Aller au contenu

menyarito

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    41

  • Inscription

  • Dernière visite

Autres informations

  • Mes langues
    français

menyarito's Achievements

Member

Member (4/12)

0

Réputation sur la communauté

  1. menyarito
    Bonjour Tonton, j'ai effectué la manipulation mais toujours le même souci.... Cordially
  2. menyarito
    Re Tonton, j'ai exécuté la commande sfc /scannow mais ça n'a rien changé, Je commence à perdre espoir Cordially
  3. menyarito
    Bonjour Tonton , j'ai appliqué la commande chkdsk c: /f /r mais j'ai toujours le même problème... c bizarre non? Cordially
  4. menyarito
    Pas de nouveau
  5. menyarito
    Bonsoir TonTon, Lien CJoint.com BIouJjhBjW0 en plus je ne connais pas le nom du driver comme ça je peux pas lui faire une recherche sur le net... c'est fait.... Cordially
  6. menyarito
    Bonjour , voici le rapport ZHPFixReport: Lien CJoint.com BIooRQWZ1nq et le rapport Malwarebytes: Lien CJoint.com BIooUmp7s3H oui, Lien CJoint.com BIooXVlrxhW Lien CJoint.com BIooZAXG5Cs Cordially
  7. menyarito
    Re, Lien CJoint.com BInvYNq1L6s Cordially
  8. menyarito
    Bonjour, je n'ai pas d'antivrus car je viens réinstaller mon système.... Cordially
  9. menyarito
    Re, Windows 7 Ultimate, Service pack 1 Cordially
  10. menyarito

    formatage bas niveau

    menyarito a répondu à un(e) sujet de menyarito dans Software

    pour être plus précis: formatage bas niveau du disque dur externe nécessite d'enlever le disque dur centrale ou non?
  11. menyarito

    formatage bas niveau

    menyarito a posté un sujet dans Software

    Bonjour tous le monde, j'ai un disque dur externe que je veux lui faire un formatage bas niveau, si je fais ça sur mon ordinateur portable est ce qu'il y'a un risque sur le disque dur principale? Merci d'avance
  12. menyarito
    AD-Remover: 1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 ======= 2. 3. Mis à jour par TeamXscript le 08/12/10 à 10:40 4. Contact: AdRemover[DOT]contact[AT]gmail[DOT]com 5. Site web: [url=http://www.teamxscript.org]TeamXscript : AD-Remover - FindyKill - UsbFix[/url] 6. 7. C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:27:22 le 15/12/2010, Mode normal 8. 9. Microsoft Windows XP Professionnel Service Pack 3 (X86) 10. khvil@KHAVILE ( ) 11. 12. ============== ACTION(S) ============== 13. 14. 15. Fichier supprimé: C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job 16. Dossier supprimé: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\extensions\[email protected] 17. Fichier supprimé: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\searchplugins\mywebsearch.xml 18. Dossier supprimé: C:\Program Files\Ask.com 19. Dossier supprimé: C:\Documents and Settings\khvil\Application Data\AskToolbar 20. Dossier supprimé: C:\Documents and Settings\khvil\Local Settings\Application Data\AskToolbar 21. 22. (!) -- Fichiers temporaires supprimés. 23. 24. 25. -- Fichier ouvert: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\Prefs.js -- 26. Ligne supprimée: 27. Ligne supprimée: 28. Ligne supprimée: user_pref("browser.search.selectedEngine", "MyWebSearch" ); 29. Ligne supprimée: user_pref("extensions.asktb.cbid", "HA" ); 30. Ligne supprimée: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}... 31. Ligne supprimée: user_pref("extensions.asktb.dtid", "YYYYYYYYMA" ); 32. Ligne supprimée: user_pref("extensions.asktb.fresh-install", false); 33. Ligne supprimée: user_pref("extensions.asktb.l", "dis" ); 34. Ligne supprimée: user_pref("extensions.asktb.last-config-req", "1292587667878" ); 35. Ligne supprimée: user_pref("extensions.asktb.locale", "en_US" ); 36. Ligne supprimée: user_pref("extensions.asktb.o", "15467" ); 37. Ligne supprimée: user_pref("extensions.asktb.overlay-reloaded-using-restart", true); 38. Ligne supprimée: user_pref("extensions.asktb.qsrc", "2871" ); 39. Ligne supprimée: user_pref("extensions.asktb.r", "2" ); 40. Ligne supprimée: user_pref("extensions.asktb.utorrent.isCollapsed", true); 41. Ligne supprimée: user_pref("extensions.asktb.utorrent.useOneClickMagnets", false); 42. Ligne supprimée: user_pref("extensions.enabledItems", "[email protected]:7,{20a82645-c095-46ed-80e3-0882576... 43. Ligne supprimée: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... 44. Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdEnabled", true); 45. Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties" ); 46. Ligne supprimée: user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=GRfox000&ptb=JV1... 47. -- Fichier Fermé -- 48. 49. 50. Clé supprimée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} 51. Clé supprimée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} 52. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} 53. Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} 54. Clé supprimée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} 55. Clé supprimée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} 56. Clé supprimée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} 57. Clé supprimée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} 58. Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd 59. Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1 60. Clé supprimée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL 61. Clé supprimée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} 62. Clé supprimée: HKLM\Software\Conduit 63. Clé supprimée: HKCU\Software\Ask.com 64. Clé supprimée: HKCU\Software\AskToolbar 65. Clé supprimée: HKCU\Software\AppDataLow\AskToolbarInfo 66. Clé supprimée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF 67. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF 68. Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} 69. Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} 70. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} 71. Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search 72. 73. Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440} 74. Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} 75. 76. 77. ============== SCAN ADDITIONNEL ============== 78. 79. ** Mozilla Firefox Version [3.6.13 (fr)] ** 80. 81. -- C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\Prefs.js -- 82. browser.startup.homepage, hxxp://www.google.fr 83. browser.startup.homepage_override.mstone, rv:1.9.2.13 84. 85. ======================================== 86. 87. ** Internet Explorer Version [6.0.2900.5512] ** 88. 89. [HKCU\Software\Microsoft\Internet Explorer\Main] 90. Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome 91. Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 92. Do404Search: 0x01000000 93. Enable Browser Extensions: yes 94. Local Page: C:\WINDOWS\system32\blank.htm 95. Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 96. Show_ToolBar: yes 97. Start Page: hxxp://fr.msn.com/ 98. 99. [HKLM\Software\Microsoft\Internet Explorer\Main] 100. Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 101. Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 102. Delete_Temp_Files_On_Exit: yes 103. Local Page: C:\WINDOWS\system32\blank.htm 104. Search bar: hxxp://search.msn.com/spbasic.htm 105. Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 106. Start Page: hxxp://fr.msn.com/ 107. 108. [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 109. Tabs: res://ieframe.dll/tabswelcome.htm 110. Blank: res://mshtml.dll/blank.htm 111. 112. ======================================== 113. 114. C:\Program Files\Ad-Remover\Quarantine: 180 Fichier(s) 115. C:\Program Files\Ad-Remover\Backup: 14 Fichier(s) 116. 117. C:\Ad-Report-CLEAN[1].txt - 15/12/2010 (6494 Octet(s)) 118. 119. Fin à: 12:29:53, 15/12/2010 120. 121. ============== E.O.F ============== MBAM: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4052 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 15/12/2010 14:52:22 mbam-log-2010-12-15 (14-52-22).txt Type d'examen: Examen rapide Elément(s) analysé(s): 117030 Temps écoulé: 9 minute(s), 50 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) ZhpDiag.txt: Rapport de ZHPDiag v1.27.1420 par Nicolas Coolman, Update du 11/12/2010 Run by khvil at 15/12/2010 15:53:50 Web site : [url=http://www.premiumorange.com/zeb-help-process/zhpdiag.html]ZHPDiag Outil de diagnostic[/url] Contact : [email protected] ---\\ Web Browser MSIE: Internet Explorer v6.0.2900.5512 OPIE: Opera v10.63 MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut) GCIE: Google Chrome v ---\\ System Information Windows XP Professional Service Pack 3 (Build 2600) Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1976 MB (65% free) System drive C: has 32 GB (36%) free of 87 GB ---\\ Logged in mode Computer Name: KHAVILE User Name: khvil All Users Names: SUPPORT_388945a0, khvil, HelpAssistant, Administrateur, Unselected Option: O1,O45,O61,O62,O65,O82 Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 87 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 91 Go) E:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 03:34:03.) -- C:\Windows\Explorer.exe [1037824] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 03:34:28.) -- C:\Windows\System32\Winlogon.exe [512000] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 19:40:30.) -- C:\Windows\System32\drivers\atapi.sys [96512] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 20:15:53.) -- C:\Windows\System32\drivers\ntfs.sys [574976] ---\\ Processus lancés [MD5.F3845C2AE550443297601C2909B30049] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800] [MD5.8ED60797908FD394EEE0D6949F493224] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\WINDOWS\system32\agrsmsvc.exe [12800] [MD5.018857EAD9A077A56AEDFC0E5EF7A24A] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [352976] [MD5.673CF4F6BB1FBE09331B526802FBB892] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.6D4028D458EAAA1782099750790DC8C9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [853288] [MD5.185DC440D18181D9FBB074C326A2D1D0] - (.PC Tools - PC Tools Firewall Plus service.) -- C:\Program Files\PC Tools Firewall Plus\FWService.exe [287024] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472] [MD5.EE38DDA58C47C9A83B0BD32EC78E54D8] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [MD5.869513CA8428F231C7CAC62A6F9B974A] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe [274608] [MD5.FFC7CF5E4DAEDC38A818E9890EF337D2] - (.PC Tools - PC Tools Firewall GUI.) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2676696] [MD5.F1A3F9791F1704C170A869C857FECC05] - (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe [23040] [MD5.FF1AF4C9DC2D3827B363931BC0ED6024] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [576104] [MD5.B4DAAB34E7A815EE58E2B8B1D329C899] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE [1440384] [MD5.6351B24DC3CB7DFFDE917D1276EE166C] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820008] [MD5.AE22197774B91282D1744EF9C4B46CF2] - (.RealNetworks, Inc. - RealPlayer.) -- c:\program files\real\realplayer\RealPlay.exe [491168] [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344] [MD5.8E4397B6C5AAE05619CF9A535E793639] - (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtblfs.exe [129720] [MD5.85A3C0100BABCFA1B31BC1FECDC80E18] - (.LG Electronics - LG EV-DO Rev.A USB Modem.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\IEUM.exe [1376256] [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [MD5.CD2529845B83B5D952D91FDC0143A266] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [991800] [MD5.9A80E1F31DDB1FE19B4E3C34773B7B57] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [620544] ---\\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1) P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation (written by Digital R - Npdsplay dll.) -- C:\Program Files\Opera\Program\Plugins\npdsplay.dll P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Opera\Program\Plugins\NPOFF12.DLL P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Opera\Program\Plugins\nppl3260.dll P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Opera\Program\Plugins\nprjplug.dll P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files\Opera\Program\Plugins\nprpjplug.dll P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - DRM Store Netscape Plugin.) -- C:\Program Files\Opera\Program\Plugins\npwmsdrm.dll ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\[email protected] P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.1".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50524.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@movenetworks.com/Quantum Media Player] - (.Move Networks - npmnqmp 989898989877.) -- C:\Documents and Settings\khvil\Application Data\Move Networks\plugins\npqmp071700000016.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=12.0.1.609] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- c:\program files\real\realplayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=12.0.1.609] - (.RealNetworks, Inc. - 12.0.1.609.) -- c:\program files\real\realplayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@real.com/RhapsodyPlayerEngine,version=1.1] - (.RealNetworks, Inc. - Rhapsody Player Engine Plugin.) -- C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll P2 - FPN: [HKCU] [@movenetworks.com/Quantum Media Player] - (.Move Networks - npmnqmp 989898989877.) -- C:\Documents and Settings\khvil\Application Data\Move Networks\plugins\npqmp071700000016.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\1.2.183.39\npGoogleOneClick8.dll M0 - MFSP: prefs.js [khvil - dp3lxxch.default] [url=http://www.google.fr]Google[/url] M2 - MFEP: prefs.js [khvil - dp3lxxch.default\[email protected]] [] Firebug v1.6.0 (.Joe Hewitt.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}] [] ImTranslator v3.3.5 (.Smart Link Corporation.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{c45c406e-ab73-11d8-be73-000a95be3b12}] [] Web Developer v1.1.8 (.Chris Pederick.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.2 (.Wladimir Palant.) ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G0 - GCSP: Preference [user Data\Default][HomePage] [url=http://www.google.com]Google[/url] G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.3 (Activé) G2 - GCE: Preference [user Data\Default] [ldjcbfljkplgifccngillicohclloidg] AT_KarimRashidV3 v.3 (Activé) ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://fr.msn.com/]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://fr.msn.com/]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=http://go.microsoft.com/fwlink/?LinkId=54896]Bing[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\system32\shdocvw.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [HKLM] C:\Documents and Settings\khvil\Application Data\Do_Not_Delete\CG02_Norton_AV_2011.exe (.not file.) O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS5ServiceManager\CS5ServiceManager.exe O4 - HKLM\..\Run: [switchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe O4 - HKLM\..\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O4 - HKLM\..\Run: [00PCTFW] . (.PC Tools - PC Tools Firewall GUI.) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe O4 - HKCU\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-606747145-2000478354-725345543-1003\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe O4 - HKUS\S-1-5-21-606747145-2000478354-725345543-1003\..\Run: [AdobeBridge] Clé orpheline O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk . (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe After Effects CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe After Effects CS4\Support Files\AfterFX.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS4.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS5.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Device Central CS4.lnk . (.Adobe Systems.) -- C:\Program Files\Adobe\Adobe Device Central CS4\DeviceCentral.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Device Central CS5.lnk . (.Adobe Systems Inc..) -- C:\Program Files\Adobe\Adobe Device Central CS5\DeviceCentral.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit CS4\ExtendScript Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit CS5.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities - CS5\ExtendScript Toolkit CS5\ExtendScript Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Extension Manager CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Extension Manager CS4\Adobe Extension Manager CS4.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Extension Manager CS5.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Extension Manager CS5\Adobe Extension Manager CS5.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Flash Professional CS5.lnk . (.Adobe Systems Incorporated..) -- C:\Program Files\Adobe\Adobe Flash CS5\Flash.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Help.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Help\Adobe Help.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Illustrator CS5.lnk . (.Adobe Systems Inc..) -- C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\Illustrator.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Media Encoder CS4.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Media Encoder CS4\Adobe Media Encoder.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Media Encoder CS5.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Media Encoder CS5\Adobe Media Encoder.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS5\Photoshop.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Pixel Bender Toolkit 2.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities - CS5\Pixel Bender Toolkit 2\Pixel Bender Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Pixel Bender Toolkit.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Utilities\Pixel Bender Toolkit\pixel_bender_toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Invite de commande du SDK de Adobe Flash Builder 4 Plug-in.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\cmd.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur Eclipse de Adobe Flash Builder 4 Plug-in.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Flash Builder 4 Plug-in\eclipse-host-distro\eclipse.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Visual Basic 2008 Express Edition.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\vbexpress.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mocha for After Effects CS4.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe After Effects CS4\Mocha\bin\Mocha For After Effects.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Opera.lnk . (.Opera Software.) -- C:\Program Files\Opera\opera.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Projet1.lnk . (.Pas de propriétaire.) -- C:\Program Files\Projet1\Projet1.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: &Envoyer à OneNote - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MI1933~1\Office12\EXCEL.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Envoyer à Bluetooth . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\kbrd.ico O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MI1933~1\Office12\REFBARH.ICO O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\logo.ico O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{267EB60A-91E0-4F91-9A4E-5D141B891E57}: NameServer = 192.168.50.58 192.168.60.55 O17 - HKLM\System\CCS\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CS1\Services\Tcpip\..\{267EB60A-91E0-4F91-9A4E-5D141B891E57}: NameServer = 192.168.50.58 192.168.60.55 O17 - HKLM\System\CS1\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CS3\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CCS\Services\Tcpip\..\{EFE63DA2-16FB-4513-8DC5-18BE34566508}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{EFE63DA2-16FB-4513-8DC5-18BE34566508}: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\WINDOWS\system32\klogon.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (AgereModemAudio) . (.Agere Systems - Agere Soft Modem Call Progress Service.) - C:\WINDOWS\system32\agrsmsvc.exe O23 - Service: (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: (PCToolsFirewallPlus) . (.PC Tools - PC Tools Firewall Plus service.) - C:\Program Files\PC Tools Firewall Plus\FWService.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - "C:\Program Files\Microsoft Office\Office12\WINWORD.exe (.not file.) ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: 0.0.0.0 localhost O1 - Hosts: 0.0.0.0 localhost ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-KHAVILE-khvil.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003Core.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003UA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-606747145-2000478354-725345543-1003.job [MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-KHAVILE-khvil] (.Adobe Systems Incorporated.) -- C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003Core] (.Google Inc..) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003UA] (.Google Inc..) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [MD5.BDEE1AEE61C63AB26A8A4F6B760B7388] [APT] [RealUpgradeScheduledTaskS-1-5-21-606747145-2000478354-725345543-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (Drive) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\himen.sys (.not file.) O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl2.sys O41 - Driver: (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) - C:\Windows\System32\DRIVERS\klif.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (pctgntdi) . (.PC Tools - PC Tools Generic TDI Driver.) - C:\WINDOWS\system32\drivers\pctgntdi.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\Windows\System32\DRIVERS\wmiacpi.sys ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} O42 - Logiciel: Adobe After Effects CS4 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_3dcb365ab9e01871fb8c6f27b0ea079 O42 - Logiciel: Adobe After Effects CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {45EC816C-0771-4C14-AE6D-72D1B578F4C8} O42 - Logiciel: Adobe After Effects CS4 Presets - (.Adobe Systems Incorporated.) [HKLM] -- {44E240EC-2224-4078-A88B-2CEE0D3016EF} O42 - Logiciel: Adobe After Effects CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_5aab5a491a3a52ae624fd639f6aaa95 O42 - Logiciel: Adobe After Effects CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- {67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E} O42 - Logiciel: Adobe Anchor Service CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {1618734A-3957-4ADD-8199-F973763109A8} O42 - Logiciel: Adobe Bridge CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {83877DB1-8B77-45BC-AB43-2BAC22E093E0} O42 - Logiciel: Adobe CMaps CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {94D398EB-D2FD-4FD1-B8C4-592635E8A191} O42 - Logiciel: Adobe Color Video Profiles AE CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B15381DD-FF97-4FCD-A881-ED4DB0975500} O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- {EE531675-A09C-51DD-F356-ECA9D6857039} O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683} O42 - Logiciel: Adobe Device Central CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {67F0E67A-8E93-4C2C-B29D-47C48262738A} O42 - Logiciel: Adobe Dynamiclink Support - (.Adobe Systems Incorporated.) [HKLM] -- {60DB5894-B5A1-4B62-B0F3-669A22C0EE5D} O42 - Logiciel: Adobe ExtendScript Toolkit CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F8EF2B3F-C345-4F20-8FE4-791A20333CD5} O42 - Logiciel: Adobe Extension Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {054EFA56-2AC1-48F4-A883-0AB89874B972} O42 - Logiciel: Adobe Flash Builder 4 Plug-in - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Builder 4 Plug-in O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems, Inc..) [HKLM] -- {6E9EF98E-259E-416D-B5F8-0ABDB99942CE} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Flash Professional CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {CFC9F871-7C40-40B6-BE4A-B98A5B309716} O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM] -- {FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794} O42 - Logiciel: Adobe Illustrator CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7} O42 - Logiciel: Adobe Media Encoder CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {DEB90B8E-0DCB-48CE-B90E-8842A2BD643E} O42 - Logiciel: Adobe Media Encoder CS4 Additional Exporter - (.Adobe Systems Incorporated.) [HKLM] -- {BE9CEAAA-F069-4331-BF2F-8D350F6504F4} O42 - Logiciel: Adobe MotionPicture Color Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B05DE7B7-0B40-4411-BD4B-222CAE2D8F15} O42 - Logiciel: Adobe Output Module - (.Adobe Systems Incorporated.) [HKLM] -- {BB4E33EC-8181-4685-96F7-8554293DEC6A} O42 - Logiciel: Adobe PDF Library Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F93C84A6-0DC6-42AF-89FA-776F7C377353} O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {15FEDA5F-141C-4127-8D7E-B962D1742728} O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001} O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {411F3ABA-2AB5-4799-AA19-6ADF0A8F7424} O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {8EB8E60B-315D-44EB-A896-10D88602EE46} O42 - Logiciel: Adobe Type Support CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {820D3F45-F6EE-4AAF-81EF-CE21FF21D230} O42 - Logiciel: Adobe Update Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {05308C4E-7285-4066-BAE3-6B50DA6ED755} O42 - Logiciel: Adobe XMP Panels CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3A4E8896-C2E7-4084-A4A4-B8FD1894E739} O42 - Logiciel: Agere Systems HDA Modem - (.Agere Systems.) [HKLM] -- Agere Systems Soft Modem O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM] -- Akamai O42 - Logiciel: Apache Tomcat 6.0 (remove only) - (.Pas de propriétaire.) [HKLM] -- Apache Tomcat 6.0 O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {17424F35-8B77-4ADF-BC63-BF9B81418539} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {308B6AEA-DE50-4666-996D-0FA461719D6B} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Bit Che - (.Convivea, Inc..) [HKLM] -- {D9DA5C41-964F-455F-B5E7-3664519440E8}_is1 O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {FF1C31AE-0CDC-40CE-AB85-406F8B70D643} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CamStudio 2.0 Fr - (.Pas de propriétaire.) [HKLM] -- CamStudio 2.0 Fr_is1 O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: FileZilla Client 3.3.4.1 - (.Pas de propriétaire.) [HKLM] -- FileZilla Client O42 - Logiciel: FormatFactory 2.50 - (.Free Time.) [HKLM] -- FormatFactory O42 - Logiciel: Gestion de fournisseurs - (.UNKNOWN.) [HKLM] -- Projet1 O42 - Logiciel: Gestion de fournisseurs - (.UNKNOWN.) [HKLM] -- {E2485922-D9F9-9169-CA13-39D0CD954665} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard.) [HKLM] -- {A70B15A5-AABC-41D0-A2AC-678BED567894} O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology - (.HP.) [HKLM] -- {84814E6B-2581-46EC-926A-823BD1C670F6} O42 - Logiciel: HP Quick Launch Buttons 6.40 E1 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} O42 - Logiciel: HP Webcam - (.Sonix.) [HKLM] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI O42 - Logiciel: Java Platform, Enterprise Edition 5 SDK - (.Pas de propriétaire.) [HKLM] -- Java Platform, Enterprise Edition 5 SDK O42 - Logiciel: Java(TM) 6 Update 22 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Java(TM) SE Development Kit 6 - (.Sun Microsystems, Inc..) [HKLM] -- {32A3A4F4-B792-11D6-A78A-00B0D0160000} O42 - Logiciel: Java(TM) SE Runtime Environment 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160000} O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{66F1F013-008F-4875-B283-5A814B820347} O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- {66F1F013-008F-4875-B283-5A814B820347} O42 - Logiciel: La boite a couleurs version 1.6.15 - (.Pas de propriétaire.) [HKLM] -- La boite a couleurs_is1 O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} O42 - Logiciel: Macromedia Dreamweaver 8 - (..) [HKLM] -- {5FD788ED-1A37-4496-9BDD-463F493B27FA} O42 - Logiciel: Macromedia Extension Manager - (.Nom de votre société.) [HKLM] -- {3C8C9FB3-5FDF-40B4-B314-EAD722728C76} O42 - Logiciel: Macromedia Flash 8 - (.Macromedia.) [HKLM] -- {2BD5C305-1B27-4D41-B690-7A61172D2FEB} O42 - Logiciel: Macromedia Flash 8 Video Encoder - (.Macromedia.) [HKLM] -- {8BF2C401-02CE-424D-BC26-6C4F9FB446B6} O42 - Logiciel: Macromedia Flash Player 8 - (.Macromedia.) [HKLM] -- {885A63EA-382B-4DD4-A755-14809B8557D6} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- Marvell Miniport Driver O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {3F7924B9-D148-3141-87B1-68F36043A940} O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {511DF669-2930-30C0-8EB6-552887E29EC8} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra - (.Microsoft Corporation.) [HKLM] -- {5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server Compact 3.5 Design Tools FRA - (.Microsoft Corporation.) [HKLM] -- {043ECF7B-4724-4F7B-8A9D-BC22719E95F7} O42 - Logiciel: Microsoft SQL Server Compact 3.5 FRA - (.Microsoft Corporation.) [HKLM] -- {BE361597-42AC-4513-9BA6-FFAB310038FB} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Visual Basic 2008 Express - Français - (.Microsoft Corporation.) [HKLM] -- Microsoft Visual Basic 2008 Express Edition - FRA O42 - Logiciel: Microsoft Visual Basic 2008 Express Edition - FRA - (.Microsoft Corporation.) [HKLM] -- {ACC61C04-48C5-3F6F-977B-AD33E94E5F40} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework - (.Microsoft.) [HKLM] -- {AB47EEE8-507B-331F-AA28-B7C7257F014C} O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 - (.Microsoft Corporation.) [HKLM] -- {07FCBED5-94C3-4F94-B9D3-360FA27C7B06} O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} O42 - Logiciel: Modem LG LDU-1900D - (.LG Electronics.) [HKLM] -- {43DB077F-C85F-42CC-8302-17CBEE4A6BC6} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack - fra O42 - Logiciel: Move Media Player - (.Move Networks.) [HKCU] -- Move Media Player O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13) O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM] -- {B944FA21-81AF-4A77-8328-CE4F4CC51036} O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: Opera 10.63 - (.Opera Software ASA.) [HKLM] -- {87CC8013-56D1-43E1-A0A5-AD406B4EBA95} O42 - Logiciel: PC Tools Firewall Plus 7.0 - (.PC Tools.) [HKLM] -- PC Tools Firewall Plus O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8} O42 - Logiciel: Pixel Bender Toolkit - (.Adobe Systems Incorporated.) [HKLM] -- {43509E18-076E-40FE-AF38-CA5ED400A5A9} O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} O42 - Logiciel: Rhapsody Player Engine - (.RealNetworks.) [HKLM] -- {22DE1881-9D24-4981-B5CC-EC7E9F2F4D52} O42 - Logiciel: SCR3xxx Smart Card Reader - (.SCM Microsystems.) [HKLM] -- {983980FC-66FB-4ECC-A5D8-4565BE217733} O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A} O42 - Logiciel: Skype™ 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C} O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey O42 - Logiciel: TeraCopy 2.12 - (.Code Sector Inc..) [HKLM] -- TeraCopy_is1 O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027} O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service O42 - Logiciel: X-Lite 3.0 - (.CounterPath Solutions Inc..) [HKLM] -- X-Lite 3.0_is1 O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {E8843212-F0FC-4C3B-BFF3-D51829CB4F19} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Analog Devices] [HKCU\Software\Apache Software Foundation] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\BCCP] [HKCU\Software\BitTorrent] [HKCU\Software\CG02_Norton_AV_2011] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Code Sector] [HKCU\Software\CounterPath] [HKCU\Software\DT Soft] [HKCU\Software\Digital River] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EBInstaller] [HKCU\Software\EasyBannerFL] [HKCU\Software\EasyBanner] [HKCU\Software\Extensoft] [HKCU\Software\Flash Banner Creator] [HKCU\Software\FreeTime] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Hewlett-Packard] [HKCU\Software\Intel] [HKCU\Software\Intelligent Converters] [HKCU\Software\JavaSoft] [HKCU\Software\KasperskyLab] [HKCU\Software\LG Electronics] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MoveNetworks] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\Norton] [HKCU\Software\ODBC] [HKCU\Software\Opera Software] [HKCU\Software\PCTools] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\SFX TEAM] [HKCU\Software\SecureMedia] [HKCU\Software\Skynet] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Software] [HKCU\Software\Synaptics] [HKCU\Software\Sysinternals] [HKCU\Software\Tific] [HKCU\Software\Trolltech] [HKCU\Software\UDC] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSO] [HKCU\Software\Widcomm] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\ZD Soft] [HKCU\Software\fCoder] [HKLM\Software\781] [HKLM\Software\Adobe] [HKLM\Software\Agere] [HKLM\Software\Ahead] [HKLM\Software\Analog Devices] [HKLM\Software\Andrea Electronics] [HKLM\Software\Apache Software Foundation] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Audible] [HKLM\Software\AviSynth] [HKLM\Software\C07ft5Y] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Code Sector] [HKLM\Software\DT Soft] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EasyBanner] [HKLM\Software\FileZilla 3] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\HPQ] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard Company] [HKLM\Software\Hewlett-Packard] [HKLM\Software\Imagineer Systems Ltd] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KasperskyLab] [HKLM\Software\LG Electronics] [HKLM\Software\Licenses] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Marvell] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Nero] [HKLM\Software\Netscape] [HKLM\Software\ODBC] [HKLM\Software\Opera Software] [HKLM\Software\PCTools] [HKLM\Software\PDFCreator] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RealNetworks] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\S3R521] [HKLM\Software\Schlumberger] [HKLM\Software\Secure] [HKLM\Software\Skype] [HKLM\Software\Sonix] [HKLM\Software\Staccato] [HKLM\Software\Sun Microsystems] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\Synthetic Aperture] [HKLM\Software\TrendMicro] [HKLM\Software\VSO] [HKLM\Software\Widcomm] [HKLM\Software\WinRAR] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\Wow6432Node] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\fCoder] [HKLM\Software\instinno] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD: 01/12/2010 - 09:04:16 ----D- C:\Program Files\Adobe O43 - CFD: 22/06/2010 - 15:45:42 ----D- C:\Program Files\Analog Devices O43 - CFD: 04/12/2010 - 03:05:38 ----D- C:\Program Files\Apache Software Foundation O43 - CFD: 09/11/2010 - 10:26:44 ----D- C:\Program Files\Apple Software Update O43 - CFD: 05/09/2010 - 01:40:40 ----D- C:\Program Files\Bit Che O43 - CFD: 11/10/2010 - 05:47:58 ----D- C:\Program Files\BlueSquad O43 - CFD: 12/11/2010 - 09:33:42 ----D- C:\Program Files\Bonjour O43 - CFD: 02/12/2010 - 09:42:44 ----D- C:\Program Files\CamStudio O43 - CFD: 15/10/2010 - 03:10:06 ----D- C:\Program Files\CCleaner O43 - CFD: 22/06/2010 - 15:29:22 ----D- C:\Program Files\ComPlus Applications O43 - CFD: 29/10/2010 - 14:21:22 ----D- C:\Program Files\CounterPath O43 - CFD: 01/12/2010 - 14:24:16 ----D- C:\Program Files\DivX O43 - CFD: 17/12/2010 - 11:38:24 ----D- C:\Program Files\EasyBanner 3 O43 - CFD: 19/07/2010 - 19:37:20 ----D- C:\Program Files\EasyPHP5.3.0 O43 - CFD: 15/12/2010 - 07:50:00 ----D- C:\Program Files\Fichiers communs O43 - CFD: 29/08/2010 - 06:18:00 ----D- C:\Program Files\FileZilla FTP Client O43 - CFD: 17/12/2010 - 12:12:18 ----D- C:\Program Files\Flash Banner Creator O43 - CFD: 11/10/2010 - 05:47:22 ----D- C:\Program Files\Free PDF to Word Converter O43 - CFD: 19/09/2010 - 08:01:28 ----D- C:\Program Files\FreeTime O43 - CFD: 10/12/2010 - 16:48:06 ----D- C:\Program Files\Genuitec O43 - CFD: 26/06/2010 - 19:06:26 ----D- C:\Program Files\Google O43 - CFD: 22/06/2010 - 16:03:22 ----D- C:\Program Files\Hewlett-Packard O43 - CFD: 22/06/2010 - 15:51:10 ----D- C:\Program Files\HPQ O43 - CFD: 24/10/2010 - 05:58:32 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 22/06/2010 - 15:56:30 ----D- C:\Program Files\Intel O43 - CFD: 28/06/2010 - 20:02:54 ----D- C:\Program Files\Internet Explorer O43 - CFD: 12/11/2010 - 20:46:54 ----D- C:\Program Files\iPod O43 - CFD: 12/11/2010 - 20:47:34 ----D- C:\Program Files\iTunes O43 - CFD: 22/10/2010 - 09:39:54 ----D- C:\Program Files\Java O43 - CFD: 17/12/2010 - 16:50:32 ----D- C:\Program Files\Kaspersky Lab O43 - CFD: 15/10/2010 - 05:10:54 ----D- C:\Program Files\KHAVILE O43 - CFD: 22/06/2010 - 16:35:20 ----D- C:\Program Files\LG Electronics O43 - CFD: 12/11/2010 - 00:14:46 ----D- C:\Program Files\Macromedia O43 - CFD: 22/06/2010 - 19:43:02 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 22/06/2010 - 16:01:36 ----D- C:\Program Files\Marvell O43 - CFD: 28/06/2010 - 20:06:48 ----D- C:\Program Files\Messenger O43 - CFD: 22/06/2010 - 15:32:56 ----D- C:\Program Files\microsoft frontpage O43 - CFD: 06/11/2010 - 22:55:46 ----D- C:\Program Files\Microsoft Office O43 - CFD: 23/06/2010 - 23:47:06 ----D- C:\Program Files\Microsoft SDKs O43 - CFD: 29/06/2010 - 15:39:20 ----D- C:\Program Files\Microsoft Silverlight O43 - CFD: 23/06/2010 - 23:51:02 ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 23/06/2010 - 23:51:04 ----D- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 06/11/2010 - 22:55:40 ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 06/11/2010 - 22:48:02 ----D- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 23/06/2010 - 23:51:08 ----D- C:\Program Files\Microsoft Visual Studio 9.0 O43 - CFD: 06/11/2010 - 22:56:30 ----D- C:\Program Files\Microsoft Works O43 - CFD: 23/06/2010 - 23:47:36 ----D- C:\Program Files\Microsoft.NET O43 - CFD: 28/06/2010 - 20:11:32 ----D- C:\Program Files\Movie Maker O43 - CFD: 15/12/2010 - 18:48:44 ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 06/11/2010 - 22:56:08 ----D- C:\Program Files\MSBuild O43 - CFD: 22/06/2010 - 15:28:24 ----D- C:\Program Files\MSN O43 - CFD: 22/06/2010 - 15:28:56 ----D- C:\Program Files\MSN Gaming Zone O43 - CFD: 24/06/2010 - 02:00:56 ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 23/06/2010 - 02:00:50 ----D- C:\Program Files\MSXML 6.0 O43 - CFD: 22/06/2010 - 20:52:16 ----D- C:\Program Files\Nero O43 - CFD: 28/06/2010 - 19:59:32 ----D- C:\Program Files\NetMeeting O43 - CFD: 07/08/2010 - 18:31:08 ----D- C:\Program Files\Notepad++ O43 - CFD: 22/06/2010 - 15:29:06 ----D- C:\Program Files\Online Services O43 - CFD: 06/11/2010 - 10:31:44 ----D- C:\Program Files\Opera O43 - CFD: 28/06/2010 - 20:12:12 ----D- C:\Program Files\Outlook Express O43 - CFD: 15/12/2010 - 08:59:48 ----D- C:\Program Files\PC Tools Firewall Plus O43 - CFD: 29/09/2010 - 04:05:30 ----D- C:\Program Files\PDFCreator O43 - CFD: 31/10/2010 - 09:29:30 ----D- C:\Program Files\pdfsam O43 - CFD: 29/09/2010 - 21:13:54 ----D- C:\Program Files\Projet1 O43 - CFD: 09/12/2010 - 18:00:02 ----D- C:\Program Files\QuickTime O43 - CFD: 11/12/2010 - 08:24:20 ----D- C:\Program Files\Real O43 - CFD: 23/06/2010 - 02:11:30 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 22/06/2010 - 16:00:02 ----D- C:\Program Files\SCM Microsystems O43 - CFD: 22/06/2010 - 15:31:16 ----D- C:\Program Files\Services en ligne O43 - CFD: 03/07/2010 - 16:40:12 R---D- C:\Program Files\Skype O43 - CFD: 22/06/2010 - 16:02:08 ----D- C:\Program Files\Synaptics O43 - CFD: 08/07/2010 - 21:17:58 ----D- C:\Program Files\TeraCopy O43 - CFD: 10/09/2010 - 23:07:10 ----D- C:\Program Files\trend micro O43 - CFD: 22/06/2010 - 15:42:32 --H-D- C:\Program Files\Uninstall Information O43 - CFD: 11/10/2010 - 06:26:04 ----D- C:\Program Files\Universal Document Converter O43 - CFD: 11/12/2010 - 09:06:14 ----D- C:\Program Files\uTorrent O43 - CFD: 22/06/2010 - 15:53:42 ----D- C:\Program Files\WIDCOMM O43 - CFD: 28/06/2010 - 20:03:22 ----D- C:\Program Files\Windows Media Player O43 - CFD: 28/06/2010 - 19:59:28 ----D- C:\Program Files\Windows NT O43 - CFD: 20/09/2010 - 01:17:12 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 22/06/2010 - 15:31:20 --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 22/06/2010 - 16:25:56 ----D- C:\Program Files\WinRAR O43 - CFD: 22/06/2010 - 15:32:56 ----D- C:\Program Files\xerox O43 - CFD: 26/09/2010 - 23:30:16 --H-D- C:\Program Files\Zero G Registry O43 - CFD: 15/12/2010 - 15:53:58 ----D- C:\Program Files\ZHPDiag O43 - CFD: 07/11/2010 - 12:20:52 ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD: 19/10/2010 - 07:40:14 ----D- C:\Program Files\Fichiers Communs\Adobe AIR O43 - CFD: 15/12/2010 - 15:47:56 ----D- C:\Program Files\Fichiers Communs\Akamai O43 - CFD: 12/11/2010 - 20:46:52 ----D- C:\Program Files\Fichiers Communs\Apple O43 - CFD: 06/11/2010 - 22:55:40 ----D- C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD: 19/10/2010 - 10:18:28 ----D- C:\Program Files\Fichiers Communs\DivX Shared O43 - CFD: 03/08/2010 - 22:03:12 ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD: 29/10/2010 - 14:21:24 ----D- C:\Program Files\Fichiers Communs\Intel O43 - CFD: 28/09/2010 - 13:43:10 ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD: 03/08/2010 - 22:04:52 ----D- C:\Program Files\Fichiers Communs\Macromedia O43 - CFD: 02/07/2010 - 12:03:42 ----D- C:\Program Files\Fichiers Communs\Macrovision Shared O43 - CFD: 09/12/2010 - 06:29:44 ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD: 22/06/2010 - 15:30:28 ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD: 22/06/2010 - 20:52:56 ----D- C:\Program Files\Fichiers Communs\Nero O43 - CFD: 22/06/2010 - 17:23:16 ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD: 15/12/2010 - 08:01:50 ----D- C:\Program Files\Fichiers Communs\PC Tools O43 - CFD: 11/12/2010 - 08:21:18 ----D- C:\Program Files\Fichiers Communs\Real O43 - CFD: 22/06/2010 - 15:30:32 ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD: 03/07/2010 - 16:40:02 ----D- C:\Program Files\Fichiers Communs\Skype O43 - CFD: 22/06/2010 - 16:00:38 ----D- C:\Program Files\Fichiers Communs\SNP2UVC O43 - CFD: 22/06/2010 - 17:23:14 ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD: 06/11/2010 - 22:47:32 ----D- C:\Program Files\Fichiers Communs\System O43 - CFD: 11/12/2010 - 08:24:08 ----D- C:\Program Files\Fichiers Communs\xing shared ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.1FA7BC2C6B333768E34D0A277D93DC9B] - 17/12/2010 - 16:53:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB980195.log [6120] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:53:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1875729] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:52:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem.txt [6256] O44 - LFC:[MD5.C780C6FBB347EF867EE8D10F32F82AB7] - 15/12/2010 - 15:48:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/12/2010 - 15:48:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:47:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:47:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 15/12/2010 - 15:47:51 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 11:57:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32578] O44 - LFC:[MD5.3A2CD71EA9BB7ED9FA9A30CC7010FFA0] - 15/12/2010 - 10:43:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2286198.log [4303] O44 - LFC:[MD5.AF6D24F6F9C78607011E1FBC6EEFB4A1] - 15/12/2010 - 10:41:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2345886.log [5338] O44 - LFC:[MD5.7CE7668C946A4A25255FCC5B00EC21CE] - 15/12/2010 - 10:41:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2115168.log [5208] O44 - LFC:[MD5.3FE68D7DC9362F3FC3D84089A1319553] - 15/12/2010 - 10:40:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2443105.log [5098] O44 - LFC:[MD5.A4268E7DD9BB538940C5EE39D46424E8] - 15/12/2010 - 10:40:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982132.log [4968] O44 - LFC:[MD5.53F0C8BAE5388564C9445AFB2F86BB4E] - 15/12/2010 - 10:40:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2347290.log [4868] O44 - LFC:[MD5.8B73EF6FA916010B026D643C6598B482] - 15/12/2010 - 10:38:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2079403.log [4762] O44 - LFC:[MD5.4403059AEF035FCD832BB4183ABAF6E7] - 15/12/2010 - 10:38:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB979687.log [4638] O44 - LFC:[MD5.0966D373D6791B43C7CE192DDA6806E8] - 15/12/2010 - 10:37:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2121546.log [4523] O44 - LFC:[MD5.0A494F484D06B62E18057EEB2CEF6AB8] - 15/12/2010 - 10:37:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2436673.log [4242] O44 - LFC:[MD5.CDB42E763DADE2C5CA451EC7079E8240] - 15/12/2010 - 10:35:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2416400.log [4804] O44 - LFC:[MD5.CE02072E15870AB4FC418DB40D1DC231] - 15/12/2010 - 10:34:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2141007.log [4186] O44 - LFC:[MD5.6494D1128DF20ED9CEF6569940372533] - 15/12/2010 - 10:32:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2296199.log [4067] O44 - LFC:[MD5.612576BFB3008AC65E2A042A3102EA19] - 15/12/2010 - 10:29:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB980436.log [3944] O44 - LFC:[MD5.62999BF9CCC3D8A5A45C3FED855F465E] - 15/12/2010 - 10:29:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981322.log [3829] O44 - LFC:[MD5.84EB7BB77C29DAEFE0BFA194A5EA55D0] - 15/12/2010 - 10:28:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982665.log [3604] O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 15/12/2010 - 08:41:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\NeroDigital.ini [69] O44 - LFC:[MD5.807FF1DD6E1BDF8E7D2062FCA0DAECAF] - 15/12/2010 - 08:01:50 ---A- . (.PC Tools - PC Tools KDS Core Driver.) -- C:\WINDOWS\System32\drivers\PCTCore.sys [218592] O44 - LFC:[MD5.C0521E545DEFEA6934D688E58556A20D] - 15/12/2010 - 08:01:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [237333] O44 - LFC:[MD5.2D9BF28D68BE7B9823C9C567505F613B] - 15/12/2010 - 07:49:58 ---A- . (.PC Tools - PC Tools NDIS - DNS.) -- C:\WINDOWS\System32\drivers\pctNdis-DNS.sys [32808] O44 - LFC:[MD5.3EC79CFB2E0E74AADA8B561ED8904577] - 15/12/2010 - 07:49:58 ---A- . (.PC Tools - PC Tools NDIS Driver.) -- C:\WINDOWS\System32\drivers\pctNdis.sys [57536] O44 - LFC:[MD5.989A67150C055F19B77C8DE656FC5A3C] - 15/12/2010 - 06:36:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_Agere Systems HDA Modem.txt [8382] O44 - LFC:[MD5.395A295FD9EA657B4A3621E402CC56C5] - 14/12/2010 - 19:48:44 ---A- . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klif.sys [475736] O44 - LFC:[MD5.C5D9254E5FE09235AC1061C70FB99F1F] - 14/12/2010 - 19:48:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\klick.dat [97859] O44 - LFC:[MD5.E3367A4B3343BC35344DCDA7B570A8E4] - 14/12/2010 - 19:48:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\klin.dat [114243] O44 - LFC:[MD5.9727C7AAD7C801A09C74D9B0BA21AFA5] - 14/12/2010 - 14:22:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem #3.txt [9680] O44 - LFC:[MD5.4601B887E8BF37C5411B01F3A99E1D29] - 11/12/2010 - 08:23:28 ---A- . (.RealNetworks, Inc. - Real Player(tm) ActiveX Control.) -- C:\WINDOWS\System32\rmoc3260.dll [199904] O44 - LFC:[MD5.33833B3EDA1B07EBD367FA9B38B23E60] - 11/12/2010 - 08:22:10 ---A- . (.RealNetworks, Inc. - 16 bit DirectX helper DLL.) -- C:\WINDOWS\System32\pndx5016.dll [6656] O44 - LFC:[MD5.B74E422BC81236042529DC8A42A18423] - 11/12/2010 - 08:22:10 ---A- . (.RealNetworks, Inc. - 32 bit DirectX helper DLL.) -- C:\WINDOWS\System32\pndx5032.dll [5632] O44 - LFC:[MD5.B4EB68502E52EBDC0B2C55EA3445284C] - 11/12/2010 - 08:22:04 ---A- . (.Progressive Networks - Pas de description.) -- C:\WINDOWS\System32\pncrt.dll [272896] O44 - LFC:[MD5.2C7499074888CC9D8B8526C6658435FF] - 02/12/2010 - 09:01:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem #2.txt [65124] O44 - LFC:[MD5.F767F3B35C3ECF8A60B2A65BEEC50EF5] - 25/11/2010 - 10:53:58 ---A- . (.PC Tools - PC Tools App Monitor Driver.) -- C:\WINDOWS\System32\drivers\PCTAppEvent.sys [160448] O44 - LFC:[MD5.78D871114E7CB3115E058D1F85751C7F] - 25/11/2010 - 10:42:10 ---A- . (.PC Tools - PC Tools FW Plugin Driver.) -- C:\WINDOWS\System32\drivers\pctplfw.sys [124992] O44 - LFC:[MD5.58DB891CA76A2D49E33BA9FA13B86C89] - 24/11/2010 - 09:18:16 ---A- . (.PC Tools - PC Tools NDIS - Packet Filter.) -- C:\WINDOWS\System32\drivers\pctNdis-PacketFilter.sys [89192] O44 - LFC:[MD5.8D7504023DECF8B8812FF806B53C3FA5] - 23/11/2010 - 13:11:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\colorbox.log [523] O44 - LFC:[MD5.B76C829F00B9B534405B4ED5F58B8F52] - 17/11/2010 - 10:19:50 ---A- . (.PC Tools - PC Tools Generic TDI Driver.) -- C:\WINDOWS\System32\drivers\pctgntdi.sys [249616] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jdk1.6.0\jre\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office14\GROOVE.EXE" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre1.6.0\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Opera\opera.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Application Data\BS02NAV11.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Downloads\Norton AntiVirus 2011 CRACKED FINAL (WORKING)\Norton Antivirus 2011\NTR_2011.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\CG\MS_Update\Do_Not_Delete\CG02_Norton_AV_2011.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Téléchargements\eclipse-jee-helios-SR1-win32\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Real\RealPlayer\realplay.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Téléchargements\eclipse-jee-galileo-SR2-win32\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\French\setup.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Genuitec\Common\binary\com.sun.java.jdk.win32.x86_1.6.0.013\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ MountPoints2 Shell Key (MPSK) (O51) O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\AutoRun\command - Clé orpheline O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\explore\command - Clé orpheline O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\open\command - Clé orpheline O51 - MPSK:{5e4da0bd-7e11-11df-8e67-0022fa45c614}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- G:\SWLauncher.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \Drivers32\"VIDC.X264"="x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\x264vfw.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=60 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.A0BAABB7D3549460E3F8C5AD6F778683] - 23/05/2008 - 12:50:16 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer - SATA/RAID.) -- C:\WINDOWS\system32\drivers\Accelerometer.sys [28592] O58 - SDL:[MD5.FF60DB2ACA88543C025EACBA25CEE5C1] - 11/04/2008 - 17:19:42 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys [338944] O58 - SDL:[MD5.FFF87A9B1AB36EE4B7BEC98A4CB01B79] - 13/07/2007 - 11:26:12 R--A- . (.Andrea Electronics Corporation - Audio Noise Filtering Driver (32-bit).) -- C:\WINDOWS\system32\drivers\aeaudio.sys [94976] O58 - SDL:[MD5.38325C6AA8EAE011897D61CE48EC6435] - 29/02/2008 - 15:13:38 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [1202560] O58 - SDL:[MD5.5BCF6090B825DEF29065BDBD59691DBE] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\WINDOWS\system32\drivers\btaudio.sys [539512] O58 - SDL:[MD5.EF5E0DE0A7CA2977A9255F36F4D915AB] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth Bus Enumerator.) -- C:\WINDOWS\system32\drivers\btkrnl.sys [879624] O58 - SDL:[MD5.58A49BD10E08D3D4333A60DEDCB1CED8] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth BTPORT Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btport.sys [37424] O58 - SDL:[MD5.80F61DE965C116051614AC2F04222FF7] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth LAN Access Server Driver.) -- C:\WINDOWS\system32\drivers\btwdndis.sys [156392] O58 - SDL:[MD5.053DC5BE74621B63BB48C2B86BAFC7B0] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Driver for Bluetooth USB Devices.) -- C:\WINDOWS\system32\drivers\btwusb.sys [74688] O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 02/03/2006 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528] O58 - SDL:[MD5.407E41DDB2BFECE109132AEC296E0D98] - 28/04/2008 - 14:22:10 ---A- . (.Hewlett-Packard Development Company, L.P. - HP Tablet PC Key Button HID Driver.) -- C:\WINDOWS\system32\drivers\CPQBttn.sys [9344] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 02/03/2006 - 12:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.9F620E11B80B74F4DAB50A81A5DF357F] - 23/05/2008 - 12:51:02 ---A- . (.Hewlett-Packard Corporation - HP Disk Filter - SATA/RAID.) -- C:\WINDOWS\system32\drivers\hpdskflt.sys [24624] O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 16:12:04 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys [16768] O58 - SDL:[MD5.F592A1B020723CFBD3D2722514066449] - 21/05/2008 - 18:48:46 R--A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\drivers\igxpmp32.sys [6018464] O58 - SDL:[MD5.E07E97D53324408979CC9F8F9DCD1484] - 24/09/2007 - 08:05:58 ---A- . (.Ahead Software AG - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys [11304] O58 - SDL:[MD5.1A24CD53F32EB83DA1A00CDCCF8EEB2F] - 24/09/2007 - 08:05:58 ---A- . (.Ahead Software AG - Nero Image Server.) -- C:\WINDOWS\system32\drivers\imagesrv.sys [132904] O58 - SDL:[MD5.94D67D49BD9503BB1D838405D80F2058] - 09/06/2010 - 17:43:50 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\WINDOWS\system32\drivers\kl1.sys [132184] O58 - SDL:[MD5.713576569667AC9E0F8556076004A96B] - 09/06/2010 - 17:43:52 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\WINDOWS\system32\drivers\kl2.sys [11352] O58 - SDL:[MD5.395A295FD9EA657B4A3621E402CC56C5] - 14/12/2010 - 19:48:44 ---A- . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) -- C:\WINDOWS\system32\drivers\klif.sys [475736] O58 - SDL:[MD5.8D6E11BFA9927978D25B1B8029554F07] - 07/05/2010 - 12:06:26 ---A- . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\WINDOWS\system32\drivers\klim5.sys [32856] O58 - SDL:[MD5.3959530F69E19DA56F1F24F2C89F1E2C] - 02/11/2009 - 20:27:24 ---A- . (.Kaspersky Lab - KLMOUFLT Mouse Device Filter [fre_wnet_x86].) -- C:\WINDOWS\system32\drivers\klmouflt.sys [19472] O58 - SDL:[MD5.5F3828D574A8B9B2C57B6E671E13413A] - 26/08/2008 - 15:39:22 ---A- . (.LG Electronics Inc. - LG EVDOM USB ATC Driver.) -- C:\WINDOWS\system32\drivers\lgevdomatc.sys [19840] O58 - SDL:[MD5.C9137565302785F7889AD4B0A5004C3F] - 26/08/2008 - 15:39:24 ---A- . (.LG Electronics Inc. - LG EVDOM USB Multi function Driver.) -- C:\WINDOWS\system32\drivers\lgevdombus.sys [13696] O58 - SDL:[MD5.F89D5655DC7650B9E0CE0DE37462E71B] - 26/08/2008 - 15:39:26 ---A- . (.LG Electronics Inc. - LG EVDOM USB Diagnostics Driver.) -- C:\WINDOWS\system32\drivers\lgevdomdiag.sys [19840] O58 - SDL:[MD5.087C1A5A1F096C6BDAF1FC40DA065C97] - 26/08/2008 - 15:39:28 ---A- . (.LG Electronics Inc. - LG EVDOM USB Modem Driver.) -- C:\WINDOWS\system32\drivers\lgevdommodem.sys [21632] O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.0888844230083CE3B47395102BCA8207] - 28/04/2008 - 05:14:54 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\system32\drivers\NETw5x32.sys [3626112] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032] O58 - SDL:[MD5.F767F3B35C3ECF8A60B2A65BEEC50EF5] - 25/11/2010 - 10:53:58 ---A- . (.PC Tools - PC Tools App Monitor Driver.) -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys [160448] O58 - SDL:[MD5.807FF1DD6E1BDF8E7D2062FCA0DAECAF] - 29/03/2010 - 11:06:14 ---A- . (.PC Tools - PC Tools KDS Core Driver.) -- C:\WINDOWS\system32\drivers\PCTCore.sys [218592] O58 - SDL:[MD5.B76C829F00B9B534405B4ED5F58B8F52] - 17/11/2010 - 10:19:50 ---A- . (.PC Tools - PC Tools Generic TDI Driver.) -- C:\WINDOWS\system32\drivers\pctgntdi.sys [249616] O58 - SDL:[MD5.2D9BF28D68BE7B9823C9C567505F613B] - 05/02/2010 - 09:26:50 ---A- . (.PC Tools - PC Tools NDIS - DNS.) -- C:\WINDOWS\system32\drivers\pctNdis-DNS.sys [32808] O58 - SDL:[MD5.58DB891CA76A2D49E33BA9FA13B86C89] - 24/11/2010 - 09:18:16 ---A- . (.PC Tools - PC Tools NDIS - Packet Filter.) -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys [89192] O58 - SDL:[MD5.3EC79CFB2E0E74AADA8B561ED8904577] - 08/07/2010 - 09:49:10 ---A- . (.PC Tools - PC Tools NDIS Driver.) -- C:\WINDOWS\system32\drivers\pctNdis.sys [57536] O58 - SDL:[MD5.78D871114E7CB3115E058D1F85751C7F] - 25/11/2010 - 10:42:10 ---A- . (.PC Tools - PC Tools FW Plugin Driver.) -- C:\WINDOWS\system32\drivers\pctplfw.sys [124992] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/03/2006 - 12:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032] O58 - SDL:[MD5.E974E1AA0B3F87F9044BEAAADFACF598] - 25/12/2009 - 17:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\WINDOWS\system32\drivers\scncap.sys [9984] O58 - SDL:[MD5.FC87D5E0328AFA97BF6D39DF96D5D356] - 21/06/2007 - 03:40:02 ---A- . (.SCM Microsystems Inc. - PC-SC CCID Driver for SCR3xx USB Smart Card Reader.) -- C:\WINDOWS\system32\drivers\SCR3XX2K.sys [56448] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.B6401608579B6431994425BA7653F774] - 28/03/2008 - 11:14:02 R--A- . (.Sonic Focus, Inc - Sonic Focus DSP driver for ADI.) -- C:\WINDOWS\system32\drivers\sfaudio.sys [24064] O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 10/05/2007 - 05:16:40 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\WINDOWS\system32\drivers\sncduvc.sys [28160] O58 - SDL:[MD5.CF9CDE12FBC19DBA8DE528B7511A2F4F] - 10/04/2008 - 16:27:34 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\WINDOWS\system32\drivers\snp2uvc.sys [1804160] O58 - SDL:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 10/12/2010 - 00:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] O58 - SDL:[MD5.926E0BB4CAC05D9A0C3B59DC16FE2F1C] - 27/03/2008 - 19:14:06 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [224672] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 02/03/2006 - 12:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 02/03/2006 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.D57A909F1A9114D5D18A2EACB1AFECD5] - 04/04/2008 - 09:57:00 ---A- . (.Marvell - Miniport Driver for Marvell Yukon Ethernet Controller..) -- C:\WINDOWS\system32\drivers\yk51x86.sys [296320] O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys [34560] ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\system32\agrsmsvc.exe - Agere Modem Call Progress Audio (AgereModemAudio) .(.Agere Systems - Agere Soft Modem Call Progress Service.) - LEGACY_AGEREMODEMAUDIO O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Akamai NetSession Interface (Akamai) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AKAMAI O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (.not file.) - Apple Mobile Device (Apple Mobile Device) .(.Pas de propriétaire - Pas de description.) - LEGACY_APPLE_MOBILE_DEVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (.not file.) - Kaspersky Anti-Virus Service (AVP) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - "C:\Program Files\Bonjour\mDNSResponder.exe (.not file.) - Service Bonjour (Bonjour Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_BONJOUR_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe - Bluetooth Service (btwdins) .(.Broadcom Corporation. - Bluetooth Support Server.) - LEGACY_BTWDINS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (.not file.) - Com4QLBEx (Com4QLBEx) .(.Pas de propriétaire - Pas de description.) - LEGACY_COM4QLBEX O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\System32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(.Pas de propriétaire - Pas de description.) - LEGACY_EECTRL O64 - Services: CurCS - (.not file.) - EraserUtilDrv10910 (EraserUtilDrv10910) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV10910 O64 - Services: CurCS - (.not file.) - EraserUtilDrv11010 (EraserUtilDrv11010) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV11010 O64 - Services: CurCS - (.not file.) - EraserUtilDrvI10 (EraserUtilDrvI10) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRVI10 O64 - Services: CurCS - (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILREBOOTDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (.not file.) - FLEXnet Licensing Service (FLEXnet Licensing Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_FLEXNET_LICENSING_SERVICE O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (.not file.) - hpqwmiex (hpqwmiex) .(.Pas de propriétaire - Pas de description.) - LEGACY_HPQWMIEX O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - (.not file.) - IDSxpx86 (IDSxpx86) .(.Pas de propriétaire - Pas de description.) - LEGACY_IDSXPX86 O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - "C:\Program Files\iPod\bin\iPodService.exe (.not file.) - Service de l’iPod (iPod Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_IPOD_SERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - "C:\Program Files\Java\jre6\bin\jqs.exe (.not file.) - Java Quick Starter (JavaQuickStarterService) .(.Pas de propriétaire - Pas de description.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\kl1.sys - Kl1 (kl1) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL1 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\kl2.sys - kl2 (kl2) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL2 O64 - Services: CurCS - (.not file.) - Kaspersky Lab Boot Guard Driver (klbg) .(.Pas de propriétaire - Pas de description.) - LEGACY_KLBG O64 - Services: CurCS - C:\Windows\System32\DRIVERS\klif.sys - Kaspersky Lab Driver (KLIF) .(.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) - LEGACY_KLIF O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe - Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) .(.Nero AG - Nero BackItUp.) - LEGACY_NERO_BACKITUP_SCHEDULER_3 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\system32\drivers\PCTAppEvent.sys - PCTAppEvent Driver (PCTAppEvent) .(.PC Tools - PC Tools App Monitor Driver.) - LEGACY_PCTAPPEVENT O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys - PCTools Firewall - Packet filter driver (PCTFW-PacketFilter) .(.PC Tools - PC Tools NDIS - Packet Filter.) - LEGACY_PCTFW-PACKETFILTER O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctgntdi.sys - pctgntdi (pctgntdi) .(.PC Tools - PC Tools Generic TDI Driver.) - LEGACY_PCTGNTDI O64 - Services: CurCS - C:\Program Files\PC Tools Firewall Plus\FWService.exe - PC Tools Firewall Plus (PCToolsFirewallPlus) .(.PC Tools - PC Tools Firewall Plus service.) - LEGACY_PCTOOLSFIREWALLPLUS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctplfw.sys - pctplfw (pctplfw) .(.PC Tools - PC Tools FW Plugin Driver.) - LEGACY_PCTPLFW O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\SERIAL.sys - Serial (Serial) .(.Pas de propriétaire - Pas de description.) - LEGACY_SERIAL O64 - Services: CurCS - C:\Windows\System32\drivers\sfaudio.sys - Sonic Focus DSP Driver (SFAUDIO) .(.Sonic Focus, Inc - Sonic Focus DSP driver for ADI.) - LEGACY_SFAUDIO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\Windows\System32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - (.not file.) - Symantec Real Time Storage Protection (PEL) (SRTSPX) .(.Pas de propriétaire - Pas de description.) - LEGACY_SRTSPX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - (.not file.) - Symantec Data Store (SymDS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMDS O64 - Services: CurCS - (.not file.) - Symantec Extended File Attributes (SymEFA) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEFA O64 - Services: CurCS - (.not file.) - SymEvent (SymEvent) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEVENT O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMFW) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMFW O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMIDS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMIDS O64 - Services: CurCS - (.not file.) - Symantec Iron Driver (SymIRON) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMIRON O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMNDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMNDIS O64 - Services: CurCS - (.not file.) - Symantec Network Dispatch Driver (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - "C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe (.not file.) - Apache Tomcat (Tomcat6) .(.Pas de propriétaire - Pas de description.) - LEGACY_TOMCAT6 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\wdfmgr.exe - Windows User Mode Driver Framework (UMWdf) .(.Microsoft Corporation - Windows User Mode Driver Manager.) - LEGACY_UMWDF O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\Wdf01000.sys - Wdf01000 (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\iexplore.exe (.not file.) O68 - StartMenuInternet: <Opera.exe> <Opera>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Opera.exe (.not file.) ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - [url=http://search.live.com]Bing[/url] O69 - SBI: SearchScopes [HKCU] {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} - (DAEMON Search) - [url=http://www.daemon-search.com]DAEMON-Search.com :: EXPLORE[/url] ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\hidserv.dll [0] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [25088] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 11/12/2007 12800 | C:\WINDOWS\system32\agrsmsvc.exe (AgereModemAudio) . (.Agere Systems.) - C:\WINDOWS\system32\agrsmsvc.exe SR - | Auto 16/10/2010 37664 | "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 14/12/2010 352976 | "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe SR - | Auto 27/07/2010 345376 | "C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 31/03/2008 264800 | C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe SS - | Demand 03/04/2008 193840 | "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SS - | Demand 14/04/2008 225280 | C:\WINDOWS\System32\dmadmin.exe (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe SS - | Demand 06/11/2010 655624 | "C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Demand 01/05/2008 165192 | "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SR - | Demand 11/11/2010 820008 | "C:\Program Files\iPod\bin\iPodService.exe (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 15/09/2010 153376 | "C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe SR - | Auto 20/09/2007 853288 | C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (Nero BackItUp Scheduler 3) . (.Nero AG.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe SS - | Demand 20/09/2007 382248 | "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (NMIndexingService) . (.Nero AG.) - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe SR - | Auto 17/11/2010 287024 | C:\Program Files\PC Tools Firewall Plus\FWService.exe (PCToolsFirewallPlus) . (.PC Tools.) - C:\Program Files\PC Tools Firewall Plus\FWService.exe SS - | Demand 19/02/2010 517096 | "C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe SS - | Demand 22/07/2008 57344 | "C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe (Tomcat6) . (.Apache Software Foundation.) - C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, [url=http://www.gmer.net]GMER - Rootkit Detector and Remover[/url] Run by khvil at 15/12/2010 15:55:19 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll ACPI.sys atapi.sys spga.sys >>UNKNOWN [0x8A36F938]<< C:\WINDOWS\system32\drivers\hpdskflt.sys Hewlett-Packard Corporation Hewlett-Packard Corporation Mobile Data Protection System spga.sys 1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8A255AB8] 3 CLASSPNP[0xF74C7FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x8A2BCD58] 5 hpdskflt[0xF77184E6] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000086[0x8A2CEF18] 7 ACPI[0xF7252620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP0T0L0-3[0x8A25DD98] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, [url=http://ad13.geekstog]http://ad13.geekstog[/url] Run by khvil at 15/12/2010 15:55:19 Use the desktop link 'MBRCheck' to have full report ---\\ Liste des émulateurs de CD/DVD (Hook du MBR) O58 - SDL:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 10/12/2010 - 00:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] End of the scan (1240 lines in 01mn 28s)(0) AD-Remover: 1. ======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 ======= 2. 3. Mis à jour par TeamXscript le 08/12/10 à 10:40 4. Contact: AdRemover[DOT]contact[AT]gmail[DOT]com 5. Site web: [url=http://www.teamxscript.org]TeamXscript : AD-Remover - FindyKill - UsbFix[/url] 6. 7. C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:27:22 le 15/12/2010, Mode normal 8. 9. Microsoft Windows XP Professionnel Service Pack 3 (X86) 10. khvil@KHAVILE ( ) 11. 12. ============== ACTION(S) ============== 13. 14. 15. Fichier supprimé: C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job 16. Dossier supprimé: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\extensions\[email protected] 17. Fichier supprimé: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\searchplugins\mywebsearch.xml 18. Dossier supprimé: C:\Program Files\Ask.com 19. Dossier supprimé: C:\Documents and Settings\khvil\Application Data\AskToolbar 20. Dossier supprimé: C:\Documents and Settings\khvil\Local Settings\Application Data\AskToolbar 21. 22. (!) -- Fichiers temporaires supprimés. 23. 24. 25. -- Fichier ouvert: C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\Prefs.js -- 26. Ligne supprimée: 27. Ligne supprimée: 28. Ligne supprimée: user_pref("browser.search.selectedEngine", "MyWebSearch" ); 29. Ligne supprimée: user_pref("extensions.asktb.cbid", "HA" ); 30. Ligne supprimée: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}... 31. Ligne supprimée: user_pref("extensions.asktb.dtid", "YYYYYYYYMA" ); 32. Ligne supprimée: user_pref("extensions.asktb.fresh-install", false); 33. Ligne supprimée: user_pref("extensions.asktb.l", "dis" ); 34. Ligne supprimée: user_pref("extensions.asktb.last-config-req", "1292587667878" ); 35. Ligne supprimée: user_pref("extensions.asktb.locale", "en_US" ); 36. Ligne supprimée: user_pref("extensions.asktb.o", "15467" ); 37. Ligne supprimée: user_pref("extensions.asktb.overlay-reloaded-using-restart", true); 38. Ligne supprimée: user_pref("extensions.asktb.qsrc", "2871" ); 39. Ligne supprimée: user_pref("extensions.asktb.r", "2" ); 40. Ligne supprimée: user_pref("extensions.asktb.utorrent.isCollapsed", true); 41. Ligne supprimée: user_pref("extensions.asktb.utorrent.useOneClickMagnets", false); 42. Ligne supprimée: user_pref("extensions.enabledItems", "[email protected]:7,{20a82645-c095-46ed-80e3-0882576... 43. Ligne supprimée: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... 44. Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdEnabled", true); 45. Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties" ); 46. Ligne supprimée: user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=GRfox000&ptb=JV1... 47. -- Fichier Fermé -- 48. 49. 50. Clé supprimée: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} 51. Clé supprimée: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} 52. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} 53. Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} 54. Clé supprimée: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} 55. Clé supprimée: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} 56. Clé supprimée: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} 57. Clé supprimée: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} 58. Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd 59. Clé supprimée: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1 60. Clé supprimée: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL 61. Clé supprimée: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} 62. Clé supprimée: HKLM\Software\Conduit 63. Clé supprimée: HKCU\Software\Ask.com 64. Clé supprimée: HKCU\Software\AskToolbar 65. Clé supprimée: HKCU\Software\AppDataLow\AskToolbarInfo 66. Clé supprimée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF 67. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF 68. Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} 69. Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} 70. Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} 71. Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search 72. 73. Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440} 74. Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} 75. 76. 77. ============== SCAN ADDITIONNEL ============== 78. 79. ** Mozilla Firefox Version [3.6.13 (fr)] ** 80. 81. -- C:\Documents and Settings\khvil\Application Data\Mozilla\FireFox\Profiles\dp3lxxch.default\Prefs.js -- 82. browser.startup.homepage, hxxp://www.google.fr 83. browser.startup.homepage_override.mstone, rv:1.9.2.13 84. 85. ======================================== 86. 87. ** Internet Explorer Version [6.0.2900.5512] ** 88. 89. [HKCU\Software\Microsoft\Internet Explorer\Main] 90. Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome 91. Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 92. Do404Search: 0x01000000 93. Enable Browser Extensions: yes 94. Local Page: C:\WINDOWS\system32\blank.htm 95. Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 96. Show_ToolBar: yes 97. Start Page: hxxp://fr.msn.com/ 98. 99. [HKLM\Software\Microsoft\Internet Explorer\Main] 100. Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 101. Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 102. Delete_Temp_Files_On_Exit: yes 103. Local Page: C:\WINDOWS\system32\blank.htm 104. Search bar: hxxp://search.msn.com/spbasic.htm 105. Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 106. Start Page: hxxp://fr.msn.com/ 107. 108. [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 109. Tabs: res://ieframe.dll/tabswelcome.htm 110. Blank: res://mshtml.dll/blank.htm 111. 112. ======================================== 113. 114. C:\Program Files\Ad-Remover\Quarantine: 180 Fichier(s) 115. C:\Program Files\Ad-Remover\Backup: 14 Fichier(s) 116. 117. C:\Ad-Report-CLEAN[1].txt - 15/12/2010 (6494 Octet(s)) 118. 119. Fin à: 12:29:53, 15/12/2010 120. 121. ============== E.O.F ============== MBAM: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4052 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 15/12/2010 14:52:22 mbam-log-2010-12-15 (14-52-22).txt Type d'examen: Examen rapide Elément(s) analysé(s): 117030 Temps écoulé: 9 minute(s), 50 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) ZhpDiag.txt: Rapport de ZHPDiag v1.27.1420 par Nicolas Coolman, Update du 11/12/2010 Run by khvil at 15/12/2010 15:53:50 Web site : [url=http://www.premiumorange.com/zeb-help-process/zhpdiag.html]ZHPDiag Outil de diagnostic[/url] Contact : [email protected] ---\\ Web Browser MSIE: Internet Explorer v6.0.2900.5512 OPIE: Opera v10.63 MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut) GCIE: Google Chrome v ---\\ System Information Windows XP Professional Service Pack 3 (Build 2600) Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1976 MB (65% free) System drive C: has 32 GB (36%) free of 87 GB ---\\ Logged in mode Computer Name: KHAVILE User Name: khvil All Users Names: SUPPORT_388945a0, khvil, HelpAssistant, Administrateur, Unselected Option: O1,O45,O61,O62,O65,O82 Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 87 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 91 Go) E:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 03:34:03.) -- C:\Windows\Explorer.exe [1037824] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 03:34:28.) -- C:\Windows\System32\Winlogon.exe [512000] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 19:40:30.) -- C:\Windows\System32\drivers\atapi.sys [96512] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 20:15:53.) -- C:\Windows\System32\drivers\ntfs.sys [574976] ---\\ Processus lancés [MD5.F3845C2AE550443297601C2909B30049] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800] [MD5.8ED60797908FD394EEE0D6949F493224] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\WINDOWS\system32\agrsmsvc.exe [12800] [MD5.018857EAD9A077A56AEDFC0E5EF7A24A] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [MD5.946D70667B0119F2BEEAE0849E1D46A2] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [352976] [MD5.673CF4F6BB1FBE09331B526802FBB892] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.6D4028D458EAAA1782099750790DC8C9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [853288] [MD5.185DC440D18181D9FBB074C326A2D1D0] - (.PC Tools - PC Tools Firewall Plus service.) -- C:\Program Files\PC Tools Firewall Plus\FWService.exe [287024] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472] [MD5.EE38DDA58C47C9A83B0BD32EC78E54D8] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [MD5.869513CA8428F231C7CAC62A6F9B974A] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe [274608] [MD5.FFC7CF5E4DAEDC38A818E9890EF337D2] - (.PC Tools - PC Tools Firewall GUI.) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2676696] [MD5.F1A3F9791F1704C170A869C857FECC05] - (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe [23040] [MD5.FF1AF4C9DC2D3827B363931BC0ED6024] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [576104] [MD5.B4DAAB34E7A815EE58E2B8B1D329C899] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE [1440384] [MD5.6351B24DC3CB7DFFDE917D1276EE166C] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820008] [MD5.AE22197774B91282D1744EF9C4B46CF2] - (.RealNetworks, Inc. - RealPlayer.) -- c:\program files\real\realplayer\RealPlay.exe [491168] [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344] [MD5.8E4397B6C5AAE05619CF9A535E793639] - (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtblfs.exe [129720] [MD5.85A3C0100BABCFA1B31BC1FECDC80E18] - (.LG Electronics - LG EV-DO Rev.A USB Modem.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\IEUM.exe [1376256] [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [MD5.CD2529845B83B5D952D91FDC0143A266] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [991800] [MD5.9A80E1F31DDB1FE19B4E3C34773B7B57] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [620544] ---\\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1) P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation (written by Digital R - Npdsplay dll.) -- C:\Program Files\Opera\Program\Plugins\npdsplay.dll P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Opera\Program\Plugins\NPOFF12.DLL P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Opera\Program\Plugins\nppl3260.dll P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Opera\Program\Plugins\nprjplug.dll P1 - OPN:Opera Plugin Navigator . (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files\Opera\Program\Plugins\nprpjplug.dll P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - DRM Store Netscape Plugin.) -- C:\Program Files\Opera\Program\Plugins\npwmsdrm.dll ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\[email protected] P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.1".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50524.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@movenetworks.com/Quantum Media Player] - (.Move Networks - npmnqmp 989898989877.) -- C:\Documents and Settings\khvil\Application Data\Move Networks\plugins\npqmp071700000016.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=12.0.1.609] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- c:\program files\real\realplayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=12.0.1.609] - (.RealNetworks, Inc. - 12.0.1.609.) -- c:\program files\real\realplayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@real.com/RhapsodyPlayerEngine,version=1.1] - (.RealNetworks, Inc. - Rhapsody Player Engine Plugin.) -- C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll P2 - FPN: [HKCU] [@movenetworks.com/Quantum Media Player] - (.Move Networks - npmnqmp 989898989877.) -- C:\Documents and Settings\khvil\Application Data\Move Networks\plugins\npqmp071700000016.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\1.2.183.39\npGoogleOneClick8.dll M0 - MFSP: prefs.js [khvil - dp3lxxch.default] [url=http://www.google.fr]Google[/url] M2 - MFEP: prefs.js [khvil - dp3lxxch.default\[email protected]] [] Firebug v1.6.0 (.Joe Hewitt.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}] [] ImTranslator v3.3.5 (.Smart Link Corporation.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{c45c406e-ab73-11d8-be73-000a95be3b12}] [] Web Developer v1.1.8 (.Chris Pederick.) M2 - MFEP: prefs.js [khvil - dp3lxxch.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.2 (.Wladimir Palant.) ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G0 - GCSP: Preference [user Data\Default][HomePage] [url=http://www.google.com]Google[/url] G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.3 (Activé) G2 - GCE: Preference [user Data\Default] [ldjcbfljkplgifccngillicohclloidg] AT_KarimRashidV3 v.3 (Activé) ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://fr.msn.com/]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://fr.msn.com/]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome]MSN : Hotmail, Messenger, Bing, Actualité et Sport[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=http://go.microsoft.com/fwlink/?LinkId=54896]Bing[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]Sign In[/url] R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\system32\shdocvw.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} . (.Kaspersky Lab ZAO - IE Virtual Keyboard.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - WebToolBar component.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [HKLM] C:\Documents and Settings\khvil\Application Data\Do_Not_Delete\CG02_Norton_AV_2011.exe (.not file.) O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS5ServiceManager\CS5ServiceManager.exe O4 - HKLM\..\Run: [switchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe O4 - HKLM\..\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O4 - HKLM\..\Run: [00PCTFW] . (.PC Tools - PC Tools Firewall GUI.) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe O4 - HKCU\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-606747145-2000478354-725345543-1003\..\Run: [REVAService] . (.LG Electronics - LG EV-DO Rev.A USB Modem Service Program.) -- C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe O4 - HKUS\S-1-5-21-606747145-2000478354-725345543-1003\..\Run: [AdobeBridge] Clé orpheline O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk . (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe After Effects CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe After Effects CS4\Support Files\AfterFX.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS4.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS5.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Device Central CS4.lnk . (.Adobe Systems.) -- C:\Program Files\Adobe\Adobe Device Central CS4\DeviceCentral.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Device Central CS5.lnk . (.Adobe Systems Inc..) -- C:\Program Files\Adobe\Adobe Device Central CS5\DeviceCentral.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit CS4\ExtendScript Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit CS5.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities - CS5\ExtendScript Toolkit CS5\ExtendScript Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Extension Manager CS4.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Extension Manager CS4\Adobe Extension Manager CS4.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Extension Manager CS5.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Extension Manager CS5\Adobe Extension Manager CS5.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Flash Professional CS5.lnk . (.Adobe Systems Incorporated..) -- C:\Program Files\Adobe\Adobe Flash CS5\Flash.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Help.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Help\Adobe Help.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Illustrator CS5.lnk . (.Adobe Systems Inc..) -- C:\Program Files\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\Illustrator.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Media Encoder CS4.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Media Encoder CS4\Adobe Media Encoder.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Media Encoder CS5.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Media Encoder CS5\Adobe Media Encoder.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS5\Photoshop.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Pixel Bender Toolkit 2.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities - CS5\Pixel Bender Toolkit 2\Pixel Bender Toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Pixel Bender Toolkit.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Utilities\Pixel Bender Toolkit\pixel_bender_toolkit.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Invite de commande du SDK de Adobe Flash Builder 4 Plug-in.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\cmd.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur Eclipse de Adobe Flash Builder 4 Plug-in.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe Flash Builder 4 Plug-in\eclipse-host-distro\eclipse.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Visual Basic 2008 Express Edition.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\vbexpress.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mocha for After Effects CS4.lnk . (.Pas de propriétaire.) -- C:\Program Files\Adobe\Adobe After Effects CS4\Mocha\bin\Mocha For After Effects.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Opera.lnk . (.Opera Software.) -- C:\Program Files\Opera\opera.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Projet1.lnk . (.Pas de propriétaire.) -- C:\Program Files\Projet1\Projet1.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Documents And Settings\khvil\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: &Envoyer à OneNote - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MI1933~1\Office12\EXCEL.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Envoyer à Bluetooth . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\kbrd.ico O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MI1933~1\Office12\REFBARH.ICO O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\logo.ico O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{267EB60A-91E0-4F91-9A4E-5D141B891E57}: NameServer = 192.168.50.58 192.168.60.55 O17 - HKLM\System\CCS\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CS1\Services\Tcpip\..\{267EB60A-91E0-4F91-9A4E-5D141B891E57}: NameServer = 192.168.50.58 192.168.60.55 O17 - HKLM\System\CS1\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CS3\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O17 - HKLM\System\CCS\Services\Tcpip\..\{EFE63DA2-16FB-4513-8DC5-18BE34566508}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{EFE63DA2-16FB-4513-8DC5-18BE34566508}: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll O20 - Winlogon Notify: klogon . (.Kaspersky Lab ZAO - Logon Visualizer.) -- C:\WINDOWS\system32\klogon.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (AgereModemAudio) . (.Agere Systems - Agere Soft Modem Call Progress Service.) - C:\WINDOWS\system32\agrsmsvc.exe O23 - Service: (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (AVP) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: (PCToolsFirewallPlus) . (.PC Tools - PC Tools Firewall Plus service.) - C:\Program Files\PC Tools Firewall Plus\FWService.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - "C:\Program Files\Microsoft Office\Office12\WINWORD.exe (.not file.) ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: 0.0.0.0 localhost O1 - Hosts: 0.0.0.0 localhost ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-KHAVILE-khvil.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003Core.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003UA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-606747145-2000478354-725345543-1003.job [MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-KHAVILE-khvil] (.Adobe Systems Incorporated.) -- C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003Core] (.Google Inc..) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-606747145-2000478354-725345543-1003UA] (.Google Inc..) -- C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [MD5.BDEE1AEE61C63AB26A8A4F6B760B7388] [APT] [RealUpgradeScheduledTaskS-1-5-21-606747145-2000478354-725345543-1003] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\realupgrade.exe ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (Drive) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\himen.sys (.not file.) O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (kl2) . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl2.sys O41 - Driver: (KLIF) . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) - C:\Windows\System32\DRIVERS\klif.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (pctgntdi) . (.PC Tools - PC Tools Generic TDI Driver.) - C:\WINDOWS\system32\drivers\pctgntdi.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\Windows\System32\DRIVERS\wmiacpi.sys ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} O42 - Logiciel: Adobe After Effects CS4 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_3dcb365ab9e01871fb8c6f27b0ea079 O42 - Logiciel: Adobe After Effects CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {45EC816C-0771-4C14-AE6D-72D1B578F4C8} O42 - Logiciel: Adobe After Effects CS4 Presets - (.Adobe Systems Incorporated.) [HKLM] -- {44E240EC-2224-4078-A88B-2CEE0D3016EF} O42 - Logiciel: Adobe After Effects CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_5aab5a491a3a52ae624fd639f6aaa95 O42 - Logiciel: Adobe After Effects CS4 Third Party Content - (.Adobe Systems Incorporated.) [HKLM] -- {67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E} O42 - Logiciel: Adobe Anchor Service CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {1618734A-3957-4ADD-8199-F973763109A8} O42 - Logiciel: Adobe Bridge CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {83877DB1-8B77-45BC-AB43-2BAC22E093E0} O42 - Logiciel: Adobe CMaps CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {94D398EB-D2FD-4FD1-B8C4-592635E8A191} O42 - Logiciel: Adobe Color Video Profiles AE CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B15381DD-FF97-4FCD-A881-ED4DB0975500} O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- {EE531675-A09C-51DD-F356-ECA9D6857039} O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683} O42 - Logiciel: Adobe Device Central CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {67F0E67A-8E93-4C2C-B29D-47C48262738A} O42 - Logiciel: Adobe Dynamiclink Support - (.Adobe Systems Incorporated.) [HKLM] -- {60DB5894-B5A1-4B62-B0F3-669A22C0EE5D} O42 - Logiciel: Adobe ExtendScript Toolkit CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F8EF2B3F-C345-4F20-8FE4-791A20333CD5} O42 - Logiciel: Adobe Extension Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {054EFA56-2AC1-48F4-A883-0AB89874B972} O42 - Logiciel: Adobe Flash Builder 4 Plug-in - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Builder 4 Plug-in O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems, Inc..) [HKLM] -- {6E9EF98E-259E-416D-B5F8-0ABDB99942CE} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Flash Professional CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {CFC9F871-7C40-40B6-BE4A-B98A5B309716} O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM] -- {FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794} O42 - Logiciel: Adobe Illustrator CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7} O42 - Logiciel: Adobe Media Encoder CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {DEB90B8E-0DCB-48CE-B90E-8842A2BD643E} O42 - Logiciel: Adobe Media Encoder CS4 Additional Exporter - (.Adobe Systems Incorporated.) [HKLM] -- {BE9CEAAA-F069-4331-BF2F-8D350F6504F4} O42 - Logiciel: Adobe MotionPicture Color Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B05DE7B7-0B40-4411-BD4B-222CAE2D8F15} O42 - Logiciel: Adobe Output Module - (.Adobe Systems Incorporated.) [HKLM] -- {BB4E33EC-8181-4685-96F7-8554293DEC6A} O42 - Logiciel: Adobe PDF Library Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F93C84A6-0DC6-42AF-89FA-776F7C377353} O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {15FEDA5F-141C-4127-8D7E-B962D1742728} O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001} O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {411F3ABA-2AB5-4799-AA19-6ADF0A8F7424} O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {8EB8E60B-315D-44EB-A896-10D88602EE46} O42 - Logiciel: Adobe Type Support CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {820D3F45-F6EE-4AAF-81EF-CE21FF21D230} O42 - Logiciel: Adobe Update Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {05308C4E-7285-4066-BAE3-6B50DA6ED755} O42 - Logiciel: Adobe XMP Panels CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3A4E8896-C2E7-4084-A4A4-B8FD1894E739} O42 - Logiciel: Agere Systems HDA Modem - (.Agere Systems.) [HKLM] -- Agere Systems Soft Modem O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM] -- Akamai O42 - Logiciel: Apache Tomcat 6.0 (remove only) - (.Pas de propriétaire.) [HKLM] -- Apache Tomcat 6.0 O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {17424F35-8B77-4ADF-BC63-BF9B81418539} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {308B6AEA-DE50-4666-996D-0FA461719D6B} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Bit Che - (.Convivea, Inc..) [HKLM] -- {D9DA5C41-964F-455F-B5E7-3664519440E8}_is1 O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {FF1C31AE-0CDC-40CE-AB85-406F8B70D643} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CamStudio 2.0 Fr - (.Pas de propriétaire.) [HKLM] -- CamStudio 2.0 Fr_is1 O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: FileZilla Client 3.3.4.1 - (.Pas de propriétaire.) [HKLM] -- FileZilla Client O42 - Logiciel: FormatFactory 2.50 - (.Free Time.) [HKLM] -- FormatFactory O42 - Logiciel: Gestion de fournisseurs - (.UNKNOWN.) [HKLM] -- Projet1 O42 - Logiciel: Gestion de fournisseurs - (.UNKNOWN.) [HKLM] -- {E2485922-D9F9-9169-CA13-39D0CD954665} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard.) [HKLM] -- {A70B15A5-AABC-41D0-A2AC-678BED567894} O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology - (.HP.) [HKLM] -- {84814E6B-2581-46EC-926A-823BD1C670F6} O42 - Logiciel: HP Quick Launch Buttons 6.40 E1 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} O42 - Logiciel: HP Webcam - (.Sonix.) [HKLM] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI O42 - Logiciel: Java Platform, Enterprise Edition 5 SDK - (.Pas de propriétaire.) [HKLM] -- Java Platform, Enterprise Edition 5 SDK O42 - Logiciel: Java(TM) 6 Update 22 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Java(TM) SE Development Kit 6 - (.Sun Microsystems, Inc..) [HKLM] -- {32A3A4F4-B792-11D6-A78A-00B0D0160000} O42 - Logiciel: Java(TM) SE Runtime Environment 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160000} O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- InstallWIX_{66F1F013-008F-4875-B283-5A814B820347} O42 - Logiciel: Kaspersky Anti-Virus 2011 - (.Kaspersky Lab.) [HKLM] -- {66F1F013-008F-4875-B283-5A814B820347} O42 - Logiciel: La boite a couleurs version 1.6.15 - (.Pas de propriétaire.) [HKLM] -- La boite a couleurs_is1 O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} O42 - Logiciel: Macromedia Dreamweaver 8 - (..) [HKLM] -- {5FD788ED-1A37-4496-9BDD-463F493B27FA} O42 - Logiciel: Macromedia Extension Manager - (.Nom de votre société.) [HKLM] -- {3C8C9FB3-5FDF-40B4-B314-EAD722728C76} O42 - Logiciel: Macromedia Flash 8 - (.Macromedia.) [HKLM] -- {2BD5C305-1B27-4D41-B690-7A61172D2FEB} O42 - Logiciel: Macromedia Flash 8 Video Encoder - (.Macromedia.) [HKLM] -- {8BF2C401-02CE-424D-BC26-6C4F9FB446B6} O42 - Logiciel: Macromedia Flash Player 8 - (.Macromedia.) [HKLM] -- {885A63EA-382B-4DD4-A755-14809B8557D6} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- Marvell Miniport Driver O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {3F7924B9-D148-3141-87B1-68F36043A940} O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {511DF669-2930-30C0-8EB6-552887E29EC8} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra - (.Microsoft Corporation.) [HKLM] -- {5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server Compact 3.5 Design Tools FRA - (.Microsoft Corporation.) [HKLM] -- {043ECF7B-4724-4F7B-8A9D-BC22719E95F7} O42 - Logiciel: Microsoft SQL Server Compact 3.5 FRA - (.Microsoft Corporation.) [HKLM] -- {BE361597-42AC-4513-9BA6-FFAB310038FB} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Visual Basic 2008 Express - Français - (.Microsoft Corporation.) [HKLM] -- Microsoft Visual Basic 2008 Express Edition - FRA O42 - Logiciel: Microsoft Visual Basic 2008 Express Edition - FRA - (.Microsoft Corporation.) [HKLM] -- {ACC61C04-48C5-3F6F-977B-AD33E94E5F40} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework - (.Microsoft.) [HKLM] -- {AB47EEE8-507B-331F-AA28-B7C7257F014C} O42 - Logiciel: Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 - (.Microsoft Corporation.) [HKLM] -- {07FCBED5-94C3-4F94-B9D3-360FA27C7B06} O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} O42 - Logiciel: Modem LG LDU-1900D - (.LG Electronics.) [HKLM] -- {43DB077F-C85F-42CC-8302-17CBEE4A6BC6} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack - fra O42 - Logiciel: Move Media Player - (.Move Networks.) [HKCU] -- Move Media Player O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13) O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM] -- {B944FA21-81AF-4A77-8328-CE4F4CC51036} O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: Opera 10.63 - (.Opera Software ASA.) [HKLM] -- {87CC8013-56D1-43E1-A0A5-AD406B4EBA95} O42 - Logiciel: PC Tools Firewall Plus 7.0 - (.PC Tools.) [HKLM] -- PC Tools Firewall Plus O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8} O42 - Logiciel: Pixel Bender Toolkit - (.Adobe Systems Incorporated.) [HKLM] -- {43509E18-076E-40FE-AF38-CA5ED400A5A9} O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB} O42 - Logiciel: Rhapsody Player Engine - (.RealNetworks.) [HKLM] -- {22DE1881-9D24-4981-B5CC-EC7E9F2F4D52} O42 - Logiciel: SCR3xxx Smart Card Reader - (.SCM Microsystems.) [HKLM] -- {983980FC-66FB-4ECC-A5D8-4565BE217733} O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A} O42 - Logiciel: Skype™ 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C} O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey O42 - Logiciel: TeraCopy 2.12 - (.Code Sector Inc..) [HKLM] -- TeraCopy_is1 O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM] -- {3921A67A-5AB1-4E48-9444-C71814CF3027} O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service O42 - Logiciel: X-Lite 3.0 - (.CounterPath Solutions Inc..) [HKLM] -- X-Lite 3.0_is1 O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {E8843212-F0FC-4C3B-BFF3-D51829CB4F19} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Analog Devices] [HKCU\Software\Apache Software Foundation] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\BCCP] [HKCU\Software\BitTorrent] [HKCU\Software\CG02_Norton_AV_2011] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Code Sector] [HKCU\Software\CounterPath] [HKCU\Software\DT Soft] [HKCU\Software\Digital River] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EBInstaller] [HKCU\Software\EasyBannerFL] [HKCU\Software\EasyBanner] [HKCU\Software\Extensoft] [HKCU\Software\Flash Banner Creator] [HKCU\Software\FreeTime] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Hewlett-Packard] [HKCU\Software\Intel] [HKCU\Software\Intelligent Converters] [HKCU\Software\JavaSoft] [HKCU\Software\KasperskyLab] [HKCU\Software\LG Electronics] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MoveNetworks] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\Norton] [HKCU\Software\ODBC] [HKCU\Software\Opera Software] [HKCU\Software\PCTools] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\SFX TEAM] [HKCU\Software\SecureMedia] [HKCU\Software\Skynet] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Software] [HKCU\Software\Synaptics] [HKCU\Software\Sysinternals] [HKCU\Software\Tific] [HKCU\Software\Trolltech] [HKCU\Software\UDC] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSO] [HKCU\Software\Widcomm] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\ZD Soft] [HKCU\Software\fCoder] [HKLM\Software\781] [HKLM\Software\Adobe] [HKLM\Software\Agere] [HKLM\Software\Ahead] [HKLM\Software\Analog Devices] [HKLM\Software\Andrea Electronics] [HKLM\Software\Apache Software Foundation] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Audible] [HKLM\Software\AviSynth] [HKLM\Software\C07ft5Y] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Code Sector] [HKLM\Software\DT Soft] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EasyBanner] [HKLM\Software\FileZilla 3] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\HPQ] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard Company] [HKLM\Software\Hewlett-Packard] [HKLM\Software\Imagineer Systems Ltd] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KasperskyLab] [HKLM\Software\LG Electronics] [HKLM\Software\Licenses] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Marvell] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Nero] [HKLM\Software\Netscape] [HKLM\Software\ODBC] [HKLM\Software\Opera Software] [HKLM\Software\PCTools] [HKLM\Software\PDFCreator] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RealNetworks] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\S3R521] [HKLM\Software\Schlumberger] [HKLM\Software\Secure] [HKLM\Software\Skype] [HKLM\Software\Sonix] [HKLM\Software\Staccato] [HKLM\Software\Sun Microsystems] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\Synthetic Aperture] [HKLM\Software\TrendMicro] [HKLM\Software\VSO] [HKLM\Software\Widcomm] [HKLM\Software\WinRAR] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\Wow6432Node] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\fCoder] [HKLM\Software\instinno] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD: 01/12/2010 - 09:04:16 ----D- C:\Program Files\Adobe O43 - CFD: 22/06/2010 - 15:45:42 ----D- C:\Program Files\Analog Devices O43 - CFD: 04/12/2010 - 03:05:38 ----D- C:\Program Files\Apache Software Foundation O43 - CFD: 09/11/2010 - 10:26:44 ----D- C:\Program Files\Apple Software Update O43 - CFD: 05/09/2010 - 01:40:40 ----D- C:\Program Files\Bit Che O43 - CFD: 11/10/2010 - 05:47:58 ----D- C:\Program Files\BlueSquad O43 - CFD: 12/11/2010 - 09:33:42 ----D- C:\Program Files\Bonjour O43 - CFD: 02/12/2010 - 09:42:44 ----D- C:\Program Files\CamStudio O43 - CFD: 15/10/2010 - 03:10:06 ----D- C:\Program Files\CCleaner O43 - CFD: 22/06/2010 - 15:29:22 ----D- C:\Program Files\ComPlus Applications O43 - CFD: 29/10/2010 - 14:21:22 ----D- C:\Program Files\CounterPath O43 - CFD: 01/12/2010 - 14:24:16 ----D- C:\Program Files\DivX O43 - CFD: 17/12/2010 - 11:38:24 ----D- C:\Program Files\EasyBanner 3 O43 - CFD: 19/07/2010 - 19:37:20 ----D- C:\Program Files\EasyPHP5.3.0 O43 - CFD: 15/12/2010 - 07:50:00 ----D- C:\Program Files\Fichiers communs O43 - CFD: 29/08/2010 - 06:18:00 ----D- C:\Program Files\FileZilla FTP Client O43 - CFD: 17/12/2010 - 12:12:18 ----D- C:\Program Files\Flash Banner Creator O43 - CFD: 11/10/2010 - 05:47:22 ----D- C:\Program Files\Free PDF to Word Converter O43 - CFD: 19/09/2010 - 08:01:28 ----D- C:\Program Files\FreeTime O43 - CFD: 10/12/2010 - 16:48:06 ----D- C:\Program Files\Genuitec O43 - CFD: 26/06/2010 - 19:06:26 ----D- C:\Program Files\Google O43 - CFD: 22/06/2010 - 16:03:22 ----D- C:\Program Files\Hewlett-Packard O43 - CFD: 22/06/2010 - 15:51:10 ----D- C:\Program Files\HPQ O43 - CFD: 24/10/2010 - 05:58:32 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 22/06/2010 - 15:56:30 ----D- C:\Program Files\Intel O43 - CFD: 28/06/2010 - 20:02:54 ----D- C:\Program Files\Internet Explorer O43 - CFD: 12/11/2010 - 20:46:54 ----D- C:\Program Files\iPod O43 - CFD: 12/11/2010 - 20:47:34 ----D- C:\Program Files\iTunes O43 - CFD: 22/10/2010 - 09:39:54 ----D- C:\Program Files\Java O43 - CFD: 17/12/2010 - 16:50:32 ----D- C:\Program Files\Kaspersky Lab O43 - CFD: 15/10/2010 - 05:10:54 ----D- C:\Program Files\KHAVILE O43 - CFD: 22/06/2010 - 16:35:20 ----D- C:\Program Files\LG Electronics O43 - CFD: 12/11/2010 - 00:14:46 ----D- C:\Program Files\Macromedia O43 - CFD: 22/06/2010 - 19:43:02 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 22/06/2010 - 16:01:36 ----D- C:\Program Files\Marvell O43 - CFD: 28/06/2010 - 20:06:48 ----D- C:\Program Files\Messenger O43 - CFD: 22/06/2010 - 15:32:56 ----D- C:\Program Files\microsoft frontpage O43 - CFD: 06/11/2010 - 22:55:46 ----D- C:\Program Files\Microsoft Office O43 - CFD: 23/06/2010 - 23:47:06 ----D- C:\Program Files\Microsoft SDKs O43 - CFD: 29/06/2010 - 15:39:20 ----D- C:\Program Files\Microsoft Silverlight O43 - CFD: 23/06/2010 - 23:51:02 ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 23/06/2010 - 23:51:04 ----D- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 06/11/2010 - 22:55:40 ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 06/11/2010 - 22:48:02 ----D- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 23/06/2010 - 23:51:08 ----D- C:\Program Files\Microsoft Visual Studio 9.0 O43 - CFD: 06/11/2010 - 22:56:30 ----D- C:\Program Files\Microsoft Works O43 - CFD: 23/06/2010 - 23:47:36 ----D- C:\Program Files\Microsoft.NET O43 - CFD: 28/06/2010 - 20:11:32 ----D- C:\Program Files\Movie Maker O43 - CFD: 15/12/2010 - 18:48:44 ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 06/11/2010 - 22:56:08 ----D- C:\Program Files\MSBuild O43 - CFD: 22/06/2010 - 15:28:24 ----D- C:\Program Files\MSN O43 - CFD: 22/06/2010 - 15:28:56 ----D- C:\Program Files\MSN Gaming Zone O43 - CFD: 24/06/2010 - 02:00:56 ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 23/06/2010 - 02:00:50 ----D- C:\Program Files\MSXML 6.0 O43 - CFD: 22/06/2010 - 20:52:16 ----D- C:\Program Files\Nero O43 - CFD: 28/06/2010 - 19:59:32 ----D- C:\Program Files\NetMeeting O43 - CFD: 07/08/2010 - 18:31:08 ----D- C:\Program Files\Notepad++ O43 - CFD: 22/06/2010 - 15:29:06 ----D- C:\Program Files\Online Services O43 - CFD: 06/11/2010 - 10:31:44 ----D- C:\Program Files\Opera O43 - CFD: 28/06/2010 - 20:12:12 ----D- C:\Program Files\Outlook Express O43 - CFD: 15/12/2010 - 08:59:48 ----D- C:\Program Files\PC Tools Firewall Plus O43 - CFD: 29/09/2010 - 04:05:30 ----D- C:\Program Files\PDFCreator O43 - CFD: 31/10/2010 - 09:29:30 ----D- C:\Program Files\pdfsam O43 - CFD: 29/09/2010 - 21:13:54 ----D- C:\Program Files\Projet1 O43 - CFD: 09/12/2010 - 18:00:02 ----D- C:\Program Files\QuickTime O43 - CFD: 11/12/2010 - 08:24:20 ----D- C:\Program Files\Real O43 - CFD: 23/06/2010 - 02:11:30 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 22/06/2010 - 16:00:02 ----D- C:\Program Files\SCM Microsystems O43 - CFD: 22/06/2010 - 15:31:16 ----D- C:\Program Files\Services en ligne O43 - CFD: 03/07/2010 - 16:40:12 R---D- C:\Program Files\Skype O43 - CFD: 22/06/2010 - 16:02:08 ----D- C:\Program Files\Synaptics O43 - CFD: 08/07/2010 - 21:17:58 ----D- C:\Program Files\TeraCopy O43 - CFD: 10/09/2010 - 23:07:10 ----D- C:\Program Files\trend micro O43 - CFD: 22/06/2010 - 15:42:32 --H-D- C:\Program Files\Uninstall Information O43 - CFD: 11/10/2010 - 06:26:04 ----D- C:\Program Files\Universal Document Converter O43 - CFD: 11/12/2010 - 09:06:14 ----D- C:\Program Files\uTorrent O43 - CFD: 22/06/2010 - 15:53:42 ----D- C:\Program Files\WIDCOMM O43 - CFD: 28/06/2010 - 20:03:22 ----D- C:\Program Files\Windows Media Player O43 - CFD: 28/06/2010 - 19:59:28 ----D- C:\Program Files\Windows NT O43 - CFD: 20/09/2010 - 01:17:12 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 22/06/2010 - 15:31:20 --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 22/06/2010 - 16:25:56 ----D- C:\Program Files\WinRAR O43 - CFD: 22/06/2010 - 15:32:56 ----D- C:\Program Files\xerox O43 - CFD: 26/09/2010 - 23:30:16 --H-D- C:\Program Files\Zero G Registry O43 - CFD: 15/12/2010 - 15:53:58 ----D- C:\Program Files\ZHPDiag O43 - CFD: 07/11/2010 - 12:20:52 ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD: 19/10/2010 - 07:40:14 ----D- C:\Program Files\Fichiers Communs\Adobe AIR O43 - CFD: 15/12/2010 - 15:47:56 ----D- C:\Program Files\Fichiers Communs\Akamai O43 - CFD: 12/11/2010 - 20:46:52 ----D- C:\Program Files\Fichiers Communs\Apple O43 - CFD: 06/11/2010 - 22:55:40 ----D- C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD: 19/10/2010 - 10:18:28 ----D- C:\Program Files\Fichiers Communs\DivX Shared O43 - CFD: 03/08/2010 - 22:03:12 ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD: 29/10/2010 - 14:21:24 ----D- C:\Program Files\Fichiers Communs\Intel O43 - CFD: 28/09/2010 - 13:43:10 ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD: 03/08/2010 - 22:04:52 ----D- C:\Program Files\Fichiers Communs\Macromedia O43 - CFD: 02/07/2010 - 12:03:42 ----D- C:\Program Files\Fichiers Communs\Macrovision Shared O43 - CFD: 09/12/2010 - 06:29:44 ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD: 22/06/2010 - 15:30:28 ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD: 22/06/2010 - 20:52:56 ----D- C:\Program Files\Fichiers Communs\Nero O43 - CFD: 22/06/2010 - 17:23:16 ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD: 15/12/2010 - 08:01:50 ----D- C:\Program Files\Fichiers Communs\PC Tools O43 - CFD: 11/12/2010 - 08:21:18 ----D- C:\Program Files\Fichiers Communs\Real O43 - CFD: 22/06/2010 - 15:30:32 ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD: 03/07/2010 - 16:40:02 ----D- C:\Program Files\Fichiers Communs\Skype O43 - CFD: 22/06/2010 - 16:00:38 ----D- C:\Program Files\Fichiers Communs\SNP2UVC O43 - CFD: 22/06/2010 - 17:23:14 ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD: 06/11/2010 - 22:47:32 ----D- C:\Program Files\Fichiers Communs\System O43 - CFD: 11/12/2010 - 08:24:08 ----D- C:\Program Files\Fichiers Communs\xing shared ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.1FA7BC2C6B333768E34D0A277D93DC9B] - 17/12/2010 - 16:53:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB980195.log [6120] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:53:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1875729] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:52:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem.txt [6256] O44 - LFC:[MD5.C780C6FBB347EF867EE8D10F32F82AB7] - 15/12/2010 - 15:48:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/12/2010 - 15:48:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:47:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 15:47:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 15/12/2010 - 15:47:51 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 15/12/2010 - 11:57:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32578] O44 - LFC:[MD5.3A2CD71EA9BB7ED9FA9A30CC7010FFA0] - 15/12/2010 - 10:43:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2286198.log [4303] O44 - LFC:[MD5.AF6D24F6F9C78607011E1FBC6EEFB4A1] - 15/12/2010 - 10:41:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2345886.log [5338] O44 - LFC:[MD5.7CE7668C946A4A25255FCC5B00EC21CE] - 15/12/2010 - 10:41:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2115168.log [5208] O44 - LFC:[MD5.3FE68D7DC9362F3FC3D84089A1319553] - 15/12/2010 - 10:40:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2443105.log [5098] O44 - LFC:[MD5.A4268E7DD9BB538940C5EE39D46424E8] - 15/12/2010 - 10:40:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982132.log [4968] O44 - LFC:[MD5.53F0C8BAE5388564C9445AFB2F86BB4E] - 15/12/2010 - 10:40:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2347290.log [4868] O44 - LFC:[MD5.8B73EF6FA916010B026D643C6598B482] - 15/12/2010 - 10:38:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2079403.log [4762] O44 - LFC:[MD5.4403059AEF035FCD832BB4183ABAF6E7] - 15/12/2010 - 10:38:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB979687.log [4638] O44 - LFC:[MD5.0966D373D6791B43C7CE192DDA6806E8] - 15/12/2010 - 10:37:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2121546.log [4523] O44 - LFC:[MD5.0A494F484D06B62E18057EEB2CEF6AB8] - 15/12/2010 - 10:37:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2436673.log [4242] O44 - LFC:[MD5.CDB42E763DADE2C5CA451EC7079E8240] - 15/12/2010 - 10:35:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2416400.log [4804] O44 - LFC:[MD5.CE02072E15870AB4FC418DB40D1DC231] - 15/12/2010 - 10:34:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2141007.log [4186] O44 - LFC:[MD5.6494D1128DF20ED9CEF6569940372533] - 15/12/2010 - 10:32:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2296199.log [4067] O44 - LFC:[MD5.612576BFB3008AC65E2A042A3102EA19] - 15/12/2010 - 10:29:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB980436.log [3944] O44 - LFC:[MD5.62999BF9CCC3D8A5A45C3FED855F465E] - 15/12/2010 - 10:29:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981322.log [3829] O44 - LFC:[MD5.84EB7BB77C29DAEFE0BFA194A5EA55D0] - 15/12/2010 - 10:28:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982665.log [3604] O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 15/12/2010 - 08:41:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\NeroDigital.ini [69] O44 - LFC:[MD5.807FF1DD6E1BDF8E7D2062FCA0DAECAF] - 15/12/2010 - 08:01:50 ---A- . (.PC Tools - PC Tools KDS Core Driver.) -- C:\WINDOWS\System32\drivers\PCTCore.sys [218592] O44 - LFC:[MD5.C0521E545DEFEA6934D688E58556A20D] - 15/12/2010 - 08:01:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [237333] O44 - LFC:[MD5.2D9BF28D68BE7B9823C9C567505F613B] - 15/12/2010 - 07:49:58 ---A- . (.PC Tools - PC Tools NDIS - DNS.) -- C:\WINDOWS\System32\drivers\pctNdis-DNS.sys [32808] O44 - LFC:[MD5.3EC79CFB2E0E74AADA8B561ED8904577] - 15/12/2010 - 07:49:58 ---A- . (.PC Tools - PC Tools NDIS Driver.) -- C:\WINDOWS\System32\drivers\pctNdis.sys [57536] O44 - LFC:[MD5.989A67150C055F19B77C8DE656FC5A3C] - 15/12/2010 - 06:36:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_Agere Systems HDA Modem.txt [8382] O44 - LFC:[MD5.395A295FD9EA657B4A3621E402CC56C5] - 14/12/2010 - 19:48:44 ---A- . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) -- C:\WINDOWS\System32\drivers\klif.sys [475736] O44 - LFC:[MD5.C5D9254E5FE09235AC1061C70FB99F1F] - 14/12/2010 - 19:48:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\klick.dat [97859] O44 - LFC:[MD5.E3367A4B3343BC35344DCDA7B570A8E4] - 14/12/2010 - 19:48:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\klin.dat [114243] O44 - LFC:[MD5.9727C7AAD7C801A09C74D9B0BA21AFA5] - 14/12/2010 - 14:22:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem #3.txt [9680] O44 - LFC:[MD5.4601B887E8BF37C5411B01F3A99E1D29] - 11/12/2010 - 08:23:28 ---A- . (.RealNetworks, Inc. - Real Player(tm) ActiveX Control.) -- C:\WINDOWS\System32\rmoc3260.dll [199904] O44 - LFC:[MD5.33833B3EDA1B07EBD367FA9B38B23E60] - 11/12/2010 - 08:22:10 ---A- . (.RealNetworks, Inc. - 16 bit DirectX helper DLL.) -- C:\WINDOWS\System32\pndx5016.dll [6656] O44 - LFC:[MD5.B74E422BC81236042529DC8A42A18423] - 11/12/2010 - 08:22:10 ---A- . (.RealNetworks, Inc. - 32 bit DirectX helper DLL.) -- C:\WINDOWS\System32\pndx5032.dll [5632] O44 - LFC:[MD5.B4EB68502E52EBDC0B2C55EA3445284C] - 11/12/2010 - 08:22:04 ---A- . (.Progressive Networks - Pas de description.) -- C:\WINDOWS\System32\pncrt.dll [272896] O44 - LFC:[MD5.2C7499074888CC9D8B8526C6658435FF] - 02/12/2010 - 09:01:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_LGE EVDOM USB Modem #2.txt [65124] O44 - LFC:[MD5.F767F3B35C3ECF8A60B2A65BEEC50EF5] - 25/11/2010 - 10:53:58 ---A- . (.PC Tools - PC Tools App Monitor Driver.) -- C:\WINDOWS\System32\drivers\PCTAppEvent.sys [160448] O44 - LFC:[MD5.78D871114E7CB3115E058D1F85751C7F] - 25/11/2010 - 10:42:10 ---A- . (.PC Tools - PC Tools FW Plugin Driver.) -- C:\WINDOWS\System32\drivers\pctplfw.sys [124992] O44 - LFC:[MD5.58DB891CA76A2D49E33BA9FA13B86C89] - 24/11/2010 - 09:18:16 ---A- . (.PC Tools - PC Tools NDIS - Packet Filter.) -- C:\WINDOWS\System32\drivers\pctNdis-PacketFilter.sys [89192] O44 - LFC:[MD5.8D7504023DECF8B8812FF806B53C3FA5] - 23/11/2010 - 13:11:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\colorbox.log [523] O44 - LFC:[MD5.B76C829F00B9B534405B4ED5F58B8F52] - 17/11/2010 - 10:19:50 ---A- . (.PC Tools - PC Tools Generic TDI Driver.) -- C:\WINDOWS\System32\drivers\pctgntdi.sys [249616] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jdk1.6.0\jre\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office14\GROOVE.EXE" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre1.6.0\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Opera\opera.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Application Data\BS02NAV11.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Downloads\Norton AntiVirus 2011 CRACKED FINAL (WORKING)\Norton Antivirus 2011\NTR_2011.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\CG\MS_Update\Do_Not_Delete\CG02_Norton_AV_2011.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Téléchargements\eclipse-jee-helios-SR1-win32\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Real\RealPlayer\realplay.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Mozilla Firefox\firefox.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\khvil\Mes documents\Téléchargements\eclipse-jee-galileo-SR2-win32\eclipse\eclipse.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2011 11.0.1.400\French\setup.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Genuitec\Common\binary\com.sun.java.jdk.win32.x86_1.6.0.013\bin\javaw.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ MountPoints2 Shell Key (MPSK) (O51) O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\AutoRun\command - Clé orpheline O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\explore\command - Clé orpheline O51 - MPSK:{2b5c7ccd-dcea-11df-8f49-00247e3a4483}\Shell\open\command - Clé orpheline O51 - MPSK:{5e4da0bd-7e11-11df-8e67-0022fa45c614}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- G:\SWLauncher.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \Drivers32\"VIDC.X264"="x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\x264vfw.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=60 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.A0BAABB7D3549460E3F8C5AD6F778683] - 23/05/2008 - 12:50:16 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer - SATA/RAID.) -- C:\WINDOWS\system32\drivers\Accelerometer.sys [28592] O58 - SDL:[MD5.FF60DB2ACA88543C025EACBA25CEE5C1] - 11/04/2008 - 17:19:42 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys [338944] O58 - SDL:[MD5.FFF87A9B1AB36EE4B7BEC98A4CB01B79] - 13/07/2007 - 11:26:12 R--A- . (.Andrea Electronics Corporation - Audio Noise Filtering Driver (32-bit).) -- C:\WINDOWS\system32\drivers\aeaudio.sys [94976] O58 - SDL:[MD5.38325C6AA8EAE011897D61CE48EC6435] - 29/02/2008 - 15:13:38 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [1202560] O58 - SDL:[MD5.5BCF6090B825DEF29065BDBD59691DBE] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\WINDOWS\system32\drivers\btaudio.sys [539512] O58 - SDL:[MD5.EF5E0DE0A7CA2977A9255F36F4D915AB] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth Bus Enumerator.) -- C:\WINDOWS\system32\drivers\btkrnl.sys [879624] O58 - SDL:[MD5.58A49BD10E08D3D4333A60DEDCB1CED8] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth BTPORT Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btport.sys [37424] O58 - SDL:[MD5.80F61DE965C116051614AC2F04222FF7] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Bluetooth LAN Access Server Driver.) -- C:\WINDOWS\system32\drivers\btwdndis.sys [156392] O58 - SDL:[MD5.053DC5BE74621B63BB48C2B86BAFC7B0] - 03/04/2008 - 17:40:44 ---A- . (.Broadcom Corporation. - Driver for Bluetooth USB Devices.) -- C:\WINDOWS\system32\drivers\btwusb.sys [74688] O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 02/03/2006 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528] O58 - SDL:[MD5.407E41DDB2BFECE109132AEC296E0D98] - 28/04/2008 - 14:22:10 ---A- . (.Hewlett-Packard Development Company, L.P. - HP Tablet PC Key Button HID Driver.) -- C:\WINDOWS\system32\drivers\CPQBttn.sys [9344] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 02/03/2006 - 12:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.9F620E11B80B74F4DAB50A81A5DF357F] - 23/05/2008 - 12:51:02 ---A- . (.Hewlett-Packard Corporation - HP Disk Filter - SATA/RAID.) -- C:\WINDOWS\system32\drivers\hpdskflt.sys [24624] O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 16:12:04 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys [16768] O58 - SDL:[MD5.F592A1B020723CFBD3D2722514066449] - 21/05/2008 - 18:48:46 R--A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\drivers\igxpmp32.sys [6018464] O58 - SDL:[MD5.E07E97D53324408979CC9F8F9DCD1484] - 24/09/2007 - 08:05:58 ---A- . (.Ahead Software AG - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys [11304] O58 - SDL:[MD5.1A24CD53F32EB83DA1A00CDCCF8EEB2F] - 24/09/2007 - 08:05:58 ---A- . (.Ahead Software AG - Nero Image Server.) -- C:\WINDOWS\system32\drivers\imagesrv.sys [132904] O58 - SDL:[MD5.94D67D49BD9503BB1D838405D80F2058] - 09/06/2010 - 17:43:50 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\WINDOWS\system32\drivers\kl1.sys [132184] O58 - SDL:[MD5.713576569667AC9E0F8556076004A96B] - 09/06/2010 - 17:43:52 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\WINDOWS\system32\drivers\kl2.sys [11352] O58 - SDL:[MD5.395A295FD9EA657B4A3621E402CC56C5] - 14/12/2010 - 19:48:44 ---A- . (.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) -- C:\WINDOWS\system32\drivers\klif.sys [475736] O58 - SDL:[MD5.8D6E11BFA9927978D25B1B8029554F07] - 07/05/2010 - 12:06:26 ---A- . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\WINDOWS\system32\drivers\klim5.sys [32856] O58 - SDL:[MD5.3959530F69E19DA56F1F24F2C89F1E2C] - 02/11/2009 - 20:27:24 ---A- . (.Kaspersky Lab - KLMOUFLT Mouse Device Filter [fre_wnet_x86].) -- C:\WINDOWS\system32\drivers\klmouflt.sys [19472] O58 - SDL:[MD5.5F3828D574A8B9B2C57B6E671E13413A] - 26/08/2008 - 15:39:22 ---A- . (.LG Electronics Inc. - LG EVDOM USB ATC Driver.) -- C:\WINDOWS\system32\drivers\lgevdomatc.sys [19840] O58 - SDL:[MD5.C9137565302785F7889AD4B0A5004C3F] - 26/08/2008 - 15:39:24 ---A- . (.LG Electronics Inc. - LG EVDOM USB Multi function Driver.) -- C:\WINDOWS\system32\drivers\lgevdombus.sys [13696] O58 - SDL:[MD5.F89D5655DC7650B9E0CE0DE37462E71B] - 26/08/2008 - 15:39:26 ---A- . (.LG Electronics Inc. - LG EVDOM USB Diagnostics Driver.) -- C:\WINDOWS\system32\drivers\lgevdomdiag.sys [19840] O58 - SDL:[MD5.087C1A5A1F096C6BDAF1FC40DA065C97] - 26/08/2008 - 15:39:28 ---A- . (.LG Electronics Inc. - LG EVDOM USB Modem Driver.) -- C:\WINDOWS\system32\drivers\lgevdommodem.sys [21632] O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.0888844230083CE3B47395102BCA8207] - 28/04/2008 - 05:14:54 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\system32\drivers\NETw5x32.sys [3626112] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032] O58 - SDL:[MD5.F767F3B35C3ECF8A60B2A65BEEC50EF5] - 25/11/2010 - 10:53:58 ---A- . (.PC Tools - PC Tools App Monitor Driver.) -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys [160448] O58 - SDL:[MD5.807FF1DD6E1BDF8E7D2062FCA0DAECAF] - 29/03/2010 - 11:06:14 ---A- . (.PC Tools - PC Tools KDS Core Driver.) -- C:\WINDOWS\system32\drivers\PCTCore.sys [218592] O58 - SDL:[MD5.B76C829F00B9B534405B4ED5F58B8F52] - 17/11/2010 - 10:19:50 ---A- . (.PC Tools - PC Tools Generic TDI Driver.) -- C:\WINDOWS\system32\drivers\pctgntdi.sys [249616] O58 - SDL:[MD5.2D9BF28D68BE7B9823C9C567505F613B] - 05/02/2010 - 09:26:50 ---A- . (.PC Tools - PC Tools NDIS - DNS.) -- C:\WINDOWS\system32\drivers\pctNdis-DNS.sys [32808] O58 - SDL:[MD5.58DB891CA76A2D49E33BA9FA13B86C89] - 24/11/2010 - 09:18:16 ---A- . (.PC Tools - PC Tools NDIS - Packet Filter.) -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys [89192] O58 - SDL:[MD5.3EC79CFB2E0E74AADA8B561ED8904577] - 08/07/2010 - 09:49:10 ---A- . (.PC Tools - PC Tools NDIS Driver.) -- C:\WINDOWS\system32\drivers\pctNdis.sys [57536] O58 - SDL:[MD5.78D871114E7CB3115E058D1F85751C7F] - 25/11/2010 - 10:42:10 ---A- . (.PC Tools - PC Tools FW Plugin Driver.) -- C:\WINDOWS\system32\drivers\pctplfw.sys [124992] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 02/03/2006 - 12:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 02/03/2006 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032] O58 - SDL:[MD5.E974E1AA0B3F87F9044BEAAADFACF598] - 25/12/2009 - 17:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\WINDOWS\system32\drivers\scncap.sys [9984] O58 - SDL:[MD5.FC87D5E0328AFA97BF6D39DF96D5D356] - 21/06/2007 - 03:40:02 ---A- . (.SCM Microsystems Inc. - PC-SC CCID Driver for SCR3xx USB Smart Card Reader.) -- C:\WINDOWS\system32\drivers\SCR3XX2K.sys [56448] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.B6401608579B6431994425BA7653F774] - 28/03/2008 - 11:14:02 R--A- . (.Sonic Focus, Inc - Sonic Focus DSP driver for ADI.) -- C:\WINDOWS\system32\drivers\sfaudio.sys [24064] O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 10/05/2007 - 05:16:40 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\WINDOWS\system32\drivers\sncduvc.sys [28160] O58 - SDL:[MD5.CF9CDE12FBC19DBA8DE528B7511A2F4F] - 10/04/2008 - 16:27:34 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\WINDOWS\system32\drivers\snp2uvc.sys [1804160] O58 - SDL:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 10/12/2010 - 00:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] O58 - SDL:[MD5.926E0BB4CAC05D9A0C3B59DC16FE2F1C] - 27/03/2008 - 19:14:06 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [224672] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 02/03/2006 - 12:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 02/03/2006 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.D57A909F1A9114D5D18A2EACB1AFECD5] - 04/04/2008 - 09:57:00 ---A- . (.Marvell - Miniport Driver for Marvell Yukon Ethernet Controller..) -- C:\WINDOWS\system32\drivers\yk51x86.sys [296320] O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 12:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys [34560] ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\system32\agrsmsvc.exe - Agere Modem Call Progress Audio (AgereModemAudio) .(.Agere Systems - Agere Soft Modem Call Progress Service.) - LEGACY_AGEREMODEMAUDIO O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Akamai NetSession Interface (Akamai) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AKAMAI O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (.not file.) - Apple Mobile Device (Apple Mobile Device) .(.Pas de propriétaire - Pas de description.) - LEGACY_APPLE_MOBILE_DEVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (.not file.) - Kaspersky Anti-Virus Service (AVP) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - "C:\Program Files\Bonjour\mDNSResponder.exe (.not file.) - Service Bonjour (Bonjour Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_BONJOUR_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe - Bluetooth Service (btwdins) .(.Broadcom Corporation. - Bluetooth Support Server.) - LEGACY_BTWDINS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (.not file.) - Com4QLBEx (Com4QLBEx) .(.Pas de propriétaire - Pas de description.) - LEGACY_COM4QLBEX O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\System32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(.Pas de propriétaire - Pas de description.) - LEGACY_EECTRL O64 - Services: CurCS - (.not file.) - EraserUtilDrv10910 (EraserUtilDrv10910) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV10910 O64 - Services: CurCS - (.not file.) - EraserUtilDrv11010 (EraserUtilDrv11010) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV11010 O64 - Services: CurCS - (.not file.) - EraserUtilDrvI10 (EraserUtilDrvI10) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRVI10 O64 - Services: CurCS - (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILREBOOTDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (.not file.) - FLEXnet Licensing Service (FLEXnet Licensing Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_FLEXNET_LICENSING_SERVICE O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (.not file.) - hpqwmiex (hpqwmiex) .(.Pas de propriétaire - Pas de description.) - LEGACY_HPQWMIEX O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - (.not file.) - IDSxpx86 (IDSxpx86) .(.Pas de propriétaire - Pas de description.) - LEGACY_IDSXPX86 O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - "C:\Program Files\iPod\bin\iPodService.exe (.not file.) - Service de l’iPod (iPod Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_IPOD_SERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - "C:\Program Files\Java\jre6\bin\jqs.exe (.not file.) - Java Quick Starter (JavaQuickStarterService) .(.Pas de propriétaire - Pas de description.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\kl1.sys - Kl1 (kl1) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL1 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\kl2.sys - kl2 (kl2) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL2 O64 - Services: CurCS - (.not file.) - Kaspersky Lab Boot Guard Driver (klbg) .(.Pas de propriétaire - Pas de description.) - LEGACY_KLBG O64 - Services: CurCS - C:\Windows\System32\DRIVERS\klif.sys - Kaspersky Lab Driver (KLIF) .(.Kaspersky Lab - Klif Mini-Filter [fre_wnet_x86].) - LEGACY_KLIF O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe - Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) .(.Nero AG - Nero BackItUp.) - LEGACY_NERO_BACKITUP_SCHEDULER_3 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\system32\drivers\PCTAppEvent.sys - PCTAppEvent Driver (PCTAppEvent) .(.PC Tools - PC Tools App Monitor Driver.) - LEGACY_PCTAPPEVENT O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys - PCTools Firewall - Packet filter driver (PCTFW-PacketFilter) .(.PC Tools - PC Tools NDIS - Packet Filter.) - LEGACY_PCTFW-PACKETFILTER O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctgntdi.sys - pctgntdi (pctgntdi) .(.PC Tools - PC Tools Generic TDI Driver.) - LEGACY_PCTGNTDI O64 - Services: CurCS - C:\Program Files\PC Tools Firewall Plus\FWService.exe - PC Tools Firewall Plus (PCToolsFirewallPlus) .(.PC Tools - PC Tools Firewall Plus service.) - LEGACY_PCTOOLSFIREWALLPLUS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctplfw.sys - pctplfw (pctplfw) .(.PC Tools - PC Tools FW Plugin Driver.) - LEGACY_PCTPLFW O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\SERIAL.sys - Serial (Serial) .(.Pas de propriétaire - Pas de description.) - LEGACY_SERIAL O64 - Services: CurCS - C:\Windows\System32\drivers\sfaudio.sys - Sonic Focus DSP Driver (SFAUDIO) .(.Sonic Focus, Inc - Sonic Focus DSP driver for ADI.) - LEGACY_SFAUDIO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\Windows\System32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - (.not file.) - Symantec Real Time Storage Protection (PEL) (SRTSPX) .(.Pas de propriétaire - Pas de description.) - LEGACY_SRTSPX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - (.not file.) - Symantec Data Store (SymDS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMDS O64 - Services: CurCS - (.not file.) - Symantec Extended File Attributes (SymEFA) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEFA O64 - Services: CurCS - (.not file.) - SymEvent (SymEvent) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEVENT O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMFW) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMFW O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMIDS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMIDS O64 - Services: CurCS - (.not file.) - Symantec Iron Driver (SymIRON) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMIRON O64 - Services: CurCS - (.not file.) - Symantec Network Filter Driver (SYMNDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMNDIS O64 - Services: CurCS - (.not file.) - Symantec Network Dispatch Driver (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - "C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe (.not file.) - Apache Tomcat (Tomcat6) .(.Pas de propriétaire - Pas de description.) - LEGACY_TOMCAT6 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\wdfmgr.exe - Windows User Mode Driver Framework (UMWdf) .(.Microsoft Corporation - Windows User Mode Driver Manager.) - LEGACY_UMWDF O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\Wdf01000.sys - Wdf01000 (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Documents and Settings\khvil\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Internet Explorer\iexplore.exe (.not file.) O68 - StartMenuInternet: <Opera.exe> <Opera>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Opera.exe (.not file.) ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - [url=http://search.live.com]Bing[/url] O69 - SBI: SearchScopes [HKCU] {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} - (DAEMON Search) - [url=http://www.daemon-search.com]DAEMON-Search.com :: EXPLORE[/url] ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\hidserv.dll [0] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [25088] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 11/12/2007 12800 | C:\WINDOWS\system32\agrsmsvc.exe (AgereModemAudio) . (.Agere Systems.) - C:\WINDOWS\system32\agrsmsvc.exe SR - | Auto 16/10/2010 37664 | "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 14/12/2010 352976 | "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe SR - | Auto 27/07/2010 345376 | "C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 31/03/2008 264800 | C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe SS - | Demand 03/04/2008 193840 | "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SS - | Demand 14/04/2008 225280 | C:\WINDOWS\System32\dmadmin.exe (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe SS - | Demand 06/11/2010 655624 | "C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Demand 01/05/2008 165192 | "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SR - | Demand 11/11/2010 820008 | "C:\Program Files\iPod\bin\iPodService.exe (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 15/09/2010 153376 | "C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe SR - | Auto 20/09/2007 853288 | C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (Nero BackItUp Scheduler 3) . (.Nero AG.) - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe SS - | Demand 20/09/2007 382248 | "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (NMIndexingService) . (.Nero AG.) - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe SR - | Auto 17/11/2010 287024 | C:\Program Files\PC Tools Firewall Plus\FWService.exe (PCToolsFirewallPlus) . (.PC Tools.) - C:\Program Files\PC Tools Firewall Plus\FWService.exe SS - | Demand 19/02/2010 517096 | "C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe SS - | Demand 22/07/2008 57344 | "C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe (Tomcat6) . (.Apache Software Foundation.) - C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, [url=http://www.gmer.net]GMER - Rootkit Detector and Remover[/url] Run by khvil at 15/12/2010 15:55:19 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll ACPI.sys atapi.sys spga.sys >>UNKNOWN [0x8A36F938]<< C:\WINDOWS\system32\drivers\hpdskflt.sys Hewlett-Packard Corporation Hewlett-Packard Corporation Mobile Data Protection System spga.sys 1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8A255AB8] 3 CLASSPNP[0xF74C7FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x8A2BCD58] 5 hpdskflt[0xF77184E6] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000086[0x8A2CEF18] 7 ACPI[0xF7252620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP0T0L0-3[0x8A25DD98] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, [url=http://ad13.geekstog]http://ad13.geekstog[/url] Run by khvil at 15/12/2010 15:55:19 Use the desktop link 'MBRCheck' to have full report ---\\ Liste des émulateurs de CD/DVD (Hook du MBR) O58 - SDL:[MD5.6CEE1300F915817C00ECFD7F40EF1300] - 10/12/2010 - 00:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] End of the scan (1240 lines in 01mn 28s)(0)
  13. menyarito
    Bonjour ts le monde, j'ai une problème avec mon pare feu n'accepte plus d'être activé, j'ai scanné le PC avec hijackthis et voici le rapport: Merci d'avance Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 07:45:57, on 15/12/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\agrsmsvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\iTunes\iTunesHelper.exe C:\program files\real\realplayer\update\realsched.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtblfs.exe C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\IEUM.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\khvil\Mes documents\Téléchargements\HiJackThis.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = [url=http://home.mywebsearch.com/index.jhtml?n=77C09F4F&ptnrS=GRfox000&ptb=JV1ydYdA3xV0ugS2LyfoTQ] Search[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: [HKLM] C:\Documents and Settings\khvil\Application Data\Do_Not_Delete\CG02_Norton_AV_2011.exe O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [switchBoard] C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe" O4 - HKCU\..\Run: [REVAService] C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: BTTray.lnk = ? O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{267EB60A-91E0-4F91-9A4E-5D141B891E57}: NameServer = 192.168.50.58 192.168.60.55 O17 - HKLM\System\CCS\Services\Tcpip\..\{FCE3CD7F-6C32-460B-A21C-3AFA29DA21F5}: NameServer = 192.168.50.58,192.168.60.55 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: Apache Tomcat (Tomcat6) - Apache Software Foundation - C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe -- End of file - 8669 bytes
  14. menyarito

    pilote

    menyarito a posté un sujet dans Software

    Salut, j'ai télécharger un pilote audio sur mon ordi mais au lieu d'apparaitre comme ça: il m'apparait comme ça ==> il y'a t'il un logiciel que je n'ai pas installé ???? @++
  15. menyarito
    Salut, J'ai une clé Usb SansDisk U3 sur laquel je suis entraine d'essayer d'installer le logiciel U3 LaunchPad, le teléchargement continue jusqu'a la fin et il se bloque ==> http://moe.mabul.org/up/moe/2010/03/19/img-184216alpb1.jpg/img/url @++
×
×
  • Créer...