F6F9595C8886A7AA7A62322DC] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480] [PID.1292]
    [MD5.07646F5F37F18F1F978CE3B0378EF1C9] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152] [PID.2092]
    [MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.2196]
    [MD5.B7382BEC806B7B00FC84B3E2061FF48E] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [197536] [PID.2440]
    [MD5.2BEC76BDCD1BC080210325E7B5094834] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [35200] [PID.2484]
    [MD5.E4693409D06785477A49FB34AFAE1B92] - (.Realsil Microelectronics Inc. - Realtek Card Reader Icon Tool..) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088] [PID.2524]
    [MD5.E1095A89EB4BFCA2AB2F4E1F2BA56612] - (.Logitech Inc. - Logitech LVPrS64H Module..) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe [125464] [PID.2716]
    [MD5.4678535614BD147D1ED6F0830EA0E540] - (.PC Tools - StartMan Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272] [PID.2840]
    [MD5.95AA9E165C7DE1B64A11E8B18E91E499] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560] [PID.2940]
    [MD5.D31398D4BB4907B517B6E784C2100C4A] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688] [PID.3128]
    [MD5.6AE8E702D1027A9627DDE2B77BB9992B] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928] [PID.3480]
    [MD5.9B7EDD3FE7C211C36E921D34D18A3A0A] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1001376] [PID.4828]
    ~ Processes Running: Scanned in 00mn 02s

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Preferences
    G1 - GCS: Preference [User Data\Default] None
    G0 - GCSP: Preference [User Data\Default][HomePage] http://r.orange.fr
    G0 - GCSP: Preference [User Data\Default] http://r.orange.fr
    G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
    G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Désactivé)
    G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Googleu00A0Drive v.6.3 (Activé)
    G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
    G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
    G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
    G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
    G2 - GCE: Preference [User Data\Default] [hakpajgggjjcjmidfbnnncnbaihjneaj] 01NET.com Main v.10.19.2.505, (Désactivé)
    G2 - GCE: Preference [User Data\Default] [jnjfpkgcbaljligdoeapaambmplfakik] DoWWnload keeeper v.1.6 (Activé)
    G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
    G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
    G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Chrome In-App Payments service v.0.0.4.11 (Activé)
    G2 - GCE: Preference [User Data\Default] [ocifcklkibdehekfnmflempfgjhbedch] Adblock Pro v.2.5, (Activé)
    G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
    ~ Google Browser: 17 Scanned in 00mn 54s

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Users\Jeck666\AppData\Roaming\Mozilla\Firefox\Profiles\35ngg5ye.default\prefs.js
    M0 - MFSP: prefs.js [Jeck666 - 35ngg5ye.default] https://www.orange.fr/portail
    M2 - MFEP: prefs.js [Jeck666 - 35ngg5ye.default\cwlbxugh@xbbz-wlza.co.uk] [] DoWWnload keeeper v1.6 (..) =>Adware.eBookBrowse
    M2 - MFEP: prefs.js [Jeck666 - 35ngg5ye.default\donottrackplus@abine.com] [] DoNotTrackMe v2.2.9.618 (..)
    M2 - MFEP: prefs.js [Jeck666 - 35ngg5ye.default\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}] [] Garmin Communicator v4.0.4 (..)
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll
    P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.7.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
    P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.7.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.7.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
    P2 - FPN: [HKLM] [@microsoft.com/GENUINE] - (.Microsoft Corporation - Windows Activation Technologies Plugin for Mozilla.) -- C:\Windows\system32\Wat\npWatWeb.dll
    P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20913.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
    P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
    ~ Firefox Browser: 10 Scanned in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr
    R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
    R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
    R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
    ~ IE Browser: 15 Scanned in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:21320
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Proxy management: Scanned in 00mn 00s

    ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
    F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
    F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
    ~ Keys: Scanned in 00mn 00s

    ---\\ Hosts file redirection (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Hosts File: Scanned in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
    O2 - BHO: (no name) [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} Clé orpheline
    ~ BHO: 10 Scanned in 00mn 00s

    ---\\ Autres liens utilisateurs (O4)
    O4 - GS\Desktop [Public]: AVG 2014.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe
    O4 - GS\Desktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>Piriform Ltd
    O4 - GS\Desktop [Public]: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
    O4 - GS\Desktop [Public]: PC Tools Registry Mechanic.lnk . (.PC Tools - PC Tools Registry Mechanic 11.1.) -- C:\Program Files (x86)\PC Tools Registry Mechanic\RegMech.exe
    O4 - GS\Desktop [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
    O4 - GS\Program [Public]: Adobe Reader XI.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
    O4 - GS\Program [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) -- C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
    O4 - GS\Program [Public]: CDBurnerXP.lnk . (.Canneverbe Limited - CDBurnerXP.) -- C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe
    O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    O4 - GS\Program [Public]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
    O4 - GS\Program [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
    O4 - GS\Program [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) -- C:\Windows\system32\WindowsAnytimeUpgradeUI.exe
    O4 - GS\Program [Public]: Windows DVD Maker.lnk . (...) -- C:\Program Files (x86)\DVD Maker\DVDMaker.exe (.not file.)
    O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    O4 - GS\Program [Public]: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Windows Live Photo Gallery.lnk . (.Microsoft Corporation - Windows Live Photo Gallery.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
    O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\system32\calc.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) -- C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\system32\mblctr.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) -- C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll =>.Microsoft Corporation
    O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\Windows\system32\charmap.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) -- C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\system32\perfmon.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) -- C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) -- C:\Windows\system32\taskschd.msc
    O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) -- C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) -- C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
    O4 - GS\QuickLaunch [Jeck666]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O4 - GS\QuickLaunch [Jeck666]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - GS\QuickLaunch [Jeck666]: Microsoft Outlook.lnk . (...) -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.exe (.not file.)
    O4 - GS\TaskBar [Jeck666]: CDBurnerXP.lnk . (.Canneverbe Limited - CDBurnerXP.) -- C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe
    O4 - GS\TaskBar [Jeck666]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O4 - GS\TaskBar [Jeck666]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    O4 - GS\TaskBar [Jeck666]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
    O4 - GS\TaskBar [Jeck666]: MP Navigator 3.0.lnk . (.CANON INC. - MP Navigator.) -- C:\Program Files (x86)\Canon\MP Navigator 3.0\mpn30.exe
    O4 - GS\TaskBar [Jeck666]: Skype .lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - GS\TaskBar [Jeck666]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
    O4 - GS\TaskBar [Jeck666]: µTorrent.lnk . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe =>P2P.BitTorrent
    O4 - GS\Program [Jeck666]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - GS\Accessories [Jeck666]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Jeck666]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =>.Microsoft Corporation
    O4 - GS\Accessories [Jeck666]: Run.lnk - Clé orpheline
    O4 - GS\Accessories [Jeck666]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
    O4 - GS\SystemTools [Jeck666]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - GS\SystemTools [Jeck666]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
    O4 - GS\SendTo [Jeck666]: AVS Mobile Uploader.lnk . (.Online Media Technologies Ltd. - AVS Mobile Uploader.) -- C:\Program Files (x86)\Common Files\AVSMedia\MobileUploader\AVSMobileUploader.exe
    O4 - GS\SendTo [Jeck666]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - GS\Desktop [Jeck666]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
    O4 - GS\Desktop [Jeck666]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman
    ~ Global Startup: 65 Scanned in 00mn 02s

    ---\\ Applications lancées au démarrage du sytème (O4)
    O4 - GS\Startup [Jeck666]: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
    O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe =>.Realtek Semiconductor Corp
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
    O4 - HKLM\..\Run: [SetDefault] . (.Hewlett-Packard Development Company, L.P. - SetDefault.) -- C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe
    O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
    O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc
    O4 - HKLM\..\Wow6432Node\Run: [HPQuickWebPro
    0
  9. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Il faut les héberger comme demandé ils sont trop longs pour être dans le forum.

    Gabriel.
    0
  10. Jeck666 Messages postés 37 Statut Membre
     
    C'est trop long pour être copié en une fois !
    Voici la suite :

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\7-Zip]
    [HKCU\Software\ATI]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\AVS4YOU]
    [HKCU\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\JavaSoft]
    [HKCU\Software\AppDataLow\Software\Orange]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\Audacity]
    [HKCU\Software\Avg]
    [HKCU\Software\Binary Noise]
    [HKCU\Software\BitTorrent] =>P2P.BitTorrent
    [HKCU\Software\Camtronics Medical Systems, Ltd.]
    [HKCU\Software\Canneverbe Limited]
    [HKCU\Software\CanonBJ]
    [HKCU\Software\Canon]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\Code Sector]
    [HKCU\Software\CyberLink]
    [HKCU\Software\EasyBits]
    [HKCU\Software\Garmin]
    [HKCU\Software\GoforFiles] =>P2P.GoforFiles
    [HKCU\Software\Google]
    [HKCU\Software\Hewlett-Packard Company]
    [HKCU\Software\Hewlett-Packard]
    [HKCU\Software\IM Providers]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\Leadertech]
    [HKCU\Software\LogiShrd]
    [HKCU\Software\Logitech]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\Medical Imaging]
    [HKCU\Software\Micro Application]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\Mozilla]
    [HKCU\Software\Netscape]
    [HKCU\Software\ODBC]
    [HKCU\Software\PCTools]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Realtek]
    [HKCU\Software\Safer Networking Limited]
    [HKCU\Software\Skype]
    [HKCU\Software\Symantec]
    [HKCU\Software\Synaptics]
    [HKCU\Software\Trolltech]
    [HKCU\Software\Trusteer]
    [HKCU\Software\WinRAR SFX]
    [HKCU\Software\WinRAR]
    [HKCU\Software\Wow6432Node]
    [HKCU\Software\ZebHelpProcess Helper]
    [HKCU\Software\eFilm Medical]
    [HKCU\Software\mb Software AG]
    [HKLM\Software\AMD]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\ATI]
    [HKLM\Software\CBSTEST]
    [HKLM\Software\CXT]
    [HKLM\Software\Canon]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\Code Sector]
    [HKLM\Software\Cyberlink]
    [HKLM\Software\HPQ]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\IM Providers]
    [HKLM\Software\InstalledOptions]
    [HKLM\Software\Intel]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\Khronos]
    [HKLM\Software\LogiShrd]
    [HKLM\Software\Logitech]
    [HKLM\Software\Macromedia]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\ODBC]
    [HKLM\Software\Piriform]
    [HKLM\Software\Policies]
    [HKLM\Software\RTLSetup]
    [HKLM\Software\Realtek Semiconductor Corp.]
    [HKLM\Software\Realtek]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SRS Labs]
    [HKLM\Software\Safer Networking Limited]
    [HKLM\Software\Sonic]
    [HKLM\Software\Synaptics]
    [HKLM\Software\Wow6432Node\AMD]
    [HKLM\Software\Wow6432Node\ATI Technologies]
    [HKLM\Software\Wow6432Node\ATI]
    [HKLM\Software\Wow6432Node\AVAST Software]
    [HKLM\Software\Wow6432Node\AVS4YOU]
    [HKLM\Software\Wow6432Node\Adobe]
    [HKLM\Software\Wow6432Node\AdwCleaner]
    [HKLM\Software\Wow6432Node\AppDataLow]
    [HKLM\Software\Wow6432Node\Avg]
    [HKLM\Software\Wow6432Node\Canneverbe Limited]
    [HKLM\Software\Wow6432Node\Canon]
    [HKLM\Software\Wow6432Node\Caphyon]
    [HKLM\Software\Wow6432Node\Classes]
    [HKLM\Software\Wow6432Node\Clients]
    [HKLM\Software\Wow6432Node\CyberLink]
    [HKLM\Software\Wow6432Node\Data fellows]
    [HKLM\Software\Wow6432Node\EasyBits]
    [HKLM\Software\Wow6432Node\Evernote]
    [HKLM\Software\Wow6432Node\FlexCell Studio]
    [HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles
    [HKLM\Software\Wow6432Node\Google]
    [HKLM\Software\Wow6432Node\Hewlett-Packard]
    [HKLM\Software\Wow6432Node\IM Providers]
    [HKLM\Software\Wow6432Node\Intel]
    [HKLM\Software\Wow6432Node\JavaSoft]
    [HKLM\Software\Wow6432Node\JreMetrics]
    [HKLM\Software\Wow6432Node\Khronos]
    [HKLM\Software\Wow6432Node\Lame For Audacity]
    [HKLM\Software\Wow6432Node\Licenses]
    [HKLM\Software\Wow6432Node\LogiShrd]
    [HKLM\Software\Wow6432Node\Logitech]
    [HKLM\Software\Wow6432Node\Macromedia]
    [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
    [HKLM\Software\Wow6432Node\Micro Application]
    [HKLM\Software\Wow6432Node\MozillaPlugins]
    [HKLM\Software\Wow6432Node\Mozilla]
    [HKLM\Software\Wow6432Node\Norton]
    [HKLM\Software\Wow6432Node\ODBC]
    [HKLM\Software\Wow6432Node\Oracle]
    [HKLM\Software\Wow6432Node\Orange]
    [HKLM\Software\Wow6432Node\PCTools]
    [HKLM\Software\Wow6432Node\Policies]
    [HKLM\Software\Wow6432Node\Ralink]
    [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
    [HKLM\Software\Wow6432Node\Realtek]
    [HKLM\Software\Wow6432Node\RegisteredApplications]
    [HKLM\Software\Wow6432Node\Remote Control USB Driver]
    [HKLM\Software\Wow6432Node\Safer Networking Limited]
    [HKLM\Software\Wow6432Node\Skype]
    [HKLM\Software\Wow6432Node\Symantec]
    [HKLM\Software\Wow6432Node\Trusteer]
    [HKLM\Software\Wow6432Node\WildTangent]
    [HKLM\Software\Wow6432Node\Win32 Services]
    [HKLM\Software\Wow6432Node\WinPcap]
    [HKLM\Software\Wow6432Node\WinRAR]
    [HKLM\Software\Wow6432Node\Wow6432Node]
    [HKLM\Software\Wow6432Node\e-Carte Bleue Société Générale]
    [HKLM\Software\Wow6432Node\mozilla.org]
    [HKLM\Software\Wow6432Node\webtogo]
    [HKLM\Software\Wow6432Node]
    ~ Key Software: 250 Scanned in 00mn 01s

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 28/10/2012 - 14:39:29 - [3,348] ----D C:\Program Files (x86)\7-Zip
    O43 - CFD: 14/04/2013 - 16:15:35 - [120,864] ----D C:\Program Files (x86)\Adobe
    O43 - CFD: 04/05/2012 - 07:37:35 - [2,338] ----D C:\Program Files (x86)\AMD APP
    O43 - CFD: 04/05/2012 - 07:37:15 - [67,245] ----D C:\Program Files (x86)\ATI Technologies
    O43 - CFD: 05/02/2013 - 19:43:12 - [44,319] ----D C:\Program Files (x86)\Audacity
    O43 - CFD: 06/10/2013 - 12:25:11 - [116,675] ----D C:\Program Files (x86)\AVG
    O43 - CFD: 09/05/2013 - 13:19:30 - [60,754] ----D C:\Program Files (x86)\AVS4YOU
    O43 - CFD: 10/08/2012 - 09:06:07 - [17,669] ----D C:\Program Files (x86)\Canon
    O43 - CFD: 16/03/2013 - 09:53:13 - [17,414] ----D C:\Program Files (x86)\CDBurnerXP
    O43 - CFD: 06/10/2013 - 12:21:16 - [340,224] ----D C:\Program Files (x86)\Common Files
    O43 - CFD: 04/05/2012 - 07:48:50 - [209,852] ----D C:\Program Files (x86)\CyberLink
    O43 - CFD: 08/08/2012 - 08:02:19 - [0,463] ----D C:\Program Files (x86)\e-Carte Bleue Société Générale
    O43 - CFD: 04/08/2012 - 06:43:30 - [109,331] ----D C:\Program Files (x86)\EasyBits For Kids
    O43 - CFD: 17/10/2011 - 12:36:19 - [278,025] ----D C:\Program Files (x86)\Evernote
    O43 - CFD: 04/02/2013 - 19:01:19 - [379,511] ----D C:\Program Files (x86)\Google
    O43 - CFD: 25/05/2013 - 18:31:34 - [754,295] ----D C:\Program Files (x86)\Hewlett-Packard
    O43 - CFD: 17/10/2011 - 12:49:23 - [955,278] ----D C:\Program Files (x86)\HP Games
    O43 - CFD: 25/05/2013 - 14:36:36 - [59,278] --H-D C:\Program Files (x86)\InstallShield Installation Information
    O43 - CFD: 10/10/2013 - 17:49:20 - [4,886] ----D C:\Program Files (x86)\Internet Explorer
    O43 - CFD: 15/09/2013 - 17:48:51 - [122,672] ----D C:\Program Files (x86)\Java
    O43 - CFD: 13/02/2013 - 19:48:32 - [1,540] ----D C:\Program Files (x86)\Lame For Audacity
    O43 - CFD: 04/08/2012 - 16:21:46 - [86,701] ----D C:\Program Files (x86)\Logitech
    O43 - CFD: 13/10/2013 - 11:21:36 - [13,265] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
    O43 - CFD: 19/01/2013 - 19:28:35 - [1705,283] ----D C:\Program Files (x86)\Micro Application
    O43 - CFD: 02/06/2013 - 09:04:52 - [0] ----D C:\Program Files (x86)\Microsoft
    O43 - CFD: 23/09/2012 - 08:24:20 - [37,927] ----D C:\Program Files (x86)\Microsoft Analysis Services
    O43 - CFD: 17/08/2012 - 07:34:41 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
    O43 - CFD: 23/09/2012 - 09:07:45 - [15,697] ----D C:\Program Files (x86)\Microsoft Office
    O43 - CFD: 10/10/2013 - 17:46:31 - [40,851] ----D C:\Program Files (x86)\Microsoft Silverlight
    O43 - CFD: 17/10/2011 - 12:58:38 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
    O43 - CFD: 23/09/2012 - 08:26:02 - [1,314] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
    O43 - CFD: 23/09/2012 - 08:28:33 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
    O43 - CFD: 21/09/2013 - 09:04:39 - [48,679] ----D C:\Program Files (x86)\Mozilla Firefox
    O43 - CFD: 13/10/2013 - 08:11:00 - [0,216] ----D C:\Program Files (x86)\Mozilla Maintenance Service
    O43 - CFD: 12/10/2013 - 18:21:38 - [48,950] ----D C:\Program Files (x86)\Mozilla Thunderbird
    O43 - CFD: 23/09/2012 - 08:28:54 - [0,025] ----D C:\Program Files (x86)\MSBuild
    O43 - CFD: 03/08/2012 - 13:47:14 - [20,218] R---D C:\Program Files (x86)\Online Services
    O43 - CFD: 19/08/2012 - 13:41:22 - [33,207] ----D C:\Program Files (x86)\Oracle
    O43 - CFD: 29/08/2013 - 09:17:29 - [34,610] ----D C:\Program Files (x86)\Orange
    O43 - CFD: 13/10/2013 - 18:31:31 - [26,973] ----D C:\Program Files (x86)\PC Tools Registry Mechanic
    O43 - CFD: 04/05/2012 - 07:33:39 - [17,782] ----D C:\Program Files (x86)\Realtek
    O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
    O43 - CFD: 11/05/2013 - 20:02:20 - [18,031] R---D C:\Program Files (x86)\Skype
    O43 - CFD: 13/10/2013 - 14:52:39 - [248,177] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
    O43 - CFD: 06/10/2013 - 12:42:24 - [0,471] ----D C:\Program Files (x86)\Ss-Helper =>Adware.SaveShare
    O43 - CFD: 04/05/2012 - 07:56:09 - [0,727] ----D C:\Program Files (x86)\SymSilent
    O43 - CFD: 04/05/2012 - 07:31:44 - [0] --H-D C:\Program Files (x86)\Temp
    O43 - CFD: 06/04/2013 - 08:51:59 - [52,593] ----D C:\Program Files (x86)\Trusteer
    O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
    O43 - CFD: 04/08/2012 - 07:04:06 - [0,381] ----D C:\Program Files (x86)\uTorrent =>P2P.µTorrent
    O43 - CFD: 17/10/2011 - 12:40:38 - [9,213] ----D C:\Program Files (x86)\WildTangent Games
    O43 - CFD: 12/07/2013 - 03:59:50 - [0,500] ----D C:\Program Files (x86)\Windows Defender
    O43 - CFD: 17/10/2011 - 13:00:00 - [176,474] ----D C:\Program Files (x86)\Windows Live
    O43 - CFD: 03/08/2012 - 19:30:04 - [5,895] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
    O43 - CFD: 17/10/2011 - 12:34:44 - [5,092] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
    O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
    O43 - CFD: 03/08/2012 - 19:30:04 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
    O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
    O43 - CFD: 03/08/2012 - 19:30:05 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
    O43 - CFD: 19/08/2013 - 15:25:48 - [4,131] ----D C:\Program Files (x86)\WinRAR
    O43 - CFD: 13/10/2013 - 20:00:13 - [16,995] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
    O43 - CFD: 14/04/2013 - 16:15:56 - [6,289] ----D C:\Program Files (x86)\Common Files\Adobe
    O43 - CFD: 20/05/2013 - 07:22:19 - [45,628] ----D C:\Program Files (x86)\Common Files\Adobe AIR
    O43 - CFD: 04/05/2012 - 07:37:32 - [0,229] ----D C:\Program Files (x86)\Common Files\ATI Technologies
    O43 - CFD: 08/05/2013 - 11:12:18 - [36,551] ----D C:\Program Files (x86)\Common Files\AVSMedia
    O43 - CFD: 04/05/2012 - 07:31:00 - [3,518] ----D C:\Program Files (x86)\Common Files\InstallShield
    O43 - CFD: 15/09/2013 - 17:50:16 - [1,191] ----D C:\Program Files (x86)\Common Files\Java
    O43 - CFD: 07/08/2012 - 16:27:19 - [10,097] ----D C:\Program Files (x86)\Common Files\LogiShrd
    O43 - CFD: 27/09/2012 - 21:24:46 - [121,693] ----D C:\Program Files (x86)\Common Files\microsoft shared
    O43 - CFD: 06/10/2013 - 12:21:22 - [5,704] ----D C:\Program Files (x86)\Common Files\PC Tools
    O43 - CFD: 04/08/2012 - 16:24:45 - [54,576] ----D C:\Program Files (x86)\Common Files\Remote Control Software Common
    O43 - CFD: 04/08/2012 - 16:20:52 - [3,596] ----D C:\Program Files (x86)\Common Files\Remote Control USB Driver
    O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
    O43 - CFD: 11/05/2013 - 20:02:20 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
    O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
    O43 - CFD: 03/10/2013 - 21:23:35 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
    O43 - CFD: 04/08/2012 - 07:59:51 - [10,046] ----D C:\Program Files (x86)\Common Files\System
    O43 - CFD: 17/10/2011 - 12:54:11 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
    O43 - CFD: 14/04/2013 - 16:37:22 - [164,158] ----D C:\ProgramData\Adobe
    O43 - CFD: 04/05/2012 - 07:39:28 - [0,002] ----D C:\ProgramData\AMD
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Application Data
    O43 - CFD: 04/05/2012 - 08:05:03 - [0] ----D C:\ProgramData\ATI
    O43 - CFD: 06/10/2013 - 12:15:46 - [0] ----D C:\ProgramData\AVAST Software
    O43 - CFD: 06/10/2013 - 12:41:03 - [268,930] ----D C:\ProgramData\AVG2014
    O43 - CFD: 08/05/2013 - 11:14:35 - [0] ----D C:\ProgramData\AVS4YOU
    O43 - CFD: 03/08/2012 - 13:45:40 - [0] -SH-D C:\ProgramData\Bureau
    O43 - CFD: 16/03/2013 - 09:53:31 - [0] ----D C:\ProgramData\Canneverbe Limited
    O43 - CFD: 10/08/2012 - 08:57:31 - [15,579] --H-D C:\ProgramData\CanonBJ
    O43 - CFD: 06/10/2013 - 12:18:55 - [0] --H-D C:\ProgramData\Common Files
    O43 - CFD: 15/02/2013 - 22:02:05 - [0] ----D C:\ProgramData\CyberLink
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Desktop
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Documents
    O43 - CFD: 03/08/2012 - 14:39:26 - [0] ----D C:\ProgramData\f-secure
    O43 - CFD: 03/08/2012 - 13:45:40 - [0] -SH-D C:\ProgramData\Favoris
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Favorites
    O43 - CFD: 20/06/2013 - 19:20:23 - [54,288] ----D C:\ProgramData\Hewlett-Packard
    O43 - CFD: 04/10/2013 - 08:02:35 - [0,083] ----D C:\ProgramData\InstallMate =>PUP.Tarma
    O43 - CFD: 09/08/2012 - 07:38:28 - [12,349] ----D C:\ProgramData\LogiShrd
    O43 - CFD: 13/10/2013 - 11:21:31 - [7,396] ----D C:\ProgramData\Malwarebytes
    O43 - CFD: 03/08/2012 - 13:45:40 - [0] -SH-D C:\ProgramData\Menu Démarrer
    O43 - CFD: 13/10/2013 - 18:36:05 - [23,734] ----D C:\ProgramData\MFAData
    O43 - CFD: 13/10/2013 - 14:49:24 - [335,763] -S--D C:\ProgramData\Microsoft
    O43 - CFD: 09/10/2013 - 21:15:36 - [0,013] ----D C:\ProgramData\Microsoft Help
    O43 - CFD: 03/08/2012 - 13:45:40 - [0] -SH-D C:\ProgramData\Modèles
    O43 - CFD: 03/08/2012 - 18:29:19 - [0,036] ----D C:\ProgramData\Mozilla
    O43 - CFD: 03/10/2013 - 21:26:06 - [0,121] ----D C:\ProgramData\Norton
    O43 - CFD: 04/05/2012 - 07:49:13 - [16,683] ----D C:\ProgramData\NortonInstaller
    O43 - CFD: 15/09/2013 - 17:50:09 - [0] ----D C:\ProgramData\Oracle
    O43 - CFD: 16/12/2012 - 10:52:16 - [2,620] ----D C:\ProgramData\Orange
    O43 - CFD: 04/05/2012 - 07:32:08 - [4,717] ----D C:\ProgramData\Ralink Driver
    O43 - CFD: 11/05/2013 - 20:02:35 - [56,598] ----D C:\ProgramData\Skype
    O43 - CFD: 13/10/2013 - 16:28:48 - [0,218] ----D C:\ProgramData\Spybot - Search & Destroy
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Start Menu
    O43 - CFD: 19/08/2012 - 13:42:05 - [0] ----D C:\ProgramData\Sun
    O43 - CFD: 04/05/2012 - 08:04:04 - [0,002] ----D C:\ProgramData\Synaptics
    O43 - CFD: 13/10/2013 - 19:07:04 - [0,086] ---AD C:\ProgramData\Temp
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Templates
    O43 - CFD: 06/04/2013 - 08:49:56 - [173,581] ----D C:\ProgramData\Trusteer
    O43 - CFD: 17/08/2012 - 07:48:48 - [0] ----D C:\ProgramData\VirtualizedApplications
    O43 - CFD: 17/10/2011 - 12:49:18 - [229,714] ----D C:\ProgramData\WildTangent
    O43 - CFD: 18/11/2012 - 17:21:12 - [39,643] ----D C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
    O43 - CFD: 07/08/2012 - 08:35:37 - [4,393] ----D C:\Users\Jeck666\AppData\Roaming\Adobe
    O43 - CFD: 03/08/2012 - 13:52:41 - [0] ----D C:\Users\Jeck666\AppData\Roaming\ATI
    O43 - CFD: 01/05/2013 - 18:09:38 - [0,002] ----D C:\Users\Jeck666\AppData\Roaming\Audacity
    O43 - CFD: 06/10/2013 - 12:29:29 - [0,008] ----D C:\Users\Jeck666\AppData\Roaming\AVG2014
    O43 - CFD: 16/03/2013 - 09:53:31 - [0,002] ----D C:\Users\Jeck666\AppData\Roaming\Canneverbe Limited
    O43 - CFD: 10/08/2012 - 09:06:52 - [4,030] ----D C:\Users\Jeck666\AppData\Roaming\Canon
    O43 - CFD: 08/08/2012 - 07:51:16 - [0] ----D C:\Users\Jeck666\AppData\Roaming\CyberLink
    O43 - CFD: 21/09/2013 - 16:58:40 - [0] ----D C:\Users\Jeck666\AppData\Roaming\dvdcss
    O43 - CFD: 04/08/2012 - 15:21:50 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Garmin
    O43 - CFD: 12/08/2012 - 13:50:58 - [0,005] ----D C:\Users\Jeck666\AppData\Roaming\Hewlett-Packard
    O43 - CFD: 18/11/2012 - 17:22:24 - [0,293] ----D C:\Users\Jeck666\AppData\Roaming\hpqlog
    O43 - CFD: 03/08/2012 - 13:50:52 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Identities
    O43 - CFD: 04/08/2012 - 16:19:53 - [0] ----D C:\Users\Jeck666\AppData\Roaming\InstallShield
    O43 - CFD: 07/08/2012 - 16:29:44 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Leadertech
    O43 - CFD: 03/08/2012 - 13:53:47 - [0,056] ----D C:\Users\Jeck666\AppData\Roaming\Macromedia
    O43 - CFD: 13/10/2013 - 11:22:13 - [22,957] ----D C:\Users\Jeck666\AppData\Roaming\Malwarebytes
    O43 - CFD: 04/05/2012 - 17:18:54 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Media Center Programs
    O43 - CFD: 08/09/2013 - 09:59:52 - [8,273] -S--D C:\Users\Jeck666\AppData\Roaming\Microsoft
    O43 - CFD: 03/08/2012 - 18:29:31 - [150,635] ----D C:\Users\Jeck666\AppData\Roaming\Mozilla
    O43 - CFD: 29/08/2013 - 09:17:43 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Orange
    O43 - CFD: 01/08/2013 - 21:12:43 - [4,807] ----D C:\Users\Jeck666\AppData\Roaming\Skype
    O43 - CFD: 23/09/2012 - 08:15:53 - [0,710] ----D C:\Users\Jeck666\AppData\Roaming\SoftGrid Client
    O43 - CFD: 03/08/2012 - 13:51:41 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Synaptics
    O43 - CFD: 15/08/2012 - 07:51:23 - [0,212] ----D C:\Users\Jeck666\AppData\Roaming\TeraCopy
    O43 - CFD: 03/08/2012 - 18:20:39 - [90,186] ----D C:\Users\Jeck666\AppData\Roaming\Thunderbird
    O43 - CFD: 16/08/2012 - 11:05:25 - [0] ----D C:\Users\Jeck666\AppData\Roaming\TP
    O43 - CFD: 06/10/2013 - 12:28:22 - [0] ----D C:\Users\Jeck666\AppData\Roaming\TuneUp Software
    O43 - CFD: 13/10/2013 - 20:03:25 - [4,071] ----D C:\Users\Jeck666\AppData\Roaming\uTorrent =>P2P.µTorrent
    O43 - CFD: 21/09/2013 - 16:58:48 - [0,077] ----D C:\Users\Jeck666\AppData\Roaming\vlc
    O43 - CFD: 19/08/2013 - 15:26:09 - [0] ----D C:\Users\Jeck666\AppData\Roaming\WinRAR
    O43 - CFD: 13/10/2013 - 20:02:56 - [0,018] ----D C:\Users\Jeck666\AppData\Roaming\ZHP =>.Nicolas Coolman
    O43 - CFD: 04/08/2012 - 06:42:34 - [0,003] ----D C:\Users\Jeck666\AppData\Roaming\_MDLogs
    O43 - CFD: 15/07/2013 - 07:05:01 - [14,692] ----D C:\Users\Jeck666\AppData\Local\Adobe
    O43 - CFD: 03/08/2012 - 13:52:57 - [0] ----D C:\Users\Jeck666\AppData\Local\AMD
    O43 - CFD: 03/08/2012 - 13:45:54 - [0] -SH-D C:\Users\Jeck666\AppData\Local\Application Data
    O43 - CFD: 03/08/2012 - 13:52:41 - [0,058] ----D C:\Users\Jeck666\AppData\Local\ATI
    O43 - CFD: 06/10/2013 - 14:02:13 - [1,141] ----D C:\Users\Jeck666\AppData\Local\Avg2014
    O43 - CFD: 13/10/2013 - 14:47:28 - [0] ----D C:\Users\Jeck666\AppData\Local\CrashDumps
    O43 - CFD: 16/03/2013 - 09:52:18 - [2,561] ----D C:\Users\Jeck666\AppData\Local\CRE
    O43 - CFD: 08/08/2012 - 07:51:14 - [0,005] ----D C:\Users\Jeck666\AppData\Local\CyberLink
    O43 - CFD: 06/10/2013 - 12:47:17 - [0,295] ----D C:\Users\Jeck666\AppData\Local\Diagnostics
    O43 - CFD: 04/02/2013 - 19:01:39 - [52,111] ----D C:\Users\Jeck666\AppData\Local\Google
    O43 - CFD: 04/08/2012 - 14:51:03 - [0,010] ----D C:\Users\Jeck666\AppData\Local\Hewlett-Packard
    O43 - CFD: 03/08/2012 - 13:52:15 - [0,004] ----D C:\Users\Jeck666\AppData\Local\Hewlett-Packard_Company
    O43 - CFD: 03/08/2012 - 13:45:54 - [0] -SH-D C:\Users\Jeck666\AppData\Local\Historique
    O43 - CFD: 03/08/2012 - 18:33:12 - [0] ----D C:\Users\Jeck666\AppData\Local\Macromedia
    O43 - CFD: 06/10/2013 - 12:18:55 - [7,152] ----D C:\Users\Jeck666\AppData\Local\MFAData
    O43 - CFD: 17/08/2013 - 09:43:57 - [77,522] ----D C:\Users\Jeck666\AppData\Local\Microsoft
    O43 - CFD: 15/08/2012 - 10:26:35 - [0,142] ----D C:\Users\Jeck666\AppData\Local\Microsoft Games
    O43 - CFD: 22/01/2013 - 10:30:39 - [0,208] ----D C:\Users\Jeck666\AppData\Local\Microsoft Help
    O43 - CFD: 21/09/2013 - 10:03:23 - [94,381] ----D C:\Users\Jeck666\AppData\Local\Mozilla
    O43 - CFD: 05/02/2013 - 19:42:43 - [0] ----D C:\Users\Jeck666\AppData\Local\Programs
    O43 - CFD: 03/08/2012 - 13:47:01 - [0] ----D C:\Users\Jeck666\AppData\Local\RemEngine
    O43 - CFD: 16/08/2012 - 11:05:13 - [0,809] ----D C:\Users\Jeck666\AppData\Local\SoftGrid Client
    O43 - CFD: 13/10/2013 - 20:03:34 - [0] ----D C:\Users\Jeck666\AppData\Local\Temp
    O43 - CFD: 03/08/2012 - 13:45:54 - [0] -SH-D C:\Users\Jeck666\AppData\Local\Temporary Internet Files
    O43 - CFD: 29/08/2012 - 18:28:50 - [19,366] ----D C:\Users\Jeck666\AppData\Local\Thunderbird
    O43 - CFD: 06/04/2013 - 08:52:08 - [52,875] ----D C:\Users\Jeck666\AppData\Local\Trusteer
    O43 - CFD: 19/01/2013 - 19:39:26 - [0,760] ----D C:\Users\Jeck666\AppData\Local\VirtualStore
    O43 - CFD: 19/08/2013 - 15:36:25 - [0,003] ----D C:\Users\Jeck666\AppData\Local\WBFSManager
    O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    O43 - CFD: 11/09/2013 - 19:08:46 - [0] R---D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    O43 - CFD: 09/05/2013 - 13:17:18 - [0,001] ----D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
    O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    O43 - CFD: 28/09/2012 - 18:41:53 - [0,001] ----D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
    O43 - CFD: 02/06/2013 - 09:02:20 - [0] ----D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orange
    O43 - CFD: 11/09/2013 - 19:08:46 - [0,002] R---D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    O43 - CFD: 19/08/2013 - 15:35:41 - [0,001] ----D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WBFS Manager
    O43 - CFD: 19/08/2013 - 15:25:50 - [0,003] ----D C:\Users\Jeck666\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
    ~ 5 Dossiers CLSID vides (CLSID Empty Folders)
    ~ Program Folder: 195 Scanned in 00mn 35s
    0
  11. Jeck666 Messages postés 37 Statut Membre
     
    Suite n°2 :

    ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
    O44 - LFC:[MD5.460403D865C633E2FB39C772BA993641] - 03/10/2013 - 20:34:17 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\SysNative\aswBoot.exe [287840]
    O44 - LFC:[MD5.460403D865C633E2FB39C772BA993641] - 03/10/2013 - 20:34:17 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [287840]
    O44 - LFC:[MD5.9F0FFF16B88A926C0922B7BB3A62AC10] - 06/10/2013 - 11:21:24 ---A- . (.Pas de propriétaire - readmft.) -- C:\Windows\SysNative\CleanMFT64.exe [41632]
    O44 - LFC:[MD5.9F0FFF16B88A926C0922B7BB3A62AC10] - 06/10/2013 - 11:21:24 ---A- . (.Pas de propriétaire - readmft.) -- C:\Windows\System32\CleanMFT64.exe [41632]
    O44 - LFC:[MD5.280E90CBF4B2DDD169F0728CB44D726F] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\Windows\System32\Drivers\usbhub.sys [343040]
    O44 - LFC:[MD5.311C1DD1088E55BEAE15954D17F50646] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\Drivers\usbehci.sys [52736]
    O44 - LFC:[MD5.9406D801042FAF859CF81B2C886413DC] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbohci.sys [25600]
    O44 - LFC:[MD5.E73A7A04FDAC9DD46EE2A4257F09E91C] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\Drivers\usbport.sys [325120]
    O44 - LFC:[MD5.A83D0EC9AE4C31704442099D40BA2471] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\Drivers\usbuhci.sys [30720]
    O44 - LFC:[MD5.ACCEA6BC68D0C9A78EB97EE159028B4E] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\Drivers\usbccgp.sys [99840]
    O44 - LFC:[MD5.861C197502A5057E68F0AC75D9EFCDD7] - 09/10/2013 - 02:47:21 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\Drivers\usbd.sys [7808]
    O44 - LFC:[MD5.E6DE47E2B2E36018E071D4E44AEBBFAC] - 09/10/2013 - 02:57:24 ---A- . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\Drivers\dxgmms1.sys [265152]
    O44 - LFC:[MD5.53BD875C7C0808235BFB803C1A8BE009] - 09/10/2013 - 02:57:25 ---A- . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\Drivers\dxgkrnl.sys [984512]
    O44 - LFC:[MD5.764DF431D13537A575752009E7740F18] - 09/10/2013 - 02:57:54 ---A- . (.Microsoft Corporation - WinFX OpenType/CFF Rasterizer.) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll [124112]
    O44 - LFC:[MD5.764DF431D13537A575752009E7740F18] - 09/10/2013 - 02:57:54 ---A- . (.Microsoft Corporation - WinFX OpenType/CFF Rasterizer.) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll [124112]
    O44 - LFC:[MD5.19320B121BFE7462EADD50A42C81AFD0] - 09/10/2013 - 03:19:19 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\SysNative\win32k.sys [3155968]
    O44 - LFC:[MD5.19320B121BFE7462EADD50A42C81AFD0] - 09/10/2013 - 03:19:19 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [3155968]
    O44 - LFC:[MD5.B32AB94A432289AC2DF77A3DCAD32EED] - 09/10/2013 - 03:33:36 ---A- . (.Microsoft Corporation - Web DAV Client DLL.) -- C:\Windows\SysNative\davclnt.dll [102400]
    O44 - LFC:[MD5.B32AB94A432289AC2DF77A3DCAD32EED] - 09/10/2013 - 03:33:36 ---A- . (.Microsoft Corporation - Web DAV Client DLL.) -- C:\Windows\System32\davclnt.dll [102400]
    O44 - LFC:[MD5.1A4F75E63C9FB84B85DFFC6B63FD5404] - 09/10/2013 - 03:33:36 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys [140800]
    O44 - LFC:[MD5.0EB0E5D22B1760F2DBCE632F2DD7A54D] - 09/10/2013 - 03:33:38 ---A- . (.Microsoft Corporation - Fichier DLL du service DAV pour le Web.) -- C:\Windows\SysNative\WebClnt.dll [259584]
    O44 - LFC:[MD5.0EB0E5D22B1760F2DBCE632F2DD7A54D] - 09/10/2013 - 03:33:38 ---A- . (.Microsoft Corporation - Fichier DLL du service DAV pour le Web.) -- C:\Windows\System32\WebClnt.dll [259584]
    O44 - LFC:[MD5.597C3699384E53CC59587ED50CCE5CA2] - 09/10/2013 - 03:34:33 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\Windows\System32\Drivers\hidclass.sys [76800]
    O44 - LFC:[MD5.856E76B3641746ABBC2946BED1372098] - 09/10/2013 - 03:34:33 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\Drivers\hidparse.sys [32896]
    O44 - LFC:[MD5.9661DA76B4531B2DA272ECCE25A8AF24] - 09/10/2013 - 03:34:33 ---A- . (.Microsoft Corporation - USB Scanner Driver.) -- C:\Windows\System32\Drivers\usbscan.sys [42496]
    O44 - LFC:[MD5.B0435098C81D04CAFFF80DDB746CD3A2] - 09/10/2013 - 03:34:40 ---A- . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\Windows\System32\Drivers\USBAUDIO.sys [109824]
    O44 - LFC:[MD5.80B0F7D5CCF86CEB5D402EAAF61FEC31] - 09/10/2013 - 03:34:40 ---A- . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\usbcir.sys [100864]
    O44 - LFC:[MD5.1F775DA4CF1A3A1834207E975A72E9D7] - 09/10/2013 - 03:34:40 ---A- . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\Drivers\usbvideo.sys [185344]
    O44 - LFC:[MD5.E2C933EDBC389386EBE6D2BA953F43D8] - 09/10/2013 - 03:43:27 ---A- . (.Microsoft Corporation - Runtime de l'infrastructure de pilotes en m.) -- C:\Windows\System32\Drivers\Wdf01000.sys [785624]
    O44 - LFC:[MD5.142671F462619CB64BA74F5B70136CB4] - 09/10/2013 - 03:48:29 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll [46080]
    O44 - LFC:[MD5.142671F462619CB64BA74F5B70136CB4] - 09/10/2013 - 03:48:29 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [46080]
    O44 - LFC:[MD5.D6BAE9B4B210D71CDDADC224CEFCDB5F] - 09/10/2013 - 03:48:30 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\SysNative\fontsub.dll [100864]
    O44 - LFC:[MD5.D6BAE9B4B210D71CDDADC224CEFCDB5F] - 09/10/2013 - 03:48:30 ---A- . (.Microsoft Corporation - Font Subsetting DLL.) -- C:\Windows\System32\fontsub.dll [100864]
    O44 - LFC:[MD5.A5ED9421B8D09ED4F57CDA386307713E] - 09/10/2013 - 03:48:32 ---A- . (.Microsoft Corporation - DCI Manager.) -- C:\Windows\SysNative\dciman32.dll [14336]
    O44 - LFC:[MD5.A5ED9421B8D09ED4F57CDA386307713E] - 09/10/2013 - 03:48:32 ---A- . (.Microsoft Corporation - DCI Manager.) -- C:\Windows\System32\dciman32.dll [14336]
    O44 - LFC:[MD5.796B47A4B82EF1C39F13435B88834C48] - 09/10/2013 - 03:48:32 ---A- . (.Microsoft Corporation - Language Pack.) -- C:\Windows\SysNative\lpk.dll [41472]
    O44 - LFC:[MD5.796B47A4B82EF1C39F13435B88834C48] - 09/10/2013 - 03:48:32 ---A- . (.Microsoft Corporation - Language Pack.) -- C:\Windows\System32\lpk.dll [41472]
    O44 - LFC:[MD5.E1BB958681BE311E7CFF06CFEC5F1F2B] - 09/10/2013 - 03:48:33 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll [368128]
    O44 - LFC:[MD5.E1BB958681BE311E7CFF06CFEC5F1F2B] - 09/10/2013 - 03:48:33 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [368128]
    O44 - LFC:[MD5.9028D1621C43DF8DFBD1C76860412A11] - 09/10/2013 - 03:53:35 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l'expérience u.) -- C:\Windows\SysNative\comctl32.dll [633856]
    O44 - LFC:[MD5.9028D1621C43DF8DFBD1C76860412A11] - 09/10/2013 - 03:53:35 ---A- . (.Microsoft Corporation - Bibliothèque de contrôles de l'expérience u.) -- C:\Windows\System32\comctl32.dll [633856]
    O44 - LFC:[MD5.56661BB55AE4633677F846FFCD080ECA] - 09/10/2013 - 04:02:59 ---A- . (.Microsoft Corporation - Nettoyage de la mise à jour.) -- C:\Windows\SysNative\scavengeui.dll [461312]
    O44 - LFC:[MD5.56661BB55AE4633677F846FFCD080ECA] - 09/10/2013 - 04:02:59 ---A- . (.Microsoft Corporation - Nettoyage de la mise à jour.) -- C:\Windows\System32\scavengeui.dll [461312]
    O44 - LFC:[MD5.314C17917AC8523EC77A710215012A65] - 09/10/2013 - 04:28:42 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\Drivers\afd.sys [497152]
    O44 - LFC:[MD5.9A9F9F1A77D6A80EE28B57664F00013E] - 09/10/2013 - 04:28:42 ---A- . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\Windows\SysNative\mswsock.dll [327168]
    O44 - LFC:[MD5.9A9F9F1A77D6A80EE28B57664F00013E] - 09/10/2013 - 04:28:42 ---A- . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\Windows\System32\mswsock.dll [327168]
    O44 - LFC:[MD5.40AF23633D197905F03AB5628C558C51] - 09/10/2013 - 04:28:43 ---A- . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\Drivers\tcpip.sys [1903552]
    O44 - LFC:[MD5.70833F5A59F65908698093889C34BCA2] - 09/10/2013 - 04:41:34 ---A- . (.Microsoft Corporation - Win32 Emulation on NT64.) -- C:\Windows\SysNative\wow64.dll [243712]
    O44 - LFC:[MD5.70833F5A59F65908698093889C34BCA2] - 09/10/2013 - 04:41:34 ---A- . (.Microsoft Corporation - Win32 Emulation on NT64.) -- C:\Windows\System32\wow64.dll [243712]
    O44 - LFC:[MD5.CAAAC014C5C56A69F710B5F1B836DE22] - 09/10/2013 - 04:41:38 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\SysNative\ntdll.dll [1732032]
    O44 - LFC:[MD5.CAAAC014C5C56A69F710B5F1B836DE22] - 09/10/2013 - 04:41:38 ---A- . (.Microsoft Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll [1732032]
    O44 - LFC:[MD5.A3FCC4F97551087D65F8FEE879FEF736] - 09/10/2013 - 04:41:41 ---A- . (.Microsoft Corporation - Bibliothèque de l'application auxiliaire de.) -- C:\Windows\SysNative\tdh.dll [859648]
    O44 - LFC:[MD5.A3FCC4F97551087D65F8FEE879FEF736] - 09/10/2013 - 04:41:41 ---A- . (.Microsoft Corporation - Bibliothèque de l'application auxiliaire de.) -- C:\Windows\System32\tdh.dll [859648]
    O44 - LFC:[MD5.63A580C88CFAF72A92550940054569EF] - 09/10/2013 - 04:41:43 ---A- . (.Microsoft Corporation - API avancées Windows 32.) -- C:\Windows\SysNative\advapi32.dll [878080]
    O44 - LFC:[MD5.63A580C88CFAF72A92550940054569EF] - 09/10/2013 - 04:41:43 ---A- . (.Microsoft Corporation - API avancées Windows 32.) -- C:\Windows\System32\advapi32.dll [878080]
    O44 - LFC:[MD5.5B9A6A310326D9C438F2C19FBBE97C97] - 09/10/2013 - 04:41:44 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\SysNative\ntoskrnl.exe [5549504]
    O44 - LFC:[MD5.5B9A6A310326D9C438F2C19FBBE97C97] - 09/10/2013 - 04:41:44 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [5549504]
    O44 - LFC:[MD5.C53BA50404665A17707D9D4FD78699CB] - 09/10/2013 - 19:37:40 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\SysNative\MRT.exe [80541720]
    O44 - LFC:[MD5.C53BA50404665A17707D9D4FD78699CB] - 09/10/2013 - 19:37:40 ---A- . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe [80541720]
    O44 - LFC:[MD5.F026C6F104758D0EB215B017016FAE27] - 09/10/2013 - 20:07:06 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysNative\mshtml.dll [19252224]
    O44 - LFC:[MD5.F026C6F104758D0EB215B017016FAE27] - 09/10/2013 - 20:07:06 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [19252224]
    O44 - LFC:[MD5.CCDB8FDC289AA9AFA5F8827A2ADB21AD] - 09/10/2013 - 20:07:12 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\SysNative\ieframe.dll [15404544]
    O44 - LFC:[MD5.CCDB8FDC289AA9AFA5F8827A2ADB21AD] - 09/10/2013 - 20:07:12 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [15404544]
    O44 - LFC:[MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - 09/10/2013 - 20:07:17 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\SysNative\wininet.dll [2241024]
    O44 - LFC:[MD5.D28B35DE88D27EFB27DF4B1E8319E3C0] - 09/10/2013 - 20:07:17 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2241024]
    O44 - LFC:[MD5.16A3E229F60FA4B05573A0937AB3C3CB] - 09/10/2013 - 20:07:21 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\SysNative\jsproxy.dll [53248]
    O44 - LFC:[MD5.16A3E229F60FA4B05573A0937AB3C3CB] - 09/10/2013 - 20:07:21 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [53248]
    O44 - LFC:[MD5.882AC0DD997CFC90FBB468D698BD55C6] - 09/10/2013 - 20:07:27 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysNative\urlmon.dll [1365504]
    O44 - LFC:[MD5.882AC0DD997CFC90FBB468D698BD55C6] - 09/10/2013 - 20:07:27 ---A- . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [1365504]
    O44 - LFC:[MD5.D383602755758FA81166B0FD8AFE6D40] - 09/10/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript9.dll [3959296]
    O44 - LFC:[MD5.D383602755758FA81166B0FD8AFE6D40] - 09/10/2013 - 20:07:33 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [3959296]
    O44 - LFC:[MD5.7B4E06047031B2AAA4AE10F00C59BFC7] - 09/10/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\SysNative\jscript.dll [855552]
    O44 - LFC:[MD5.7B4E06047031B2AAA4AE10F00C59BFC7] - 09/10/2013 - 20:07:36 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [855552]
    O44 - LFC:[MD5.214E39F0A8E382F1889B26B46DE0AF81] - 09/10/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\SysNative\msfeeds.dll [603136]
    O44 - LFC:[MD5.214E39F0A8E382F1889B26B46DE0AF81] - 09/10/2013 - 20:07:38 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [603136]
    O44 - LFC:[MD5.199BD40B1890E1EEFF7438B59787534F] - 09/10/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\SysNative\iertutil.dll [2647552]
    O44 - LFC:[MD5.199BD40B1890E1EEFF7438B59787534F] - 09/10/2013 - 20:07:45 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [2647552]
    O44 - LFC:[MD5.742B2C69643527763E162C0BA923D086] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\SysNative\iesysprep.dll [136704]
    O44 - LFC:[MD5.742B2C69643527763E162C0BA923D086] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - IE Sysprep Provider.) -- C:\Windows\System32\iesysprep.dll [136704]
    O44 - LFC:[MD5.4163195B6D07D3434BDEA78C293B7E0E] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [89600]
    O44 - LFC:[MD5.4163195B6D07D3434BDEA78C293B7E0E] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Registers custom PKEYs for IE.) -- C:\Windows\System32\RegisterIEPKEYs.exe [89600]
    O44 - LFC:[MD5.C4DDAC3F3062739C4C2BB759B36E005D] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\SysNative\ie4uinit.exe [51712]
    O44 - LFC:[MD5.C4DDAC3F3062739C4C2BB759B36E005D] - 09/10/2013 - 20:07:49 ---A- . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [51712]
    O44 - LFC:[MD5.A80B91A93EDFFDE3DD2646D6E4CDDC44] - 09/10/2013 - 20:07:51 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\SysNative\iesetup.dll [67072]
    O44 - LFC:[MD5.A80B91A93EDFFDE3DD2646D6E4CDDC44] - 09/10/2013 - 20:07:51 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll [67072]
    O44 - LFC:[MD5.38CFAC1BAFEBC8B0AF8A22093803D38E] - 09/10/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\SysNative\iernonce.dll [39936]
    O44 - LFC:[MD5.38CFAC1BAFEBC8B0AF8A22093803D38E] - 09/10/2013 - 20:07:51 ---A- . (.Microsoft Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll [39936]
    O44 - LFC:[MD5.991A9D6B797B4D7E9EB29BE1FB4B1D28] - 09/10/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Moteur de l'interface utilisateur d'Interne.) -- C:\Windows\SysNative\ieui.dll [526336]
    O44 - LFC:[MD5.991A9D6B797B4D7E9EB29BE1FB4B1D28] - 09/10/2013 - 20:07:58 ---A- . (.Microsoft Corporation - Moteur de l'interface utilisateur d'Interne.) -- C:\Windows\System32\ieui.dll [526336]
    O44 - LFC:[MD5.990235D752A40F5F8243ED537FAB2035] - 09/10/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\SysNative\mshtml.tlb [2706432]
    O44 - LFC:[MD5.990235D752A40F5F8243ED537FAB2035] - 09/10/2013 - 20:08:01 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb [2706432]
    O44 - LFC:[MD5.DCFF7B36A0813E5A800F502CA2040B81] - 10/10/2013 - 16:53:31 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [349944]
    O44 - LFC:[MD5.DCFF7B36A0813E5A800F502CA2040B81] - 10/10/2013 - 16:53:31 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [349944]
    O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/10/2013 - 12:41:46 ---A- . (...) -- C:\Windows\SysNative\HP_ActiveX_Patch_NOT_DETECTED.txt [0]
    O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/10/2013 - 12:41:46 ---A- . (...) -- C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt [0]
    O44 - LFC:[MD5.0BB97D43299910CBFBA59C461B99B910] - 13/10/2013 - 10:21:28 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25928]
    O44 - LFC:[MD5.23948829C6D049B8ADE0E0FB87305AC3] - 13/10/2013 - 13:49:11 ---A- . (.Safer Networking Limited - Pas de description.) -- C:\Windows\SysNative\sdnclean64.exe [17272]
    O44 - LFC:[MD5.23948829C6D049B8ADE0E0FB87305AC3] - 13/10/2013 - 13:49:11 ---A- . (.Safer Networking Limited - Pas de description.) -- C:\Windows\System32\sdnclean64.exe [17272]
    O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/10/2013 - 14:52:41 ---A- . (...) -- C:\Windows\setuperr.log [0]
    O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/10/2013 - 14:54:38 ---A- . (...) -- C:\Windows\System32\Drivers\lvuvc.hs [0]
    O44 - LFC:[MD5.F7900960B151E40D7AD9D4642B1C5216] - 13/10/2013 - 17:31:05 ---A- . (...) -- C:\Windows\PFRO.log [1334]
    O44 - LFC:[MD5.7E77CCAE04B071BE77FF87F86EBABDD6] - 13/10/2013 - 17:31:12 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
    O44 - LFC:[MD5.5CE55D6B47D2863CC2402291EDD89DE4] - 13/10/2013 - 17:31:20 ---A- . (...) -- C:\Windows\setupact.log [2112]
    O44 - LFC:[MD5.222B91B0FD9C01402CF6F5B8D5FC8D92] - 13/10/2013 - 17:39:05 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2078432]
    O44 - LFC:[MD5.08E8283BDA72E347E393EB3FFF580C22] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1549936]
    O44 - LFC:[MD5.7F6999B44221E9F7471D6AEAC722F008] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [106622]
    O44 - LFC:[MD5.0DB17341DBDA8ED663A0DD71B395B0FC] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [616242]
    O44 - LFC:[MD5.08E8283BDA72E347E393EB3FFF580C22] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1549936]
    O44 - LFC:[MD5.7F6999B44221E9F7471D6AEAC722F008] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\System32\perfc009.dat [106622]
    O44 - LFC:[MD5.0DB17341DBDA8ED663A0DD71B395B0FC] - 13/10/2013 - 17:39:46 ---A- . (...) -- C:\Windows\System32\perfh009.dat [616242]
    O44 - LFC:[MD5.697634CE3365EB695A052EDA09217D72] - 13/10/2013 - 17:39:47 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [130988]
    O44 - LFC:[MD5.3EE4AABEB1AF14DF7B4A46617DA1574C] - 13/10/2013 - 17:39:47 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [704714]
    O44 - LFC:[MD5.697634CE3365EB695A052EDA09217D72] - 13/10/2013 - 17:39:47 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [130988]
    O44 - LFC:[MD5.3EE4AABEB1AF14DF7B4A46617DA1574C] - 13/10/2013 - 17:39:47 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [704714]
    ~ Files: 114 Scanned in 00mn 31s

    ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
    O45 - LFCP:[MD5.E58FC3236FA87FA218A0DDBA14AE1F26] - 13/10/2013 - 18:58:08 ---A- - C:\Windows\Prefetch\AgRobust.db
    O45 - LFCP:[MD5.6D2DCD1E5B716EF877A94BDC240CE876] - 13/10/2013 - 18:58:09 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
    O45 - LFCP:[MD5.28F83EEB393936E8BCFA4FC0DACA3397] - 13/10/2013 - 18:58:10 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
    O45 - LFCP:[MD5.5271A14F370A10A77A456E1EC8C9FC28] - 13/10/2013 - 18:58:10 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
    O45 - LFCP:[MD5.817872882B2C11C5CBE2C4F8FD18F581] - 13/10/2013 - 18:58:11 ---A- - C:\Windows\Prefetch\AgAppLaunch.db
    ~ Prefetcher: 5 Scanned in 00mn 00s

    ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
    O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - Clé orpheline
    ~ ShellExecuteHooks: Scanned in 00mn 00s

    ---\\ Export de clé d'application autorisée (O47)
    O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe" [Enabled] .(.Pas de propriétaire.) -- C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe
    O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
    O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    O47 - AAKE:Key Export DP - "C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe" [Enabled] .(.Pas de propriétaire.) -- C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe
    ~ Keys Export: 6 Scanned in 00mn 00s

    ---\\ Déni du service (Local Security Authority) (O48)
    O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
    O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
    O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
    ~ LSA: 9 Scanned in 00mn 00s

    ---\\ Contrôle du Safe Boot (CSB) (O49)
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
    O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
    ~ CSB: 13 Scanned in 00mn 00s

    ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
    O51 - MPSK:{ccc20797-0895-11e3-b5b5-ac162d524fe2}\AutoRun\command. (...) -- H:\WD SmartWare.exe (.not file.)
    ~ Keys: Scanned in 00mn 00s

    ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
    O52 - TDSD: \Drivers32\"vidc.i420"="lvcod64.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcod64.dll
    O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
    O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
    ~ TDSD: 3 Scanned in 00mn 00s

    ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
    O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
    O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
    ~ MSCP: 2 Scanned in 00mn 00s

    ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
    O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
    O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
    O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0
    O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0
    O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0
    ~ MWPS: 19 Scanned in 00mn 00s

    ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
    O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
    O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
    O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
    O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1
    ~ MWPE Keys: 4 Scanned in 00mn 00s

    ---\\ Liste des pilotes du système (SDL) (O58)
    O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
    ~ Drivers: 19 Scanned in 00mn 00s

    ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
    O61 - LFC: 10/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Avg2014\log\avgdecider.log.2 [65603]
    O61 - LFC: 10/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Spam.msf [2838]
    O61 - LFC: 11/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Tous les messages [96899]
    O61 - LFC: 12/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Avg2014\log\avgui.log.2 [131108]
    O61 - LFC: 12/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Bookmarks [22023]
    O61 - LFC: 12/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak [22023]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\background\background.js [19027]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\block\block.css [797]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\block\block.html [811]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\block\block.js [2377]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\first_run\firstRun.css [1396]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\first_run\firstRun.html [1915]
    O61 - LFC: 12/10/2013 - 20:04:26 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\first_run\firstRun.js [3017]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\options\options.css [2341]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\options\options.html [7818]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\options\options.js [18045]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\options\tabs.js [252]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\popup\popup.css [518]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\popup\popup.html [1669]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\components\popup\popup.js [3684]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\include.postload.js [19623]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\include.preload.js [3079]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\adblockplus.js [96688]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\adblockpro.js [96688]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\basedomain.js [6188]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\compat.js [4659]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\i18n.js [1274]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\i18n_to_html.js [439]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\io.js [4853]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_flat_0_aaaaaa_40x100.png [180]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_flat_75_ffffff_40x100.png [178]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_glass_55_fbf9ee_1x400.png [120]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_glass_65_ffffff_1x400.png [105]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_glass_75_dadada_1x400.png [111]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_glass_75_e6e6e6_1x400.png [110]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_glass_95_fef1ec_1x400.png [119]
    O61 - LFC: 12/10/2013 - 20:04:27 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-bg_highlight-soft_75_cccccc_1x100.png [101]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\LICENCE.txt [35146]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-icons_222222_256x240.png [4369]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-icons_2e83ff_256x240.png [4369]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-icons_454545_256x240.png [4369]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-icons_888888_256x240.png [4369]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\images\ui-icons_cd0a0a_256x240.png [4369]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\css\smoothness\jquery-ui-1.8.16.custom.css [22785]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jquery-ui\js\jquery.min.js [83095]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\jsbn.js [17236]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\publicSuffixList.js [134254]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\punycode.js [13945]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\rsa.js [4728]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\lib\sha1.js [3600]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\manifest.json [1834]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\popupBlocker.js [1198]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\bg.png [85]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\bg_@2X.png [2814]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\checkmark.png [368]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\css\bootstrap.css [14033]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\css\font-awesome.css [23722]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\font\fontawesome-webfont.eot [29360]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\font\fontawesome-webfont.svg [162047]
    O61 - LFC: 12/10/2013 - 20:04:28 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\font\fontawesome-webfont.ttf [64960]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ar\messages.json [14960]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\bg\Find Results [2970]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\bg\messages.json [17094]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ca\messages.json [7483]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\cs\messages.json [8108]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\da\messages.json [1980]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\de\messages.json [7776]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\el\messages.json [4383]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\en_GB\messages.json [2302]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\en_US\messages.json [8522]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\es\messages.json [7691]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\es_419\messages.json [7798]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\font\FontAwesome.otf [50204]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\font\fontawesome-webfont.woff [34420]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-128.png [10911]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-16.png [837]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-19-whitelisted.png [490]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-19.png [1057]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-32.png [2023]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\skin\icons\abp-48.png [3414]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\subscriptions.xml [4753]
    O61 - LFC: 12/10/2013 - 20:04:29 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\webrequest.js [4932]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\et\messages.json [3089]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\fa\messages.json [12754]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\fi\messages.json [5572]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\fr\messages.json [8196]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\he\messages.json [13904]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\hr\messages.json [7533]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\hu\messages.json [8449]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\it\messages.json [7597]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ja\messages.json [11662]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ko\messages.json [7282]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\lt\messages.json [7889]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\lv\messages.json [5829]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ms\messages.json [2030]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\nl\messages.json [7262]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\pl\messages.json [7935]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\pt_BR\messages.json [7879]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\pt_PT\messages.json [7718]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ro\messages.json [7905]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\ru\messages.json [18638]
    O61 - LFC: 12/10/2013 - 20:04:30 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\sk\messages.json [7959]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\sl\messages.json [4034]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\sr\messages.json [3974]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\sv\messages.json [6048]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\th\messages.json [4284]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\tr\messages.json [8085]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\uk\messages.json [4176]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\vi\messages.json [6511]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\zh_CN\messages.json [8995]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\2.5_0\_locales\zh_TW\messages.json [8811]
    O61 - LFC: 12/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOCK [0]
    O61 - LFC: 12/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOCK [0]
    O61 - LFC: 12/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ocifcklkibdehekfnmflempfgjhbedch_0.localstorage [3072]
    O61 - LFC: 12/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs [17408]
    O61 - LFC: 12/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#cdncache1-a.akamaihd.net\settings.sol [94]
    O61 - LFC: 12/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#www.superfish.com\settings.sol [87]
    O61 - LFC: 12/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Mozilla Thunderbird\active-update.xml [57]
    O61 - LFC: 12/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Mozilla Thunderbird\updates.xml [15210]
    O61 - LFC: 12/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\rapport_data_var_0.js.data [13604]
    O61 - LFC: 12/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Hewlett-Packard\HP Support Framework\cee\783208156.cee [1602]
    O61 - LFC: 12/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Crash Reports\InstallTime20131010053258 [10]
    O61 - LFC: 12/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\addons.sqlite [524288]
    O61 - LFC: 12/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\blocklist.xml [47331]
    O61 - LFC: 12/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\calendar-data\local.sqlite [786432]
    O61 - LFC: 12/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Commande [248470]
    O61 - LFC: 12/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\filterlog.html [46616]
    O61 - LFC: 12/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\extensions.sqlite [458752]
    O61 - LFC: 12/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\permissions.sqlite [65536]
    O61 - LFC: 12/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\places.sqlite [10485760]
    O61 - LFC: 12/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\pluginreg.dat [5770]
    O61 - LFC: 12/10/2013 - 20:04:49 ---A- . (...) -- C:\Users\Jeck666\Downloads\Imagine_Artist__EU_.zip [16648863]
    O61 - LFC: 12/10/2013 - 20:04:49 ---A- . (...) -- C:\Users\Jeck666\Downloads\bookmarks.html [74269]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\AMD\Fuel\ClientProxyLog.txt [2]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\AMD\Fuel\ClientProxyLog_1.txt [2]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\AMD\Fuel\ClientProxyLog_2.txt [2]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\AMD\Fuel\ClientProxyLog_3.txt [2]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\ATI\ACE\Manifest.Bin [27473]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\ATI\ACE\Manifest.xml [19813]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\ATI\ACE\Profiles.xml [13947]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Avg2014\log\avgdecider.log.1 [65694]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Avg2014\log\avgui.log.1 [131222]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [262612]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Archived History [57344]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal [512]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Cookies [229376]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal [16384]
    O61 - LFC: 13/10/2013 - 20:04:24 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [5]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Current Session [39010]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Current Tabs [15402]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT [16]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG [145]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old [145]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000082 [708]
    O61 - LFC: 13/10/2013 - 20:04:25 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db [7168]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Favicons [303104]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal [16384]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\.usage [24]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\00\00000000 [1335809]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\CURRENT [16]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG [145]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\LOG.old [145]
    O61 - LFC: 13/10/2013 - 20:04:31 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\000\p\Paths\MANIFEST-000035 [86]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT [16]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG [145]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG.old [145]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000035 [140]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0 [45056]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1 [270336]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2 [1056768]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\History [356352]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache [15080]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\History-journal [16384]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Last Session [368431]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Last Tabs [28532]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jnjfpkgcbaljligdoeapaambmplfakik_0.localstorage [29696]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rvzr-a.akamaihd.net_0.localstorage [3072]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rvzr-a.akamaihd.net_0.localstorage-journal [3608]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage [3072]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal [3608]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage [3072]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.google.fr_0.localstorage-journal [3608]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage [3072]
    O61 - LFC: 1
    0
  12. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Stooooop !

    Je vais pas m'amuser à regrouper chaque partie, héberge-le comme j'ai demandé.

    Gabriel.
    0
  13. Jeck666 Messages postés 37 Statut Membre
     
    Suite n°3 :

    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal [3608]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Login Data [12288]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings [8]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor [68608]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal [16384]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\cdncache1-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol [705]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\img.livejasmin.com\datas.sol [78]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\img.livejasmin.com\flash\livedeal_so_login.swf\buySO_001.sol [39]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\livejasmin.com\JasminChat_savedData.sol [192]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#img.livejasmin.com\settings.sol [88]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#livejasmin.com\settings.sol [84]
    O61 - LFC: 13/10/2013 - 20:04:32 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#new.livejasmincdn.com\settings.sol [91]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#player.ooyala.com\settings.sol [87]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol [81]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#secure.dditservices.com\settings.sol [93]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\#www.dditservices.com\settings.sol [90]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\macromedia.com\support\flashplayer\sys\settings.sol [689]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\new.livejasmincdn.com\JasminChat_savedData.sol [90]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\player.ooyala.com\auth.sol [47]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\player.ooyala.com\ooyala_guid.sol [63]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\secure.dditservices.com\common\MyF.swf\SSO.sol [67]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\www.dditservices.com\SOHandler_SODB.sol [94]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\85X454DQ\www.superfish.com\ws\cookie\storage_v5.swf\superfish.sol [356]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Preferences [117010]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Preferences.previt [124268]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\QuotaManager [13312]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal [4640]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT [16]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG [271]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old [271]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000131 [247]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Shortcuts [20480]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal [12824]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Top Sites [57344]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal [16384]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity [642]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Visited Links [131072]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Default\Web Data [77824]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Local State [42749]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom [12515112]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set [1581530]
    O61 - LFC: 13/10/2013 - 20:04:33 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies [6144]
    O61 - LFC: 13/10/2013 - 20:04:34 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Cookies-journal [2576]
    O61 - LFC: 13/10/2013 - 20:04:34 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Csd Whitelist [135236]
    O61 - LFC: 13/10/2013 - 20:04:34 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Download [702756]
    O61 - LFC: 13/10/2013 - 20:04:34 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Download Whitelist [19592]
    O61 - LFC: 13/10/2013 - 20:04:34 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Google\Chrome\User Data\Safe Browsing Extension Blacklist [6608]
    O61 - LFC: 13/10/2013 - 20:04:34 --HA- . (...) -- C:\Users\Jeck666\AppData\Local\IconCache.db [1099708]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\0\6B\5725Fd01 [63519]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\B\FB\228EDd01 [27776]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\_CACHE_001_ [4194304]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\_CACHE_002_ [4194304]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\_CACHE_003_ [4194304]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\Cache\_CACHE_MAP_ [8468]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\_CACHE_CLEAN_ [1]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Thunderbird\Profiles\s9bt3ryl.default\startupCache\startupCache.4.little [2084995]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\safe_stores\local_store\store_var_1.metadata.data [116]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\ap-blocked_var_0.js.data [116]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\ap-protected_var_0.js.data [3540]
    O61 - LFC: 13/10/2013 - 20:04:35 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\ap-whitelisted_var_0.js.data [116]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\event_wrapper_var_0.js.data [116]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\events_counters_data_var_0.js.data [196]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\events_data_var_0.js.data [164]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\events_hash_data_var_0.js.data [1124]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\events_stats_var_0.js.data [3892]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\fsm_service_var_1.js.data [3380]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\phishing_data_var_0.js.data [276]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\rapport_log2_var_0.js.data [247700]
    O61 - LFC: 13/10/2013 - 20:04:36 ---A- . (...) -- C:\Users\Jeck666\AppData\Local\Trusteer\Rapport\user\store\user\rapport_var_0.cfg.data [2052]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\AVG2014\cfgall\userawacs.cfg [8207]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Adobe\Acrobat\11.0\JSCache\GlobSettings [24]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Adobe\Acrobat\11.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl [898]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Adobe\Acrobat\11.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl [36163]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-10-13 (11-24-03).txt [12412]
    O61 - LFC: 13/10/2013 - 20:04:37 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-10-13 (16-37-24).txt [2370]
    O61 - LFC: 13/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\cert8.db [114688]
    O61 - LFC: 13/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\cookies.sqlite [524288]
    O61 - LFC: 13/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\cookies.sqlite-shm [32768]
    O61 - LFC: 13/10/2013 - 20:04:38 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\cookies.sqlite-wal [0]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\INBOX [1108735]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\INBOX.msf [14382]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Commande.msf [19810]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Corbeille [376187]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Corbeille.msf [10319]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Important.msf [26584]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\folderTree.json [1675]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\formhistory.sqlite [196608]
    O61 - LFC: 13/10/2013 - 20:04:40 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\global-messages-db.sqlite [10911744]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail-1.com\[Gmail].sbd\Tous les messages.msf [37767]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\INBOX [5708992]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\INBOX.msf [0]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\Trash.msf [5701]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\Z_Landerneau.msf [13676]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille [1192044]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Corbeille.msf [0]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Important [3302749]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Important.msf [36223]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Spam [863454]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Spam.msf [3186]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Tous les messages [3484374]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\ImapMail\imap.googlemail.com\[Gmail].sbd\Tous les messages.msf [66375]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\Mail\pop.orange.fr\Inbox [217760]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\Mail\pop.orange.fr\Inbox.msf [3573]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\Mail\pop.orange.fr\Trash [572303]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\Mail\pop.orange.fr\Trash.msf [67662]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\Mail\pop.orange.fr\popstate.dat [157]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\key3.db [16384]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\localstore.rdf [22407]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\panacea.dat [21540]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\places.sqlite-shm [32768]
    O61 - LFC: 13/10/2013 - 20:04:41 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\places.sqlite-wal [0]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\prefs.js [24305]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\session.json [386]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\virtualFolders.dat [10]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\webappsstore.sqlite [98304]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\webappsstore.sqlite-shm [32768]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\Thunderbird\Profiles\s9bt3ryl.default\webappsstore.sqlite-wal [0]
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\ZHP\Log.txt [19298] =>.Nicolas Coolman
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\ZHP\TestsZHPDiag.txt [2910] =>.Nicolas Coolman
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\dht.dat [3832] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\resume.dat [76104] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\resume.dat.old [77220] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\rss.dat [99] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\settings.dat [6212] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\AppData\Roaming\uTorrent\settings.dat.old [6283] =>P2P.µTorrent
    O61 - LFC: 13/10/2013 - 20:04:42 ---A- . (...) -- C:\Users\Jeck666\Documents\cc_20131013_145036.reg [184688]
    O61 - LFC: 13/10/2013 - 20:04:49 ---A- . (...) -- C:\Users\Jeck666\Downloads\SFTGC.exe [1064060]
    O61 - LFC: 13/10/2013 - 20:04:49 ---A- . (.Malwarebytes Corporation.) -- C:\Users\Jeck666\Downloads\mbam-setup-1.75.0.1300.exe [10285040]
    O61 - LFC: 13/10/2013 - 20:04:50 ---A- . (.Safer-Networking Ltd..) -- C:\Users\Jeck666\Downloads\spybot-search-destroy_2-1-09-10-2013_en_10965.exe [36271144]
    O61 - LFC: 13/10/2013 - 20:04:50 ---A- . (.util5.) -- C:\Users\Jeck666\Downloads\TarifsJuil13Alleges_v1.xls [214016]
    O61 - LFC: 13/10/2013 - 20:04:52 ---A- . (.Nicolas Coolman.) -- C:\Users\Jeck666\Downloads\ZHPDiag2- 2013.10.13.35.exe [6834317] =>.Nicolas Coolman
    ~ Files: 314 Scanned in 00mn 37s
    0
  14. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    ...
    0
  15. Jeck666 Messages postés 37 Statut Membre
     
    et la fin :

    ---\\ Enumère les codes produits des logiciels (PUC) (O90)
    O90 - PUC: "0694AF70830BBE9498B1F95939A05A44" . (.HP Customer Experience Enhancements.) -- C:\Windows\Installer\{07FA4960-B038-49EB-891B-9F95930AA544}\ARPPRODUCTICON.exe
    O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- C:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico
    O90 - PUC: "0D57E1FBFA7EAEB4F9CB65F7C045DB9F" . (.HP Launch Box.) -- C:\Windows\Installer\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}\_853F67D554F05449430E7E.exe
    O90 - PUC: "114202EE62C28E947948B11CBD7FED69" . (.HP Support Assistant.) -- C:\Windows\Installer\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\ARPPRODUCTICON.exe =>.Hewlett-Packard Co
    O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
    O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- C:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon
    O90 - PUC: "2265B7DA999C8C9C624EE6AEEF3C60C5" . (.Catalyst Control Center Graphics Previews Common.) -- C:\Windows\Installer\{AD7B5622-C999-C9C8-26E4-6EEAFEC3065C}\ARPPRODUCTICON.exe
    O90 - PUC: "26E9AD54DB2D6D1808DF5FE7F2BE008A" . (.AMD Fuel.) -- C:\Windows\Installer\{45DA9E62-D2BD-81D6-80FD-F57E2FEB00A8}\ARPPRODUCTICON.exe
    O90 - PUC: "2C1A65825C073CE4FA7F5E5BE155032A" . (.HP Client Services.) -- C:\Windows\Installer\{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}\ARPPRODUCTICON.exe
    O90 - PUC: "337E570CC9AECAAA9AB5D089A7C32366" . (.ccc-utility64.) -- C:\Windows\Installer\{C075E733-EA9C-AAAC-A95B-0D987A3C3266}\ARPPRODUCTICON.exe
    O90 - PUC: "3FB89214B6FDC944FB7B3866E3BC1580" . (.HP QuickWeb.) -- C:\Windows\Installer\{41298BF3-DF6B-449C-BFB7-83663ECB5108}\ARPPRODUCTICON.exe
    O90 - PUC: "46E5DCBD973784644944A85685CD6B41" . (.HP Recovery Manager.) -- C:\Windows\Installer\{DBCD5E64-7379-4648-9444-8A6558DCB614}\_6FEFF9B68218417F98F549.exe
    O90 - PUC: "5B8549D1A414E91428B4F5A81A8488E4" . (.HP Software Framework.) -- C:\Windows\Installer\{1D9458B5-414A-419E-824B-5F8AA148884E}\app_1.exe
    O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.05) - Français.) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico
    O90 - PUC: "701043F6AA9F6C745BC43C1AF91155F3" . (.Hewlett-Packard ACLM.NET v1.2.1.1.) -- C:\Windows\Installer\{6F340107-F9AA-47C6-B54C-C3A19F11553F}\ARPPRODUCTICON.exe
    O90 - PUC: "742EF78996E4E2A49A161DF409F1BD6F" . (.Logitech Webcam Software.) -- C:\Windows\Installer\{987FE247-4E69-4A2E-A961-D14F901FDBF6}\ARPPRODUCTICON.exe
    O90 - PUC: "7B65D4CC81F6B0747843BADC57CB4F1F" . (.HP Auto.) -- C:\Windows\Installer\{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}\ARPPRODUCTICON.exe
    O90 - PUC: "7B6CCF935FFF57045A8E5BECDB453C13" . (.HP Documentation.) -- C:\Windows\Installer\{39FCC6B7-FFF5-4075-A5E8-B5CEBD54C331}\NotebookDocs.exe
    O90 - PUC: "7C43C21609E58D74B9C5F017D78D7262" . (.swMSM.) -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
    O90 - PUC: "7C87544E76644214B82C1116CB5A9487" . (.HP Power Manager.) -- C:\Windows\Installer\{E44578C7-4667-4124-8BC2-1161BCA54978}\_853F67D554F05449430E7E.exe
    O90 - PUC: "883658EADAFA357418FD9DB6910D1AC7" . (.Compaq Setup Manager.) -- C:\Windows\Installer\{AE856388-AFAD-4753-81DF-D96B19D0A17C}\ARPPRODUCTICON.exe
    O90 - PUC: "8994BF104C33134458DE70E9E3FE7ED5" . (.YouCam.) -- C:\Windows\Installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\ARPPRODUCTICON.exe
    O90 - PUC: "89A71B350FB5CB04AAFF58A0539757CA" . (.HP Quick Launch.) -- C:\Windows\Installer\{53B17A98-5BF0-40BC-AAFF-850A357975AC}\_853F67D554F05449430E7E.exe
    O90 - PUC: "8D4D77630E5ECF948BE66045C10FB0EB" . (.opensource.) -- C:\Windows\Installer\{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}\ARPPRODUCTICON.exe
    O90 - PUC: "9A8785CC15BF0A0936E35621F3312638" . (.AMD VISION Engine Control Center.) -- C:\Windows\Installer\{CC5878A9-FB51-90A0-633E-65123F136283}\ARPPRODUCTICON.exe
    O90 - PUC: "9CDA4C3BE7369DDD6AC687A25E2E6E76" . (.ATI Catalyst Install Manager.) -- C:\Windows\Installer\{B3C4ADC9-637E-DDD9-A66C-782AE5E2E667}\ARPPRODUCTICON.exe
    O90 - PUC: "9F2FDFE0D6387BE43AD230B83D1FBFA2" . (.Security Update for CAPICOM (KB931906).) -- C:\Windows\Installer\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}\folder.ico
    O90 - PUC: "A60972CD89857B20D89162717A8BE590" . (.AMD Media Foundation Decoders.) -- C:\Windows\Installer\{DC27906A-5898-02B7-8D19-2617A7B85E09}\ARPPRODUCTICON.exe
    O90 - PUC: "A96DB1DE3E70C814191F8D65855218FB" . (.HP On Screen Display.) -- C:\Windows\Installer\{ED1BD69A-07E3-418C-91F1-D856582581BF}\_853F67D554F05449430E7E.exe
    O90 - PUC: "BD714FE9EAC7113E60EEBD28489376C7" . (.Catalyst Control Center Localization All.) -- C:\Windows\Installer\{9EF417DB-7CAE-E311-06EE-DB828439677C}\ARPPRODUCTICON.exe
    O90 - PUC: "C953167FDEC9EA54A915D96650DC554C" . (.Evernote v. 4.2.3.) -- C:\Windows\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico
    O90 - PUC: "CA3DC6DEB61602B4CB3FE636B7295ADA" . (.HP Security Assistant.) -- C:\Windows\Installer\{ED6CD3AC-616B-4B20-BCF3-6E637B92A5AD}\_853F67D554F05449430E7E.exe
    O90 - PUC: "D276F30548C6A844F8F8B43CA58C4314" . (.AMD APP SDK Runtime.) -- C:\Windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
    O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon
    O90 - PUC: "D7E18DD182D0BEC4782B0C144ACF2B51" . (.Rapport.) -- C:\Windows\Installer\{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}\icon.ico
    O90 - PUC: "DCDDBDD7C156329FED6DD77A40F960AC" . (.Catalyst Control Center InstallProxy.) -- C:\Windows\Installer\{7DDBDDCD-651C-F923-DED6-7DA7049F06CA}\ARPPRODUCTICON.exe
    O90 - PUC: "E7FF67E4ABEA78C47B88DC745E24B5D9" . (.Skype(TM) 6.3.) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
    O90 - PUC: "F6071111A6667304777712318267D401" . (.JavaFX 2.1.1.) -- C:\Windows\Installer\{1111706F-666A-4037-7777-211328764D10}\javaIcon.ico
    O90 - PUC: "FA9D7E5F6F0603A4783EE49AD423C21E" . (.HP Setup.) -- C:\Windows\Installer\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}\ARPPRODUCTICON.exe
    O90 - PUC: "FF30403F64103364AA5C5DDCC505EA07" . (.Catalyst Control Center - Branding.) -- C:\Windows\Installer\{F30403FF-0146-4633-AAC5-D5CD5C50AE70}\ARPPRODUCTICON.exe
    ~ Update Products: 154 Scanned in 00mn 00s

    ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
    [MD5.041F3C4183D4D287C0CD59BA0CA0B174] [WIS][19/09/2013] (.Trusteer - Rapport.) -- C:\Windows\Installer\13aa0.msi [37642240]
    [MD5.F0B35DCE7058522B40B00B772092B237] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b0a.msi [1775616]
    [MD5.669A8B7AA72E96731262B6D9B607BA4E] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b10.msi [1187840]
    [MD5.77F525E0C54D5918D08C733E8B5F2BA3] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b16.msi [1172480]
    [MD5.28C68E61F3852535BB8A0FA819789B76] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b1c.msi [1155584]
    [MD5.2442FCABADFD03110F4C8C6CFBCA6EC1] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b22.msi [1226752]
    [MD5.EA0AE6B7D487376098427A54B0D5B46C] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b28.msi [621568]
    [MD5.1839595F6675525D8006AB5D24E16C29] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b2e.msi [1171968]
    [MD5.6C956785A735B4589A2A6F54EF097FC4] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b34.msi [1177088]
    [MD5.8D3D86ECAC611AAF8593C3537019B71C] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b3a.msi [1183232]
    [MD5.782560C08ABD9CDE19643AFA8955CB7F] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b40.msi [1192448]
    [MD5.23BB5FD689BBB21C8B2D841BFDB25CCF] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b46.msi [1174016]
    [MD5.2941B761BB96B2CE8ED2DC9D9CBC9274] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b4c.msi [1201664]
    [MD5.CEC2CD61B230672289F29C88E8BE6355] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b52.msi [1185792]
    [MD5.F10FD6E82CB24D76A7F5AEAE720EE858] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b58.msi [1180160]
    [MD5.7FA0C48D6FAF4F0F4CD19A80B4CC73FC] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b5e.msi [1168384]
    [MD5.891560A7D425AE1BCA383B93CCFD759D] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b64.msi [1182208]
    [MD5.6077AD4F66811E2AE0972EE8D934CD41] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b6a.msi [1180160]
    [MD5.4A4E1150768BE25FD7F5C63988414365] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b70.msi [1213440]
    [MD5.49CD6A412CF55A11A730B39C5809EA09] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b76.msi [1170432]
    [MD5.4D07F77B69FB5B3BBD9FA60BA7399798] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b7c.msi [1201152]
    [MD5.0465185878D94F8779170303BDF6458B] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b82.msi [1177600]
    [MD5.8F794781C8663F1575A4A557E6E459F1] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b88.msi [864768]
    [MD5.89F08AE3A0BC61DA15768EC94EAABE69] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b8e.msi [1167360]
    [MD5.4565601B63BA94E73430517C613A02F6] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21b94.msi [1262080]
    [MD5.486A3760BF44BB6ED191A3DB40DFDAEE] [WIS][11/08/2011] (.ATI - Catalyst Control Center Utility 64.) -- C:\Windows\Installer\21b9a.msi [280064]
    [MD5.84ACDD89DCAD5D4D702844B745F83744] [WIS][11/08/2011] (.ATI - Catalyst Control Center.) -- C:\Windows\Installer\21ba1.msi [11012608]
    [MD5.B06712BF5643BB55600A040F210DC218] [WIS][11/05/2013] (.Skype Technologies S.A. - Skype.) -- C:\Windows\Installer\7f0a4bd.msi [20586496]
    ~ WIS: 155 Scanned in 00mn 22s

    ---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
    SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    SR - | Auto 18/11/2009 98208 | (AERTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
    SR - | Auto 06/07/2011 204288 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
    SR - | Auto 05/07/2011 365568 | (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    SR - | Auto 03/10/2013 3538480 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
    SR - | Auto 25/09/2013 301152 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
    SR - | Auto 10/07/1658 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe =>.EasyBits Software AS
    SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
    SS - | Auto 04/02/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    SS - | Demand 04/02/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    SR - | Auto 27/09/2012 86528 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co
    SR - | Auto 11/10/2010 346168 | (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
    SR - | Auto 10/08/2012 197536 | (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
    SR - | Demand 10/08/2012 1001376 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
    SR - | Auto 05/03/2012 35200 | (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
    SR - | Auto 28/12/2010 1817088 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
    SS - | Auto 10/07/1658 0 | (KMService) . (...) - C:\Windows\system32\srvany.exe =>Hijacker.Office
    SR - | Auto 07/10/2009 191000 | (LVPrcS64) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    SS - | Demand 12/10/2013 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    SS - | Auto 29/08/2013 1073160 | (Orange update Core Service) . (.Orange SA.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe
    SR - | Auto 21/08/2012 794272 | (PCToolsSSDMonitorSvc) . (.PC Tools.) - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
    SR - | Auto 10/09/2013 1435928 | (RapportMgmtService) . (.Trusteer Ltd..) - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
    SR - | Auto 16/05/2013 1817560 | (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    SR - | Auto 16/05/2013 1033688 | (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    SR - | Auto 15/05/2013 171928 | (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    SS - | Auto 28/02/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
    SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
    SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    ~ Services: Scanned in 00mn 26s

    ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
    Run by Jeck666 at 13/10/2013 20:06:58
    ~ OS 64 not supported by MBR tool
    ~ MBR: 0 Scanned in 00mn 00s

    ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
    Written by ad13, http://ad13.geekstog
    Run by Jeck666 at 13/10/2013 20:07:00

    ********* Dump file Name *********
    C:\PhysicalDisk0_MBR.bin
    ~ MBR: Scanned in 00mn 02s

    ---\\ Scan Additionnel (O88)
    Database Version : 12946 - (13/10/2013)
    Clés trouvées (Keys found) : 5
    Valeurs trouvées (Values found) : 0
    Dossiers trouvés (Folders found) : 3
    Fichiers trouvés (Files found) : 2

    [HKLM\SYSTEM\CurrentControlSet\Services\KMService] =>Hijacker.Office^
    [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster
    C:\Users\Jeck666\AppData\Roaming\Mozilla\Firefox\Profiles\35ngg5ye.default\cwlbxugh@xbbz-wlza.co.uk =>Adware.eBookBrowse^
    C:\Program Files (x86)\Ss-Helper =>Adware.SaveShare^
    C:\ProgramData\InstallMate =>PUP.Tarma^
    C:\Windows\SysWOW64\srvany.exe =>Hijacker.Office^
    C:\Windows\system32\srvany.exe =>Hijacker.Office^
    ~ Additionnel Scan: 282803 Items scanned in 01mn 52s

    ---\\ Récapitulatif des détections trouvées sur votre station
    ~ http://nicolascoolman.webs.com/apps/blog/show/26693723-adware-ebookbrowse =>Adware.eBookBrowse
    ~ http://nicolascoolman.webs.com/apps/blog/show/29626487-hijacker-office =>Hijacker.Office
    ~ http://nicolascoolman.webs.com/apps/blog/show/31929570-adware-saveshare =>Adware.SaveShare
    ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
    ~ http://nicolascoolman.webs.com/apps/blog/show/31536787-toolbar-bing =>Toolbar.Bing
    ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster
    ~ MSI: 6 link(s) detected in 01mn 52s

    End of the scan (2089 lines in 08mn 21s)(0)

    A demain. Grand merci.
    0
  16. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Regarde mes précédents messages. ;)

    Gabriel.
    0
  17. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Désinstalle Spybot, il est obsolète.

    Puis fais ZHPFix comme ceci avec ces lignes, et poste le rapport.

    Gabriel.
    0
  • 1
  • 2
  • 3