Eku28

Bonsoir, Merci "pear" de votre aide précieuse. Si je peux me risquer au jeu de mot, [ Vous êtes un "pear" pour nous ]. Je ne pouvais pas ne pas le faire, trop tentant .......... Trèves de plaisanteries, la machine à retrouver ses élans de jeunesse. Démarrage plus rapide Changement de session idem Fermeture de session idem Arrêt idem. J' oubliai, merci aussi à Nicolas Coolman pour ces outils de diagnostics. Au revoir.

Bonjour, Je pense que là c' est bon. J' ai redémmarré la machine et un dernier scan ZHPDiag qui est propre. Il y at il d' autres manips à faire, genre nettoyage et défragmentation ?

Hello, Le rapport ZHPFix Rapport de ZHPFix v1.12.3143 par Nicolas Coolman, Update du 01/09/2010 Fichier d'export Registre : Run by Taranis at 04/09/2010 15:36:34 Web site : ZHPFix Fix de rapport Contact : nicolascoolman@yahoo.fr ========== Clé(s) du Registre ========== O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw) => Clé supprimée avec succès O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw) => Clé supprimée avec succès ========== Récapitulatif ========== 2 : Clé(s) du Registre End of the scan

Bonjour pear,<br><br>Apparement il y aurait des récalcitrants.<br><br>Voici un nouveau ZHPDiag.<br>Rapport de ZHPDiag v1.26.49 par Nicolas Coolman, Update du 17/08/2010<br>Run by Taranis at 04/09/2010 14:10:50<br>Web site : <a href="http://www.premiumorange.com/zeb-help-process/zhpdiag.html" class="bbc_url" title="Lien externe" rel="nofollow external">ZHPDiag Outil de diagnostic</a><br>Contact : nicolascoolman@yahoo.fr<br><br>---\\ Web Browser<br>MSIE: Internet Explorer v8.0.6001.18702<br>MFIE: Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif"'>http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif"'>http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""><br><br>---\\ System Information<br>Platform : Microsoft Windows XP (5.1.2600) Service Pack 3<br>Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD<br>Operating System: 32 Bits<br>Boot mode: Normal (Normal boot)<br>Total RAM: 1790 MB (66% free)<br>System drive C: has 88 GB (88%) free of 100 GB<br><br>---\\ Logged in mode<br>Computer Name: MAISON-8F808655<br>User Name: Taranis<br>All Users Names: Taranis, SUPPORT_388945a0, Papounet, Mamounette, HelpAssistant, Administrateur, <br>Unselected Option: None<br>Logged in as Administrator<br><br>---\\ DOS/Devices<br>C:\ Hard drive, Flash drive, Thumb drive (Free 88 Go of 100 Go)<br>D:\ Hard drive, Flash drive, Thumb drive (Free 92 Go of 200 Go)<br>E:\ Hard drive, Flash drive, Thumb drive (Free 100 Go of 100 Go)<br>F:\ Hard drive, Flash drive, Thumb drive (Free 66 Go of 66 Go)<br>G:\ CD-ROM drive (Not Inserted)<br>H:\ CD-ROM drive (Not Inserted)<br><br><br>---\\ Security Center & Tools Informations<br>[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK<br>[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK<br>[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK<br>[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK<br>[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK<br><br><br>---\\ Processus lancés<br>[MD5.2CC5E66C4A424FBB8E67F23AB7C5EA5C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112]<br>[MD5.3F62CBAC09D8C039C488B5D00D21C3DC] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2384240]<br>[MD5.703485A2C9EC94C35ED7EC56B13778B2] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336]<br>[MD5.B2764687AA998206879AA53379C0AF31] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267432]<br>[MD5.936209B6F93D0E11659CB2D229FE6583] - (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [212232]<br>[MD5.2C31DCAA88D269E13A935910DBB4CC61] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136]<br>[MD5.126A16F569122AE00AD3D12EF831D651] - (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]<br>[MD5.8C91BD35AE9AA8B628EEC5E637BB1D0F] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]<br>[MD5.9B03B2D34D46F88638D51066531D08DC] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [53248]<br>[MD5.16022DAAE7BB83C00D0210D5433216BA] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1037192]<br>[MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536]<br>[MD5.CF4A0E2C240501C826977ACC5F0E8411] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [282792]<br>[MD5.AE46C853FD91107E39A779EE86FB6387] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe [1312848]<br>[MD5.895F37527D10256247F1D36E09CCDD27] - (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe [94208]<br>[MD5.FB234CF688D9EE2619AB854BD9290C3C] - (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe [45056]<br>[MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [248552]<br>[MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480]<br>[MD5.B346A8EA9B9D03D60260BB6E30427F09] - (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\Program Files\Fichiers communs\LogiShrd\KHAL3\KHALMNPR.EXE [112208]<br>[MD5.61C028ABA5E49573A6332F4A7C744E87] - (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe [360448]<br>[MD5.B27935893393B1FD117D95A659310676] - (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe [1024000]<br>[MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536]<br>[MD5.A80D0704537C0EF97DB2BEF24B99AF1A] - (.Pas de propriétaire - SG Browser Hijacking Protection.) -- C:\Program Files\SpywareGuard\sgbhp.exe [233472]<br>[MD5.6D4AAA65E4003DEC5EBEEF86AF1AE77C] - (.Gadwin Systems, Inc. - PrintScreen captures the contents of the sc.) -- C:\Program Files\PrintScreen.exe [946176]<br>[MD5.3D177013918C8602E43D41742D9BCAC7] - (.Nicolas Coolman - Analyseur de rapports sécurité.) -- C:\Program Files\ZebHelpProcess\ZHP2.exe [2860032]<br>[MD5.16A692EDA8253BEB5F3A588055F7869B] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZebHelpProcess\ZHPDiag.exe [482304]<br><br><br>---\\ Plugins de navigateurs Opera/Firefox(P1/P2)<br>P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java™ Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll<br>P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll<br>P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.3".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll<br>P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16263.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll<br>P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll<br>P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.8.612.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll<br>P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll<br>P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll<br>P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.2] - (.the VideoLAN Team - Version 1.1.3, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll<br><br><br>---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)<br>F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,<br>F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"<br><br><br>---\\ Pages de recherche d'Internet Explorer (R1)<br>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" class="bbc_url" title="Lien externe" rel="nofollow external">http://www.microsoft...er=6&ar=msnhome</a><br>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a><br>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a><br>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a><br>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a><br>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons<br>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk<br><br><br>---\\ Internet Explorer URLSearchHook (R3)<br>R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} . (.DeviceVM, Inc. - Browser Configuration Utility Address Bar S.) (1, 1, 7, 0) -- C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll<br>R3 - URLSearchHook: SearchHook Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)) -- C:\WINDOWS\system32\ieframe.dll<br><br><br>---\\ Browser Helper Objects de navigateur (O2)<br>O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll<br>O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} . (.Pas de propriétaire - SpywareGuard Download Protection.) -- C:\Program Files\SpywareGuard\dlprotect.dll<br>O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br>O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)<br>O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll<br>O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.)<br>O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll<br>O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} . (.DeviceVM, Inc. - Browser Configuration Utility IE BHO for U.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll<br>O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.)<br>O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java™ Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll<br><br><br>---\\ Internet Explorer Toolbars (O3)<br>O3 - Toolbar: (no name) - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} . (.Pas de propriétaire - Pas de description.) -- (.not file.)<br><br><br>---\\ Applications démarrées par registre & par dossier (O4)<br>O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe <br>O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe <br>O4 - HKLM\..\Run: [bootSkin Startup Jobs] . (.Pas de propriétaire - Stardock BootSkin!.) -- C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe <br>O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe <br>O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe <br>O4 - HKLM\..\Run: [CORSAIR_PLUtil] . (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe <br>O4 - HKLM\..\Run: [PLFFAP] . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe <br>O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe <br>O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe <br>O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe <br>O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe <br>O4 - HKUS\S-1-5-21-1547161642-1897051121-725345543-1007-1547161642-1897051121-725345543-1003\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe <br>O4 - Global Startup: SpywareGuard.lnk . (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe<br>O4 - Global Startup: StartClock.lnk . (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe<br><br><br>---\\ Restriction de l'accès aux options IE par l'Administrateur (O6)<br>O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restriction présente<br><br><br>---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)<br>O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} . (.not file.) - (.not file.)<br>O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.)<br>O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)<br>O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe<br><br><br>---\\ Winsock hijacker (Layered Service Provider) (O10)<br>O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll<br>O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll<br>O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll<br><br><br>---\\ Objets ActiveX (Downloaded Program Files)(O16)<br>O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - <a href="http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1265445165234" class="bbc_url" title="Lien externe" rel="nofollow external">http://update.micros...b?1265445165234</a><br><br><br>---\\ Modification Domaine/Adresses DNS (O17)<br>O17 - HKLM\System\CCS\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1<br>O17 - HKLM\System\CS2\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1<br>O17 - HKLM\System\CS3\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1<br>O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1<br><br><br>---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)<br>O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll<br><br><br>---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)<br>O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll<br>O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll<br>O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll<br>O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll<br>O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll<br><br><br>---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)<br>O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll<br><br><br>---\\ Liste des services NT non Microsoft et non désactivés (O23)<br>O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe<br>O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe<br>O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe<br>O23 - Service: Browser Configuration Utility Service (BCUService) . (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe<br>O23 - Service: ES lite Service for program management. (ES lite Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe<br>O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe<br>O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe<br>O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe<br><br><br>---\\ Enumération Active Desktop & MHTML Editor (O24)<br>O24 - Desktop General: BackupWallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp<br>O24 - Desktop General: WallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp<br>O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)<br><br><br>---\\ Redirection du fichier Hosts (O1)<br>O1 - Hosts: 127.0.0.1 localhost<br><br><br>---\\ Tâches planifiées en automatique (O39)<br>O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1265220527.job<br><br><br>---\\ Composants installés (ActiveSetup Installed Components) (O40)<br>O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP<br>O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll<br>O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf<br>O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf<br>O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf<br>O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r88.) -- C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx<br><br><br>---\\ Pilotes lancés au démarrage (O41)<br>O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdPPM.sys<br>O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys<br>O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys<br>O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys<br>O41 - Driver: vsdatant (vsdatant) . (.Check Point Software Technologies LTD - TrueVector Device Driver.) - C:\Windows\system32\vsdatant.sys<br><br><br>---\\ Logiciels installés (O42)<br>O42 - Logiciel: ABBYY FineReader 9.0 Professional Edition - (.ABBYY.) [HKLM] -- {F9000000-0001-0000-0000-074957833700}<br>O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798}<br>O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software<br>O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8}<br>O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver<br>O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}<br>O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin<br>O42 - Logiciel: Adobe Reader 9.3.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}<br>O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player<br>O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}<br>O42 - Logiciel: Audacity 1.2.6 - (.Pas de propriétaire.) [HKLM] -- Audacity<br>O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop<br>O42 - Logiciel: BootSkin - (.Pas de propriétaire.) [HKLM] -- BootSkin<br>O42 - Logiciel: Browser Configuration Utility - (.DeviceVM.) [HKLM] -- {5B363E1D-8C36-4458-BAE4-D5081999E094}<br>O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner<br>O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1<br>O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {7054ED85-498D-4D20-906F-14646AEC5581}<br>O42 - Logiciel: Corsair Flash Voyager Utility - (.Pas de propriétaire.) [HKLM] -- {41FC7856-55A1-41A6-94B1-15A1E3C050B8}<br>O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler<br>O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}<br>O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}<br>O42 - Logiciel: EasySaver B9.0610.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}<br>O42 - Logiciel: Hercules WebCam Station - (.Pas de propriétaire.) [HKLM] -- {D208F4A7-6B73-4C2A-8B1E-8756FCBA831E}<br>O42 - Logiciel: Hercules Webcam - (.Pas de propriétaire.) [HKLM] -- {A250D351-A07F-4D5D-AB6C-693C69B9BFAF}<br>O42 - Logiciel: HotFix Q0306270 - (.Pas de propriétaire.) [HKLM] -- {7D9B8EE1-7E8E-411C-8F36-2A26D2D20D5F}<br>O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595<br>O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484<br>O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399<br>O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5<br>O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5<br>O42 - Logiciel: IZArc 3.81 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1<br>O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3<br>O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}<br>O42 - Logiciel: Java™ 6 Update 21 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}<br>O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}<br>O42 - Logiciel: KeyScrambler - (.QFX Software Corporation.) [HKLM] -- KeyScrambler<br>O42 - Logiciel: Logitech SetPoint 6.0 - (.Logitech.) [HKLM] -- SP6<br>O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27}<br>O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}<br>O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}<br>O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}<br>O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}<br>O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}<br>O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware<br>O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}<br>O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}<br>O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1<br>O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}<br>O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}<br>O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9084040C-6000-11D3-8CFE-0150048383C9}<br>O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}<br>O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9}<br>O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wudf01009<br>O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}<br>O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}<br>O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}<br>O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}<br>O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9}<br>O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {E6BAE954-487E-488B-BC4E-2E69E54E8117}<br>O42 - Logiciel: Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""> - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""><br>O42 - Logiciel: Mozilla Thunderbird (3.1.2) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.2)<br>O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {F1FDAA01-988C-423F-AC12-0D8F333943FD}<br>O42 - Logiciel: Nokia Maps Updater 1.0.12 - (.Pas de propriétaire.) [HKLM] -- Nokia Maps Updater<br>O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- Nokia Ovi Suite<br>O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- {8070452B-15D6-4169-B9B9-FCC3B54588AD}<br>O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM] -- {A0D65C73-F2C5-432F-8788-90F8A2E99B98}<br>O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite<br>O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}<br>O42 - Logiciel: Nokia Software Updater - (.Nokia Corporation.) [HKLM] -- {09C468CA-2940-466A-AAE8-DCC0C6E9323C}<br>O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080}<br>O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}<br>O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM] -- {2D10FC46-1D96-44C4-8855-85F21B9B011E}<br>O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM] -- {1373559F-6DC6-44EA-9079-6ABDCCE8CDAD}<br>O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {29F563F4-8807-4496-8463-441EAA0E96AB}<br>O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}<br>O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/05/2008 3.7) - (.Nokia.) [HKLM] -- CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A<br>O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1) - (.Nokia.) [HKLM] -- E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D<br>O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 4.5) - (.Nokia.) [HKLM] -- 34EA302E7F4CBD17A19E33BBCB72363234956D7E<br>O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 7.01.0.7) - (.Nokia.) [HKLM] -- EEEE705096F837B7907659F100C9FE6DA001970F<br>O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693<br>O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1}<br>O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B}<br>O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1100 series - (.Pas de propriétaire.) [HKLM] -- HP PSC 1100 Series<br>O42 - Logiciel: Q-Dir - (.Pas de propriétaire.) [HKLM] -- Q-Dir<br>O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}<br>O42 - Logiciel: RagTime Solo - (.Pas de propriétaire.) [HKLM] -- RagTime Solo<br>O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}<br>O42 - Logiciel: Revo Uninstaller 1.89 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller<br>O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}<br>O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1<br>O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster<br>O42 - Logiciel: SpywareGuard v2.2 - (.Javacool Software LLC.) [HKLM] -- SpywareGuard<br>O42 - Logiciel: StartClock 3.4 - (.Grégory HARGOUS.) [HKLM] -- StartClock<br>O42 - Logiciel: Sélecteur d'installation de Microsoft Works 2004 - (.Pas de propriétaire.) [HKLM] -- Works2004Setup<br>O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker<br>O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707<br>O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM] -- VLC media player<br>O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify<br>O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130<br>O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8<br>O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}<br>O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}<br>O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}<br>O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}<br>O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11<br>O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime<br>O42 - Logiciel: Winmail Reader 1.1.12 - (.Kopf.) [HKLM] -- Winmail Reader<br>O42 - Logiciel: XnView 1.97.5 - (.Gougelet Pierre-e.) [HKLM] -- XnView<br>O42 - Logiciel: ZebHelpProcess 2.37 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process<br>O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm<br>O42 - Logiciel: eBay Icon - (.AD ON Multimedia Advertising GmbH.) [HKLM] -- eBay Icon<br>O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}<br>O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253}<br>O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}<br>O42 - Logiciel: xp-AntiSpy 3.97-3 - (.Christian Taubenheim.) [HKLM] -- xp-AntiSpy<br><br>---\\ HKCU & HKLM Software Keys<br>[HKCU\Software\ABBYY]<br>[HKCU\Software\ATI]<br>[HKCU\Software\Adobe]<br>[HKCU\Software\Ahead]<br>[HKCU\Software\AppDataLow\ISWVolatile]<br>[HKCU\Software\AppDataLow\Software]<br>[HKCU\Software\AppDataLow]<br>[HKCU\Software\Astonsoft]<br>[HKCU\Software\Avira]<br>[HKCU\Software\Canneverbe Limited]<br>[HKCU\Software\CheckPoint]<br>[HKCU\Software\Classes]<br>[HKCU\Software\Clients]<br>[HKCU\Software\Corsair]<br>[HKCU\Software\DeviceVM]<br>[HKCU\Software\Gadwin Systems]<br>[HKCU\Software\Hewlett-Packard]<br>[HKCU\Software\IDAVLab]<br>[HKCU\Software\IM Providers]<br>[HKCU\Software\IZSoftware]<br>[HKCU\Software\Innovative Solutions]<br>[HKCU\Software\Intel]<br>[HKCU\Software\JEDI-VCL]<br>[HKCU\Software\JavaSoft]<br>[HKCU\Software\Jetico]<br>[HKCU\Software\Lavalys]<br>[HKCU\Software\Leadertech]<br>[HKCU\Software\Logitech]<br>[HKCU\Software\Macromedia]<br>[HKCU\Software\Malwarebytes' Anti-Malware]<br>[HKCU\Software\Netscape]<br>[HKCU\Software\Nokia]<br>[HKCU\Software\ODBC]<br>[HKCU\Software\Oak Technology]<br>[HKCU\Software\OpenOffice.org]<br>[HKCU\Software\PDFCreator]<br>[HKCU\Software\Piriform]<br>[HKCU\Software\Policies]<br>[HKCU\Software\QFX Software]<br>[HKCU\Software\Realtek]<br>[HKCU\Software\Safer Networking Limited]<br>[HKCU\Software\SoftwareOK.de]<br>[HKCU\Software\Sysinternals]<br>[HKCU\Software\TAdvCheckList]<br>[HKCU\Software\Theorica]<br>[HKCU\Software\Trend Micro]<br>[HKCU\Software\Trolltech]<br>[HKCU\Software\VB and VBA Program Settings]<br>[HKCU\Software\VSRevoGroup]<br>[HKCU\Software\WinRAR SFX]<br>[HKCU\Software\WinmailReader]<br>[HKCU\Software\XnView]<br>[HKCU\Software\YahooPartnerToolbar]<br>[HKCU\Software\Zone Labs]<br>[HKCU\Software\xp-AntiSpy]<br>[HKLM\Software\ABBYY]<br>[HKLM\Software\ATI Technologies]<br>[HKLM\Software\ATI]<br>[HKLM\Software\Adobe]<br>[HKLM\Software\Ahead]<br>[HKLM\Software\Alienware]<br>[HKLM\Software\AppDataLow]<br>[HKLM\Software\ArcSoft]<br>[HKLM\Software\Avira]<br>[HKLM\Software\Borland]<br>[HKLM\Software\C07ft5Y]<br>[HKLM\Software\CheckPoint]<br>[HKLM\Software\Classes]<br>[HKLM\Software\Clients]<br>[HKLM\Software\Creative Tech]<br>[HKLM\Software\DeviceVM]<br>[HKLM\Software\Gemplus]<br>[HKLM\Software\Gigabyte]<br>[HKLM\Software\Hewlett-Packard]<br>[HKLM\Software\IDAVLab]<br>[HKLM\Software\Innovative Solutions]<br>[HKLM\Software\Intel]<br>[HKLM\Software\JavaRa]<br>[HKLM\Software\JavaSoft]<br>[HKLM\Software\JreMetrics]<br>[HKLM\Software\Licenses]<br>[HKLM\Software\Logitech]<br>[HKLM\Software\Macromedia]<br>[HKLM\Software\MozillaPlugins]<br>[HKLM\Software\Mozilla]<br>[HKLM\Software\NOS]<br>[HKLM\Software\Nokia Mobile Phones]<br>[HKLM\Software\Nokia]<br>[HKLM\Software\ODBC]<br>[HKLM\Software\OMSI]<br>[HKLM\Software\Oak Technology]<br>[HKLM\Software\OldTimer Tools]<br>[HKLM\Software\OmniVision]<br>[HKLM\Software\OpenOffice.org]<br>[HKLM\Software\PC Connectivity Solution]<br>[HKLM\Software\PCSuite]<br>[HKLM\Software\PDFCreator]<br>[HKLM\Software\Piriform]<br>[HKLM\Software\Policies]<br>[HKLM\Software\Program Groups]<br>[HKLM\Software\QFX Software]<br>[HKLM\Software\RTLSetup]<br>[HKLM\Software\Realtek]<br>[HKLM\Software\RegisteredApplications]<br>[HKLM\Software\Safer Networking Limited]<br>[HKLM\Software\Schlumberger]<br>[HKLM\Software\Secunia]<br>[HKLM\Software\Stardock]<br>[HKLM\Software\Sun Microsystems]<br>[HKLM\Software\ToniArts]<br>[HKLM\Software\TrendMicro]<br>[HKLM\Software\TuneUp]<br>[HKLM\Software\Uniblue]<br>[HKLM\Software\VideoLAN]<br>[HKLM\Software\Windows 3.1 Migration Status]<br>[HKLM\Software\X-AVCSD]<br>[HKLM\Software\Zone Labs]<br>[HKLM\Software\mozilla.org]<br><br><br>---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 9.0<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe<br>O43 - CFD:Common File Directory ----D- C:\Program Files\AMD<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Astonsoft<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Avira<br>O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner<br>O43 - CFD:Common File Directory ----D- C:\Program Files\CDBurnerXP<br>O43 - CFD:Common File Directory ----D- C:\Program Files\CheckPoint<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Corsair<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Defraggler<br>O43 - CFD:Common File Directory --H-D- C:\Program Files\DeviceVM<br>O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Gigabyte<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard<br>O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer<br>O43 - CFD:Common File Directory ----D- C:\Program Files\IZArc<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Java<br>O43 - CFD:Common File Directory ----D- C:\Program Files\JavaRa<br>O43 - CFD:Common File Directory ----D- C:\Program Files\JRE<br>O43 - CFD:Common File Directory ----D- C:\Program Files\KeyScrambler<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft<br>O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works Suite 2004<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Thunderbird<br>O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild<br>O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache<br>O43 - CFD:Common File Directory ----D- C:\Program Files\MSN<br>O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone<br>O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0<br>O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Nokia<br>O43 - CFD:Common File Directory ----D- C:\Program Files\NOS<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services<br>O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express<br>O43 - CFD:Common File Directory ----D- C:\Program Files\PC Connectivity Solution<br>O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Q-Dir<br>O43 - CFD:Common File Directory ----D- C:\Program Files\RagTime Solo<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies<br>O43 - CFD:Common File Directory ----D- C:\Program Files\RegSeeker<br>O43 - CFD:Common File Directory ----D- C:\Program Files\SafeXP<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy<br>O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareBlaster<br>O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareGuard<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock<br>O43 - CFD:Common File Directory ----D- C:\Program Files\StartClock<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ToniArts<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro<br>O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker<br>O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN<br>O43 - CFD:Common File Directory ----D- C:\Program Files\VS Revo Group<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT<br>O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Winmail Reader<br>O43 - CFD:Common File Directory ----D- C:\Program Files\xerox<br>O43 - CFD:Common File Directory ----D- C:\Program Files\XnView<br>O43 - CFD:Common File Directory ----D- C:\Program Files\xp-AntiSpy<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ZebHelpProcess<br>O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Zone Labs<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ABBYY<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ArcSoft<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Borland Shared<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LogiShrd<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nokia<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\PCSuite<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Stardock<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System<br>O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live<br><br><br>---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)<br>O44 - LFC:[MD5.F5E1852A3E1D3AF74859AE3829E4E453] - 04/09/2010 - 13:08:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ativvaxx.cap [219120]<br>O44 - LFC:[MD5.00000000000000000000000000000000] - 04/09/2010 - 11:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [157]<br>O44 - LFC:[MD5.00000000000000000000000000000000] - 04/09/2010 - 11:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]<br>O44 - LFC:[MD5.7E0E4C60408C99AC4050E08ADC2BF32A] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1094606]<br>O44 - LFC:[MD5.A63E88AF842EC101F736293127FCE835] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [67448]<br>O44 - LFC:[MD5.A34AF276B8F8AC67F4485241586525F0] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [80712]<br>O44 - LFC:[MD5.95FCED42B5B829D0D05A530771621F7B] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [432492]<br>O44 - LFC:[MD5.C6A79BBFF71B8D83F9ADE8E2A4648B12] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [500812]<br>O44 - LFC:[MD5.379810E74A3DA84E4130B5E229F3916D] - 04/09/2010 - 08:27:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\service.log [144]<br>O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/09/2010 - 08:27:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]<br>O44 - LFC:[MD5.D556CB79967E92B5CC69686D16C1D846] - 04/09/2010 - 08:26:52 ---A- . (.Windows ® 2000 DDK provider - GIGABYTE Tools.) -- C:\WINDOWS\gdrv.sys [17488]<br>O44 - LFC:[MD5.C49582596A0D160FB1C3C1182955E217] - 04/09/2010 - 08:26:21 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]<br>O44 - LFC:[MD5.3CF489A6F65166B5A3AEE08DDC62092B] - 03/09/2010 - 21:42:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1640353]<br>O44 - LFC:[MD5.5F1EEBCBAFADEA35EC022691D5046F3A] - 03/09/2010 - 17:42:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.log [117823]<br>O44 - LFC:[MD5.C5AD6B60FB6ED96FB29C9C7DC3EA2FFC] - 03/09/2010 - 17:39:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.xml [524]<br>O44 - LFC:[MD5.00000000000000000000000000000000] - 03/09/2010 - 17:18:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030]<br>O44 - LFC:[MD5.B2D1DDC268D9B900C5EDE7E3E202E5E8] - 03/09/2010 - 16:54:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [5711]<br>O44 - LFC:[MD5.E5039ABB056C3215A7AD895477A4219C] - 31/08/2010 - 20:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EventSystem.log [95628]<br>O44 - LFC:[MD5.01830591B17164C668C0FC447AF8930C] - 01/09/2010 - 17:28:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Q-Dir.ini [3600]<br>O44 - LFC:[MD5.D6CC816315DB456DBF834E59BB98BA14] - 31/08/2010 - 16:24:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206]<br>O44 - LFC:[MD5.DAA169C075E645111151458155FDA9B2] - 30/08/2010 - 19:58:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\COM+.log [1092]<br>O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 26/08/2010 - 18:14:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224]<br>O44 - LFC:[MD5.D0E675E1479A8BE24D30EEC2B8A152E7] - 26/08/2010 - 17:46:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\jupdate-1.6.0_21-b07.log [5222]<br>O44 - LFC:[MD5.FB234CF688D9EE2619AB854BD9290C3C] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\System32\HotFixQ0306270.exe [45056]<br>O44 - LFC:[MD5.9B03B2D34D46F88638D51066531D08DC] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\System32\IoctlSvc.exe [53248]<br>O44 - LFC:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\System32\drivers\plff.sys [7424]<br>O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227]<br>O44 - LFC:[MD5.8F840A0F7D1240BD4FB306FBC5613CFF] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [532]<br>O44 - LFC:[MD5.85661F752B156BEC10CB77FCD04981EE] - 07/08/2010 - 16:05:03 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [223]<br><br><br>---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)<br>O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll<br>O46 - SEH:ShellExecuteHooks - SpywareGuard.Handler - {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll<br><br><br>---\\ Export de clé d'application autorisée (ECAA) (O47)<br>O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe<br>O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe<br>O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe<br>O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe<br>O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe<br>O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe<br>O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe<br>O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe<br><br><br>---\\ Déni du service (Local Security Authority) (LSA) (O48)<br>O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll<br>O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll<br>O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll<br><br><br>---\\ Image File Execution Options (IFEO) (O50)<br>O50 - IFEO:Image File Execution Options - outlook.exe - StripMyRights.exe /D /L N<br>O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d<br><br><br>---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)<br>O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech™ DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm<br>O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll<br>O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll<br>O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll<br>O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax<br>O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm<br>O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax<br>O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll<br>O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm<br>O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm<br>O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax<br>O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)<br>O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm<br><br><br>---\\ Microsoft Control Security Providers (MCSP) (O54)<br>O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll<br>O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll<br>O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll<br><br><br>---\\ Microsoft Windows Policies System (MWPS) (O55)<br>O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0<br>O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=<br>O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=<br>O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1<br>O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1<br><br><br>---\\ Microsoft Windows Policies Explorer (MWPE) (O56)<br>O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145<br>O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1<br>O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1<br><br><br>---\\ Liste des Drivers Système (SDL) (O58)<br>O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 14:58:56 ---A- . (.Arcsoft, Inc. - Arcsoft® ASPI Shell.) -- C:\WINDOWS\system32\drivers\afc.sys<br>O58 - SDL:[MD5.B34B1AB0A7690A0E2301FEC6D17B2FC1] - 30/07/2010 - 20:28:37 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS<br>O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 05/08/2008 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys<br>O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 16/04/2007 - 16:46:34 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys<br>O58 - SDL:[MD5.F620AE184CB3BCBE32ED40982957BE41] - 03/06/2009 - 22:00:18 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys<br>O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys<br>O58 - SDL:[MD5.A88D29D928AD2B830E87B53E3F9BC182] - 16/02/2010 - 12:24:01 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys<br>O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys<br>O58 - SDL:[MD5.1289E9A5D9118A25A13C0009519088E3] - 01/03/2010 - 08:05:24 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys<br>O58 - SDL:[MD5.C3963D85B721A7F80D8A55F4E2867A3A] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmb.sys<br>O58 - SDL:[MD5.3859C69A77793180548802DAC9F34A38] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys<br>O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys<br>O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/08/2001 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys<br>O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 08:36:06 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys<br>O58 - SDL:[MD5.863CC3A82C63C9F60ACF2E85D5310620] - 09/03/2003 - 05:31:00 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys<br>O58 - SDL:[MD5.08CB72E95DD75B61F2966B311D0E4366] - 09/03/2003 - 05:31:02 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys<br>O58 - SDL:[MD5.CA990306ED4EF732AF9695BFF24FC96F] - 09/03/2003 - 05:31:02 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys<br>O58 - SDL:[MD5.83A174AC30D12186E5C2E56D362D3604] - 04/10/2009 - 22:33:14 ---A- . (.QFX Software Corporation - KeyScrambler Keyboard Encryption Driver.) -- C:\WINDOWS\system32\drivers\keyscrambler.sys<br>O58 - SDL:[MD5.F5E165B4E3DF145F6E8BF3C0573F94D8] - 10/11/2009 - 12:54:52 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys<br>O58 - SDL:[MD5.B46E39B8AE439D7CE75A923E7F950040] - 10/11/2009 - 12:55:08 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys<br>O58 - SDL:[MD5.C0382C12B784394BF16C2D8F0F1F17DC] - 26/03/2010 - 17:44:00 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\WINDOWS\system32\drivers\LNonPnP.sys<br>O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys<br>O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys<br>O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 04/01/2006 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys<br>O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys<br>O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys<br>O58 - SDL:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 06/10/2003 - 10:29:08 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\system32\drivers\plff.sys<br>O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys<br>O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys<br>O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys<br>O58 - SDL:[MD5.00FD6811350E175585ABCF7D4A61DD90] - 24/04/2009 - 03:22:16 R--A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys<br>O58 - SDL:[MD5.0C5A04F0FFAEBC25AC815EE14441A8CB] - 02/06/2009 - 11:02:46 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys<br>O58 - SDL:[MD5.1674A34F0084BFFDEC2DCDB1625A87F0] - 21/05/2009 - 02:03:54 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys<br>O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys<br>O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 11/05/2009 - 08:12:49 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys<br>O58 - SDL:[MD5.F92254B0BCFCD10CAAC7BCCC7CB7F467] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\StarOpen.sys<br>O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/08/2001 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys<br>O58 - SDL:[MD5.0CCADC7391021376EDBB8AA649D04E68] - 26/02/2010 - 13:32:46 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys<br>O58 - SDL:[MD5.68B4F83CCCF70A2FF32EE142C234332A] - 26/02/2010 - 13:32:58 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys<br>O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys<br>O58 - SDL:[MD5.5B7512131637D60EA79EF8960AA01575] - 02/03/2010 - 20:54:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\vidstub.sys<br>O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys<br>O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys<br>O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys<br>O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys<br>O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/04/2008 - 08:50:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys<br>O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys<br>O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys<br>O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys<br>O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys<br>O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys<br>O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 13/04/2008 - 08:49:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys<br>O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys<br>O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 13/04/2008 - 08:49:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys<br>O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys<br>O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 13/04/2008 - 08:49:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys<br>O58 - SDL:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 04/12/2009 - 16:34:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys<br><br><br>---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb.log [4194304]<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\dbstore.ini [181]<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\edb.chk [8192]<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [186685]<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [37]<br>O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [328]<br>O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 [840]<br>O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 [134]<br>O61 - LFC:Last File Created 01/09/2010 - 10:57:11 ---A- C:\Documents And Settings\Mamounette\Application Data\wklnhst.dat [4124]<br>O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Bureau.lnk [308]<br>O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Nouveau Document Microsoft Word.doc.lnk [538]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:13 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Modèles\Normal.dot [50176]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Modèles.lnk [775]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Normal.dot.lnk [878]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Word10.pip [1656]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\fbc8.tmp [60492]<br>O61 - LFC:Last File Created 01/09/2010 - 11:02:14 --H-- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\index.dat [487]<br>O61 - LFC:Last File Created 01/09/2010 - 11:24:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\SharedDataEvents [3072]<br>O61 - LFC:Last File Created 01/09/2010 - 16:38:07 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup4.ini [236339]<br>O61 - LFC:Last File Created 01/09/2010 - 17:28:22 ---A- C:\Documents And Settings\Mamounette\Application Data\Q-Dir\Q-Dir.ini [3389]<br>O61 - LFC:Last File Created 01/09/2010 - 17:28:26 ---A- C:\Documents And Settings\Taranis\Application Data\Q-Dir\start.qdr [690]<br>O61 - LFC:Last File Created 01/09/2010 - 17:37:17 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [103295]<br>O61 - LFC:Last File Created 01/09/2010 - 17:53:27 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62]<br>O61 - LFC:Last File Created 01/09/2010 - 17:55:23 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384]<br>O61 - LFC:Last File Created 01/09/2010 - 17:55:23 -SHA- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]<br>O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024]<br>O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\ntuser.dat.LOG [1024]<br>O61 - LFC:Last File Created 01/09/2010 - 17:57:16 ---A- C:\Documents And Settings\LocalService\NTUSER.DAT [245760]<br>O61 - LFC:Last File Created 01/09/2010 - 17:57:16 -SHA- C:\Documents And Settings\LocalService\ntuser.ini [184]<br>O61 - LFC:Last File Created 01/09/2010 - 18:33:45 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [236637]<br>O61 - LFC:Last File Created 01/09/2010 - 19:40:19 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1]<br>O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1915]<br>O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [747]<br>O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [8471]<br>O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1310]<br>O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [2438]<br>O61 - LFC:Last File Created 01/09/2010 - 19:47:51 ---A- C:\Documents And Settings\Mamounette\Application Data\XnView\xnview.ini [13089]<br>O61 - LFC:Last File Created 01/09/2010 - 20:03:56 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [46908]<br>O61 - LFC:Last File Created 01/09/2010 - 20:08:07 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187]<br>O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [234605]<br>O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [110766]<br>O61 - LFC:Last File Created 01/09/2010 - 20:09:01 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1 [47926]<br>O61 - LFC:Last File Created 01/09/2010 - 20:09:56 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Sent-1.msf [4777]<br>O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\junklog.html [2431]<br>O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\training.dat [6876]<br>O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\traits.dat [8]<br>O61 - LFC:Last File Created 01/09/2010 - 20:18:20 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\XUL.mfl [2334394]<br>O61 - LFC:Last File Created 01/09/2010 - 20:19:14 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\localstore.rdf [10038]<br>O61 - LFC:Last File Created 02/09/2010 - 16:09:20 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [236339]<br>O61 - LFC:Last File Created 02/09/2010 - 16:13:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\00294823-0000004E.eml [4091]<br>O61 - LFC:Last File Created 02/09/2010 - 16:49:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\18BE6784-0000004F.eml [6811]<br>O61 - LFC:Last File Created 02/09/2010 - 16:53:03 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\4AE13D6C-00000050.eml [1945]<br>O61 - LFC:Last File Created 02/09/2010 - 17:09:20 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Deleted Items\1E597D0C-00000121.eml [8368]<br>O61 - LFC:Last File Created 02/09/2010 - 17:15:39 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\AdobeSysFnt09.lst [51685]<br>O61 - LFC:Last File Created 02/09/2010 - 17:18:29 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\UserCache.bin [32960]<br>O61 - LFC:Last File Created 02/09/2010 - 17:19:29 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187]<br>O61 - LFC:Last File Created 02/09/2010 - 17:20:15 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [104980]<br>O61 - LFC:Last File Created 02/09/2010 - 17:24:45 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-SCAN[1].txt [5221]<br>O61 - LFC:Last File Created 02/09/2010 - 17:27:20 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-CLEAN[1].txt [5492]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [453]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [211]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [1399]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Taranis.reg [270]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Taranis.reg [473]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP4-Taranis.reg [88]<br>O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Taranis.reg [177]<br>O61 - LFC:Last File Created 02/09/2010 - 17:30:10 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [291]<br>O61 - LFC:Last File Created 02/09/2010 - 17:35:03 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\user.xml [23243]<br>O61 - LFC:Last File Created 02/09/2010 - 17:41:13 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1]<br>O61 - LFC:Last File Created 02/09/2010 - 17:41:15 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Linguistic.xcu [10020]<br>O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048]<br>O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594]<br>O61 - LFC:Last File Created 02/09/2010 - 17:41:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12639]<br>O61 - LFC:Last File Created 02/09/2010 - 17:44:58 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert_override.txt [1720]<br>O61 - LFC:Last File Created 02/09/2010 - 17:52:05 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\site-confim.xml [2654]<br>O61 - LFC:Last File Created 02/09/2010 - 17:53:19 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236637]<br>O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1614]<br>O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [376]<br>O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [3884]<br>O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [1484]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Archives.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Drafts.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Templates.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Archives.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Drafts.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Templates.msf [0]<br>O61 - LFC:Last File Created 02/09/2010 - 17:59:41 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX [10122660]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\3DB78327d01 [63021]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\504A194Bd01 [66641]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5837404Bd01 [58614]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D23CE59Dd01 [64554]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:15 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D0D8D5D8d01 [31254]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\05C68366d01 [36882]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A7FC289Dd01 [18936]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\2318CD3Fd01 [22647]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\41A46494d01 [27141]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\715D71CEd01 [35431]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7B4EF581d01 [28587]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7C6E5708d01 [107703]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\E8461768d01 [28207]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A4356D5Cd01 [24918]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D664BA74d01 [20770]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5233A958d01 [22770]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A05F80A3d01 [56974]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A44A3705d01 [23814]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\BDE75931d01 [43395]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\DCDAB2A9d01 [55987]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1.msf [4709]<br>O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\pluginreg.dat [6291]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\folderTree.json [316]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\session.json [663]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:11 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\global-messages-db.sqlite [615424]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.msf [4128]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Trash-1.msf [1979]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.msf [4593]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Trash.msf [2597]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\Mail\smart mailboxes\Trash.msf [1638]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\cert8.db [65536]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\key3.db [16384]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\panacea.dat [16113]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\prefs.js [13691]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\virtualFolders.dat [252]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_001_ [97660]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_002_ [161729]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_003_ [253487]<br>O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_MAP_ [8468]<br>O61 - LFC:Last File Created 02/09/2010 - 20:08:05 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236866]<br>O61 - LFC:Last File Created 02/09/2010 - 21:04:33 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [47550]<br>O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236339]<br>O61 - LFC:Last File Created 03/09/2010 - 16:08:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196]<br>O61 - LFC:Last File Created 03/09/2010 - 16:08:28 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [57791]<br>O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634]<br>O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1104210]<br>O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\Gmail - Rechargement WEB_WAP.pdf.lnk [504]<br>O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\PDF.lnk [341]<br>O61 - LFC:Last File Created 03/09/2010 - 16:16:44 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [110766]<br>O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594]<br>O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [86068]<br>O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12642]<br>O61 - LFC:Last File Created 03/09/2010 - 16:27:26 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837]<br>O61 - LFC:Last File Created 03/09/2010 - 16:30:38 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7810]<br>O61 - LFC:Last File Created 03/09/2010 - 16:30:49 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236866]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [38808]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56810]<br>O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096]<br>O61 - LFC:Last File Created 03/09/2010 - 16:36:31 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1]<br>O61 - LFC:Last File Created 03/09/2010 - 16:42:51 ---A- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\AN5J4D18\oXMLStoreUnit[1].xml [56]<br>O61 - LFC:Last File Created 03/09/2010 - 16:42:51 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [5327]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Histories.xcu [10598]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [713]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [12290]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1312]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [5777]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\OOo.lnk [604]<br>O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\Scann pleine page.odt.lnk [822]<br>O61 - LFC:Last File Created 03/09/2010 - 16:51:18 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [16348]<br>O61 - LFC:Last File Created 03/09/2010 - 16:51:20 ---A- C:\Documents And Settings\Papounet\Application Data\Logitech\SetPoint\gamelist.xml [37]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1005\Credentials [14578]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\desktop.ini [62]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\IETldCache\index.dat [245760]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\MSHist012010090320100904\index.dat [32768]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011]<br>O61 - LFC:Last File Created 03/09/2010 - 16:53:58 ----- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\index.dat [131072]<br>O61 - LFC:Last File Created 03/09/2010 - 16:54:03 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\LaunchApplication\Settings.xml [1451]<br>O61 - LFC:Last File Created 03/09/2010 - 16:55:07 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\PC Suite\statistics.dat [1184]<br>O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778]<br>O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [126]<br>O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [87]<br>O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [60]<br>O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [5612931]<br>O61 - LFC:Last File Created 03/09/2010 - 17:00:30 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-09-03 (18-00-30).txt [1047]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:37 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A [528]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:37 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A [140]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD [781]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6 [561]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD [156]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6 [134]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:40 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\1B749B72855CB97BF2F58675617C9BF9 [576]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:40 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\1B749B72855CB97BF2F58675617C9BF9 [162]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:52 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18]<br>O61 - LFC:Last File Created 03/09/2010 - 17:12:52 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216]<br>O61 - LFC:Last File Created 03/09/2010 - 17:13:07 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5 [571]<br>O61 - LFC:Last File Created 03/09/2010 - 17:13:07 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5 [136]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:10 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:10 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:15 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [95949]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:15 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:22 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:22 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 [469]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 [460]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 [98]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 [110]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:32 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 [14468]<br>O61 - LFC:Last File Created 03/09/2010 - 17:14:32 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 [110]<br>O61 - LFC:Last File Created 03/09/2010 - 17:31:08 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [105223]<br>O61 - LFC:Last File Created 03/09/2010 - 17:31:09 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236637]<br>O61 - LFC:Last File Created 03/09/2010 - 17:39:06 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\Desktop.htt [2702]<br>O61 - LFC:Last File Created 03/09/2010 - 17:39:11 ---A- C:\Documents And Settings\Papounet\Recent\501 - Revenu 2009.pdf.lnk [856]<br>O61 - LFC:Last File Created 03/09/2010 - 17:42:24 ---A- C:\Documents And Settings\Papounet\Recent\002 - Resume 2009-1273758692781.pdf.lnk [898]<br>O61 - LFC:Last File Created 03/09/2010 - 17:42:35 ---A- C:\Documents And Settings\Papounet\Recent\003 - Détail impôt 2009.pdf.lnk [874]<br>O61 - LFC:Last File Created 03/09/2010 - 17:46:43 ---A- C:\Documents And Settings\Papounet\Recent\011 - calcul IR 2009 sans enfant ni perco.pdf.lnk [928]<br>O61 - LFC:Last File Created 03/09/2010 - 17:46:56 ---A- C:\Documents And Settings\Papounet\Recent\010 - calcul IR 2009 avec enfant et perco.pdf.lnk [928]<br>O61 - LFC:Last File Created 03/09/2010 - 17:47:01 ---A- C:\Documents And Settings\Papounet\Recent\012 - calcul IR 2009 sans enfant avec perco.pdf.lnk [934]<br>O61 - LFC:Last File Created 03/09/2010 - 17:47:01 ---A- C:\Documents And Settings\Papounet\Recent\Impôts 2009.lnk [626]<br>O61 - LFC:Last File Created 03/09/2010 - 17:50:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Éléments en 784\00294823-0000000A.eml [4187]<br>O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\5DF51807-00000023.eml [141968]<br>O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\5EC531D9-00000022.eml [143771]<br>O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\635036E8-00000024.eml [1843]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:09 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\WLCalendarStore.edb [2121728]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\WLCalendarStore.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\edb0003F.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb0003F.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:13 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.edb [4218880]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\edb00022.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb00022.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.edb [4218880]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb00022.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\edb00022.log [4194304]<br>O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.pat [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 17:56:59 --HA- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024]<br>O61 - LFC:Last File Created 03/09/2010 - 17:59:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:00:30 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2874368]<br>O61 - LFC:Last File Created 03/09/2010 - 18:00:34 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2876416]<br>O61 - LFC:Last File Created 03/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2873344]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [18]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [126]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [2314]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:57 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [1589]<br>O61 - LFC:Last File Created 03/09/2010 - 18:01:57 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196]<br>O61 - LFC:Last File Created 03/09/2010 - 18:02:00 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634]<br>O61 - LFC:Last File Created 03/09/2010 - 18:02:00 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1103451]<br>O61 - LFC:Last File Created 03/09/2010 - 18:04:30 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\IDX\master.idx [56]<br>O61 - LFC:Last File Created 03/09/2010 - 18:05:04 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2010-09-03-19-04-26.log [22634]<br>O61 - LFC:Last File Created 03/09/2010 - 18:05:04 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\c33d1e8e.avl [1890]<br>O61 - LFC:Last File Created 03/09/2010 - 19:43:06 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Deleted Items\0E352D39-00000122.eml [4583]<br>O61 - LFC:Last File Created 03/09/2010 - 19:45:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Inbox\2A0647D6-000000DF.eml [6087]<br>O61 - LFC:Last File Created 03/09/2010 - 19:45:43 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\6BB85A8E-00000051.eml [6712]<br>O61 - LFC:Last File Created 03/09/2010 - 20:10:02 -SHA- C:\Documents And Settings\Mamounette\Recent\Desktop.ini [150]<br>O61 - LFC:Last File Created 03/09/2010 - 20:10:22 ---A- C:\Documents And Settings\Mamounette\Mes documents\cc_20100903_211018.reg [12468]<br>O61 - LFC:Last File Created 03/09/2010 - 20:12:02 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963]<br>O61 - LFC:Last File Created 03/09/2010 - 20:14:21 --HA- C:\Documents And Settings\Papounet\NTUSER.DAT [7864320]<br>O61 - LFC:Last File Created 03/09/2010 - 20:14:21 -SHA- C:\Documents And Settings\Papounet\ntuser.ini [184]<br>O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4ecfee99.qua [180704]<br>O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20100903-211643-4035BA63.LOG [20276]<br>O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\920b8835.avl [1692]<br>O61 - LFC:Last File Created 03/09/2010 - 20:19:12 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4ecfeb07.qua [145447]<br>O61 - LFC:Last File Created 03/09/2010 - 20:19:12 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\91be6600.avl [1692]<br>O61 - LFC:Last File Created 03/09/2010 - 20:19:13 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20100903-211828-56C77E6B.LOG [20474]<br>O61 - LFC:Last File Created 03/09/2010 - 20:27:58 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837]<br>O61 - LFC:Last File Created 03/09/2010 - 20:38:43 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 20:43:33 -SH-- C:\Documents And Settings\Taranis\Local Settings\Temporary Internet Files\desktop.ini [67]<br>O61 - LFC:Last File Created 03/09/2010 - 20:45:30 ---A- C:\Documents And Settings\Taranis\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [456]<br>O61 - LFC:Last File Created 03/09/2010 - 20:45:59 -SH-- C:\Documents And Settings\NetworkService\Local Settings\Temporary Internet Files\desktop.ini [67]<br>O61 - LFC:Last File Created 03/09/2010 - 20:50:32 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XPC.mfl [2224568]<br>O61 - LFC:Last File Created 03/09/2010 - 20:50:37 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\gamelist.xml [37]<br>O61 - LFC:Last File Created 03/09/2010 - 20:50:45 -SH-- C:\Documents And Settings\Mamounette\Local Settings\Temporary Internet Files\desktop.ini [67]<br>O61 - LFC:Last File Created 03/09/2010 - 20:50:50 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF1BFD.tmp [98304]<br>O61 - LFC:Last File Created 03/09/2010 - 20:51:01 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@c.live[1].txt [68]<br>O61 - LFC:Last File Created 03/09/2010 - 20:51:01 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@c.msn[2].txt [67]<br>O61 - LFC:Last File Created 03/09/2010 - 20:51:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236339]<br>O61 - LFC:Last File Created 03/09/2010 - 20:51:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 20:52:08 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF28A3.tmp [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 20:52:08 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4CEF.tmp [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 20:52:13 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF3ECB.tmp [98304]<br>O61 - LFC:Last File Created 03/09/2010 - 20:52:45 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité\SpywareBlaster\SpywareBlaster Help.lnk [660]<br>O61 - LFC:Last File Created 03/09/2010 - 20:52:45 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité\SpywareBlaster\SpywareBlaster.lnk [702]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [2329449]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:43 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7777]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236637]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [40593]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56534]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240]<br>O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [10850304]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\EasyCleaner tray icon.lnk [567]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\EasyCleaner.lnk [561]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\Help\EasyCleaner help (English).lnk [637]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\Help\EasyCleaner help (Finnish).lnk [637]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\The Web\EasyCleaner home.lnk [222]<br>O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\The Web\ToniArts.lnk [198]<br>O61 - LFC:Last File Created 03/09/2010 - 20:59:00 -SHA- C:\Documents And Settings\Taranis\Recent\Desktop.ini [150]<br>O61 - LFC:Last File Created 03/09/2010 - 20:59:01 -SH-- C:\Documents And Settings\Taranis\ntuser.ini [184]<br>O61 - LFC:Last File Created 03/09/2010 - 20:59:17 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF27AF.tmp [98304]<br>O61 - LFC:Last File Created 03/09/2010 - 20:59:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [341]<br>O61 - LFC:Last File Created 03/09/2010 - 21:38:27 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [47550]<br>O61 - LFC:Last File Created 03/09/2010 - 21:41:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl.old [700]<br>O61 - LFC:Last File Created 03/09/2010 - 21:42:02 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [29386]<br>O61 - LFC:Last File Created 03/09/2010 - 21:42:07 -SH-- C:\Documents And Settings\Mamounette\ntuser.ini [184]<br>O61 - LFC:Last File Created 04/09/2010 - 08:26:23 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62]<br>O61 - LFC:Last File Created 04/09/2010 - 08:26:32 -SHA- C:\Documents And Settings\Mamounette\Local Settings\desktop.ini [62]<br>O61 - LFC:Last File Created 04/09/2010 - 08:26:43 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 08:26:43 -SHA- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 08:26:46 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\sched.log [166940]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:07 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\avguard.log [534474]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:09 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\EVENTDB\avevtdb.dbe [31744]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:27 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\AdobeARM.log [3114]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:45 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFA7F5.tmp [98304]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603]<br>O61 - LFC:Last File Created 04/09/2010 - 08:27:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011]<br>O61 - LFC:Last File Created 04/09/2010 - 08:30:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.MSMessageStore [2121728]<br>O61 - LFC:Last File Created 04/09/2010 - 08:30:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb00050.log [2097152]<br>O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.pat [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\edb00050.log [2097152]<br>O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.pat [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 08:32:25 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\jusched.log [806]<br>O61 - LFC:Last File Created 04/09/2010 - 08:44:35 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl [92]<br>O61 - LFC:Last File Created 04/09/2010 - 09:58:45 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\s.ytimg.com\soundData.sol [49]<br>O61 - LFC:Last File Created 04/09/2010 - 09:58:45 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol [81]<br>O61 - LFC:Last File Created 04/09/2010 - 10:04:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d2syub29v5lge2.cloudfront.net\settings.sol [99]<br>O61 - LFC:Last File Created 04/09/2010 - 10:04:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static-cdn.playfish.com\settings.sol [93]<br>O61 - LFC:Last File Created 04/09/2010 - 10:05:29 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837]<br>O61 - LFC:Last File Created 04/09/2010 - 10:13:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\game\cooking\swf\0.35.2\game.swf\blockz.sol [44]<br>O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\ccmq.games.freshplanet.com\analytics.sol [459]<br>O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ccmq.games.freshplanet.com\settings.sol [96]<br>O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [575]<br>O61 - LFC:Last File Created 04/09/2010 - 10:26:18 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\game\cooking\swf\0.35.2\game.swf\448a31f7758cee8797f69753c8952953_stored_session.sol [177]<br>O61 - LFC:Last File Created 04/09/2010 - 10:26:19 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\d2syub29v5lge2.cloudfront.net\console\v2\swf\widgets_2_2_0_11\core.swf\448a31f7758cee8797f69753c8952953_stored_session.sol [177]<br>O61 - LFC:Last File Created 04/09/2010 - 10:36:24 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\d2syub29v5lge2.cloudfront.net\analytics.sol [457]<br>O61 - LFC:Last File Created 04/09/2010 - 10:36:24 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\analytics.sol [457]<br>O61 - LFC:Last File Created 04/09/2010 - 10:38:05 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl [1308]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:35 -SHA- C:\Documents And Settings\Taranis\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1003\Credentials [10042]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:35 -SHA- C:\Documents And Settings\Taranis\Local Settings\desktop.ini [62]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:36 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010090420100905\index.dat [32768]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:38 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\JOBS\updjob.avj [1496]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:39 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\AdobeARM.log [1814]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:40 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF6DD8.tmp [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:43 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF8722.tmp [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 11:06:45 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFB32F.tmp [98304]<br>O61 - LFC:Last File Created 04/09/2010 - 11:09:52 ---A- C:\Documents And Settings\Taranis\Recent\AUTO-PLUS_Contestation PV.pdf.lnk [912]<br>O61 - LFC:Last File Created 04/09/2010 - 11:09:52 ---A- C:\Documents And Settings\Taranis\Recent\Automobiles.lnk [646]<br>O61 - LFC:Last File Created 04/09/2010 - 11:10:17 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst [7979]<br>O61 - LFC:Last File Created 04/09/2010 - 11:11:38 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\jusched.log [1203]<br>O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [4218]<br>O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log [1281]<br>O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegBHO-Global.reg [1701]<br>O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBTB1-Global.reg [81]<br>O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [9119]<br>O61 - LFC:Last File Created 04/09/2010 - 11:18:53 -SHA- C:\Documents And Settings\Taranis\IETldCache\index.dat [245760]<br>O61 - LFC:Last File Created 04/09/2010 - 11:22:09 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:49 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\x@hotmail.fr\oeconfig.xml [19588]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\account{40ABED59-A09A-4768-B71D-F0E514FC1989}.oeaccount [5164]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb.log [4194304]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.edb [2113536]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\dbstore.ini [181]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\edb.chk [8192]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\RssFeeds.xml [264]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [41]<br>O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [660441]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@bing[2].txt [235]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@live[2].txt [235]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@msn[2].txt [233]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@windowsmarketplace[2].txt [263]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@zune[2].txt [235]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Messenger\ContactsLog.txt [549374]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb.log [4194304]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.edb [4210688]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\dbstore.ini [174]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\edb.chk [8192]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb.log [4194304]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.edb [4210688]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\dbstore.ini [174]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\edb.chk [8192]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.MSMessageStore [2113536]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.chk [8192]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.log [2097152]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [800]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:00 -SHA- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1007\Credentials [10066]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.cache [1559]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.ini [1525]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [54772]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ----- C:\Documents And Settings\Mamounette\Local Settings\Historique\History.IE5\index.dat [114688]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\compreg.dat [155891]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\xpti.dat [102852]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:03 -SHA- C:\Documents And Settings\Mamounette\Cookies\index.dat [32768]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:03 -SHA- C:\Documents And Settings\Mamounette\IETldCache\index.dat [245760]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [6777]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:04 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [1090172]<br>O61 - LFC:Last File Created 04/09/2010 - 12:55:17 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XPC.mfl [2714534]<br>O61 - LFC:Last File Created 04/09/2010 - 12:57:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\s.ytimg.com\videostats.sol [161]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236339]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [163840]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [29072]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [286720]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [25482]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240]<br>O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [23302144]<br>O61 - LFC:Last File Created 04/09/2010 - 13:08:16 --HA- C:\Documents And Settings\Papounet\ntuser.dat.LOG [1024]<br>O61 - LFC:Last File Created 04/09/2010 - 13:08:30 ---A- C:\Documents And Settings\All Users\Application Data\ATI\ACE\Profiles.xml [188]<br>O61 - LFC:Last File Created 04/09/2010 - 13:08:30 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Profiles.xml [10959]<br>O61 - LFC:Last File Created 04/09/2010 - 13:10:18 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\INMEM000.REM [0]<br>O61 - LFC:Last File Created 04/09/2010 - 13:10:18 -SHA- C:\Documents And Settings\Taranis\Cookies\index.dat [32768]<br>O61 - LFC:Last File Created 04/09/2010 - 13:10:18 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\index.dat [32768]<br>O61 - LFC:Last File Created 04/09/2010 - 13:10:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [9192]<br><br><br>---\\ Liste des outils de nettoyage (LATC) (O63)<br>O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.)<br>O63 - Logiciel: HiJackThis - (.Trend Micro.)<br><br><br>---\\ Liste des services Legacy (LALS) (O64)<br>O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD<br>O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG<br>O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE<br>O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394<br>O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - ASP.NET State Service (aspnet_state) .(.Microsoft Corporation - Microsoft ASP.NET State Server.) - LEGACY_ASPNET_STATE<br>O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV<br>O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB<br>O64 - Services: CurCS - (.not file.) - BCFTDI (bcftdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_BCFTDI<br>O64 - Services: CurCS - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe - Browser Configuration Utility Service (BCUService) .(.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - LEGACY_BCUSERVICE<br>O64 - Services: CurCS - (.not file.) - BC_Filter (bc_filter) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_FILTER<br>O64 - Services: CurCS - (.not file.) - BC_IP_Filter (bc_ip_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_IP_F<br>O64 - Services: CurCS - (.not file.) - BC_Engine (bc_ngn) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_NGN<br>O64 - Services: CurCS - (.not file.) - BC_PAT_Filter (bc_pat_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PAT_F<br>O64 - Services: CurCS - (.not file.) - BC_Protocol_Filter (bc_prt_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PRT_F<br>O64 - Services: CurCS - (.not file.) - BC_TDI_Filter (bc_tdi_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_TDI_F<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS<br>O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vidstub.sys - BootScreen (BootScreen) .(.Pas de propriétaire - Pas de description.) - LEGACY_BOOTSCREEN<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS<br>O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32<br>O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - Application système COM+ (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k DcomLaunch (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP<br>O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN<br>O64 - Services: CurCS - C:\Windows\system32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT<br>O64 - Services: CurCS - C:\Windows\system32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE<br>O64 - Services: CurCS - (.not file.) - driverhardwarev2 (driverhardwarev2) .(.Pas de propriétaire - Pas de description.) - LEGACY_DRIVERHARDWAREV2<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EAPHOST<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC<br>O64 - Services: CurCS - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe - ES lite Service for program management. (ES lite Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_ES_LITE_SERVICE<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\fltMgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR<br>O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC<br>O64 - Services: CurCS - C:\WINDOWS\gdrv.sys - gdrv (gdrv) .(.Windows ® 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper (getPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_GETPLUSHELPER<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV<br>O64 - Services: CurCS - C:\Windows\system32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER<br>O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE<br>O64 - Services: CurCS - (.not file.) - InCD File System (InCDfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDFS<br>O64 - Services: CurCS - (.not file.) - InCDrec (InCDrec) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDREC<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC<br>O64 - Services: CurCS - (.not file.) - ZoneAlarm Toolbar ISWKL (ISWKL) .(.Pas de propriétaire - Pas de description.) - LEGACY_ISWKL<br>O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS<br>O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Affichage des messages (Messenger) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_MESSENGER<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD<br>O64 - Services: CurCS - C:\WINDOWS\system32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB<br>O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS<br>O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER<br>O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Agent de protection d'accès réseau (napagent) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NAPAGENT<br>O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT<br>O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Ouverture de session réseau (Netlogon) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NETLOGON<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA<br>O64 - Services: CurCS - (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE<br>O64 - Services: CurCS - C:\Program Files\CDBurnerXP\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMSACCESSU<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS<br>O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NTLMSSP<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL<br>O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARPORT.sys - Parport (Parport) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARPORT<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM<br>O64 - Services: CurCS - C:\WINDOWS\system32\IoctlSvc.exe - PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE<br>O64 - Services: CurCS - C:\WINDOWS\system32\HPZipm12.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12<br>O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT<br>O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD<br>O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP<br>O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY<br>O64 - Services: CurCS - C:\WINDOWS\system32\locator.exe - Localisateur d'appels de procédure distante (RPC) (RpcLocator) .(.Microsoft Corporation - Rpc Locator.) - LEGACY_RPCLOCATOR<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k rpcss (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS<br>O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP<br>O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS<br>O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS<br>O64 - Services: CurCS - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - ServiceLayer (ServiceLayer) .(.Nokia - ServiceLayer Module.) - LEGACY_SERVICELAYER<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION<br>O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER<br>O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - MS Software Shadow Copy Provider (SwPrv) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV<br>O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost -k DComLaunch (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS<br>O64 - Services: CurCS - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST<br>O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA<br>O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE<br>O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP<br>O64 - Services: CurCS - C:\Windows\system32\vsdatant.sys - vsdatant (vsdatant) .(.Check Point Software Technologies LTD - TrueVector Device Driver.) - LEGACY_VSDATANT<br>O64 - Services: CurCS - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor (vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON<br>O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP<br>O64 - Services: CurCS - C:\Windows\system32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de numéro de série du lecteur multimédia portable (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN<br>O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV<br>O64 - Services: CurCS - C:\Windows\system32\DRIVERS\WudfPf.sys - Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF<br>O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Windows Driver Foundation - User-mode Driver Framework (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC<br>O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service d'approvisionnement réseau (xmlprov) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_XMLPROV<br><br><br>---\\ File Associations Shell Spawning (O67)<br>O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll<br>O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe<br>O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe<br>O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe<br>O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe<br>O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll<br>O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)<br>O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe<br>O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe<br>O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe<br><br><br>---\\ Start Menu Internet (SMI) (O68)<br>O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe<br>O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe<br><br><br>---\\ Search Browser Infection (SBI) (O69)<br>O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - <a href="http://search.live.com" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a><br>O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - <a href="http://www.bing.com" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a><br>O69 - SBI: SearchScopes [HKCU] {B92E9C19-2391-4420-A2B3-0ED981AAF20B} - (Yahoo! Search) - <a href="http://fr.search.yahoo.com" class="bbc_url" title="Lien externe" rel="nofollow external">Yahoo! Search - Recherche Web</a><br><br><br>---\\ Search Master Boot Record Infection (MBR)(O80)<br>Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, <a href="http://www.gmer.net" class="bbc_url" title="Lien externe" rel="nofollow external">GMER - Rootkit Detector and Remover</a><br>Run by Taranis at 04/09/2010 14:14:21<br>device: opened successfully<br>user: MBR read successfully<br>called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS <br>kernel: MBR read successfully<br>user & kernel MBR OK <br><br><br>---\\ Recherche des services démarrés par Svchost (SSS) (O83)<br>O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640]<br>O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496]<br>O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824]<br>O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464]<br>O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576]<br>O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488]<br>O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040]<br>O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952]<br>O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]<br>O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\System32\hidserv.dll [21504]<br>O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768]<br>O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096]<br>O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792]<br>O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144]<br>O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808]<br>O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]<br>O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576]<br>O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368]<br>O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248]<br>O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]<br>O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944]<br>O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]<br>O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800]<br>O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]<br>O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows™.) -- C:\WINDOWS\System32\tapisrv.dll [249856]<br>O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]<br>O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]<br>O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]<br>O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840]<br>O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568]<br>O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]<br>O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]<br>O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024]<br>O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376]<br>O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440]<br>O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]<br>O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]<br>O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]<br>O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]<br>O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136]<br><br><br><br>End of the scan (1409 lines in 04mn 12s)(0)

Voici le rapport d' OTM All processes killed ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrateur ->Temp folder emptied: 121064 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 2435812 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Mamounette ->Temp folder emptied: 98304 bytes ->Temporary Internet Files folder emptied: 81920 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 40223940 bytes ->Flash cache emptied: 1131 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: Papounet ->Temp folder emptied: 143781822 bytes ->Temporary Internet Files folder emptied: 237993 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 41133209 bytes ->Flash cache emptied: 824 bytes User: Taranis ->Temp folder emptied: 12709921 bytes ->Temporary Internet Files folder emptied: 306494 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 41717485 bytes ->Flash cache emptied: 514 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2351795 bytes %systemroot%\System32 .tmp files removed: 3072 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1139408 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 520192 bytes Total Files Cleaned = 274,00 mb OTM by OldTimer - Version 3.1.15.0 log created on 09032010_214216 Files moved on Reboot... C:\Documents and Settings\Taranis\Local Settings\Temp\~DF83FE.tmp moved successfully. C:\WINDOWS\temp\ZLT032ba.TMP moved successfully. Registry entries deleted on Reboot...

Désolé, J' ai finalement réussi à le charger.

Bonsoir pear, J' ai un souci. Lorsque je clique sur le lien OTM, Antivir le met en quarantaine. Je claque Antivir le temps de charger OTM ou il y a une autre solution ? Merci.

Bonjour pear, Cela va mieux. J' ai refait un scan MBAM après une mise à jour, résultat : 0. Il reste quelque chose apparemment. Une nouvelle analyse ZHPDiag. Rapport de ZHPDiag v1.26.49 par Nicolas Coolman, Update du 17/08/2010 Run by Taranis at 03/09/2010 18:12:20 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox (3.6. ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1790 MB (63% free) System drive C: has 88 GB (87%) free of 100 GB ---\\ Logged in mode Computer Name: MAISON-8F808655 User Name: Taranis All Users Names: Taranis, SUPPORT_388945a0, Papounet, Mamounette, HelpAssistant, Administrateur, Unselected Option: None Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 88 Go of 100 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 92 Go of 200 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 100 Go of 100 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 66 Go of 66 Go) G:\ CD-ROM drive (Not Inserted) H:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK ---\\ Processus lancés [MD5.2CC5E66C4A424FBB8E67F23AB7C5EA5C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [MD5.3F62CBAC09D8C039C488B5D00D21C3DC] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2384240] [MD5.703485A2C9EC94C35ED7EC56B13778B2] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336] [MD5.B2764687AA998206879AA53379C0AF31] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267432] [MD5.936209B6F93D0E11659CB2D229FE6583] - (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [212232] [MD5.2C31DCAA88D269E13A935910DBB4CC61] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136] [MD5.126A16F569122AE00AD3D12EF831D651] - (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.9B03B2D34D46F88638D51066531D08DC] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [53248] [MD5.8C91BD35AE9AA8B628EEC5E637BB1D0F] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [MD5.2D841B7B7F6DEC32162EDFCC69D61F42] - (.Nokia - ServiceLayer Module.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [615936] [MD5.16022DAAE7BB83C00D0210D5433216BA] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1037192] [MD5.CF4A0E2C240501C826977ACC5F0E8411] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [282792] [MD5.AE46C853FD91107E39A779EE86FB6387] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe [1312848] [MD5.895F37527D10256247F1D36E09CCDD27] - (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe [94208] [MD5.FB234CF688D9EE2619AB854BD9290C3C] - (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe [45056] [MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [248552] [MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [MD5.61C028ABA5E49573A6332F4A7C744E87] - (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe [360448] [MD5.B27935893393B1FD117D95A659310676] - (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe [1024000] [MD5.B346A8EA9B9D03D60260BB6E30427F09] - (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\Program Files\Fichiers communs\LogiShrd\KHAL3\KHALMNPR.EXE [112208] [MD5.A80D0704537C0EF97DB2BEF24B99AF1A] - (.Pas de propriétaire - SG Browser Hijacking Protection.) -- C:\Program Files\SpywareGuard\sgbhp.exe [233472] [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [MD5.F4631A1BE95655DE86C256776E49019A] - (.Nokia - USB Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe [138752] [MD5.46A9D1FCC55EC6A62FE1D2ACE79C6CA8] - (.Nokia - Serial Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe [120832] [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536] [MD5.3D177013918C8602E43D41742D9BCAC7] - (.Nicolas Coolman - Analyseur de rapports sécurité.) -- C:\Program Files\ZebHelpProcess\ZHP2.exe [2860032] [MD5.16A692EDA8253BEB5F3A588055F7869B] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZebHelpProcess\ZHPDiag.exe [482304] ---\\ Plugins de navigateurs Opera/Firefox(P1/P2) P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java™ Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.3".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16263.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.8.612.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.2] - (.the VideoLAN Team - Version 1.1.3, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft...er=6&ar=msnhome R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} . (.DeviceVM, Inc. - Browser Configuration Utility Address Bar S.) (1, 1, 7, 0) -- C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll R3 - URLSearchHook: SearchHook Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} . (.Pas de propriétaire - SpywareGuard Download Protection.) -- C:\Program Files\SpywareGuard\dlprotect.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} . (.Check Point Software Technologies - ZoneAlarm ForceField.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} . (.DeviceVM, Inc. - Browser Configuration Utility IE BHO for U.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java™ Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm ForceField.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll O3 - Toolbar: (no name) - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [bootSkin Startup Jobs] . (.Pas de propriétaire - Stardock BootSkin!.) -- C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe O4 - HKLM\..\Run: [CORSAIR_PLUtil] . (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe O4 - HKLM\..\Run: [PLFFAP] . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-21-1547161642-1897051121-725345543-1007-1547161642-1897051121-725345543-1005-1547161642-1897051121-725345543-1003\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: SpywareGuard.lnk . (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe O4 - Global Startup: StartClock.lnk . (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe ---\\ Restriction de l'accès aux options IE par l'Administrateur (O6) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restriction présente ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1265445165234 ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Browser Configuration Utility Service (BCUService) . (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: ES lite Service for program management. (ES lite Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Desktop General: WallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: 127.0.0.1 localhost ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1265220527.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r88.) -- C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdPPM.sys O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys O41 - Driver: vsdatant (vsdatant) . (.Check Point Software Technologies LTD - TrueVector Device Driver.) - C:\Windows\system32\vsdatant.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Professional Edition - (.ABBYY.) [HKLM] -- {F9000000-0001-0000-0000-074957833700} O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798} O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8} O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 9.3.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Audacity 1.2.6 - (.Pas de propriétaire.) [HKLM] -- Audacity O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: BootSkin - (.Pas de propriétaire.) [HKLM] -- BootSkin O42 - Logiciel: Browser Configuration Utility - (.DeviceVM.) [HKLM] -- {5B363E1D-8C36-4458-BAE4-D5081999E094} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {7054ED85-498D-4D20-906F-14646AEC5581} O42 - Logiciel: Corsair Flash Voyager Utility - (.Pas de propriétaire.) [HKLM] -- {41FC7856-55A1-41A6-94B1-15A1E3C050B8} O42 - Logiciel: Cult3D Acrobat Plug-in - (.Pas de propriétaire.) [HKLM] -- Cult3D Acrobat Plug-in O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70} O42 - Logiciel: DriverMax 5 - (.Innovative Solutions.) [HKLM] -- DMX5 O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition O42 - Logiciel: EasySaver B9.0610.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95} O42 - Logiciel: Hercules WebCam Station - (.Pas de propriétaire.) [HKLM] -- {D208F4A7-6B73-4C2A-8B1E-8756FCBA831E} O42 - Logiciel: Hercules Webcam - (.Pas de propriétaire.) [HKLM] -- {A250D351-A07F-4D5D-AB6C-693C69B9BFAF} O42 - Logiciel: HotFix Q0306270 - (.Pas de propriétaire.) [HKLM] -- {7D9B8EE1-7E8E-411C-8F36-2A26D2D20D5F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: IZArc 3.81 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8} O42 - Logiciel: Java™ 6 Update 21 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} O42 - Logiciel: KeyScrambler - (.QFX Software Corporation.) [HKLM] -- KeyScrambler O42 - Logiciel: Logitech SetPoint 6.0 - (.Logitech.) [HKLM] -- SP6 O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27} O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {B9706D6B-754E-4D81-8EE9-393008D57EDB} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9084040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wudf01009 O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {E6BAE954-487E-488B-BC4E-2E69E54E8117} O42 - Logiciel: Mozilla Firefox (3.6. - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6. O42 - Logiciel: Mozilla Thunderbird (3.1.2) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.2) O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {F1FDAA01-988C-423F-AC12-0D8F333943FD} O42 - Logiciel: Nokia Maps Updater 1.0.12 - (.Pas de propriétaire.) [HKLM] -- Nokia Maps Updater O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- Nokia Ovi Suite O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- {8070452B-15D6-4169-B9B9-FCC3B54588AD} O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM] -- {A0D65C73-F2C5-432F-8788-90F8A2E99B98} O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {225DB4AA-3CFF-47E8-B3C8-6DAD713E986E} O42 - Logiciel: Nokia Software Updater - (.Nokia Corporation.) [HKLM] -- {09C468CA-2940-466A-AAE8-DCC0C6E9323C} O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080} O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM] -- {2D10FC46-1D96-44C4-8855-85F21B9B011E} O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM] -- {1373559F-6DC6-44EA-9079-6ABDCCE8CDAD} O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {29F563F4-8807-4496-8463-441EAA0E96AB} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/05/2008 3.7) - (.Nokia.) [HKLM] -- CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1) - (.Nokia.) [HKLM] -- E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 4.5) - (.Nokia.) [HKLM] -- 34EA302E7F4CBD17A19E33BBCB72363234956D7E O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 7.01.0.7) - (.Nokia.) [HKLM] -- EEEE705096F837B7907659F100C9FE6DA001970F O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693 O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1} O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B} O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1100 series - (.Pas de propriétaire.) [HKLM] -- HP PSC 1100 Series O42 - Logiciel: Q-Dir - (.Pas de propriétaire.) [HKLM] -- Q-Dir O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525} O42 - Logiciel: RagTime Solo - (.Pas de propriétaire.) [HKLM] -- RagTime Solo O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Revo Uninstaller 1.89 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: SpywareBlaster 4.3 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster O42 - Logiciel: SpywareGuard v2.2 - (.Javacool Software LLC.) [HKLM] -- SpywareGuard O42 - Logiciel: StartClock 3.4 - (.Grégory HARGOUS.) [HKLM] -- StartClock O42 - Logiciel: Sélecteur d'installation de Microsoft Works 2004 - (.Pas de propriétaire.) [HKLM] -- Works2004Setup O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B} O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Winmail Reader 1.1.12 - (.Kopf.) [HKLM] -- Winmail Reader O42 - Logiciel: XnView 1.97.5 - (.Gougelet Pierre-e.) [HKLM] -- XnView O42 - Logiciel: ZebHelpProcess 2.37 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm O42 - Logiciel: ZoneAlarm Toolbar - (.Check Point Software Technologies.) [HKLM] -- ZoneAlarm Toolbar O42 - Logiciel: eBay Icon - (.AD ON Multimedia Advertising GmbH.) [HKLM] -- eBay Icon O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: xp-AntiSpy 3.97-3 - (.Christian Taubenheim.) [HKLM] -- xp-AntiSpy ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\AppDataLow\ISWVolatile] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Astonsoft] [HKCU\Software\Avira] [HKCU\Software\Canneverbe Limited] [HKCU\Software\CheckPoint] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Corsair] [HKCU\Software\Cycore] [HKCU\Software\DeviceVM] [HKCU\Software\Gadwin Systems] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IDAVLab] [HKCU\Software\IM Providers] [HKCU\Software\IZSoftware] [HKCU\Software\Innovative Solutions] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Jetico] [HKCU\Software\Lavalys] [HKCU\Software\Leadertech] [HKCU\Software\Logitech] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Netscape] [HKCU\Software\Nokia] [HKCU\Software\ODBC] [HKCU\Software\Oak Technology] [HKCU\Software\OpenOffice.org] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\QFX Software] [HKCU\Software\Realtek] [HKCU\Software\Safer Networking Limited] [HKCU\Software\SoftwareOK.de] [HKCU\Software\Sysinternals] [HKCU\Software\TAdvCheckList] [HKCU\Software\Theorica] [HKCU\Software\Trend Micro] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSRevoGroup] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinmailReader] [HKCU\Software\XnView] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Zone Labs] [HKCU\Software\cybelsoft] [HKCU\Software\xp-AntiSpy] [HKLM\Software\ABBYY] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alienware] [HKLM\Software\AppDataLow] [HKLM\Software\ArcSoft] [HKLM\Software\Avira] [HKLM\Software\Borland] [HKLM\Software\C07ft5Y] [HKLM\Software\CheckPoint] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\DeviceVM] [HKLM\Software\Gemplus] [HKLM\Software\Gigabyte] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDAVLab] [HKLM\Software\Innovative Solutions] [HKLM\Software\Intel] [HKLM\Software\JavaRa] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\Nokia Mobile Phones] [HKLM\Software\Nokia] [HKLM\Software\ODBC] [HKLM\Software\OMSI] [HKLM\Software\Oak Technology] [HKLM\Software\OmniVision] [HKLM\Software\OpenOffice.org] [HKLM\Software\PC Connectivity Solution] [HKLM\Software\PCSuite] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\QFX Software] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Secunia] [HKLM\Software\Stardock] [HKLM\Software\Sun Microsystems] [HKLM\Software\TrendMicro] [HKLM\Software\TuneUp] [HKLM\Software\Uniblue] [HKLM\Software\VideoLAN] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\X-AVCSD] [HKLM\Software\Zone Labs] [HKLM\Software\cybelsoft] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 9.0 O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\AMD O43 - CFD:Common File Directory ----D- C:\Program Files\Astonsoft O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity O43 - CFD:Common File Directory ----D- C:\Program Files\Avira O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\CDBurnerXP O43 - CFD:Common File Directory ----D- C:\Program Files\CheckPoint O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\Corsair O43 - CFD:Common File Directory ----D- C:\Program Files\Defraggler O43 - CFD:Common File Directory --H-D- C:\Program Files\DeviceVM O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\Gigabyte O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Innovative Solutions O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\IZArc O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\JavaRa O43 - CFD:Common File Directory ----D- C:\Program Files\JRE O43 - CFD:Common File Directory ----D- C:\Program Files\KeyScrambler O43 - CFD:Common File Directory ----D- C:\Program Files\Lavalys O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech O43 - CFD:Common File Directory ----D- C:\Program Files\ma-config.com O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works Suite 2004 O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Thunderbird O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\NOS O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3 O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\PC Connectivity Solution O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator O43 - CFD:Common File Directory ----D- C:\Program Files\Q-Dir O43 - CFD:Common File Directory ----D- C:\Program Files\RagTime Solo O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files\RegSeeker O43 - CFD:Common File Directory ----D- C:\Program Files\SafeXP O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareBlaster O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareGuard O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\StartClock O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN O43 - CFD:Common File Directory ----D- C:\Program Files\VS Revo Group O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\Winmail Reader O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\XnView O43 - CFD:Common File Directory ----D- C:\Program Files\xp-AntiSpy O43 - CFD:Common File Directory ----D- C:\Program Files\ZebHelpProcess O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files\Zone Labs O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ABBYY O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ArcSoft O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Borland Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LogiShrd O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\PCSuite O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.00000000000000000000000000000000] - 03/09/2010 - 17:11:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.00000000000000000000000000000000] - 03/09/2010 - 17:00:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.00000000000000000000000000000000] - 03/09/2010 - 17:00:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.C6A79BBFF71B8D83F9ADE8E2A4648B12] - 03/09/2010 - 16:57:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [500812] O44 - LFC:[MD5.7E0E4C60408C99AC4050E08ADC2BF32A] - 03/09/2010 - 16:57:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1094606] O44 - LFC:[MD5.A63E88AF842EC101F736293127FCE835] - 03/09/2010 - 16:57:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [67448] O44 - LFC:[MD5.A34AF276B8F8AC67F4485241586525F0] - 03/09/2010 - 16:57:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [80712] O44 - LFC:[MD5.95FCED42B5B829D0D05A530771621F7B] - 03/09/2010 - 16:57:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [432492] O44 - LFC:[MD5.F5E1852A3E1D3AF74859AE3829E4E453] - 03/09/2010 - 16:54:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ativvaxx.cap [219120] O44 - LFC:[MD5.B2D1DDC268D9B900C5EDE7E3E202E5E8] - 03/09/2010 - 16:54:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [5711] O44 - LFC:[MD5.379810E74A3DA84E4130B5E229F3916D] - 03/09/2010 - 16:53:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\service.log [144] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/09/2010 - 16:53:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.D556CB79967E92B5CC69686D16C1D846] - 03/09/2010 - 16:52:41 ---A- . (.Windows ® 2000 DDK provider - GIGABYTE Tools.) -- C:\WINDOWS\gdrv.sys [17488] O44 - LFC:[MD5.C49582596A0D160FB1C3C1182955E217] - 03/09/2010 - 16:52:21 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.EE7C1F2499B5D7E0885123523D51D60E] - 03/09/2010 - 16:51:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1639589] O44 - LFC:[MD5.B31ECC8704EE87AADD684B6F120F9D0E] - 02/09/2010 - 17:15:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.log [117305] O44 - LFC:[MD5.C5AD6B60FB6ED96FB29C9C7DC3EA2FFC] - 02/09/2010 - 17:15:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.xml [524] O44 - LFC:[MD5.E5039ABB056C3215A7AD895477A4219C] - 31/08/2010 - 20:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EventSystem.log [95628] O44 - LFC:[MD5.01830591B17164C668C0FC447AF8930C] - 01/09/2010 - 17:28:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Q-Dir.ini [3600] O44 - LFC:[MD5.D6CC816315DB456DBF834E59BB98BA14] - 31/08/2010 - 16:24:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.DAA169C075E645111151458155FDA9B2] - 30/08/2010 - 19:58:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\COM+.log [1092] O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 26/08/2010 - 18:14:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224] O44 - LFC:[MD5.D0E675E1479A8BE24D30EEC2B8A152E7] - 26/08/2010 - 17:46:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\jupdate-1.6.0_21-b07.log [5222] O44 - LFC:[MD5.FB234CF688D9EE2619AB854BD9290C3C] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\System32\HotFixQ0306270.exe [45056] O44 - LFC:[MD5.9B03B2D34D46F88638D51066531D08DC] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\System32\IoctlSvc.exe [53248] O44 - LFC:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\System32\drivers\plff.sys [7424] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.8F840A0F7D1240BD4FB306FBC5613CFF] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [532] O44 - LFC:[MD5.85661F752B156BEC10CB77FCD04981EE] - 07/08/2010 - 16:05:03 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [223] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - SpywareGuard.Handler - {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - outlook.exe - StripMyRights.exe /D /L N O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech™ DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 14:58:56 ---A- . (.Arcsoft, Inc. - Arcsoft® ASPI Shell.) -- C:\WINDOWS\system32\drivers\afc.sys O58 - SDL:[MD5.B34B1AB0A7690A0E2301FEC6D17B2FC1] - 30/07/2010 - 20:28:37 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 05/08/2008 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 16/04/2007 - 16:46:34 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys O58 - SDL:[MD5.F620AE184CB3BCBE32ED40982957BE41] - 03/06/2009 - 22:00:18 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:[MD5.A88D29D928AD2B830E87B53E3F9BC182] - 16/02/2010 - 12:24:01 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:[MD5.1289E9A5D9118A25A13C0009519088E3] - 01/03/2010 - 08:05:24 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:[MD5.C3963D85B721A7F80D8A55F4E2867A3A] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmb.sys O58 - SDL:[MD5.3859C69A77793180548802DAC9F34A38] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/08/2001 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 08:36:06 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys O58 - SDL:[MD5.863CC3A82C63C9F60ACF2E85D5310620] - 09/03/2003 - 05:31:00 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys O58 - SDL:[MD5.08CB72E95DD75B61F2966B311D0E4366] - 09/03/2003 - 05:31:02 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys O58 - SDL:[MD5.CA990306ED4EF732AF9695BFF24FC96F] - 09/03/2003 - 05:31:02 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys O58 - SDL:[MD5.83A174AC30D12186E5C2E56D362D3604] - 04/10/2009 - 22:33:14 ---A- . (.QFX Software Corporation - KeyScrambler Keyboard Encryption Driver.) -- C:\WINDOWS\system32\drivers\keyscrambler.sys O58 - SDL:[MD5.F5E165B4E3DF145F6E8BF3C0573F94D8] - 10/11/2009 - 12:54:52 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.B46E39B8AE439D7CE75A923E7F950040] - 10/11/2009 - 12:55:08 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.C0382C12B784394BF16C2D8F0F1F17DC] - 26/03/2010 - 17:44:00 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\WINDOWS\system32\drivers\LNonPnP.sys O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 04/01/2006 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys O58 - SDL:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 06/10/2003 - 10:29:08 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\system32\drivers\plff.sys O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.00FD6811350E175585ABCF7D4A61DD90] - 24/04/2009 - 03:22:16 R--A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys O58 - SDL:[MD5.0C5A04F0FFAEBC25AC815EE14441A8CB] - 02/06/2009 - 11:02:46 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys O58 - SDL:[MD5.1674A34F0084BFFDEC2DCDB1625A87F0] - 21/05/2009 - 02:03:54 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 11/05/2009 - 08:12:49 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:[MD5.F92254B0BCFCD10CAAC7BCCC7CB7F467] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\StarOpen.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/08/2001 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.0CCADC7391021376EDBB8AA649D04E68] - 26/02/2010 - 13:32:46 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys O58 - SDL:[MD5.68B4F83CCCF70A2FF32EE142C234332A] - 26/02/2010 - 13:32:58 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.5B7512131637D60EA79EF8960AA01575] - 02/03/2010 - 20:54:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\vidstub.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/04/2008 - 08:50:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 13/04/2008 - 08:49:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 13/04/2008 - 08:49:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 13/04/2008 - 08:49:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys O58 - SDL:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 04/12/2009 - 16:34:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 01/09/2010 - 06:10:46 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFAC1E.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 06:13:55 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFC65.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 06:13:56 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF517D.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 06:14:01 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF4E2E.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@bing[2].txt [241] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@c.live[1].txt [68] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@live[2].txt [241] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@msn[2].txt [239] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@windowsmarketplace[2].txt [269] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Cookies\papounet@zune[2].txt [241] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\xxx.xx@hotmail.fr\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\xxx.xx@hotmail.fr\DBStore\dbstore.ini [181] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\xxx.xx@hotmail.fr\DBStore\edb.chk [8192] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [186685] O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [37] O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [328] O61 - LFC:Last File Created 01/09/2010 - 06:14:47 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF9F39.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 06:14:48 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFDAFB.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 06:14:51 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFA7FA.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 06:22:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFA28A.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 [840] O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 [134] O61 - LFC:Last File Created 01/09/2010 - 06:25:11 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF4DC1.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 06:36:42 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFD994.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 10:57:11 ---A- C:\Documents And Settings\Mamounette\Application Data\wklnhst.dat [4124] O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Bureau.lnk [308] O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Nouveau Document Microsoft Word.doc.lnk [538] O61 - LFC:Last File Created 01/09/2010 - 11:02:13 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Modèles\Normal.dot [50176] O61 - LFC:Last File Created 01/09/2010 - 11:02:13 ---A- C:\Documents And Settings\Mamounette\Recent\Nouveau Document Microsoft Word.doc.lnk [608] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Modèles.lnk [775] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Normal.dot.lnk [878] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Word10.pip [1656] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\fbc8.tmp [60492] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 --H-- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\index.dat [487] O61 - LFC:Last File Created 01/09/2010 - 11:23:55 ---A- C:\Documents And Settings\Mamounette\Recent\20100901115444499.pdf.lnk [538] O61 - LFC:Last File Created 01/09/2010 - 11:24:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\SharedDataEvents [3072] O61 - LFC:Last File Created 01/09/2010 - 15:52:24 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\HWYK4DNM\s.ytimg.com\videostats.sol [199] O61 - LFC:Last File Created 01/09/2010 - 16:38:07 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236339] O61 - LFC:Last File Created 01/09/2010 - 17:20:07 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Boîte de ré 29\00294823-0000001C.eml [143771] O61 - LFC:Last File Created 01/09/2010 - 17:20:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Éléments en 784\18BE6784-00000008.eml [1843] O61 - LFC:Last File Created 01/09/2010 - 17:20:27 ---A- C:\Documents And Settings\Mamounette\Bureau\Cinquantenaire inscription journée 49n.odt [102225] O61 - LFC:Last File Created 01/09/2010 - 17:20:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\sv6n8.tmp [28663] O61 - LFC:Last File Created 01/09/2010 - 17:22:37 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Histories.xcu [6018] O61 - LFC:Last File Created 01/09/2010 - 17:25:16 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF77BA.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 17:25:38 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF78FB.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 17:28:22 ---A- C:\Documents And Settings\Mamounette\Application Data\Q-Dir\Q-Dir.ini [3389] O61 - LFC:Last File Created 01/09/2010 - 17:28:26 ---A- C:\Documents And Settings\Taranis\Application Data\Q-Dir\start.qdr [690] O61 - LFC:Last File Created 01/09/2010 - 17:37:17 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [103295] O61 - LFC:Last File Created 01/09/2010 - 17:53:27 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 01/09/2010 - 17:55:23 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 01/09/2010 - 17:55:23 -SHA- C:\Documents And Settings\LocalService\Cookies\index.dat [16384] O61 - LFC:Last File Created 01/09/2010 - 17:55:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF236A.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 17:55:42 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4A54.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 17:55:42 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFB766.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024] O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 01/09/2010 - 17:56:57 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010090120100902\index.dat [32768] O61 - LFC:Last File Created 01/09/2010 - 17:57:16 ---A- C:\Documents And Settings\LocalService\NTUSER.DAT [245760] O61 - LFC:Last File Created 01/09/2010 - 17:57:16 -SHA- C:\Documents And Settings\LocalService\ntuser.ini [184] O61 - LFC:Last File Created 01/09/2010 - 17:59:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF158A.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:00:45 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF67F.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:00:46 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4F7B.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:00:49 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFF432.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:03:47 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF4143.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:04:31 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFC943.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:04:38 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFE530.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:07:28 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF4FBF.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:08:26 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF7666.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:08:26 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFBD17.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:08:33 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFB92B.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:28:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF2724.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:28:41 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF8C9B.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:28:42 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFF8E7.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 18:28:44 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF8FF4.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:33:45 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236637] O61 - LFC:Last File Created 01/09/2010 - 18:36:13 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFBDA3.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 18:41:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\xxx.xx@hotmail.fr\DBStore\Backup\new\WLCalendarStore.edb [2121728] O61 - LFC:Last File Created 01/09/2010 - 18:41:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\WLCalendarStore.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:41:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\xt@hotmail.fr\DBStore\Backup\new\edb0003E.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb0003E.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:41:31 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.edb [4218880] O61 - LFC:Last File Created 01/09/2010 - 18:41:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:41:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\edb00021.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb00021.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:41:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.edb [4218880] O61 - LFC:Last File Created 01/09/2010 - 18:41:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb00021.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:41 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:41:41 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\edb00021.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 18:41:41 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.pat [16384] O61 - LFC:Last File Created 01/09/2010 - 18:55:47 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\svi10.tmp [28663] O61 - LFC:Last File Created 01/09/2010 - 19:38:37 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Éléments en 784\00294823-00000009.eml [141968] O61 - LFC:Last File Created 01/09/2010 - 19:40:18 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\svhmg.tmp [28663] O61 - LFC:Last File Created 01/09/2010 - 19:40:19 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1915] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [747] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [8471] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1310] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [2438] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Recent\Cinquantenaire inscription journée 49n.odt.lnk [643] O61 - LFC:Last File Created 01/09/2010 - 19:47:51 ---A- C:\Documents And Settings\Mamounette\Application Data\XnView\xnview.ini [13089] O61 - LFC:Last File Created 01/09/2010 - 19:48:10 ---A- C:\Documents And Settings\Mamounette\Recent\Photo-5.jpg.lnk [486] O61 - LFC:Last File Created 01/09/2010 - 19:50:29 ---A- C:\Documents And Settings\Mamounette\Recent\Copie de Photo-5.jpg.lnk [533] O61 - LFC:Last File Created 01/09/2010 - 20:03:56 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [46908] O61 - LFC:Last File Created 01/09/2010 - 20:05:45 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF4663.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:05:47 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF878E.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:05:58 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFF6BA.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 20:08:07 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187] O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [234605] O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [110766] O61 - LFC:Last File Created 01/09/2010 - 20:09:01 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1 [47926] O61 - LFC:Last File Created 01/09/2010 - 20:09:56 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Sent-1.msf [4777] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\junklog.html [2431] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\training.dat [6876] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\traits.dat [8] O61 - LFC:Last File Created 01/09/2010 - 20:15:45 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF6903.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:15:46 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF2127.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:15:49 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFBE23.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 20:16:43 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFCD2.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:16:44 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF465C.tmp [16384] O61 - LFC:Last File Created 01/09/2010 - 20:16:47 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF21DE.tmp [98304] O61 - LFC:Last File Created 01/09/2010 - 20:18:20 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\XUL.mfl [2334394] O61 - LFC:Last File Created 01/09/2010 - 20:19:14 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\localstore.rdf [10038] O61 - LFC:Last File Created 02/09/2010 - 11:51:53 -SHA- C:\Documents And Settings\Mamounette\Local Settings\Historique\History.IE5\MSHist012010090220100903\index.dat [32768] O61 - LFC:Last File Created 02/09/2010 - 11:52:13 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF42C3.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 11:53:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.MSMessageStore [2121728] O61 - LFC:Last File Created 02/09/2010 - 11:53:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb0004E.log [2097152] O61 - LFC:Last File Created 02/09/2010 - 11:53:16 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.pat [16384] O61 - LFC:Last File Created 02/09/2010 - 11:53:16 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\edb0004E.log [2097152] O61 - LFC:Last File Created 02/09/2010 - 11:53:16 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.pat [16384] O61 - LFC:Last File Created 02/09/2010 - 12:03:38 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 02/09/2010 - 16:09:20 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236339] O61 - LFC:Last File Created 02/09/2010 - 16:13:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\00294823-0000004E.eml [4091] O61 - LFC:Last File Created 02/09/2010 - 16:49:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\18BE6784-0000004F.eml [6811] O61 - LFC:Last File Created 02/09/2010 - 16:53:03 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\4AE13D6C-00000050.eml [1945] O61 - LFC:Last File Created 02/09/2010 - 17:09:20 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Deleted Items\1E597D0C-00000121.eml [8368] O61 - LFC:Last File Created 02/09/2010 - 17:11:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl.old [92] O61 - LFC:Last File Created 02/09/2010 - 17:12:48 ---A- C:\Documents And Settings\Mamounette\Recent\000 - AR Impôts 2009-1273758899890.pdf.lnk [907] O61 - LFC:Last File Created 02/09/2010 - 17:13:29 ---A- C:\Documents And Settings\Mamounette\Recent\002 - Détail impôt 2009.pdf.lnk [874] O61 - LFC:Last File Created 02/09/2010 - 17:13:46 ---A- C:\Documents And Settings\Mamounette\Recent\010 - calcul IR 2009 avec enfant et perco.pdf.lnk [928] O61 - LFC:Last File Created 02/09/2010 - 17:14:15 ---A- C:\Documents And Settings\Mamounette\Recent\AR-1273758958093.pdf.lnk [853] O61 - LFC:Last File Created 02/09/2010 - 17:14:39 ---A- C:\Documents And Settings\Mamounette\Recent\001 - Resume 2009-1273758692781.pdf.lnk [898] O61 - LFC:Last File Created 02/09/2010 - 17:14:39 ---A- C:\Documents And Settings\Mamounette\Recent\Impôts 2009.lnk [626] O61 - LFC:Last File Created 02/09/2010 - 17:15:39 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\AdobeSysFnt09.lst [51685] O61 - LFC:Last File Created 02/09/2010 - 17:18:29 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\UserCache.bin [32960] O61 - LFC:Last File Created 02/09/2010 - 17:19:02 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF9FAB.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:19:03 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFBE94.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:19:12 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF415B.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 17:19:27 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196] O61 - LFC:Last File Created 02/09/2010 - 17:19:29 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187] O61 - LFC:Last File Created 02/09/2010 - 17:19:30 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [57576] O61 - LFC:Last File Created 02/09/2010 - 17:19:33 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634] O61 - LFC:Last File Created 02/09/2010 - 17:19:33 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1103451] O61 - LFC:Last File Created 02/09/2010 - 17:20:10 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048] O61 - LFC:Last File Created 02/09/2010 - 17:20:15 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [104980] O61 - LFC:Last File Created 02/09/2010 - 17:24:45 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-SCAN[1].txt [5221] O61 - LFC:Last File Created 02/09/2010 - 17:27:20 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-CLEAN[1].txt [5492] O61 - LFC:Last File Created 02/09/2010 - 17:28:54 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010090220100903\index.dat [32768] O61 - LFC:Last File Created 02/09/2010 - 17:29:40 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4170.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:29:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF53CE.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [453] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [211] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBTB1-Global.reg [143] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [1399] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Taranis.reg [270] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Taranis.reg [473] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP4-Taranis.reg [88] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Taranis.reg [177] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF21B7.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 17:30:10 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [291] O61 - LFC:Last File Created 02/09/2010 - 17:35:03 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\user.xml [23243] O61 - LFC:Last File Created 02/09/2010 - 17:41:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\svdoo.tmp [28663] O61 - LFC:Last File Created 02/09/2010 - 17:41:13 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 02/09/2010 - 17:41:15 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Linguistic.xcu [10020] O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048] O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594] O61 - LFC:Last File Created 02/09/2010 - 17:41:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12639] O61 - LFC:Last File Created 02/09/2010 - 17:41:53 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 02/09/2010 - 17:44:58 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert_override.txt [1720] O61 - LFC:Last File Created 02/09/2010 - 17:52:05 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\site-confim.xml [2654] O61 - LFC:Last File Created 02/09/2010 - 17:53:19 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236637] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1614] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [376] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [3884] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [1484] O61 - LFC:Last File Created 02/09/2010 - 17:53:32 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\gamelist.xml [37] O61 - LFC:Last File Created 02/09/2010 - 17:53:50 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFB398.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 17:54:27 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF26C1.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:54:27 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF5871.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 17:54:31 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFAACF.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Archives.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Drafts.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Templates.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Archives.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Drafts.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Templates.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:41 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX [10122660] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\3DB78327d01 [63021] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\504A194Bd01 [66641] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5837404Bd01 [58614] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D23CE59Dd01 [64554] O61 - LFC:Last File Created 02/09/2010 - 18:00:15 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D0D8D5D8d01 [31254] O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\05C68366d01 [36882] O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A7FC289Dd01 [18936] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\2318CD3Fd01 [22647] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\41A46494d01 [27141] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\715D71CEd01 [35431] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7B4EF581d01 [28587] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7C6E5708d01 [107703] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\E8461768d01 [28207] O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A4356D5Cd01 [24918] O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D664BA74d01 [20770] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5233A958d01 [22770] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A05F80A3d01 [56974] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A44A3705d01 [23814] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\BDE75931d01 [43395] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\DCDAB2A9d01 [55987] O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1.msf [4709] O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\pluginreg.dat [6291] O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\folderTree.json [316] O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\session.json [663] O61 - LFC:Last File Created 02/09/2010 - 18:01:11 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\global-messages-db.sqlite [615424] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.msf [4128] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Trash-1.msf [1979] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.msf [4593] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Trash.msf [2597] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\Mail\smart mailboxes\Trash.msf [1638] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\cert8.db [65536] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\key3.db [16384] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\panacea.dat [16113] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\prefs.js [13691] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\virtualFolders.dat [252] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_001_ [97660] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_002_ [161729] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_003_ [253487] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 02/09/2010 - 18:13:17 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl [92] O61 - LFC:Last File Created 02/09/2010 - 18:14:38 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl.old [700] O61 - LFC:Last File Created 02/09/2010 - 18:16:22 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFF355.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:16:23 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF445C.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:16:26 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF887F.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 18:16:35 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl.old [92] O61 - LFC:Last File Created 02/09/2010 - 18:18:28 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF7949.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:18:29 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF9761.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:18:33 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFC922.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 18:20:27 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF71B.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 18:21:25 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF8D62.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:21:26 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFB4C9.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 18:21:31 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF5FD1.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 18:23:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFC9C.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 19:50:34 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Inbox\7B9C53ED-000000DE.eml [4583] O61 - LFC:Last File Created 02/09/2010 - 19:59:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFDA6A.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 19:59:53 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF5286.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 19:59:54 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFADD4.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 20:00:49 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7777] O61 - LFC:Last File Created 02/09/2010 - 20:07:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF5F80.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 20:07:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFA37D.tmp [16384] O61 - LFC:Last File Created 02/09/2010 - 20:07:07 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF4C7A.tmp [98304] O61 - LFC:Last File Created 02/09/2010 - 20:08:05 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236866] O61 - LFC:Last File Created 02/09/2010 - 20:24:45 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [2880004] O61 - LFC:Last File Created 02/09/2010 - 20:28:05 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236637] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [40593] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56518] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240] O61 - LFC:Last File Created 02/09/2010 - 20:28:06 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [31621120] O61 - LFC:Last File Created 02/09/2010 - 20:28:15 -SHA- C:\Documents And Settings\Taranis\Recent\Desktop.ini [150] O61 - LFC:Last File Created 02/09/2010 - 20:28:16 -SH-- C:\Documents And Settings\Taranis\ntuser.ini [184] O61 - LFC:Last File Created 02/09/2010 - 21:04:33 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [47550] O61 - LFC:Last File Created 02/09/2010 - 21:04:43 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\x@hotmail.fr\oeconfig.xml [19588] O61 - LFC:Last File Created 02/09/2010 - 21:04:48 ----- C:\Documents And Settings\Mamounette\Cookies\index.dat [32768] O61 - LFC:Last File Created 02/09/2010 - 21:04:48 ----- C:\Documents And Settings\Mamounette\Local Settings\Historique\History.IE5\index.dat [114688] O61 - LFC:Last File Created 02/09/2010 - 21:04:48 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\account{40ABED59-A09A-4768-B71D-F0E514FC1989}.oeaccount [5164] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.edb [2113536] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\dbstore.ini [181] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\edb.chk [8192] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\RssFeeds.xml [264] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [41] O61 - LFC:Last File Created 02/09/2010 - 21:04:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [637556] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@bing[3].txt [239] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@live[3].txt [239] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@msn[4].txt [237] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@windowsmarketplace[4].txt [267] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@zune[3].txt [239] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Messenger\ContactsLog.txt [536504] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.edb [4210688] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\dbstore.ini [174] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\edb.chk [8192] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.edb [4210688] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\dbstore.ini [174] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\edb.chk [8192] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.MSMessageStore [2113536] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.chk [8192] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.log [2097152] O61 - LFC:Last File Created 02/09/2010 - 21:04:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [800] O61 - LFC:Last File Created 02/09/2010 - 21:14:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7009] O61 - LFC:Last File Created 02/09/2010 - 21:14:04 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [12559] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236339] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [163840] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [29007] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [286720] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [25531] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [32903168] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl [1004] O61 - LFC:Last File Created 02/09/2010 - 21:15:05 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [28927] O61 - LFC:Last File Created 02/09/2010 - 21:15:10 -SH-- C:\Documents And Settings\Mamounette\ntuser.ini [184] O61 - LFC:Last File Created 03/09/2010 - 16:01:34 -SHA- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\MSHist012010090320100904\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:01:53 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF9C64.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:01:55 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFB0AB.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:02:11 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFB800.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 16:08:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196] O61 - LFC:Last File Created 03/09/2010 - 16:08:28 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [57791] O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634] O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1104210] O61 - LFC:Last File Created 03/09/2010 - 16:15:06 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl [92] O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\Gmail - Rechargement WEB_WAP.pdf.lnk [504] O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\PDF.lnk [341] O61 - LFC:Last File Created 03/09/2010 - 16:16:44 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [110766] O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594] O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [86068] O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12642] O61 - LFC:Last File Created 03/09/2010 - 16:27:26 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 03/09/2010 - 16:27:39 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [2381150] O61 - LFC:Last File Created 03/09/2010 - 16:30:38 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7810] O61 - LFC:Last File Created 03/09/2010 - 16:30:49 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236866] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [38808] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56810] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [32468992] O61 - LFC:Last File Created 03/09/2010 - 16:36:27 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\svdgg.tmp [28663] O61 - LFC:Last File Created 03/09/2010 - 16:36:31 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 03/09/2010 - 16:36:47 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\Twunk002.MTX [0] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 ---A- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\AN5J4D18\oXMLStoreUnit[1].xml [56] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\Twain001.Mtx [3] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\Twunk001.MTX [156] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:43:49 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\TWAIN.LOG [3280] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [5327] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Histories.xcu [10598] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [713] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [12290] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1312] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [5777] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\OOo.lnk [604] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\Scann pleine page.odt.lnk [822] O61 - LFC:Last File Created 03/09/2010 - 16:51:18 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [16348] O61 - LFC:Last File Created 03/09/2010 - 16:51:20 ---A- C:\Documents And Settings\Papounet\Application Data\Logitech\SetPoint\gamelist.xml [37] O61 - LFC:Last File Created 03/09/2010 - 16:51:24 -SH-- C:\Documents And Settings\Papounet\ntuser.ini [184] O61 - LFC:Last File Created 03/09/2010 - 16:52:22 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 03/09/2010 - 16:52:33 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 03/09/2010 - 16:52:33 -SHA- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384] O61 - LFC:Last File Created 03/09/2010 - 16:52:35 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\sched.log [165562] O61 - LFC:Last File Created 03/09/2010 - 16:52:42 -SHA- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1007\Credentials [10050] O61 - LFC:Last File Created 03/09/2010 - 16:52:42 -SHA- C:\Documents And Settings\Mamounette\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 03/09/2010 - 16:52:56 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\AdobeARM.log [27034] O61 - LFC:Last File Created 03/09/2010 - 16:53:01 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\avguard.log [527354] O61 - LFC:Last File Created 03/09/2010 - 16:53:04 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\EVENTDB\avevtdb.dbe [27648] O61 - LFC:Last File Created 03/09/2010 - 16:53:08 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFA9EE.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 16:53:09 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [4218] O61 - LFC:Last File Created 03/09/2010 - 16:53:09 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log [5904] O61 - LFC:Last File Created 03/09/2010 - 16:53:09 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [341] O61 - LFC:Last File Created 03/09/2010 - 16:53:09 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [9119] O61 - LFC:Last File Created 03/09/2010 - 16:53:24 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 03/09/2010 - 16:53:24 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 03/09/2010 - 16:53:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963] O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1005\Credentials [14578] O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\Desktop.htt [2702] O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\IETldCache\index.dat [245760] O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\AdobeARM.log [12474] O61 - LFC:Last File Created 03/09/2010 - 16:53:58 ----- C:\Documents And Settings\Papounet\Cookies\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:53:58 ----- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\index.dat [131072] O61 - LFC:Last File Created 03/09/2010 - 16:53:58 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DFCA8D.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:54:00 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF1BD5.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:54:01 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963] O61 - LFC:Last File Created 03/09/2010 - 16:54:03 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\LaunchApplication\Settings.xml [1451] O61 - LFC:Last File Created 03/09/2010 - 16:54:05 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\~DF47FA.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 16:54:07 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\NGLALog.txt [5493] O61 - LFC:Last File Created 03/09/2010 - 16:54:33 -SHA- C:\Documents And Settings\Taranis\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1003\Credentials [10042] O61 - LFC:Last File Created 03/09/2010 - 16:54:33 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010090320100904\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:54:33 -SHA- C:\Documents And Settings\Taranis\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 03/09/2010 - 16:54:35 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\JOBS\updjob.avj [1496] O61 - LFC:Last File Created 03/09/2010 - 16:54:35 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\AdobeARM.log [5454] O61 - LFC:Last File Created 03/09/2010 - 16:54:35 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF12F6.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:54:36 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4D77.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 16:54:37 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 03/09/2010 - 16:54:37 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 03/09/2010 - 16:54:39 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFCFD4.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 16:54:40 ---A- C:\Documents And Settings\All Users\Application Data\ATI\ACE\Profiles.xml [188] O61 - LFC:Last File Created 03/09/2010 - 16:54:40 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Profiles.xml [10959] O61 - LFC:Last File Created 03/09/2010 - 16:54:57 -SHA- C:\Documents And Settings\Taranis\IETldCache\index.dat [245760] O61 - LFC:Last File Created 03/09/2010 - 16:55:07 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\PC Suite\statistics.dat [1184] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [126] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [87] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [60] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [5612931] O61 - LFC:Last File Created 03/09/2010 - 16:57:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\jusched.log [23015] O61 - LFC:Last File Created 03/09/2010 - 16:58:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Temp\jusched.log [4340] O61 - LFC:Last File Created 03/09/2010 - 16:59:35 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\jusched.log [1207] O61 - LFC:Last File Created 03/09/2010 - 17:00:30 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-09-03 (18-00-30).txt [1047] O61 - LFC:Last File Created 03/09/2010 - 17:00:54 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl [92] O61 - LFC:Last File Created 03/09/2010 - 17:01:09 -SHA- C:\Documents And Settings\Taranis\Cookies\index.dat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:01:09 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 17:06:56 ---A- C:\Documents And Settings\Taranis\Recent\ZHP Diag.lnk [362] O61 - LFC:Last File Created 03/09/2010 - 17:06:56 ---A- C:\Documents And Settings\Taranis\Recent\ZHPDiag MD5_03-09-10.Txt.lnk [523] O61 - LFC:Last File Created 03/09/2010 - 17:12:02 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\INMEM000.REM [0] O61 - LFC:Last File Created 03/09/2010 - 17:12:12 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [78018] O61 - LFC:Last File Created 31/08/2010 - 16:26:36 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFED0.tmp [98304] O61 - LFC:Last File Created 31/08/2010 - 16:27:18 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\IDX\master.idx [56] O61 - LFC:Last File Created 31/08/2010 - 16:27:39 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2010-08-31-17-27-16.log [21482] O61 - LFC:Last File Created 31/08/2010 - 16:27:39 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\66405765.avl [1858] O61 - LFC:Last File Created 31/08/2010 - 16:27:40 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@notifier.avira[1].txt [357] O61 - LFC:Last File Created 31/08/2010 - 16:30:03 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010083120100901\index.dat [32768] O61 - LFC:Last File Created 31/08/2010 - 16:30:06 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFDEC0.tmp [16384] O61 - LFC:Last File Created 31/08/2010 - 16:30:07 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4A85.tmp [16384] O61 - LFC:Last File Created 31/08/2010 - 16:30:13 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF442B.tmp [98304] O61 - LFC:Last File Created 31/08/2010 - 16:31:09 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.log [32978] O61 - LFC:Last File Created 31/08/2010 - 16:31:11 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.cache [2448] O61 - LFC:Last File Created 31/08/2010 - 16:31:11 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.ini [2672] O61 - LFC:Last File Created 31/08/2010 - 16:31:11 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\xpti.dat [104999] O61 - LFC:Last File Created 31/08/2010 - 16:31:12 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\compreg.dat [163211] O61 - LFC:Last File Created 31/08/2010 - 16:40:05 ---A- C:\Documents And Settings\Taranis\Application Data\Microsoft\Modèles\Normal.dot [37376] O61 - LFC:Last File Created 31/08/2010 - 16:40:06 ---A- C:\Documents And Settings\Taranis\Application Data\Microsoft\Office\Fichiers récents\Modèles.lnk [764] O61 - LFC:Last File Created 31/08/2010 - 16:40:06 ---A- C:\Documents And Settings\Taranis\Application Data\Microsoft\Office\Fichiers récents\Normal.dot.lnk [867] O61 - LFC:Last File Created 31/08/2010 - 16:40:06 ---A- C:\Documents And Settings\Taranis\Application Data\Microsoft\Office\Word10.pip [1636] O61 - LFC:Last File Created 31/08/2010 - 16:40:06 --H-- C:\Documents And Settings\Taranis\Application Data\Microsoft\Office\Fichiers récents\index.dat [518] O61 - LFC:Last File Created 31/08/2010 - 17:15:05 ---A- C:\Documents And Settings\Taranis\Application Data\Sun\Java\Deployment\tmp\si\JavaControlPanel-x86_1137 [11] O61 - LFC:Last File Created 31/08/2010 - 17:15:53 ---A- C:\Documents And Settings\Taranis\Application Data\Sun\Java\Deployment\deployment.properties [598] O61 - LFC:Last File Created 31/08/2010 - 17:15:59 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegBHO-Global.reg [1883] O61 - LFC:Last File Created 31/08/2010 - 17:36:29 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup4.ini [234373] O61 - LFC:Last File Created 31/08/2010 - 18:00:42 -SHA- C:\Documents And Settings\Mamounette\IETldCache\index.dat [245760] O61 - LFC:Last File Created 31/08/2010 - 18:10:58 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [236339] O61 - LFC:Last File Created 31/08/2010 - 18:10:58 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-08-31.json [46908] O61 - LFC:Last File Created 31/08/2010 - 20:11:48 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-08-31.json [104980] O61 - LFC:Last File Created 31/08/2010 - 20:38:49 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Histories.xcu [3256] O61 - LFC:Last File Created 31/08/2010 - 20:38:49 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1312] O61 - LFC:Last File Created 31/08/2010 - 21:09:26 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP5.23672 [153] O61 - LFC:Last File Created 31/08/2010 - 21:09:26 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP5.53917 [154] O61 - LFC:Last File Created 31/08/2010 - 21:09:26 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP5.91103 [155] O61 - LFC:Last File Created 31/08/2010 - 21:09:27 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-08-31 (22-09-27).txt [1510] O61 - LFC:Last File Created 31/08/2010 - 21:12:28 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4333.tmp [16384] O61 - LFC:Last File Created 31/08/2010 - 21:13:07 ----- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF9F4.tmp [98304] O61 - LFC:Last File Created 31/08/2010 - 21:27:32 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [234111] O61 - LFC:Last File Created 31/08/2010 - 21:29:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF6B0D.tmp [98304] ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.) O63 - Logiciel: HiJackThis - (.Trend Micro.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - ASP.NET State Service (aspnet_state) .(.Microsoft Corporation - Microsoft ASP.NET State Server.) - LEGACY_ASPNET_STATE O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - (.not file.) - BCFTDI (bcftdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_BCFTDI O64 - Services: CurCS - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe - Browser Configuration Utility Service (BCUService) .(.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - LEGACY_BCUSERVICE O64 - Services: CurCS - (.not file.) - BC_Filter (bc_filter) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_FILTER O64 - Services: CurCS - (.not file.) - BC_IP_Filter (bc_ip_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_IP_F O64 - Services: CurCS - (.not file.) - BC_Engine (bc_ngn) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_NGN O64 - Services: CurCS - (.not file.) - BC_PAT_Filter (bc_pat_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PAT_F O64 - Services: CurCS - (.not file.) - BC_Protocol_Filter (bc_prt_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PRT_F O64 - Services: CurCS - (.not file.) - BC_TDI_Filter (bc_tdi_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_TDI_F O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vidstub.sys - BootScreen (BootScreen) .(.Pas de propriétaire - Pas de description.) - LEGACY_BOOTSCREEN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - Application système COM+ (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k DcomLaunch (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\system32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\system32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EAPHOST O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe - ES lite Service for program management. (ES lite Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_ES_LITE_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\fltMgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\WINDOWS\gdrv.sys - gdrv (gdrv) .(.Windows ® 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper (getPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_GETPLUSHELPER O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - C:\Windows\system32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - (.not file.) - InCD File System (InCDfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDFS O64 - Services: CurCS - (.not file.) - InCDrec (InCDrec) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDREC O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys - ZoneAlarm Toolbar ISWKL (ISWKL) .(.Check Point Software Technologies - ZoneAlarm ForceField.) - LEGACY_ISWKL O64 - Services: CurCS - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe - ZoneAlarm Toolbar IswSvc (IswSvc) .(.Check Point Software Technologies - ZoneAlarm ForceField.) - LEGACY_ISWSVC O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Affichage des messages (Messenger) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_MESSENGER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\system32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Agent de protection d'accès réseau (napagent) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NAPAGENT O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Ouverture de session réseau (Netlogon) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NETLOGON O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - C:\Program Files\CDBurnerXP\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMSACCESSU O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NTLMSSP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARPORT.sys - Parport (Parport) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARPORT O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\system32\IoctlSvc.exe - PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\HPZipm12.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - C:\WINDOWS\system32\locator.exe - Localisateur d'appels de procédure distante (RPC) (RpcLocator) .(.Microsoft Corporation - Rpc Locator.) - LEGACY_RPCLOCATOR O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k rpcss (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - ServiceLayer (ServiceLayer) .(.Nokia - ServiceLayer Module.) - LEGACY_SERVICELAYER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - MS Software Shadow Copy Provider (SwPrv) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - C:\WINDOWS\System32\svchost -k DComLaunch (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\system32\vsdatant.sys - vsdatant (vsdatant) .(.Check Point Software Technologies LTD - TrueVector Device Driver.) - LEGACY_VSDATANT O64 - Services: CurCS - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor (vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Windows\system32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de numéro de série du lecteur multimédia portable (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\WudfPf.sys - Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Windows Driver Foundation - User-mode Driver Framework (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service d'approvisionnement réseau (xmlprov) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_XMLPROV ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing O69 - SBI: SearchScopes [HKCU] {B92E9C19-2391-4420-A2B3-0ED981AAF20B} - (Yahoo! Search) - Yahoo! Search - Recherche Web ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, GMER - Rootkit Detector and Remover Run by Taranis at 03/09/2010 18:14:42 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\System32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows™.) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136] End of the scan (1474 lines in 03mn 19s)(0)

Bonsoir pear, Voici les rapports demandés .======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 01/09/10 à 16:00 Contact: AdRemover.contact[AT]gmail.com Site web: Ad_Remover C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 18:23:22 le 02/09/2010, Mode normal Microsoft Windows XP Professionnel Service Pack 3 (X86) Taranis@MAISON-8F808655 ( ) ============== RECHERCHE ============== Service: "Application Updater" Présent 0,Dossier trouvé: C:\Program Files\Application Updater 0,Dossier trouvé: C:\Documents and Settings\Administrateur\Application Data\DesktopIcon 0,Dossier trouvé: C:\Documents and Settings\Taranis\Application Data\pdfforge 0,Dossier trouvé: C:\Documents and Settings\Mamounette\Application Data\pdfforge 0,Dossier trouvé: C:\Documents and Settings\Papounet\Application Data\pdfforge 0,Dossier trouvé: C:\Program Files\pdfforge Toolbar 0,Dossier trouvé: C:\Documents and Settings\Taranis\Application Data\Search Settings 0,Dossier trouvé: C:\Documents and Settings\Mamounette\Application Data\Search Settings 0,Dossier trouvé: C:\Documents and Settings\Papounet\Application Data\Search Settings 3,Fichier trouvé: C:\WINDOWS\Installer\7818f.msi 1,Clé trouvée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé trouvée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé trouvée: HKLM\Software\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} 1,Clé trouvée: HKLM\Software\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} 1,Clé trouvée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB} 0,Clé trouvée: HKLM\Software\Application Updater 0,Clé trouvée: HKLM\Software\pdfforge 0,Clé trouvée: HKLM\Software\Search Settings 0,Clé trouvée: HKCU\Software\Search Settings 0,Clé trouvée: HKCU\Software\AppDataLow\Software\pdfforge 0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32} 0,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings 0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings 0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.8 (fr)] ** -- C:\Documents and Settings\Taranis\Application Data\Mozilla\FireFox\Profiles\1nmzkxk0.default\Prefs.js -- browser.startup.homepage, browser.startup.homepage_override.mstone, rv:1.9.1.1 -- C:\Documents and Settings\Mamounette\Application Data\Mozilla\FireFox\Profiles\8yv5jtro.default\Prefs.js -- browser.download.dir, F:\\Firefox Mamounette browser.search.defaultenginename, Google browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= browser.startup.homepage, hxxp://www.google.fr/webhp?hl=fr&tab=nw browser.startup.homepage_override.mstone, rv:1.9.2.8 -- C:\Documents and Settings\Papounet\Application Data\Mozilla\FireFox\Profiles\8yv5jtro.default\Prefs.js -- browser.download.dir, F:\\Firefox Papounet browser.search.defaultenginename, Google browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= browser.search.selectedEngine, VeoSearch browser.startup.homepage, hxxp://news.google.fr/news?ned=fr browser.startup.homepage_override.mstone, rv:1.9.2.8 ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Do404Search: 0x01000000 Enable Browser Extensions: yes Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Show_ToolBar: yes Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157 Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157 [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 02/09/2010 (3616 Octet(s)) Fin à: 18:24:45, 02/09/2010 ============== E.O.F ============== ======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 01/09/10 à 16:00 Contact: AdRemover.contact[AT]gmail.com Site web: Ad_Remover C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 18:26:06 le 02/09/2010, Mode normal Microsoft Windows XP Professionnel Service Pack 3 (X86) Taranis@MAISON-8F808655 ( ) ============== ACTION(S) ============== Service: "Application Updater" Stoppé et supprimé 0,Dossier supprimé: C:\Program Files\Application Updater 0,Dossier supprimé: C:\Documents and Settings\Administrateur\Application Data\DesktopIcon 0,Dossier supprimé: C:\Documents and Settings\Taranis\Application Data\pdfforge 0,Dossier supprimé: C:\Documents and Settings\Mamounette\Application Data\pdfforge 0,Dossier supprimé: C:\Documents and Settings\Papounet\Application Data\pdfforge 0,Dossier supprimé: C:\Program Files\pdfforge Toolbar 0,Dossier supprimé: C:\Documents and Settings\Taranis\Application Data\Search Settings 0,Dossier supprimé: C:\Documents and Settings\Mamounette\Application Data\Search Settings 0,Dossier supprimé: C:\Documents and Settings\Papounet\Application Data\Search Settings 3,Fichier supprimé: C:\WINDOWS\Installer\7818f.msi (!) -- Fichiers temporaires supprimés. 1,Clé supprimée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} 1,Clé supprimée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 1,Clé supprimée: HKLM\Software\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48} 1,Clé supprimée: HKLM\Software\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5} 1,Clé supprimée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB} 0,Clé supprimée: HKLM\Software\Application Updater 0,Clé supprimée: HKLM\Software\pdfforge 0,Clé supprimée: HKLM\Software\Search Settings 0,Clé supprimée: HKCU\Software\Search Settings 0,Clé supprimée: HKCU\Software\AppDataLow\Software\pdfforge 0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32} 0,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings 0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings 0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D} 0,Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [3.6.8 (fr)] ** -- C:\Documents and Settings\Taranis\Application Data\Mozilla\FireFox\Profiles\1nmzkxk0.default\Prefs.js -- browser.startup.homepage, browser.startup.homepage_override.mstone, rv:1.9.1.1 -- C:\Documents and Settings\Mamounette\Application Data\Mozilla\FireFox\Profiles\8yv5jtro.default\Prefs.js -- browser.download.dir, F:\\Firefox Mamounette browser.search.defaultenginename, Google browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= browser.startup.homepage, hxxp://www.google.fr/webhp?hl=fr&tab=nw browser.startup.homepage_override.mstone, rv:1.9.2.8 -- C:\Documents and Settings\Papounet\Application Data\Mozilla\FireFox\Profiles\8yv5jtro.default\Prefs.js -- browser.download.dir, F:\\Firefox Papounet browser.search.defaultenginename, Google browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= browser.search.selectedEngine, VeoSearch browser.startup.homepage, hxxp://news.google.fr/news?ned=fr browser.startup.homepage_override.mstone, rv:1.9.2.8 ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 98 Fichier(s) C:\Program Files\Ad-Remover\Backup: 13 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 02/09/2010 (1327 Octet(s)) Fin à: 18:27:19, 02/09/2010 ============== E.O.F ==============

Bonsoir à tous, Après avoir éliminé trois cochonneries suite à un scan MBAM, j' ai retrouvé un peu de rapidité mais encore plus en désactivant ce processus : "Lanceur de processus serveur DCOM". Le problème est que ce truc la en mode désactivé ou en mode manuel, MSN ne veut plus démarrer car cela bloque la mise à jour du calendrier. Peut on désactiver ce calendrier qui ne me sert pas du tout et peut être je pourrais désactiver ce processus (Oui, je sais, virer MSN serait le mieux mais là je n' ai vraiment pas le choix. Faut faire avec). Globalement, j' ai retrouvé une rapidité de démarrage plus habituelle. En gros 1" en comptant l' accès à l' écran de choix des sessions et un démarrage de session. C' est nettement mieux.

Bonsoir pear, Tout d' abord, Merci de votre aide. Voici le rapport, j' en ai refait un à l' instant car après avoir posté ce sujet, j' ai réalisé un scan MBAM qui s' est révélé fructueux car il a éliminé ça : Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Mais il en reste encore à priori. Rapport de ZHPDiag v1.26.49 par Nicolas Coolman, Update du 17/08/2010 Run by Taranis at 01/09/2010 18:30:39 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox (3.6. ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1790 MB (59% free) System drive C: has 87 GB (86%) free of 100 GB ---\\ Logged in mode Computer Name: MAISON-8F808655 User Name: Taranis All Users Names: Taranis, SUPPORT_388945a0, Papounet, Mamounette, HelpAssistant, Administrateur, Unselected Option: O1,O45,O61,O65,O82 Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 87 Go of 100 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 92 Go of 200 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 100 Go of 100 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 66 Go of 66 Go) G:\ CD-ROM drive (Not Inserted) H:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK ---\\ Processus lancés [MD5.2CC5E66C4A424FBB8E67F23AB7C5EA5C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [MD5.3F62CBAC09D8C039C488B5D00D21C3DC] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2384240] [MD5.703485A2C9EC94C35ED7EC56B13778B2] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336] [MD5.B2764687AA998206879AA53379C0AF31] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267432] [MD5.8C91BD35AE9AA8B628EEC5E637BB1D0F] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [MD5.936209B6F93D0E11659CB2D229FE6583] - (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [212232] [MD5.2C31DCAA88D269E13A935910DBB4CC61] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136] [MD5.126A16F569122AE00AD3D12EF831D651] - (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.9B03B2D34D46F88638D51066531D08DC] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [53248] [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [MD5.16022DAAE7BB83C00D0210D5433216BA] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1037192] [MD5.CF4A0E2C240501C826977ACC5F0E8411] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [282792] [MD5.AE46C853FD91107E39A779EE86FB6387] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe [1312848] [MD5.895F37527D10256247F1D36E09CCDD27] - (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe [94208] [MD5.FB234CF688D9EE2619AB854BD9290C3C] - (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe [45056] [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536] [MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [248552] [MD5.B346A8EA9B9D03D60260BB6E30427F09] - (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\Program Files\Fichiers communs\LogiShrd\KHAL3\KHALMNPR.EXE [112208] [MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [MD5.61C028ABA5E49573A6332F4A7C744E87] - (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe [360448] [MD5.B27935893393B1FD117D95A659310676] - (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe [1024000] [MD5.A80D0704537C0EF97DB2BEF24B99AF1A] - (.Pas de propriétaire - SG Browser Hijacking Protection.) -- C:\Program Files\SpywareGuard\sgbhp.exe [233472] [MD5.BACCDA841C689D1CBA941F478E8ED24B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [910296] [MD5.642FA80C2C43EE609313746AA305DC86] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [14808] [MD5.16A692EDA8253BEB5F3A588055F7869B] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZebHelpProcess\ZHPDiag.exe [482304] ---\\ Plugins de navigateurs Opera/Firefox(P1/P2) P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java™ Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.3".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16263.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.8.612.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.2] - (.the VideoLAN Team - Version 1.1.3, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} . (.DeviceVM, Inc. - Browser Configuration Utility Address Bar S.) (1, 1, 7, 0) -- C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll R3 - URLSearchHook: SearchHook Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)) -- C:\WINDOWS\system32\ieframe.dll R3 - URLSearchHook: SearchHook Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Spigot, Inc. - Search Settings IE.) (1, 2, 3, 16) -- C:\Program Files\pdfforge Toolbar\SearchSettings.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} . (.Pas de propriétaire - SpywareGuard Download Protection.) -- C:\Program Files\SpywareGuard\dlprotect.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} . (.Check Point Software Technologies - ZoneAlarm ForceField.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} . (.DeviceVM, Inc. - Browser Configuration Utility IE BHO for U.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Spigot, Inc. - Search Settings IE.) -- C:\Program Files\pdfforge Toolbar\SearchSettings.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java™ Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm ForceField.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll O3 - Toolbar: (no name) - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [bootSkin Startup Jobs] . (.Pas de propriétaire - Stardock BootSkin!.) -- C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe O4 - HKLM\..\Run: [CORSAIR_PLUtil] . (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe O4 - HKLM\..\Run: [PLFFAP] . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe O4 - HKLM\..\Run: [searchSettings] . (.Spigot, Inc. - Search Settings application.) -- C:\Program Files\pdfforge Toolbar\SearchSettings.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-21-1547161642-1897051121-725345543-1007-1547161642-1897051121-725345543-1003\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: SpywareGuard.lnk . (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe O4 - Global Startup: StartClock.lnk . (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe ---\\ Restriction de l'accès aux options IE par l'Administrateur (O6) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restriction présente ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1265445165234 ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Browser Configuration Utility Service (BCUService) . (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: ES lite Service for program management. (ES lite Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Desktop General: WallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: 127.0.0.1 localhost ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1265220527.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r88.) -- C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdPPM.sys O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys O41 - Driver: vsdatant (vsdatant) . (.Check Point Software Technologies LTD - TrueVector Device Driver.) - C:\Windows\system32\vsdatant.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Professional Edition - (.ABBYY.) [HKLM] -- {F9000000-0001-0000-0000-074957833700} O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798} O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8} O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 9.3.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Audacity 1.2.6 - (.Pas de propriétaire.) [HKLM] -- Audacity O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: BootSkin - (.Pas de propriétaire.) [HKLM] -- BootSkin O42 - Logiciel: Browser Configuration Utility - (.DeviceVM.) [HKLM] -- {5B363E1D-8C36-4458-BAE4-D5081999E094} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {7054ED85-498D-4D20-906F-14646AEC5581} O42 - Logiciel: Corsair Flash Voyager Utility - (.Pas de propriétaire.) [HKLM] -- {41FC7856-55A1-41A6-94B1-15A1E3C050B8} O42 - Logiciel: Cult3D Acrobat Plug-in - (.Pas de propriétaire.) [HKLM] -- Cult3D Acrobat Plug-in O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70} O42 - Logiciel: DriverMax 5 - (.Innovative Solutions.) [HKLM] -- DMX5 O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition O42 - Logiciel: EasySaver B9.0610.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95} O42 - Logiciel: Hercules WebCam Station - (.Pas de propriétaire.) [HKLM] -- {D208F4A7-6B73-4C2A-8B1E-8756FCBA831E} O42 - Logiciel: Hercules Webcam - (.Pas de propriétaire.) [HKLM] -- {A250D351-A07F-4D5D-AB6C-693C69B9BFAF} O42 - Logiciel: HotFix Q0306270 - (.Pas de propriétaire.) [HKLM] -- {7D9B8EE1-7E8E-411C-8F36-2A26D2D20D5F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: IZArc 3.81 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8} O42 - Logiciel: Java™ 6 Update 21 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} O42 - Logiciel: KeyScrambler - (.QFX Software Corporation.) [HKLM] -- KeyScrambler O42 - Logiciel: Logitech SetPoint 6.0 - (.Logitech.) [HKLM] -- SP6 O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27} O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {B9706D6B-754E-4D81-8EE9-393008D57EDB} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9084040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wudf01009 O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {E6BAE954-487E-488B-BC4E-2E69E54E8117} O42 - Logiciel: Mozilla Firefox (3.6. - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6. O42 - Logiciel: Mozilla Thunderbird (3.1.2) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.2) O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {F1FDAA01-988C-423F-AC12-0D8F333943FD} O42 - Logiciel: Nokia Maps Updater 1.0.12 - (.Pas de propriétaire.) [HKLM] -- Nokia Maps Updater O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- Nokia Ovi Suite O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- {8070452B-15D6-4169-B9B9-FCC3B54588AD} O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM] -- {A0D65C73-F2C5-432F-8788-90F8A2E99B98} O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {225DB4AA-3CFF-47E8-B3C8-6DAD713E986E} O42 - Logiciel: Nokia Software Updater - (.Nokia Corporation.) [HKLM] -- {09C468CA-2940-466A-AAE8-DCC0C6E9323C} O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080} O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM] -- {2D10FC46-1D96-44C4-8855-85F21B9B011E} O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM] -- {1373559F-6DC6-44EA-9079-6ABDCCE8CDAD} O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {29F563F4-8807-4496-8463-441EAA0E96AB} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/05/2008 3.7) - (.Nokia.) [HKLM] -- CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1) - (.Nokia.) [HKLM] -- E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 4.5) - (.Nokia.) [HKLM] -- 34EA302E7F4CBD17A19E33BBCB72363234956D7E O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 7.01.0.7) - (.Nokia.) [HKLM] -- EEEE705096F837B7907659F100C9FE6DA001970F O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693 O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1} O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B} O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1100 series - (.Pas de propriétaire.) [HKLM] -- HP PSC 1100 Series O42 - Logiciel: Q-Dir - (.Pas de propriétaire.) [HKLM] -- Q-Dir O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525} O42 - Logiciel: RagTime Solo - (.Pas de propriétaire.) [HKLM] -- RagTime Solo O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Revo Uninstaller 1.89 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: SpywareBlaster 4.3 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster O42 - Logiciel: SpywareGuard v2.2 - (.Javacool Software LLC.) [HKLM] -- SpywareGuard O42 - Logiciel: StartClock 3.4 - (.Grégory HARGOUS.) [HKLM] -- StartClock O42 - Logiciel: Sélecteur d'installation de Microsoft Works 2004 - (.Pas de propriétaire.) [HKLM] -- Works2004Setup O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B} O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Winmail Reader 1.1.12 - (.Kopf.) [HKLM] -- Winmail Reader O42 - Logiciel: XnView 1.97.5 - (.Gougelet Pierre-e.) [HKLM] -- XnView O42 - Logiciel: ZebHelpProcess 2.37 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm O42 - Logiciel: ZoneAlarm Toolbar - (.Check Point Software Technologies.) [HKLM] -- ZoneAlarm Toolbar O42 - Logiciel: eBay Icon - (.AD ON Multimedia Advertising GmbH.) [HKLM] -- eBay Icon O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: pdfforge Toolbar v1.1.2 - (.Spigot, Inc..) [HKLM] -- {5791B7D3-8B34-4218-9750-6A8E45D0AD32} O42 - Logiciel: xp-AntiSpy 3.97-3 - (.Christian Taubenheim.) [HKLM] -- xp-AntiSpy ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\AppDataLow\ISWVolatile] [HKCU\Software\AppDataLow\Software\pdfforge] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Astonsoft] [HKCU\Software\Avira] [HKCU\Software\Canneverbe Limited] [HKCU\Software\CheckPoint] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Corsair] [HKCU\Software\Cycore] [HKCU\Software\DeviceVM] [HKCU\Software\Gadwin Systems] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IDAVLab] [HKCU\Software\IM Providers] [HKCU\Software\IZSoftware] [HKCU\Software\Innovative Solutions] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Jetico] [HKCU\Software\Lavalys] [HKCU\Software\Leadertech] [HKCU\Software\Logitech] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Netscape] [HKCU\Software\Nokia] [HKCU\Software\ODBC] [HKCU\Software\Oak Technology] [HKCU\Software\OpenOffice.org] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\QFX Software] [HKCU\Software\Realtek] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Search Settings] [HKCU\Software\SoftwareOK.de] [HKCU\Software\Sysinternals] [HKCU\Software\TAdvCheckList] [HKCU\Software\Theorica] [HKCU\Software\Trend Micro] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSRevoGroup] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinmailReader] [HKCU\Software\XnView] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Zone Labs] [HKCU\Software\cybelsoft] [HKCU\Software\xp-AntiSpy] [HKLM\Software\ABBYY] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alienware] [HKLM\Software\AppDataLow] [HKLM\Software\Application Updater] [HKLM\Software\ArcSoft] [HKLM\Software\Avira] [HKLM\Software\Borland] [HKLM\Software\C07ft5Y] [HKLM\Software\CheckPoint] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\DeviceVM] [HKLM\Software\Gemplus] [HKLM\Software\Gigabyte] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDAVLab] [HKLM\Software\Innovative Solutions] [HKLM\Software\Intel] [HKLM\Software\JavaRa] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\Nokia Mobile Phones] [HKLM\Software\Nokia] [HKLM\Software\ODBC] [HKLM\Software\OMSI] [HKLM\Software\Oak Technology] [HKLM\Software\OmniVision] [HKLM\Software\OpenOffice.org] [HKLM\Software\PC Connectivity Solution] [HKLM\Software\PCSuite] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\QFX Software] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Search Settings] [HKLM\Software\Secunia] [HKLM\Software\Stardock] [HKLM\Software\Sun Microsystems] [HKLM\Software\TrendMicro] [HKLM\Software\TuneUp] [HKLM\Software\Uniblue] [HKLM\Software\VideoLAN] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\X-AVCSD] [HKLM\Software\Zone Labs] [HKLM\Software\cybelsoft] [HKLM\Software\mozilla.org] [HKLM\Software\pdfforge] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 9.0 O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\AMD O43 - CFD:Common File Directory ----D- C:\Program Files\Application Updater O43 - CFD:Common File Directory ----D- C:\Program Files\Astonsoft O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity O43 - CFD:Common File Directory ----D- C:\Program Files\Avira O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\CDBurnerXP O43 - CFD:Common File Directory ----D- C:\Program Files\CheckPoint O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\Corsair O43 - CFD:Common File Directory ----D- C:\Program Files\Defraggler O43 - CFD:Common File Directory --H-D- C:\Program Files\DeviceVM O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\Gigabyte O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Innovative Solutions O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\IZArc O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\JavaRa O43 - CFD:Common File Directory ----D- C:\Program Files\JRE O43 - CFD:Common File Directory ----D- C:\Program Files\KeyScrambler O43 - CFD:Common File Directory ----D- C:\Program Files\Lavalys O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech O43 - CFD:Common File Directory ----D- C:\Program Files\ma-config.com O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works Suite 2004 O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Thunderbird O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\NOS O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3 O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\PC Connectivity Solution O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator O43 - CFD:Common File Directory ----D- C:\Program Files\pdfforge Toolbar O43 - CFD:Common File Directory ----D- C:\Program Files\Q-Dir O43 - CFD:Common File Directory ----D- C:\Program Files\RagTime Solo O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files\RegSeeker O43 - CFD:Common File Directory ----D- C:\Program Files\SafeXP O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareBlaster O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareGuard O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\StartClock O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN O43 - CFD:Common File Directory ----D- C:\Program Files\VS Revo Group O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\Winmail Reader O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\XnView O43 - CFD:Common File Directory ----D- C:\Program Files\xp-AntiSpy O43 - CFD:Common File Directory ----D- C:\Program Files\ZebHelpProcess O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files\Zone Labs O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ABBYY O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ArcSoft O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Borland Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LogiShrd O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\PCSuite O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.342DE1B90A3E7D0734801FEF0FA96AE2] - 31/08/2010 - 21:20:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.E5039ABB056C3215A7AD895477A4219C] - 31/08/2010 - 20:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EventSystem.log [95628] O44 - LFC:[MD5.01830591B17164C668C0FC447AF8930C] - 01/09/2010 - 17:28:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Q-Dir.ini [3600] O44 - LFC:[MD5.F5E1852A3E1D3AF74859AE3829E4E453] - 01/09/2010 - 17:24:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ativvaxx.cap [219120] O44 - LFC:[MD5.D6CC816315DB456DBF834E59BB98BA14] - 31/08/2010 - 16:24:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.00000000000000000000000000000000] - 01/09/2010 - 11:24:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [263] O44 - LFC:[MD5.C5AD6B60FB6ED96FB29C9C7DC3EA2FFC] - 01/09/2010 - 11:24:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.xml [524] O44 - LFC:[MD5.B1023EC73D5B7AB0931A41F90227CD77] - 01/09/2010 - 11:24:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.log [116140] O44 - LFC:[MD5.7E0E4C60408C99AC4050E08ADC2BF32A] - 01/09/2010 - 06:40:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1094606] O44 - LFC:[MD5.A63E88AF842EC101F736293127FCE835] - 01/09/2010 - 06:40:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [67448] O44 - LFC:[MD5.A34AF276B8F8AC67F4485241586525F0] - 01/09/2010 - 06:40:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [80712] O44 - LFC:[MD5.95FCED42B5B829D0D05A530771621F7B] - 01/09/2010 - 06:40:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [432492] O44 - LFC:[MD5.C6A79BBFF71B8D83F9ADE8E2A4648B12] - 01/09/2010 - 06:40:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [500812] O44 - LFC:[MD5.00000000000000000000000000000000] - 01/09/2010 - 06:36:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.379810E74A3DA84E4130B5E229F3916D] - 01/09/2010 - 06:36:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\service.log [144] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/09/2010 - 06:36:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.D556CB79967E92B5CC69686D16C1D846] - 01/09/2010 - 06:36:24 ---A- . (.Windows ® 2000 DDK provider - GIGABYTE Tools.) -- C:\WINDOWS\gdrv.sys [17488] O44 - LFC:[MD5.C49582596A0D160FB1C3C1182955E217] - 01/09/2010 - 06:36:10 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.CE77A81D5FB9C21323CC0421A6920E35] - 01/09/2010 - 06:25:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1629410] O44 - LFC:[MD5.DAA169C075E645111151458155FDA9B2] - 30/08/2010 - 19:58:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\COM+.log [1092] O44 - LFC:[MD5.5A39D39D9AAF5D5177CD81DF65B8D6F5] - 30/08/2010 - 18:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [1367] O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 26/08/2010 - 18:14:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224] O44 - LFC:[MD5.D0E675E1479A8BE24D30EEC2B8A152E7] - 26/08/2010 - 17:46:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\jupdate-1.6.0_21-b07.log [5222] O44 - LFC:[MD5.FB234CF688D9EE2619AB854BD9290C3C] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\System32\HotFixQ0306270.exe [45056] O44 - LFC:[MD5.9B03B2D34D46F88638D51066531D08DC] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\System32\IoctlSvc.exe [53248] O44 - LFC:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\System32\drivers\plff.sys [7424] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.8F840A0F7D1240BD4FB306FBC5613CFF] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [532] O44 - LFC:[MD5.85661F752B156BEC10CB77FCD04981EE] - 07/08/2010 - 16:05:03 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [223] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - SpywareGuard.Handler - {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - outlook.exe - StripMyRights.exe /D /L N O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech™ DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 14:58:56 ---A- . (.Arcsoft, Inc. - Arcsoft® ASPI Shell.) -- C:\WINDOWS\system32\drivers\afc.sys O58 - SDL:[MD5.B34B1AB0A7690A0E2301FEC6D17B2FC1] - 30/07/2010 - 20:28:37 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 05/08/2008 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 16/04/2007 - 16:46:34 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys O58 - SDL:[MD5.F620AE184CB3BCBE32ED40982957BE41] - 03/06/2009 - 22:00:18 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:[MD5.A88D29D928AD2B830E87B53E3F9BC182] - 16/02/2010 - 12:24:01 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:[MD5.1289E9A5D9118A25A13C0009519088E3] - 01/03/2010 - 08:05:24 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:[MD5.C3963D85B721A7F80D8A55F4E2867A3A] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmb.sys O58 - SDL:[MD5.3859C69A77793180548802DAC9F34A38] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/08/2001 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 08:36:06 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys O58 - SDL:[MD5.863CC3A82C63C9F60ACF2E85D5310620] - 09/03/2003 - 05:31:00 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys O58 - SDL:[MD5.08CB72E95DD75B61F2966B311D0E4366] - 09/03/2003 - 05:31:02 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys O58 - SDL:[MD5.CA990306ED4EF732AF9695BFF24FC96F] - 09/03/2003 - 05:31:02 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys O58 - SDL:[MD5.83A174AC30D12186E5C2E56D362D3604] - 04/10/2009 - 22:33:14 ---A- . (.QFX Software Corporation - KeyScrambler Keyboard Encryption Driver.) -- C:\WINDOWS\system32\drivers\keyscrambler.sys O58 - SDL:[MD5.F5E165B4E3DF145F6E8BF3C0573F94D8] - 10/11/2009 - 12:54:52 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.B46E39B8AE439D7CE75A923E7F950040] - 10/11/2009 - 12:55:08 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.C0382C12B784394BF16C2D8F0F1F17DC] - 26/03/2010 - 17:44:00 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\WINDOWS\system32\drivers\LNonPnP.sys O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 04/01/2006 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys O58 - SDL:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 06/10/2003 - 10:29:08 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\system32\drivers\plff.sys O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.00FD6811350E175585ABCF7D4A61DD90] - 24/04/2009 - 03:22:16 R--A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys O58 - SDL:[MD5.0C5A04F0FFAEBC25AC815EE14441A8CB] - 02/06/2009 - 11:02:46 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys O58 - SDL:[MD5.1674A34F0084BFFDEC2DCDB1625A87F0] - 21/05/2009 - 02:03:54 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 11/05/2009 - 08:12:49 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:[MD5.F92254B0BCFCD10CAAC7BCCC7CB7F467] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\StarOpen.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/08/2001 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.0CCADC7391021376EDBB8AA649D04E68] - 26/02/2010 - 13:32:46 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys O58 - SDL:[MD5.68B4F83CCCF70A2FF32EE142C234332A] - 26/02/2010 - 13:32:58 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.5B7512131637D60EA79EF8960AA01575] - 02/03/2010 - 20:54:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\vidstub.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/04/2008 - 08:50:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 13/04/2008 - 08:49:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 13/04/2008 - 08:49:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 13/04/2008 - 08:49:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys O58 - SDL:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 04/12/2009 - 16:34:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.) O63 - Logiciel: HiJackThis - (.Trend Micro.) O63 - Logiciel: Dial-a-fix - (.Djlizard.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - C:\Program Files\Application Updater\ApplicationUpdater.exe - Application Updater (Application Updater) .(.Spigot, Inc. - Application Updater.) - LEGACY_APPLICATION_UPDATER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - ASP.NET State Service (aspnet_state) .(.Microsoft Corporation - Microsoft ASP.NET State Server.) - LEGACY_ASPNET_STATE O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - (.not file.) - BCFTDI (bcftdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_BCFTDI O64 - Services: CurCS - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe - Browser Configuration Utility Service (BCUService) .(.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - LEGACY_BCUSERVICE O64 - Services: CurCS - (.not file.) - BC_Filter (bc_filter) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_FILTER O64 - Services: CurCS - (.not file.) - BC_IP_Filter (bc_ip_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_IP_F O64 - Services: CurCS - (.not file.) - BC_Engine (bc_ngn) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_NGN O64 - Services: CurCS - (.not file.) - BC_PAT_Filter (bc_pat_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PAT_F O64 - Services: CurCS - (.not file.) - BC_Protocol_Filter (bc_prt_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PRT_F O64 - Services: CurCS - (.not file.) - BC_TDI_Filter (bc_tdi_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_TDI_F O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vidstub.sys - BootScreen (BootScreen) .(.Pas de propriétaire - Pas de description.) - LEGACY_BOOTSCREEN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - Application système COM+ (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k DcomLaunch (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\system32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\system32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EAPHOST O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe - ES lite Service for program management. (ES lite Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_ES_LITE_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\fltMgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\WINDOWS\gdrv.sys - gdrv (gdrv) .(.Windows ® 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper (getPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_GETPLUSHELPER O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - C:\Windows\system32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - (.not file.) - InCD File System (InCDfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDFS O64 - Services: CurCS - (.not file.) - InCDrec (InCDrec) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDREC O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys - ZoneAlarm Toolbar ISWKL (ISWKL) .(.Check Point Software Technologies - ZoneAlarm ForceField.) - LEGACY_ISWKL O64 - Services: CurCS - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe - ZoneAlarm Toolbar IswSvc (IswSvc) .(.Check Point Software Technologies - ZoneAlarm ForceField.) - LEGACY_ISWSVC O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Affichage des messages (Messenger) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_MESSENGER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\system32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Agent de protection d'accès réseau (napagent) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NAPAGENT O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Ouverture de session réseau (Netlogon) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NETLOGON O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - C:\Program Files\CDBurnerXP\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMSACCESSU O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NTLMSSP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARPORT.sys - Parport (Parport) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARPORT O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\system32\IoctlSvc.exe - PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\HPZipm12.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - C:\WINDOWS\system32\locator.exe - Localisateur d'appels de procédure distante (RPC) (RpcLocator) .(.Microsoft Corporation - Rpc Locator.) - LEGACY_RPCLOCATOR O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k rpcss (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - ServiceLayer (ServiceLayer) .(.Nokia - ServiceLayer Module.) - LEGACY_SERVICELAYER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - MS Software Shadow Copy Provider (SwPrv) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - C:\WINDOWS\System32\svchost -k DComLaunch (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\system32\vsdatant.sys - vsdatant (vsdatant) .(.Check Point Software Technologies LTD - TrueVector Device Driver.) - LEGACY_VSDATANT O64 - Services: CurCS - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor (vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Windows\system32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de numéro de série du lecteur multimédia portable (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\WudfPf.sys - Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Windows Driver Foundation - User-mode Driver Framework (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service d'approvisionnement réseau (xmlprov) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_XMLPROV ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - Bing O69 - SBI: SearchScopes [HKCU] {B92E9C19-2391-4420-A2B3-0ED981AAF20B} - (Yahoo! Search) - Yahoo! Search - Recherche Web ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, GMER - Rootkit Detector and Remover Run by Taranis at 01/09/2010 18:31:46 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\System32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows™.) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136] ---\\ Infection BT - BHO/Toolbar (Possible) R3 - URLSearchHook: SearchHook Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Spigot, Inc. - Search Settings IE.) (1, 2, 3, 16) -- C:\Program Files\pdfforge Toolbar\SearchSettings.dll O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Spigot, Inc. - Search Settings IE.) -- C:\Program Files\pdfforge Toolbar\SearchSettings.dll O4 - HKLM\..\Run: [searchSettings] . (.Spigot, Inc. - Search Settings application.) -- C:\Program Files\pdfforge Toolbar\SearchSettings.exe [HKCU\Software\Search Settings] [HKLM\Software\Search Settings] End of the scan (1007 lines in 01mn 07s)(0)

Bonsoir à tous, Je viens de réaliser un examen avec ZHPDiag complété par un examen Hijackthis et en testant ZHP celui-ci trouve des infections. Je ne suis pas un spécialiste loin de là et j' ai besoin de votre aide. Je tiens les rapports à disposition. Merci à vous.

Bonsoir Bleuet, Ok pour MBAM. Pour DeviceVM, ma CM est une Gigabyte. J' ai pas assez creusé, désolé. Merci pour le renseignement. Je viens de découvrir en utilisant ZHP qu 'i l y avait des trucs bizarres sur la machine. Je poste sur le forum sécurité et je reviens pour donner des nouvelles. A plus

Bonsoir à tous, Après cet intermède estival et après oxigénation et régénération des neurones, je reviens sur mon sujet. Merci pour le tuyau au sujet de la vaccination de Spybot, je l' applique en attendant de supprimer spybot mais je le remplace par quoi ? Pour la suite du sujet : En passant par « services.msc » j'e commence à étudiier ce qu' il y a dedans (rassurer vous avec l' aide des dossiers « Zébulon, PCAstuces et Dépanne ton PC). J' ai trouvé un truc qui s' appelle « Browser Configuration Utility Service » et qui est en démarrage auto. Ce truc est « planqué » je dis bien planqué dans Programfiles car je ne le trouve qu' en cochant l' option « Afficher les fichiers et dossiers cachés » et il appartiendrait à Device VM. Pas souvenir d' avoir installé un truc de ce nom. Je ne trouve rien de concluant sur les moteurs de recherche concernant ce truc. Si vous avez des tuyaux je suis preneur pour savoir si je peux le désactiver ou au moins le mettre en manuel sans risques. Merci d' avance de vos lumières.

Bonjour "Bleuet", bonjour "le novice", Je vous remercie de vous occuper de mon soucis du moment. Après des recherches et quelques essais, notamment de supprimer le "teatimer" de Spybot et de vérifier les quelques services inutiles qui démarre voici le compte-rendu : - Après désactivation de teatimer, pas de gain au démarrage du PC jusqu' à la page de connexion des sessions. Pas de gain non plus à l' ouverture des sessions. - Après désactivation des services inutiles, pas de gain non plus jusqu' à la page de connexion des sessions. Par contre, un gain substantiel à l' ouverture des sessions, diminution de moitié à peu près. Pour ce qui est de la proposition de bleuet de supprimer spybot, je ne pense pas car j' utilise uniquement MBAM en version light donc pas en temps réel ni en résident. Je creuse un peu plus loin pour le temps de démarrage du PC après mes congés. Ne vous étonnez donc pas si je ne réponds plus au sujet. Bonnes vacances pour ceux qui y sont ou qui les prennent maintenant et bon courage pour ceux qui en reviennent.

Bonsoir, Je regarde et vérifie ce qui démarre tout seul en fait et je reviens faire mon compte rendu. Merci de ton aide.

Bonjour jp9905, Heureux d' avoir pu te rendre service. A Plus.

Bonjour jp9905, Une possible solution, pas forcément la plus rationnelle mais en dépannage et au coup par coup ça doit fonctionner. Imprimer le "xml" en "pdf" avec PDFCréator. Imprimer le nouveau fichier ainsi créé en jpeg via PDFCréator. Voir ici pour transformer le pdf en jpeg. Pour infos cela fonctionne page à page quand le pdf contient plusieure pages Il existe aussi ça ici mais je ne sais pas comment il fonctionne, pas eu encore l' occasion de le tester.

Bonjour bleuet, Pour infos, les processus asont aux nombres de 17 et 19 sur les deux sessions utilisateurs et de 45 sur la session admin dont beaucoup de svschot.exe. Je n' ai aucune icones ou liens sur le bureau, je déteste ça. Dans les processus systèmes du compte admin, je n' y connais rien et je ne peux pas commenter.

Bonjour à tous, Je ne sais pas si je suis dans le bon forum mais je compte sur l' aide Zébulonienne pour m' orienter dans la bonne section. J' ai hésité à poster dans le forum sécurité mais cela ne me semblait pas provenir d' un problème sécuritaire. Scan Antivir et MBAM négatifs avec mises à jour effectuées avant le scan. Un nettoyage régulier est effectué avec Ccleaner tous les quinze jours environs. Défragmentation effectuée à l' issu du nettoyage. Voici donc la raison de mon appel au secours : Depuis quelque temps , mon PC rame à l' ouverture et à la fermeture des sessions utilisateurs. La question est de savoir s' il y a moyen d' améliorer ces délais d' ouvertures et de revenir à des temps de 30 à 40" comme je le constatais à l' installation de ma nouvelle config (02/2010). Voici les temps constatés : - Démarrage jusqu' à l' écran de choix des sessions 1' 35''. - Démarrage d' une session de 45'' à 1'15''. - Fermeture d' une session 1' à 2'. - Arrêt après écran de session 15 ''. Ces temps sont peut-être normaux et peut-être que je me prends le choux pour rien. Par contre, les changements de sessions s' effectuent rapidement. En fait, tant que je ne ferme pas les sessions ni le PC, tout roule. Je n' ai pas constaté de ralentissements aux changements d' applications et autres logiciels en utilisation car il arrive fréquemment que je travaille avec trois ou quatre "applis" ouvertes et deux sessions utilisateurs d' ouvertes. Je tiens également à dispositon une copie d' écran avec les processus démarrés lors de l' ouverture du PC et des sessions. Voici ma configuration - XP Pro SP3 – dernière mise à jour effectuée le 30/07/2010 - Processeur AMD Athlon II X2 2.9 Ghz - Mémoire RAM DDR3 Kingston 2048 Mo PC3-10700 (667 Mhz) - Disque dur Western Digital 500 Go partitionné dont l' OS sur 100 Go - Trois sessions : Une Administrateur et deux utilisateurs. - Protection : Antivir + Spybot avec Teatimer + ZoneAlarm + MBMA + le pare feu du routeur. et utilitaires de Zebulon [Zeb Utility & Zeb Protect] Je vous remercie de votre aide.

Bonsoir, Je remonte ce sujet car j' ai finalement trouvé la solution. Avant de poster, j' avais déjà fait des requêtes sur internet, sans résultats probant. J' ai continué en modifiant mes critères de recherches et voilà le résultat : sur http://forum.pcastuces.com/dossier_disparu-f1s156070.htm Les deux problèmes rencontrés sont réglés Petite astuce supplémentaire trouvée ici : http://forum.hardware.fr/hfr/WindowsSoftwa...et_150414_1.htm . En espérant que cela pourra aider d' autres internautes et ça serait sympa de le faire savoir. Bonsoir à toutes et à tous A +

Bonsoir, J' ai besoin de conseils et d' aide s' il vous plait et je fais appel à vos connaissances. Ma config : Xp pro SP3. OS à part sur une partition du disque. Antivir Personal Free – ZoneAlarm – Spybot avec Teatimer actif en permanence. Windows Live Mail Firefox 3.5.7 avec extensions « Adblock + » et « Noscript » Voilà il m' arrive deux choses « mystérieuses » : - 1 / Je n' ai plus accès aux dossiers « Applications Data » dans « Documents & Settings » sur aucune de mes sessions (3 dont 2 utilisateurs et une administrateur) y compris à partir de la vrai session « Administrateur ». - 2 / De ce fait, je me suis rendu compte que dans « Options des dossiers » de l' explorateur Windows il m' est impossible de changer le paramétrage de « Afficher les fichiers et dossiers cachés » en « Ne pas afficher........cachés ». Celui-ci est comme par défaut en position « Afficher les fichiers et dossiers cachés ». Normalement, dans cette config je devrai voir le dossier « Application data » ? Voici ce que j' ai fais avant de poster : J' ai essayé de régler le truc en mode administrateur en cochant le bon réglage et ensuite « Appliquer à tous les dossiers ». Cela ne marche pas. Nettoyage complet avec TuneUp 2009 (Nettoyage et défragmentation du registre ainsi que gros nettoyage des fichiers temporaires etc...) et ce, sur les trois sessions. Un scan d' antivir complet. Trouvé deux saloperies une mise en quarantaine et une que j' ai éliminée. Un scan de MBMA résultat = rien trouvé Un scan de Spybot = rien trouvé non plus. A l' issue j' ai réalisé un ZHP Diag qui me trouve deux cochonneries, pas les mêmes que antivir et un Hijackthis qui ne trouve rien. Je tiens évidemment les rapports complets à dispo . Merci de votre aide

Hello, Merci de ton aide. Je suis le conseil pour les PC lent. Je mets ce sujet en résolu. Merci à tous les intervenants de ce forum, vraiment super. A bientôt.

Bonjour Apollo, En fait, je n' ai pas oublié mais simplement édité le rapport avant de fixer les objets. Je viens de faire un nouveau scan MBMA et résultat "0 infection". Les trucs découverts hier sont détruits et ont bien été mis en quarantaine. Comme dit précédemment, j' ai exécuter ATF Cleaner. Résultats 12 Mo de libérés. Pour le PC, Il démarre un peu plus rapidement. Reste ce qu' Antivir a trouvé. Grave ou pas ? Cela a été mis en quarantaine si je comprend bien. Encore Merci de ton aide. A+

Rebonsoir Apollo, Voici un résumé des deux scans. Infecté ?. A part ça, le PC marche bien. Je viens de me rendre que je ne répond jamais à cette question. Merci de ton aide. A+ Celui de MBMA : "Malwarebytes' Anti-Malware 1.41 Version de la base de données: 3055 Windows 5.1.2600 Service Pack 3 29/10/2009 19:40:04 Type de recherche: Examen complet (C:\|D:\|E:\|F:\|) Eléments examinés: 241504 Temps écoulé: 1 hour(s), 13 minute(s), 25 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 1 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Elément(s) de données du Registre infecté(s): HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Homepage (Hijack.Homepage) -> Bad: (1) Good: (0) -> No action taken. Fichier(s) infecté(s): C:\Documents and Settings\Taranis\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> No action taken." Celui d' Antivir : "Avira AntiVir Personal Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows XP Windows version : (Service Pack 3) [5.1.2600] Boot mode : Normally booted Username : SYSTEM Computer name : PROPRIETAIRE C:\System Volume Information\_restore{8EF2E3B0-7EBC-4662-925E-57863B1D1DE9}\RP77\A0016731.exe [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was moved to '4b19fbf8.qua'! The scan has been done completely. 9058 Scanned directories 338321 Files were scanned 1 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 1 Files were moved to quarantine 0 Files were renamed 1 Files cannot be scanned 338319 Files not concerned 2694 Archives were scanned 1 Warnings 2 Notes 36267 Objects were scanned with rootkit scan 0 Hidden objects were found"