voici le rapport diag
Rapport de ZHPDiag v1.27.150 par Nicolas Coolman, Update du 15/01/2011
Run by Barbault at 18/01/2011 16:45:16
Web site : ZHPDiag Outil de diagnostic
Contact : nicolascoolman@yahoo.fr
---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v3.6.13 (en-US)
---\\ System Information
Windows XP Home Edition Service Pack 3 (Build 2600)
Processor: x86 Family 6 Model 15 Stepping 11, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2047.0 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 60 GB (61%) free of 98 GB
---\\ Logged in mode
Computer Name: BARBAULT-607F21
User Name: Barbault
All Users Names: SUPPORT_388945a0, HelpAssistant, Barbault, Administrateur,
Unselected Option: O1,O45,O61,O62,O65,O66,O82
Logged in as Administrator
---\\ Environnement Variables
%AppData%=%USERPROFILE%\Application Data
%LocalAppData%=%USERPROFILE%\Local Settings\Application Data
%StartMenu%=%USERPROFILE%\Menu Démarrer
---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 60 Go of 98 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Hard drive, Flash drive, Thumb drive (Free 368 Go of 368 Go)
F:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 03:34:03.) -- C:\Windows\Explorer.exe [1037824]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 03:34:28.) -- C:\Windows\System32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 19:40:30.) -- C:\Windows\System32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 20:15:53.) -- C:\Windows\System32\drivers\ntfs.sys [574976]
---\\ Processus lancés
[MD5.A2322C6207EBB0761A6C8CC9003EBACF] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 258.9.) -- C:\WINDOWS\system32\nvsvc32.exe [155752]
[MD5.37DFE0CFBFFB5BDE8D49F84B31460A0A] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336]
[MD5.E4BA653119103D51744A8D7C89C10E03] - (.ABBYY - ABBYY network license server.) -- C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [759048]
[MD5.79C37AE932A4EECF92DD96ACE8D5EFDE] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]
[MD5.533F6171AF18E6C57E0E75860D39E951] - (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe [1468296]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]
[MD5.D3A829A0B62054744DDA71C32C7A202A] - (.Avira GmbH - Firewall NT service process.) -- C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [539304]
[MD5.3E9AED787C781CEDEA93DC8F8436226F] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe [696320]
[MD5.32DC1799B7CEA4CCDD72D82ACA7F3A75] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [247144]
[MD5.B300890F7A5CDC6C7D7BFB887777E27A] - (.ABBYY - ABBYY ScreenshotReader.) -- C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe [939272]
[MD5.7A4EE22B95F574B3F3143E433CD8923A] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267944]
[MD5.A6B41F3044B2C099BBB5531CAA0551D5] - (.Canal+ Active - CanalPlus.VOD.Service.) -- C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [188416]
[MD5.887BB46C52A144C0F44F1172667DDF8E] - (.Microsoft Corporation - dpupdchk.exe.) -- C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe [448392]
[MD5.77F41382435CCCB8FF179869EC271020] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]
[MD5.E731921DB2E17DCD3DB472FAD5549C57] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
[MD5.84B4C912F0829BD52291CB155346544A] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [270336]
[MD5.572A16FBAD52AB1AC8E3D44BAAF99694] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [92008]
[MD5.B1F06846C8C5994E983EDE1498BC4D5A] - (.Avira GmbH - AntiVir WebGuard Service.) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [403624]
[MD5.DDFA99EF7DC84BD10678E50475187CE2] - (.Avira GmbH - Antivirus MailScanner Service.) -- C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [339624]
[MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox 3.6 Beta 4\firefox.exe [912344]
[MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox 3.6 Beta 4\plugin-container.exe [16856]
[MD5.06BAC93436FAE0D325D9A35CA67964C2] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [623616]
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@canalplus.fr/Assistants VOD,version=1.0.0.0] - (.Canal+ Active - npCpVod.) -- C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Documents and Settings\Barbault\Mes documents\Picasa3\npPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKCU] [@adobe.com/Acrobat,version=5.1] - (.Adobe Systems Inc. - Adobe Acrobat Plug-In Version 5.10 for Netscape.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
P2 - FPN: [HKCU] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
G0 - GCSP: Preference [user Data\Default][HomePage] Google
G2 - GCE: Preference [user Data\Default] [bjeikeheijdjdfjbmknpefojickbkmom] Offerbox v.2.1.2613.41 (Activé)
---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2500339
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Orange Connection Kit.) -- C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [intelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe
O4 - HKLM\..\Run: [nwiz] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O4 - HKCU\..\Run: [MailNotifier] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
O4 - HKCU\..\Run: [ABBYY Screenshot Reader Bonus] . (.ABBYY - ABBYY ScreenshotReader.) -- C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe
O4 - HKUS\S-1-5-21-299502267-1637723038-839522115-1004\..\Run: [MailNotifier] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe
O4 - HKUS\S-1-5-21-299502267-1637723038-839522115-1004\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
O4 - HKUS\S-1-5-21-299502267-1637723038-839522115-1004\..\Run: [ABBYY Screenshot Reader Bonus] . (.ABBYY - ABBYY ScreenshotReader.) -- C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Reader 5.1.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Calendrier perpétuel.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{1B695902-EC93-49DD-8B5F-F6FCE7B011D5}\_294823.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Barbault\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Barbault\Menu Démarrer\Programmes\Internet Explorer (2).lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Barbault\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Blog This in Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\WANADO~1\Wanadoo Messager.ico
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} () - http://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/fs-4.1/resources/fslauncher.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} () - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB8E4404-1183-4F8A-8149-1BD90252EA36}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CB8E4404-1183-4F8A-8149-1BD90252EA36}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{CB8E4404-1183-4F8A-8149-1BD90252EA36}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: ABBYY PDF Transformer 3.0, Service de Gestion des Licences (ABBYY.Licensing.PDFTransformer.Classic.3.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
O23 - Service: (AntiVirFirewallService) . (.Avira GmbH - Firewall NT service process.) - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: (AntiVirMailService) . (.Avira GmbH - Antivirus MailScanner Service.) - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (AntiVirWebService) . (.Avira GmbH - AntiVir WebGuard Service.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe
O23 - Service: CanalPlus.VOD (CanalPlus.VOD) . (.Canal+ Active - CanalPlus.VOD.Service.) - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 258.9.) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\CCleaner.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\EasyShare Registration Task.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{C97EB3B9-AE5B-48C5-956D-E093C1E7AA37}.job
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (avfwot) . (.Avira GmbH - TDI filtering kernel driver.) - C:\Windows\System32\DRIVERS\avfwot.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (FsVga) . (.Microsoft Corporation - Pilote vidéo plein écran.) - C:\Windows\System32\DRIVERS\fsvga.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
---\\ Logiciels installés (O42)
O42 - Logiciel: ABBYY PDF Transformer 3.0 - (.ABBYY.) [HKLM] -- ABBYY PDF Transformer 3.0
O42 - Logiciel: ABBYY PDF Transformer 3.0 - (.ABBYY.) [HKLM] -- {FA300000-0001-0000-0000-074957833700}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Avanquest FR Toolbar - (.Avanquest FR.) [HKLM] -- Avanquest_FR Toolbar
O42 - Logiciel: Avira Premium Security Suite - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: CANAL+ CANALSAT A LA DEMANDE - (.CanalPlus.) [HKLM] -- {04DA096D-6236-4A5D-8FB6-3081E67009BA}
O42 - Logiciel: CCScore - (.EASTMAN KODAK Company.) [HKLM] -- {B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CL1356A for FFPJP Reader - (.Orcanthus.) [HKLM] -- {4E8E34D3-F240-4226-AD7B-3C9F9FD76915}
O42 - Logiciel: Calendrier perpétuel - (.JMBerthier.) [HKLM] -- {1B695902-EC93-49DD-8B5F-F6FCE7B011D5}
O42 - Logiciel: Codeur Windows Media Série 9 - (.Microsoft Corporation.) [HKLM] -- {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
O42 - Logiciel: Codeur Windows Media Série 9 - (.Pas de propriétaire.) [HKLM] -- Windows Media Encoder 9
O42 - Logiciel: Connexion Internet Orange - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
O42 - Logiciel: ESDX4800_4200 Guide util. - (.Pas de propriétaire.) [HKLM] -- ESDX4800_4200 Guide util.
O42 - Logiciel: ESSBrwr - (.EASTMAN KODAK Company.) [HKLM] -- {643EAE81-920C-4931-9F0B-4B343B225CA6}
O42 - Logiciel: ESSCDBK - (.EASTMAN KODAK Company.) [HKLM] -- {AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
O42 - Logiciel: ESSPCD - (.EASTMAN KODAK Company.) [HKLM] -- {14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
O42 - Logiciel: ESSPDock - (.Nom de votre société.) [HKLM] -- {FCDB1C92-03C6-4C76-8625-371224256091}
O42 - Logiciel: ESSTOOLS - (.EASTMAN KODAK Company.) [HKLM] -- {8A502E38-29C9-49FA-BCFA-D727CA062589}
O42 - Logiciel: ESScore - (.Nom de votre société.) [HKLM] -- {42938595-0D83-404D-9F73-F8177FDD531A}
O42 - Logiciel: ESSgui - (.EASTMAN KODAK Company.) [HKLM] -- {91517631-A9F3-4B7C-B482-43E0068FD55A}
O42 - Logiciel: ESSini - (.Nom de votre société.) [HKLM] -- {8E92D746-CD9F-4B90-9668-42B74C14F765}
O42 - Logiciel: EVEREST Corporate Edition v4.20 - (.Lavalys, Inc..) [HKLM] -- EVEREST Corporate Edition_is1
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Java 6 Update 23 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216023FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Logiciel Kodak EasyShare - (.Eastman Kodak Company.) [HKLM] -- {D32470A1-B10C-4059-BA53-CF0486F68EBC}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)
O42 - Logiciel: Multi-Card Reader & Flash Disk - (.Pas de propriétaire.) [HKLM] -- {83F3EED2-DDE2-4434-8FBE-9D2A1E7C2BC9}
O42 - Logiciel: NVIDIA Display Control Panel - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Display Control Panel
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}
O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
O42 - Logiciel: Notification Mail - (.Orange.) [HKLM] -- MailNotifier
O42 - Logiciel: OfotoXMI - (.EASTMAN KODAK Company.) [HKLM] -- {B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080}
O42 - Logiciel: PC Wizard 2010.1.92 - (.Laurent KUTIL & Franck DELATTRE.) [HKLM] -- PC Wizard 2010_is1
O42 - Logiciel: Package de pilotes Windows - Microsoft (USBCCID) SmartCardReader (08/01/2006 5.2.3790.2724) - (.Microsoft.) [HKLM] -- 435403D41CB143EFFFCE801AFA6A0778EBC1DB1F
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Pilote vidéo Pinnacle - (.Pinnacle Systems.) [HKLM] -- {6DE721A5-5E89-4D74-994C-652BB3C0672E}
O42 - Logiciel: Pinnacle Instant DVD Recorder - (.Pinnacle Systems.) [HKLM] -- {C1212AE3-DBB9-4365-8473-F8ABC7B06BBB}
O42 - Logiciel: Pinnacle PCI Performance Enhancer - (.Pas de propriétaire.) [HKLM] -- {3E5A81BA-4702-490A-B729-0BFF6E7CBF96}
O42 - Logiciel: Pinnacle Studio 12 - (.Pinnacle Systems.) [HKLM] -- {D041EB9E-890A-4098-8F94-51DA194AC72A}
O42 - Logiciel: QuickSnooker - (.Pas de propriétaire.) [HKLM] -- QuickSnooker
O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime
O42 - Logiciel: SFR - (.Eastman Kodak Company.) [HKLM] -- {DB02F716-6275-42E9-B8D2-83BA2BF5100B}
O42 - Logiciel: SHASTA - (.EASTMAN KODAK Company.) [HKLM] -- {605A4E39-613C-4A12-B56F-DEFBE6757237}
O42 - Logiciel: SKINXSDK - (.EASTMAN KODAK Company.) [HKLM] -- {F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2289158) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{210B16C0-CEBD-4DE9-B474-04A7E8735E16}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2344875) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2345035) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{B23002DD-34EC-4988-B810-A5E2A0BF04F1}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB982158) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer (KB2413381) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3DED0A62-44C8-4E00-A785-5212F297A9D9}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Studio Content DVD - (.Pas de propriétaire.) [HKLM] -- {B67624DE-75CE-4FAD-9F29-5C115773CE61}
O42 - Logiciel: TomTom HOME 2.8.0.2146 - (.TomTom.) [HKLM] -- TomTom HOME
O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2412171) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{752A0B7C-BD24-4362-AC86-AB63FEE6F46F}
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2483110) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{592B47F5-D305-431A-9781-ED6CBB44FA8B}
O42 - Logiciel: VPRINTOL - (.EASTMAN KODAK Company.) [HKLM] -- {999D43F4-9709-4887-9B1A-83EBB15A8370}
O42 - Logiciel: WIRELESS - (.EASTMAN KODAK Company.) [HKLM] -- {F9593CFB-D836-49BC-BFF1-0E669A411D9F}
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {F6BD194C-4190-4D73-B1B1-C48C99921BFE}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}
O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- {81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {139E303E-1050-497F-98B1-9AE87B15C463}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {6412CECE-8172-4BE5-935B-6CECACD2CA87}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {995F1E2E-F542-4310-8E1D-9926F5A279B3}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {178832DE-9DE0-4C87-9F82-9315A9B03985}
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: essvatgt - (.EASTMAN KODAK Company.) [HKLM] -- {2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}
O42 - Logiciel: netbrdg - (.EASTMAN KODAK Company.) [HKLM] -- {4537EA4B-F603-4181-89FB-2953FC695AB1}
O42 - Logiciel: skin0001 - (.EASTMAN KODAK Company.) [HKLM] -- {5316DFC9-CE99-4458-9AB3-E8726EDE0210}
O42 - Logiciel: staticcr - (.EASTMAN KODAK Company.) [HKLM] -- {8943CE61-53BD-475E-90E1-A580869E98A2}
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ABBYY]
[HKCU\Software\AC3Filter]
[HKCU\Software\ACD Systems]
[HKCU\Software\ASUS]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Yahoo]
[HKCU\Software\AppDataLow\Software\{9CE35A03-21E0-9725-F082-8A49D84BA9AF}]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\ArcSoft]
[HKCU\Software\Ascentive]
[HKCU\Software\Astonsoft]
[HKCU\Software\Avanquest_FR]
[HKCU\Software\Avg]
[HKCU\Software\Avira]
[HKCU\Software\BearShare]
[HKCU\Software\CDIP]
[HKCU\Software\CPUID]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Conduit]
[HKCU\Software\CoreAAC]
[HKCU\Software\Corel]
[HKCU\Software\DVC150]
[HKCU\Software\Digital Minds Software]
[HKCU\Software\Digital River]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EPSON]
[HKCU\Software\FotoWire]
[HKCU\Software\Free Tarot]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Infra Recorder]
[HKCU\Software\Intel]
[HKCU\Software\JMBerthier]
[HKCU\Software\JavaSoft]
[HKCU\Software\Kodak]
[HKCU\Software\Lavalys]
[HKCU\Software\Licenses]
[HKCU\Software\LightScribe]
[HKCU\Software\Logitech]
[HKCU\Software\MGS]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PMEtool]
[HKCU\Software\Phoenix Technologies]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\SereneScreen]
[HKCU\Software\Skype]
[HKCU\Software\Sonic Desktop Software]
[HKCU\Software\Sony Ericsson]
[HKCU\Software\Spamihilator]
[HKCU\Software\Stdin2]
[HKCU\Software\Studio 10]
[HKCU\Software\SweetIM]
[HKCU\Software\TeamViewer]
[HKCU\Software\TomTom]
[HKCU\Software\Tracker Software]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\Ulead Systems]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VOB]
[HKCU\Software\VirginMega]
[HKCU\Software\WideStream]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\http://www.ecran-de-veille.com]
[HKCU\Software\picajet.com]
[HKCU\Software\woohook]
[HKLM\Software\ABBYY]
[HKLM\Software\ACD Systems]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ASUS]
[HKLM\Software\AVG]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\ArcSoft]
[HKLM\Software\AskTBar]
[HKLM\Software\Avanquest_FR]
[HKLM\Software\AviSynth]
[HKLM\Software\Avira]
[HKLM\Software\Axialis]
[HKLM\Software\BearFlix Mediabar]
[HKLM\Software\BearFlix]
[HKLM\Software\Borland]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Common Toolkit Suite]
[HKLM\Software\Conduit]
[HKLM\Software\Digital River]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\EPSON]
[HKLM\Software\FAST Multimedia]
[HKLM\Software\FDEInstaller]
[HKLM\Software\FRANCE TELECOM]
[HKLM\Software\FotoWire]
[HKLM\Software\FullCircle]
[HKLM\Software\GCP4PD]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\ICSI]
[HKLM\Software\ImInstaller]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\Inventel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\JumpIntl]
[HKLM\Software\Khronos]
[HKLM\Software\Kodak]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Magnet]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\MiKit4]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\NOS]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Orange]
[HKLM\Software\Pegasus Imaging]
[HKLM\Software\PegasusImaging]
[HKLM\Software\Philips]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\ReviverSoft]
[HKLM\Software\SPsoft]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\SereneScreen]
[HKLM\Software\Studio 10]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\SweetIM]
[HKLM\Software\TeamViewer]
[HKLM\Software\TomTom]
[HKLM\Software\Tracker Software]
[HKLM\Software\TrendMicro]
[HKLM\Software\TuneUp]
[HKLM\Software\UMonit]
[HKLM\Software\Uniblue]
[HKLM\Software\VOB]
[HKLM\Software\VirginMega]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Wise Solutions]
[HKLM\Software\X-AVCSD]
[HKLM\Software\Yahoo]
[HKLM\Software\ahead]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 27/11/2009 - 13:06:16 ----D- C:\Program Files\ABBYY PDF Transformer 3.0
O43 - CFD: 27/12/2010 - 17:35:18 ----D- C:\Program Files\Accelerer PC
O43 - CFD: 13/01/2011 - 17:26:44 ----D- C:\Program Files\Adobe
O43 - CFD: 11/01/2008 - 11:02:32 ----D- C:\Program Files\Alwil Software
O43 - CFD: 04/04/2008 - 17:16:46 ----D- C:\Program Files\aod
O43 - CFD: 25/12/2010 - 21:40:42 ----D- C:\Program Files\ArcSoft
O43 - CFD: 22/10/2009 - 12:31:04 ----D- C:\Program Files\Ascentive
O43 - CFD: 11/06/2008 - 19:26:12 ----D- C:\Program Files\Astonsoft
O43 - CFD: 13/09/2008 - 13:13:40 ----D- C:\Program Files\Attansic
O43 - CFD: 14/01/2011 - 23:08:06 ----D- C:\Program Files\Avanquest_FR
O43 - CFD: 27/12/2008 - 13:56:34 ----D- C:\Program Files\AVG
O43 - CFD: 23/08/2010 - 10:36:18 ----D- C:\Program Files\Avira
O43 - CFD: 23/02/2010 - 17:48:06 ----D- C:\Program Files\Avira(2)
O43 - CFD: 24/07/2010 - 15:07:40 ----D- C:\Program Files\Avira(3)
O43 - CFD: 08/03/2008 - 18:04:00 ----D- C:\Program Files\AviSynth 2.5
O43 - CFD: 14/11/2008 - 08:28:52 ----D- C:\Program Files\AVS4YOU
O43 - CFD: 23/07/2008 - 19:29:12 ----D- C:\Program Files\BearFlix
O43 - CFD: 23/07/2008 - 19:29:20 ----D- C:\Program Files\BearFlix Applications
O43 - CFD: 30/06/2008 - 07:50:36 ----D- C:\Program Files\bomberclone
O43 - CFD: 09/11/2008 - 20:13:22 ----D- C:\Program Files\BzTarot
O43 - CFD: 29/12/2010 - 15:00:38 ----D- C:\Program Files\Canal
O43 - CFD: 29/12/2010 - 14:49:16 ----D- C:\Program Files\Canal+
O43 - CFD: 27/12/2010 - 17:08:40 ----D- C:\Program Files\CCleaner
O43 - CFD: 10/01/2008 - 20:12:16 ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 23/02/2010 - 17:48:16 ----D- C:\Program Files\ConcoursDem
O43 - CFD: 27/10/2008 - 20:29:44 ----D- C:\Program Files\Corel
O43 - CFD: 30/12/2009 - 21:34:30 ----D- C:\Program Files\CPUID
O43 - CFD: 26/07/2010 - 23:20:08 ----D- C:\Program Files\Didacool
O43 - CFD: 14/08/2008 - 14:43:44 ----D- C:\Program Files\DIFX
O43 - CFD: 14/01/2011 - 13:19:36 ----D- C:\Program Files\DivX
O43 - CFD: 04/04/2008 - 17:16:20 ----D- C:\Program Files\ecrans2veille
O43 - CFD: 25/11/2010 - 16:38:40 ----D- C:\Program Files\eMule
O43 - CFD: 06/11/2010 - 16:32:36 ----D- C:\Program Files\EPSON
O43 - CFD: 16/01/2011 - 14:08:10 ----D- C:\Program Files\Fichiers communs
O43 - CFD: 14/01/2011 - 13:20:02 ----D- C:\Program Files\FileHippo.com
O43 - CFD: 04/04/2008 - 17:16:16 ----D- C:\Program Files\fishaquarium
O43 - CFD: 15/12/2008 - 14:54:02 ----D- C:\Program Files\Free Tarot
O43 - CFD: 13/01/2011 - 17:30:18 ----D- C:\Program Files\Google
O43 - CFD: 17/09/2008 - 17:38:22 ----D- C:\Program Files\Infra Recorder
O43 - CFD: 30/05/2008 - 07:32:42 ----D- C:\Program Files\inKline Global
O43 - CFD: 04/01/2011 - 15:03:32 --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 10/01/2008 - 22:34:50 ----D- C:\Program Files\Intel
O43 - CFD: 15/12/2010 - 09:31:14 ----D- C:\Program Files\Internet Explorer
O43 - CFD: 04/04/2008 - 17:19:50 ----D- C:\Program Files\Inventel
O43 - CFD: 03/01/2011 - 17:31:54 ----D- C:\Program Files\Java
O43 - CFD: 21/09/2009 - 18:02:24 ----D- C:\Program Files\JMBerthier
O43 - CFD: 08/06/2010 - 16:31:54 ----D- C:\Program Files\JRE
O43 - CFD: 16/02/2008 - 11:23:06 ----D- C:\Program Files\Kodak
O43 - CFD: 10/11/2010 - 10:50:42 ----D- C:\Program Files\Lavalys
O43 - CFD: 11/11/2010 - 15:45:34 ----D- C:\Program Files\LimeWire
O43 - CFD: 02/10/2009 - 09:05:04 ----D- C:\Program Files\Logitech
O43 - CFD: 16/01/2011 - 18:00:38 ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 17/08/2008 - 15:14:06 ----D- C:\Program Files\Messenger
O43 - CFD: 08/02/2009 - 21:43:56 ----D- C:\Program Files\Microsoft
O43 - CFD: 16/05/2008 - 18:12:34 ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 29/01/2008 - 14:14:40 ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 05/02/2010 - 14:32:28 ----D- C:\Program Files\Microsoft IntelliPoint
O43 - CFD: 05/02/2010 - 14:31:12 ----D- C:\Program Files\Microsoft IntelliType Pro
O43 - CFD: 25/03/2008 - 10:02:48 ----D- C:\Program Files\Microsoft Office
O43 - CFD: 24/07/2010 - 15:08:12 ----D- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD: 03/07/2008 - 20:59:28 ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 08/02/2009 - 21:41:16 ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD: 04/04/2008 - 17:17:28 ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 17/11/2009 - 22:47:12 ----D- C:\Program Files\Microsoft Works
O43 - CFD: 13/09/2008 - 13:13:56 ----D- C:\Program Files\Morefunc
O43 - CFD: 11/08/2010 - 12:45:40 ----D- C:\Program Files\Movie Maker
O43 - CFD: 25/02/2010 - 18:52:40 ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 18/07/2009 - 16:59:42 ----D- C:\Program Files\Mozilla Firefox 3 Beta 5
O43 - CFD: 20/12/2010 - 14:08:32 ----D- C:\Program Files\Mozilla Firefox 3.6 Beta 4
O43 - CFD: 30/12/2010 - 15:16:44 ----D- C:\Program Files\Mozilla Firefox 4.0 Beta 7
O43 - CFD: 27/12/2008 - 15:30:16 ----D- C:\Program Files\Mozilla Sunbird
O43 - CFD: 24/07/2010 - 15:06:52 ----D- C:\Program Files\Mozilla Thunderbird(2)
O43 - CFD: 30/01/2009 - 15:24:22 ----D- C:\Program Files\MSBuild
O43 - CFD: 20/01/2008 - 10:44:48 ----D- C:\Program Files\MSECache
O43 - CFD: 10/01/2008 - 20:11:28 ----D- C:\Program Files\MSN
O43 - CFD: 10/01/2008 - 20:11:50 ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 20/01/2008 - 20:26:16 ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 14/04/2008 - 17:48:50 ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 13/03/2010 - 16:27:32 ----D- C:\Program Files\Nero
O43 - CFD: 24/08/2008 - 16:47:14 ----D- C:\Program Files\NetMeeting
O43 - CFD: 13/11/2008 - 21:57:10 ----D- C:\Program Files\Novosoft
O43 - CFD: 14/01/2011 - 13:30:30 ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 24/07/2010 - 15:07:30 ----D- C:\Program Files\Oberon Media
O43 - CFD: 13/09/2008 - 10:24:36 ----D- C:\Program Files\OpenOffice.org 2.4
O43 - CFD: 08/06/2010 - 16:31:52 ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 12/05/2010 - 15:42:36 ----D- C:\Program Files\Orange
O43 - CFD: 14/01/2011 - 23:04:30 ----D- C:\Program Files\Orcanthus
O43 - CFD: 15/12/2010 - 09:22:44 ----D- C:\Program Files\Outlook Express
O43 - CFD: 16/08/2008 - 16:55:36 ----D- C:\Program Files\Philips
O43 - CFD: 16/08/2008 - 18:50:58 ----D- C:\Program Files\Philips_VLounge
O43 - CFD: 09/06/2010 - 19:21:50 ----D- C:\Program Files\PicaJet Photo Recovery
O43 - CFD: 01/04/2009 - 10:46:44 ----D- C:\Program Files\Picasa2
O43 - CFD: 28/05/2009 - 12:17:50 ----D- C:\Program Files\Pinnacle
O43 - CFD: 11/05/2009 - 12:03:42 ----D- C:\Program Files\Pinnacle Systems
O43 - CFD: 04/07/2010 - 21:15:26 ----D- C:\Program Files\Pogo FR
O43 - CFD: 22/10/2009 - 14:08:26 ----D- C:\Program Files\PouleABCDem
O43 - CFD: 14/11/2008 - 15:21:38 ----D- C:\Program Files\Power IE
O43 - CFD: 25/06/2009 - 19:25:20 ----D- C:\Program Files\Proxomitron Naoko v4.5
O43 - CFD: 07/11/2009 - 17:02:16 ----D- C:\Program Files\quicksnooker
O43 - CFD: 01/06/2008 - 08:38:44 ----D- C:\Program Files\Quicksys
O43 - CFD: 20/01/2008 - 10:58:50 ----D- C:\Program Files\QuickTime
O43 - CFD: 14/06/2008 - 07:13:00 ----D- C:\Program Files\Realtek
O43 - CFD: 30/01/2009 - 15:24:14 ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 19/12/2010 - 10:56:24 ----D- C:\Program Files\ReviverSoft
O43 - CFD: 11/06/2008 - 17:22:00 ----D- C:\Program Files\SanDisk
O43 - CFD: 12/05/2010 - 15:42:34 ----D- C:\Program Files\Securitoo
O43 - CFD: 14/11/2008 - 08:59:16 ----D- C:\Program Files\SereneScreen
O43 - CFD: 10/01/2008 - 20:13:16 ----D- C:\Program Files\Services en ligne
O43 - CFD: 14/01/2011 - 23:03:30 ----D- C:\Program Files\Sony Ericsson
O43 - CFD: 05/02/2009 - 18:00:30 ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 10/05/2009 - 20:48:14 ----D- C:\Program Files\StudioScrap2-Decouverte
O43 - CFD: 14/01/2011 - 17:09:56 ----D- C:\Program Files\TeamViewer
O43 - CFD: 30/12/2010 - 14:22:40 ----D- C:\Program Files\TomTom HOME 2
O43 - CFD: 28/09/2010 - 12:15:08 ----D- C:\Program Files\TomTom International B.V
O43 - CFD: 16/01/2011 - 14:21:08 ----D- C:\Program Files\Trend Micro
O43 - CFD: 20/10/2009 - 15:08:24 ----D- C:\Program Files\TuneUp Utilities 2009
O43 - CFD: 14/01/2011 - 22:58:10 ----D- C:\Program Files\TuneUp Utilities 2010
O43 - CFD: 08/11/2010 - 13:56:22 ----D- C:\Program Files\Uniblue
O43 - CFD: 10/01/2008 - 20:32:44 --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 10/06/2010 - 08:16:02 ----D- C:\Program Files\Unlocker
O43 - CFD: 23/02/2010 - 17:48:20 ----D- C:\Program Files\Unlocker(2)
O43 - CFD: 08/03/2008 - 18:11:44 ----D- C:\Program Files\VideoLAN
O43 - CFD: 23/02/2010 - 17:48:26 ----D- C:\Program Files\VISUAL PETANQUE
O43 - CFD: 14/01/2011 - 16:57:38 ----D- C:\Program Files\VS Revo Group
O43 - CFD: 07/01/2011 - 15:43:50 ----D- C:\Program Files\Wanadoo
O43 - CFD: 04/04/2008 - 17:20:32 ----D- C:\Program Files\Wanadoo Messager
O43 - CFD: 06/10/2010 - 12:31:10 ----D- C:\Program Files\Widestream6
O43 - CFD: 03/07/2008 - 20:49:36 ----D- C:\Program Files\wincan
O43 - CFD: 19/10/2009 - 17:16:20 ----D- C:\Program Files\Windows Desktop Search
O43 - CFD: 24/07/2010 - 15:08:22 ----D- C:\Program Files\Windows Live
O43 - CFD: 08/02/2009 - 21:38:12 ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 09/06/2010 - 18:05:54 ----D- C:\Program Files\Windows Media Components
O43 - CFD: 22/02/2008 - 16:57:44 ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 26/12/2009 - 14:39:22 ----D- C:\Program Files\Windows Media Player
O43 - CFD: 17/08/2008 - 14:18:12 ----D- C:\Program Files\Windows NT
O43 - CFD: 10/01/2008 - 20:13:18 --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 10/01/2008 - 20:14:18 ----D- C:\Program Files\xerox
O43 - CFD: 15/10/2010 - 09:13:18 ----D- C:\Program Files\Yahoo!
O43 - CFD: 04/12/2008 - 08:12:14 ----D- C:\Program Files\Zapu
O43 - CFD: 18/01/2011 - 16:45:26 ----D- C:\Program Files\ZHPDiag
O43 - CFD: 21/09/2009 - 10:17:12 ----D- C:\Program Files\Fichiers Communs\ABBYY
O43 - CFD: 15/10/2010 - 09:15:16 ----D- C:\Program Files\Fichiers Communs\ACD Systems
O43 - CFD: 13/01/2011 - 17:26:44 ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 09/07/2008 - 19:38:18 ----D- C:\Program Files\Fichiers Communs\Ahead
O43 - CFD: 04/01/2011 - 15:04:16 ----D- C:\Program Files\Fichiers Communs\ArcSoft
O43 - CFD: 17/09/2008 - 17:29:08 ----D- C:\Program Files\Fichiers Communs\AVSMedia
O43 - CFD: 16/01/2011 - 14:08:10 ----D- C:\Program Files\Fichiers Communs\Borland Shared
O43 - CFD: 04/04/2008 - 17:17:28 ----D- C:\Program Files\Fichiers Communs\DESIGNER
O43 - CFD: 17/06/2008 - 10:15:12 ----D- C:\Program Files\Fichiers Communs\FotoWire
O43 - CFD: 07/01/2011 - 15:44:18 ----D- C:\Program Files\Fichiers Communs\France Telecom
O43 - CFD: 19/01/2008 - 17:57:30 ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 03/01/2011 - 17:33:12 ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 27/12/2010 - 16:05:54 ----D- C:\Program Files\Fichiers Communs\Kodak
O43 - CFD: 03/12/2009 - 16:42:50 ----D- C:\Program Files\Fichiers Communs\LogiShrd
O43 - CFD: 03/11/2010 - 09:07:10 ----D- C:\Program Files\Fichiers Communs\Logitech
O43 - CFD: 17/11/2009 - 22:47:28 ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 10/01/2008 - 20:12:46 ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 13/03/2010 - 16:27:46 ----D- C:\Program Files\Fichiers Communs\Nero
O43 - CFD: 10/01/2008 - 20:43:02 ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 28/05/2009 - 12:12:16 ----D- C:\Program Files\Fichiers Communs\Pegasus Imaging
O43 - CFD: 28/05/2009 - 11:57:36 ----D- C:\Program Files\Fichiers Communs\Pinnacle
O43 - CFD: 19/04/2008 - 13:42:20 ----D- C:\Program Files\Fichiers Communs\Real
O43 - CFD: 10/01/2008 - 20:12:48 ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 16/08/2008 - 16:56:00 ----D- C:\Program Files\Fichiers Communs\SPC1000NC
O43 - CFD: 10/01/2008 - 20:43:00 ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 26/02/2010 - 11:28:50 ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 08/02/2009 - 21:33:14 ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 03/07/2008 - 20:59:32 -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller
O43 - CFD: 14/01/2011 - 23:03:54 ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard
O43 - CFD: 28/05/2009 - 12:12:12 ----D- C:\Program Files\Fichiers Communs\Yahoo!
O43 - CFD: 31/08/2010 - 15:19:08 ----D- C:\Documents and Settings\Barbault\Application Data\ACD Systems
O43 - CFD: 03/01/2011 - 14:43:42 ----D- C:\Documents and Settings\Barbault\Application Data\Adobe
O43 - CFD: 12/05/2010 - 19:47:34 ----D- C:\Documents and Settings\Barbault\Application Data\AdobeUM
O43 - CFD: 19/07/2008 - 10:14:40 ----D- C:\Documents and Settings\Barbault\Application Data\Ahead
O43 - CFD: 05/10/2009 - 09:20:32 ----D- C:\Documents and Settings\Barbault\Application Data\ArcSoft
O43 - CFD: 06/10/2010 - 13:52:54 ----D- C:\Documents and Settings\Barbault\Application Data\Avira
O43 - CFD: 17/09/2008 - 17:29:20 ----D- C:\Documents and Settings\Barbault\Application Data\AVS4YOU
O43 - CFD: 09/10/2009 - 13:42:18 ----D- C:\Documents and Settings\Barbault\Application Data\Canneverbe_Limited
O43 - CFD: 16/02/2008 - 11:38:46 ----D- C:\Documents and Settings\Barbault\Application Data\DeepBurner
O43 - CFD: 23/04/2008 - 20:25:10 ----D- C:\Documents and Settings\Barbault\Application Data\dvdcss
O43 - CFD: 03/02/2008 - 20:28:12 ----D- C:\Documents and Settings\Barbault\Application Data\EPSON
O43 - CFD: 17/06/2008 - 10:15:12 ----D- C:\Documents and Settings\Barbault\Application Data\FotoWire
O43 - CFD: 12/01/2011 - 14:28:16 ----D- C:\Documents and Settings\Barbault\Application Data\GlarySoft
O43 - CFD: 01/11/2008 - 15:35:40 ----D- C:\Documents and Settings\Barbault\Application Data\Google
O43 - CFD: 27/10/2008 - 20:40:46 ----D- C:\Documents and Settings\Barbault\Application Data\gtk-2.0
O43 - CFD: 23/01/2009 - 15:56:16 ----D- C:\Documents and Settings\Barbault\Application Data\Help
O43 - CFD: 10/01/2008 - 20:32:46 ----D- C:\Documents and Settings\Barbault\Application Data\Identities
O43 - CFD: 16/08/2008 - 16:52:54 ----D- C:\Documents and Settings\Barbault\Application Data\InstallShield
O43 - CFD: 27/12/2008 - 15:30:08 ----D- C:\Documents and Settings\Barbault\Application Data\InterTrust
O43 - CFD: 27/07/2008 - 10:36:28 ----D- C:\Documents and Settings\Barbault\Application Data\JAM Software
O43 - CFD: 05/10/2009 - 09:24:52 ----D- C:\Documents and Settings\Barbault\Application Data\KodakCredentialStore
O43 - CFD: 19/01/2008 - 18:18:36 ----D- C:\Documents and Settings\Barbault\Application Data\Macromedia
O43 - CFD: 05/02/2009 - 10:06:34 ----D- C:\Documents and Settings\Barbault\Application Data\Malwarebytes
O43 - CFD: 03/01/2011 - 14:43:42 -S--D- C:\Documents and Settings\Barbault\Application Data\Microsoft
O43 - CFD: 18/04/2008 - 10:40:22 ----D- C:\Documents and Settings\Barbault\Application Data\Mozilla
O43 - CFD: 11/03/2010 - 22:45:52 ----D- C:\Documents and Settings\Barbault\Application Data\Nero
O43 - CFD: 14/11/2008 - 08:59:28 ----D- C:\Documents and Settings\Barbault\Application Data\Novosoft
O43 - CFD: 12/02/2009 - 16:21:14 ----D- C:\Documents and Settings\Barbault\Application Data\OpenOffice.org
O43 - CFD: 30/08/2010 - 16:23:02 ----D- C:\Documents and Settings\Barbault\Application Data\PhotoScape
O43 - CFD: 09/06/2010 - 10:21:16 ----D- C:\Documents and Settings\Barbault\Application Data\picajet.com
O43 - CFD: 04/07/2010 - 21:15:38 ----D- C:\Documents and Settings\Barbault\Application Data\PlayFirst
O43 - CFD: 04/07/2010 - 20:09:32 ----D- C:\Documents and Settings\Barbault\Application Data\Pogo Games
O43 - CFD: 19/04/2008 - 13:42:18 ----D- C:\Documents and Settings\Barbault\Application Data\Real
O43 - CFD: 19/12/2010 - 09:30:32 ----D- C:\Documents and Settings\Barbault\Application Data\Reviversoft
O43 - CFD: 03/06/2008 - 21:02:12 ----D- C:\Documents and Settings\Barbault\Application Data\Skinux
O43 - CFD: 04/12/2008 - 08:09:22 ----D- C:\Documents and Settings\Barbault\Application Data\skypePM
O43 - CFD: 21/03/2009 - 10:07:58 ----D- C:\Documents and Settings\Barbault\Application Data\Smart PC Solutions
O43 - CFD: 01/02/2010 - 19:14:06 ----D- C:\Documents and Settings\Barbault\Application Data\Spamihilator
O43 - CFD: 10/05/2009 - 19:31:00 ----D- C:\Documents and Settings\Barbault\Application Data\Studio-Scrap2
O43 - CFD: 25/06/2009 - 15:33:48 ----D- C:\Documents and Settings\Barbault\Application Data\Sun
O43 - CFD: 18/04/2008 - 10:12:48 ----D- C:\Documents and Settings\Barbault\Application Data\Talkback
O43 - CFD: 20/04/2010 - 12:12:30 ----D- C:\Documents and Settings\Barbault\Application Data\TeamViewer
O43 - CFD: 27/12/2010 - 20:40:42 ----D- C:\Documents and Settings\Barbault\Application Data\Thunderbird
O43 - CFD: 28/09/2010 - 12:15:14 ----D- C:\Documents and Settings\Barbault\Application Data\TomTom
O43 - CFD: 02/11/2010 - 14:01:50 ----D- C:\Documents and Settings\Barbault\Application Data\TuneUp Software
O43 - CFD: 09/06/2010 - 19:11:20 ----D- C:\Documents and Settings\Barbault\Application Data\Ulead Systems
O43 - CFD: 25/02/2010 - 10:56:24 ----D- C:\Documents and Settings\Barbault\Application Data\Uniblue
O43 - CFD: 20/03/2009 - 20:43:56 ----D- C:\Documents and Settings\Barbault\Application Data\uTorrent
O43 - CFD: 13/12/2008 - 22:16:50 ----D- C:\Documents and Settings\Barbault\Application Data\vghd
O43 - CFD: 31/07/2010 - 08:32:44 ----D- C:\Documents and Settings\Barbault\Application Data\vlc
O43 - CFD: 06/10/2010 - 12:20:22 ----D- C:\Documents and Settings\Barbault\Application Data\widestream
O43 - CFD: 19/10/2009 - 15:39:38 ----D- C:\Documents and Settings\Barbault\Application Data\Windows Search
O43 - CFD: 31/10/2008 - 23:26:30 ----D- C:\Documents and Settings\Barbault\Application Data\Yahoo!
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F0ED1300F915817C00FCFD7FC4EE1300] - 18/01/2011 - 10:02:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1702725]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 18/01/2011 - 09:59:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.F0ED1300F915817C00FCFD7FC4EE1300] - 18/01/2011 - 09:58:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [723]
O44 - LFC:[MD5.F0ED1300F915817C00FCFD7FC4EE1300] - 18/01/2011 - 09:58:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.0968A02555F2C96A88E3EC1012118E62] - 18/01/2011 - 09:57:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [12734]
O44 - LFC:[MD5.41CD47230BE0A13132732BA6E603FF07] - 18/01/2011 - 09:57:42 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.F0ED1300F915817C00FCFD7FC4EE1300] - 17/01/2011 - 23:04:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32604]
O44 - LFC:[MD5.4D98D91457FB42751CFD3C1F0A9BCDFC] - 17/01/2011 - 22:38:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\TB.txt [2447]
O44 - LFC:[MD5.95AE60428D710BBF8585EC394DBE1471] - 17/01/2011 - 20:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1288672]
O44 - LFC:[MD5.D6039419EEEC83CA44A1AE9D45061F1E] - 17/01/2011 - 20:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [93790]
O44 - LFC:[MD5.DE9D11DFDC78EEA91BB5F793C5C9C74C] - 17/01/2011 - 20:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [114424]
O44 - LFC:[MD5.D7D87DB0B7108356C4EA1500E1A27380] - 17/01/2011 - 20:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [493490]
O44 - LFC:[MD5.8B1B6A181A9020068019D40E7F9AC910] - 17/01/2011 - 20:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [571328]
O44 - LFC:[MD5.4F3C8B224C27A77539C56BA37E3BB35C] - 16/01/2011 - 22:59:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MAHJONGG.INI [39]
O44 - LFC:[MD5.080FF8F2112EE97C8E3CDA7A035ABC20] - 16/01/2011 - 14:19:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030]
O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 16/01/2011 - 14:08:09 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\BDEADMIN.CPL [183808]
O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 16/01/2011 - 14:08:09 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\DBCLIENT.DLL [210032]
O44 - LFC:[MD5.3E1C33C03029CB9FE0F222902DDC0422] - 14/01/2011 - 13:29:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvdrsdb0.bin [232968]
O44 - LFC:[MD5.93B885ADFE0DA089CDF634904FD59F71] - 14/01/2011 - 13:29:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvdrssel.bin [1]
O44 - LFC:[MD5.78B18FFE24D0A1298994781CC10A6630] - 14/01/2011 - 13:29:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvdrsdb1.bin [232968]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/01/2011 - 13:29:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvdrswr.lk [0]
O44 - LFC:[MD5.70BB5B779788A1D2A4CCFF608E6AD18A] - 14/01/2011 - 09:40:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\d3d9caps.dat [664]
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 12/01/2011 - 14:06:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227]
O44 - LFC:[MD5.6BC3085D7D5EF2AC2137DCCFB7F23DF3] - 12/01/2011 - 14:06:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [994]
O44 - LFC:[MD5.E5457F051E02C5114CD5822247F92345] - 12/01/2011 - 14:06:20 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [217]
O44 - LFC:[MD5.66B71DD7794D3B8A88CCB645896D3E53] - 12/01/2011 - 14:01:20 ---A- . (.ICSI Technology Ltd. - Card Reader Filter.) -- C:\WINDOWS\System32\drivers\USBCRFT.SYS [17408]
O44 - LFC:[MD5.6FC234AD3752E1267B34FB12BCD6718B] - 12/01/2011 - 13:59:25 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\ntuser.ini [20]
O44 - LFC:[MD5.3FBC17ECAE69B85DC629540275B6CDEF] - 06/01/2011 - 14:19:53 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EPISMF00.SWB [16574]
O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 05/01/2011 - 17:32:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\NeroDigital.ini [116]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/01/2011 - 20:55:32 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\dump_dvd.vob [0]
O44 - LFC:[MD5.B549C66B54976878F981D0C465302922] - 03/01/2011 - 17:32:07 ---A- . (.Sun Microsystems, Inc. - Java Control Panel.) -- C:\WINDOWS\System32\javacpl.cpl [73728]
O44 - LFC:[MD5.9892FB0F84762B2DBE83991D88DAA0BE] - 03/01/2011 - 17:32:07 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\WINDOWS\System32\java.exe [145184]
O44 - LFC:[MD5.BAF5A550C038DFBCB9B3CE2A98F3B7D5] - 03/01/2011 - 17:32:07 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\WINDOWS\System32\javaw.exe [145184]
O44 - LFC:[MD5.D96314524D582DC820CCBF40F9CFDD69] - 03/01/2011 - 17:32:07 ---A- . (.Sun Microsystems, Inc. - Java Web Start Launcher.) -- C:\WINDOWS\System32\javaws.exe [157472]
O44 - LFC:[MD5.5D7BE829371AA76225577742428F8254] - 03/01/2011 - 17:32:06 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\WINDOWS\System32\deployJava1.dll [472808]
O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952]
---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {56F9679E-7826-4C84-81F3-532071A8BCC5} - shell32.dll
---\\ Export de clé d'application autorisée (ECAA) (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\mmc.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Barbault\Bureau\Dames.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export SP - "C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll
---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"vidc.yvu9"="iyvu9_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\iyvu9_32.dll
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\System32\yv12vfw.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ir32_32.dll"="Indeo® video R3.2 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir41_32.ax"="Indeo® video interactive R4.3 by Intel" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"iyvu9_32.dll"="Indeo® video Raw YVU9 by Intel" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\iyvu9_32.dll
O52 - TDSD: \drivers.desc\"pvmjpg30.dll"="PICVideo 3 M-JPEG VfW Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ACDV.dll"="ACDV 1.0" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\ABBYY Screenshot Reader Bonus [Key] . (.ABBYY - ABBYY ScreenshotReader.) -- C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe
O53 - SMSR:HKLM\...\startupreg\CANAL+ CANALSAT A LA DEMANDE [Key] . (.Canal+ - Lancer CANAL+ CANALSAT A LA DEMANDE.) -- C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O53 - SMSR:HKLM\...\startupreg\FileHippo.com [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe
O53 - SMSR:HKLM\...\startupreg\itype [Key] . (.Microsoft Corporation - IType.exe.) -- C:\Program Files\Microsoft IntelliType Pro\itype.exe
O53 - SMSR:HKLM\...\startupreg\NvCplDaemon [Key] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O53 - SMSR:HKLM\...\startupreg\nwiz [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O53 - SMSR:HKLM\...\startupreg\swg [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0
---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.1AAD99EC3679BD773CB8320A3148987D] - 17/06/2010 - 14:23:50 ---A- . (.Avira GmbH - Packet filtering kernel driver ( NDIS IM ).) -- C:\WINDOWS\system32\drivers\avfwim.sys [79432]
O58 - SDL:[MD5.E513BCDD34350C5B436DBE83D72CA651] - 17/08/2010 - 12:32:55 ---A- . (.Avira GmbH - TDI filtering kernel driver.) -- C:\WINDOWS\system32\drivers\avfwot.sys [102856]
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 11:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]
O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 13/12/2010 - 17:08:40 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]
O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 17/06/2010 - 14:23:50 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]
O58 - SDL:[MD5.83C5C01013ADFB132B7AE62F91FB4455] - 13/12/2010 - 17:08:40 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [135096]
O58 - SDL:[MD5.CDB568DB5E8985DCC623DA808AC61042] - 26/07/2006 - 23:21:24 R--A- . (.Genesys Logic - fixustor.sys.) -- C:\WINDOWS\system32\drivers\fixustor.sys [6016]
O58 - SDL:[MD5.007AEA2E06E7CEF7372E40C277163959] - 03/01/2010 - 14:00:01 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\WINDOWS\system32\drivers\ggflt.sys [13224]
O58 - SDL:[MD5.C73DE35960CA75C5AB4AE636B127C64E] - 03/01/2010 - 14:00:01 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\WINDOWS\system32\drivers\ggsemc.sys [25512]
O58 - SDL:[MD5.0C6E346CDE730CF1356DD69AD6E9BC42] - 17/06/2009 - 17:55:18 ---A- . (.Logitech, Inc. - Logitech PS2 Keyboard Filter Driver..) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys [20240]
O58 - SDL:[MD5.7F9C7B28CF1C859E1C42619EEA946DC8] - 17/06/2009 - 17:56:06 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys [35472]
O58 - SDL:[MD5.9F03720FA5E6D14CD4DFEA610F2C1A7C] - 23/01/2007 - 15:45:00 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys [33296]
O58 - SDL:[MD5.A3E700D78EEC390F1208098CDCA5C6B6] - 23/09/2005 - 22:18:32 ---A- . (.Pinnacle Systems GmbH - Pinnacle Marvin Discrete Bus Enumerator.) -- C:\WINDOWS\system32\drivers\MarvinBus.sys [171520]
O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]
O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]
O58 - SDL:[MD5.ED9816DBAF6689542EA7D022631906A1] - 10/07/2010 - 05:38:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 258.96.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [10604128]
O58 - SDL:[MD5.49452BFCEC22F36A7A9B9C2181BC3042] - 20/11/2008 - 20:19:06 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys [43872]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 17/06/2010 - 14:23:48 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.66B71DD7794D3B8A88CCB645896D3E53] - 12/01/2011 - 14:01:20 ---A- . (.ICSI Technology Ltd. - Card Reader Filter.) -- C:\WINDOWS\system32\drivers\USBCRFT.SYS [17408]
O58 - SDL:[MD5.B670C5D89F0726B7A2A7DFB4E968CDF8] - 24/08/2009 - 12:22:58 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) -- C:\WINDOWS\system32\pcampr5.sys [34688]
O58 - SDL:[MD5.ECD2F9D67B06606064DAF6961A6D5EFE] - 24/08/2009 - 12:22:58 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\pcandis5.sys [32128]
---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: RSIT - (.random/random.)
O63 - Logiciel: Toolbar SD - (.IDN Team.)
O63 - Logiciel: ToolsCleaner - (.A.Rothstein & dj QUIOU.)
---\\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4
O64 - Services: CurCS - C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe - ABBYY PDF Transformer 3.0, Service de Gestion des Licences (ABBYY.Licensing.PDFTransformer.Classic.3.0) .(.ABBYY - ABBYY network license server.) - LEGACY_ABBYY.LICENSING.PDFTRANSFORMER.CLASSIC.3.0
O64 - Services: CurCS - (.not file.) - ArcSoft Connect Daemon (ACDaemon) .(.Pas de propriétaire - Pas de description.) - LEGACY_ACDAEMON
O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe - Avira FireWall (AntiVirFirewallService) .(.Avira GmbH - Firewall NT service process.) - LEGACY_ANTIVIRFIREWALLSERVICE
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe - Avira AntiVir MailGuard (AntiVirMailService) .(.Avira GmbH - Antivirus MailScanner Service.) - LEGACY_ANTIVIRMAILSERVICE
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe - Avira AntiVir WebGuard (AntiVirWebService) .(.Avira GmbH - AntiVir WebGuard Service.) - LEGACY_ANTIVIRWEBSERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394
O64 - Services: CurCS - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2
O64 - Services: CurCS - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
O64 - Services: CurCS - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
O64 - Services: CurCS - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avfwot.sys - avfwot (avfwot) .(.Avira GmbH - TDI filtering kernel driver.) - LEGACY_AVFWOT
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
O64 - Services: CurCS - (.not file.) - avgrkx86.sys (AvgRkx86) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVGRKX86
O64 - Services: CurCS - (.not file.) - AVG8 Network Redirector (AvgTdiX) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVGTDIX
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER
O64 - Services: CurCS - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe - CanalPlus.VOD (CanalPlus.VOD) .(.Canal+ Active - CanalPlus.VOD.Service.) - LEGACY_CANALPLUS.VOD
O64 - Services: CurCS - (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS
O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32
O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC
O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP
O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - C:\Windows\System32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE
O64 - Services: CurCS - (.not file.) - DrvAgent32 (DrvAgent32) .(.Pas de propriétaire - Pas de description.) - LEGACY_DRVAGENT32
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS
O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR
O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\fssfltr_tdi.sys - FssFltr (fssfltr) .(.Microsoft Corporation - Family Safety Filter Driver (TDI).) - LEGACY_FSSFLTR
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
O64 - Services: CurCS - (.not file.) - getPlus® Helper (getPlus® Helper) .(.Pas de propriétaire - Pas de description.) - LEGACY_GETPLUS®_HELPER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC
O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV
O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER
O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC
O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC
O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\drivers\KodakCCS.exe (.not file.) - Kodak Camera Connection Software (KodakCCS) .(.Pas de propriétaire - Pas de description.) - LEGACY_KODAKCCS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS
O64 - Services: CurCS - (.not file.) - mchInjDrv (mchInjDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_MCHINJDRV
O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe - Machine Debug Manager (MDM) .(.Microsoft Corporation - Machine Debug Manager.) - LEGACY_MDM
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Affichage des messages (Messenger) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_MESSENGER
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB
O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP
O64 - Services: CurCS - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe - NBService (NBService) .(.Nero AG - Nero BackItUp.) - LEGACY_NBSERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS
O64 - Services: CurCS - (.not file.) - ndisrd (ndisrd) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDISRD
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
O64 - Services: CurCS - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service (nvsvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 258.9.) - LEGACY_NVSVC
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARPORT.sys - Parport (Parport) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARPORT
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM
O64 - Services: CurCS - C:\WINDOWS\system32\PCAMPR5.sys - PCAMPR5 NDIS Protocol Driver (PCAMPR5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) - LEGACY_PCAMPR5
O64 - Services: CurCS - C:\WINDOWS\system32\PCANDIS5.sys - PCANDIS5 NDIS Protocol Driver (PCANDIS5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5
O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT
O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP
O64 - Services: CurCS - C:\WINDOWS\system32\locator.exe - Localisateur d'appels de procédure distante (RPC) (RpcLocator) .(.Microsoft Corporation - Rpc Locator.) - LEGACY_RPCLOCATOR
O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS
O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP
O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS
O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE
O64 - Services: CurCS - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe - SeaPort (SeaPort) .(.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - LEGACY_SEAPORT
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION
O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC
O64 - Services: CurCS - (.not file.) - (.not file.) - MS Software Shadow Copy Provider (SwPrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SWPRV
O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP
O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES
O64 - Services: CurCS - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe - TomTomHOMEService (TomTomHOMEService) .(.TomTom - Windows Service for TomTom HOME.) - LEGACY_TOMTOMHOMESERVICE
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS
O64 - Services: CurCS - (.not file.) - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA
O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP
O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\Wdf01000.sys - Wdf01000 (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT
O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV
O64 - Services: CurCS - C:\WINDOWS\system32\drivers\ws2ifsl.sys - Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC
O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV
O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC
---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - {searchTerms} - Bing
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - {searchTerms} - Bing
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - {searchTerms} - Recherche Google
O69 - SBI: SearchScopes [HKCU] {7B3BB2BA-C797-45BC-A91F-A692261E1977} - (Google) - {searchTerms} - Recherche Google
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - (BearShare Web Search) - http://search.bearshare.com/webResults.html?src=ieb&q={searchTerms}
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A79} - (BearFlix Web Search) - http://search.bearflix.com/webResults.html?src=ieb&q={searchTerms}
O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - {searchTerms} - Bing
O69 - SBI: SearchScopes [HKCU] {AA9DB8DA-AE69-4B36-BD21-6EE9E7F47E2E} - (Bing) - {searchTerms} - Bing
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Avanquest FR Customized Web Search) - {searchTerms} - Bing
O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (SweetIM Search) - Server Error
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 27/04/2009 759048 | ABBYY PDF Transformer 3.0, Service de Gestion des Licences (ABBYY.Licensing.PDFTransformer.Classic.3.0) . (.ABBYY.) - C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
SR - | Auto 17/08/2010 539304 | (AntiVirFirewallService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
SR - | Auto 17/08/2010 339624 | (AntiVirMailService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
SR - | Auto 17/08/2010 135336 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 13/12/2010 267944 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 17/08/2010 403624 | (AntiVirWebService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe
SR - | Auto 03/05/2010 188416 | CanalPlus.VOD (CanalPlus.VOD) . (.Canal+ Active.) - C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe
SS - | Demand 10/03/2010 194032 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 03/01/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SS - | Demand 03/01/2011 0 | (KodakCCS) . (.Pas de propriétaire.) - C:\WINDOWS\system32\drivers\KodakCCS.exe
SS - | Demand 10/11/2006 774144 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SR - | Auto 09/07/2010 155752 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe
SR - | Auto 10/12/2010 92008 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover
Run by Barbault at 18/01/2011 16:45:35
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89DC1AB8]
3 CLASSPNP[0xB8118FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000073[0x89DC77F8]
5 ACPI[0xB7F7E620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP0T0L0-3[0x89DA9D98]
kernel: MBR read successfully
user & kernel MBR OK
---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Barbault at 18/01/2011 16:45:35
Use the desktop link 'MBRCheck' to have full report
---\\ Infection BT - BHO/Toolbar (Possible)
[HKLM\Software\AskTBar]
End of the scan (1235 lines in 00mn 19s)(0)
