jerivier

Bonsoir à tous, Je craque... Utilisateur plutôt averti, là je coince. Symptôme Mon PC rame : les processus qui tournent sont toujours à 100% (firefox, zonealarm, antivir, quoi que je lance) J'ai lancé Malwarebytes' Anti-Malware mis à jour. 8 trucs trouvés => supprimés. Ca s'est calmé et qqs jours plus tard ça revient de plus belle re Malwarebytes' Anti-Malware, rien. J'ai un firewall, antivir à jour J'ai testé ma RAM ... rien trouvé J'ai fait un rapport ZHPDiag dites de quoi vous avez besoin d'autre ! Mon Rapport ZHPDiag Rapport de ZHPDiag v1.25.133 par Nicolas Coolman Run by JE-Emilie at 19/03/2010 21:27:42 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox (3.5. ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 15 Model 12 Stepping 0, AuthenticAMD Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1023 MB (64% free) System drive C: has 15 GB (39%) free of 39 GB ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 15 Go of 39 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 29 Go of 369 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 50 Go of 50 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 13 Go) G:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 83 Go) H:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 15 Go) I:\ CD-ROM drive (Not Inserted) J:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 8 Go) K:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ CD-ROM drive (Not Inserted) M:\ Floppy drive, Flash card reader, USB Key (Not Inserted) N:\ Floppy drive, Flash card reader, USB Key (Not Inserted) O:\ Floppy drive, Flash card reader, USB Key (Not Inserted) P:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Processus lancés [MD5.403E928BA217E38485009636C793F3C9] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe [MD5.DF83B8A33CAD04F4BAA645153259EBB8] - (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll [MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [MD5.2FF606066A3C42C599B6764F6B143C97] - (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\WINDOWS\vVX1000.exe [MD5.16022DAAE7BB83C00D0210D5433216BA] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe [MD5.377F0FE06DCD6BB3669F3E0FC4DF2511] - (.Lavasoft AB - Ad-Aware 2007 Service.) -- C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [MD5.93E118B465160D9D01907EA3350353CA] - (.Acronis - Acronis Scheduler 2.) -- C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe [MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [MD5.557F35D1CA42AEA14A6690E21887A31F] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe [MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe [MD5.39133291CB607BDD87CFC565A4A1E7A5] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [MD5.AA78C4677E06CFD4FE048718EE7F6332] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 84.21.) -- C:\WINDOWS\system32\nvsvc32.exe [MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\System32\lsass.exe [MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe [MD5.AB0A7CA90D9E3D6A193905DC1715DED0] - (.Microsoft Corporation - Windows User Mode Driver Manager.) -- C:\WINDOWS\system32\wdfmgr.exe [MD5.3F62CBAC09D8C039C488B5D00D21C3DC] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [MD5.556B5CFE8D21B256ADD7F87D7F4B4123] - (.CyberLink Corp. - Pas de description.) -- C:\Program Files\CyberLink\PowerDVD9\000.fcl ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5c255c8a-e604-49b4-9d64-90988571cecb} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030d464-4c02-4abf-8ecc-5164760863c6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {e7e6f031-17ce-4c07-bc86-eabfe594f69c} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [unlockerAssistant] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [VX1000] . (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\WINDOWS\vVX1000.exe O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{065DC5B7-6127-47F7-8CA4-107298FEC0F0}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{065DC5B7-6127-47F7-8CA4-107298FEC0F0}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{065DC5B7-6127-47F7-8CA4-107298FEC0F0}: NameServer = 208.67.222.222,208.67.220.220 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: lbtwlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\System32\stobject.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Ad-Aware 2007 Service (aawservice) . (.Lavasoft AB - Ad-Aware 2007 Service.) - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) . (.Acronis - Acronis Scheduler 2.) - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: Avira AntiVir Scheduler (antivirschedulerservice) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (antivirservice) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device (apple mobile device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Service Bonjour (bonjour service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Java Quick Starter (javaquickstarterservice) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 84.21.) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Power Control [2009/07/10 23:39:17] ({B154377D-700F-42cc-9474-23858FBDF4BD}) . (.CyberLink Corp. - Pas de description.) - C:\Program Files\CyberLink\PowerDVD9\000.fcl ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Java (Sun) - {08b0e5c0-4fcb-11cf-aaa5-00401c608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r32.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: (c67b13b1) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\system32\drivers\c67b13b1.sys O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys O41 - Driver: vsdatant (vsdatant) . (.Check Point Software Technologies LTD - TrueVector Device Driver.) - C:\WINDOWS\system32\vsdatant.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 2 (SP2) - (.Microsoft.) O42 - Logiciel: Acronis True Image Home - (.Acronis.) O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) O42 - Logiciel: Ahead Nero Burning ROM - (.Pas de propriétaire.) O42 - Logiciel: Amazon MP3 Downloader 1.0.5 - (.Pas de propriétaire.) O42 - Logiciel: Apple Application Support - (.Apple Inc..) O42 - Logiciel: Apple Software Update - (.Apple Inc..) O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) O42 - Logiciel: Azureus - (.Pas de propriétaire.) O42 - Logiciel: BS.Player FREE powered by AdVantage - (.Webteh, d.o.o..) O42 - Logiciel: Bonjour - (.Apple Inc..) O42 - Logiciel: CCleaner (remove only) - (.Piriform.) O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) O42 - Logiciel: CDDRV_Installer - (.Logitech.) O42 - Logiciel: Canon MP Navigator 3.0 - (.Pas de propriétaire.) O42 - Logiciel: Canon MP160 - (.Pas de propriétaire.) O42 - Logiciel: Cool Beans NFO Creator 2.0.1.3 - (.Cool Beans Software.) O42 - Logiciel: CyberLink PowerDVD 9 - (.CyberLink Corp..) O42 - Logiciel: FLV Player - (.Applian Technologies Inc..) O42 - Logiciel: FileZilla Client 3.3.1 - (.Pas de propriétaire.) O42 - Logiciel: Free Video Converter V 2.1 - (.Koyote Soft.) O42 - Logiciel: FujiFilm Photogénie 2.3 - (.Pas de propriétaire.) O42 - Logiciel: Google SketchUp 6 - (.Google.) O42 - Logiciel: Hattrick Organizer (remove only) - (.Pas de propriétaire.) O42 - Logiciel: HomePlayer 1.5.2 - (.HomePlayer.) O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) O42 - Logiciel: ICCup Launcher - (.ICCup.) O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Java 6 Update 11 - (.Sun Microsystems, Inc..) O42 - Logiciel: Java 6 Update 17 - (.Sun Microsystems, Inc..) O42 - Logiciel: Java 6 Update 3 - (.Sun Microsystems, Inc..) O42 - Logiciel: KhalInstallWrapper - (.Logitech.) O42 - Logiciel: LiveUpdate 2.6 (Symantec Corporation) - (.Symantec Corporation.) O42 - Logiciel: MSVCRT - (.Microsoft.) O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) O42 - Logiciel: MediaCoder 0.7.1.4490 - (.Broad Intelligence.) O42 - Logiciel: MediaInfo 0.7.22 - (.MediaArea.net.) O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) O42 - Logiciel: Microsoft Office Access MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Access Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Excel MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Groove MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Groove Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office InfoPath MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Language Pack 2007 - French/Français - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office O MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office OneNote MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Outlook MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proofing (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Publisher MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office SharePoint Designer 2007 Service Pack 1 (SP1) - (.Microsoft.) O42 - Logiciel: Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2) - (.Microsoft.) O42 - Logiciel: Microsoft Office SharePoint Designer MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Shared MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Word MUI (English) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office X MUI (French) 2007 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Office XP Professional with FrontPage - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) O42 - Logiciel: Mon Univers Photo Carrefour - (.Pas de propriétaire.) O42 - Logiciel: Mozilla Firefox (3.5. - (.Mozilla.) O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) O42 - Logiciel: Paint.NET v3.5.2 - (.dotPDN LLC.) O42 - Logiciel: Picasa 3 - (.Google, Inc..) O42 - Logiciel: Real Alternative 1.9.0 - (.Pas de propriétaire.) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969679) - (.Microsoft.) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704) - (.Microsoft.) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB978380) - (.Microsoft.) O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB969682) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB978382) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB969693) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB969604) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613) - (.Microsoft.) O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) O42 - Logiciel: Segoe UI - (.Microsoft Corp.) O42 - Logiciel: SopCast 3.0.1 - (.SopCast.com.) O42 - Logiciel: SpeedFan (remove only) - (.Pas de propriétaire.) O42 - Logiciel: Starcraft - (.Pas de propriétaire.) O42 - Logiciel: Stream Torrent 1.0 - (.Pas de propriétaire.) O42 - Logiciel: TVAnts 1.0 - (.Pas de propriétaire.) O42 - Logiciel: Trillian - (.Pas de propriétaire.) O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) O42 - Logiciel: UUSee ÍøÂçµçÊÓ [4.4.801.53] - (.UUSee company, Inc..) O42 - Logiciel: Unlocker 1.8.7 - (.Cedrick Collomb.) O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416) - (.Microsoft.) O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB969907) - (.Microsoft.) O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB974810) - (.Microsoft.) O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb973514) - (.Microsoft.) O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb975960) - (.Microsoft.) O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb976884) - (.Microsoft.) O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb979895) - (.Microsoft.) O42 - Logiciel: VLC media player 1.0.0 - (.VideoLAN Team.) O42 - Logiciel: Vuze - (.Vuze Inc..) O42 - Logiciel: WinSCP 4.2.3 beta - (.Martin Prikryl.) O42 - Logiciel: Winamp - (.Nullsoft, Inc.) O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) O42 - Logiciel: Windows Media Format Runtime - (.Pas de propriétaire.) O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) O42 - Logiciel: XBMC - (.Team XBMC.) O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) O42 - Logiciel: eMule - (.Pas de propriétaire.) ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\Acronis O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Amazon O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update O43 - CFD:Common File Directory ----D- C:\Program Files\Avira O43 - CFD:Common File Directory ----D- C:\Program Files\Azureus O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour O43 - CFD:Common File Directory ----D- C:\Program Files\Canon O43 - CFD:Common File Directory --H-D- C:\Program Files\CanonBJ O43 - CFD:Common File Directory ----D- C:\Program Files\carrefour O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\CDBurnerXP O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\Cool Beans NFO Creator O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools O43 - CFD:Common File Directory ----D- C:\Program Files\Daemon-Tools O43 - CFD:Common File Directory ----D- C:\Program Files\Driver Validation O43 - CFD:Common File Directory ----D- C:\Program Files\eBay O43 - CFD:Common File Directory ----D- C:\Program Files\eMule O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\FileZilla FTP Client O43 - CFD:Common File Directory ----D- C:\Program Files\FLV Player O43 - CFD:Common File Directory ----D- C:\Program Files\Free Video Converter O43 - CFD:Common File Directory ----D- C:\Program Files\FujiFilm O43 - CFD:Common File Directory ----D- C:\Program Files\Google O43 - CFD:Common File Directory ----D- C:\Program Files\HattrickOrganizer O43 - CFD:Common File Directory ----D- C:\Program Files\HomePlayer1.5.2 O43 - CFD:Common File Directory ----D- C:\Program Files\ICCup O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Intel Desktop Board O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\iPod O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Lavasoft O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech O43 - CFD:Common File Directory ----D- C:\Program Files\ma-config.com O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\MediaCoder O43 - CFD:Common File Directory ----D- C:\Program Files\MediaInfo O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft ActiveSync O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Outlook Connector O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\NVIDIA Corporation O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\Paint.NET O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime O43 - CFD:Common File Directory ----D- C:\Program Files\Real Alternative O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek AC97 O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files\RegCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory ----D- C:\Program Files\SopCast O43 - CFD:Common File Directory ----D- C:\Program Files\SpeedFan O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\StreamTorrent 1.0 O43 - CFD:Common File Directory ----D- C:\Program Files\Support O43 - CFD:Common File Directory ----D- C:\Program Files\Symantec O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro O43 - CFD:Common File Directory ----D- C:\Program Files\Trillian O43 - CFD:Common File Directory ----D- C:\Program Files\TVAnts O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker O43 - CFD:Common File Directory ----D- C:\Program Files\uusee O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN O43 - CFD:Common File Directory ----D- C:\Program Files\Webteh O43 - CFD:Common File Directory ----D- C:\Program Files\Winamp O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\WinPcap O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR O43 - CFD:Common File Directory ----D- C:\Program Files\WinSCP O43 - CFD:Common File Directory ----D- C:\Program Files\XBMC O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\Zone Labs O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Acronis O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Apple O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\CyberLink O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\L&H O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Logishrd O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\NVIDIA Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.00000000000000000000000000000000] - 19/03/2010 - 12:08:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log O44 - LFC:[MD5.FC07DC547AD755EB8EC6D3614422FE90] - 19/03/2010 - 11:55:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvapps.xml O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/03/2010 - 11:54:09 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log O44 - LFC:[MD5.00000000000000000000000000000000] - 19/03/2010 - 11:53:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log O44 - LFC:[MD5.00000000000000000000000000000000] - 19/03/2010 - 11:53:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 19/03/2010 - 11:52:11 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat O44 - LFC:[MD5.00000000000000000000000000000000] - 18/03/2010 - 23:13:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt O44 - LFC:[MD5.A4001C78F2806662B3BD91ACB44E6330] - 18/03/2010 - 22:58:51 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\initdebug.nfo O44 - LFC:[MD5.DCC7F0E58BCFF841CACD3BBBB619983B] - 17/03/2010 - 15:35:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl O44 - LFC:[MD5.4DE629D74F12DF916E194637E8B9B2BD] - 13/03/2010 - 22:03:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB976002-v5.log O44 - LFC:[MD5.197A1B44ACE8FFDABC1FCABF70FA8728] - 13/03/2010 - 22:02:32 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\vsconfig.xml O44 - LFC:[MD5.8D0EAFAE30A3EC9DDDD87EC1EAAB3CFB] - 13/03/2010 - 22:02:08 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\zllictbl.dat O44 - LFC:[MD5.A3C717FC3BAEBE9D212CC6D59B1E1152] - 13/03/2010 - 22:02:03 ---A- . (.Zone Labs Inc. - TrueVector Service.) -- C:\WINDOWS\System32\vsutil_loc040c.dll O44 - LFC:[MD5.E2E44E98B8C182FA716FC60EA9B6F194] - 13/03/2010 - 22:02:02 ---A- . (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\System32\vsregexp.dll O44 - LFC:[MD5.8E03435345AC034A9465DE9AF2182579] - 13/03/2010 - 22:02:01 ---A- . (.Check Point Software Technologies LTD - ZLComm.) -- C:\WINDOWS\System32\zlcomm.dll O44 - LFC:[MD5.137D03D2AF53DCA84ABE1DE69C47650E] - 13/03/2010 - 22:02:01 ---A- . (.Check Point Software Technologies LTD - ZLCommDB.) -- C:\WINDOWS\System32\zlcommdb.dll O44 - LFC:[MD5.76F9607C85DCF92E9E2F2C9D3AEA64D7] - 13/03/2010 - 22:01:57 ---A- . (.Check Point Software Technologies LTD - vsmon component.) -- C:\WINDOWS\System32\vswmi.dll O44 - LFC:[MD5.D69EDF9DE53C846C1F438465D866FB90] - 13/03/2010 - 22:01:56 ---A- . (.Check Point Software Technologies LTD - Check Point Endpoint Security.) -- C:\WINDOWS\System32\zpeng25.dll O44 - LFC:[MD5.D53C2E472BC520CBD9B8C248FC824440] - 13/03/2010 - 22:01:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Client Interface.) -- C:\WINDOWS\System32\vsmonapi.dll O44 - LFC:[MD5.BB7EAED95F8D9088C78D43C0516FB66F] - 13/03/2010 - 22:01:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\System32\vspubapi.dll O44 - LFC:[MD5.C8DEA2A8790DAFC62E99C3984046D74B] - 13/03/2010 - 22:01:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\System32\vsxml.dll O44 - LFC:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 13/03/2010 - 22:01:55 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\System32\vsdatant.sys O44 - LFC:[MD5.ED8C3E0C01219DB67A0DDA2F00AF4D79] - 13/03/2010 - 21:56:31 ---A- . (.Check Point Software Technologies LTD - TrueVector Service DLL.) -- C:\WINDOWS\System32\vsdata.dll O44 - LFC:[MD5.2B2E79C01920E99CDCD013FA0FE6F175] - 13/03/2010 - 21:56:31 ---A- . (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\System32\vsinit.dll O44 - LFC:[MD5.216C23180D30E39A79A7210F908FCFFA] - 13/03/2010 - 21:56:31 ---A- . (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\System32\vsutil.dll O44 - LFC:[MD5.E1CBF27C8DC532449DE46C0330671E41] - 13/03/2010 - 21:51:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log O44 - LFC:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 13/03/2010 - 18:41:27 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys O44 - LFC:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 13/03/2010 - 18:40:48 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys O44 - LFC:[MD5.3A9A54E9FF21A4825E9B40A89674F085] - 13/03/2010 - 10:34:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupact.log O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/03/2010 - 10:34:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setuperr.log O44 - LFC:[MD5.C17A65F27EE28A9ED7ED5B803746DF6E] - 07/03/2010 - 00:57:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\TZLog.log ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Azureus\Azureus.exe" [Enabled] .(.Vuze Inc. - Pas de description.) -- C:\Program Files\Azureus\Azureus.exe O47 - AAKE:Key Export SP - "C:\Program Files\HomePlayer1.5.2\HomePlayer.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- C:\Program Files\HomePlayer1.5.2\HomePlayer.exe O47 - AAKE:Key Export SP - "C:\Program Files\eMule\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- C:\Program Files\eMule\emule.exe O47 - AAKE:Key Export SP - "F:\Program Files\Trillianbasic\trillian.exe" [Enabled] .(.Cerulean Studios - Trillian.) -- F:\Program Files\Trillianbasic\trillian.exe O47 - AAKE:Key Export SP - "C:\Program Files\Trillian\trillian.exe" [Enabled] .(.Cerulean Studios - Trillian.) -- C:\Program Files\Trillian\trillian.exe O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Groove.) -- C:\Program Files\Microsoft Office\Office12\GROOVE.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office OneNote.) -- C:\Program Files\Microsoft Office\Office12\ONENOTE.exe O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe O47 - AAKE:Key Export SP - "C:\BackupHelper\Contenu\iTunnel.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\BackupHelper\Contenu\iTunnel.exe O47 - AAKE:Key Export SP - "C:\Program Files\SopCast\SopCast.exe" [Enabled] .(.www.sopcast.com - SopCast Main Application.) (.not file.) -- C:\Program Files\SopCast\SopCast.exe O47 - AAKE:Key Export SP - "C:\Program Files\SopCast\adv\SopAdver.exe" [Enabled] .(.www.sopcast.com - SopCast Adver.) (.not file.) -- C:\Program Files\SopCast\adv\SopAdver.exe O47 - AAKE:Key Export SP - "C:\Program Files\TVAnts\Tvants.exe" [Enabled] .(.Zhejiang University - TVAnts.) (.not file.) -- C:\Program Files\TVAnts\Tvants.exe O47 - AAKE:Key Export SP - "C:\Program Files\uusee\UUSeePlayer.exe" [Enabled] .(.Pas de propriétaire - UUPlayer.) (.not file.) -- C:\Program Files\uusee\UUSeePlayer.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) (.not file.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) (.not file.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) (.not file.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) (.not file.) -- C:\Program Files\Bonjour\mDNSResponder.exe O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) (.not file.) -- C:\Program Files\iTunes\iTunes.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe" [Enabled] .(.Microsoft Corporation - Microsoft Help and Support Center.) (.not file.) -- C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) (.not file.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) (.not file.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) (.not file.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\System32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm ---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\acronis scheduler2 service [Key] . (.Acronis - Acronis Scheduler Helper.) -- C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe O53 - SMSR:HKLM\...\startupreg\acronistimountermonitor [Key] . (.Acronis - Monitor for Acronis True Image Backup Archi.) -- C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe O53 - SMSR:HKLM\...\startupreg\ctfmon.exe [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O53 - SMSR:HKLM\...\startupreg\daemon tools [Key] . (.DT Soft Ltd. - Virtual DAEMON Manager.) -- C:\Program Files\DAEMON Tools\daemon.exe O53 - SMSR:HKLM\...\startupreg\groovemonitor [Key] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe O53 - SMSR:HKLM\...\startupreg\nerocheck [Key] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe O53 - SMSR:HKLM\...\startupreg\nvcpldaemon [Key] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll O53 - SMSR:HKLM\...\startupreg\nvmediacenter [Key] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll O53 - SMSR:HKLM\...\startupreg\nvmixertray [Key] . (.NVIDIA Corporation - NVIDIA nForce Mixer Tray Application.) -- C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe O53 - SMSR:HKLM\...\startupreg\spybotsd teatimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O53 - SMSR:HKLM\...\startupreg\sunjavaupdatesched [Key] . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe O53 - SMSR:HKLM\...\startupreg\trueimagemonitor.exe [Key] . (.Acronis - Acronis True Image Monitor.) -- C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.071757A906C7B3500916548E6FD8870B] - 07/08/2007 - 17:33:12 R--A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\alcxwdm.sys O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 11:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 29/12/2009 - 13:06:43 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:[MD5.5ACEA1331BD4D9DAD232A23CFD7616BF] - 13/02/2009 - 11:29:11 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:[MD5.452E382340BB0C5E694ED9D3625356D0] - 30/03/2009 - 09:33:07 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:[MD5.EC018602809B28520CAA132CD616BB2A] - 11/07/2007 - 13:37:26 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Process protection.) -- C:\WINDOWS\system32\drivers\AWRTPD.sys O58 - SDL:[MD5.10D3F81B955CD10D6464B1B922E5AC68] - 07/08/2007 - 12:58:08 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Registry Protection.) -- C:\WINDOWS\system32\drivers\AWRTRD.sys O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/01/2010 - 04:55:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\c67b13b1.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 09/10/2001 - 04:48:12 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 09/10/2001 - 04:48:12 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys O58 - SDL:[MD5.FCCF4AE4EF72CBABA6D6BEFEFD77E940] - 29/03/2003 - 15:45:18 ---A- . (.Ahead Software AG and its licensors - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys O58 - SDL:[MD5.9FFD1CF2A782F2560E78EEC4B8B8689E] - 17/06/2009 - 17:55:34 ---A- . (.Logitech, Inc. - Logitech Consumer Control Filter Driver..) -- C:\WINDOWS\system32\drivers\LBeepKE.sys O58 - SDL:[MD5.7F9C7B28CF1C859E1C42619EEA946DC8] - 17/06/2009 - 17:56:06 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.AB33792A87285344F43B5CE23421BAB0] - 17/06/2009 - 17:56:16 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.77030525CD86A93F1AF34FA9B96D33CE] - 17/06/2009 - 17:56:32 ---A- . (.Logitech, Inc. - Logitech USB Filter Driver..) -- C:\WINDOWS\system32\drivers\LUsbFilt.sys O58 - SDL:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 07/01/2010 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 07/01/2010 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.29C45722E20572B6440B57E3359E73EE] - 09/07/2009 - 11:16:04 ---A- . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\WINDOWS\system32\drivers\netaapl.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 09/10/2001 - 04:48:12 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.6623E51595C0076755C29C00846C4EB2] - 15/11/2007 - 21:30:48 ---A- . (.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\system32\drivers\npf.sys O58 - SDL:[MD5.05BDD706A847BBFA9FD5948CD636EB1A] - 07/08/2007 - 12:56:58 ---A- . (.Lavasoft AB - Driver for Ad-Watch network monitoring.) -- C:\WINDOWS\system32\drivers\NSDriver.sys O58 - SDL:[MD5.29B9163A6D9C486DCAEFED190130ACB0] - 09/03/2006 - 14:29:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 84.21.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys O58 - SDL:[MD5.46DEED4C6C5FA765F9A2C723BE60348D] - 03/06/2004 - 09:40:46 ---A- . (.NVIDIA Corporation - NVIDIA® nForce IDE Performance Driver.) -- C:\WINDOWS\system32\drivers\nvatabus.sys O58 - SDL:[MD5.23297B3C2FF3510E2E760714FC6F094E] - 17/05/2004 - 13:00:52 ---A- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\drivers\NVENETFD.sys O58 - SDL:[MD5.BCC3722A2DB99AD6F367344997C26654] - 17/05/2004 - 13:00:54 ---A- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\drivers\nvnetbus.sys O58 - SDL:[MD5.4EA62941746405FC16D449AA1D87C74B] - 17/05/2004 - 13:00:42 ---A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\drivers\nvnrm.sys O58 - SDL:[MD5.A0BD30D3C35DA4AB6E042A885841B37B] - 17/05/2004 - 13:00:34 ---A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\drivers\nvsnpu.sys O58 - SDL:[MD5.3194E2F6C9000C39DCF9D0580754F714] - 02/04/2004 - 14:40:00 ---A- . (.NVIDIA Corporation - NVIDIA nForce AGP Filter.) -- C:\WINDOWS\system32\drivers\nv_agp.SYS O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 09/10/2001 - 04:49:32 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 09/10/2001 - 04:48:12 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 09/10/2001 - 04:48:12 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.D507C1400284176573224903819FFDA3] - 03/08/2004 - 21:31:34 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\drivers\rtl8139.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.E78C98378A071CE4D48A7C514FA98FA1] - 06/10/2007 - 16:00:21 ---A- . (.Acronis - Acronis Snapshot API.) -- C:\WINDOWS\system32\drivers\snapman.sys O58 - SDL:[MD5.00000000000000000000000000000000] - 03/10/2007 - 02:50:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys O58 - SDL:[MD5.654DFEA96BC82B4ACDA4F37E5E4A3BBF] - 11/05/2009 - 09:12:24 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:[MD5.1E9A652D898CC96038E5E5554F79C49F] - 27/04/2003 - 10:43:06 ---A- . (.Pas de propriétaire - SCSI miniport.) -- C:\WINDOWS\system32\drivers\st3wolf.sys O58 - SDL:[MD5.24E09D134304FBC605626FCED3E4CB50] - 27/04/2003 - 11:39:16 ---A- . (.Pas de propriétaire - PnP BIOS Extension.) -- C:\WINDOWS\system32\drivers\stwlfbus.sys O58 - SDL:[MD5.D352FFF2A623B916C08CEACBFC8B5C32] - 06/10/2007 - 16:00:24 ---A- . (.Acronis - Acronis True Image File System Filter.) -- C:\WINDOWS\system32\drivers\tifsfilt.sys O58 - SDL:[MD5.64694B2A5C772E1C61FEAC300ED90CA6] - 06/10/2007 - 16:00:24 ---A- . (.Acronis - Acronis True Image Backup Archive Explorer.) -- C:\WINDOWS\system32\drivers\timntr.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 09/10/2001 - 04:48:12 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.1DF89C499BF45D878B87EBD4421D462D] - 28/08/2009 - 18:42:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 09/10/2001 - 04:48:12 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 09/10/2001 - 04:47:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 09/10/2001 - 04:47:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.77EBF3E9386DAA51551AF429052D88D0] - 03/04/1996 - 20:33:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\giveio.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 09/10/2001 - 04:48:18 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 09/10/2001 - 04:48:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 03/08/2004 - 21:46:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 09/10/2001 - 04:49:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 09/10/2001 - 04:49:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 09/10/2001 - 04:49:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 09/10/2001 - 04:49:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 09/10/2001 - 04:49:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 03/08/2004 - 21:45:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 03/08/2004 - 21:45:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 03/08/2004 - 21:45:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 03/08/2004 - 21:45:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 03/08/2004 - 21:45:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys O58 - SDL:[MD5.5D6401DB90EC81B71F8E2C5C8F0FEF23] - 24/09/2006 - 14:28:46 ---A- . (.Windows ® 2000 DDK provider - SpeedFan Device Driver.) -- C:\WINDOWS\system32\speedfan.sys O58 - SDL:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 04/12/2009 - 16:34:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe - Ad-Aware 2007 Service (aawservice) .(.Lavasoft AB - Ad-Aware 2007 Service.) - LEGACY_AAWSERVICE O64 - Services: CurCS - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe - Acronis Scheduler2 Service (AcrSch2Svc) .(.Acronis - Acronis Scheduler 2.) - LEGACY_ACRSCH2SVC O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - legacy_antivirschedulerservice O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - legacy_antivirservice O64 - Services: CurCS - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe - Apple Mobile Device (Apple Mobile Device) .(.Apple Inc. - Apple Mobile Device Service.) - legacy_apple_mobile_device O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - legacy_avgntflt O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB O64 - Services: CurCS - C:\Program Files\Bonjour\mDNSResponder.exe - Service Bonjour (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - legacy_bonjour_service O64 - Services: CurCS - C:\Program Files\MediaCoder\sysInfo.sys - CrystalSysInfo (CrystalSysInfo) .(.Pas de propriétaire - Pas de description.) - legacy_crystalsysinfo O64 - Services: CurCS - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.Ma-Config.com - ma-config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - (.not file.) - GEARSecurity (GEARSecurity) .(.Pas de propriétaire - Pas de description.) - LEGACY_GEARSECURITY O64 - Services: CurCS - C:\WINDOWS\system32\giveio.sys - giveio (giveio) .(.Pas de propriétaire - Pas de description.) - LEGACY_GIVEIO O64 - Services: CurCS - C:\Program Files\iPod\bin\iPodService.exe - Service de l’iPod (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - legacy_ipod_service O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - legacy_javaquickstarterservice O64 - Services: CurCS - C:\WINDOWS\system32\drivers\mbamswissarmy.sys - MBAMSwissArmy (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSWISSARMY O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Program Files\CDBurnerXP\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(.Pas de propriétaire - Pas de description.) - legacy_nmsaccessu O64 - Services: CurCS - C:\WINDOWS\system32\drivers\npf.sys - NetGroup Packet Filter Driver (npf) .(.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) - legacy_npf O64 - Services: CurCS - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service (NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 84.21.) - LEGACY_NVSVC O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\speedfan.sys - speedfan (speedfan) .(.Windows ® 2000 DDK provider - SpeedFan Device Driver.) - LEGACY_SPEEDFAN O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\stwlfbus.sys - stwlfbus (stwlfbus) .(.Pas de propriétaire - PnP BIOS Extension.) - LEGACY_STWLFBUS O64 - Services: CurCS - (.not file.) - SymSnap (SymSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMSNAP O64 - Services: CurCS - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\tifsfilt.sys - Acronis True Image FS Filter (tifsfilter) .(.Acronis - Acronis True Image File System Filter.) - LEGACY_TIFSFILTER O64 - Services: CurCS - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5 O64 - Services: CurCS - (.not file.) - Gestionnaire de téléchargement (uploadmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_UPLOADMGR O64 - Services: CurCS - (.not file.) - V2IMount (V2IMount) .(.Pas de propriétaire - Pas de description.) - LEGACY_V2IMOUNT O64 - Services: CurCS - C:\WINDOWS\system32\vsdatant.sys - vsdatant (vsdatant) .(.Check Point Software Technologies LTD - TrueVector Device Driver.) - LEGACY_VSDATANT O64 - Services: CurCS - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor (vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON O64 - Services: CurCS - C:\Program Files\CyberLink\PowerDVD9\000.fcl - Power Control [2009/07/10 23:39:17] ({B154377D-700F-42cc-9474-23858FBDF4BD}) .(.CyberLink Corp. - Pas de description.) - LEGACY_{B154377D-700F-42CC-9474-23858FBDF4BD} ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Pas de propriétaire - Pas de description.) -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe End of the scan (691 lines in 06mn 31s)