PlanT

Je viens de poste sur le forum des complaints et j'ai renommé le titre du topic. Bonne soirée.

Et bien je crois que je peux dire que la machine fonctionne bien maintenant grâce à tes efforts. Donc un grand merci à toi (et à l'équipe entière). Je te souhaite une bonne fin de journée.

Oui, je sais que Kaspersky ne joue pas dans la même cour qu'Antivir. Je disais vraiment ça pour apporter une info supplémentaire. Comme j'ai lu dans les forums de Zebulon qu'Antivir était conseillé (parmi les gratuits) je voulais juste faire cette parenthèse que je pensais pouvoir être utile pour votre appréciation de l'outil et la capitalisation des infos. Je prends bonne note de ta remarque sur Glary Utilities Voici le rapport d'OTM : All processes killed Error: Unable to interpret <Go> in the current context! ========== FILES ========== C:\Documents and Settings\Hibou\Mes documents\Install\PeerTV folder moved successfully. C:\Downloads\Appli\avi4cc folder moved successfully. C:\Downloads\Appli\avi4cc.zip moved successfully. C:\Downloads\gusetupnew.exe moved successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== COMMANDS ========== [EMPTYTEMP] User: Administrateur ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: All Users User: Chouette ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Hibou ->Temp folder emptied: 108168885 bytes ->Temporary Internet Files folder emptied: 1778754 bytes ->Java cache emptied: 128101 bytes ->Google Chrome cache emptied: 10050928 bytes ->Flash cache emptied: 456 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 6132 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 115,00 mb OTM by OldTimer - Version 3.1.16.0 log created on 09122010_112441 Files moved on Reboot... File C:\Documents and Settings\Hibou\Local Settings\Temp\hsperfdata_Hibou\2612 not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1A38.tmp not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1A43.tmp not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1A9D.tmp not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1AA8.tmp not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1BD0.tmp not found! File C:\Documents and Settings\Hibou\Local Settings\Temp\~DF1BDB.tmp not found! C:\Documents and Settings\Hibou\Local Settings\Temporary Internet Files\Content.IE5\YL5LVKBO\info[1].htm moved successfully. C:\Documents and Settings\Hibou\Local Settings\Temporary Internet Files\Content.IE5\SNS7S3BP\pngbehavior[1].htc moved successfully. C:\WINDOWS\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-1848.log moved successfully. Registry entries deleted on Reboot...

Désolé pour le retard mais Kaspersky a travaillé toute la nuit. Voici son rapport : -------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7.0: scan report Sunday, September 12, 2010 Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Saturday, September 11, 2010 15:18:39 Records in database: 4208367 -------------------------------------------------------------------------------- Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ F:\ G:\ H:\ I:\ J:\ K:\ Scan statistics: Objects scanned: 321812 Threats found: 3 Infected objects found: 5 Suspicious objects found: 0 Scan duration: 12:06:08 File name / Threat / Threats count C:\Documents and Settings\Hibou\Mes documents\Install\PeerTV\peertv_peertv_0.3_francais_24906.exe Infected: not-a-virus:RiskTool.Win32.HideWindows 1 C:\Downloads\Appli\avi4cc\MSCOMCTL.OCX Infected: Packed.Win32.Krap.n 1 C:\Downloads\Appli\avi4cc.zip Infected: Packed.Win32.Krap.n 1 C:\Downloads\gusetupnew.exe Infected: Virus.Win32.Induc.a 2 Selected area has been scanned. Pour info Antivir ne remonte pas d'alerte sur ces fichiers (dont un est le setup de Glary utilities) A+

Merci pour le conseil sur les faux positifs. Ci-dessous le rapport de TDSSKiller. Il a effectivement trouvé un rootkit. Après réparation du fichier (et reboot) j'ai fais un test : je n'ai plus besoin de renommer MBAM ou Spybot pour qu'ils fonctionnent. Le rapport de ZPHDiag ne m'indique plus une possible infection du MBR. Serions-nous parvenus à nos fins ?? 2010/09/11 12:20:55.0812 TDSS rootkit removing tool 2.4.2.1 Sep 7 2010 14:43:44 2010/09/11 12:20:55.0812 ================================================================================ 2010/09/11 12:20:55.0812 SystemInfo: 2010/09/11 12:20:55.0812 2010/09/11 12:20:55.0812 OS Version: 5.1.2600 ServicePack: 3.0 2010/09/11 12:20:55.0828 Product type: Workstation 2010/09/11 12:20:55.0828 ComputerName: NOM-C14AC618A67 2010/09/11 12:20:55.0828 UserName: Hibou 2010/09/11 12:20:55.0828 Windows directory: C:\WINDOWS 2010/09/11 12:20:55.0828 System windows directory: C:\WINDOWS 2010/09/11 12:20:55.0828 Processor architecture: Intel x86 2010/09/11 12:20:55.0828 Number of processors: 1 2010/09/11 12:20:55.0828 Page size: 0x1000 2010/09/11 12:20:55.0828 Boot type: Normal boot 2010/09/11 12:20:55.0828 ================================================================================ 2010/09/11 12:21:10.0250 Initialize success 2010/09/11 12:22:21.0125 ================================================================================ 2010/09/11 12:22:21.0125 Scan started 2010/09/11 12:22:21.0125 Mode: Manual; 2010/09/11 12:22:21.0125 ================================================================================ 2010/09/11 12:22:22.0843 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2010/09/11 12:22:23.0000 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys 2010/09/11 12:22:23.0140 adfs (73685e15ef8b0bd9c30f1af413f13d49) C:\WINDOWS\system32\drivers\adfs.sys 2010/09/11 12:22:23.0390 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2010/09/11 12:22:23.0531 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys 2010/09/11 12:22:23.0953 alcan5wn (0940030d5a5869067ccc03e3b0b8dec7) C:\WINDOWS\system32\DRIVERS\alcan5wn.sys 2010/09/11 12:22:24.0093 alcaudsl (4c9577888c53243e2991456f510488a1) C:\WINDOWS\system32\DRIVERS\alcaudsl.sys 2010/09/11 12:22:24.0484 ALCXWDM (9a6aa923f00d368c8ad3bd7485d5cdca) C:\WINDOWS\system32\drivers\ALCXWDM.SYS 2010/09/11 12:22:24.0906 AmdK8 (59301936898ae62245a6f09c0aba9475) C:\WINDOWS\system32\DRIVERS\AmdK8.sys 2010/09/11 12:22:25.0109 AnyDVD (27cd212830201e918c45ec458b96e652) C:\WINDOWS\system32\Drivers\AnyDVD.sys 2010/09/11 12:22:25.0250 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 2010/09/11 12:22:25.0656 Aspi32 (ed8cee58c1e4c5893f5b2fd686a272bf) C:\WINDOWS\system32\drivers\Aspi32.sys 2010/09/11 12:22:25.0812 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2010/09/11 12:22:25.0953 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2010/09/11 12:22:26.0687 ati2mtag (151ba5f3f17edb1c5c8409a3bcd8a6c4) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 2010/09/11 12:22:27.0234 ATIAVAIW (fdfb6101ed180f2887c6c63a850f1d62) C:\WINDOWS\system32\DRIVERS\atinavt2.sys 2010/09/11 12:22:27.0390 AtiHdmiService (fac04a8e09c8d70594382656d99772a3) C:\WINDOWS\system32\drivers\AtiHdmi.sys 2010/09/11 12:22:27.0531 atinrvxx (74e104ada8a304774713e9a9a9cb3556) C:\WINDOWS\system32\DRIVERS\atinrvxx.sys 2010/09/11 12:22:27.0687 atksgt (f0d933b42cd0594048e4d5200ae9e417) C:\WINDOWS\system32\DRIVERS\atksgt.sys 2010/09/11 12:22:27.0843 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2010/09/11 12:22:27.0953 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2010/09/11 12:22:28.0093 avgio (6a646c46b9415e13095aa9b352040a7a) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2010/09/11 12:22:28.0234 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\WINDOWS\system32\DRIVERS\avgntflt.sys 2010/09/11 12:22:28.0390 avipbb (452e382340bb0c5e694ed9d3625356d0) C:\WINDOWS\system32\DRIVERS\avipbb.sys 2010/09/11 12:22:28.0515 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2010/09/11 12:22:28.0671 camfilt2 (919db06dbf8a98d00cdcda5bc58f8136) C:\WINDOWS\system32\Drivers\camfilt2.sys 2010/09/11 12:22:28.0812 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2010/09/11 12:22:28.0968 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 2010/09/11 12:22:29.0203 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2010/09/11 12:22:29.0312 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2010/09/11 12:22:29.0421 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2010/09/11 12:22:29.0859 CrystalSysInfo (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder iPod Edition\SysInfo.sys 2010/09/11 12:22:30.0171 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2010/09/11 12:22:30.0375 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys 2010/09/11 12:22:30.0578 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys 2010/09/11 12:22:30.0718 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2010/09/11 12:22:30.0843 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2010/09/11 12:22:31.0078 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2010/09/11 12:22:31.0203 ElbyCDIO (28cb0b64134ad62c2acf77db8501a619) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys 2010/09/11 12:22:31.0343 ENTECH (fd9fc82f134b1c91004ffc76a5ae494b) C:\WINDOWS\system32\DRIVERS\ENTECH.sys 2010/09/11 12:22:31.0515 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2010/09/11 12:22:31.0640 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2010/09/11 12:22:31.0750 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys 2010/09/11 12:22:31.0859 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2010/09/11 12:22:32.0031 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 2010/09/11 12:22:32.0156 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2010/09/11 12:22:32.0265 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2010/09/11 12:22:32.0406 GEARAspiWDM (4ac51459805264affd5f6fdfb9d9235f) C:\WINDOWS\system32\drivers\gearaspiwdm.sys 2010/09/11 12:22:32.0531 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2010/09/11 12:22:32.0687 hcmon (1db5002c16f4df11fd062bd4a277aa24) C:\WINDOWS\system32\drivers\hcmon.sys 2010/09/11 12:22:32.0843 HdAudAddService (56bf27d7a539f9e6bbc1de201aba0edf) C:\WINDOWS\system32\drivers\AtiHdAud.sys 2010/09/11 12:22:33.0000 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2010/09/11 12:22:33.0125 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2010/09/11 12:22:33.0359 HSFHWBS2 (128ef741b2293c36810561092b566b1c) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys 2010/09/11 12:22:33.0578 HSF_DP (9a0d0c461ef2b3d80cb7875b4b995e47) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys 2010/09/11 12:22:33.0812 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2010/09/11 12:22:34.0093 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2010/09/11 12:22:34.0296 iaStor (bdce6b54e1d7d8399175a83a02274b7a) C:\WINDOWS\system32\drivers\iaStor.sys 2010/09/11 12:22:34.0421 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2010/09/11 12:22:34.0765 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 2010/09/11 12:22:34.0906 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2010/09/11 12:22:35.0000 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2010/09/11 12:22:35.0140 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2010/09/11 12:22:35.0250 IPSec (a5fc891a1f57790d4ec4bc1e1b0236b6) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2010/09/11 12:22:35.0250 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ipsec.sys. Real md5: a5fc891a1f57790d4ec4bc1e1b0236b6, Fake md5: 23c74d75e36e7158768dd63d92789a91 2010/09/11 12:22:35.0265 IPSec - detected Rootkit.Win32.TDSS.tdl3 (0) 2010/09/11 12:22:35.0390 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2010/09/11 12:22:35.0484 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2010/09/11 12:22:35.0640 ithsgt (b7a5fadf67136fda7e8f25303565b674) C:\WINDOWS\system32\DRIVERS\ithsgt.sys 2010/09/11 12:22:35.0750 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2010/09/11 12:22:35.0890 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 2010/09/11 12:22:36.0031 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2010/09/11 12:22:36.0156 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 2010/09/11 12:22:36.0406 lilsgt (16767ea492b5d140e1de3679a65eae74) C:\WINDOWS\system32\DRIVERS\lilsgt.sys 2010/09/11 12:22:36.0531 lirsgt (f8a7212d0864ef5e9185fb95e6623f4d) C:\WINDOWS\system32\DRIVERS\lirsgt.sys 2010/09/11 12:22:36.0671 MagicTune (f627e9da4d3d8dc05a15b68944302f14) C:\WINDOWS\system32\drivers\MTiCtwl.sys 2010/09/11 12:22:36.0796 mdmxsdk (5110edd87e2508f02b922e83a2487dfc) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 2010/09/11 12:22:37.0031 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2010/09/11 12:22:37.0171 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys 2010/09/11 12:22:37.0281 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2010/09/11 12:22:37.0406 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2010/09/11 12:22:37.0500 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2010/09/11 12:22:37.0640 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys 2010/09/11 12:22:37.0890 MRENDIS5 (594b9d8194e3f4ecbf0325bd10bbeb05) C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS 2010/09/11 12:22:38.0000 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2010/09/11 12:22:38.0187 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2010/09/11 12:22:38.0328 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2010/09/11 12:22:38.0453 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2010/09/11 12:22:38.0578 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2010/09/11 12:22:38.0687 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2010/09/11 12:22:38.0828 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2010/09/11 12:22:38.0953 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 2010/09/11 12:22:39.0046 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys 2010/09/11 12:22:39.0218 MVDCODEC (514829ed3e7f140aac16154106d04981) C:\WINDOWS\system32\DRIVERS\atinmdxx.sys 2010/09/11 12:22:39.0328 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 2010/09/11 12:22:39.0468 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2010/09/11 12:22:39.0625 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 2010/09/11 12:22:39.0750 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2010/09/11 12:22:39.0843 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2010/09/11 12:22:40.0000 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2010/09/11 12:22:40.0171 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys 2010/09/11 12:22:40.0296 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2010/09/11 12:22:40.0437 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2010/09/11 12:22:40.0562 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 2010/09/11 12:22:40.0687 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys 2010/09/11 12:22:40.0812 NPF (6623e51595c0076755c29c00846c4eb2) C:\WINDOWS\system32\drivers\npf.sys 2010/09/11 12:22:40.0921 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2010/09/11 12:22:41.0109 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2010/09/11 12:22:41.0312 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2010/09/11 12:22:41.0437 nvatabus (52cab126c3ed5b851fb80eba0bea5c4e) C:\WINDOWS\system32\DRIVERS\nvatabus.sys 2010/09/11 12:22:41.0546 NVENETFD (720cc533eecb65553bd86b139ca04433) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys 2010/09/11 12:22:41.0671 nvnetbus (5f9f545cc5904dd8765f84ee1d056406) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys 2010/09/11 12:22:41.0781 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2010/09/11 12:22:41.0890 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2010/09/11 12:22:41.0984 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 2010/09/11 12:22:42.0125 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\DRIVERS\parport.sys 2010/09/11 12:22:42.0250 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2010/09/11 12:22:42.0375 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys 2010/09/11 12:22:42.0515 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys 2010/09/11 12:22:42.0703 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys 2010/09/11 12:22:42.0843 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys 2010/09/11 12:22:43.0015 pcouffin (02aaafb7ba137ce5ddabcdf8090954d9) C:\WINDOWS\system32\Drivers\pcouffin.sys 2010/09/11 12:22:43.0703 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2010/09/11 12:22:43.0796 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\WINDOWS\system32\DRIVERS\processr.sys 2010/09/11 12:22:43.0906 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2010/09/11 12:22:44.0031 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2010/09/11 12:22:44.0140 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2010/09/11 12:22:44.0687 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2010/09/11 12:22:44.0812 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2010/09/11 12:22:44.0906 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2010/09/11 12:22:45.0093 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2010/09/11 12:22:45.0250 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2010/09/11 12:22:45.0375 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2010/09/11 12:22:45.0515 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys 2010/09/11 12:22:45.0671 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERS\redbook.sys 2010/09/11 12:22:45.0859 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2010/09/11 12:22:46.0000 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2010/09/11 12:22:46.0140 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\DRIVERS\serial.sys 2010/09/11 12:22:46.0296 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\WINDOWS\system32\drivers\sfdrv01.sys 2010/09/11 12:22:46.0375 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\WINDOWS\system32\drivers\sfhlp02.sys 2010/09/11 12:22:46.0468 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2010/09/11 12:22:46.0578 sfvfs02 (9ef50060cc7e6953bab83f2a42ccc421) C:\WINDOWS\system32\drivers\sfvfs02.sys 2010/09/11 12:22:46.0765 SiSRaid2 (b8a2f8dcdc75f19962d975727f393920) C:\WINDOWS\system32\drivers\SiSRaid2.sys 2010/09/11 12:22:46.0890 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 2010/09/11 12:22:48.0125 SNP2UVC (0a0e0a9f9c658fde4ccccc39928b0cf9) C:\WINDOWS\system32\DRIVERS\snp2uvc.sys 2010/09/11 12:22:49.0609 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2010/09/11 12:22:49.0828 sptd (71e276f6d189413266ea22171806597b) C:\WINDOWS\system32\Drivers\sptd.sys 2010/09/11 12:22:49.0828 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 71e276f6d189413266ea22171806597b 2010/09/11 12:22:49.0828 sptd - detected Locked file (1) 2010/09/11 12:22:49.0953 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys 2010/09/11 12:22:50.0140 Srv (da852e3e0bf1cea75d756f9866241e57) C:\WINDOWS\system32\DRIVERS\srv.sys 2010/09/11 12:22:50.0296 ssmdrv (654dfea96bc82b4acda4f37e5e4a3bbf) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 2010/09/11 12:22:50.0437 StMp3Rec (c99010707441d2428c90eb8d0069e153) C:\WINDOWS\system32\Drivers\StMp3Rec.sys 2010/09/11 12:22:50.0593 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 2010/09/11 12:22:50.0718 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2010/09/11 12:22:50.0859 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2010/09/11 12:22:51.0359 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2010/09/11 12:22:51.0500 tap0901 (34f1bcb847a924a161422f106a79b9ff) C:\WINDOWS\system32\DRIVERS\tap0901.sys 2010/09/11 12:22:51.0625 taphss (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\WINDOWS\system32\DRIVERS\taphss.sys 2010/09/11 12:22:51.0765 tapvpn (27a2c318cd28cfb3eb2200fd96af1e58) C:\WINDOWS\system32\DRIVERS\tapvpn.sys 2010/09/11 12:22:51.0921 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2010/09/11 12:22:52.0078 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2010/09/11 12:22:52.0203 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2010/09/11 12:22:52.0312 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2010/09/11 12:22:52.0531 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2010/09/11 12:22:52.0796 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2010/09/11 12:22:52.0984 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys 2010/09/11 12:22:53.0109 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys 2010/09/11 12:22:53.0218 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 2010/09/11 12:22:53.0312 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2010/09/11 12:22:53.0437 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2010/09/11 12:22:53.0531 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys 2010/09/11 12:22:53.0656 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 2010/09/11 12:22:53.0796 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2010/09/11 12:22:53.0921 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2010/09/11 12:22:54.0062 usb_rndisx (ae4df3b7d1db9373b08db4ed224e26b6) C:\WINDOWS\system32\DRIVERS\usb8023x.sys 2010/09/11 12:22:54.0203 VClone (9bf2ea54e5ed5acdf96f1dec84c117c4) C:\WINDOWS\system32\DRIVERS\VClone.sys 2010/09/11 12:22:54.0343 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2010/09/11 12:22:54.0562 viamraid (6aaa39dd79a8341ce0ef9249f21d6b89) C:\WINDOWS\system32\drivers\viamraid.sys 2010/09/11 12:22:54.0687 vmci (33c6f2e02662a7900cac6ab2607e9f88) C:\WINDOWS\system32\Drivers\vmci.sys 2010/09/11 12:22:54.0828 vmkbd (852d9499d01d75b024d497a306dbb76d) C:\WINDOWS\system32\drivers\VMkbd.sys 2010/09/11 12:22:54.0953 VMnetAdapter (e41704d8149992107b333cc7a52c07cc) C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys 2010/09/11 12:22:55.0031 VMnetBridge (e887150bfee294bffeb28fb49698ae55) C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys 2010/09/11 12:22:55.0171 VMnetuserif (c3837c0c499aa62f2a2ac8dbf5015817) C:\WINDOWS\system32\drivers\vmnetuserif.sys 2010/09/11 12:22:55.0281 VMparport (5e3af8a6b096fd934a96d32d97843a69) C:\WINDOWS\system32\Drivers\VMparport.sys 2010/09/11 12:22:55.0484 vmx86 (4e53d280de6d5d523e39fbbddff0e819) C:\WINDOWS\system32\Drivers\vmx86.sys 2010/09/11 12:22:55.0687 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys 2010/09/11 12:22:55.0828 vstor2-ws60 (476a052b3ce506ed63a94018f3e979d5) C:\Program Files\VMware\VMware Player\vstor2-ws60.sys 2010/09/11 12:22:55.0984 wacmoumonitor (9a03558c37e919b9d6a50864aea0a168) C:\WINDOWS\system32\DRIVERS\wacmoumonitor.sys 2010/09/11 12:22:56.0109 wacommousefilter (427a8bc96f16c40df81c2d2f4edd32dd) C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys 2010/09/11 12:22:56.0234 wacomvhid (6843fd7db708b14ea4d8092abb464244) C:\WINDOWS\system32\DRIVERS\wacomvhid.sys 2010/09/11 12:22:56.0328 WacomVKHid (889459833432b161cb99cfdf84a1a9bb) C:\WINDOWS\system32\DRIVERS\WacomVKHid.sys 2010/09/11 12:22:56.0437 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2010/09/11 12:22:56.0625 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2010/09/11 12:22:56.0843 winachsf (ce545a84bf3411e7516fa8da51ad9d93) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 2010/09/11 12:22:57.0109 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys 2010/09/11 12:22:57.0234 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2010/09/11 12:22:57.0359 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 2010/09/11 12:22:57.0515 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2010/09/11 12:22:57.0625 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2010/09/11 12:22:57.0734 ================================================================================ 2010/09/11 12:22:57.0734 Scan finished 2010/09/11 12:22:57.0734 ================================================================================ 2010/09/11 12:22:57.0750 Detected object count: 2 2010/09/11 12:43:26.0281 IPSec (a5fc891a1f57790d4ec4bc1e1b0236b6) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2010/09/11 12:43:26.0281 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\ipsec.sys. Real md5: a5fc891a1f57790d4ec4bc1e1b0236b6, Fake md5: 23c74d75e36e7158768dd63d92789a91 2010/09/11 12:43:29.0171 Backup copy found, using it.. 2010/09/11 12:43:29.0296 C:\WINDOWS\system32\DRIVERS\ipsec.sys - will be cured after reboot 2010/09/11 12:43:29.0296 Rootkit.Win32.TDSS.tdl3(IPSec) - User select action: Cure 2010/09/11 12:43:29.0296 Locked file(sptd) - User select action: Skip 2010/09/11 12:43:32.0921 Deinitialize success

Pour info, après la réinstallation de MBAM, je ne peux toujours pas le lancer sans le renommer. Voici le résultat de l'analyse complète : Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4591 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 11/09/2010 10:40:04 mbam-log-2010-09-11 (10-40-04).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 507143 Temps écoulé: 4 heure(s), 6 minute(s), 42 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Documents and Settings\Hibou\Application Data\Adobe\kernell32.dll (Trojan.Agent) -> Quarantined and deleted successfully. Celui-là je vais être vigilant car je crains que ce soit un faux positif (VirusTotal ne remarque rien avant que je le mette en quarantaine). Pour les résultats RSIT, tu pourras les trouver ici : Fichier info.txt : info.txt Fichier log.txt : log.txt Encore merci !

Bonjour, Voici le rapport de RKill. Je passe à la suite du mode op. This log file is located at C:\rkill.log. Please post this only if requested to by the person helping you. Otherwise you can close this log when you wish. Ran as Hibou on 10/09/2010 at 23:13:28. Services Stopped: Processes terminated by Rkill or while it was running: C:\Documents and Settings\Hibou\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Hibou\Mes documents\Downloads\rkill.exe Rkill completed on 10/09/2010 at 23:13:38.

Merci Appolo pour tes conseils. Voici le contenu du rapport : MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows XP Home Edition Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x000007ec Kernel Drivers (total 165): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806D1000 \WINDOWS\system32\hal.dll 0xBA5A8000 \WINDOWS\system32\KDCOM.DLL 0xBA4B8000 \WINDOWS\system32\BOOTVID.dll 0xB9EA7000 spxv.sys 0xBA5AA000 \WINDOWS\System32\Drivers\WMILIB.SYS 0xB9E8F000 \WINDOWS\System32\Drivers\SCSIPORT.SYS 0xB9E60000 ACPI.sys 0xB9E4F000 pci.sys 0xBA0A8000 ohci1394.sys 0xBA0B8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS 0xBA0C8000 isapnp.sys 0xBA670000 pciide.sys 0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xBA0D8000 MountMgr.sys 0xB9E30000 ftdisk.sys 0xBA330000 PartMgr.sys 0xBA0E8000 VolSnap.sys 0xB9E18000 atapi.sys 0xB9DA3000 iaStor.sys 0xB9D8C000 nvatabus.sys 0xBA338000 SiSRaid2.sys 0xBA0F8000 viamraid.sys 0xBA108000 disk.sys 0xBA118000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xB9D6C000 fltmgr.sys 0xBA128000 PxHelp20.sys 0xB9D55000 KSecDD.sys 0xB9CC8000 Ntfs.sys 0xB9C9B000 NDIS.sys 0xB9C87000 sfvfs02.sys 0xBA340000 sfhlp02.sys 0xB9C75000 sfdrv01.sys 0xB9C5B000 Mup.sys 0xBA158000 \SystemRoot\system32\DRIVERS\nic1394.sys 0xB91B5000 \SystemRoot\system32\DRIVERS\AmdK8.sys 0xBA3F0000 \SystemRoot\system32\DRIVERS\usbohci.sys 0xB8589000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xBA410000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xB8352000 \SystemRoot\system32\drivers\ALCXWDM.SYS 0xB832E000 \SystemRoot\system32\drivers\portcls.sys 0xB91A5000 \SystemRoot\system32\drivers\drmk.sys 0xB830B000 \SystemRoot\system32\drivers\ks.sys 0xBA298000 \SystemRoot\system32\DRIVERS\imapi.sys 0xBA3F8000 \SystemRoot\System32\Drivers\AnyDVD.sys 0xBA2A8000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xBA2B8000 \SystemRoot\system32\DRIVERS\redbook.sys 0xB82D7000 \SystemRoot\system32\DRIVERS\HSFHWBS2.sys 0xB81D8000 \SystemRoot\system32\DRIVERS\HSF_DP.sys 0xB8132000 \SystemRoot\system32\DRIVERS\HSF_CNXT.sys 0xBA400000 \SystemRoot\System32\Drivers\Modem.SYS 0xB9C1F000 \SystemRoot\system32\DRIVERS\nvnetbus.sys 0xB80F2000 \SystemRoot\system32\DRIVERS\NVNRM.SYS 0xB80BF000 \SystemRoot\system32\DRIVERS\NVSNPU.SYS 0xB7C3B000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xA9770000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xA9748000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xA9712000 \SystemRoot\System32\Drivers\aiwg9zbe.SYS 0xA9701000 \SystemRoot\system32\DRIVERS\serial.sys 0xA99A7000 \SystemRoot\system32\DRIVERS\serenum.sys 0xA96ED000 \SystemRoot\system32\DRIVERS\parport.sys 0xAF481000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xA98C9000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xA98C1000 \??\C:\WINDOWS\system32\drivers\VMkbd.sys 0xBA64E000 \SystemRoot\system32\DRIVERS\wacomvhid.sys 0xAF471000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0xA98B9000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xBA650000 \SystemRoot\system32\DRIVERS\WacomVKHid.sys 0xA9F1A000 \SystemRoot\system32\DRIVERS\audstub.sys 0xAF461000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xA99A3000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xA96D6000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xA9B50000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xA9B40000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xA98B1000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xA96C5000 \SystemRoot\system32\DRIVERS\psched.sys 0xA9B30000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xA98A9000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xA98A1000 \SystemRoot\system32\DRIVERS\raspti.sys 0xA9B20000 \SystemRoot\system32\DRIVERS\tapvpn.sys 0xA9B10000 \SystemRoot\System32\Drivers\pcouffin.sys 0xA9B00000 \SystemRoot\system32\DRIVERS\termdd.sys 0xA9899000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xBA658000 \SystemRoot\system32\DRIVERS\swenum.sys 0xA9667000 \SystemRoot\system32\DRIVERS\update.sys 0xB9C1B000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xAE7CC000 \SystemRoot\system32\DRIVERS\mouhid.sys 0xA9891000 \SystemRoot\system32\DRIVERS\wacommousefilter.sys 0xAE7C8000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0xA9AD0000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xA9AC0000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xAB07A000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xA9831000 \SystemRoot\system32\DRIVERS\NVENETFD.sys 0xAB070000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xAD809000 \SystemRoot\System32\Drivers\Null.SYS 0xAA9B0000 \SystemRoot\System32\Drivers\Beep.SYS 0xADACD000 \SystemRoot\System32\drivers\vga.sys 0xAA9AE000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xAA9AC000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xADAC5000 \SystemRoot\System32\Drivers\Msfs.SYS 0xADABD000 \SystemRoot\System32\Drivers\Npfs.SYS 0xADA85000 \SystemRoot\system32\DRIVERS\rasacd.sys 0x9D612000 \SystemRoot\system32\DRIVERS\ipsec.sys 0x9D5B9000 \SystemRoot\system32\DRIVERS\tcpip.sys 0x9D591000 \SystemRoot\system32\DRIVERS\netbt.sys 0xADA7D000 \SystemRoot\System32\drivers\ws2ifsl.sys 0x9D56F000 \SystemRoot\System32\drivers\afd.sys 0xA97F1000 \SystemRoot\system32\DRIVERS\netbios.sys 0xAD9A1000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0x9D544000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x9D4D4000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xA97D1000 \SystemRoot\System32\Drivers\Fips.SYS 0x9D4AE000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xADDFB000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xB950C000 \SystemRoot\system32\DRIVERS\hidusb.sys 0xAD989000 \SystemRoot\System32\Drivers\ElbyCDIO.sys 0x9D492000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xADDEB000 \SystemRoot\system32\DRIVERS\arp1394.sys 0xBA5EA000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys 0xADDAB000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xAD981000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0xAD979000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x9CB69000 \SystemRoot\system32\DRIVERS\snp2uvc.sys 0xADA43000 \SystemRoot\system32\DRIVERS\STREAM.SYS 0xAD971000 \SystemRoot\system32\DRIVERS\sncduvc.SYS 0x9CB52000 \SystemRoot\System32\Drivers\camfilt2.sys 0xADA33000 \SystemRoot\system32\drivers\usbaudio.sys 0xBF800000 \SystemRoot\System32\win32k.sys 0xBA588000 \SystemRoot\System32\drivers\Dxapi.sys 0xAD961000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xBA7A3000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF060000 \SystemRoot\System32\ati2cqag.dll 0xBF0FC000 \SystemRoot\System32\atikvmag.dll 0xBF196000 \SystemRoot\System32\atiok3x2.dll 0xBF1FC000 \SystemRoot\System32\ati3duag.dll 0xBF557000 \SystemRoot\System32\ativvaxx.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0x99744000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xAD959000 \SystemRoot\system32\DRIVERS\vmnetbridge.sys 0xBA578000 \SystemRoot\system32\DRIVERS\VMNET.SYS 0xB9C37000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x99617000 \SystemRoot\system32\drivers\wdmaud.sys 0xA97C1000 \SystemRoot\system32\drivers\sysaudio.sys 0x993BA000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0x9941F000 \??\C:\WINDOWS\system32\drivers\hcmon.sys 0x9940F000 \??\C:\WINDOWS\system32\Drivers\vmci.sys 0xBA5B4000 \??\C:\WINDOWS\system32\Drivers\VMparport.sys 0x992C3000 \??\C:\WINDOWS\system32\Drivers\vmx86.sys 0x992B2000 \SystemRoot\System32\Drivers\adfs.SYS 0x9940B000 \SystemRoot\System32\Drivers\Aspi32.SYS 0x990B7000 \SystemRoot\system32\DRIVERS\atksgt.sys 0x98E75000 \SystemRoot\system32\DRIVERS\ithsgt.sys 0x98FA3000 \SystemRoot\system32\DRIVERS\lilsgt.sys 0xB2B63000 \SystemRoot\system32\DRIVERS\lirsgt.sys 0x990AF000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys 0x98D2E000 \SystemRoot\system32\DRIVERS\srv.sys 0x9924A000 \SystemRoot\system32\DRIVERS\secdrv.sys 0xBA460000 \??\C:\WINDOWS\system32\drivers\vmnetuserif.sys 0x98AA9000 \??\C:\Program Files\VMware\VMware Player\vstor2-ws60.sys 0x985B5000 \SystemRoot\System32\Drivers\HTTP.sys 0x97B90000 \SystemRoot\system32\drivers\kmixer.sys 0x7C910000 \WINDOWS\system32\ntdll.dll 0x10000000 \Program Files\DAEMON Tools Lite\daemon.dll Processes (total 45): 0 System Idle Process 4 System 796 C:\WINDOWS\system32\smss.exe 892 csrss.exe 940 C:\WINDOWS\system32\winlogon.exe 1000 C:\WINDOWS\system32\services.exe 1012 C:\WINDOWS\system32\lsass.exe 1208 C:\WINDOWS\system32\ati2evxx.exe 1240 C:\WINDOWS\system32\svchost.exe 1344 svchost.exe 1520 C:\WINDOWS\system32\svchost.exe 1676 svchost.exe 1988 svchost.exe 232 C:\WINDOWS\system32\spoolsv.exe 364 C:\Program Files\Avira\AntiVir Desktop\sched.exe 1224 svchost.exe 1372 C:\Program Files\Avira\AntiVir Desktop\avguard.exe 244 C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe 120 C:\Program Files\Bonjour\mDNSResponder.exe 1540 C:\Program Files\Java\jre6\bin\jqs.exe 2112 C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe 2720 C:\WINDOWS\system32\Wacom_Tablet.exe 3272 C:\WINDOWS\system32\vmnat.exe 3444 C:\WINDOWS\system32\vmnetdhcp.exe 3512 C:\Program Files\VMware\VMware Player\vmware-authd.exe 2568 C:\Program Files\iPod\bin\iPodService.exe 3116 C:\WINDOWS\system32\wbem\wmiapsrv.exe 3884 alg.exe 872 C:\WINDOWS\system32\ati2evxx.exe 3180 C:\WINDOWS\explorer.exe 1004 C:\WINDOWS\system32\WTablet\Wacom_TabletUser.exe 952 C:\WINDOWS\system32\Wacom_Tablet.exe 3988 C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe 2740 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 2612 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 3484 C:\Program Files\iTunes\iTunesHelper.exe 2544 C:\Program Files\DivX\DivX Update\DivXUpdate.exe 3040 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 552 C:\WINDOWS\system32\ctfmon.exe 1712 C:\Program Files\Microsoft ActiveSync\wcescomm.exe 2656 C:\Program Files\PIXELA\ImageMixer 3 SE Ver.5\Transfer Utility\CameraMonitor.exe 2700 C:\Documents and Settings\Hibou\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe 3132 C:\PROGRA~1\MICROS~4\rapimgr.exe 3872 C:\WINDOWS\system32\wscntfy.exe 3716 C:\Documents and Settings\Hibou\Bureau\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) PhysicalDrive0 Model Number: WDCWD2500JD-55HBC0, Rev: 08.02D08 Size Device Name MBR Status -------------------------------------------- 232 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: 8637A6CD1F8DC55758E12C0B860CDE1133CA5719 Done!

Bonsoir, Merci de ta réponse. Je viens de parcourir ton lien : c'est le saut de la foi . Si ça échoue, je perds mes partitions. N'y a-t-il pas de sauvegarde de ces premiers blocs à faire avant ? Sinon pour ta remarque sur le fichier "C:\WINDOWS\system32\A.tmp" : il est introuvable (avec pourtant toutes les options de visibilités de fichier activées). D'ailleurs quand je relance ZPHDiag, le nom du fichier change! Dernièrement c'est C:\WINDOWS\system32\E4.tmp. Pourtant j'ai tout repassé sous Antivir mais rien n'est remonté en erreur. Comme ton lien dit qu'il ne vaut mieux pas lancer FixMbr si un virus en présent, j'hésite énormément. Qu'en dis-tu ?

Bonjour à toute l'équipe de Zebulon ! J'aurais besoin de vos avis pointus pour me dépatouiller de mon problème. Ma config : WIN XP (SP 3), Antivir, IE 8, Chrome Petit Historique : J'étais sujet à l'apparition d'onglets intempestifs dans Chrome. Je passe un coup de Spybot... sauf que non : il refuse de se lancer. Idem pour Malwarebyte's Antimalware (MBAM) ZPHDiag m'annonce que j'ai une redirection DNS (vers l'Ukraine...) En renommant MBAM, il devient fonctionnel --> il nettoie ! Plus de redirection. En renommant Spybot OK il nettoie également d'autres points. Mais pour les faire fonctionner il doivent toujours être renommés donc un problème reste présent. Un dernier coup de ZPHDiag (Cf. ci-dessous) et il m'apprend qu'il y a une possible infection du MBR. Mais là je préfère avoir vos conseils avant d'aller plus loin (surtout s'il faut se risquer sur ComboFix ) . Précision : en mode sans échec, je peux lancer Spybot et MBAM sans les renommer. J'espère ne pas avoir oublié grand-chose. Merci par avance du temps que vous voudrez bien consacrer à mon problème. Rapport de ZHPDiag v1.26.582 par Nicolas Coolman, Update du 03/09/2010 Run by Hibou at 07/09/2010 20:53:46 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 15 Model 47 Stepping 0, AuthenticAMD Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 2047 MB (70% free) System drive C: has 31 GB (13%) free of 233 GB ---\\ Logged in mode Computer Name: NOM-C14AC618A67 User Name: Hibou All Users Names: __vmware_user__, SUPPORT_388945a0, Hibou, HelpAssistant, Chouette, ASPNET, Administrateur, Unselected Option: O1,O45,O61,O65,O82 Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 31 Go of 233 Go) D:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ CD-ROM drive (Not Inserted) K:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK ---\\ Processus lancés [MD5.68A1245E121144EFAD5A75E2D361B96A] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [108289] [MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [185089] [MD5.2E3E53A6AEF23E24F402C7855B9B1542] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [144176] [MD5.5AB58C337AC65837FE404462AD6265AB] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [MD5.1834C96FB1F9280BCF6DDFA6DE8338BF] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.48ED93AAEE764FEE0B54E94A916E69CF] - (.VoyagerSoft, LLC - Solid Spool Service.) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe [184320] [MD5.339343AB2F7E4EAA8BE5C3D74763AE55] - (.Wacom Technology, Corp. - Tablet Service for professional driver.) -- C:\WINDOWS\system32\Wacom_Tablet.exe [2749224] [MD5.3FE2942910EACDC7271E40C8C037D63F] - (.VMware, Inc. - VMware NAT Service.) -- C:\WINDOWS\system32\vmnat.exe [395824] [MD5.8EF654045E518AC00E52E7A1E2D3AD70] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [96370] [MD5.9AF896B739E3F34B9CD56EAFA84ABE60] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe [113200] [MD5.1E9F6817BDD878E4C4E701C64F6352E7] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\WINDOWS\system32\vmnetdhcp.exe [334384] [MD5.8F610078437A459948480407F4DB91EA] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [540472] [MD5.C21F353AD9891530A6CF58B0DA3668FF] - (.Wacom Technology, Corp. - Tablet user module for professional driver.) -- C:\WINDOWS\system32\WTablet\Wacom_TabletUser.exe [159528] [MD5.6C79C1FB9B24C63B89328BEE6F4237BA] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640440] [MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [209153] [MD5.0E284B5BB0CDD631461CE7E91DCEE3E2] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [141624] [MD5.6AE5C5807E47FA41CAE4FBC25B1A012E] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1164584] [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [MD5.4C4CF9220E628D1378F9807EC5175488] - (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000] [MD5.7B4AFB6B2BBC3F23B97758475C41C25B] - (.PIXELA CORPORATION - Pas de description.) -- C:\Program Files\PIXELA\ImageMixer 3 SE Ver.5\Transfer Utility\CameraMonitor.exe [253952] [MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Documents and Settings\Hibou\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe [135680] [MD5.DCFC84480C76D862D9BFD386EA6E8DE7] - (.Microsoft Corporation - ActiveSync RAPI Manager.) -- C:\PROGRA~1\MICROS~4\rapimgr.exe [199464] [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536] [MD5.7F7BC88C8FB6B52989E0E93084B5E678] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [95744] [MD5.7EE856AB0E8D63B4D180CE580E14A376] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [548352] ---\\ Plugins de navigateurs Opera/Firefox(P1/P2) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.0.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll P2 - FPN: [HKLM] [@divx.com/DivX Content Upload Plugin,version=1.0.0] - (.DivX,Inc. - DivX® Content Upload Plugin.) -- C:\Program Files\DivX\DivX Content Uploader\npUpload.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.) P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50826.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50826.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@pack.google.com/Google Updater;version=13] - (.Google - Google Updater plugin<br><a href="http://pack.google.com/">http://pack.) -- C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll P2 - FPN: [HKLM] [@t-immersion.com/DFusionHomeWebPlugIn] - (.Total Immersion - D'Fusion @Home Web Plug-In (2.20.9925.0).) -- C:\Program Files\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.29\npGoogleOneClick8.dll P2 - FPN: [HKLM] [@virtools.com/3DviaPlayer] - (.Dassault Systèmes - 3D Life Player(5.0.0.10). For more information, visit the <a href="ht.) -- C:\Program Files\Virtools\3D Life Player\npvirtools.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Update\1.2.183.29\npGoogleOneClick8.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} . (.VoyagerSoft, LLC - ExploreExt.) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll O2 - BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} . (.Headlight Software, Inc. - GetRight's IE & NS Click Monitoring. www.g.) -- C:\Program Files\GetRight\xx2gr.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} . (.VoyagerSoft, LLC - ExploreExt.) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [AdobeCS4ServiceManager] . (.Adobe Systems Incorporated - Adobe CS4 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [CamserviceDP] . (.Guillemot Corporation S.A. - CamService Application.) -- C:\Program Files\Hercules\DualPix Exchange\Camservice.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe O4 - HKCU\..\Run: [fsc-reminder.exe] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\reminder\fsc-reminder.exe O4 - HKCU\..\Run: [updateMgr] . (.Adobe Systems Incorporated - Adobe Update Manager.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [H/PC Connection Agent] . (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [fsc-reminder.exe] . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\reminder\fsc-reminder.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [updateMgr] . (.Adobe Systems Incorporated - Adobe Update Manager.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-2001307256-2360663401-1842287437-1006\..\Run: [H/PC Connection Agent] . (.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe O4 - Global Startup: ImageMixer 3 SE Camera Monitor Ver.5.lnk . (.PIXELA CORPORATION - Pas de description.) -- C:\Program Files\PIXELA\ImageMixer 3 SE Ver.5\Transfer Utility\CameraMonitor.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Notification de cadeaux MSN.lnk . (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Documents and Settings\Hibou\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O8 - Extra context menu item: Ajouter à un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O8 - Extra context menu item: Convertir au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O8 - Extra context menu item: Download with GetRight . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll O8 - Extra context menu item: Open with GetRight Browser . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\GetRight\GRbrowse.htm ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} . (.Microsoft Corporation - ActiveSync Favorite Synchronization.) -- C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-1a8a84c54915d208.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/3DVIA_player_installer.exe O16 - DPF: {FAB2BB9D-91E9-457E-9D42-75A7FCCBBC00} (CDFusionActiveXCtl Object) - http://arcww.vo.llnwd.net/o37/seekr/MCD/Plugin/DFusionHomeWebPlugIn.Installer.exe ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{C9A917FE-6307-4A83-B3AE-9FBF861FD026}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{C9A917FE-6307-4A83-B3AE-9FBF861FD026}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{C9A917FE-6307-4A83-B3AE-9FBF861FD026}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\System32\Ati2evxx.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\System32\WgaLogon.dll ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Update Service (gupdate1c98637c1e502a) (gupdate1c98637c1e502a) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: SolidPDFConverterReadSpool (ScReadSpool) . (.VoyagerSoft, LLC - Solid Spool Service.) - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe O23 - Service: TabletServiceWacom (TabletServiceWacom) . (.Wacom Technology, Corp. - Tablet Service for professional driver.) - C:\WINDOWS\system32\Wacom_Tablet.exe O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files\VMware\VMware Player\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\WINDOWS\system32\vmnetdhcp.exe O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\WINDOWS\system32\vmnat.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp O24 - Desktop General: WallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Google Software Updater.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2001307256-2360663401-1842287437-1006Core.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2001307256-2360663401-1842287437-1006UA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2001307256-2360663401-1842287437-1007Core.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2001307256-2360663401-1842287437-1007UA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{A190930D-EC50-4AED-82FE-5C8AB39A617D}.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Adobe Shockwave Director 11.0.3 - {233C1507-6A77-46A4-9443-F871F945D258} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Adobe\Director\swdir.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp11.inf O40 - ASIC: Fax - {8b15971b-5355-4c82-8c07-7e181ea07608} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\fxsocm.inf O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: AMD Processor Driver (AmdK8) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdK8.sys O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: ElbyCDIO Driver (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\Windows\system32\Drivers\ElbyCDIO.sys O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 3DVIA player 5.0 - (.3DVIA.) [HKLM] -- {4E868D3D-6EEB-4273-926C-2287236B5B79} O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Adobe Acrobat 4.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 4.0 O42 - Logiciel: Adobe Reader 7.0.9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70900000002} O42 - Logiciel: AnyDVD - (.SlySoft.) [HKLM] -- AnyDVD O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2} O42 - Logiciel: Autopano Pro - (.Kolor.) [HKLM] -- Autopano Pro O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: Batman: Arkham Asylum GOTY Edition - (.Rocksteady Studios Ltd..) [HKLM] -- Steam App 35140 O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8} O42 - Logiciel: BroadJump Client Foundation - (.Pas de propriétaire.) [HKLM] -- BroadJump Client Foundation O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CANON iMAGE GATEWAY Task O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Call of Duty - (.Activision.) [HKLM] -- Steam App 2620 O42 - Logiciel: Call of Duty 2 - (.Activision.) [HKLM] -- Steam App 2630 O42 - Logiciel: CanoScan Toolbox 4.6 - (.Pas de propriétaire.) [HKLM] -- {088A077A-8028-408C-AE7B-4512AE2A65A0} O42 - Logiciel: Canon Camera Access Library - (.Canon Inc..) [HKLM] -- CAL O42 - Logiciel: Canon Camera Support Core Library - (.Canon Inc..) [HKLM] -- CSCLIB O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- Canon Internet Library for ZoomBrowser EX O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {BEF56F2D-56ED-4176-BF72-7B68D4A3B98D} O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{D076E06B-F74B-454F-A56E-7510D7B6C9F0} O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher O42 - Logiciel: Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC5 O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC6 O42 - Logiciel: Canon Utilities EOS Utility - (.Canon Inc..) [HKLM] -- EOS Utility O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera O42 - Logiciel: Canon Utilities PhotoStitch 3.1 - (.Canon.) [HKLM] -- InstallShield_{C05E2D43-A05F-4835-A15C-CD0AD1576506} O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RemoteCaptureTask O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility O42 - Logiciel: Cartoonist 1.3 - (.Pas de propriétaire.) [HKLM] -- Cartoonist_is1 O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {A961C6FD-C583-45F6-A0A4-5E4376C29E41} O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: Connect - (.Adobe Systems Incorporated.) [HKLM] -- {B29AD377-CC12-490A-A480-1452337C618D} O42 - Logiciel: Convert Doc - (.Softinterface, Inc..) [HKLM] -- Convert Doc_is1 O42 - Logiciel: ConvertXtoDVD 2.0.15 - (.VSO-Software SARL.) [HKLM] -- {BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1 O42 - Logiciel: Creative MuVo N200 Media Explorer - (.Pas de propriétaire.) [HKLM] -- Creative MuVo N200 Media Explorer O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1 O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9} O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters O42 - Logiciel: Dofus 1.28.0 - (.Ankama Games.) [HKLM] -- Dofus 1.28.0 O42 - Logiciel: Désinstallation du Fnac Video Manager - (.Pas de propriétaire.) [HKLM] -- Fnac O42 - Logiciel: EVEREST Ultimate Edition v5.00 - (.Lavalys, Inc..) [HKLM] -- EVEREST Ultimate Edition_is1 O42 - Logiciel: FlashDevelop 3.0.6 - (.FlashDevelop.org.) [HKLM] -- FlashDevelop O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1} O42 - Logiciel: GetRight - (.Headlight Software, Inc..) [HKLM] -- GetRight_is1 O42 - Logiciel: Glary Utilities 2.27.0.982 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop O42 - Logiciel: Google SketchUp 6 - (.Google.) [HKLM] -- {98736A65-3C79-49EC-B7E9-A3C77774B0E6} O42 - Logiciel: Google SketchUp 6 - (.Google.) [HKLM] -- {B3D8B2F8-3C2C-45BC-933E-8B60E78F6684} O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {26B878A8-5704-3B64-BDBC-4F0EACA38121} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {C2D129C0-7508-11DF-9F1B-005056806466} O42 - Logiciel: GrabIt 1.5.3 Beta (build 909) - (.Ilan Shemes.) [HKLM] -- GrabIt_is1 O42 - Logiciel: HDGraph - (.JYL2002.) [HKLM] -- {654217BC-96B0-45CE-9151-1509A5CDCA35} O42 - Logiciel: Hercules DualPix Exchange Webcam - (.Hercules.) [HKLM] -- {04BEFF7A-DF5D-4E49-AB46-BA3D3BE49FCB} O42 - Logiciel: High Definition Audio - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Histoire de Jouets 3 - (.Disney Interactive Studios.) [HKLM] -- {AAFD160A-2333-40D8-AA25-42D1989CA0F2} O42 - Logiciel: Hitman 2: Silent Assassin - (.Eidos Interactive.) [HKLM] -- Hitman 2: Silent Assassin O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: Hugin 0.7.0 (SVN 3465) - (.Guido.) [HKLM] -- Hugin_is1 O42 - Logiciel: ImageMixer 3 SE Ver.5 Transfer Utility - (.PIXELA.) [HKLM] -- {DFE492C4-A9F5-413E-A2CC-6F5F3ACC229F} O42 - Logiciel: ImageMixer 3 SE Ver.5 Video Tools - (.PIXELA.) [HKLM] -- {B674F947-56D6-4793-B465-7D7C87E04D0C} O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: InterVideo WinDVD - (.InterVideo Inc..) [HKLM] -- {91810AFC-A4F8-4EBA-A5AA-B198BBC81144} O42 - Logiciel: J2SE Runtime Environment 5.0 Update 10 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150100} O42 - Logiciel: J2SE Runtime Environment 5.0 Update 11 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150110} O42 - Logiciel: Java 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014F0} O42 - Logiciel: Java 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020} O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216011FF} O42 - Logiciel: Java 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030} O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O42 - Logiciel: Java SE Runtime Environment 6 Update 1 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160010} O42 - Logiciel: LE COMPAGNON CLUB - (.Motive Communications, Inc..) [HKLM] -- LE COMPAGNON CLUB O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F} O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 6.0 Parser (KB925673) - (.Microsoft Corporation.) [HKLM] -- {FE9126DB-5F84-495A-BB46-3C724F1C2D08} O42 - Logiciel: Mafia II - Demo - (.2K Czech.) [HKLM] -- Steam App 50280 O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Manual CanoScan 4200F - (.Pas de propriétaire.) [HKLM] -- {B9C54C44-BB5A-4B03-8907-C01A9790195A} O42 - Logiciel: MediaCoder iPod Edition - (.Broad Intelligence.) [HKLM] -- MediaCoder iPod Edition O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033) O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 French Language Pack - (.Microsoft Corporation.) [HKLM] -- {E3C080B0-23F5-49AF-89F8-8E8DBC89E659} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft ActiveSync - (.Microsoft Corporation.) [HKLM] -- {99052DB7-9592-4522-A558-5417BBAD48EE} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM] -- {B45FABE7-D101-4D99-A671-E16DA40AF7F0} O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {B578C85A-A84C-4230-A177-C5B2AF565B8C} O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9084040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000 O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {A059DE09-1B49-4450-B340-7AE097EC3F04} O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0 Language Pack - FRA O42 - Logiciel: Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.0 French Language Pack O42 - Logiciel: Move Networks Media Player for Internet Explorer - (.Pas de propriétaire.) [HKCU] -- Move Networks Player - IE O42 - Logiciel: Music Transfer Utility Ver.2 - (.PIXELA.) [HKLM] -- {61128AC7-BD78-4D62-A114-2EF23856F558} O42 - Logiciel: NET Installation Assistance for VB6 App (Runtime Only) - (.Softinterface, Inc.) [HKLM] -- {66333C41-085E-4DA1-8273-E2BCA382D766} O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA} O42 - Logiciel: Nero BurnRights - (.Pas de propriétaire.) [HKLM] -- Nero BurnRights!UninstallKey O42 - Logiciel: Nero OEM - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey O42 - Logiciel: NeroVision Express 3 SE - (.Pas de propriétaire.) [HKLM] -- NeroVision!UninstallKey O42 - Logiciel: NeroVision Express Content - (.Pas de propriétaire.) [HKLM] -- NVEContent!UninstallKey O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU] -- Notification de cadeaux MSN O42 - Logiciel: Oblivion - (.Bethesda Softworks.) [HKLM] -- {35CB6715-41F8-4F99-8881-6FC75BF054B0} O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: Outils Club Internet - (.Pas de propriétaire.) [HKLM] -- OutilsCI O42 - Logiciel: PDF Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {35D94F92-1D3A-43C5-8605-EA268B1A7BD9} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8} O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 O42 - Logiciel: Pilotes de stockage de masse de Creative - (.Pas de propriétaire.) [HKLM] -- MuVo Driver O42 - Logiciel: Pixel Bender Toolkit - (.Adobe Systems Incorporated.) [HKLM] -- {43509E18-076E-40FE-AF38-CA5ED400A5A9} O42 - Logiciel: Portal - (.Valve.) [HKLM] -- Steam App 400 O42 - Logiciel: QuickPar 0.9 - (.Peter B. Clements.) [HKLM] -- QuickPar O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD} O42 - Logiciel: RESIDENT EVIL 5 - (.CAPCOM CO., LTD..) [HKLM] -- {AC08BBA0-96B9-431A-A7D0-D8598E493775} O42 - Logiciel: Real Alternative 1.46 - (.Pas de propriétaire.) [HKLM] -- RealAlt_is1 O42 - Logiciel: Ressources Windows Mobile - (.Microsoft Corporation.) [HKLM] -- Windows Mobile Device Handbook O42 - Logiciel: Rumble Box Tournament Edition - (.Insert Coin.) [HKLM] -- Rumble Box O42 - Logiciel: SUPER © Version 2010.bld.38 (May 2, 2010) - (.eRightSoft.) [HKLM] -- SUPER © O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: Simple Sudoku 4.1 - (.Pas de propriétaire.) [HKLM] -- Simple Sudoku_is1 O42 - Logiciel: SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200014F1 O42 - Logiciel: SolidConverterPDF - (.SolidDocuments.) [HKLM] -- {9BC76CCE-A9EC-4A3A-9B51-D823805E1D1F} O42 - Logiciel: Sophos Anti-Rootkit 1.5.0 - (.Sophos Plc.) [HKLM] -- Sophos-AntiRootkit O42 - Logiciel: Sorenson Squeeze 6.0 - (.Pas de propriétaire.) [HKLM] -- {7F0E4311-D46D-456E-97CC-44F7E331DE66} O42 - Logiciel: SoundSoap SM - (.BIAS Inc.) [HKLM] -- {25EEBED4-8CA8-412D-9B5E-690359EEE630} O42 - Logiciel: SpeedTouch USB Software - (.Pas de propriétaire.) [HKLM] -- {D41FAAA9-8048-4906-86B2-9AADEA1FA0B7} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: Stellarium 0.10.4 - (.Pas de propriétaire.) [HKLM] -- Stellarium_is1 O42 - Logiciel: Subtitle Workshop 2.51 - (.Pas de propriétaire.) [HKLM] -- SubtitleWorkshop O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434} O42 - Logiciel: TF1Vision version 1.3.1.4 - (.e-TF1 / 1-Click Media.) [HKLM] -- {B1F535AE-F732-44bd-9B6D-0712403945DF}_is1 O42 - Logiciel: TV sur PC - (.Neuf.) [HKLM] -- Neuf_TV_PC O42 - Logiciel: Tablette Wacom - (.Wacom Technology Corp..) [HKLM] -- Wacom Tablet Driver O42 - Logiciel: TmNationsForever Update 2010-03-15 - (.Nadeo.) [HKLM] -- TmNationsForever_is1 O42 - Logiciel: Total Immersion D'Fusion @Home Web Plug-In - (.Total Immersion.) [HKLM] -- D'Fusion @Home Web Plug-In O42 - Logiciel: TubeMaster++ version 1.9 - (.GgSofts.) [HKLM] -- {AA4D4EE3-0195-49F6-B0BF-C2789FD9C582}_is1 O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: VMware Player - (.VMware, Inc.) [HKLM] -- VMware_Player O42 - Logiciel: VMware Player - (.VMware, Inc..) [HKLM] -- {A53A11EA-0095-493F-86FA-A15E8A86A405} O42 - Logiciel: Western Railway 3D Screensaver 1.0 - (.3Planesoft.) [HKLM] -- Western Railway 3D Screensaver_is1 O42 - Logiciel: WinAce Archiver 2.0 - (.Pas de propriétaire.) [HKLM] -- WinAce Archiver 2.0 O42 - Logiciel: WinPcap 4.0.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst O42 - Logiciel: WinRAR Archiveur - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011 O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7 O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956} O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1} O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Format SDK Hotfix - KB891122 - (.Microsoft Corporation.) [HKLM] -- KB891122 O42 - Logiciel: Windows Media Player 10 Hotfix - KB888656 - (.Microsoft Corporation.) [HKLM] -- KB888656 O42 - Logiciel: Windows Media Player 10 Hotfix - KB894476 - (.Microsoft Corporation.) [HKLM] -- KB894476 O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840} O42 - Logiciel: Windows Presentation Foundation Language Pack (FRA) - (.Microsoft Corporation.) [HKLM] -- {6901DD22-527A-41EF-9059-E81FEDE9E494} O42 - Logiciel: Windows Workflow Foundation FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {B84C141C-9A13-44BE-9A69-301D7B11D836} O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1 O42 - Logiciel: anooki-v5-0-1 Screen Saver - (.Pas de propriétaire.) [HKLM] -- anooki-v5-0-1 O42 - Logiciel: eMule Plus 1.1f - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1 O42 - Logiciel: ffdshow [rev 2033] [2008-07-05] - (.Pas de propriétaire.) [HKLM] -- ffdshow_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503} O42 - Logiciel: inook2008 Screen Saver - (.Pas de propriétaire.) [HKLM] -- inook2008 O42 - Logiciel: kuler - (.Adobe Systems Incorporated.) [HKLM] -- {098727E1-775A-4450-B573-3F441F1CA243} O42 - Logiciel: mIRC - (.Pas de propriétaire.) [HKLM] -- mIRC ---\\ HKCU & HKLM Software Keys [HKCU\Software\3rd Eye Solutions] [HKCU\Software\AC3Filter] [HKCU\Software\ACD Systems] [HKCU\Software\APEXOFT] [HKCU\Software\ASProtect] [HKCU\Software\ATI Technologies Inc.] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\Algolab] [HKCU\Software\Angus Johnson] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Archos] [HKCU\Software\Arnold] [HKCU\Software\Avira] [HKCU\Software\Battle.net] [HKCU\Software\Binary Noise] [HKCU\Software\BlueSquad] [HKCU\Software\Borland] [HKCU\Software\Bugsplat] [HKCU\Software\Business Objects] [HKCU\Software\CAPCOM] [HKCU\Software\CD Projekt RED] [HKCU\Software\CDDB] [HKCU\Software\CISRA] [HKCU\Software\Canon] [HKCU\Software\Canon_Inc_IC] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Club-Internet v5] [HKCU\Software\CoreAAC] [HKCU\Software\CoreCodec] [HKCU\Software\Creative Tech] [HKCU\Software\Crystal Dynamics] [HKCU\Software\Cygnus Solutions] [HKCU\Software\DT Soft] [HKCU\Software\DVD Shrink] [HKCU\Software\DVDFab] [HKCU\Software\Deep Silver] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EA-LordOfTheRings] [HKCU\Software\EGOSOFT] [HKCU\Software\Electronic Arts] [HKCU\Software\Fnac VOD] [HKCU\Software\Fnac] [HKCU\Software\Fox Interactive] [HKCU\Software\France Telecom] [HKCU\Software\Freeware] [HKCU\Software\GNU] [HKCU\Software\GSC Game World] [HKCU\Software\GSpot Appliance Corp] [HKCU\Software\Gabest] [HKCU\Software\Gaijin] [HKCU\Software\GameSpy] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\Headlight] [HKCU\Software\Hercules] [HKCU\Software\HookNetwork] [HKCU\Software\House of Tales] [HKCU\Software\IGA] [HKCU\Software\IM Providers] [HKCU\Software\IO Interactive] [HKCU\Software\InstallShield] [HKCU\Software\Intel] [HKCU\Software\InterVideo] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Kolor] [HKCU\Software\Lavalys] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\LucasArts] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept (Adobe2)] [HKCU\Software\MainConcept (Broadcast)] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Minnetonka Audio Software] [HKCU\Software\Moonlight Cordless] [HKCU\Software\Motive] [HKCU\Software\MoveNetworks] [HKCU\Software\MozillaPlugins] [HKCU\Software\Netscape] [HKCU\Software\Opalium] [HKCU\Software\PDFCreator] [HKCU\Software\PIXELA] [HKCU\Software\PS2Eplugin] [HKCU\Software\Patchou] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Quark] [HKCU\Software\QuickPar] [HKCU\Software\RadLight] [HKCU\Software\RealNetworks] [HKCU\Software\Safer Networking Limited] [HKCU\Software\SecuROM] [HKCU\Software\Serials2K] [HKCU\Software\Shemes] [HKCU\Software\SlySoft] [HKCU\Software\SolidDocuments] [HKCU\Software\Sony Corporation] [HKCU\Software\SorensonMedia] [HKCU\Software\Space Screensavers] [HKCU\Software\Stardock] [HKCU\Software\Symantec] [HKCU\Software\Sysinternals] [HKCU\Software\TVideoGrabber] [HKCU\Software\Telltale Games] [HKCU\Software\Trolltech] [HKCU\Software\Ubisoft] [HKCU\Software\Un peu de géographie] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VCW] [HKCU\Software\VMware, Inc.] [HKCU\Software\VSO] [HKCU\Software\Valve] [HKCU\Software\Virtools] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\chermenin] [HKCU\Software\e-merge] [HKCU\Software\fnacVOD] [HKCU\Software\hugin] [HKCU\Software\keyhole.com] [HKCU\Software\licensenrd] [HKCU\Software\mIRC] [HKCU\Software\wizzgo] [HKCU\Software\www_umbehant_com] [HKLM\Software\3Planesoft] [HKLM\Software\7-Zip] [HKLM\Software\ACD Systems] [HKLM\Software\ACE Compression Software] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Activision] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alcatel] [HKLM\Software\Ankama] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Auran] [HKLM\Software\AviSynth] [HKLM\Software\Avira] [HKLM\Software\BCL Technologies] [HKLM\Software\Battle.net] [HKLM\Software\Bethesda Softworks] [HKLM\Software\BioWare] [HKLM\Software\BroadJump] [HKLM\Software\BrowserChoice] [HKLM\Software\C07ft5Y] [HKLM\Software\CAPCOM] [HKLM\Software\CDDB] [HKLM\Software\CISRA] [HKLM\Software\CLSYSTEM] [HKLM\Software\CXT] [HKLM\Software\Canon] [HKLM\Software\Canon_Inc_IC] [HKLM\Software\City Interactive] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\Crytek] [HKLM\Software\Cygnus Solutions] [HKLM\Software\DIOC] [HKLM\Software\DT Soft] [HKLM\Software\Debug] [HKLM\Software\Disney Interactive Studios] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EA GAMES] [HKLM\Software\Eidos Interactive] [HKLM\Software\Electronic Arts] [HKLM\Software\Futuremark] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\GSC Game World] [HKLM\Software\Gabest] [HKLM\Software\Gemplus] [HKLM\Software\GlarySoft] [HKLM\Software\Global IP Solutions] [HKLM\Software\Google] [HKLM\Software\Headlight] [HKLM\Software\Hercules Technologies] [HKLM\Software\Hercules] [HKLM\Software\Imagineer Systems Ltd] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\InterActual Technologies] [HKLM\Software\InterVideo] [HKLM\Software\Invictus-Games] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Kolor] [HKLM\Software\Licenses] [HKLM\Software\MAXSOFT-OCRON] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MediaCoder] [HKLM\Software\MicroQuill] [HKLM\Software\MimarSinan] [HKLM\Software\Mindscape] [HKLM\Software\Minnetonka Audio Software] [HKLM\Software\Motive] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NSIS] [HKLM\Software\Neuf] [HKLM\Software\Notepad++] [HKLM\Software\Ntpad] [HKLM\Software\ODBC] [HKLM\Software\PDFCreator] [HKLM\Software\PIXELA] [HKLM\Software\Patchou] [HKLM\Software\PocketSoft] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\QuEnc] [HKLM\Software\Rainbow Technologies] [HKLM\Software\RealAlternative] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\RocksteadyLtd] [HKLM\Software\S3R521] [HKLM\Software\SONIX] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\SlySoft] [HKLM\Software\SolidDocuments] [HKLM\Software\Sorenson Media] [HKLM\Software\SorensonMedia] [HKLM\Software\Square Enix Limited] [HKLM\Software\Stardock] [HKLM\Software\Symantec] [HKLM\Software\Synthetic Aperture] [HKLM\Software\Tactile] [HKLM\Software\ThinPrint] [HKLM\Software\Toogame] [HKLM\Software\Torquemada Games] [HKLM\Software\Total Immersion] [HKLM\Software\Trolltech] [HKLM\Software\URUSoft] [HKLM\Software\Ubisoft] [HKLM\Software\VMware, Inc.] [HKLM\Software\VSO] [HKLM\Software\VST] [HKLM\Software\Valve] [HKLM\Software\VideoLAN] [HKLM\Software\Virtools] [HKLM\Software\WON] [HKLM\Software\Wacom] [HKLM\Software\Wargaming.net] [HKLM\Software\WinPcap] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\X-AVCSD] [HKLM\Software\Yahoo] [HKLM\Software\dd] [HKLM\Software\fsc-wizard] [HKLM\Software\lameme] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update O43 - CFD:Common File Directory ----D- C:\Program Files\Archos O43 - CFD:Common File Directory ----D- C:\Program Files\ATI O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies O43 - CFD:Common File Directory ----D- C:\Program Files\avatarAir O43 - CFD:Common File Directory ----D- C:\Program Files\AVG O43 - CFD:Common File Directory ----D- C:\Program Files\Avi2Dvd O43 - CFD:Common File Directory ----D- C:\Program Files\Avira O43 - CFD:Common File Directory ----D- C:\Program Files\AviSynth 2.5 O43 - CFD:Common File Directory ----D- C:\Program Files\Bethesda Softworks O43 - CFD:Common File Directory ----D- C:\Program Files\BIAS O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour O43 - CFD:Common File Directory ----D- C:\Program Files\BroadJump O43 - CFD:Common File Directory ----D- C:\Program Files\Canon O43 - CFD:Common File Directory ----D- C:\Program Files\CAPCOM O43 - CFD:Common File Directory ----D- C:\Program Files\Cartoonist O43 - CFD:Common File Directory ----D- C:\Program Files\Catalencoder O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\Club-Internet O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT O43 - CFD:Common File Directory ----D- C:\Program Files\Creative O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Lite O43 - CFD:Common File Directory ----D- C:\Program Files\Disney Interactive Studios O43 - CFD:Common File Directory ----D- C:\Program Files\DivX O43 - CFD:Common File Directory ----D- C:\Program Files\Dofus O43 - CFD:Common File Directory ----D- C:\Program Files\DOSBox-0.72 O43 - CFD:Common File Directory ----D- C:\Program Files\DownloadToolz O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Shrink O43 - CFD:Common File Directory ----D- C:\Program Files\EA GAMES O43 - CFD:Common File Directory ----D- C:\Program Files\Eidos Interactive O43 - CFD:Common File Directory ----D- C:\Program Files\Elaborate Bytes O43 - CFD:Common File Directory ----D- C:\Program Files\eMule O43 - CFD:Common File Directory ----D- C:\Program Files\eRightSoft O43 - CFD:Common File Directory ----D- C:\Program Files\ffdshow O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\FlashDevelop O43 - CFD:Common File Directory ----D- C:\Program Files\Fnac O43 - CFD:Common File Directory ----D- C:\Program Files\fnacVOD O43 - CFD:Common File Directory ----D- C:\Program Files\GetRight O43 - CFD:Common File Directory ----D- C:\Program Files\Glary Utilities O43 - CFD:Common File Directory ----D- C:\Program Files\Google O43 - CFD:Common File Directory ----D- C:\Program Files\GrabIt O43 - CFD:Common File Directory ----D- C:\Program Files\HDGraph O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules O43 - CFD:Common File Directory ----D- C:\Program Files\Hugin O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\InterVideo O43 - CFD:Common File Directory ----D- C:\Program Files\iPod O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes O43 - CFD:Common File Directory ----D- C:\Program Files\iWizz O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Kolor O43 - CFD:Common File Directory ----D- C:\Program Files\Lavalys O43 - CFD:Common File Directory ----D- C:\Program Files\Macromedia O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\Massive Assault Network 2 O43 - CFD:Common File Directory ----D- C:\Program Files\Media Player Classic O43 - CFD:Common File Directory ----D- C:\Program Files\MediaCoder iPod Edition O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live O43 - CFD:Common File Directory ----D- C:\Program Files\Micro Application O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft ActiveSync O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games for Windows - LIVE O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files\mIRC O43 - CFD:Common File Directory ----D- C:\Program Files\Motive O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files\My Company Name O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\Neuf O43 - CFD:Common File Directory ----D- C:\Program Files\Norton SystemWorks O43 - CFD:Common File Directory ----D- C:\Program Files\Notepad++ O43 - CFD:Common File Directory ----D- C:\Program Files\NVIDIA Corporation O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services O43 - CFD:Common File Directory ----D- C:\Program Files\OpenAL O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\Pcsx2 O43 - CFD:Common File Directory ----D- C:\Program Files\PDF2W O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator O43 - CFD:Common File Directory ----D- C:\Program Files\PIXELA O43 - CFD:Common File Directory ----D- C:\Program Files\PS3 Media Server O43 - CFD:Common File Directory ----D- C:\Program Files\QuickPar O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime O43 - CFD:Common File Directory ----D- C:\Program Files\Raccourcis de programmes O43 - CFD:Common File Directory ----D- C:\Program Files\Real Alternative O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files\Ressources Windows Mobile O43 - CFD:Common File Directory ----D- C:\Program Files\Rumble Box O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory ----D- C:\Program Files\Simple Sudoku O43 - CFD:Common File Directory ----D- C:\Program Files\SlySoft O43 - CFD:Common File Directory ----D- C:\Program Files\Softinterface, Inc O43 - CFD:Common File Directory ----D- C:\Program Files\SolidDocuments O43 - CFD:Common File Directory ----D- C:\Program Files\Sophos O43 - CFD:Common File Directory ----D- C:\Program Files\Sorenson Media O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\Steam O43 - CFD:Common File Directory ----D- C:\Program Files\Stellarium O43 - CFD:Common File Directory ----D- C:\Program Files\SWF Decompiler Premium O43 - CFD:Common File Directory ----D- C:\Program Files\Tablet O43 - CFD:Common File Directory ----D- C:\Program Files\TF1Vision O43 - CFD:Common File Directory ----D- C:\Program Files\Thomson O43 - CFD:Common File Directory ----D- C:\Program Files\TmNationsForever O43 - CFD:Common File Directory ----D- C:\Program Files\Total Immersion O43 - CFD:Common File Directory ----D- C:\Program Files\TubeMaster++ O43 - CFD:Common File Directory ----D- C:\Program Files\Ubi Soft O43 - CFD:Common File Directory ----D- C:\Program Files\ubisoft O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\URUSoft O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN O43 - CFD:Common File Directory ----D- C:\Program Files\Virtools O43 - CFD:Common File Directory ----D- C:\Program Files\VMware O43 - CFD:Common File Directory ----D- C:\Program Files\vso O43 - CFD:Common File Directory ----D- C:\Program Files\Webteh O43 - CFD:Common File Directory ----D- C:\Program Files\Western Digital O43 - CFD:Common File Directory ----D- C:\Program Files\Western Railway 3D Screensaver O43 - CFD:Common File Directory ----D- C:\Program Files\WinAce O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\WinPcap O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\XviD O43 - CFD:Common File Directory ----D- C:\Program Files\Yahoo! O43 - CFD:Common File Directory --H-D- C:\Program Files\Zero G Registry O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Motive O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\VMware ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.00000000000000000000000000000000] - 07/09/2010 - 19:47:18 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1853536] O44 - LFC:[MD5.26380E33ACA4B9B737C7CF90F1548127] - 07/09/2010 - 19:43:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [1158] O44 - LFC:[MD5.00000000000000000000000000000000] - 07/09/2010 - 19:03:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [32524] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 07/09/2010 - 08:21:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.7D7057B2A3BB68704577F15119743DAC] - 07/09/2010 - 08:21:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_PCI SoftV92 Data Fax Modem with SmartCP.txt [4834] O44 - LFC:[MD5.00000000000000000000000000000000] - 07/09/2010 - 08:20:53 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.00000000000000000000000000000000] - 07/09/2010 - 08:20:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 07/09/2010 - 08:20:30 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 06/09/2010 - 22:55:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\NeroDigital.ini [116] O44 - LFC:[MD5.4FD9E36190BE2F81D2EF5707A0501831] - 04/09/2010 - 22:48:21 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [64125] O44 - LFC:[MD5.B8F01BFC5A885E43682E11F9A3E059BD] - 04/09/2010 - 22:29:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\TB.txt [2924] O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 04/09/2010 - 19:55:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224] O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 04/09/2010 - 19:55:36 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952] O44 - LFC:[MD5.FACCA6CF0BCC418E3B14E4138F30B833] - 11/08/2010 - 20:58:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT [4509424] O44 - LFC:[MD5.30708E8CC8825577C6369E6AAD46E99E] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\FaxSetup.log [2183269] O44 - LFC:[MD5.BC785EE7C63417464A68D4521E5698C8] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982214.log [14790] O44 - LFC:[MD5.329C19346C769485462E6C24159077B6] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\comsetup.log [712802] O44 - LFC:[MD5.D7B42A23658B2BCF4F58F64B34AB005B] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.log [344568] O44 - LFC:[MD5.751F5415C90965AECCB3C269F3AF751D] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.log [1374] O44 - LFC:[MD5.8CBF40FC088489063853D03931A357B7] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msgsocm.log [108504] O44 - LFC:[MD5.1637E6208E37ECF30A09A90A20D7E1DE] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntdtcsetup.log [431117] O44 - LFC:[MD5.5C4CCC8D12C38D7A1C18AA4669D8FAB1] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocgen.log [1057433] O44 - LFC:[MD5.3C0FF5F554B8DC8787A1F4DBD63A230A] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocmsn.log [117123] O44 - LFC:[MD5.811603AAC76905E1F7D1E84912956716] - 11/08/2010 - 20:36:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tsoc.log [840828] O44 - LFC:[MD5.460CD819CD3463FD45D0D3642D13C65B] - 11/08/2010 - 20:36:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2115168.log [21712] O44 - LFC:[MD5.EE7C27852E91D9C60F8B7389EC7703EE] - 11/08/2010 - 20:36:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.BAK [1374] O44 - LFC:[MD5.A497A26502CE511B553AD97DB3D82CDF] - 11/08/2010 - 20:35:51 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981852.log [16592] O44 - LFC:[MD5.8059CC3E3BF75C553A7FA4176EA0719D] - 11/08/2010 - 20:34:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2079403.log [22102] O44 - LFC:[MD5.3EDF71F313A628EAE3F56981B5A98675] - 11/08/2010 - 20:34:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\updspapi.log [391051] O44 - LFC:[MD5.4E67475A1FAA220C46F9C9FB2573F2B2] - 11/08/2010 - 20:34:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1105068] O44 - LFC:[MD5.7CC34D2937E9DA7019530CBEBE873144] - 11/08/2010 - 20:34:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [77554] O44 - LFC:[MD5.7BB27005815893DAE918416750060BC3] - 11/08/2010 - 20:34:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [87698] O44 - LFC:[MD5.4FAE56F52C8074B66E3D0AD0A5B11D69] - 11/08/2010 - 20:34:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [454488] O44 - LFC:[MD5.3F6EB67C8AD94233EC06A69CD22100F6] - 11/08/2010 - 20:34:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [515824] O44 - LFC:[MD5.729D497236E9A3460602E08EAF1DB686] - 11/08/2010 - 20:32:11 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2183461-IE8.log [17695] O44 - LFC:[MD5.EDC77F5C6571D134B0DBE4A6AC7EFB63] - 11/08/2010 - 20:31:37 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB2160329.log [18206] O44 - LFC:[MD5.BD21788DE2433CD97EFA898CA6C51D47] - 11/08/2010 - 20:31:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB980436.log [17572] O44 - LFC:[MD5.0FD9160267D33639909D9DFF4C8A6E0C] - 11/08/2010 - 20:27:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB981997.log [9230] O44 - LFC:[MD5.E6EB93BBD757D4449B8EEFFC381E1FB9] - 11/08/2010 - 20:27:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB982665.log [16052] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Disabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\mIRC\mirc.exe" [Enabled] .(.mIRC Co. Ltd. - mIRC.) -- C:\Program Files\mIRC\mirc.exe O47 - AAKE:Key Export SP - "C:\Program Files\eMule\eMule.exe" [Enabled] .(.http://emuleplus.info - eMule Plus.) -- C:\Program Files\eMule\eMule.exe O47 - AAKE:Key Export SP - "C:\Program Files\Media Player Classic\mplayerc.exe" [Enabled] .(.Gabest - Media Player Classic.) -- C:\Program Files\Media Player Classic\mplayerc.exe O47 - AAKE:Key Export SP - "C:\Documents and Settings\Chouette\Mes documents\BitComet\BitComet.exe" [Disabled] .(.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Documents and Settings\Chouette\Mes documents\BitComet\BitComet.exe O47 - AAKE:Key Export SP - "C:\Documents and Settings\Chouette\Mes documents\utorrent.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Documents and Settings\Chouette\Mes documents\utorrent.exe O47 - AAKE:Key Export SP - "C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu\patchget.dat" [Enabled] .(.Pas de propriétaire - .) (.not file.) -- C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu\patchget.dat:*:Enabled:patchgrabber O47 - AAKE:Key Export SP - "C:\Program Files\PeerTV\PeerCast.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\PeerTV\PeerCast.exe O47 - AAKE:Key Export SP - "C:\Program Files\SecondLife\SecondLife.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\SecondLife\SecondLife.exe O47 - AAKE:Key Export SP - "C:\Program Files\Macromedia\Dreamweaver 8\Dreamweaver.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Macromedia\Dreamweaver 8\Dreamweaver.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\electricsheep.scr" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\WINDOWS\system32\electricsheep.scr:*:Enabled:electricsheep O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) (.not file.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft ActiveSync\rapimgr.exe" [Enabled] .(.Microsoft Corporation - ActiveSync RAPI Manager.) (.not file.) -- C:\Program Files\Microsoft ActiveSync\rapimgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [Enabled] .(.Microsoft Corporation - ActiveSync Connection Manager.) (.not file.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe" [Enabled] .(.Microsoft Corporation - ActiveSync Application.) (.not file.) -- C:\Program Files\Microsoft ActiveSync\WCESMgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\TmNationsForever\TmForever.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\TmNationsForever\TmForever.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) (.not file.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\GetRight\getright.exe" [Enabled] .(.Headlight Software, Inc. - GetRight® Download Manager. www.GetRight.com.) (.not file.) -- C:\Program Files\GetRight\getright.exe O47 - AAKE:Key Export SP - "C:\Program Files\Joost\xulrunner\tvprunner.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Joost\xulrunner\tvprunner.exe O47 - AAKE:Key Export SP - "C:\Program Files\Internet Explorer\iexplore.exe" [Enabled] .(.Microsoft Corporation - Internet Explorer.) (.not file.) -- C:\Program Files\Internet Explorer\iexplore.exe O47 - AAKE:Key Export SP - "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [Enabled] .(.Adobe Systems Incorporated - .) (.not file.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe O47 - AAKE:Key Export SP - "C:\Program Files\Omemo\Omemo.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Omemo\Omemo.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) (.not file.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) (.not file.) -- C:\Program Files\Java\jre6\bin\javaw.exe O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) (.not file.) -- C:\Program Files\Java\jre6\bin\java.exe O47 - AAKE:Key Export SP - "C:\Program Files\Sorenson Media\Sorenson Squeeze\Squeeze.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Sorenson Media\Sorenson Squeeze\Squeeze.exe O47 - AAKE:Key Export SP - "C:\Program Files\CAPCOM\RESIDENT EVIL 5\RE5DX9.EXE" [Enabled] .(.CAPCOM CO., LTD. - RESIDENT EVIL 5.) (.not file.) -- C:\Program Files\CAPCOM\RESIDENT EVIL 5\RE5DX9.exe O47 - AAKE:Key Export SP - "C:\Program Files\CAPCOM\RESIDENT EVIL 5\RE5DX10.EXE" [Enabled] .(.CAPCOM CO., LTD. - RESIDENT EVIL 5.) (.not file.) -- C:\Program Files\CAPCOM\RESIDENT EVIL 5\RE5DX10.exe O47 - AAKE:Key Export SP - "C:\Program Files\Stardock Games\Demigod Demo\bin\Demigod.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Stardock Games\Demigod Demo\bin\Demigod.exe O47 - AAKE:Key Export SP - "C:\Program Files\Dofus\UpLauncher.exe" [Enabled] .(.Ankama Games - Update Application.) (.not file.) -- C:\Program Files\Dofus\UpLauncher.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) (.not file.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) (.not file.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\Steam.exe" [Enabled] .(.Valve Corporation - Steam.) (.not file.) -- C:\Program Files\Steam\Steam.exe O47 - AAKE:Key Export SP - "C:\Program Files\Adobe\Adobe Flash CS4\Flash.exe" [Enabled] .(.Adobe Systems Incorporated. - Adobe Flash CS4.) (.not file.) -- C:\Program Files\Adobe\Adobe Flash CS4\Flash.exe O47 - AAKE:Key Export SP - "C:\Program Files\Hercules\DualPix Exchange\Station2.exe" [Enabled] .(.Guillemot Corporation S.A. - Hercules Webcam Station Evolution SE.) (.not file.) -- C:\Program Files\Hercules\DualPix Exchange\Station2.exe O47 - AAKE:Key Export SP - "C:\Program Files\Sorenson Media\Sorenson Squeeze 6\squeeze.exe" [Enabled] .(.Sorenson Media Inc. - Squeeze Application.) (.not file.) -- C:\Program Files\Sorenson Media\Sorenson Squeeze 6\squeeze.exe O47 - AAKE:Key Export SP - "C:\Program Files\VMware\VMware Player\vmware-authd.exe" [Enabled] .(.VMware, Inc. - VMware Authorization Service.) (.not file.) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\batman arkham asylum goty\Binaries\ShippingPC-BmGame.exe" [Enabled] .(.Rocksteady Studios Ltd - .) (.not file.) -- C:\Program Files\Steam\SteamApps\common\batman arkham asylum goty\Binaries\ShippingPC-BmGame.exe O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) (.not file.) -- C:\Program Files\Bonjour\mDNSResponder.exe O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) (.not file.) -- C:\Program Files\iTunes\iTunes.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty\CoDSP.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Steam\SteamApps\common\call of duty\CoDSP.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty\CoDMP.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Steam\SteamApps\common\call of duty\CoDMP.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\batman arkham asylum goty\Binaries\BmLauncher.exe" [Enabled] .(.Rocksteady Studios Ltd - .) (.not file.) -- C:\Program Files\Steam\SteamApps\common\batman arkham asylum goty\Binaries\BmLauncher.exe O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Earth\client\googleearth.exe" [Enabled] .(.Google - Google Earth.) (.not file.) -- C:\Program Files\Google\Google Earth\client\googleearth.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty 2\CoD2SP_s.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Steam\SteamApps\common\call of duty 2\CoD2SP_s.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty 2\CoD2MP_s.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Steam\SteamApps\common\call of duty 2\CoD2MP_s.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\spoolsv.exe" [Enabled] .(.Microsoft Corporation - Spooler SubSystem App.) (.not file.) -- C:\WINDOWS\system32\spoolsv.exe O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\mafia ii - public demo\launcher.exe" [Enabled] .(.Pas de propriétaire - .) (.not file.) -- C:\Program Files\Steam\SteamApps\common\mafia ii - public demo\launcher.exe O47 - AAKE:Key Export SP - "C:\Program Files\Yahoo!\Messenger\YServer.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Yahoo!\Messenger\YServer.exe O47 - AAKE:Key Export SP - "C:\Program Files\Yahoo!\Messenger\YPager.exe" [Disabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Program Files\Yahoo!\Messenger\YPager.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "C:\Program Files\Microsoft ActiveSync\rapimgr.exe" [Enabled] .(.Microsoft Corporation - ActiveSync RAPI Manager.) -- C:\Program Files\Microsoft ActiveSync\rapimgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [Enabled] .(.Microsoft Corporation - ActiveSync Connection Manager.) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe O47 - AAKE:Key Export DP - "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe" [Enabled] .(.Microsoft Corporation - ActiveSync Application.) -- C:\Program Files\Microsoft ActiveSync\WCESMgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe O47 - AAKE:Key Export DP - "C:\Program Files\VMware\VMware Player\vmware-authd.exe" [Enabled] .(.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ MountPoints2 Shell Key (MPSK) (O51) O51 - MPSK:{0ef4c40b-000f-11de-ac93-0013d4303d91}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- L:\WDSetup.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"VIDC.I420"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- C:\WINDOWS\System32\i420vfw.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.yv12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\System32\yv12vfw.dll O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \Drivers32\"msacm.avis"="ff_acm.acm" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\WINDOWS\System32\ff_acm.acm O52 - TDSD: \Drivers32\"VIDC.VMnc"="vmnc.dll" . (.VMware, Inc. - VMware Movie decoder.) -- C:\WINDOWS\System32\vmnc.dll O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \drivers.desc\"ff_acm.acm"="ffdshow ACM codec" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\WINDOWS\System32\ff_acm.acm O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.9.2 Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=255 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.73685E15EF8B0BD9C30F1AF413F13D49] - 20/01/2010 - 23:59:47 ---A- . (.Adobe Systems, Inc. - Adobe Drive File System Driver.) -- C:\WINDOWS\system32\drivers\adfs.sys O58 - SDL:[MD5.8525B88D8E902E7B587FCA034B298693] - 08/12/2003 - 11:53:38 ---A- . (.THOMSON - Helper.) -- C:\WINDOWS\system32\drivers\alcacr.sys O58 - SDL:[MD5.0940030D5A5869067CCC03E3B0B8DEC7] - 08/12/2003 - 11:53:48 ---A- . (.THOMSON - WAN Driver.) -- C:\WINDOWS\system32\drivers\alcan5wn.sys O58 - SDL:[MD5.4C9577888C53243E2991456F510488A1] - 08/12/2003 - 11:53:46 ---A- . (.THOMSON - WDM Driver.) -- C:\WINDOWS\system32\drivers\alcaudsl.sys O58 - SDL:[MD5.66065EF8736CD9A4EE0F8B02055F45B5] - 08/12/2003 - 11:53:42 ---A- . (.THOMSON - Helper.) -- C:\WINDOWS\system32\drivers\alcawh.sys O58 - SDL:[MD5.9A6AA923F00D368C8AD3BD7485D5CDCA] - 18/05/2005 - 16:50:30 ---A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS O58 - SDL:[MD5.59301936898AE62245A6F09C0ABA9475] - 09/03/2005 - 13:53:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdK8.sys O58 - SDL:[MD5.27CD212830201E918C45EC458B96E652] - 25/02/2006 - 23:04:05 ---A- . (.SlySoft, Inc. - AnyDVD Filter Driver.) -- C:\WINDOWS\system32\drivers\AnyDVD.sys O58 - SDL:[MD5.ED8CEE58C1E4C5893F5B2FD686A272BF] - 14/08/2002 - 14:03:36 ---A- . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\WINDOWS\system32\drivers\ASPI32.SYS O58 - SDL:[MD5.151BA5F3F17EDB1C5C8409A3BCD8A6C4] - 19/10/2009 - 21:48:18 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys O58 - SDL:[MD5.56BF27D7A539F9E6BBC1DE201ABA0EDF] - 28/12/2006 - 04:44:44 R--A- . (.ATI Research Inc. - Ati High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\AtiHdAud.sys O58 - SDL:[MD5.FAC04A8E09C8D70594382656D99772A3] - 19/08/2009 - 07:05:56 ---A- . (.ATI Research Inc. - Ati High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys O58 - SDL:[MD5.FDFB6101ED180F2887C6C63A850F1D62] - 14/06/2007 - 02:23:29 ---A- . (.ATI Technologies Inc. - ATI T200 Unified AVStream Driver.) -- C:\WINDOWS\system32\drivers\atinavt2.sys O58 - SDL:[MD5.514829ED3E7F140AAC16154106D04981] - 04/08/2004 - 02:08:36 ---A- . (.ATI Technologies Inc. - ATI Specialized MVD VBI Codec RT2.) -- C:\WINDOWS\system32\drivers\atinmdxx.sys O58 - SDL:[MD5.74E104ADA8A304774713E9A9A9CB3556] - 04/08/2004 - 02:08:30 ---A- . (.ATI Technologies Inc. - ATI WDM Rage Theater MiniDriver RT2.) -- C:\WINDOWS\system32\drivers\atinrvxx.sys O58 - SDL:[MD5.F0D933B42CD0594048E4D5200AE9E417] - 26/06/2009 - 21:10:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\atksgt.sys O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 10:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 08/12/2009 - 09:14:50 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:[MD5.5ACEA1331BD4D9DAD232A23CFD7616BF] - 13/02/2009 - 10:29:11 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:[MD5.452E382340BB0C5E694ED9D3625356D0] - 17/05/2009 - 16:02:22 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:[MD5.919DB06DBF8A98D00CDCDA5BC58F8136] - 29/05/2007 - 12:23:58 ---A- . (.Guillemot Corporation - Filter Driver for the Hercules Webcams (MJPG).) -- C:\WINDOWS\system32\drivers\camfilt2.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 05/08/2004 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.28CB0B64134AD62C2ACF77DB8501A619] - 21/07/2008 - 13:11:58 ---A- . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys O58 - SDL:[MD5.FD9FC82F134B1C91004FFC76A5AE494B] - 25/10/2004 - 20:02:00 ---A- . (.EnTech Taiwan - Pas de description.) -- C:\WINDOWS\system32\drivers\Entech.sys O58 - SDL:[MD5.4AC51459805264AFFD5F6FDFB9D9235F] - 14/11/2006 - 22:26:48 ---A- . (.GEAR Software Inc. - CD/DVD Class Filter Driver.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys O58 - SDL:[MD5.1DB5002C16F4DF11FD062BD4A277AA24] - 22/01/2010 - 20:00:42 ---A- . (.VMware, Inc. - VMware USB monitor.) -- C:\WINDOWS\system32\drivers\hcmon.sys O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 07/01/2005 - 16:07:16 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\drivers\Hdaudio.sys O58 - SDL:[MD5.128EF741B2293C36810561092B566B1C] - 13/11/2003 - 18:19:48 ---A- . (.Conexant Systems, Inc. - HSF_HWB2 WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys O58 - SDL:[MD5.CE545A84BF3411E7516FA8DA51AD9D93] - 13/11/2003 - 18:18:36 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys O58 - SDL:[MD5.9A0D0C461EF2B3D80CB7875B4B995E47] - 13/11/2003 - 18:17:00 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DP.sys O58 - SDL:[MD5.BDCE6B54E1D7D8399175A83A02274B7A] - 17/12/2004 - 14:11:38 ---A- . (.Intel Corporation - Intel Application Accelerator driver.) -- C:\WINDOWS\system32\drivers\iaStor.sys O58 - SDL:[MD5.B7A5FADF67136FDA7E8F25303565B674] - 11/03/2007 - 18:12:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\ithsgt.sys O58 - SDL:[MD5.16767EA492B5D140E1DE3679A65EAE74] - 11/03/2007 - 18:12:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\lilsgt.sys O58 - SDL:[MD5.F8A7212D0864EF5E9185FB95E6623F4D] - 26/06/2009 - 21:10:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\lirsgt.sys O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.5110EDD87E2508F02B922E83A2487DFC] - 16/01/2004 - 14:21:48 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys O58 - SDL:[MD5.F627E9DA4D3D8DC05A15B68944302F14] - 21/10/2005 - 06:25:32 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\MTictwl.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.6623E51595C0076755C29C00846C4EB2] - 06/11/2007 - 21:22:06 ---A- . (.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\WINDOWS\system32\drivers\npf.sys O58 - SDL:[MD5.52CAB126C3ED5B851FB80EBA0BEA5C4E] - 14/03/2005 - 16:05:08 ---A- . (.NVIDIA Corporation - NVIDIA® nForce IDE Performance Driver.) -- C:\WINDOWS\system32\drivers\nvatabus.sys O58 - SDL:[MD5.720CC533EECB65553BD86B139CA04433] - 06/04/2005 - 02:22:28 ---A- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\drivers\NVENETFD.sys O58 - SDL:[MD5.5F9F545CC5904DD8765F84EE1D056406] - 06/04/2005 - 02:22:30 ---A- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\drivers\nvnetbus.sys O58 - SDL:[MD5.F0C8AE1FEFB954367E2DA224AA97537D] - 06/04/2005 - 02:22:12 ---A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\drivers\nvnrm.sys O58 - SDL:[MD5.3F7DF8E70889F74D0F8B5CAD7BC3BA45] - 06/04/2005 - 02:22:02 ---A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\drivers\nvsnpu.sys O58 - SDL:[MD5.D6829ACFA6315DB9A963D3EDE2BCBCFF] - 19/11/2001 - 19:05:18 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\PciBus.sys O58 - SDL:[MD5.02AAAFB7BA137CE5DDABCDF8090954D9] - 25/08/2006 - 19:31:47 ---A- . (.VSO Software - low level access layer for CD/DVD/BD devices.) -- C:\WINDOWS\system32\drivers\pcouffin.sys O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.DF9957DB3BFE5136AAD3C2C101806C98] - 12/04/2005 - 09:41:20 ---A- . (.Elaborate Bytes AG - Elby Delay Lower Filter Driver.) -- C:\WINDOWS\system32\drivers\RegKill.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 05/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/11/2007 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 10/08/2005 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\drivers\sfdrv01.sys O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 16/05/2005 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\drivers\sfhlp02.sys O58 - SDL:[MD5.9EF50060CC7E6953BAB83F2A42CCC421] - 29/09/2005 - 18:01:51 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\WINDOWS\system32\drivers\sfvfs02.sys O58 - SDL:[MD5.B8A2F8DCDC75F19962D975727F393920] - 11/01/2005 - 16:58:48 ---A- . (.Silicon Integrated Systems Corp - SiS RAID Miniport Driver.) -- C:\WINDOWS\system32\drivers\SiSRaid2.sys O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 09/05/2007 - 15:16:40 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\WINDOWS\system32\drivers\sncduvc.sys O58 - SDL:[MD5.0A0E0A9F9C658FDE4CCCCC39928B0CF9] - 16/05/2007 - 13:02:54 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\WINDOWS\system32\drivers\snp2uvc.sys O58 - SDL:[MD5.00000000000000000000000000000000] - 17/02/2009 - 02:50:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys O58 - SDL:[MD5.654DFEA96BC82B4ACDA4F37E5E4A3BBF] - 09/06/2009 - 22:30:35 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:[MD5.74B5B63EF92985F1D3E7BF1ECADD6EF7] - 12/10/2009 - 13:33:00 ---A- . (.StorageCraft Technology Corporation - StorageCraft Volume Snapshot Driver.) -- C:\WINDOWS\system32\drivers\stcp2v30.sys O58 - SDL:[MD5.C99010707441D2428C90EB8D0069E153] - 16/08/2005 - 10:23:10 ---A- . (.Generic - Generic MP3 Player USB Driver.) -- C:\WINDOWS\system32\drivers\StMp3Rec.sys O58 - SDL:[MD5.34F1BCB847A924A161422F106A79B9FF] - 22/07/2009 - 20:13:20 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\tap0901.sys O58 - SDL:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 15/09/2009 - 21:04:58 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\taphss.sys O58 - SDL:[MD5.27A2C318CD28CFB3EB2200FD96AF1E58] - 23/01/2008 - 22:25:32 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\tapvpn.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 05/08/2004 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.4B8A9C16B6D9258ED99C512AECB8C555] - 19/04/2010 - 19:47:42 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys O58 - SDL:[MD5.9BF2EA54E5ED5ACDF96F1DEC84C117C4] - 24/09/2008 - 11:29:25 ---A- . (.Elaborate Bytes AG - VirtualCloneCD Driver.) -- C:\WINDOWS\system32\drivers\VClone.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.6AAA39DD79A8341CE0EF9249F21D6B89] - 24/12/2004 - 17:04:44 ---A- . (.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) -- C:\WINDOWS\system32\drivers\viamraid.sys O58 - SDL:[MD5.33C6F2E02662A7900CAC6AB2607E9F88] - 22/01/2010 - 20:57:54 ---A- . (.VMware, Inc. - VMware kernel driver.) -- C:\WINDOWS\system32\drivers\vmci.sys O58 - SDL:[MD5.852D9499D01D75B024D497A306DBB76D] - 22/01/2010 - 20:57:56 ---A- . (.VMware, Inc. - VMware keyboard filter driver (32-bit).) -- C:\WINDOWS\system32\drivers\VMkbd.sys O58 - SDL:[MD5.0E44D3669EE44286E1FFF1FAB77821CB] - 22/01/2010 - 16:13:00 R--A- . (.VMware, Inc. - VMware virtual network driver (32-bit).) -- C:\WINDOWS\system32\drivers\vmnet.sys O58 - SDL:[MD5.E41704D8149992107B333CC7A52C07CC] - 22/01/2010 - 16:13:00 R--A- . (.VMware, Inc. - VMware virtual network adapter driver (32-bit).) -- C:\WINDOWS\system32\drivers\vmnetadapter.sys O58 - SDL:[MD5.E887150BFEE294BFFEB28FB49698AE55] - 22/01/2010 - 20:58:02 ---A- . (.VMware, Inc. - VMware bridge driver (32-bit).) -- C:\WINDOWS\system32\drivers\vmnetbridge.sys O58 - SDL:[MD5.C3837C0C499AA62F2A2AC8DBF5015817] - 22/01/2010 - 20:57:58 ---A- . (.VMware, Inc. - VMware network application interface driver (32-bit).) -- C:\WINDOWS\system32\drivers\vmnetuserif.sys O58 - SDL:[MD5.5E3AF8A6B096FD934A96D32D97843A69] - 22/01/2010 - 20:56:46 ---A- . (.VMware, Inc. - VMware parallel port driver.) -- C:\WINDOWS\system32\drivers\vmparport.sys O58 - SDL:[MD5.4E53D280DE6D5D523E39FBBDDFF0E819] - 22/01/2010 - 20:57:54 ---A- . (.VMware, Inc. - VMware kernel driver.) -- C:\WINDOWS\system32\drivers\vmx86.sys O58 - SDL:[MD5.9A03558C37E919B9D6A50864AEA0A168] - 06/10/2008 - 18:53:24 ---A- . (.Wacom Technology - Wacom HID Mouse Monitor Filter Driver.) -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys O58 - SDL:[MD5.427A8BC96F16C40DF81C2D2F4EDD32DD] - 16/02/2007 - 19:12:36 ---A- . (.Wacom Technology - Wacom Mouse Filter Driver.) -- C:\WINDOWS\system32\drivers\wacommousefilter.sys O58 - SDL:[MD5.6843FD7DB708B14EA4D8092ABB464244] - 11/07/2008 - 18:16:50 ---A- . (.Wacom Technology - Virtual Hid Device.) -- C:\WINDOWS\system32\drivers\wacomvhid.sys O58 - SDL:[MD5.889459833432B161CB99CFDF84A1A9BB] - 16/02/2007 - 00:11:28 ---A- . (.Wacom Technology - Virtual Hid Device.) -- C:\WINDOWS\system32\drivers\WacomVKHid.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/08/2004 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys O58 - SDL:[MD5.D74375BE63DCA31E6145248E4278893E] - 22/10/2003 - 09:54:14 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis4.sys O58 - SDL:[MD5.FC6BAFC20114160A6291C1C45545F137] - 22/10/2003 - 09:54:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis5.sys ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.26 - (.Nicolas Coolman.) O63 - Logiciel: Toolbar SD - (.IDN Team.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ADFS.sys - adfs (adfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_ADFS O64 - Services: CurCS - (.not file.) - Adobe Drive CS4 NP (AdobeDriveCS4_NP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ADOBEDRIVECS4_NP O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe - Apple Mobile Device (Apple Mobile Device) .(.Apple Inc. - Apple Mobile Device Service.) - LEGACY_APPLE_MOBILE_DEVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASPI32.sys - Aspi32 (Aspi32) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASPI32 O64 - Services: CurCS - C:\Windows\system32\DRIVERS\atapi.sys - Contrôleur de disque dur IDE/ESDI standard (atapi) .(.Microsoft Corporation - IDE/ATAPI Port Driver.) - LEGACY_ATAPI O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - (.not file.) - ATI Smart (ATI Smart) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATI_SMART O64 - Services: CurCS - C:\Windows\system32\DRIVERS\atksgt.sys - atksgt (atksgt) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATKSGT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - (.not file.) - AVG8 Network Redirector (AvgTdiX) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVGTDIX O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\Program Files\Bonjour\mDNSResponder.exe - Service Bonjour (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\Program Files\Canon\CAL\CALMAIN.exe - Canon Camera Access Library 8 (CCALib8) .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - Application système COM+ (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k DcomLaunch (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\system32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\system32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - C:\Windows\system32\Drivers\ElbyCDIO.sys - ElbyCDIO Driver (ElbyCDIO) .(.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - LEGACY_ELBYCDIO O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\ENTECH.sys - ENTECH (ENTECH) .(.EnTech Taiwan - Pas de description.) - LEGACY_ENTECH O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\fxssvc.exe - Fax (Fax) .(.Microsoft Corporation - Service de télécopie.) - LEGACY_FAX O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe - FLEXnet Licensing Service (FLEXnet Licensing Service) .(.Acresso Software Inc. - Activation Licensing Service.) - LEGACY_FLEXNET_LICENSING_SERVICE O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe - Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) .(.Google - Google Desktop.) - LEGACY_GOOGLEDESKTOPMANAGER-051210-111108 O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Google Update Service (gupdate1c98637c1e502a) (gupdate1c98637c1e502a) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1C98637C1E502A O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC O64 - Services: CurCS - C:\WINDOWS\system32\drivers\hcmon.sys - VMware hcmon (hcmon) .(.VMware, Inc. - VMware USB monitor.) - LEGACY_HCMON O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - C:\Windows\system32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\Windows\system32\drivers\iaStor.sys - iaStor (iaStor) .(.Intel Corporation - Intel Application Accelerator driver.) - LEGACY_IASTOR O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\Program Files\iPod\bin\iPodService.exe - Service de l’iPod (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - (.not file.) - ISODisk (ISODisk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ISODISK O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ithsgt.sys - ithsgt (ithsgt) .(.Pas de propriétaire - Pas de description.) - LEGACY_ITHSGT O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (lanmanserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\Windows\system32\DRIVERS\lilsgt.sys - lilsgt (lilsgt) .(.Pas de propriétaire - Pas de description.) - LEGACY_LILSGT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\lirsgt.sys - lirsgt (lirsgt) .(.Pas de propriétaire - Pas de description.) - LEGACY_LIRSGT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\Windows\system32\drivers\MTiCtwl.sys - MagicTune (MagicTune) .(.Pas de propriétaire - Pas de description.) - LEGACY_MAGICTUNE O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mdmxsdk.sys - mdmxsdk (mdmxsdk) .(.Conexant - Diagnostic Interface DRIVER.) - LEGACY_MDMXSDK O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.sys - MRENDIS5 NDIS Protocol Driver (MRENDIS5) .(.Motive, Inc. - Motive NDIS 5.0 Protocol Driver.) - LEGACY_MRENDIS5 O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - (.not file.) - NCPro (NCPro) .(.Pas de propriétaire - Pas de description.) - LEGACY_NCPRO O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - C:\Windows\system32\DRIVERS\NMnt.sys - Pilote du Moniteur réseau (NM) .(.Microsoft Corporation - Netmon NT Driver.) - LEGACY_NM O64 - Services: CurCS - C:\Windows\system32\drivers\npf.sys - NetGroup Packet Filter Driver (NPF) .(.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\system32\DRIVERS\pciide.sys - PCIIde (PCIIde) .(.Microsoft Corporation - Pilote de bus générique PCI IDE.) - LEGACY_PCIIDE O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k rpcss (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - (.not file.) - SAVRTPEL (SAVRTPEL) .(.Pas de propriétaire - Pas de description.) - LEGACY_SAVRTPEL O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe - SolidPDFConverterReadSpool (ScReadSpool) .(.VoyagerSoft, LLC - Solid Spool Service.) - LEGACY_SCREADSPOOL O64 - Services: CurCS - C:\Windows\system32\DRIVERS\secdrv.sys - Secdrv (Secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\Windows\system32\drivers\sfdrv01.sys - StarForce Protection Environment Driver (version 1.x) (sfdrv01) .(.Protection Technology - StarForce Protection Environment Driver.) - LEGACY_SFDRV01 O64 - Services: CurCS - C:\Windows\system32\drivers\sfhlp02.sys - StarForce Protection Helper Driver (version 2.x) (sfhlp02) .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02 O64 - Services: CurCS - C:\Windows\system32\drivers\sfvfs02.sys - StarForce Protection VFS Driver (version 2.x) (sfvfs02) .(.Protection Technology - StarForce Protection VFS Driver.) - LEGACY_SFVFS02 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\Windows\system32\drivers\SiSRaid2.sys - SiSRaid2 (SiSRaid2) .(.Silicon Integrated Systems Corp - SiS RAID Miniport Driver.) - LEGACY_SISRAID2 O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\Windows\system32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - (.not file.) - SymEvent (SymEvent) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMEVENT O64 - Services: CurCS - (.not file.) - SYMREDRV (SYMREDRV) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMREDRV O64 - Services: CurCS - (.not file.) - SYMTDI (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\system32\Wacom_Tablet.exe - TabletServiceWacom (TabletServiceWacom) .(.Wacom Technology, Corp. - Tablet Service for professional driver.) - LEGACY_TABLETSERVICEWACOM O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - C:\WINDOWS\System32\svchost -k DComLaunch (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\system32\drivers\viamraid.sys - viamraid (viamraid) .(.VIA Technologies inc,.ltd - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32.) - LEGACY_VIAMRAID O64 - Services: CurCS - C:\Program Files\VMware\VMware Player\vmware-authd.exe - VMware Authorization Service (VMAuthdService) .(.VMware, Inc. - VMware Authorization Service.) - LEGACY_VMAUTHDSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\vmci.sys - VMware vmci (vmci) .(.VMware, Inc. - VMware kernel driver.) - LEGACY_VMCI O64 - Services: CurCS - C:\Windows\system32\DRIVERS\vmnetbridge.sys - VMware Bridge Protocol (VMnetBridge) .(.VMware, Inc. - VMware bridge driver (32-bit).) - LEGACY_VMNETBRIDGE O64 - Services: CurCS - C:\WINDOWS\system32\vmnetdhcp.exe - VMware DHCP Service (VMnetDHCP) .(.VMware, Inc. - VMware VMnet DHCP service.) - LEGACY_VMNETDHCP O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vmnetuserif.sys - VMware Network Application Interface (VMnetuserif) .(.VMware, Inc. - VMware network application interface driver.) - LEGACY_VMNETUSERIF O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VMparport.sys - VMware VMparport (VMparport) .(.VMware, Inc. - VMware parallel port driver.) - LEGACY_VMPARPORT O64 - Services: CurCS - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe - VMware USB Arbitration Service (VMUSBArbService) .(.VMware, Inc. - VMware USB Arbitration Service.) - LEGACY_VMUSBARBSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\vmnat.exe - VMware NAT Service (VMware NAT Service) .(.VMware, Inc. - VMware NAT Service.) - LEGACY_VMWARE_NAT_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\vmx86.sys - VMware vmx86 (vmx86) .(.VMware, Inc. - VMware kernel driver.) - LEGACY_VMX86 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Program Files\VMware\VMware Player\vstor2-ws60.sys - Vstor2 WS60 Virtual Storage Driver (vstor2-ws60) .(.VMware, Inc. - VMware Virtual Storage Volume Driver.) - LEGACY_VSTOR2-WS60 O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de numéro de série du lecteur multimédia portable (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\Program Files\Windows Media Player\WMPNetwk.exe - Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) .(.Microsoft Corporation - Service Partage réseau du Lecteur Windows M.) - LEGACY_WMPNETWORKSVC O64 - Services: CurCS - C:\WINDOWS\system32\drivers\ws2ifsl.sys - Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) .(.Microsoft Corporation - Winsock2 IFS Layer.) - LEGACY_WS2IFSL O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ---\\ Observateur d'évènement d'application (OEA) (O66) O66 - EventLog: ID=490 (ESENT) - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\CatRoot2\edb.log ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <jsfile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> <jsfile>[HKCR\..\open\Command] (.Adobe Systems, Inc. - Adobe Dreamweaver CS4.) -- C:\Program Files\Adobe\Adobe Dreamweaver CS4\Dreamweaver.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <chrome.exe> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Hibou\Local Settings\Application Data\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - Bing O69 - SBI: SearchScopes [HKCU] {2ADFB97C-C900-487E-8A20-244CC1F55359} - (Google) - Google O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google O69 - SBI: SearchScopes [HKCU] {70D46D94-BF1E-45ED-B567-48701376298E} - (Google Desktop) - http://127.0.0.1:4664/search&s=LgVuqDLlvTQJTbLSJSvWfvcwoh8?q={searchTerms} O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} [DefaultScope] - (Bing) - Bing O69 - SBI: SearchScopes [HKCU] {A22C11E2-BD21-43B4-8514-FB02AFA2E75C} - (Yahoo! Search) - Yahoo! Search - Recherche Web O69 - SBI: SearchScopes [HKCU] {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} - (DAEMON Search) - DAEMON-Search.com :: EXPLORE O69 - SBI: SearchScopes [HKUS\.DEFAULT] {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} - (Private Search) - http://search.hotspotshield.com O69 - SBI: SearchScopes [HKUS\S-1-5-18] {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} - (Private Search) - http://search.hotspotshield.com ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, GMER - Rootkit Detector and Remover Run by Hibou at 07/09/2010 20:56:17 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89454ECC]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\iaStor -> 0x8a3a71f8 Warning: possible MBR rootkit infection ! user & kernel MBR OK Use "Recovery Console" command "fixmbr" to clear infection ! Use "ZHPFix" command "MBRFix" to clear infection ! ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\appmgmts.dll [0] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\System32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 09/06/2009 108289 | Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe SR - | Auto 05/08/2009 185089 | Avira AntiVir Guard (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe SR - | Auto 10/06/2010 144176 | Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 19/10/2009 602112 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe SR - | Auto 18/05/2010 345376 | Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 31/01/2007 96370 | Canon Camera Access Library 8 (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe SS - | Demand 22/02/2009 655624 | FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SS - | Demand 02/06/2010 30192 | Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe SS - | Auto 03/02/2009 133104 | Google Update Service (gupdate1c98637c1e502a) (gupdate1c98637c1e502a) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Auto 23/03/2009 183280 | Google Software Updater (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 04/04/2005 69632 | InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe SR - | Demand 15/06/2010 540472 | Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 12/04/2010 153376 | Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe SS - | Demand 12/04/2010 0 | MEMSWEEP2 (MEMSWEEP2) . (.Pas de propriétaire.) - C:\WINDOWS\system32\A.tmp SS - | Demand 06/11/2007 92792 | Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies.) - C:\Program Files\WinPcap\rpcapd.exe SR - | Auto 02/11/2006 184320 | SolidPDFConverterReadSpool (ScReadSpool) . (.VoyagerSoft, LLC.) - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe SR - | Auto 30/10/2008 2749224 | TabletServiceWacom (TabletServiceWacom) . (.Wacom Technology, Corp..) - C:\WINDOWS\system32\Wacom_Tablet.exe SS - | Demand 12/10/2009 191024 | VMware Agent Service (ufad-ws60) . (.VMware, Inc..) - C:\Program Files\VMware\VMware Player\vmware-ufad.exe SR - | Auto 22/01/2010 113200 | VMware Authorization Service (VMAuthdService) . (.VMware, Inc..) - C:\Program Files\VMware\VMware Player\vmware-authd.exe SR - | Auto 22/01/2010 334384 | VMware DHCP Service (VMnetDHCP) . (.VMware, Inc..) - C:\WINDOWS\system32\vmnetdhcp.exe SS - | Auto 22/01/2010 563760 | VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe SR - | Auto 22/01/2010 395824 | VMware NAT Service (VMware NAT Service) . (.VMware, Inc..) - C:\WINDOWS\system32\vmnat.exe End of the scan (1602 lines in 02mn 30s)(0)