Aller au contenu

toto126

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    11

  • Inscription

  • Dernière visite

 Type de contenu 

Tout ce qui a été posté par toto126

  1. toto126
    OK, je vais essayer de m'en faire un ou d'en recuperer un.. merci pour votre temps.
  2. toto126
    Bonsoir Pear, Je viens de tenter à la manip avec winFileReplace: 1- il ne trouve pas de fichier eula.txt=> j'en ai cree un et ai aussi esaye avec celui de micorsoft touve dans windows/system32 2- il ne trouve pas de fichier Usbstor.sys (aucun fichier trouve àl'emplacement prévu). => ma clé et mon disque dur externe ne sont toujours pas utilisables 3- j'ai toujours le meme probleme de barre de tache, menu demarrer, gestionnaires de taches etc.. bloque pdt 15 à 30 min (il me semble que c'est un peu moins long) au demarrage de la session... Bref, je nage....
  3. toto126
    Pear, Je suis en train de telecharger winreplace. Est ce que je peux l'utiliser pour tous les fichier .sys qui étaient dans windows/sytems32/driers mis en quarantaine par avast (il y en a un 50taine, pour l'isntant je me suis rendu compte uniquement du pb sr les prises USB mais je vais surement avoir d'autres surprises).. Une fois les ports USB remis en fonctionnement, je vais connecter mes cles / disque externe. Pour l'instant je n'ai rien fait tourner dessus. Pouvez vous confirmer qu'il faut que je fasse tourner au moins avast et malware? Quid de Combofix? je le fais retourner avec ces periphériques, si oui est ce que j'utilise le script CFScript?
  4. toto126
    Bonjour Pear, J'ai fait tourné combofix suivant les indications. Voila le rapport: Comme mentionné hier, mes prises USB ne semblent plus fonctionner (disque dur externe + cle USB non reconnus). J'ai vu que le fichier usbstor.sys a ete mis en quarantaine par Avast car infeste par Rootkit-gen=> puis le rstaurer ou faut il que je le supprime et le reinstalle? Merci ComboFix 10-05-11.06 - segolene 13/05/2010 14:53:47.2.1 - FAT32x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.511 [GMT 2:00] Lancé depuis: c:\documents and settings\segolene\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\segolene\Bureau\CFScript.txt AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} FILE :: "C:\FOUND.000" "C:\FOUND.038" "C:\FOUND.039" "C:\FOUND.040" "C:\FOUND.041" "C:\FOUND.042" "c:\windows\system32\badf.sys" "c:\windows\system32\config\systemprofile\Application Data\qvjsge.dat" . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\badf.sys c:\windows\system32\config\systemprofile\Application Data\qvjsge.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BADF -------\Service_badf ((((((((((((((((((((((((((((( Fichiers créés du 2010-04-13 au 2010-05-13 )))))))))))))))))))))))))))))))))))) . 2010-05-12 10:16 . 2010-05-12 10:16 -------- d-----w- C:\_OTM 2010-05-11 07:24 . 2010-05-11 07:24 -------- d-----w- C:\FOUND.000 2010-05-10 22:03 . 2010-05-10 22:04 -------- d-----w- c:\program files\ZHPDiag 2010-05-06 15:06 . 2010-05-06 15:06 -------- d-----w- C:\FOUND.042 2010-05-06 14:40 . 2010-05-06 14:40 -------- d-----w- C:\FOUND.041 2010-05-06 13:55 . 2010-05-06 13:55 -------- d-----w- C:\FOUND.040 2010-05-06 08:23 . 2008-04-13 17:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys 2010-05-06 08:23 . 2008-04-13 17:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys 2010-05-06 08:23 . 2008-04-13 17:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys 2010-05-06 08:23 . 2008-04-13 17:41 8576 ----a-w- c:\windows\system32\dllcache\i2omgmt.sys 2010-05-06 08:23 . 2008-04-13 17:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys 2010-05-06 08:23 . 2008-04-13 17:40 8192 ----a-w- c:\windows\system32\dllcache\changer.sys 2010-04-26 18:56 . 2010-04-26 18:56 -------- d-----w- C:\FOUND.039 2010-04-25 10:40 . 2010-04-25 10:40 -------- d-----w- C:\FOUND.038 2010-04-16 12:24 . 2010-04-16 12:24 -------- d-----w- c:\program files\bayardKids . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-05-10 20:23 . 2004-09-20 15:49 64052 ----a-w- c:\windows\system32\perfc00C.dat 2010-05-10 20:23 . 2004-09-20 15:49 445672 ----a-w- c:\windows\system32\perfh00C.dat 2010-05-06 20:59 . 2008-10-30 18:39 38848 ----a-w- c:\windows\system32\avastSS.scr 2010-05-06 20:59 . 2008-10-30 18:38 165032 ----a-w- c:\windows\system32\aswBoot.exe 2010-05-06 20:39 . 2008-10-30 18:39 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2010-05-06 20:39 . 2008-10-30 18:39 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys 2010-05-06 20:34 . 2008-10-30 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2010-05-06 20:34 . 2008-10-30 18:39 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys 2010-05-06 20:33 . 2008-10-30 18:39 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys 2010-05-06 20:33 . 2008-10-30 18:39 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2010-05-06 20:33 . 2008-10-30 18:39 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys 2010-04-29 13:39 . 2009-01-10 11:13 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 13:39 . 2009-01-10 11:13 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-16 13:44 . 2009-11-21 11:53 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-03-17 08:09 . 2010-03-17 08:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software 2010-03-11 12:34 . 2004-09-20 15:49 832512 ----a-w- c:\windows\system32\wininet.dll 2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll 2010-03-11 12:34 . 2004-09-20 15:48 17408 ------w- c:\windows\system32\corpol.dll 2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll 2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-02-17 12:07 . 2004-09-20 15:48 2192000 ----a-w- c:\windows\system32\ntoskrnl.exe 2010-02-16 19:07 . 2004-08-03 22:48 2068864 ----a-w- c:\windows\system32\ntkrnlpa.exe 2007-10-22 17:06 . 2007-10-22 17:06 7984464 ----a-w- c:\program files\terraexplorer_terraexplorer_5.0.2.8_basic_francais_40985.exe 2006-07-31 12:21 . 2006-07-31 12:21 13736064 ----a-w- c:\program files\GoogleEarthWin.exe 2006-07-22 21:22 . 2006-07-22 21:22 35749671 ----a-w- c:\program files\klmcodec153.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856] "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2009-11-25 95632] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-04-24 251240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192] "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-05-31 401408] "IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-06-02 385024] "HControl"="c:\windows\ATK0100\HControl.exe" [2005-07-28 102400] "EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2005-05-31 356352] "ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2003-09-19 172032] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-07-01 7118848] "Wireless Console"="c:\program files\ASUS\Wireless Console\wcourier.exe" [2005-07-22 57344] "SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-12-21 98394] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-12-21 688218] "SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_05\bin\jusched.exe" [2004-06-03 32881] "SpeedTouch USB Diagnostics"="c:\program files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-04-07 877568] "RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-09-01 282624] "nwiz"="nwiz.exe" [2005-07-01 1519616] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2006-02-23 278528] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2005-06-16 86016] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-7-13 525640] Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472] D‚marrage rapide du logiciel HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-4 53248] ASUS ChkMail.lnk - c:\program files\ASUS\Asus ChkMail\ChkMail.exe [2005-12-5 32768] Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless] 2005-05-31 20:46 110592 ----a-w- c:\program files\Intel\Wireless\Bin\LgNotify.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\WINDOWS\\System32\\dpvsetup.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\K-Lite Codec Pack\\Media Player Classic\\mplayerc.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Freeplayer\\vlc\\vlc.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqcopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqnrs08.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= R0 R592;R592;c:\windows\system32\drivers\R592.sys [15/10/2004 19:26 57088] R0 risdpntk;risdpntk;c:\windows\system32\drivers\risdpntk.sys [15/10/2004 19:26 27264] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [30/10/2008 20:39 164048] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [30/10/2008 20:39 19024] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/04/2009 13:57 92008] S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16/01/2010 12:40 135664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . Contenu du dossier 'Tâches planifiées' 2010-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 10:40] 2010-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 10:40] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.fr/ uInternet Connection Wizard,ShellNext = hxxp://www.asus.com/ IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} - hxxps://particuliers.secure.lcl.fr/v_1.0/img/akl/FormProtect.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-05-13 15:01 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(1036) c:\program files\Intel\Wireless\Bin\LgNotify.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\progra~1\Intel\Wireless\Bin\1XConfig.exe c:\windows\ATKKBService.exe c:\windows\system32\nvsvc32.exe c:\program files\Intel\Wireless\Bin\OProtSvc.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\program files\ASUS\NB Probe\SPM\spmgr.exe c:\windows\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2010-05-13 15:04:10 - La machine a redémarré ComboFix-quarantined-files.txt 2010-05-13 13:04 ComboFix2.txt 2010-05-12 17:16 Avant-CF: 20 632 666 112 octets libres Après-CF: 20 578 992 128 octets libres - - End Of File - - B94F1C2DA28EE9760B7CE16F577D001D
  5. toto126
    Bonsoir, Désolée pour l'erreur de frappe: j'ai bien fait le test sur badf.sys. Quant à l'autre fichier, vous le mentionnez juste dans votre message précédent...au milieu des explications sur badf.sys... Est ce que combofix vous dit quelque chose qui pourrait vous mettre sur la piste?
  6. toto126
    Pear, basf.sys: j'ai refait la manip avec le lien: resultat: 0 bytes size received / Se ha recibido un archivo vacio xjpqlauod.exe: ce fichier n'existe pas, j'ai fait une recherche sur tous les disques. ComboFix: J'ai connecté un disque dur externe + 1 cle USB, mais ils ne sont plus reconnus . Je joint le rapport ci dessous. Merci ComboFix 10-05-11.06 - segolene 12/05/2010 19:10:04.1.1 - FAT32x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.457 [GMT 2:00] Lancé depuis: c:\documents and settings\segolene\Bureau\ComboFix.exe AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\wind c:\program files\wind\majsys.exe c:\program files\wind\majsys.ini c:\program files\wind\server.ini c:\program files\wind\unins000.dat c:\program files\wind\unins000.exe c:\program files\wind\wind.exe c:\program files\wind\wind.GID c:\program files\wind\wind.hlp c:\program files\wind\WindLite.exe c:\windows\system32\404Fix.exe c:\windows\system32\Agent.OMZ.Fix.exe c:\windows\system32\dumphive.exe c:\windows\system32\IEDFix.C.exe c:\windows\system32\IEDFix.exe c:\windows\system32\o4Patch.exe c:\windows\system32\Process.exe c:\windows\system32\SrchSTS.exe c:\windows\system32\tmp.reg c:\windows\system32\VACFix.exe c:\windows\system32\VCCLSID.exe c:\windows\system32\WS2Fix.exe . ((((((((((((((((((((((((((((( Fichiers créés du 2010-04-12 au 2010-05-12 )))))))))))))))))))))))))))))))))))) . 2010-05-12 10:16 . 2010-05-12 10:16 -------- d-----w- C:\_OTM 2010-05-11 07:24 . 2010-05-11 07:24 -------- d-----w- C:\FOUND.000 2010-05-10 22:03 . 2010-05-10 22:04 -------- d-----w- c:\program files\ZHPDiag 2010-05-07 11:35 . 2010-05-07 11:35 74752 ------w- c:\windows\system32\badf.sys 2010-05-06 15:06 . 2010-05-06 15:06 -------- d-----w- C:\FOUND.042 2010-05-06 14:40 . 2010-05-06 14:40 -------- d-----w- C:\FOUND.041 2010-05-06 13:55 . 2010-05-06 13:55 -------- d-----w- C:\FOUND.040 2010-05-06 08:23 . 2008-04-13 17:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys 2010-05-06 08:23 . 2008-04-13 17:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys 2010-05-06 08:23 . 2008-04-13 17:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys 2010-05-06 08:23 . 2008-04-13 17:41 8576 ----a-w- c:\windows\system32\dllcache\i2omgmt.sys 2010-05-06 08:23 . 2008-04-13 17:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys 2010-05-06 08:23 . 2008-04-13 17:40 8192 ----a-w- c:\windows\system32\dllcache\changer.sys 2010-04-26 18:56 . 2010-04-26 18:56 -------- d-----w- C:\FOUND.039 2010-04-25 10:40 . 2010-04-25 10:40 -------- d-----w- C:\FOUND.038 2010-04-16 12:24 . 2010-04-16 12:24 -------- d-----w- c:\program files\bayardKids . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-05-10 20:23 . 2004-09-20 15:49 64052 ----a-w- c:\windows\system32\perfc00C.dat 2010-05-10 20:23 . 2004-09-20 15:49 445672 ----a-w- c:\windows\system32\perfh00C.dat 2010-05-06 20:59 . 2008-10-30 18:39 38848 ----a-w- c:\windows\system32\avastSS.scr 2010-05-06 20:59 . 2008-10-30 18:38 165032 ----a-w- c:\windows\system32\aswBoot.exe 2010-05-06 20:39 . 2008-10-30 18:39 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2010-05-06 20:39 . 2008-10-30 18:39 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys 2010-05-06 20:34 . 2008-10-30 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2010-05-06 20:34 . 2008-10-30 18:39 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys 2010-05-06 20:33 . 2008-10-30 18:39 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys 2010-05-06 20:33 . 2008-10-30 18:39 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2010-05-06 20:33 . 2008-10-30 18:39 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys 2010-05-06 08:23 . 2010-05-06 08:23 16 ----a-w- c:\windows\system32\config\systemprofile\Application Data\qvjsge.dat 2010-04-29 13:39 . 2009-01-10 11:13 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 13:39 . 2009-01-10 11:13 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-16 13:44 . 2009-11-21 11:53 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-03-17 08:09 . 2010-03-17 08:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software 2010-03-11 12:34 . 2004-09-20 15:49 832512 ----a-w- c:\windows\system32\wininet.dll 2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll 2010-03-11 12:34 . 2004-09-20 15:48 17408 ------w- c:\windows\system32\corpol.dll 2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll 2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-02-17 12:07 . 2004-09-20 15:48 2192000 ----a-w- c:\windows\system32\ntoskrnl.exe 2010-02-16 19:07 . 2004-08-03 22:48 2068864 ----a-w- c:\windows\system32\ntkrnlpa.exe 2010-02-12 09:03 . 2010-03-02 07:27 293376 ------w- c:\windows\system32\browserchoice.exe 2010-02-12 04:34 . 2004-09-20 15:48 100864 ----a-w- c:\windows\system32\6to4svc.dll 2007-10-22 17:06 . 2007-10-22 17:06 7984464 ----a-w- c:\program files\terraexplorer_terraexplorer_5.0.2.8_basic_francais_40985.exe 2006-07-31 12:21 . 2006-07-31 12:21 13736064 ----a-w- c:\program files\GoogleEarthWin.exe 2006-07-22 21:22 . 2006-07-22 21:22 35749671 ----a-w- c:\program files\klmcodec153.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 68856] "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2009-11-25 95632] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-04-24 251240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192] "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-05-31 401408] "IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-06-02 385024] "HControl"="c:\windows\ATK0100\HControl.exe" [2005-07-28 102400] "EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2005-05-31 356352] "ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2003-09-19 172032] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-07-01 7118848] "Wireless Console"="c:\program files\ASUS\Wireless Console\wcourier.exe" [2005-07-22 57344] "SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-12-21 98394] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-12-21 688218] "SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_05\bin\jusched.exe" [2004-06-03 32881] "SpeedTouch USB Diagnostics"="c:\program files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-04-07 877568] "RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-09-01 282624] "nwiz"="nwiz.exe" [2005-07-01 1519616] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2006-02-23 278528] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2005-06-16 86016] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-7-13 525640] Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472] D‚marrage rapide du logiciel HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-4 53248] ASUS ChkMail.lnk - c:\program files\ASUS\Asus ChkMail\ChkMail.exe [2005-12-5 32768] Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless] 2005-05-31 20:46 110592 ----a-w- c:\program files\Intel\Wireless\Bin\LgNotify.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\WINDOWS\\System32\\dpvsetup.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\K-Lite Codec Pack\\Media Player Classic\\mplayerc.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Freeplayer\\vlc\\vlc.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqcopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\BIN\\hpqnrs08.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= R0 R592;R592;c:\windows\system32\drivers\R592.sys [15/10/2004 19:26 57088] R0 risdpntk;risdpntk;c:\windows\system32\drivers\risdpntk.sys [15/10/2004 19:26 27264] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [30/10/2008 20:39 164048] R1 badf;badf;c:\windows\system32\badf.sys [07/05/2010 13:35 74752] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [30/10/2008 20:39 19024] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/04/2009 13:57 92008] S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16/01/2010 12:40 135664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 . Contenu du dossier 'Tâches planifiées' 2010-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 10:40] 2010-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 10:40] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.fr/ uInternet Connection Wizard,ShellNext = hxxp://www.asus.com/ IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} - hxxps://particuliers.secure.lcl.fr/v_1.0/img/akl/FormProtect.cab . - - - - ORPHELINS SUPPRIMES - - - - HKLM-Run-NB Probe - (no file) AddRemove-CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10431966 - c:\program files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10431966\HXFSETUP.EXE -U -IHDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_10431966 AddRemove-Wind_is1 - c:\program files\Wind\unins000.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-05-12 19:14 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(1048) c:\program files\Intel\Wireless\Bin\LgNotify.dll . Heure de fin: 2010-05-12 19:16:33 ComboFix-quarantined-files.txt 2010-05-12 17:16 Avant-CF: 20 640 006 144 octets libres Après-CF: 20 686 798 848 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect - - End Of File - - A8BFF96DB089B5C16F8FF2AB99A2D320
  7. toto126
    Pear, Voila le rapport de systemlook SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 14:41 on 12/05/2010 by segolene (Administrator - Elevation successful) ========== reg ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] "dontdisplaylastusername"= 0000000000 (0) "EnableLUA"= 0000000000 (0) "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"= 0x0000000001 (1) "undockwithoutlogon"= 0x0000000001 (1) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"= 0000000000 (0) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "HonorAutoRunSetting"= 0x0000000001 (1) "NoActiveDesktopChanges"= 0x0000000001 (1) "NoSetActiveDesktop"= 0000000000 (0) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoActiveDesktopChanges"= 0000000000 (0) "NoDriveTypeAutoRun"=95 00 00 00 (REG_BINARY) "NoSetActiveDesktop"= 0000000000 (0) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] -=End Of File=-
  8. toto126
  9. toto126
    Bonjour Pear, Merci de votre réponse. Log Avast: je n'ai plus les rapports (je les ai probablement effacés avec Ccleaner): j'ai fait des copier coller des ecrans mais je n'arrive pas à les coller dans ma reponse .. Comment puis-je vous envoyer un fichier word avec mes copie d'ecran? Lors du premier scan j'avais une cinquantaine de fichiers infectés dans windows/system32/drivers et windows/system32 par win32:rootkin-gen aisni que quelques fichier dans documens and setting/../temp infectés par win32:Ups. De plus il y a 1 occurence de VBS: Malware-gen sur Windows/TEMP et une de JS:Jaderun-A sur Document and Settings/..../Temporary Internet Files/ContentIE5/KWVZFQBX => j'ai tout mlis en quarantaine Lors du dernier scan j'avais: J'avais win32:trojan-gen et win32:malware-gen= > ils ont ete supprimés. CD XP: non je ne l'ai pas. basdf.sys C:\WINDOWS\system32\badf.sys: je n'arrive pas à l'envoyer.. Mais j'ai fait tourner malwarebytes et avast=> pas d'infection Log OTM: ci joint J'ai tenté 2 redémarrage apres avoir fait tourner OTM=> il me faut toujours environ 30 min pour récuperer la main. Apres ca marche correctement. Merci de vos suggestions.. All processes killed ========== PROCESSES ========== ========== FILES ========== C:\WINDOWS\Tasks\At1.job moved successfully. C:\WINDOWS\Tasks\At2.job moved successfully. C:\WINDOWS\Tasks\At3.job moved successfully. C:\WINDOWS\Tasks\At4.job moved successfully. C:\WINDOWS\Tasks\At5.job moved successfully. C:\WINDOWS\Tasks\At6.job moved successfully. C:\WINDOWS\Tasks\At7.job moved successfully. C:\WINDOWS\Tasks\At8.job moved successfully. C:\WINDOWS\Tasks\At9.job moved successfully. C:\WINDOWS\Tasks\At10.job moved successfully. C:\WINDOWS\Tasks\At11.job moved successfully. C:\WINDOWS\Tasks\At12.job moved successfully. C:\WINDOWS\Tasks\At13.job moved successfully. C:\WINDOWS\Tasks\At14.job moved successfully. C:\WINDOWS\Tasks\At15.job moved successfully. C:\WINDOWS\Tasks\At16.job moved successfully. C:\WINDOWS\Tasks\At17.job moved successfully. C:\WINDOWS\Tasks\At18.job moved successfully. C:\WINDOWS\Tasks\At19.job moved successfully. C:\WINDOWS\Tasks\At20.job moved successfully. C:\WINDOWS\Tasks\At21.job moved successfully. C:\WINDOWS\Tasks\At22.job moved successfully. C:\WINDOWS\Tasks\At23.job moved successfully. C:\WINDOWS\Tasks\At24.job moved successfully. C:\WINDOWS\System32\26500.exe moved successfully. C:\WINDOWS\System32\6334.exe moved successfully. C:\WINDOWS\System32\18467.exe moved successfully. C:\WINDOWS\System32\61.exe moved successfully. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E796980-9CC5-11D1-A83F-00C04FC99D61} \ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E796980-9CC5-11D1-A83F-00C04FC99D61}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E796980-9CC5-11D1-A83F-00C04FC99D61} \ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E796980-9CC5-11D1-A83F-00C04FC99D61}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 9263673 bytes ->Temporary Internet Files folder emptied: 32768 bytes ->Flash cache emptied: 41119 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 121639 bytes User: LocalService ->Temp folder emptied: 124728 bytes ->Temporary Internet Files folder emptied: 49554 bytes User: segolene ->Temp folder emptied: 287553264 bytes ->Temporary Internet Files folder emptied: 4553356 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: paulin ->Temp folder emptied: 9493874 bytes ->Temporary Internet Files folder emptied: 18972969 bytes ->Flash cache emptied: 43025 bytes User: vacances %systemdrive% .tmp files removed: 76 bytes %systemroot% .tmp files removed: 289905 bytes %systemroot%\System32 .tmp files removed: 3072 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 760 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 9263673 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 324,00 mb OTM by OldTimer - Version 3.1.12.0 log created on 05122010_121608 Files moved on Reboot... File C:\Documents and Settings\segolene\Local Settings\Temp\hpodvd09.log not found! File C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\95YZDDK1\oplevel>. not found! C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\BNZH33H9\img[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\BNZH33H9\img[2].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\BNZH33H9\iframe[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\1JCSKIQM\infection-se2010-et-wwwzuc32-puis-barre-de-taches-et-menu-demarr-t176570[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\1JCSKIQM\povh[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\1JCSKIQM\ads[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\0R9BSO5N\ban_728x90[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\0R9BSO5N\rectangle_300x250[1].htm moved successfully. C:\Documents and Settings\segolene\Local Settings\Temporary Internet Files\Content.IE5\0R9BSO5N\hp[1].htm moved successfully. File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...
  10. toto126
  11. toto126
    Bonsoir, Suite à des infections (wwwzuc32, SE2010, smss32...), j'ai maintenant la barre de taches et le menu demarrer qui sont inopérants apres l'ouverture de la session. Meme le gestionnaire de taches est inaccessible. J'arrive à reprendre la main apres environ 30min. J'ai fait tourner les denieres versions de: Malwarebytes=> plus de fichier infecté Avast => plus de fichier infecté Spbot => plus de pb Je viens d'installer ZHPDiag=> je joins le resultat: voyez vous d'ou vient le pb? Merci Rapport de ZHPDiag v1.25.1421 par Nicolas Coolman, Update du 06/05/2010 Run by toto126 at 11/05/2010 00:04:33 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v7.0.5730.13 ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1023 MB (52% free) System drive C: has 19 GB (35%) free of 55 GB ---\\ Logged in mode Computer Name: noname User Name: toto126 Unselected Option: O1,O45,O61,O65 Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 19 Go of 55 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 31 Go of 36 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK ---\\ Processus lancés [MD5.3C6C546F303C1B956C6F5C436C97CB8F] - (.ALWIL Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2815192] [MD5.4A7E0D4BFC6DE0349EB6F7584D66EC4F] - (.Intel Corporation - ZeroCfgSvc MFC Application.) -- C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [401408] [MD5.1170D08BFE00D077FCE7FD2911091266] - (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [385024] [MD5.C10D96B3CDE64B72FDAAA091F4C79C64] - (.Pas de propriétaire - HControl.) -- C:\WINDOWS\ATK0100\HControl.exe [102400] [MD5.3A09ABA696C0015EF3A622565C458F63] - (.Intel Corporation - Ease Of Use Wizard Application.) -- C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe [356352] [MD5.C31A0E2C9E4C069E1D055D9ADDF74B0C] - (.Pas de propriétaire - ALU MFC Application.) -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe [172032] [MD5.C836DB4AAE4AA93455AB2EBA978BC658] - (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll [7118848] [MD5.DC99782BEE5A1436D74C5ADC44BDBC73] - (.Pas de propriétaire - Wireless Console.) -- C:\Program Files\ASUS\Wireless Console\wcourier.exe [57344] [MD5.404152F22BF272874735AC8A749BC11D] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394] [MD5.5989C65BB5070261517A2E99D4722ADF] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218] [MD5.BED6EDDBF28DB980AA8D3A42D4A05586] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe [32881] [MD5.671169202BCBD231A0D24E0D0DD29156] - (.THOMSON Telecom Belgium - SpeedTouch Statistics.) -- C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe [877568] [MD5.CAF03357DE72F8F19FA099581A685C1A] - (.Apple Computer, Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe [282624] [MD5.8778072A594E1310C0B7D0A93771E8BD] - (.Apple Computer, Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe [278528] [MD5.926A397334FE426A6C7657096FE681DB] - (.Hewlett-Packard Development Company, L.P. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152] [MD5.A42864FC12151CA251F31E5AFBE0D380] - (.ASUSTeK Computer Inc. - BatteryLife.) -- C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [86016] [MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe [15360] [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856] [MD5.F22DCB3A5697D0A372C529585E629AD2] - (.OLYMPUS IMAGING CORP. - resident module.) -- C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [95632] [MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [MD5.F7635816D89AA6382D5E4F631A9168FA] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [251240] [MD5.3F23027D8F33754F6E084B6E59E0B0BF] - (.ASUSTeK COMPUTER INC. - ASUS Keyboard Service.) -- C:\WINDOWS\ATKKBService.exe [253952] [MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe [14336] [MD5.AE28BA1361D8040D8850F21CACFCCCE9] - (.ALWIL Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384] [MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe [111104] [MD5.76956ED607EFE8F73D657DE75018D94F] - (.Intel Corporation - EvtEng Module.) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [86016] [MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [135664] [MD5.F8B04D5A09B2E962B7CB452E33DC3894] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 78.10.) -- C:\WINDOWS\system32\nvsvc32.exe [127042] [MD5.AC0720FEF0E1626CA3B46901D77860EF] - (.Intel Corporation - Ownership protocol service.) -- C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe [98304] [MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe [13312] [MD5.C04DB32DE1080DFD11F1F4322D6897A3] - (.Intel Corporation - RegSrvc Module.) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [139264] [MD5.7B39E60C587654960F4E9C5CF44A31AF] - (.Intel Corporation - Event Monitor - Supports driver extensions.) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [372809] [MD5.5979E1FAFD2BD49A4CE0EE7B447D6CD1] - (.Pas de propriétaire - spmgr Module.) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [118784] [MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe [57856] [MD5.253A4BAF822798023FAE5701CD026845] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [92008] ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.17036 (vista_gdr.100308-0235)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (.Pas de propriétaire - Pas de description.) -- ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [avast5] . (.ALWIL Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - HKLM\..\Run: [intelZeroConfig] . (.Intel Corporation - ZeroCfgSvc MFC Application.) -- C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe O4 - HKLM\..\Run: [intelWireless] . (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe O4 - HKLM\..\Run: [HControl] . (.Pas de propriétaire - HControl.) -- C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [EOUApp] . (.Intel Corporation - Ease Of Use Wizard Application.) -- C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe O4 - HKLM\..\Run: [ASUS Live Update] . (.Pas de propriétaire - ALU MFC Application.) -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll O4 - HKLM\..\Run: [Wireless Console] . (.Pas de propriétaire - Wireless Console.) -- C:\Program Files\ASUS\Wireless Console\wcourier.exe O4 - HKLM\..\Run: [synTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe O4 - HKLM\..\Run: [speedTouch USB Diagnostics] . (.THOMSON Telecom Belgium - SpeedTouch Statistics.) -- C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Computer, Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Development Company, L.P. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Power_Gear] . (.ASUSTeK Computer Inc. - BatteryLife.) -- C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [OM2_Monitor] . (.OLYMPUS IMAGING CORP. - resident module.) -- C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - Global Startup: WinZip Quick Pick.lnk . (.WinZip Computing, S.L. - WinZip Executable.) -- C:\Program Files\WinZip\WZQKPICK.EXE O4 - Global Startup: Microsoft Office.lnk . (.Microsoft Corporation - Microsoft Office 2000 component.) -- C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk . (.Hewlett-Packard Co. - HP Image Zone.) -- C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: ASUS ChkMail.lnk . (.asus - ChkMail.) -- C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} . (.not file.) - (.not file.) O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Phone\IEPlugin\favicon.ico O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14) O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.asus.com ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...director/sw.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/9/b...heckControl.cab O16 - DPF: {45B69029-F3AB-4204-92DE-D5140C3E8E74} (F5 Networks Auto Update) - (.not file.) - C:\DOCUME~1\segolene\LOCALS~1\Temp\IXP000.TMP\InstallerControl.cab O16 - DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} (KeybHunterWebInterface Class) - (.not file.) - https:\\particuliers.secure.lcl.fr\v_1.0\img\akl\FormProtect.cab O16 - DPF: {6C275925-A1ED-4DD2-9CEE-9823F5FDAA10} (F5 Networks SSLTunnel) - (.not file.) - https:\\extranet.mousquetaires.com\vdesk\terminal\urTermProxy.cab#version=6020,2008,0514,2337 O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - (.not file.) - https:\\as.photoprintit.de\ips-opdata\layout\default_cms01\activex\IPSUploader4.cab O16 - DPF: {CC85ACDF-B277-486F-8C70-2C9B2ED2A4E7} (F5 Networks SuperHost Class) - (.not file.) - https:\\extranet.mousquetaires.com\vdesk\terminal\urxshost.cab#version=6020,2008,0514,2341 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab O16 - DPF: {E0FF21FA-B857-45C5-8621-F120A0C17FF2} (F5 Networks Host Control) - (.not file.) - https:\\extranet.mousquetaires.com\vdesk\terminal\urxhost.cab#version=6020,2008,0514,2340 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: skyline - {3a4f9195-65a8-11d5-85c1-0001023952c1} . (.Skyline software systems Inc. - TerraExplorerX DLL.) -- C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: IntelWireless . (.Intel Corporation - LogonNotify DLL.) -- C:\Program Files\Intel\Wireless\Bin\LgNotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\System32\WgaLogon.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: ATK Keyboard Service (ATKKeyboardService) . (.ASUSTeK COMPUTER INC. - ASUS Keyboard Service.) - C:\WINDOWS\ATKKBService.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: EvtEng (EvtEng) . (.Intel Corporation - EvtEng Module.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 78.10.) - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: OwnershipProtocol (OwnershipProtocol) . (.Intel Corporation - Ownership protocol service.) - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe O23 - Service: RegSrvc (RegSrvc) . (.Intel Corporation - RegSrvc Module.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) . (.Intel Corporation - Event Monitor - Supports driver extensions.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: spmgr (spmgr) . (.Pas de propriétaire - spmgr Module.) - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At1.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At2.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At3.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At4.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At5.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At6.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At7.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At8.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At9.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At10.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At11.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At12.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At13.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At14.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At15.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At16.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At17.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At18.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At19.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At20.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At21.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At22.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At23.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At24.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Java\j2re1.4.2_05\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r22.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Enhanced Display Driver Helper Service (asuskbnt) . (.ASUSTeK COMPUTER INC. - ASUS Help driver For Keyboard Service..) - C:\Windows\system32\drivers\atkkbnt.sys O41 - Driver: badf (badf) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\system32\badf.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 40 leçons pour parler anglais - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: ASUS Enhanced Display Driver - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: ASUS Live Update - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: ASUS VideoSecurity Online - (.ASUSTeK Computer Inc..) [HKLM] O42 - Logiciel: ATK0100 ACPI UTILITY - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] O42 - Logiciel: Adobe Reader 7.0 - (.Adobe Systems Incorporated.) [HKLM] O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] O42 - Logiciel: Agipa Master - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Asus ChkMail - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Asus_A6_ScreenSaver - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: BisonCam, NB Pro - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: CCleaner (remove only) - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Canon Camera Support Core Library - (.Canon.) [HKLM] O42 - Logiciel: Canon Camera Window DS for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon Camera Window DVC for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon Camera Window for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon RemoteCapture Task for ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Canon Utilities PhotoStitch 3.1 - (.Canon.) [HKLM] O42 - Logiciel: Canon ZoomBrowser EX - (.Canon.) [HKLM] O42 - Logiciel: Free Easy Burner V 3.8 - (.Koyote soft.) [HKLM] O42 - Logiciel: Freeplayer - (.Free.) [HKLM] O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] O42 - Logiciel: Google Earth - (.Google.) [HKLM] O42 - Logiciel: HDAUDIO SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: HP Extended Capabilities 4.7 - (.HP.) [HKLM] O42 - Logiciel: HP Image Zone 4.7 - (.HP.) [HKLM] O42 - Logiciel: HP Imaging Device Functions 7.0 - (.HP.) [HKLM] O42 - Logiciel: HP Officejet Pro All-In-One Series - (.HP.) [HKLM] O42 - Logiciel: HP PSC & OfficeJet 4.7 - (.HP.) [HKLM] O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] O42 - Logiciel: HP Solution Center 7.0 - (.HP.) [HKLM] O42 - Logiciel: High Definition Audio - KB888111 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Intel® PROSet/Wireless Software - (.Intel Corporation.) [HKLM] O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_05 - (.Sun Microsystems, Inc..) [HKLM] O42 - Logiciel: K-Lite Mega Codec Pack 1.53 - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft Office 2000 SR-1 Standard - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft Office 2000 Small Business - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: NB Probe - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: OLYMPUS Master 2 - (.OLYMPUS IMAGING CORP..) [HKLM] O42 - Logiciel: Power4 Gear - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: QuickTime - (.Apple Computer, Inc..) [HKLM] O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] O42 - Logiciel: Skype 3.0 - (.Skype Technologies S.A..) [HKLM] O42 - Logiciel: Skype Plugin Manager - (.Skype Limited.) [HKLM] O42 - Logiciel: Skype add-on for IE - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: SpeedTouch USB Software - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] O42 - Logiciel: Synaptics Pointing Device Driver - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: TerraExplorer - (.Skyline Software Systems, Inc..) [HKLM] O42 - Logiciel: TomTom HOME 2.6.3.1609 - (.TomTom.) [HKLM] O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] O42 - Logiciel: WinFlash - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: WinZip 12.1 - (.WinZip Computing, S.L. .) [HKLM] O42 - Logiciel: Wind V1.75 - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] O42 - Logiciel: Wireless Console - (.ASUS.) [HKLM] O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] O42 - Logiciel: bayardKids - (.Tribal Nova Inc.) [HKLM] O42 - Logiciel: iPod Updater 2004-10-20 - (.Apple Computer, Inc..) [HKLM] O42 - Logiciel: iPod for Windows 2005-11-17 - (.Nom de votre société.) [HKLM] O42 - Logiciel: iTunes - (.Apple Computer, Inc..) [HKLM] O42 - Logiciel: mCore - (.Intel Corporation.) [HKLM] O42 - Logiciel: mDrWiFi - (.Intel Corporation.) [HKLM] O42 - Logiciel: mDriver - (.Intel.) [HKLM] O42 - Logiciel: mEoU.msi - (.Intel Corporation.) [HKLM] O42 - Logiciel: mHelp - (.Intel.) [HKLM] O42 - Logiciel: mIWA - (.Intel Corporation.) [HKLM] O42 - Logiciel: mIWCA - (.Intel Corporation.) [HKLM] O42 - Logiciel: mLogView - (.Intel Corporation.) [HKLM] O42 - Logiciel: mMHouse - (.Intel Corporation.) [HKLM] O42 - Logiciel: mPfMgr - (.Intel Corporation.) [HKLM] O42 - Logiciel: mPfWiz - (.Intel Corporation.) [HKLM] O42 - Logiciel: mProSafe - (.Intel.) [HKLM] O42 - Logiciel: mWlsSafe - (.Intel.) [HKLM] O42 - Logiciel: mXML - (.Intel Corporation.) [HKLM] O42 - Logiciel: mZConfig - (.Intel Corporation.) [HKLM] ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\AC3filter] [HKCU\Software\ALWIL Software] [HKCU\Software\ASUS] [HKCU\Software\AXMA] [HKCU\Software\Adobe] [HKCU\Software\Agipa] [HKCU\Software\Ahead] [HKCU\Software\Alcatel] [HKCU\Software\Alliance MCA] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Aurigma] [HKCU\Software\CDDB] [HKCU\Software\CISRA] [HKCU\Software\Canon] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CopyPod] [HKCU\Software\CoreVorbis] [HKCU\Software\DivXNetworks] [HKCU\Software\Earth Resource Mapping] [HKCU\Software\FRANCE TELECOM] [HKCU\Software\Freeplayer] [HKCU\Software\GNU] [HKCU\Software\GS] [HKCU\Software\GSpot Appliance Corp] [HKCU\Software\Gabest] [HKCU\Software\Gameface] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Heidi Computers Ltd] [HKCU\Software\Hewlett-Packard] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\Nico Mak Computing] [HKCU\Software\Novell] [HKCU\Software\ODBC] [HKCU\Software\OLYMPUS] [HKCU\Software\ORL] [HKCU\Software\POWER4 GEAR] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\Realtek] [HKCU\Software\Roxio] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Skyline] [HKCU\Software\Skype] [HKCU\Software\Support.com] [HKCU\Software\Synaptics] [HKCU\Software\TomTom] [HKCU\Software\VSO] [HKCU\Software\Widelook] [HKCU\Software\WinZip Computing] [HKCU\Software\Winds] [HKCU\Software\Yahoo] [HKCU\Software\keyhole.com] [HKCU\Software\uRoam] [HKLM\Software\3ivx] [HKLM\Software\ALWIL Software] [HKLM\Software\APLI-AGIPA S.A.S.] [HKLM\Software\ATK0100] [HKLM\Software\AceGain] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alcatel] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Asus] [HKLM\Software\BisonCam] [HKLM\Software\BrowserChoice] [HKLM\Software\C07ft5Y] [HKLM\Software\CISRA] [HKLM\Software\CXT] [HKLM\Software\Canon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CopyPod] [HKLM\Software\CyberLink] [HKLM\Software\Debug] [HKLM\Software\DivXNetworks] [HKLM\Software\Earth Resource Mapping] [HKLM\Software\FRANCE TELECOM] [HKLM\Software\GNU] [HKLM\Software\Gabest] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\HP] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard] [HKLM\Software\HyperOffice] [HKLM\Software\ICE] [HKLM\Software\InstallShield] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\InterVideo] [HKLM\Software\JavaSoft] [HKLM\Software\KLCodecPack] [HKLM\Software\LEAD Technologies, Inc.] [HKLM\Software\MDC] [HKLM\Software\Macromedia] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\Nero] [HKLM\Software\Nico Mak Computing] [HKLM\Software\Novell] [HKLM\Software\ODBC] [HKLM\Software\OLYMPUS] [HKLM\Software\On2 Technologies] [HKLM\Software\PepiMK Software] [HKLM\Software\Persits Software] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\S3R521] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Secure] [HKLM\Software\Skyline] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\TomTom] [HKLM\Software\UIU] [HKLM\Software\VSO] [HKLM\Software\WebCam] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Yahoo] [HKLM\Software\mozilla.org] [HKLM\Software\support.com] ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files\ASUS O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics O43 - CFD:Common File Directory ----D- C:\Program Files\Intel O43 - CFD:Common File Directory ----D- C:\Program Files\Symantec O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\GameFace Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT O43 - CFD:Common File Directory ----D- C:\Program Files\support.com O43 - CFD:Common File Directory ----D- C:\Program Files\Thomson O43 - CFD:Common File Directory ----D- C:\Program Files\HP O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Skype O43 - CFD:Common File Directory ----D- C:\Program Files\Canon O43 - CFD:Common File Directory ----D- C:\Program Files\iPod O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software O43 - CFD:Common File Directory ----D- C:\Program Files\HAVAS Poche O43 - CFD:Common File Directory ----D- C:\Program Files\AGIPA O43 - CFD:Common File Directory ----D- C:\Program Files\K-Lite Codec Pack O43 - CFD:Common File Directory ----D- C:\Program Files\Alice O43 - CFD:Common File Directory ----D- C:\Program Files\Google O43 - CFD:Common File Directory ----D- C:\Program Files\Roxio Easy Media Creator 7.5 ENG Trial O43 - CFD:Common File Directory ----D- C:\Program Files\Roxio O43 - CFD:Common File Directory ----D- C:\Program Files\Wind O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Nero O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files\Free Easy Burner O43 - CFD:Common File Directory ----D- C:\Program Files\AXMA O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD:Common File Directory ----D- C:\Program Files\Securitoo O43 - CFD:Common File Directory ----D- C:\Program Files\Wanadoo O43 - CFD:Common File Directory ----D- C:\Program Files\OLYMPUS O43 - CFD:Common File Directory ----D- C:\Program Files\Free O43 - CFD:Common File Directory ----D- C:\Program Files\Yahoo! O43 - CFD:Common File Directory ----D- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy) O43 - CFD:Common File Directory ----D- C:\Program Files\File Scanner Library (Spybot - Search & Destroy) O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\Tor O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\Freeplayer O43 - CFD:Common File Directory ----D- C:\Program Files\TomTom HOME 2 O43 - CFD:Common File Directory ----D- C:\Program Files\TomTom International B.V O43 - CFD:Common File Directory ----D- C:\Program Files\WinZip O43 - CFD:Common File Directory ----D- C:\Program Files\Skyline O43 - CFD:Common File Directory ----D- C:\Program Files\7-Zip O43 - CFD:Common File Directory ----D- C:\Program Files\bayardKids O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Symantec Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\HP O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Roxio Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Skype O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe AIR ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.374B89767517B5197D6C8AE21FF39B4D] - 10/05/2010 - 22:39:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvapps.xml [24846] O44 - LFC:[MD5.1148389D1770A04A3E32CB9E18F3FBD4] - 10/05/2010 - 22:39:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [1158] O44 - LFC:[MD5.00000000000000000000000000000000] - 10/05/2010 - 22:39:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/05/2010 - 22:38:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.7FEE162ED17F9248CDCDD302F8890D7B] - 10/05/2010 - 22:38:48 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 10/05/2010 - 22:23:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.BFC9B439837506E0EED74D3F35E1A33E] - 10/05/2010 - 22:23:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [658] O44 - LFC:[MD5.574C94EED8119C6860546294753EC938] - 10/05/2010 - 22:23:08 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [216] O44 - LFC:[MD5.00000000000000000000000000000000] - 10/05/2010 - 21:58:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32640] O44 - LFC:[MD5.00000000000000000000000000000000] - 10/05/2010 - 21:58:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1416502] O44 - LFC:[MD5.00000000000000000000000000000000] - 10/05/2010 - 21:44:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.4F12E5F8B9EE5CC5264130C0A6AEC7F1] - 10/05/2010 - 21:35:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wmsetup.log [933] O44 - LFC:[MD5.9FBEC133F3E1C1B62707F79683603DC2] - 10/05/2010 - 21:25:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [2202] O44 - LFC:[MD5.B4C01BA8A96CE2216C0B607A16156486] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\comsetup.log [4009] O44 - LFC:[MD5.7EDF794A08361D8C60CD04393DA2C378] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.log [986] O44 - LFC:[MD5.5953ADDF8E672015FCB40A152BA47E3B] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.log [4566] O44 - LFC:[MD5.D11CF03FE50A91449831C8AEE97E01EC] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntdtcsetup.log [3360] O44 - LFC:[MD5.22A4B482E7D37DAE0D850B2513D4CA77] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocmsn.log [1177] O44 - LFC:[MD5.5605A53C37CB9EE5711ADAC1EB4EFB87] - 10/05/2010 - 21:23:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tsoc.log [6314] O44 - LFC:[MD5.CC72AEF5FE2FEDF34B4AFA82699A93E9] - 10/05/2010 - 21:23:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\FaxSetup.log [11018] O44 - LFC:[MD5.6BBF233143302967579BDD827A438901] - 10/05/2010 - 21:23:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msgsocm.log [877] O44 - LFC:[MD5.A417270D550C31987C4FBEB86D4EF788] - 10/05/2010 - 21:23:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocgen.log [26727] O44 - LFC:[MD5.36BD4D0318932C35CC23ACD8D8F16ECC] - 10/05/2010 - 21:23:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [951220] O44 - LFC:[MD5.C545EE518641D07CAD0037CC1D81230A] - 10/05/2010 - 21:23:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [53098] O44 - LFC:[MD5.271C04C810C656FCDBD43D4AEAC3C2E4] - 10/05/2010 - 21:23:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [64052] O44 - LFC:[MD5.DFAD56C74617428378EBAB51694897C5] - 10/05/2010 - 21:23:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [380684] O44 - LFC:[MD5.1492815C2C41836C214F0E7706FF92DC] - 10/05/2010 - 21:23:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [445672] O44 - LFC:[MD5.BEED859862DD30EC68C84C61AB7417EB] - 10/05/2010 - 21:20:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupact.log [120] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/05/2010 - 21:18:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setuperr.log [0] O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 10/05/2010 - 20:28:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT [3121] O44 - LFC:[MD5.F533CF75A4951112062316625219C018] - 10/05/2010 - 18:55:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EventSystem.log [610] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/05/2010 - 12:44:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\26500.exe [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/05/2010 - 12:24:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\6334.exe [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 10/05/2010 - 12:04:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\18467.exe [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 07/05/2010 - 15:23:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\61.exe [0] O44 - LFC:[MD5.C3A7AC3D7C71DF622E2828A35ECB84A5] - 06/05/2010 - 21:59:58 ---A- . (.ALWIL Software - avast! Screen Saver stub.) -- C:\WINDOWS\System32\avastSS.scr [38848] O44 - LFC:[MD5.EE3A0274471DE1ED924E6C5935080495] - 06/05/2010 - 21:59:36 ---A- . (.ALWIL Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [165032] O44 - LFC:[MD5.606D731008D98B6EF946730C597C1642] - 06/05/2010 - 21:39:24 ---A- . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [46672] O44 - LFC:[MD5.D78B644816DB540E103D0B0766FD9967] - 06/05/2010 - 21:39:00 ---A- . (.ALWIL Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [164048] O44 - LFC:[MD5.3E2B6112D2766F87EDA8466FDE86A986] - 06/05/2010 - 21:34:28 ---A- . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23376] O44 - LFC:[MD5.81432B1A4B31036C822EB967DECF613C] - 06/05/2010 - 21:34:00 ---A- . (.ALWIL Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [100432] O44 - LFC:[MD5.5FFE0C6A55930B77686535C070DB408C] - 06/05/2010 - 21:33:56 ---A- . (.ALWIL Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [94800] O44 - LFC:[MD5.1B6ED99291DDF5D2501554CC5757AAB6] - 06/05/2010 - 21:33:48 ---A- . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [19024] O44 - LFC:[MD5.A5246ED2586AA807AF0BCF63165A71CC] - 06/05/2010 - 21:33:30 ---A- . (.ALWIL Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [28880] O44 - LFC:[MD5.A933DD1E2EA5316D2210CA9E6769AF4F] - 06/05/2010 - 16:23:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\mombi.log [191006] O44 - LFC:[MD5.406598827A1B5F77954DE11DDE115CED] - 06/05/2010 - 09:23:41 ---A- . (.Toshiba Corp. - Toshiba Libretto floppy controller.) -- C:\WINDOWS\System32\drivers\lbrtfdc.sys [34688] O44 - LFC:[MD5.E1034D757709F37F2D1EBD96D5EAD02B] - 04/05/2010 - 17:34:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\QTFont.for [1409] O44 - LFC:[MD5.DBA91CD5A3A68302967C03213E52BDE8] - 04/05/2010 - 17:34:02 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\QTFont.qfn [54156] O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224] O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952] O44 - LFC:[MD5.00AD4AE431A245EC64BADC863B21ADAE] - 27/04/2010 - 18:29:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\DUMP660d.tmp [90112] O44 - LFC:[MD5.BE68F3716FF0EB285AD36B9248B7E07B] - 16/04/2010 - 14:44:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\d3d9caps.dat [664] O44 - LFC:[MD5.47F36B085287947D35E7BAF608803E42] - 31/12/2079 - 18:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Store.LOG [37] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\dpvsetup.exe" [Enabled] .(.Microsoft Corporation - Microsoft DirectPlay Voice Test.) -- C:\WINDOWS\System32\dpvsetup.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\RUNDLL32.EXE" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\WINDOWS\System32\RUNDLL32.EXE:*:Enabled:Exécuter une DLL en tant qu'application O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Computer, Inc. - iTunes.) (.not file.) -- C:\Program Files\iTunes\iTunes.exe O47 - AAKE:Key Export SP - "C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" [Enabled] .(.Gabest - Media Player Classic.) (.not file.) -- C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype. The whole world can talk for free..) (.not file.) -- C:\Program Files\Skype\Phone\Skype.exe O47 - AAKE:Key Export SP - "C:\Program Files\Freeplayer\vlc\vlc.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Freeplayer\vlc\vlc.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqtra08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP Digital Imaging Monitor.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqtra08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqste08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP CUE Status.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqste08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpofxm08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP AiO Fax Manager.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpofxm08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hposfx08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP OfficeJet SendFax Interface.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hposfx08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hposid01.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP All-in-One Launcher Utility.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hposid01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqscnvw.exe" [Enabled] .(.Pas de propriétaire - hpqscnvw.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqscnvw.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqkygrp.exe" [Enabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqkygrp.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqcopy.exe" [Enabled] .(.Hewlett-Packard Co. - Pas de description.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqcopy.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpfccopy.exe" [Enabled] .(.Hewlett-Packard - HP ScanJet Copier Utility.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpfccopy.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpzwiz01.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP Fax Setup Wizard.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpzwiz01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" [Enabled] .(.Hewlett-Packard - QHouston.) (.not file.) -- C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\BIN\hpqnrs08.exe" [Enabled] .(.Hewlett-Packard Development Company, L.P. - HP Network Device Rediscovery Service.) (.not file.) -- C:\Program Files\HP\Digital Imaging\BIN\hpqnrs08.exe O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) (.not file.) -- C:\Program Files\Messenger\msmsgs.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ MountPoints2 Shell Key (MPSK) (O51) O51 - MPSK:{f96bf792-e0fa-11dd-b23a-00150042a5d5}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- H:\InstallTomTomHOME.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.asv2"="asusasv2.dll" . (.ASUSTeK COMPTER INC. - ASUS ASV2 Video CODEC.) -- C:\WINDOWS\System32\asusasv2.dll O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\divx.dll O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"VIDC.X264"="x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\x264vfw.dll O52 - TDSD: \Drivers32\"VIDC.3iv2"="3ivxVfWCodec.dll" . (.3ivx.com - 3ivx D4 4.5.1 Pro Video for Windows Codec.) -- C:\WINDOWS\System32\3ivxVfWCodec.dll O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\WINDOWS\System32\vorbis.acm O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm O52 - TDSD: \Drivers32\"vidc.LEAD"="LCODCCMP.DLL" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"asusasv2.dll"="ASUS ASV2 CODEC" . (.ASUSTeK COMPTER INC. - ASUS ASV2 Video CODEC.) -- C:\WINDOWS\System32\asusasv2.dll O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"divx.dll"="DivX Pro 6.2.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec v1.2.0-dev" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"x264vfw.dll"="x264 H.264 Video Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"3ivxVfWCodec.dll"="3ivx D4 4.5.1 Pro" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio Codec" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\WINDOWS\System32\vorbis.acm O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC3 ACM Decompressor" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir41_32.ax ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"= O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoActiveDesktopChanges"=0 O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoSetActiveDesktop"=0 O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoSetActiveDesktop"=0 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 05/08/2004 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 05/08/2004 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.02AAAFB7BA137CE5DDABCDF8090954D9] - 11/11/2006 - 10:00:18 ---A- . (.VSO Software - low level access layer for CD/DVD/BD devices.) -- C:\WINDOWS\system32\drivers\pcouffin.sys O58 - SDL:[MD5.E8A3F72F644C0B57F8AB894D04B289D7] - 08/12/2003 - 11:53:50 ---A- . (.THOMSON - LAN Driver.) -- C:\WINDOWS\system32\drivers\alcan5ln.sys O58 - SDL:[MD5.4C9577888C53243E2991456F510488A1] - 08/12/2003 - 11:53:46 ---A- . (.THOMSON - WDM Driver.) -- C:\WINDOWS\system32\drivers\alcaudsl.sys O58 - SDL:[MD5.2C1D0DC3BF44C2D01C02795DAC592A09] - 03/03/2000 - 10:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\MMIOPORT.SYS O58 - SDL:[MD5.E333010A50BF603ACC350F6019E9CE02] - 17/02/2005 - 09:07:48 ---A- . (.Pas de propriétaire - ATK0100 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ATKACPI.sys O58 - SDL:[MD5.A81A1F8C2A50F72FDA9C686AA85BF151] - 01/06/2004 - 20:04:00 ---A- . (.Marvell Semiconductor Inc. - NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adap.) -- C:\WINDOWS\system32\drivers\yukonwxp.sys O58 - SDL:[MD5.1F459F1C726790F6CA34A0FB3D50292D] - 15/10/2004 - 18:26:00 ---A- . (.REDC - R5C592 Media Driver as DiskDrive.) -- C:\WINDOWS\system32\drivers\R592.sys O58 - SDL:[MD5.66AB0104ACD972C415662941176932F5] - 15/10/2004 - 18:26:00 ---A- . (.REDC - RICOH SD/MMC Driver.) -- C:\WINDOWS\system32\drivers\risdpntk.sys O58 - SDL:[MD5.406598827A1B5F77954DE11DDE115CED] - 13/04/2008 - 18:40:26 ---A- . (.Toshiba Corp. - Toshiba Libretto floppy controller.) -- C:\WINDOWS\system32\drivers\lbrtfdc.sys O58 - SDL:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 29/03/2000 - 13:17:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\asushwio.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/11/2007 - 10:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.D03D10F7DED688FECF50F8FBF1EA9B8A] - 21/10/2005 - 18:58:52 ---A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZid412.sys O58 - SDL:[MD5.89F41658929393487B6B7D13C8528CE3] - 21/10/2005 - 18:58:58 ---A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys O58 - SDL:[MD5.ABCB05CCDBF03000354B9553820E39F8] - 21/10/2005 - 18:52:48 ---A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.4B322F8C7B7AF523D1C145C22EEF4713] - 08/09/2005 - 01:20:52 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys O58 - SDL:[MD5.2230B842F43A204ABD3EC6BDD39D793F] - 18/04/2005 - 05:24:44 R--A- . (.Bison Electronics. Inc. - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\BisonCam.sys O58 - SDL:[MD5.55A7C2667FF752FABCAE7E6B6DF52A10] - 22/12/2004 - 00:23:34 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys O58 - SDL:[MD5.8B32E330ACAC354881E54FB5C1DFEF49] - 01/07/2005 - 10:40:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 78.10.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys O58 - SDL:[MD5.59453B241885552F645FDFF4A72F868C] - 09/06/2005 - 13:10:56 ---A- . (.ASUSTeK COMPUTER INC. - ASUS Help driver For Keyboard Service..) -- C:\WINDOWS\system32\drivers\atkkbnt.sys O58 - SDL:[MD5.448F0DE9B06386A4DD605D28C0CC5FEB] - 16/01/2005 - 16:48:00 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys O58 - SDL:[MD5.88DA551B653FCE4FC56F9389A5C858B7] - 16/01/2005 - 16:48:00 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys O58 - SDL:[MD5.0D90B6C780156723E0991752AD94D278] - 16/01/2005 - 16:48:00 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DP.sys O58 - SDL:[MD5.3C318B9CD391371BED62126581EE9961] - 16/01/2005 - 16:48:00 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys O58 - SDL:[MD5.208491A652C79871737EDFE629DE2C45] - 03/05/2005 - 06:03:54 ---A- . (.Intel Corporation - Intel WLAN Packet Driver.) -- C:\WINDOWS\system32\drivers\s24trans.sys O58 - SDL:[MD5.8B1AA49EE19418E9FB226D209AAC1B67] - 12/08/2004 - 07:43:48 ---A- . (.Intel Corporation - Intel Wireless Connection Agent.) -- C:\WINDOWS\system32\drivers\iwca2k.sys O58 - SDL:[MD5.8525B88D8E902E7B587FCA034B298693] - 08/12/2003 - 11:53:38 ---A- . (.THOMSON - Helper.) -- C:\WINDOWS\system32\drivers\alcacr.sys O58 - SDL:[MD5.66065EF8736CD9A4EE0F8B02055F45B5] - 08/12/2003 - 11:53:42 ---A- . (.THOMSON - Helper.) -- C:\WINDOWS\system32\drivers\alcawh.sys O58 - SDL:[MD5.32A73A8952580B284A47290ADB62032A] - 02/02/2005 - 00:21:04 ---A- . (.GEAR Software Inc. - CDRom Class Filter Driver.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys O58 - SDL:[MD5.67CAA926EF06E07F2D31056B39F51C54] - 30/04/2005 - 15:01:56 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\WINDOWS\system32\drivers\w29n51.sys O58 - SDL:[MD5.2C5C22990156A1063E19AD162191DC1D] - 19/09/2006 - 11:02:06 ---A- . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\system32\drivers\AegisP.sys O58 - SDL:[MD5.872D090CA5C306F62D1982BCE6302376] - 12/08/2004 - 07:44:04 ---A- . (.Intel Corporation - Intel Wireless Connection Agent.) -- C:\WINDOWS\system32\drivers\iwca.sys O58 - SDL:[MD5.5FFE0C6A55930B77686535C070DB408C] - 06/05/2010 - 21:33:56 ---A- . (.ALWIL Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys O58 - SDL:[MD5.81432B1A4B31036C822EB967DECF613C] - 06/05/2010 - 21:34:00 ---A- . (.ALWIL Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys O58 - SDL:[MD5.D78B644816DB540E103D0B0766FD9967] - 06/05/2010 - 21:39:00 ---A- . (.ALWIL Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys O58 - SDL:[MD5.1B6ED99291DDF5D2501554CC5757AAB6] - 06/05/2010 - 21:33:48 ---A- . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys O58 - SDL:[MD5.A5246ED2586AA807AF0BCF63165A71CC] - 06/05/2010 - 21:33:30 ---A- . (.ALWIL Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys O58 - SDL:[MD5.606D731008D98B6EF946730C597C1642] - 06/05/2010 - 21:39:24 ---A- . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys O58 - SDL:[MD5.3E2B6112D2766F87EDA8466FDE86A986] - 06/05/2010 - 21:34:28 ---A- . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CEEF86CB35ABE95C40A88784F5B631AD] - 04/08/2003 - 13:22:44 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\pcandis5.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.) O63 - Logiciel: SmitFraudFix - (.S!ri.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4 O64 - Services: CurCS - C:\Windows\system32\DRIVERS\AegisP.sys - AEGIS Protocol (IEEE 802.1x) v3.2.0.3 (AegisP) .(.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASUSHWIO.sys - Asushwio (Asushwio) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASUSHWIO O64 - Services: CurCS - C:\Windows\system32\drivers\atkkbnt.sys - Enhanced Display Driver Helper Service (asuskbnt) .(.ASUSTeK COMPUTER INC. - ASUS Help driver For Keyboard Service..) - LEGACY_ASUSKBNT O64 - Services: CurCS - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK O64 - Services: CurCS - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2 O64 - Services: CurCS - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR O64 - Services: CurCS - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP O64 - Services: CurCS - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI O64 - Services: CurCS - C:\WINDOWS\ATKKBService.exe - ATK Keyboard Service (ATKKeyboardService) .(.ASUSTeK COMPUTER INC. - ASUS Keyboard Service.) - LEGACY_ATKKEYBOARDSERVICE O64 - Services: CurCS - (.not file.) - Automatic LiveUpdate Scheduler (Automatic LiveUpdate Scheduler) .(.Pas de propriétaire - Pas de description.) - LEGACY_AUTOMATIC_LIVEUPDATE_SCHEDULER O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Antivirus (avast! Antivirus) .(.ALWIL Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Mail Scanner (avast! Mail Scanner) .(.ALWIL Software - avast! Service.) - LEGACY_AVAST!_MAIL_SCANNER O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Web Scanner (avast! Web Scanner) .(.ALWIL Software - avast! Service.) - LEGACY_AVAST!_WEB_SCANNER O64 - Services: CurCS - C:\WINDOWS\system32\badf.sys - badf (badf) .(.Pas de propriétaire - Pas de description.) - LEGACY_BADF O64 - Services: CurCS - (.not file.) - cdudf_xp (cdudf_xp) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDUDF_XP O64 - Services: CurCS - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - (.not file.) - DVDVRRdr_xp (DVDVRRdr_xp) .(.Pas de propriétaire - Pas de description.) - LEGACY_DVDVRRDR_XP O64 - Services: CurCS - (.not file.) - dvd_2K (dvd_2K) .(.Pas de propriétaire - Pas de description.) - LEGACY_DVD_2K O64 - Services: CurCS - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe - EvtEng (EvtEng) .(.Intel Corporation - EvtEng Module.) - LEGACY_EVTENG O64 - Services: CurCS - C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys - ghaio (ghaio) .(.Pas de propriétaire - Pas de description.) - LEGACY_GHAIO O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate) (gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT O64 - Services: CurCS - C:\Program Files\iPod\bin\iPodService.exe - iPodService (iPodService) .(.Apple Computer, Inc. - iPodService Module.) - LEGACY_IPODSERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mdmxsdk.sys - mdmxsdk (mdmxsdk) .(.Conexant - Diagnostic Interface DRIVER.) - LEGACY_MDMXSDK O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service (NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 78.10.) - LEGACY_NVSVC O64 - Services: CurCS - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe - OwnershipProtocol (OwnershipProtocol) .(.Intel Corporation - Ownership protocol service.) - LEGACY_OWNERSHIPPROTOCOL O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - (.not file.) - PCANDIS5 NDIS Protocol Driver (PCANDIS5) .(.Pas de propriétaire - Pas de description.) - LEGACY_PCANDIS5 O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe - RegSrvc (RegSrvc) .(.Intel Corporation - RegSrvc Module.) - LEGACY_REGSRVC O64 - Services: CurCS - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe - Spectrum24 Event Monitor (S24EventMonitor) .(.Intel Corporation - Event Monitor - Supports driver extensions.) - LEGACY_S24EVENTMONITOR O64 - Services: CurCS - C:\Windows\system32\DRIVERS\s24trans.sys - Transport RLAN (s24trans) .(.Intel Corporation - Intel WLAN Packet Driver.) - LEGACY_S24TRANS O64 - Services: CurCS - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe - spmgr (spmgr) .(.Pas de propriétaire - spmgr Module.) - LEGACY_SPMGR O64 - Services: CurCS - (.not file.) - SYMIDSCO (SYMIDSCO) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMIDSCO O64 - Services: CurCS - (.not file.) - SYMTDI (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe - TomTomHOMEService (TomTomHOMEService) .(.TomTom - Windows Service for TomTom HOME.) - LEGACY_TOMTOMHOMESERVICE O64 - Services: CurCS - (.not file.) - UDFReadr (UDFReadr) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFREADR ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <WOOBrowser.exe> <>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\WANADOO\WOOBrowser\WOOBrowser.exe (.not file.) ---\\ Recherche d'infection Master Boot Record (O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net Run bytoto126 at 11/05/2010 00:04:56 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS kernel: MBR read successfully user & kernel MBR OK End of the scan (915 lines in 00mn 23s)
×
×
  • Créer...