Papougnet49

Merci beaucoup pour votre aide précieuse et efficace. Très cordialement

Merci mais que faut-il faire ?

Merci beaucoup pour votre écoute. Vous trouverez le rapport de ZHPDiag3 après désactivatioin des protections résidentes : http://www.cjoint.com/c/GCxnsFARW8s Il semble exister un élément indésirable Avec tous mes remerciements. Très cordialement

Bonjour Monsieur, Ce portable, protégé par l'antivirus "Suite de sécurité d'Orange" (Kaspersky) tenu à jour, est envahi par des écrans publicitaires rendant la navigation désagréable et ralentie. En dehors du rapport de Malwarebytes Anti-Malware qui révélait un certain nombre d'anomalies placées en quarantaine (voir premier message), j'ai remarqué qu'après le nettoyage du disque par CCleaner effectué hors connexion internet, les deux cookies ak.staticimgfarm.com et akz.imgfarm.com réapparaissaient immédiatement dans la fenêtre Options > Cookies > Cookies sur l'ordinateur. Ceci me semble anormal et laisse penser qu'il persiste un "programme ou logiciel potentiellement indésirable" se réactivant progressivement. C'est en effet la deuxième fois en l'espace de 6 semaines, que je tente modestement de nettoyer cet ordinateur. La première fois Malwarebytes Anti-Malware et AdwCleaner n'avaient rien trouvé, mais ZHPCleaner avait éliminé un PUP.Optional dont je ne souviens plus du nom (je n'ai pas conservé le rapport)... En espérant avoir été le plus clair possible. Je vous remercie de bien vouloir prendre en charge ce problème Très cordialement Jean-Luc

Bonjour Monsieur, Je communique avec vous depuis le portable de ma soeur, qui depuis quelques semaines est envahi de publicités intempestives. Elle échange avec ses amies de nombreux fichiers malgré toutes mes recommandations. Après utilisation de Ccleaner j'ai constaté la persistance de 2 cookies : ak.staticimgfarm.com et akz.imgfarm.com. L'utilisation de Malwarebytes Anti-Malware a permis de placer 33 éléments en quarantaine (fichier joint) L'utilisation successive de ZHPDiag, ZHPCleaner et Adwcleaner n'a pas montré d'élément indésirable. (fichiers joints) Par contre après nouveau passage de Ccleaner nous constatons toujours la persistance des 2 cookies indésirables, sans doute révélateur d'une infection. Je vous remercie beaucoup par avance. Très cordialement. Malwarebytes Anti-Malware : http://www.cjoint.com/c/GCwoVbxzy5Q Adwcleaner : http://www.cjoint.com/c/GCwoTlPGhIQ ZHPCleaner : http://www.cjoint.com/c/GCwoWUEAgEQ ZHPDiag : http://www.cjoint.com/c/GCwoYd5x7nQ

Merci beaucoup. pour votre aide et la clarté de vos explications Très cordialement

Bonsoir, Ci-joint le lien vers le fichier DelFix.txt : https://up.security-x.fr/file.php?h=R30c3135cd5802f06767a6d92d0a0e62a Après le passage de CCleaner et de SFT.exe de Pierre13, les fichiers \mpam-5e1f1599.exe | >mpavbase.vdm. sont toujours retrouvés par Avast comme "Bombe de décompression "mais ne signale aucun virus. Ces fichiers ont-ils un intérêt. Peut-on éventuellement les supprimer manuellement ??? Je ne m'y hasarderai pas sans votre accord ! Mon ordinateur fonctionne sans problème. J'attends votre message de confirmation. Avec encore une fois tout mes remerciements Très cordialement

Bonjour, Merci pour votre réponse. C'est bien le port TCP 113 auth qui est fermé non masqué. 24 autres ports TCP sont masqués. J'ai désinstallé ZoneAlarm avec quelques difficultés car il faut décocher la case "Load at startup" et redémarrer l'ordinateur. Depuis je n'ai plus de Pop up venant de ZoneAlarm (propositions d'abonnement, etc...). Le pare-feu de W10 s'est activé seul. Adwcleaner ne révèle aucune 'anomalie. Par ailleurs quelle est l'utilité de l'outil de Junkware Removal Tool En attendant votre réponse, pouvez-vous m'indiquer également comment indiquer que le problème est résolu. Encore merci Bonne journée Très cordialement.

Bonjour, Merci beaucoup pour votre réponse rapide et rassurante. Mais alors pourquoi CCleaner n’éradique-t-il pas ces fichiers temporaires alors que j'ai décoché la case dans Outils > Avancé > Effacer uniquement les fichiers temporaires de Windows datant de plus de 24 heures ? Faut-il utiliser le nettoyage de disque de Windows et " Nettoyer les fichiers systèmes " ? D'autre part utilisant jusqu'à maintenant le pare-feu de Windows j'ai profité de ma venue sur Zébulon pour effectuer un test de sécurité dont le résultat est effrayant : Attention ! Il existe un ou plusieurs ports détectés comme fermés !Un ou plusieurs ports fermés ont été détecté. Bien qu'il soit protégé, un port fermé reste visible, un pirate potentiel peut donc tenter d'attaquer votre machine. Pour plus de sécurité, il est conseillé de masquer ces ports ou de modifier la configuration de votre firewall. J'ai donc installé ZoneAlarm à partir du site : http://www.zonealarm.com/fr/ Le test précédent est identique et en plus depuis je découvre des Pop up ! Faut-il passer AdwCleaner ? Qu'en pensez-vous ? Avec tous mes remerciements. Très cordialement

Bonjour, En effectuant une recherche complète systématique de virus à l'aide d'Avast gratuit, le résultat du scan révèle la présence de deux bombes de décompression (Decompression Bomb) (42110) dans C:\Windows\ServiceProfile\NetworkService\AppData\Local\Temp\mpam-5e1f1599.exe | >mpavbase.vdm. Malwarebytes Anti-Malware, Adwcleaner, ZHPCleaner et ZHPDiag n'ont révélè aucune anomalie. http://www.cjoint.com/c/FKBk6L2TaVo http://www.cjoint.com/c/FKBk7Kadlho http://www.cjoint.com/c/FKBlbS8nRno Je sollicite votre expertise. Avec tous mes remerciements pour ce que vous ferez pour me renseigner et me dépanner. Très cordialement

Bonsoir, Voilà, j'ai réalisé toutes les manipulations que vous m'avez indiquées. A signaler qu'aucune installation de NETFramework n'apparaissaient dans les programmes et fonctionnalités du panneau de configuration, j'ai donc utilisé l'utilitaire dotnetfx _cleanup_tool.exe. J'ai trouvé 3 installations de Framework : 1.0 - 1.1 et 4.5.2 que j'ai supprimées. Je n'ai pas pu utiliser : Windows6.1-KB947821-v34-x64. La version était incorrecte pour Windows 8.1 Je retrouve toujours le même code erreur 80244019. Seule modification : - Dernière recherche de mise à jour : jamais - Des mises à jour ont été installées : jamais En voulant réinstaller NetFramework j'obtiens le message suivant : Détails Microsoft .NET Framework 4 fait déjà partie de ce système d'exploitation. Vous n'avez pas besoin d'installer le composant redistribuable de .NET Framework 4. <A HREF="http://go.microsoft.com/fwlink/?LinkId=164207">Informations</A>. La même version ou une version ultérieure de .NET Framework 4 a déjà été installée sur cet ordinateur. Merci beaucoup pour votre aide Jean-Luc

Rebonjour, J'ai agi comme vous me l'avez signalé et lancé RepWin puis réparation de windows update. Malheureusement Windows update ne fonctionne toujours en retrouvant toujours le même code d'erreur. Par compte Avast lancé au démarrage me signale 5 dossiers corrompus dans : Services profiles/Networkservice/AppData/Local/temp/mpam-2028f5do.exe >mpavbase,... et suivants (Archive cab corrompue). Mais je n'ai pas de rapport. Ci dessous rapport de RepWin : ----------------------------------------------------------------------------------------- Rapport de réparations Windows (Pierre13) PC de [Jean-Luc] Windows 8.1 64 bits Session administrateur Rapport : C:\Users\Public\Desktop\RepWin[0].txt [30/07/2015 18:31:01] Démarrage de RepWin.exe ----------------------------------------------------------------------------------------- Il y a 3 comptes d'utilisateurs au total sur ce PC. 1 => Administrateur 2 => Invité 3 => Jean-Luc Compte actuel : Jean-Luc ----------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------- [30/07/2015 18:31:04] Configuration du service de journal d'événements Windows... ----------------------------------------------------------------------------------------- [30/07/2015 18:31:04] Service journal événements Windows configuré. [30/07/2015 18:31:04] Démarrage du service journal événements Windows..... [30/07/2015 18:31:05] Le service journal d'événements Windows est bien démarré. ----------------------------------------------------------------------------------------- [30/07/2015 18:31:05] Réparation SSL / HTTPS / service de cryptographie... ----------------------------------------------------------------------------------------- [30/07/2015 18:31:05] Configuration du service de cryptographie..... [30/07/2015 18:31:05] Service de cryptographie configuré. [30/07/2015 18:31:05] Arrêt du service de cryptographie..... [30/07/2015 18:31:05] Le service de cryptographie est correctement stoppé. [30/07/2015 18:31:05] Nettoyage [C:\Windows\system32\CatRoot]..... [30/07/2015 18:31:05] [C:\Windows\system32\CatRoot] nettoyés. [30/07/2015 18:31:05] Re enregistrement des DLL de SSL / HTTPS / Service de cryptographie... [30/07/2015 18:31:05] DLL de SSL / HTTPS / Service de cryptographie ré enregistrés. [30/07/2015 18:31:08] Re démarrage du service de cryptographie..... [30/07/2015 18:31:08] Le service de cryptographie est bien re démarré. [30/07/2015 18:31:08] Réparation SSL / HTTPS / service de cryptographie terminée. ----------------------------------------------------------------------------------------- [30/07/2015 18:31:08] Réparation de Windows Update..... [30/07/2015 18:31:08] Contrôle restrictions Windows Update [30/07/2015 18:31:08] Recherche Windows Update rétablie. [30/07/2015 18:31:08] 11 restrictions Windows Update contrôlées. [30/07/2015 18:31:08] 1 restrictions Windows Update trouvées. ----------------------------------------------------------------------------------------- ----------------------------------------------------------------------------------------- [30/07/2015 18:31:14] Arrêt du service BITS..... [30/07/2015 18:31:14] Le service BITS est stoppé correctement. [30/07/2015 18:31:14] Arrêt du service Mises à jour automatiques (wuauserv)..... [30/07/2015 18:31:14] Le service Mises à jour automatiques (wuauserv) est stoppé correctement. [30/07/2015 18:31:15] Configuration des descripteurs de sécurité du service BITS..... [30/07/2015 18:31:15] Configuration des descripteurs de sécurité effectuée. [30/07/2015 18:31:15] Configuration des descripteurs de sécurité du service Mises à jour automatiques (wuauserv)..... [30/07/2015 18:31:15] Configuration des descripteurs de sécurité du service Mises à jour automatiques (wuauserv) effectuée. [30/07/2015 18:31:15] Enregistrement des DLL de Windows Update..... [30/07/2015 18:31:15] Fichiers DLL Windows Update enregistrées. ----------------------------------------------------------------------------------------- [30/07/2015 18:31:15] Tentative de réinitialisation du catalogue Winsok... ----------------------------------------------------------------------------------------- [30/07/2015 18:31:15] Réinitialisation du catalogue Winsock effectuée. [30/07/2015 18:31:15] Réparation du catalogue Winsock effectuée. [30/07/2015 18:31:15] Configuration du service Mises à jour automatiques (wuauserv) en Auto..... [30/07/2015 18:31:15] Service Mises à jour atomatiques (wuauserv) configuré en auto. [30/07/2015 18:31:15] Configuration service BITS..... [30/07/2015 18:31:16] Service BITS configuré. [30/07/2015 18:31:16] Redémarrage du service mises à jour automatiques (wuauserv)..... [30/07/2015 18:31:16] Mises à jour auto (wuauserv) Service redémarré. [30/07/2015 18:31:16] Redémarrage du service BITS..... [30/07/2015 18:31:16] BITS Service Redémarré. [30/07/2015 18:31:18] Lancement de la détection des mises à jour de Windows..... [30/07/2015 18:31:18] Réparation Windows Update effectuée... Mises à jour en automatique. [30/07/2015 18:31:56] Ouverture du rapport. Merci pour votre aide

Bonjour, Merci pour votre réponse rapide. Malheureusement, après avoir désactivé Avast (Gestion des agents avast - désactiver définitivement - croix rouge sur l'icone), je ne peux pas télécharger le fichier RepWin.exe j'obtiens le message suivant Bloqué : ce fichier semble contenir un virus ou un logiciel malveillant : Win32.Malware-gen. J'ai essayé de télécharger RepWin.exe en mode sans échec (compliqué avec windows 8.1) mais je n'ai plus de connexion internet avec ce mode Je reste à votre écoute Merci beaucoup

Depuis hier mon PC de bureau (Windows 8.1 famille 64 bits x64 - Intel® Core i7-4770 CPU 3,40GHz RAM:16GO tente de mettre à jour Windows 10. Windows update a tenté 4 fois d'installer Windows 10. Ces tentatives se sont soldées par des échecs. Maintenant lorsque je tente de rechercher des mises à jour par windows update, apparait un code d'erreur 80244019. J'ai recherché des virus et autres malwares par ADWCleaner, ZHPCleaner, ZHPDiag, Malware antimalware et l'antivirus gratuit d'Avast : il n'est retrouvé aucun élément suspect. Comment reinitialiser windows update sans faire de bétise. A signaler qu'à la racine de C: il existe un fichier $Windows.~BT daté du 29 juillet 2015 à 9:48 dont la taille est de 5,19 Go (5 579 800 046 octets) contenant 16 379 Fichiers, 3 584 Dossiers. La mise à jour de windows 10 sur mon portable Asus s'est parfaitement déroulée.

Je suis vraiment désolé pour la pièce jointe, je croyais avoir bien fait en utilisant l'outil de ZHP Je vous le réadresse par Lien CJoint.com BDgtOA2UIXn Soyez certain que je suis très attentif à vos demandes. Merci encore

Merci de me prendre en charge. J'ai donc désinstallé Java™ 7 Update 3 par ajouter/supprimer des programmes puis j'ai effectué AdwCleaner > suppression dont je colle le résultat : # AdwCleaner v1.501 - Rapport créé le 06/04/2012 à 18:46:16 # Mis à jour le 04/03/2012 par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : Docteur LANGERON - BUREAU01 # Exécuté depuis : C:\Documents and Settings\Docteur LANGERON\Bureau\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\Documents and Settings\Docteur LANGERON\Application Data\pdfforge ***** [H. Navipromo] ***** ***** [Registre] ***** Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.DllInfo Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDF Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFEncryptor Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFLine Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFText Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.Tools ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v11.0 (fr) Profil : ttgedl75.default Fichier : C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js Supprimée : user_pref("browser.search.defaultthis.engineName", "Protection ZoneAlarm Customized Web Search"); ************************* AdwCleaner[s1].txt - [1360 octets] - [06/04/2012 18:46:16] ########## EOF - C:\AdwCleaner[s1].txt - [1488 octets] ########## Ceci pose un problème car en supprimant les clés de pdforge, PdfCréator que j'utilise beaucoup ne fonctionne plus. D'autre part je vous adresse le fichier ZHP Diag.txt à l'aide du lien de Cjoint : pjjoint.malekal.com - Submit a file Merci beaucoup

Bonjour Monsieur, Je suis vraiment désolé, navré d'avoir encore recours à vos services. Malgré mes précautions mon ordinateur présente une nouvelle infection. Pour résumer, il y a quelques jours Malwarebytes Anti-Malware a découvert une infection par Erazeo qu'il a supprimé en le mettant en quarantaine (j'ai ensuite supprimé le fichier en quarantaine). Puis en effectuant ZHP Diag j'ai découvert une infection par " workgroupcrawler " et par PUP.dealio. L'analyse du fichier ZHP Diag semble montrer une importante infection ! Je n'ai pas noté de signes particuliers en dehors d'un démarrage un peu plus lent et l'afflux de courriels non sollicités. Je colle Security Check (qui signale Firefox non à jour alors qu'il est) et ZHP Diag que vous trouverez avec le lien : pjjoint.malekal.com - Submit a file Results of screen317's Security Check version 0.99.28 Windows XP Service Pack 3 x86 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: avast! Free Antivirus Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: SpywareBlaster 4.6 Secunia PSI (2.0.0.4003) CCleaner Eusing Free Registry Cleaner EasyCleaner Java 6 Update 31 Java 7 Update 3 Adobe Flash Player 11.2.202.228 Adobe Reader X (10.1.2) Mozilla Firefox (11.0.) Firefox out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast avastUI.exe ``````````End of Log```````````` Encore une fois merci de me prendre en charge. Très cordialement Jean-Luc

Merci de votre célérité et de votre gentillesse. Encore une fois tout est bien qui fini bien. Vous parler de box, je n'en ai pas, j'ai un vieux modem qui me satisfait parfaitement pour le moment. Alors quid d'une protection supplémentaire... Très cordialement. Jean-Luc Comment fait-on pour indiquer que le problème est résolu ?

Je vous remercie beaucoup. Apparemment je suis débarrassé de ce malware qui semble t-il ait chargé deux fois - eh oui c'est la 2e fois que je suis infecté par AskTB - en mettant à jour pdfcreator sur Sourceforge. Et pourtant je fais attention ! Peut-on utiliser adwcleaner sans danger pour s'en débarrasser ? Vous me signalez que SpywareBlaster n'est actif qu'avec IE pourtant il existe un onglet Firefox. Je suis protégé par Avast gratuit et le parefeu de Windows. J'ai essayé Zone Alarm mais il ne semble pas compatible avec ma configuration. Important ralentissement et actions intempestives... Que me proposez vous ? Malwarebytes' Anti-Malware ne détecte que peu d'infections (AskTB n'a pas été découvert). Merci de votre réponse. Très cordialement Jean-Luc

Bonjour, Merci de prendre en charge mon problème de malware. Comme vous me l'avez demandé j'ai relancez AdwCleaner avec droits administrateur et Cliqué sur Suppression. Ci dessous le rapport C:\AdwCleaner[s1].txt --------------------------------------------- # AdwCleaner v1.319 - Rapport créé le 24/11/2011 à 11:22:06 # Mis à jour le 20/11/11 à 11h par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : Docteur LANGERON - BUREAU01 (Administrateur) # Exécuté depuis : C:\Documents and Settings\Docteur LANGERON\Bureau\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} ***** [Registre] ***** Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.DllInfo Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDF Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFEncryptor Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFLine Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFText Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.Tools ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v8.0 (fr) Profil : ttgedl75.default Fichier : C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js Supprimée : user_pref("extensions.asktb.cbid", "QK"); Supprimée : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&[...] Supprimée : user_pref("extensions.asktb.dtid", "YYYYYYYYFR"); Supprimée : user_pref("extensions.asktb.first-launch", true); Supprimée : user_pref("extensions.asktb.first-launch-url", "hxxp://www.broderbund.com/jump.jsp?itemID=4769&itemT[...] Supprimée : user_pref("extensions.asktb.fresh-install", false); Supprimée : user_pref("extensions.asktb.l", "dis"); Supprimée : user_pref("extensions.asktb.last-config-req", "1285190460986"); Supprimée : user_pref("extensions.asktb.locale", "fr_FR"); Supprimée : user_pref("extensions.asktb.o", "16145"); Supprimée : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Supprimée : user_pref("extensions.asktb.qsrc", "2871"); Supprimée : user_pref("extensions.asktb.r", "4"); Supprimée : user_pref("extensions.asktb.search-suggestions-enabled", false); ************************* AdwCleaner[R1].txt - [2330 octets] - [24/11/2011 01:22:25] AdwCleaner[s1].txt - [2284 octets] - [24/11/2011 11:22:06] ************************* Dossier Temporaire : 3 dossier(s)et 5 fichier(s) supprimés ########## EOF - C:\AdwCleaner[s1].txt - [2503 octets] ########## Avec tous mes remerciements

Bonjour monsieur, Ayant remarqué un important ralentissement de mon ordinateur j'ai effectué un scan avec ZHP qui a découvert une infection par asktb. Je vous transmets le résultat du scan qui mentionne 13 malwares, par copier coller Rapport de ZHPDiag Je vous joins également un scan effectué avec Adwcleaner qui confirme l'infection. A signaler que Malwarebytes' Anti-Malware ne retrouve aucune infection. Avec tous mes remerciements. Très cordialement. ---------------------------------- # AdwCleaner v1.319 - Rapport créé le 24/11/2011 à 01:22:25 # Mis à jour le 20/11/11 à 11h par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : Docteur LANGERON - BUREAU01 (Administrateur) # Exécuté depuis : C:\Documents and Settings\Docteur LANGERON\Bureau\adwcleaner.exe # Option [Recherche] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Présent : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} ***** [Registre] ***** Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.DllInfo Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDF Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFEncryptor Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFLine Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFText Clé Présente : HKLM\SOFTWARE\Classes\pdfforge.Tools ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v8.0 (fr) Profil : ttgedl75.default Fichier : C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js Présente : user_pref("extensions.asktb.cbid", "QK"); Présente : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&[...] Présente : user_pref("extensions.asktb.dtid", "YYYYYYYYFR"); Présente : user_pref("extensions.asktb.first-launch", true); Présente : user_pref("extensions.asktb.first-launch-url", "hxxp://www.broderbund.com/jump.jsp?itemID=4769&itemT[...] Présente : user_pref("extensions.asktb.fresh-install", false); Présente : user_pref("extensions.asktb.l", "dis"); Présente : user_pref("extensions.asktb.last-config-req", "1285190460986"); Présente : user_pref("extensions.asktb.locale", "fr_FR"); Présente : user_pref("extensions.asktb.o", "16145"); Présente : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Présente : user_pref("extensions.asktb.qsrc", "2871"); Présente : user_pref("extensions.asktb.r", "4"); Présente : user_pref("extensions.asktb.search-suggestions-enabled", false); ************************* AdwCleaner[R1].txt - [2201 octets] - [24/11/2011 01:22:25] ########## EOF - C:\AdwCleaner[R1].txt - [2329 octets] ########## -édit- Bonjour Docteur, Dans cette section, il ne faut multiplier les messages dans ton sujet avant qu'il ne soit pris en charge : au vu de la présence de « réponses », les helpers ne s'y intéresseront pas, croyant le problème pris en mains par l'un des leurs… Rapport ZHPDiag : voilà typiquement un rapport qu'il est dangereux de coller directement dans un message, au risque de bloquer le sujet (à cause des limites du gestionnaire de forum IPB 3.1), donc de le rendre inaccessible. Il est donc préférable de faire héberger de tels rapports, par exemple chez . C'est ce que j'ai fait avec le tien

Merci de votre aide, le fonctionnement de mon ordinateur est beaucoup plus fluide Après le nouveau passage de OTL, ZHPDiag ne semble plus trouver d'infection (voir liste jointe) Deux petites questions pour finir : - le nettoyage de l'ordinateur a supprimé l'extension de Firefox : Web Developer qui me sert à vérifier les pages htm du site de vélo dont je m'occupe. Puis je la réinstaller sans danger ? - Quelle est l'utilité de Spybot - Search & Destroy que j'utilise depuis de longues années en association avec SpywareBlaster et Malwarebytes' Anti-Malware ? A signaler que la toolbar ask.com s'était installée insidieusement au cours de la dernière mise à jour de pdfcreator sur Sourceforge ... Très amicalement et surtout un immense merci. Rapport de ZHPDiag v1.27.1511 par Nicolas Coolman, Update du 24/01/2011 Run by Docteur LANGERON at 28/01/2011 10:01:07 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut) ---\\ System Information Windows XP Professional Service Pack 3 (Build 2600) Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (46% free) System Restore: Activé (Enable) System drive C: has 34 GB (45%) free of 75 GB ---\\ Logged in mode Computer Name: BUREAU01 User Name: Docteur LANGERON All Users Names: SUPPORT_388945a0, IWAM_BUREAU01, IUSR_BUREAU01, HelpAssistant, Docteur LANGERON, ASPNET, Administrateur, Unselected Option: None Logged in as Administrator ---\\ Environnement Variables %AppData%=%USERPROFILE%\Application Data %LocalAppData%=%USERPROFILE%\Local Settings\Application Data %StartMenu%=%USERPROFILE%\Menu Démarrer ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 34 Go of 75 Go) D:\ CD-ROM drive (Not Inserted) E:\ CD-ROM drive (Not Inserted) F:\ Hard drive, Flash drive, Thumb drive (Free 16 Go of 19 Go) G:\ Hard drive, Flash drive, Thumb drive (Free 462 Go of 466 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\Windows\Explorer.exe [1037824] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\Winlogon.exe [512000] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\atapi.sys [96512] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\ntfs.sys [574976] ---\\ Processus lancés [MD5.25FB74EABCE5EC7836BA3CFB3C58449A] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384] [MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104] [MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - (.Microsoft Corporation - Services Internet (IIS).) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872] [MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.7198BBFBE46C0070257278C536386687] - (.Secunia - Secunia PSI Agent.) -- C:\Program Files\Secunia\PSI\PSIA.exe [993848] [MD5.D2FCA567F9BE87E29B9A9FA32FFE79CA] - (.Secunia - Secunia Update Agent.) -- C:\Program Files\Secunia\PSI\sua.exe [399416] [MD5.50F22575C0FB5D85A9D41EF963610C32] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\System32\tcpsvcs.exe [19456] [MD5.45A0772A49914786AD64471205938CE9] - (.Microsoft Corporation - Service SNMP.) -- C:\WINDOWS\System32\snmp.exe [33280] [MD5.949B71704FD641F3CC058F498BBA6E3B] - (.WDC - WD Drive Manager Service.) -- C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400] [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3396624] [MD5.D322AEEBDB406D85F752CB5615F51960] - (.Pas de propriétaire - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962660] [MD5.D179E1DE532C903AB1D57A4E81342F40] - (.Secunia - Secunia PSI Tray.) -- C:\Program Files\Secunia\PSI\psi_tray.exe [291896] [MD5.81932D4F939244D17B7AFE8E1D5F4E28] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [624128] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G1 - GCS: Preference [user Data\Default] None G0 - GCSP: Preference [user Data\Default][HomePage] Google ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk . (.Pas de propriétaire.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi_tray.exe ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Baseline Security Analyzer 2.2.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Baseline Security Analyzer 2\mbsa.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Secunia PSI.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk . (.Pas de propriétaire.) -- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) - (.not file.) - file:\\C:\WINDOWS\Java\classes\dajava.cab O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241627464750 O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CS1\Services\Tcpip\..\{AC038FB4-9390-4C0E-A182-22514E560A4F}: NameServer = 80.10.246.1 81.253.149.2 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (Ati HotKey Poller) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: (gupdate1c9dba399512e1a) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files\Secunia\PSI\PSIA.exe O23 - Service: (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files\Secunia\PSI\sua.exe O23 - Service: (WDBtnMgrSvc.exe) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{9E8113EC-34EE-46BE-99BF-553D3CABC91A}.job ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (lusbaudio) . (.Microsoft Corporation - Sound Driver.) - C:\Windows\System32\drivers\OVSound2.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\processr.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: (wdmaud) . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) - C:\Windows\System32\drivers\wdmaud.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\Windows\System32\DRIVERS\tcpip6.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA} O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Brother HL-5240 - (.Brother.) [HKLM] -- {FC85DBFD-4BD4-4306-9929-0AFF31594372} O42 - Logiciel: C-Media WDM Audio Driver - (.Pas de propriétaire.) [HKLM] -- C-Media Audio Driver O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Ciel Paye 14.20 - (.CIEL.) [HKLM] -- {615E501A-7F7E-433C-979E-830D2B911FA3} O42 - Logiciel: Creative Commons Add-in for Microsoft Office - (.Microsoft Corporation..) [HKLM] -- {EC719582-B6B4-436A-922B-67094106AB81} O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Diagnostic Sésam Vitale - (.Pas de propriétaire.) [HKLM] -- Diagnostic Sésam Vitale O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D} O42 - Logiciel: ExamDiff 1.8 - (.PrestoSoft.) [HKLM] -- ExamDiff_is1 O42 - Logiciel: Gimp Pack Mode 2.6.2 - (.Association Mode.) [HKLM] -- Gimp Pack Mode_is1 O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {C768790F-04FB-11E0-9B2C-001AA037B01E} O42 - Logiciel: HP Imaging Device Functions 9.0 - (.HP.) [HKLM] -- HP Imaging Device Functions O42 - Logiciel: HP OCR Software 9.0 - (.HP.) [HKLM] -- HPOCR O42 - Logiciel: HP Photosmart All-In-One Software 9.0 - (.HP.) [HKLM] -- {D64BC2CF-0F12-47d7-B412-B4F3FD684253} O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC} O42 - Logiciel: HP Solution Center 9.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: IIS UrlScan Tool 2.0 (Uninstall) - (.Pas de propriétaire.) [HKLM] -- IisUrlScan O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView O42 - Logiciel: Java 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF} O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player O42 - Logiciel: Logiciel Médical RM Ingénierie - (.RM Ingénierie.) [HKLM] -- {26D777D4-E8AA-46A3-BFBA-83A03090CFCB} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Macromedia Dreamweaver 3 Fr - (.Macromedia.) [HKLM] -- Macromedia Dreamweaver 3 Fr O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128} O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Baseline Security Analyzer 2.2 - (.Microsoft Corporation.) [HKLM] -- {13CD417D-F1F1-4AC4-945D-FDDEB884756F} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft GIF Animator - (.Pas de propriétaire.) [HKLM] -- GIF Animator O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007 O42 - Logiciel: Microsoft Office 2003 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {91490409-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Small Business Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {91CA040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Module Français pour Irfanview version 4.27 - (.jfm.) [HKLM] -- Module Français pour Irfanview version 4.27 O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13) O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Paint Shop Pro 6.0 (CD-ROM) - (.Pas de propriétaire.) [HKLM] -- Paint Shop Pro 6.0 O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 O42 - Logiciel: Polar Precision Performance SW 3.0 - (.Pas de propriétaire.) [HKLM] -- Polar Precision Performance SW 3.0 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller O42 - Logiciel: SAGEM F@st 800-840 - (.Pas de propriétaire.) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F} O42 - Logiciel: Secunia PSI (2.0.0.3001) - (.Pas de propriétaire.) [HKLM] -- Secunia PSI O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473 O42 - Logiciel: Skype™ 5.1 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8} O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster_is1 O42 - Logiciel: Série+4000 - (.Pas de propriétaire.) [HKLM] -- Série+4000 O42 - Logiciel: Toolbar Uninstaller 1.0.0.1 - (.Decomputeur.nl.) [HKLM] -- Toolbar Uninstaller_is1 O42 - Logiciel: Total Commander (Remove or Repair) - (.Ghisler Software GmbH.) [HKLM] -- Totalcmd O42 - Logiciel: Télétrans sécurisée - (.Pas de propriétaire.) [HKLM] -- Télétrans sécurisée O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VC 9.0 Runtime - (.Check Point Software Technologies Ltd.) [HKLM] -- {02E89EFC-7B07-4D5A-AA03-9EC0902914EE} O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B} O42 - Logiciel: WD Drive Manager (x86) - (.Western Digital.) [HKLM] -- {813EE1F0-D251-4F98-AC91-9B98CF22717E} O42 - Logiciel: Wanadoo ADSL ECI USB - (.Pas de propriétaire.) [HKLM] -- {C7B39B40-52C3-11D4-AFCE-00E0B8138A4A} O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52} O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1 O42 - Logiciel: Zune Desktop Theme - (.Microsoft Corporation.) [HKLM] -- {7E20EFE6-E604-48C6-8B39-BA4742F2CDB4} O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5 O42 - Logiciel: dBpoweramp Music Converter - (.Illustrate.) [HKLM] -- dBpoweramp Music Converter O42 - Logiciel: dBpoweramp Windows Media Audio 10 Codec - (.Illustrate.) [HKLM] -- dBpoweramp Windows Media Audio 10 Codec O42 - Logiciel: memDOC 3.5.1 - (.Pas de propriétaire.) [HKLM] -- memDOC 3.5.1_is1 ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\ALWIL Software] [HKCU\Software\Adobe] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Applications WinDev] [HKCU\Software\BVRP Software] [HKCU\Software\Borland] [HKCU\Software\Brother] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\GIP-CPS] [HKCU\Software\Gadwin Systems] [HKCU\Software\Ghisler] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\Illustrate] [HKCU\Software\Intel] [HKCU\Software\Iris] [HKCU\Software\JASC] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Lavalys] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\NirSoft] [HKCU\Software\Novell] [HKCU\Software\ODBC] [HKCU\Software\ORL] [HKCU\Software\PDFCreator] [HKCU\Software\Pc Soft] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PrestoSoft] [HKCU\Software\RMIngénierie] [HKCU\Software\RMinformatique] [HKCU\Software\SCC] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Sage] [HKCU\Software\Secunia] [HKCU\Software\Sensaura] [HKCU\Software\Siemens] [HKCU\Software\Skype] [HKCU\Software\Sonic Desktop Software] [HKCU\Software\Sysinternals] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VOB] [HKCU\Software\VSRevoGroup] [HKCU\Software\Wget] [HKLM\Software\781] [HKLM\Software\ALWIL Software] [HKLM\Software\ATI Technologies] [HKLM\Software\Adobe] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Borland] [HKLM\Software\Brother] [HKLM\Software\C07ft5Y] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DivXNetworks] [HKLM\Software\ECI] [HKLM\Software\GIMP_Back_Mode] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\Hewlett-Packard] [HKLM\Software\Identification] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\NSCPID] [HKLM\Software\ODBC] [HKLM\Software\OldTimer Tools] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RMinformatique] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Sage] [HKLM\Software\Schlumberger] [HKLM\Software\Secunia] [HKLM\Software\Skype] [HKLM\Software\SpywareBlaster] [HKLM\Software\Swearware] [HKLM\Software\SymNRT] [HKLM\Software\WebUpdate] [HKLM\Software\Western Digital] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\XnView] [HKLM\Software\analog devices] [HKLM\Software\mozilla.org] [HKLM\Software\sagem] ---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 23/12/2010 - 19:33:56 ----D- C:\Program Files\7-Zip O43 - CFD: 31/12/2010 - 12:22:40 ----D- C:\Program Files\Adobe O43 - CFD: 23/01/2010 - 17:50:26 ----D- C:\Program Files\Alwil Software O43 - CFD: 11/06/2010 - 09:35:40 ----D- C:\Program Files\Apple Software Update O43 - CFD: 18/11/2010 - 10:18:04 ----D- C:\Program Files\AxBx O43 - CFD: 06/09/2007 - 23:34:16 ----D- C:\Program Files\Axis Communications O43 - CFD: 16/05/2009 - 11:15:06 ----D- C:\Program Files\Axon Data O43 - CFD: 09/07/2009 - 09:58:46 ----D- C:\Program Files\Brother O43 - CFD: 09/07/2009 - 09:59:24 ----D- C:\Program Files\Brownie O43 - CFD: 10/01/2011 - 13:52:26 ----D- C:\Program Files\CCleaner O43 - CFD: 05/06/2008 - 21:59:06 ----D- C:\Program Files\Cegedim O43 - CFD: 16/10/2008 - 14:07:08 ----D- C:\Program Files\CIEL O43 - CFD: 20/02/2004 - 12:33:22 ----D- C:\Program Files\Common Files O43 - CFD: 20/02/2004 - 11:10:30 ----D- C:\Program Files\ComPlus Applications O43 - CFD: 03/01/2011 - 17:31:14 ----D- C:\Program Files\Defraggler O43 - CFD: 03/10/2010 - 16:22:08 ----D- C:\Program Files\ExamDiff O43 - CFD: 26/01/2011 - 10:05:06 ----D- C:\Program Files\Fichiers communs O43 - CFD: 01/09/2010 - 13:03:44 ----D- C:\Program Files\Fonction Sesam Vitale O43 - CFD: 27/12/2010 - 19:18:28 ----D- C:\Program Files\Gimp Pack Mode O43 - CFD: 17/01/2011 - 15:19:10 ----D- C:\Program Files\Glary Utilities O43 - CFD: 13/08/2010 - 20:47:04 ----D- C:\Program Files\Google O43 - CFD: 09/07/2009 - 10:36:42 ----D- C:\Program Files\Hewlett-Packard O43 - CFD: 09/07/2009 - 10:38:08 ----D- C:\Program Files\HP O43 - CFD: 22/09/2010 - 14:47:56 ----D- C:\Program Files\Illustrate O43 - CFD: 09/07/2009 - 09:58:10 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 15/12/2010 - 18:42:06 ----D- C:\Program Files\Internet Explorer O43 - CFD: 11/06/2010 - 08:35:56 ----D- C:\Program Files\IrfanView O43 - CFD: 16/08/2010 - 16:22:44 ----D- C:\Program Files\Java O43 - CFD: 28/01/2010 - 17:01:14 ----D- C:\Program Files\Macromedia O43 - CFD: 25/01/2011 - 23:00:44 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 07/07/2009 - 09:15:52 ----D- C:\Program Files\memDOC O43 - CFD: 04/05/2009 - 12:10:04 ----D- C:\Program Files\Messenger O43 - CFD: 11/10/2010 - 13:05:44 ----D- C:\Program Files\Microsoft Baseline Security Analyzer 2 O43 - CFD: 21/02/2004 - 07:19:34 ----D- C:\Program Files\microsoft frontpage O43 - CFD: 15/11/2010 - 09:44:36 ----D- C:\Program Files\Microsoft GIF Animator O43 - CFD: 28/08/2009 - 11:07:52 ----D- C:\Program Files\Microsoft Office O43 - CFD: 23/01/2010 - 19:04:44 ----D- C:\Program Files\Microsoft Office Creative Commons Add-in O43 - CFD: 11/12/2008 - 19:22:34 ----D- C:\Program Files\Microsoft Sites publics français O43 - CFD: 21/12/2010 - 17:17:10 ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 04/05/2009 - 13:29:40 ----D- C:\Program Files\Microsoft.NET O43 - CFD: 10/08/2010 - 22:15:58 ----D- C:\Program Files\Movie Maker O43 - CFD: 06/10/2007 - 15:47:50 ----D- C:\Program Files\Mozilla ActiveX Control v1.7.12 O43 - CFD: 27/01/2011 - 11:55:52 ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 31/03/2009 - 10:58:08 ----D- C:\Program Files\MSBuild O43 - CFD: 02/12/2010 - 09:44:46 ----D- C:\Program Files\MSECache O43 - CFD: 17/05/2008 - 18:49:06 ----D- C:\Program Files\msn O43 - CFD: 04/05/2009 - 10:21:28 ----D- C:\Program Files\msn gaming zone O43 - CFD: 16/11/2006 - 20:48:52 ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 17/05/2008 - 18:45:06 ----D- C:\Program Files\NetMeeting O43 - CFD: 31/12/2010 - 10:42:52 ----D- C:\Program Files\NOS O43 - CFD: 09/01/2011 - 19:50:12 ----D- C:\Program Files\Notepad++ O43 - CFD: 15/12/2010 - 18:33:28 ----D- C:\Program Files\Outlook Express O43 - CFD: 12/12/2010 - 07:34:08 ----D- C:\Program Files\Paint Shop Pro 6 O43 - CFD: 07/01/2011 - 14:32:10 ----D- C:\Program Files\PDFCreator O43 - CFD: 08/12/2010 - 10:13:30 ----D- C:\Program Files\PhotoFiltre O43 - CFD: 10/02/2010 - 11:49:32 ----D- C:\Program Files\Polar O43 - CFD: 13/12/2010 - 14:15:58 ----D- C:\Program Files\QuickTime O43 - CFD: 03/01/2011 - 17:29:08 ----D- C:\Program Files\Recuva O43 - CFD: 02/05/2010 - 21:32:20 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 04/12/2009 - 12:31:50 ----D- C:\Program Files\RegCleaner O43 - CFD: 19/02/2006 - 12:53:08 ----D- C:\Program Files\SAGEM O43 - CFD: 17/01/2011 - 14:34:20 ----D- C:\Program Files\Secunia O43 - CFD: 13/01/2011 - 09:35:58 ----D- C:\Program Files\Services en ligne O43 - CFD: 11/08/2010 - 09:17:46 ----D- C:\Program Files\sesam O43 - CFD: 16/01/2011 - 12:40:24 R---D- C:\Program Files\Skype O43 - CFD: 12/11/2009 - 16:59:46 ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 23/01/2011 - 12:01:22 ----D- C:\Program Files\SpywareBlaster O43 - CFD: 03/07/2009 - 13:43:30 ----D- C:\Program Files\ToniArts O43 - CFD: 12/01/2011 - 17:26:24 ----D- C:\Program Files\Toolbar Uninstaller O43 - CFD: 02/07/2004 - 23:02:18 --H-D- C:\Program Files\Uninstall Information O43 - CFD: 02/05/2009 - 08:45:08 ----D- C:\Program Files\VS Revo Group O43 - CFD: 24/02/2010 - 18:02:54 ----D- C:\Program Files\Western Digital O43 - CFD: 28/01/2010 - 16:49:24 ----D- C:\Program Files\Western Digital Technologies O43 - CFD: 13/03/2010 - 09:24:48 ----D- C:\Program Files\Windows Installer Clean Up O43 - CFD: 06/05/2009 - 16:09:52 ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD: 16/05/2009 - 10:02:58 ----D- C:\Program Files\Windows Media Player O43 - CFD: 02/05/2009 - 10:03:14 ----D- C:\Program Files\Windows NT O43 - CFD: 24/09/2008 - 22:22:44 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 20/04/2006 - 23:22:52 --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 20/02/2004 - 11:13:56 ----D- C:\Program Files\xerox O43 - CFD: 28/09/2010 - 09:27:22 ----D- C:\Program Files\XnView O43 - CFD: 28/01/2011 - 10:01:18 ----D- C:\Program Files\ZHPDiag O43 - CFD: 31/07/2004 - 08:58:00 ----D- C:\Program Files\Common Files\System O43 - CFD: 22/09/2010 - 14:48:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AccurateRip O43 - CFD: 31/12/2010 - 18:01:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Adobe O43 - CFD: 12/06/2006 - 06:48:32 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AdobeUM O43 - CFD: 13/08/2010 - 14:40:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Apple Computer O43 - CFD: 02/07/2007 - 11:06:44 R---D- C:\Documents and Settings\Docteur LANGERON\Application Data\Brother O43 - CFD: 05/11/2008 - 20:00:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 22/09/2010 - 15:21:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\dBpoweramp O43 - CFD: 24/02/2010 - 17:14:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Download Manager O43 - CFD: 06/07/2009 - 09:44:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\ESTsoft O43 - CFD: 26/01/2010 - 15:05:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GHISLER O43 - CFD: 11/01/2011 - 09:45:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GlarySoft O43 - CFD: 25/09/2006 - 17:51:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Google O43 - CFD: 17/01/2011 - 10:28:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\gtk-2.0 O43 - CFD: 20/02/2004 - 13:35:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Help O43 - CFD: 30/07/2008 - 22:26:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HP O43 - CFD: 10/04/2009 - 15:35:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HPAppData O43 - CFD: 29/06/2010 - 18:35:58 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HpUpdate O43 - CFD: 21/02/2004 - 12:13:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Identities O43 - CFD: 24/01/2011 - 11:10:36 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Macromedia O43 - CFD: 09/04/2009 - 09:08:24 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Malwarebytes O43 - CFD: 31/12/2010 - 18:01:04 -S--D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft O43 - CFD: 25/01/2010 - 11:42:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Corporation O43 - CFD: 21/02/2004 - 07:13:12 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Web Folders O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla O43 - CFD: 04/09/2004 - 16:29:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\MSN6 O43 - CFD: 19/05/2009 - 18:32:50 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\OfficeUpdate12 O43 - CFD: 08/12/2010 - 10:13:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\PhotoFiltre O43 - CFD: 16/01/2011 - 19:55:14 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Skype O43 - CFD: 31/03/2009 - 09:03:34 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Sun O43 - CFD: 23/01/2011 - 14:23:10 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\U3 O43 - CFD: 31/08/2010 - 13:19:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\VSRevoGroup O43 - CFD: 24/02/2010 - 18:34:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\WD O43 - CFD: 24/01/2011 - 11:28:18 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\XnView ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.C7C21C26190600F28FEFFC2865DBF09E] - 28/01/2011 - 09:54:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [13868] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/01/2011 - 09:54:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:53:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1726806] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:52:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [237] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:52:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [0] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 28/01/2011 - 09:52:07 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.04F568F29DB387A9BC4B84DB7BD1DE71] - 28/01/2011 - 09:52:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT [267800] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:50:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [4932] O44 - LFC:[MD5.78ACB0E002999EAAB76DD11FA0E8BB8D] - 27/01/2011 - 20:02:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.31FAC467141BED800838AD335B6EB477] - 26/01/2011 - 10:15:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ComboFix.txt [23725] O44 - LFC:[MD5.E9EE6F21F3311E440286FB99B1B0F9CF] - 26/01/2011 - 10:08:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [246] O44 - LFC:[MD5.8EA62145D76D8F2AC09555F7035194D4] - 26/01/2011 - 09:58:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Boot.bak [212] O44 - LFC:[MD5.2F83A627FD57B5802FA6062E785740EB] - 26/01/2011 - 09:58:40 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [328] O44 - LFC:[MD5.48C65662EC81FBCAA110509F50C51497] - 26/01/2011 - 09:58:35 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\cmldr [263488] O44 - LFC:[MD5.AE72E8619CB31D84DA25E2435E55003C] - 26/01/2011 - 09:54:28 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [31232] O44 - LFC:[MD5.9DAA7218961710008D7385B01BD3F386] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MBR.exe [89088] O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\PEV.exe [256512] O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\grep.exe [80412] O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\sed.exe [98816] O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\zip.exe [68096] O44 - LFC:[MD5.01D95A1F8CF13D07CC564AABB36BCC0B] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [161792] O44 - LFC:[MD5.B7517DB073B28F5696A1E5528ABEB5D0] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [136704] O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480] O44 - LFC:[MD5.98F205D859DCA7707488399CC55E9900] - 25/01/2011 - 22:22:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wininit.ini [755] O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\BDEADMIN.CPL [183808] O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\DBCLIENT.DLL [210032] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\Msft_Kernel_nielprt_01007.Wdf [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf [0] O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 16/01/2011 - 16:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT [3121] O44 - LFC:[MD5.976AD1B5891D4663EB41BC12702415A4] - 13/01/2011 - 18:43:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pbcb.inf [16] O44 - LFC:[MD5.2818237D7004CB68AE6CEBDCBD05186E] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [188216] O44 - LFC:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [294608] O44 - LFC:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [47440] O44 - LFC:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [100176] O44 - LFC:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [94544] O44 - LFC:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23632] O44 - LFC:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [29392] O44 - LFC:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [17744] O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 07/01/2011 - 14:31:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224] O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 31/12/2010 - 21:06:36 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [38848] ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.602B0812D9FDF94725E420C75C1FB821] - 23/01/2011 - 19:16:17 ---A- - C:\WINDOWS\Prefetch\I_VIEW32.EXE-38F9F646.pf O45 - LFCP:[MD5.48BA13EA6E85F7F82E8B265BBCDC0151] - 27/01/2011 - 10:19:10 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf O45 - LFCP:[MD5.7D911FB9D1B5D69B472636A4D98DDE0C] - 27/01/2011 - 11:57:39 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf O45 - LFCP:[MD5.8BF676BA32592A06552BFA509C62212E] - 27/01/2011 - 12:01:42 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf O45 - LFCP:[MD5.7F4BE13250E5BD58A855247EDA10A828] - 27/01/2011 - 12:06:02 ---A- - C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf O45 - LFCP:[MD5.8DB2C1540F29A18CC09FB457497EECDA] - 27/01/2011 - 12:12:54 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf O45 - LFCP:[MD5.3AC521A65F5FA1D2DE643F8E05945ABD] - 27/01/2011 - 12:12:56 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf O45 - LFCP:[MD5.FF53816E7B585AA2B439C831A7DFB4EC] - 27/01/2011 - 14:05:35 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf O45 - LFCP:[MD5.166AE38EA5BD5B1BBFC1ABCFC32D2A6E] - 27/01/2011 - 15:13:50 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf O45 - LFCP:[MD5.D1BAF620048DFE5FB3A1A2C7483D0F94] - 27/01/2011 - 15:16:58 ---A- - C:\WINDOWS\Prefetch\PSI.EXE-18FF3F5A.pf O45 - LFCP:[MD5.8925C33E0EE9D765575FA603E3B1DE73] - 27/01/2011 - 16:45:10 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf O45 - LFCP:[MD5.DD2AFDBFF8B795D4EA24C164156CFFDB] - 27/01/2011 - 18:28:36 ---A- - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-39EC5E32.pf O45 - LFCP:[MD5.8C1FD4640D80B1118E030362186EBA4C] - 27/01/2011 - 19:36:11 ---A- - C:\WINDOWS\Prefetch\Layout.ini O45 - LFCP:[MD5.816E1A1BC6159978EA7379E6D106D1AB] - 27/01/2011 - 19:42:17 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-145A81D9.pf O45 - LFCP:[MD5.DE58EB2E3035044F16E4D9E76446F32D] - 27/01/2011 - 19:51:41 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1724081C.pf O45 - LFCP:[MD5.6E486109BFE833DBCC67C619BD8458C5] - 27/01/2011 - 20:02:21 ---A- - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf O45 - LFCP:[MD5.3D2CA0DABCB052CAEBB747CA35976B9E] - 27/01/2011 - 20:02:58 ---A- - C:\WINDOWS\Prefetch\UNINS000.EXE-00890270.pf O45 - LFCP:[MD5.18790ABDE9DDC43CD491C9F0040FA9EB] - 27/01/2011 - 20:03:20 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-300CF922.pf O45 - LFCP:[MD5.FCB8DEFFF6240D0E37C846FF4B8CD33D] - 27/01/2011 - 20:05:04 ---A- - C:\WINDOWS\Prefetch\ZHPFIX.EXE-3A07CBCA.pf O45 - LFCP:[MD5.23793C8AA525B65DC2B3E956E86EF364] - 27/01/2011 - 20:05:16 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf O45 - LFCP:[MD5.7B8B2AD9916E0B3D0E4867CE4D818F9F] - 27/01/2011 - 20:12:49 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf O45 - LFCP:[MD5.B8100F4FDC0C225F84CD8A2D0605D0AD] - 27/01/2011 - 20:13:55 ---A- - C:\WINDOWS\Prefetch\XNVIEW.EXE-18AD42DD.pf O45 - LFCP:[MD5.8BF5DEA7DAE87FC10D9AAC20354723C3] - 27/01/2011 - 20:14:11 ---A- - C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-00101112.pf O45 - LFCP:[MD5.1D1E492BEB3D99DA1FD5F62939DCB222] - 28/01/2011 - 09:34:44 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf O45 - LFCP:[MD5.F18B5938920EBC94FBC67DB012DAFD3B] - 28/01/2011 - 09:34:59 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf O45 - LFCP:[MD5.3998438193945BFF15CA77A3AAF82B47] - 28/01/2011 - 09:35:17 ---A- - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf O45 - LFCP:[MD5.B39E223D02BCE35BC37C8535741667A2] - 28/01/2011 - 09:35:44 ---A- - C:\WINDOWS\Prefetch\SUA.EXE-1D0192FB.pf O45 - LFCP:[MD5.813EAFDF647F5225EFC38565688C9E46] - 28/01/2011 - 09:37:10 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf O45 - LFCP:[MD5.7525354811D2ED9E7AE1CC8A1374180A] - 28/01/2011 - 09:42:06 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-01FBC16A.pf O45 - LFCP:[MD5.0028FAB2A82E0EF5B31D30BA2CE9B4E2] - 28/01/2011 - 09:46:38 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3BA0187D.pf O45 - LFCP:[MD5.60767D192F7CBDBAB1622B9F43DE38F8] - 28/01/2011 - 09:47:00 ---A- - C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf O45 - LFCP:[MD5.6CBCAD4EA977203186E249F70C9D91A7] - 28/01/2011 - 09:47:17 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-38379543.pf O45 - LFCP:[MD5.F7F79D048E1D65782FBA77905CF220A5] - 28/01/2011 - 09:49:05 ---A- - C:\WINDOWS\Prefetch\OTL.EXE-22076BE9.pf O45 - LFCP:[MD5.08A15639CC2119704955E246B559BF4A] - 28/01/2011 - 09:49:18 ---A- - C:\WINDOWS\Prefetch\IISRESET.EXE-21AD4665.pf O45 - LFCP:[MD5.D9240081FC894AD73EEE1D95BAA6000E] - 28/01/2011 - 09:49:24 ---A- - C:\WINDOWS\Prefetch\IISRSTAS.EXE-002B9FFB.pf O45 - LFCP:[MD5.DF13283A0515794AC83EB76B3D5EF1C1] - 28/01/2011 - 09:50:16 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf O45 - LFCP:[MD5.80F4C2BE8DF6D3E11094713C83E2AE67] - 28/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.6CE962DE7A99C9E323998C93E04122B8] - 28/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf O45 - LFCP:[MD5.BCB94A1B01DF9F1E6166D07C8E405DA4] - 28/01/2011 - 09:54:15 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf O45 - LFCP:[MD5.2996C2DB848C305103CAE6E94899B979] - 28/01/2011 - 09:54:17 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf O45 - LFCP:[MD5.04B068BE7B9FA2AB4ADEBD3995572AFB] - 28/01/2011 - 09:58:40 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf O45 - LFCP:[MD5.E2C1D33C21A60CA0285AD5934C3902F6] - 28/01/2011 - 10:00:04 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-1CBCA997.pf O45 - LFCP:[MD5.5AB7E5F456A298292857DACF0A04D69D] - 28/01/2011 - 10:00:05 ---A- - C:\WINDOWS\Prefetch\DSLMON.EXE-1476FDB3.pf O45 - LFCP:[MD5.98E8C6B771D924CF74EA67521FE458D9] - 28/01/2011 - 10:00:05 ---A- - C:\WINDOWS\Prefetch\PSI_TRAY.EXE-0734975D.pf O45 - LFCP:[MD5.DC81D9B29C9BFE04122A3BEF82A66880] - 28/01/2011 - 10:00:19 ---A- - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf O45 - LFCP:[MD5.DE87D9E805275EA0E9C42A1FA209FAF7] - 28/01/2011 - 10:00:21 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13DA0E71.pf O45 - LFCP:[MD5.3CE35D68A07AD928E6338D08A1ECD32B] - 28/01/2011 - 10:00:21 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1831A4F3.pf O45 - LFCP:[MD5.413F41C84126C4C515B53A116FAA196A] - 28/01/2011 - 10:00:43 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf O45 - LFCP:[MD5.5942AC9667AE1B8070BF457957F4FF10] - 28/01/2011 - 10:01:18 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf O45 - LFCP:[MD5.29057ADB71C858DF14A4CE787578F82B] - 28/01/2011 - 10:01:18 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-0CBF6A11.pf ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" [Disabled] .(.Hewlett-Packard Co. - Embedded Web Server Link application.) -- C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" [Disabled] .(.Hewlett-Packard Co. - HP AiO Fax Manager.) -- C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" [Disabled] .(.Hewlett-Packard Co. - HP OfficeJet SendFax Interface.) -- C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Disabled] .(.Hewlett-Packard Co. - HP All-in-One Launcher Utility.) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Disabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Network Device Rediscovery Service.) -- C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" [Disabled] .(.Pas de propriétaire - hpqscnvw.) -- C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" [Disabled] .(.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" [Disabled] .(.Hewlett-Packard Co. - HP Fax Setup Wizard.) -- C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\SpybotSD TeaTimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"= O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [29392] O58 - SDL:[MD5.2B3B8C0A2C979DD77BA6DC9376074854] - 02/03/2004 - 07:26:58 ---A- . (.Analog Deivces - USB Firmware loader.) -- C:\WINDOWS\system32\drivers\adildr.sys [50007] O58 - SDL:[MD5.D478C566318803A7063B120F026DC0B7] - 02/03/2004 - 07:24:16 ---A- . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\WINDOWS\system32\drivers\adiusbaw.sys [127065] O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [17744] O58 - SDL:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [94544] O58 - SDL:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [100176] O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [23632] O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [294608] O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [47440] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D24DFD16A1E2A76034DF5AA18125C35D] - 01/09/2010 - 09:30:58 ---A- . (.Secunia - Secunia PSI Driver.) -- C:\WINDOWS\system32\drivers\psi_mf.sys [15544] O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 12/05/2008 - 23:06:44 ---A- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\system32\drivers\wdcsam.sys [11520] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.js [0] O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js [10] O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMDocs.sav [36] O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMGrpPrm.sav [54] O61 - LFC:Last File Created 25/01/2011 - 11:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\ReaderMessages [10240] O61 - LFC:Last File Created 25/01/2011 - 12:33:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-25.json [876507] O61 - LFC:Last File Created 25/01/2011 - 14:27:15 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 25/01/2011 - 18:04:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.11 [32456] O61 - LFC:Last File Created 25/01/2011 - 19:58:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt [4554] O61 - LFC:Last File Created 25/01/2011 - 19:58:09 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswBoot.log [2932] O61 - LFC:Last File Created 25/01/2011 - 19:59:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2SM-Global.reg [205] O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [0] O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\History [0] O61 - LFC:Last File Created 25/01/2011 - 22:31:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Ignominie.pdf [228733] O61 - LFC:Last File Created 25/01/2011 - 22:58:24 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\SecurityCheck.exe [879047] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk [784] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk [820] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [796] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [796] O61 - LFC:Last File Created 25/07/2002 - 22:07:36 ----- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Modem Sagem Adsl\SAGEM F@st 800 v3.0.4\tools\ikernel.ex_ [346602] O61 - LFC:Last File Created 26/01/2011 - 09:26:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS2-Docteur LANGERON.reg [85] O61 - LFC:Last File Created 26/01/2011 - 09:26:03 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86] O61 - LFC:Last File Created 26/01/2011 - 09:47:09 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat.bak [10752] O61 - LFC:Last File Created 26/01/2011 - 09:48:12 R--A- C:\Documents And Settings\Docteur LANGERON\Bureau\ComboFix.exe [4160433] O61 - LFC:Last File Created 26/01/2011 - 09:52:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt [496] O61 - LFC:Last File Created 26/01/2011 - 09:53:15 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGCP-Global.reg [114] O61 - LFC:Last File Created 26/01/2011 - 09:53:16 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [347] O61 - LFC:Last File Created 26/01/2011 - 09:53:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDCMD-Docteur LANGERON.reg [0] O61 - LFC:Last File Created 26/01/2011 - 09:55:13 --HA- C:\Documents And Settings\Default User\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 [36753] O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 [114] O61 - LFC:Last File Created 26/01/2011 - 10:14:41 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js.BAK [29242] O61 - LFC:Last File Created 26/01/2011 - 12:33:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws.ori [1944] O61 - LFC:Last File Created 26/01/2011 - 12:51:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws [0] O61 - LFC:Last File Created 26/01/2011 - 12:52:37 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Docteur LANGERON.reg [379] O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Docteur LANGERON.reg [132] O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUNTCVW-Docteur LANGERON.reg [235] O61 - LFC:Last File Created 26/01/2011 - 12:52:39 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDRegT-Global.reg [133] O61 - LFC:Last File Created 26/01/2011 - 13:20:20 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan rapide.txt [51551] O61 - LFC:Last File Created 26/01/2011 - 13:44:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\OTL.exe [602624] O61 - LFC:Last File Created 26/01/2011 - 13:49:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-26.json [876507] O61 - LFC:Last File Created 26/01/2011 - 16:05:59 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBTB1-Docteur LANGERON.reg [4041] O61 - LFC:Last File Created 26/01/2011 - 16:25:54 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [7524] O61 - LFC:Last File Created 26/01/2011 - 16:26:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.log [1955] O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.cache [92] O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.ini [87] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\compreg.dat [147965] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.rdf [850] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\xpti.dat [102368] O61 - LFC:Last File Created 26/01/2011 - 16:57:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Windows\Themes\Custom.theme [5385] O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\CurrScanSet.cfg [44] O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\mru.cfg [1510] O61 - LFC:Last File Created 26/01/2011 - 17:39:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012620110127\index.dat [49152] O61 - LFC:Last File Created 26/01/2011 - 17:39:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS5-Docteur LANGERON.reg [320] O61 - LFC:Last File Created 26/01/2011 - 17:46:27 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk [1757] O61 - LFC:Last File Created 26/01/2011 - 18:08:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1caaaf1c0948ba2-78a1309b.dat [4344] O61 - LFC:Last File Created 26/01/2011 - 18:15:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m44.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:26:44 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\VB11.pip [144] O61 - LFC:Last File Created 26/01/2011 - 18:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Modèle mercredi décembre janvier février.lnk [484] O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Bibliothèque.lnk [775] O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\EUROTOOL.lnk [890] O61 - LFC:Last File Created 26/01/2011 - 18:29:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours du mercredi CVS.lnk [360] O61 - LFC:Last File Created 26/01/2011 - 18:30:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m12.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Parcours du mercredi.lnk [287] O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m45.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Disque amovible (I).lnk [179] O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours CVS.lnk [324] O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Publis11.pip [1672] O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Publisher\pubcmd.dat [2361] O61 - LFC:Last File Created 26/01/2011 - 18:42:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Excel\Excel11.xlb [19277] O61 - LFC:Last File Created 26/01/2011 - 18:42:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Excel11.pip [1628] O61 - LFC:Last File Created 26/01/2011 - 18:48:00 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS1-Docteur LANGERON.reg [81] O61 - LFC:Last File Created 26/01/2011 - 18:50:23 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Docteur LANGERON.reg [226] O61 - LFC:Last File Created 26/01/2011 - 18:50:28 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [227] O61 - LFC:Last File Created 26/01/2011 - 18:50:35 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [332] O61 - LFC:Last File Created 26/01/2011 - 18:50:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [157] O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [608] O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [4850] O61 - LFC:Last File Created 26/01/2011 - 18:54:04 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Overview.ini [0] O61 - LFC:Last File Created 26/01/2011 - 18:57:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:57:49 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 26/01/2011 - 18:58:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\permissions.sqlite [2853888] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [3849] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [1240] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\La_messe.lnk [813] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\temp.lnk [698] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 --H-- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\index.dat [2987] O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\PowerP11.pip [1860] O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\PowerPoint\PPT11.pcb [2196] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [94] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6094433] O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18] O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216] O61 - LFC:Last File Created 26/01/2011 - 20:54:21 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [44156] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Finances Personnelles~.feed-ms [380928] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\La Vie Financière~.feed-ms [385024] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Les Echos - recommandations, conseils et analyses~.feed-ms [352256] O61 - LFC:Last File Created 27/01/2011 - 10:21:34 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Assistant Configuration du réseau.lnk [1640] O61 - LFC:Last File Created 27/01/2011 - 10:30:26 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 10:30:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\4I7I3CKP\oXMLStoreUnit[1].xml [56] O61 - LFC:Last File Created 27/01/2011 - 10:33:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\HP\ScLogs\SolutionCenter.htm [45960] O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558] O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144] O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569] O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142] O61 - LFC:Last File Created 27/01/2011 - 11:54:02 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Patrimoine\Revenu Garantie - Coupons - Abodance Babeth 2011.pdf [104986] O61 - LFC:Last File Created 27/01/2011 - 12:08:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\blocklist.xml [4694] O61 - LFC:Last File Created 27/01/2011 - 12:23:19 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments envoyés.dbx [129892976] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte d'envoi.dbx [191188] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte de réception.dbx [8269040] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Folders.dbx [74720] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Langeron Eric.dbx [294950128] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Offline.dbx [9656] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Pop3uidl.dbx [9404] O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments supprimés.dbx [191188] O61 - LFC:Last File Created 27/01/2011 - 13:00:02 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan des médias amovibles.txt [10979] O61 - LFC:Last File Created 27/01/2011 - 13:21:52 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\HiJackThis.msi [1402880] O61 - LFC:Last File Created 27/01/2011 - 14:05:39 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [5120] O61 - LFC:Last File Created 27/01/2011 - 15:13:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-27.json [876507] O61 - LFC:Last File Created 27/01/2011 - 15:14:30 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 15:18:59 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk [549] O61 - LFC:Last File Created 27/01/2011 - 15:25:31 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Crash Reports\InstallTime20101203075014 [10] O61 - LFC:Last File Created 27/01/2011 - 15:30:17 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\downloads.sqlite [10240] O61 - LFC:Last File Created 27/01/2011 - 16:04:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\tabiconcache.dat [7426] O61 - LFC:Last File Created 27/01/2011 - 16:45:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [8192] O61 - LFC:Last File Created 27/01/2011 - 16:45:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\L'analyse d'Erik Izraelewicz - Blogs - Les Echos~.feed-ms [73728] O61 - LFC:Last File Created 27/01/2011 - 18:20:23 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012720110128\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 19:42:07 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 19:42:20 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{C2504D22-2A26-11E0-A734-4D6564696130}.dat [3584] O61 - LFC:Last File Created 27/01/2011 - 19:42:20 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{2A17F307-2A45-11E0-A735-4D6564696130}.dat [6144] O61 - LFC:Last File Created 27/01/2011 - 20:02:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\webappsstore.sqlite [3072] O61 - LFC:Last File Created 27/01/2011 - 20:02:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cert8.db [196608] O61 - LFC:Last File Created 27/01/2011 - 20:02:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\key3.db [16384] O61 - LFC:Last File Created 27/01/2011 - 20:02:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\localstore.rdf [35275] O61 - LFC:Last File Created 27/01/2011 - 20:15:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\PhotoFiltre\PhotoFiltre.ini [4320] O61 - LFC:Last File Created 27/01/2011 - 20:18:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Recent\Desktop.ini [150] O61 - LFC:Last File Created 27/01/2011 - 20:18:15 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1ca9c53f8705d14-c441f5fd.dat [186864] O61 - LFC:Last File Created 27/01/2011 - 20:18:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\URL.db [2806784] O61 - LFC:Last File Created 28/01/2011 - 09:35:40 ----- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js [28648] O61 - LFC:Last File Created 28/01/2011 - 09:36:38 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat [10206] O61 - LFC:Last File Created 28/01/2011 - 09:37:22 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\formhistory.sqlite [4096] O61 - LFC:Last File Created 28/01/2011 - 09:38:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifierkey3.txt [154] O61 - LFC:Last File Created 28/01/2011 - 09:40:08 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite [1155072] O61 - LFC:Last File Created 28/01/2011 - 09:40:08 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite-journal [0] O61 - LFC:Last File Created 28/01/2011 - 09:41:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Setup.log [886566] O61 - LFC:Last File Created 28/01/2011 - 09:48:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\sessionstore.js [59751] O61 - LFC:Last File Created 28/01/2011 - 09:49:18 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite [7168] O61 - LFC:Last File Created 28/01/2011 - 09:49:18 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite-journal [3608] O61 - LFC:Last File Created 28/01/2011 - 09:49:39 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\selfdef.log [103658] O61 - LFC:Last File Created 28/01/2011 - 09:50:09 -SH-- C:\Documents And Settings\Docteur LANGERON\ntuser.ini [184] O61 - LFC:Last File Created 28/01/2011 - 09:50:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1c91e8e6fac7132-14549e04.dat [5558856] O61 - LFC:Last File Created 28/01/2011 - 09:50:25 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\Log.db [111616] O61 - LFC:Last File Created 28/01/2011 - 09:52:09 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 28/01/2011 - 09:52:09 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 28/01/2011 - 09:52:10 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Credentials\S-1-5-21-790525478-2052111302-682003330-1003\Credentials [940] O61 - LFC:Last File Created 28/01/2011 - 09:52:10 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 28/01/2011 - 09:52:15 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Chest.log [40767] O61 - LFC:Last File Created 28/01/2011 - 09:52:15 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:30 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384] O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768] O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384] O61 - LFC:Last File Created 28/01/2011 - 09:52:33 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:34 ---A- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini [145] O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\3EO36JST\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\RO6QIOE5\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\YAG8EQV7\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\YILYEUEU\desktop.ini [67] O61 - LFC:Last File Created 28/01/2011 - 09:52:37 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384] O61 - LFC:Last File Created 28/01/2011 - 09:52:37 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 28/01/2011 - 09:52:37 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [16384] O61 - LFC:Last File Created 28/01/2011 - 09:54:39 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5375] O61 - LFC:Last File Created 28/01/2011 - 09:54:39 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232] O61 - LFC:Last File Created 28/01/2011 - 09:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\usntr.log [2631642] O61 - LFC:Last File Created 28/01/2011 - 09:59:57 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\avast5.ini [16412] O61 - LFC:Last File Created 28/01/2011 - 10:00:11 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\GDIPFONTCACHEV1.DAT [66680] O61 - LFC:Last File Created 28/01/2011 - 10:00:18 --HA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\index.dat [196608] O61 - LFC:Last File Created 28/01/2011 - 10:00:18 -SHA- C:\Documents And Settings\Docteur LANGERON\Cookies\index.dat [32768] O61 - LFC:Last File Created 28/01/2011 - 10:00:18 -SHA- C:\Documents And Settings\Docteur LANGERON\IETldCache\index.dat [262144] O61 - LFC:Last File Created 28/01/2011 - 10:00:37 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswAr.log [161736] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\BehaviorShield.ini [169] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\EmailShield.ini [1269] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\FileSystemShield.ini [967] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\IMShield.ini [717] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\NetworkShield.ini [29] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\P2PShield.ini [843] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\WebShield.ini [632] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Mail.log [1336999] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt [119730] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\EmailShield.txt [88196] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\FileSystemShield.txt [88792] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\IMShield.txt [88196] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\NetworkShield.txt [88196] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\P2PShield.txt [88196] O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\WebShield.txt [89230] ---\\ Alternate Data Stream File (ADS) (O62) O62 - ADS:Alternate Data Stream File - C:\WINDOWS\System32\SpoonUninstall.exe:Zone.Identifier ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: OTL - (.OldTimer.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\AAVMKER4.sys - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4 O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - Environnement de prise en charge de réseau AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\System32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASPI32.sys - Aspi32 (Aspi32) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASPI32 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWMON2.sys - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI O64 - Services: CurCS - C:\WINDOWS\System32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Antivirus (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\BrPar.sys - BrPar (BrPar) .(.Brother Industries Ltd. - Brother Parallel class Driver version 1.01.) - LEGACY_BRPAR O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\catchme.sys (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\system32\cisvc.exe - Service d'indexation (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC O64 - Services: CurCS - C:\WINDOWS\system32\clipsrv.exe - Gestionnaire de l'Album (ClipSrv) .(.Microsoft Corporation - Windows NT DDE Server.) - LEGACY_CLIPSRV O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\DMLOAD.sys - dmload (dmload) .(.Pas de propriétaire - Pas de description.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate1c9dba399512e1a) (gupdate1c9dba399512e1a) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1C9DBA399512E1A O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Updater Service (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - hpqcxs08 (hpqcxs08) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQCXS08 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service HP CUE DeviceDiscovery (hpqddsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQDDSVC O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Administration IIS (IISADMIN) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_IISADMIN O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - C:\Windows\System32\drivers\ip6fw.sys - Pilote du pare-feu Windows IPv6 (ip6fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Écouteur RIP (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\System32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\WINDOWS\system32\drivers\mqac.sys - Message Queuing access control (MQAC) .(.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) - LEGACY_MQAC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\WINDOWS\System32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication FTP (MSFTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_MSFTPSVC O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - C:\WINDOWS\system32\mqsvc.exe - Message Queuing (MSMQ) .(.Microsoft Corporation - Message Queuing Service.) - LEGACY_MSMQ O64 - Services: CurCS - C:\WINDOWS\system32\mqtgsvc.exe - Message Queuing Triggers (MSMQTriggers) .(.Microsoft Corporation - Windows NT MSMQ Trigger Service.) - LEGACY_MSMQTRIGGERS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Net Driver HPZ12 (Net Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NET_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper 3004 (nosGetPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NOSGETPLUSHELPER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(.Pas de propriétaire - Pas de description.) - LEGACY_PROCEXP113 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psi_mf.sys - PSI (PSI) .(.Secunia - Secunia PSI Driver.) - LEGACY_PSI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - C:\WINDOWS\system32\drivers\RMCast.sys - Reliable Multicast Protocol driver (RMCAST) .(.Microsoft Corporation - Reliable Multicast Transport.) - LEGACY_RMCAST O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\Program Files\Secunia\PSI\PSIA.exe - Secunia PSI Agent (Secunia PSI Agent) .(.Secunia - Secunia PSI Agent.) - LEGACY_SECUNIA_PSI_AGENT O64 - Services: CurCS - C:\Program Files\Secunia\PSI\sua.exe - Secunia Update Agent (Secunia Update Agent) .(.Secunia - Secunia Update Agent.) - LEGACY_SECUNIA_UPDATE_AGENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pare-feu de connexion Internet (ICF) / Partage de connexion Internet (ICS) (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\System32\tcpsvcs.exe - Services TCP/IP simplifiés (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Simple Mail Transfer Protocol (SMTP) (SMTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_SMTPSVC O64 - Services: CurCS - C:\WINDOWS\System32\snmp.exe - Service SNMP (SNMP) .(.Microsoft Corporation - Service SNMP.) - LEGACY_SNMP O64 - Services: CurCS - C:\WINDOWS\System32\snmptrap.exe - Service d'interruption SNMP (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication World Wide Web (w3svc) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_W3SVC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe - WD Drive Manager Service (WDBtnMgrSvc.exe) .(.WDC - WD Drive Manager Service.) - LEGACY_WDBTNMGRSVC.EXE O64 - Services: CurCS - C:\Windows\System32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Portable Media Serial Number Service (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ---\\ Liste des fichiers non signés (LUF) (O65) O65 - LUF:09/01/2004 (.Pas de propriétaire - ActiveSkin Module.) (4, 2, 7, 3) - c:\windows\system32\actskin4.ocx O65 - LUF:13/06/1998 (.Pas de propriétaire - Gif89 Module.) (1, 0, 0, 1) - c:\windows\system32\GIF89.DLL O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHS O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHT O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DE O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DEU O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ES O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ESP O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.exe O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FR O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FRA O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.IT O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ITA O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JP O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JPN O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.59) - c:\windows\system32\PSDrvCheck.KO O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.KOR O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NL O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NLD ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - Bing O69 - SBI: SearchScopes [HKCU] {543AE12E-0651-4B4B-A098-7C124535ECEE} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.co ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Auto 19/12/2002 147456 | (Ati HotKey Poller) . (.Pas de propriétaire.) - C:\WINDOWS\System32\Ati2evxx.exe SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe SS - | Auto 17/02/2009 133104 | (gupdate1c9dba399512e1a) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 22/12/2009 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 14/11/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe SR - | Auto 14/10/2010 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe SR - | Auto 10/01/2011 993848 | (Secunia PSI Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\PSIA.exe SR - | Auto 10/01/2011 399416 | (Secunia Update Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\sua.exe SR - | Auto 26/06/2009 102400 | (WDBtnMgrSvc.exe) . (.WDC.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover Run by Docteur LANGERON at 28/01/2011 10:11:51 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys 1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F49AB8] 3 CLASSPNP[0xF87A5FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000005b[0x82F7CE98] 5 ACPI[0xF86EB620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-4[0x82F84D98] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Docteur LANGERON at 28/01/2011 10:11:51 Use the desktop link 'MBRCheck' to have full report End of the scan (1215 lines in 10mn 44s)(0)

Bonjour monsieur, J'ai bien reçu votre réponse, toutefois avant de désinstaller les outils de diagnostic et de désinfection j'ai préféré refaire un ZHPDiag qui révèle "peut-être" la persistance d''une possible infection. Je vous adresse donc le ZHPDiag.txt. D'autre part au sujet de la MaJ de sécurité de Windows pour laquelle on me demande de redémarrer l'ordinateur, je n'ai pas la référence de la MaJ donc je ne peux pas la télécharger. Pour finir faudra t-il effectuer un point de restauration après la fin des opérations et effacer toutes les précédentes. Merci beaucoup et veuillez m'excuser de toutes ces questions. Rapport de ZHPDiag v1.27.1511 par Nicolas Coolman, Update du 24/01/2011 Run by Docteur LANGERON at 27/01/2011 11:17:49 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut) ---\\ System Information Windows XP Professional Service Pack 3 (Build 2600) Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (30% free) System Restore: Activé (Enable) System drive C: has 33 GB (44%) free of 75 GB ---\\ Logged in mode Computer Name: BUREAU01 User Name: Docteur LANGERON All Users Names: SUPPORT_388945a0, IWAM_BUREAU01, IUSR_BUREAU01, HelpAssistant, Docteur LANGERON, ASPNET, Administrateur, Unselected Option: None Logged in as Administrator ---\\ Environnement Variables %AppData%=%USERPROFILE%\Application Data %LocalAppData%=%USERPROFILE%\Local Settings\Application Data %StartMenu%=%USERPROFILE%\Menu Démarrer ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 33 Go of 75 Go) D:\ CD-ROM drive (Not Inserted) E:\ CD-ROM drive (Not Inserted) F:\ Hard drive, Flash drive, Thumb drive (Free 16 Go of 19 Go) G:\ Hard drive, Flash drive, Thumb drive (Free 462 Go of 466 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\Windows\Explorer.exe [1037824] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\Winlogon.exe [512000] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\atapi.sys [96512] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\ntfs.sys [574976] ---\\ Processus lancés [MD5.25FB74EABCE5EC7836BA3CFB3C58449A] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384] [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3396624] [MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104] [MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - (.Microsoft Corporation - Services Internet (IIS).) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872] [MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.7198BBFBE46C0070257278C536386687] - (.Secunia - Secunia PSI Agent.) -- C:\Program Files\Secunia\PSI\PSIA.exe [993848] [MD5.50F22575C0FB5D85A9D41EF963610C32] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\System32\tcpsvcs.exe [19456] [MD5.45A0772A49914786AD64471205938CE9] - (.Microsoft Corporation - Service SNMP.) -- C:\WINDOWS\System32\snmp.exe [33280] [MD5.949B71704FD641F3CC058F498BBA6E3B] - (.WDC - WD Drive Manager Service.) -- C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400] [MD5.D322AEEBDB406D85F752CB5615F51960] - (.Pas de propriétaire - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962660] [MD5.D179E1DE532C903AB1D57A4E81342F40] - (.Secunia - Secunia PSI Tray.) -- C:\Program Files\Secunia\PSI\psi_tray.exe [291896] [MD5.D2FCA567F9BE87E29B9A9FA32FFE79CA] - (.Secunia - Secunia Update Agent.) -- C:\Program Files\Secunia\PSI\sua.exe [399416] [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344] [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472] [MD5.81932D4F939244D17B7AFE8E1D5F4E28] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [624128] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G1 - GCS: Preference [user Data\Default] None G0 - GCSP: Preference [user Data\Default][HomePage] Google ---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk . (.Pas de propriétaire.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi_tray.exe ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Baseline Security Analyzer 2.2.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Baseline Security Analyzer 2\mbsa.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Secunia PSI.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk . (.Pas de propriétaire.) -- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) - (.not file.) - file:\\C:\WINDOWS\Java\classes\dajava.cab O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241627464750 O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CS1\Services\Tcpip\..\{AC038FB4-9390-4C0E-A182-22514E560A4F}: NameServer = 80.10.246.1 81.253.149.2 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (Ati HotKey Poller) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: (gupdate1c9dba399512e1a) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files\Secunia\PSI\PSIA.exe O23 - Service: (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files\Secunia\PSI\sua.exe O23 - Service: (WDBtnMgrSvc.exe) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{9E8113EC-34EE-46BE-99BF-553D3CABC91A}.job ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (lusbaudio) . (.Microsoft Corporation - Sound Driver.) - C:\Windows\System32\drivers\OVSound2.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\processr.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: (wdmaud) . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) - C:\Windows\System32\drivers\wdmaud.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\Windows\System32\DRIVERS\tcpip6.sys ---\\ Logiciels installés (O42) O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA} O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Brother HL-5240 - (.Brother.) [HKLM] -- {FC85DBFD-4BD4-4306-9929-0AFF31594372} O42 - Logiciel: C-Media WDM Audio Driver - (.Pas de propriétaire.) [HKLM] -- C-Media Audio Driver O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Ciel Paye 14.20 - (.CIEL.) [HKLM] -- {615E501A-7F7E-433C-979E-830D2B911FA3} O42 - Logiciel: Creative Commons Add-in for Microsoft Office - (.Microsoft Corporation..) [HKLM] -- {EC719582-B6B4-436A-922B-67094106AB81} O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Diagnostic Sésam Vitale - (.Pas de propriétaire.) [HKLM] -- Diagnostic Sésam Vitale O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D} O42 - Logiciel: ExamDiff 1.8 - (.PrestoSoft.) [HKLM] -- ExamDiff_is1 O42 - Logiciel: Gimp Pack Mode 2.6.2 - (.Association Mode.) [HKLM] -- Gimp Pack Mode_is1 O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {C768790F-04FB-11E0-9B2C-001AA037B01E} O42 - Logiciel: HP Imaging Device Functions 9.0 - (.HP.) [HKLM] -- HP Imaging Device Functions O42 - Logiciel: HP OCR Software 9.0 - (.HP.) [HKLM] -- HPOCR O42 - Logiciel: HP Photosmart All-In-One Software 9.0 - (.HP.) [HKLM] -- {D64BC2CF-0F12-47d7-B412-B4F3FD684253} O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC} O42 - Logiciel: HP Solution Center 9.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: IIS UrlScan Tool 2.0 (Uninstall) - (.Pas de propriétaire.) [HKLM] -- IisUrlScan O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView O42 - Logiciel: Java 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF} O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player O42 - Logiciel: Logiciel Médical RM Ingénierie - (.RM Ingénierie.) [HKLM] -- {26D777D4-E8AA-46A3-BFBA-83A03090CFCB} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Macromedia Dreamweaver 3 Fr - (.Macromedia.) [HKLM] -- Macromedia Dreamweaver 3 Fr O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128} O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Baseline Security Analyzer 2.2 - (.Microsoft Corporation.) [HKLM] -- {13CD417D-F1F1-4AC4-945D-FDDEB884756F} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft GIF Animator - (.Pas de propriétaire.) [HKLM] -- GIF Animator O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007 O42 - Logiciel: Microsoft Office 2003 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {91490409-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Small Business Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {91CA040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Module Français pour Irfanview version 4.27 - (.jfm.) [HKLM] -- Module Français pour Irfanview version 4.27 O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13) O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++ O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Paint Shop Pro 6.0 (CD-ROM) - (.Pas de propriétaire.) [HKLM] -- Paint Shop Pro 6.0 O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 O42 - Logiciel: Polar Precision Performance SW 3.0 - (.Pas de propriétaire.) [HKLM] -- Polar Precision Performance SW 3.0 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller O42 - Logiciel: SAGEM F@st 800-840 - (.Pas de propriétaire.) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F} O42 - Logiciel: Secunia PSI (2.0.0.3001) - (.Pas de propriétaire.) [HKLM] -- Secunia PSI O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473 O42 - Logiciel: Skype™ 5.1 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8} O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster_is1 O42 - Logiciel: Série+4000 - (.Pas de propriétaire.) [HKLM] -- Série+4000 O42 - Logiciel: Toolbar Uninstaller 1.0.0.1 - (.Decomputeur.nl.) [HKLM] -- Toolbar Uninstaller_is1 O42 - Logiciel: Total Commander (Remove or Repair) - (.Ghisler Software GmbH.) [HKLM] -- Totalcmd O42 - Logiciel: Télétrans sécurisée - (.Pas de propriétaire.) [HKLM] -- Télétrans sécurisée O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VC 9.0 Runtime - (.Check Point Software Technologies Ltd.) [HKLM] -- {02E89EFC-7B07-4D5A-AA03-9EC0902914EE} O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B} O42 - Logiciel: WD Drive Manager (x86) - (.Western Digital.) [HKLM] -- {813EE1F0-D251-4F98-AC91-9B98CF22717E} O42 - Logiciel: Wanadoo ADSL ECI USB - (.Pas de propriétaire.) [HKLM] -- {C7B39B40-52C3-11D4-AFCE-00E0B8138A4A} O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52} O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1 O42 - Logiciel: ZebHelpProcess 2.44 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process_is1 O42 - Logiciel: Zune Desktop Theme - (.Microsoft Corporation.) [HKLM] -- {7E20EFE6-E604-48C6-8B39-BA4742F2CDB4} O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5 O42 - Logiciel: dBpoweramp Music Converter - (.Illustrate.) [HKLM] -- dBpoweramp Music Converter O42 - Logiciel: dBpoweramp Windows Media Audio 10 Codec - (.Illustrate.) [HKLM] -- dBpoweramp Windows Media Audio 10 Codec O42 - Logiciel: memDOC 3.5.1 - (.Pas de propriétaire.) [HKLM] -- memDOC 3.5.1_is1 ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\ALWIL Software] [HKCU\Software\Adobe] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Applications WinDev] [HKCU\Software\BVRP Software] [HKCU\Software\Borland] [HKCU\Software\Brother] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\GIP-CPS] [HKCU\Software\Gadwin Systems] [HKCU\Software\Ghisler] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\Illustrate] [HKCU\Software\Intel] [HKCU\Software\Iris] [HKCU\Software\JASC] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Lavalys] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\NirSoft] [HKCU\Software\Novell] [HKCU\Software\ODBC] [HKCU\Software\ORL] [HKCU\Software\PDFCreator] [HKCU\Software\Pc Soft] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PrestoSoft] [HKCU\Software\RMIngénierie] [HKCU\Software\RMinformatique] [HKCU\Software\SCC] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Sage] [HKCU\Software\Search Settings] [HKCU\Software\Secunia] [HKCU\Software\Sensaura] [HKCU\Software\Siemens] [HKCU\Software\Skype] [HKCU\Software\Sonic Desktop Software] [HKCU\Software\Sysinternals] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VOB] [HKCU\Software\VSRevoGroup] [HKCU\Software\Wget] [HKLM\Software\781] [HKLM\Software\ALWIL Software] [HKLM\Software\ATI Technologies] [HKLM\Software\Adobe] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Application Updater] [HKLM\Software\Borland] [HKLM\Software\Brother] [HKLM\Software\C07ft5Y] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DivXNetworks] [HKLM\Software\ECI] [HKLM\Software\GIMP_Back_Mode] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\Hewlett-Packard] [HKLM\Software\Identification] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\NSCPID] [HKLM\Software\ODBC] [HKLM\Software\OldTimer Tools] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\RMinformatique] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Sage] [HKLM\Software\Schlumberger] [HKLM\Software\Search Settings] [HKLM\Software\Secunia] [HKLM\Software\Skype] [HKLM\Software\SpywareBlaster] [HKLM\Software\Swearware] [HKLM\Software\SymNRT] [HKLM\Software\WebUpdate] [HKLM\Software\Western Digital] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\XnView] [HKLM\Software\analog devices] [HKLM\Software\mozilla.org] [HKLM\Software\sagem] ---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 23/12/2010 - 19:33:56 ----D- C:\Program Files\7-Zip O43 - CFD: 31/12/2010 - 12:22:40 ----D- C:\Program Files\Adobe O43 - CFD: 23/01/2010 - 17:50:26 ----D- C:\Program Files\Alwil Software O43 - CFD: 11/06/2010 - 09:35:40 ----D- C:\Program Files\Apple Software Update O43 - CFD: 08/01/2011 - 16:38:06 ----D- C:\Program Files\Application Updater O43 - CFD: 18/11/2010 - 10:18:04 ----D- C:\Program Files\AxBx O43 - CFD: 06/09/2007 - 23:34:16 ----D- C:\Program Files\Axis Communications O43 - CFD: 16/05/2009 - 11:15:06 ----D- C:\Program Files\Axon Data O43 - CFD: 09/07/2009 - 09:58:46 ----D- C:\Program Files\Brother O43 - CFD: 09/07/2009 - 09:59:24 ----D- C:\Program Files\Brownie O43 - CFD: 10/01/2011 - 13:52:26 ----D- C:\Program Files\CCleaner O43 - CFD: 05/06/2008 - 21:59:06 ----D- C:\Program Files\Cegedim O43 - CFD: 16/10/2008 - 14:07:08 ----D- C:\Program Files\CIEL O43 - CFD: 20/02/2004 - 12:33:22 ----D- C:\Program Files\Common Files O43 - CFD: 20/02/2004 - 11:10:30 ----D- C:\Program Files\ComPlus Applications O43 - CFD: 03/01/2011 - 17:31:14 ----D- C:\Program Files\Defraggler O43 - CFD: 03/10/2010 - 16:22:08 ----D- C:\Program Files\ExamDiff O43 - CFD: 26/01/2011 - 10:05:06 ----D- C:\Program Files\Fichiers communs O43 - CFD: 01/09/2010 - 13:03:44 ----D- C:\Program Files\Fonction Sesam Vitale O43 - CFD: 27/12/2010 - 19:18:28 ----D- C:\Program Files\Gimp Pack Mode O43 - CFD: 17/01/2011 - 15:19:10 ----D- C:\Program Files\Glary Utilities O43 - CFD: 13/08/2010 - 20:47:04 ----D- C:\Program Files\Google O43 - CFD: 09/07/2009 - 10:36:42 ----D- C:\Program Files\Hewlett-Packard O43 - CFD: 09/07/2009 - 10:38:08 ----D- C:\Program Files\HP O43 - CFD: 22/09/2010 - 14:47:56 ----D- C:\Program Files\Illustrate O43 - CFD: 09/07/2009 - 09:58:10 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 15/12/2010 - 18:42:06 ----D- C:\Program Files\Internet Explorer O43 - CFD: 11/06/2010 - 08:35:56 ----D- C:\Program Files\IrfanView O43 - CFD: 16/08/2010 - 16:22:44 ----D- C:\Program Files\Java O43 - CFD: 28/01/2010 - 17:01:14 ----D- C:\Program Files\Macromedia O43 - CFD: 25/01/2011 - 23:00:44 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 07/07/2009 - 09:15:52 ----D- C:\Program Files\memDOC O43 - CFD: 04/05/2009 - 12:10:04 ----D- C:\Program Files\Messenger O43 - CFD: 11/10/2010 - 13:05:44 ----D- C:\Program Files\Microsoft Baseline Security Analyzer 2 O43 - CFD: 21/02/2004 - 07:19:34 ----D- C:\Program Files\microsoft frontpage O43 - CFD: 15/11/2010 - 09:44:36 ----D- C:\Program Files\Microsoft GIF Animator O43 - CFD: 28/08/2009 - 11:07:52 ----D- C:\Program Files\Microsoft Office O43 - CFD: 23/01/2010 - 19:04:44 ----D- C:\Program Files\Microsoft Office Creative Commons Add-in O43 - CFD: 11/12/2008 - 19:22:34 ----D- C:\Program Files\Microsoft Sites publics français O43 - CFD: 21/12/2010 - 17:17:10 ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 04/05/2009 - 13:29:40 ----D- C:\Program Files\Microsoft.NET O43 - CFD: 10/08/2010 - 22:15:58 ----D- C:\Program Files\Movie Maker O43 - CFD: 06/10/2007 - 15:47:50 ----D- C:\Program Files\Mozilla ActiveX Control v1.7.12 O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 31/03/2009 - 10:58:08 ----D- C:\Program Files\MSBuild O43 - CFD: 02/12/2010 - 09:44:46 ----D- C:\Program Files\MSECache O43 - CFD: 17/05/2008 - 18:49:06 ----D- C:\Program Files\msn O43 - CFD: 04/05/2009 - 10:21:28 ----D- C:\Program Files\msn gaming zone O43 - CFD: 16/11/2006 - 20:48:52 ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 17/05/2008 - 18:45:06 ----D- C:\Program Files\NetMeeting O43 - CFD: 31/12/2010 - 10:42:52 ----D- C:\Program Files\NOS O43 - CFD: 09/01/2011 - 19:50:12 ----D- C:\Program Files\Notepad++ O43 - CFD: 15/12/2010 - 18:33:28 ----D- C:\Program Files\Outlook Express O43 - CFD: 12/12/2010 - 07:34:08 ----D- C:\Program Files\Paint Shop Pro 6 O43 - CFD: 07/01/2011 - 14:32:10 ----D- C:\Program Files\PDFCreator O43 - CFD: 08/12/2010 - 10:13:30 ----D- C:\Program Files\PhotoFiltre O43 - CFD: 10/02/2010 - 11:49:32 ----D- C:\Program Files\Polar O43 - CFD: 13/12/2010 - 14:15:58 ----D- C:\Program Files\QuickTime O43 - CFD: 03/01/2011 - 17:29:08 ----D- C:\Program Files\Recuva O43 - CFD: 02/05/2010 - 21:32:20 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 04/12/2009 - 12:31:50 ----D- C:\Program Files\RegCleaner O43 - CFD: 19/02/2006 - 12:53:08 ----D- C:\Program Files\SAGEM O43 - CFD: 17/01/2011 - 14:34:20 ----D- C:\Program Files\Secunia O43 - CFD: 13/01/2011 - 09:35:58 ----D- C:\Program Files\Services en ligne O43 - CFD: 11/08/2010 - 09:17:46 ----D- C:\Program Files\sesam O43 - CFD: 16/01/2011 - 12:40:24 R---D- C:\Program Files\Skype O43 - CFD: 12/11/2009 - 16:59:46 ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 23/01/2011 - 12:01:22 ----D- C:\Program Files\SpywareBlaster O43 - CFD: 03/07/2009 - 13:43:30 ----D- C:\Program Files\ToniArts O43 - CFD: 12/01/2011 - 17:26:24 ----D- C:\Program Files\Toolbar Uninstaller O43 - CFD: 02/07/2004 - 23:02:18 --H-D- C:\Program Files\Uninstall Information O43 - CFD: 02/05/2009 - 08:45:08 ----D- C:\Program Files\VS Revo Group O43 - CFD: 24/02/2010 - 18:02:54 ----D- C:\Program Files\Western Digital O43 - CFD: 28/01/2010 - 16:49:24 ----D- C:\Program Files\Western Digital Technologies O43 - CFD: 13/03/2010 - 09:24:48 ----D- C:\Program Files\Windows Installer Clean Up O43 - CFD: 06/05/2009 - 16:09:52 ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD: 16/05/2009 - 10:02:58 ----D- C:\Program Files\Windows Media Player O43 - CFD: 02/05/2009 - 10:03:14 ----D- C:\Program Files\Windows NT O43 - CFD: 24/09/2008 - 22:22:44 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 20/04/2006 - 23:22:52 --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 20/02/2004 - 11:13:56 ----D- C:\Program Files\xerox O43 - CFD: 28/09/2010 - 09:27:22 ----D- C:\Program Files\XnView O43 - CFD: 27/01/2011 - 11:00:10 ----D- C:\Program Files\ZebHelpProcess O43 - CFD: 27/01/2011 - 11:18:00 ----D- C:\Program Files\ZHPDiag O43 - CFD: 31/07/2004 - 08:58:00 ----D- C:\Program Files\Common Files\System O43 - CFD: 22/09/2010 - 14:48:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AccurateRip O43 - CFD: 31/12/2010 - 18:01:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Adobe O43 - CFD: 12/06/2006 - 06:48:32 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AdobeUM O43 - CFD: 13/08/2010 - 14:40:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Apple Computer O43 - CFD: 22/09/2010 - 23:35:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Application Updater O43 - CFD: 02/07/2007 - 11:06:44 R---D- C:\Documents and Settings\Docteur LANGERON\Application Data\Brother O43 - CFD: 05/11/2008 - 20:00:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 22/09/2010 - 15:21:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\dBpoweramp O43 - CFD: 24/02/2010 - 17:14:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Download Manager O43 - CFD: 06/07/2009 - 09:44:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\ESTsoft O43 - CFD: 26/01/2010 - 15:05:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GHISLER O43 - CFD: 11/01/2011 - 09:45:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GlarySoft O43 - CFD: 25/09/2006 - 17:51:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Google O43 - CFD: 17/01/2011 - 10:28:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\gtk-2.0 O43 - CFD: 20/02/2004 - 13:35:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Help O43 - CFD: 30/07/2008 - 22:26:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HP O43 - CFD: 10/04/2009 - 15:35:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HPAppData O43 - CFD: 29/06/2010 - 18:35:58 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HpUpdate O43 - CFD: 21/02/2004 - 12:13:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Identities O43 - CFD: 24/01/2011 - 11:10:36 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Macromedia O43 - CFD: 09/04/2009 - 09:08:24 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Malwarebytes O43 - CFD: 31/12/2010 - 18:01:04 -S--D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft O43 - CFD: 25/01/2010 - 11:42:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Corporation O43 - CFD: 21/02/2004 - 07:13:12 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Web Folders O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla O43 - CFD: 04/09/2004 - 16:29:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\MSN6 O43 - CFD: 19/05/2009 - 18:32:50 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\OfficeUpdate12 O43 - CFD: 16/08/2010 - 16:12:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\pdfforge O43 - CFD: 08/12/2010 - 10:13:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\PhotoFiltre O43 - CFD: 16/08/2010 - 16:12:16 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Search Settings O43 - CFD: 16/01/2011 - 19:55:14 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Skype O43 - CFD: 31/03/2009 - 09:03:34 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Sun O43 - CFD: 23/01/2011 - 14:23:10 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\U3 O43 - CFD: 31/08/2010 - 13:19:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\VSRevoGroup O43 - CFD: 24/02/2010 - 18:34:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\WD O43 - CFD: 24/01/2011 - 11:28:18 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\XnView ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 11:17:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1689227] O44 - LFC:[MD5.78ACB0E002999EAAB76DD11FA0E8BB8D] - 27/01/2011 - 11:00:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:57:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [289] O44 - LFC:[MD5.C7C21C26190600F28FEFFC2865DBF09E] - 27/01/2011 - 10:18:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [13868] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/01/2011 - 10:18:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:16:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/01/2011 - 10:16:14 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:14:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [3478] O44 - LFC:[MD5.185C81EA37FE619506156A762DF29D42] - 27/01/2011 - 09:47:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [767] O44 - LFC:[MD5.31FAC467141BED800838AD335B6EB477] - 26/01/2011 - 10:15:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ComboFix.txt [23725] O44 - LFC:[MD5.E9EE6F21F3311E440286FB99B1B0F9CF] - 26/01/2011 - 10:08:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [246] O44 - LFC:[MD5.8EA62145D76D8F2AC09555F7035194D4] - 26/01/2011 - 09:58:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Boot.bak [212] O44 - LFC:[MD5.2F83A627FD57B5802FA6062E785740EB] - 26/01/2011 - 09:58:40 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [328] O44 - LFC:[MD5.48C65662EC81FBCAA110509F50C51497] - 26/01/2011 - 09:58:35 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\cmldr [263488] O44 - LFC:[MD5.AE72E8619CB31D84DA25E2435E55003C] - 26/01/2011 - 09:54:28 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [31232] O44 - LFC:[MD5.9DAA7218961710008D7385B01BD3F386] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MBR.exe [89088] O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\PEV.exe [256512] O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\grep.exe [80412] O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\sed.exe [98816] O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\zip.exe [68096] O44 - LFC:[MD5.01D95A1F8CF13D07CC564AABB36BCC0B] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [161792] O44 - LFC:[MD5.B7517DB073B28F5696A1E5528ABEB5D0] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [136704] O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480] O44 - LFC:[MD5.98F205D859DCA7707488399CC55E9900] - 25/01/2011 - 22:22:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wininit.ini [755] O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\BDEADMIN.CPL [183808] O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\DBCLIENT.DLL [210032] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\Msft_Kernel_nielprt_01007.Wdf [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf [0] O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 16/01/2011 - 16:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT [3121] O44 - LFC:[MD5.976AD1B5891D4663EB41BC12702415A4] - 13/01/2011 - 18:43:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pbcb.inf [16] O44 - LFC:[MD5.2818237D7004CB68AE6CEBDCBD05186E] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [188216] O44 - LFC:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [294608] O44 - LFC:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [47440] O44 - LFC:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [100176] O44 - LFC:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [94544] O44 - LFC:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23632] O44 - LFC:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [29392] O44 - LFC:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [17744] O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 07/01/2011 - 14:31:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224] O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 31/12/2010 - 21:06:36 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [38848] ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.54F3D2DEAA59631B4871F9E44059E8D5] - 07/01/2011 - 12:02:10 ---A- - C:\WINDOWS\Prefetch\OIS.EXE-33076924.pf O45 - LFCP:[MD5.9636BFC2FB387C82B2B977DBEA2C8982] - 19/01/2011 - 19:11:18 ---A- - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf O45 - LFCP:[MD5.602B0812D9FDF94725E420C75C1FB821] - 23/01/2011 - 19:16:17 ---A- - C:\WINDOWS\Prefetch\I_VIEW32.EXE-38F9F646.pf O45 - LFCP:[MD5.12C12339455416BD9E156948BCBD31BB] - 24/01/2011 - 00:39:10 ---A- - C:\WINDOWS\Prefetch\TOTALCMD.EXE-08C82D3C.pf O45 - LFCP:[MD5.F73948C0C0FA24DFB7688B3D4476DD3A] - 24/01/2011 - 00:45:50 ---A- - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-39EC5E32.pf O45 - LFCP:[MD5.B1CB6B2FD1DA7ED671C6199F467F74BC] - 24/01/2011 - 12:25:59 ---A- - C:\WINDOWS\Prefetch\SF.BIN-2BD7295A.pf O45 - LFCP:[MD5.766E0683679AA3299EDBAB17FDF4C911] - 24/01/2011 - 17:25:31 ---A- - C:\WINDOWS\Prefetch\SF.BIN-05D63443.pf O45 - LFCP:[MD5.BF1AE3033AEC92ECBBD7E88C1411D8A8] - 25/01/2011 - 11:53:29 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1F48A76E.pf O45 - LFCP:[MD5.41FD1245250480DA31BA037C7D5D12BA] - 25/01/2011 - 14:07:59 ---A- - C:\WINDOWS\Prefetch\SF.BIN-09AED27E.pf O45 - LFCP:[MD5.A9FB296854D3041ADF7BD990002CA358] - 25/01/2011 - 19:58:32 ---A- - C:\WINDOWS\Prefetch\WINLOGON.EXE-32C57D49.pf O45 - LFCP:[MD5.A7689859D9C2C0C2903FEE69045D7B73] - 25/01/2011 - 19:58:33 ---A- - C:\WINDOWS\Prefetch\CSRSS.EXE-12B63473.pf O45 - LFCP:[MD5.80F6BAC7885F5470D6873E0770D939A0] - 25/01/2011 - 19:58:33 ---A- - C:\WINDOWS\Prefetch\SERVICES.EXE-2F433351.pf O45 - LFCP:[MD5.9D27F59DE8442EA3DDC49508CA64D99C] - 25/01/2011 - 19:58:34 ---A- - C:\WINDOWS\Prefetch\LSASS.EXE-20DB6D1B.pf O45 - LFCP:[MD5.D37B94F74702A8FD0D988FECC1B6940D] - 25/01/2011 - 19:58:36 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf O45 - LFCP:[MD5.6B600C2FB818D8202D3A65D6A2922211] - 25/01/2011 - 19:58:58 ---A- - C:\WINDOWS\Prefetch\MSDTC.EXE-0E6E4AF7.pf O45 - LFCP:[MD5.B686519AB80DDFAB11C049F67FEB06C7] - 25/01/2011 - 19:59:01 ---A- - C:\WINDOWS\Prefetch\ATI2EVXX.EXE-19D16EB9.pf O45 - LFCP:[MD5.A632E0D02FE1EC4C20D7096341916A23] - 25/01/2011 - 19:59:06 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf O45 - LFCP:[MD5.B64D7FDA83C6FB4A4150AEC7C80C7952] - 25/01/2011 - 19:59:09 ---A- - C:\WINDOWS\Prefetch\TCPSVCS.EXE-05847ECC.pf O45 - LFCP:[MD5.91953443AADB50C10ED5241DEDC74072] - 25/01/2011 - 19:59:12 ---A- - C:\WINDOWS\Prefetch\WDBTNMGRSVC.EXE-10AE084E.pf O45 - LFCP:[MD5.2BE6F81B7A11945C16607C5261BCA6D9] - 25/01/2011 - 21:32:09 ---A- - C:\WINDOWS\Prefetch\Layout.ini O45 - LFCP:[MD5.CD4E5EBAB3EF80BD15075CA6A3CEECBF] - 25/01/2011 - 23:00:26 ---A- - C:\WINDOWS\Prefetch\MBAM-SETUP-1.50.1.1100.EXE-2AB59545.pf O45 - LFCP:[MD5.2DB3349AA82987606AF39092DB64BEAE] - 25/01/2011 - 23:00:26 ---A- - C:\WINDOWS\Prefetch\MBAM-SETUP-1.50.1.1100.TMP-0C45D327.pf O45 - LFCP:[MD5.FD067B4A12A9CADBA434BCFDD485F4EB] - 25/01/2011 - 23:00:38 ---A- - C:\WINDOWS\Prefetch\MBAMGUI.EXE-1286D63B.pf O45 - LFCP:[MD5.7E8E859BA232458E2ED02BF462B96885] - 25/01/2011 - 23:42:17 ---A- - C:\WINDOWS\Prefetch\CMDINFO.EXE-0F292E46.pf O45 - LFCP:[MD5.FCFE64EFCA1E773F22ABB5401D54810A] - 25/01/2011 - 23:42:17 ---A- - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf O45 - LFCP:[MD5.7029AAABA68169AC211CA2D85A287DBE] - 25/01/2011 - 23:42:26 ---A- - C:\WINDOWS\Prefetch\OBJLIST.EXE-3082CF34.pf O45 - LFCP:[MD5.84F3CF7873966130AF0BC1290156CA4F] - 25/01/2011 - 23:42:29 ---A- - C:\WINDOWS\Prefetch\SC.EXE-012262AF.pf O45 - LFCP:[MD5.59B9A9BF1480338B6ABA0B9E7FA78654] - 25/01/2011 - 23:42:32 ---A- - C:\WINDOWS\Prefetch\NETSH.EXE-085CFFDE.pf O45 - LFCP:[MD5.1EA829C51EF9A6F5C4FEE4739AF272BE] - 25/01/2011 - 23:42:50 ---A- - C:\WINDOWS\Prefetch\WMIC.EXE-3B772CC6.pf O45 - LFCP:[MD5.E3C48A9568759C6257BFA17F4FBA38BE] - 25/01/2011 - 23:43:06 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-330534DB.pf O45 - LFCP:[MD5.A6EF2BAE677DE37AB88E2966DB4CCC70] - 25/01/2011 - 23:43:15 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.EXE-050F38AC.pf O45 - LFCP:[MD5.6BDD936A7BD1FE3BA9E58FB55EC861DF] - 25/01/2011 - 23:43:15 ---A- - C:\WINDOWS\Prefetch\SED.EXE-108014A2.pf O45 - LFCP:[MD5.22F1D9A40F80C11CC554FA016BC2615C] - 25/01/2011 - 23:43:22 ---A- - C:\WINDOWS\Prefetch\NOTEPAD++.EXE-14917D45.pf O45 - LFCP:[MD5.901D810B988E5D5D2AD85F6A30591E09] - 26/01/2011 - 00:33:29 ---A- - C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf O45 - LFCP:[MD5.6EE986DF5A822CD0F65521706AC38630] - 26/01/2011 - 09:51:46 ---A- - C:\WINDOWS\Prefetch\LAUNCHU3.EXE-209CBEEF.pf O45 - LFCP:[MD5.9428D8B4EDC6352B8138706D5773BE44] - 26/01/2011 - 09:52:02 ---A- - C:\WINDOWS\Prefetch\LAUNCHPAD.EXE-14A751D2.pf O45 - LFCP:[MD5.C6D59A66BC986204395B0E8B9A746FE3] - 26/01/2011 - 09:53:12 ---A- - C:\WINDOWS\Prefetch\COMBOFIX.EXE-2BD745C9.pf O45 - LFCP:[MD5.28977A2D0ED837EB4809C4B341D1AE04] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-01E072AE.pf O45 - LFCP:[MD5.CD3A02231DAE9718C175C5C54C1EE5BB] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-0A31FE70.pf O45 - LFCP:[MD5.72FAF5C0D336AEBA8983DCE4670F546C] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-12915967.pf O45 - LFCP:[MD5.50D8A672DFC2FE84C13B82CD5F6379A3] - 26/01/2011 - 09:53:23 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-1A265FEC.pf O45 - LFCP:[MD5.15C06FB37272011B56D8A16FA9875648] - 26/01/2011 - 09:53:27 ---A- - C:\WINDOWS\Prefetch\GSAR.CFXXE-064C1B3A.pf O45 - LFCP:[MD5.D00B7151B4E1750FEB316E047BD13F9F] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\GRPCONV.EXE-111CD845.pf O45 - LFCP:[MD5.9B2FB8F13922B21A7663704D2C47DE7F] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1EE676D0.pf O45 - LFCP:[MD5.F04B57AA6B94C36E336A87F0A7EA161C] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf O45 - LFCP:[MD5.7D44ADEC1F7C15129CB1D044C31A91EA] - 26/01/2011 - 09:53:31 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-0937BD77.pf O45 - LFCP:[MD5.B69E59983B5EEBC1542C7F2E07634A52] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf O45 - LFCP:[MD5.6AEF5B23F28AAF9C3E6DD756D980413D] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\N.PIF-1B75D06C.pf O45 - LFCP:[MD5.F280535CB297DC3AD9FD8A37ECC0ACC5] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\PEV.EXE-2937A365.pf O45 - LFCP:[MD5.EB38525162974DC0D3726326D00F5E0A] - 26/01/2011 - 09:53:34 ---A- - C:\WINDOWS\Prefetch\SWREG.CFXXE-16776A8B.pf O45 - LFCP:[MD5.A8760AACE6A163C217340DF2929BF7BA] - 26/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\CMD.CFXXE-12A6B182.pf O45 - LFCP:[MD5.457EF4BFDA496F43789FC7C950DD9EFD] - 26/01/2011 - 09:53:45 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.CFXXE-1A395113.pf O45 - LFCP:[MD5.59E0018A8F3834589BEEEC05941DE2C2] - 26/01/2011 - 09:54:10 ---A- - C:\WINDOWS\Prefetch\SWSC.CFXXE-1F9C68EB.pf O45 - LFCP:[MD5.AAEF815331F83770FA36D1891176B3BE] - 26/01/2011 - 09:54:11 ---A- - C:\WINDOWS\Prefetch\GREP.CFXXE-005CE245.pf O45 - LFCP:[MD5.AB03189F4F118DC18E4FF6EC38262D0F] - 26/01/2011 - 09:54:11 ---A- - C:\WINDOWS\Prefetch\RMBR.CFXXE-2738B6F9.pf O45 - LFCP:[MD5.452364EBF525EECB7CD6A25A976B6656] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\ATTRIB.CFXXE-18D70E5B.pf O45 - LFCP:[MD5.BC387C6E89BC08D6A28C3A42EE1FEDD4] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\CSCRIPT.CFXXE-2F5062B6.pf O45 - LFCP:[MD5.9498C3E0D0AE15D997FD2C97CBE0B71C] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\SED.CFXXE-384BB311.pf O45 - LFCP:[MD5.18A89402E5F207466A99A19893971559] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\SWXCACLS.CFXXE-1ECB3953.pf O45 - LFCP:[MD5.D182BFECD3C429D15F514D7FE0972E7B] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\ATTRIB.EXE-39EAFB02.pf O45 - LFCP:[MD5.6505688CBAAF5F80D4DBBA434DE1C667] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\HIDEC.EXE-3B166DB3.pf O45 - LFCP:[MD5.01615C79C9D8CF75843155C5A735AAD8] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\PEV.CFXXE-3B65BD28.pf O45 - LFCP:[MD5.D903FD05C2BD2BA51F9EAE537F42E913] - 26/01/2011 - 09:54:15 ---A- - C:\WINDOWS\Prefetch\NIRCMD.CFXXE-351E2F5E.pf O45 - LFCP:[MD5.15433F39980968B5B4273A4AE4DBE032] - 26/01/2011 - 09:54:22 ---A- - C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf O45 - LFCP:[MD5.74F312C6FD12F57F7C9D5A09DC1E6F69] - 26/01/2011 - 09:54:25 ---A- - C:\WINDOWS\Prefetch\PING.CFXXE-37757ECD.pf O45 - LFCP:[MD5.73BD06536EEB05D3CEC2965230D8CE3A] - 26/01/2011 - 09:54:26 ---A- - C:\WINDOWS\Prefetch\COMBOFIX-DOWNLOAD.CFXXE-31D203D3.pf O45 - LFCP:[MD5.EBF29D60DE9726910E490F24E6426CA3] - 26/01/2011 - 09:54:27 ---A- - C:\WINDOWS\Prefetch\SWSC.CFXXE-2693FE93.pf O45 - LFCP:[MD5.78B6E7FCC227D31B5CF9220161BDF4CC] - 26/01/2011 - 09:54:28 ---A- - C:\WINDOWS\Prefetch\HIDEC.EXE-3818BC01.pf O45 - LFCP:[MD5.3B7217CC73B45877C48376BB6EB6C192] - 26/01/2011 - 09:54:30 ---A- - C:\WINDOWS\Prefetch\PEV.EXE-0806C34B.pf O45 - LFCP:[MD5.CD9B6B651FE7BBD7E81BC98F00B94391] - 26/01/2011 - 09:54:38 ---A- - C:\WINDOWS\Prefetch\CF13131.CFXXE-2571EC31.pf O45 - LFCP:[MD5.424AD28C4DFBEAE64CD64880FB09D4D5] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\ATTRIB.CFXXE-0D17129C.pf O45 - LFCP:[MD5.751E93AB6EDA6E8D580EA9991630BF6D] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\GSAR.CFXXE-00AB7A6E.pf O45 - LFCP:[MD5.B56D5673FB1A62543372BC9D27DF9F9A] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-3560BE42.pf O45 - LFCP:[MD5.BD8313688F13861763DC35DA27BBA469] - 26/01/2011 - 09:54:49 ---A- - C:\WINDOWS\Prefetch\GREP.EXE-3309531C.pf O45 - LFCP:[MD5.B4462CD65BF8AAA02DD9666DA2FBC55E] - 26/01/2011 - 09:54:49 ---A- - C:\WINDOWS\Prefetch\SED.EXE-0F4B402F.pf O45 - LFCP:[MD5.CA328A528B3402DF300630F6F9E09B5C] - 26/01/2011 - 10:15:45 ---A- - C:\WINDOWS\Prefetch\PV.CFXXE-232B0D6C.pf O45 - LFCP:[MD5.33F2BF8436B549163620B529945389E5] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\NIRCMD.CFXXE-05436116.pf O45 - LFCP:[MD5.AA4A60453BB6002DA6466E49F094852A] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.CFXXE-101D6E86.pf O45 - LFCP:[MD5.2A9CE6B119FE6573C70A86D1BE07CC19] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\SORT.EXE-194AE83C.pf O45 - LFCP:[MD5.CCB9D958DD8FEBD91D163500BF974BFF] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\CHCP.COM-18156052.pf O45 - LFCP:[MD5.938E49B0C1AF1C771109AC0A7A01E6A5] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\GREP.CFXXE-350016A4.pf O45 - LFCP:[MD5.7D595457E0C8A9242C0923924EBAE09C] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\SED.CFXXE-3B4964C3.pf O45 - LFCP:[MD5.6A669C48DC5931C35EB1B20BC822BA85] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\SWREG.CFXXE-17391962.pf O45 - LFCP:[MD5.D610F3CBC4E44C8E2D3132B42EFCC75C] - 26/01/2011 - 10:15:48 ---A- - C:\WINDOWS\Prefetch\SWXCACLS.CFXXE-0F8095D7.pf O45 - LFCP:[MD5.98CE25B68231F3898333DE514F8D54CB] - 26/01/2011 - 10:15:50 ---A- - C:\WINDOWS\Prefetch\PEV.CFXXE-02C8A4D3.pf O45 - LFCP:[MD5.79B96F99BDD64EDF9370D664242D9C75] - 26/01/2011 - 10:44:43 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1E61F3BC.pf O45 - LFCP:[MD5.B5EA55C7A5228E3782465E496C2608F6] - 26/01/2011 - 13:48:35 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4BD19A5C.pf O45 - LFCP:[MD5.D905BD6F60EFBA85A69D13C81A03A5CD] - 26/01/2011 - 15:55:37 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf O45 - LFCP:[MD5.8B28E3747EB0ED9840B2DB272518D6A8] - 26/01/2011 - 16:06:17 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-1CBCA997.pf O45 - LFCP:[MD5.E37AC3C3BC4BBB66FAFAEFE95E7948C5] - 26/01/2011 - 16:06:17 ---A- - C:\WINDOWS\Prefetch\WDBTNMGRUI.EXE-2E0F4242.pf O45 - LFCP:[MD5.6E0CE7A3A31053FE3A5A7A496AD306CA] - 26/01/2011 - 17:49:14 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf O45 - LFCP:[MD5.9DF0C6A7435AC39EEFF9CFB7174EEC7D] - 26/01/2011 - 17:50:23 ---A- - C:\WINDOWS\Prefetch\PING.EXE-31216D26.pf O45 - LFCP:[MD5.8D05BB00160C91ABABE873141595CFCE] - 26/01/2011 - 18:27:56 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf O45 - LFCP:[MD5.140FFE4B2796EBE49AC0D4A79C330345] - 26/01/2011 - 18:54:25 ---A- - C:\WINDOWS\Prefetch\SDUPDATE.EXE-00420EF0.pf O45 - LFCP:[MD5.9B4C473813E75F20B1579D8D9E14B33A] - 26/01/2011 - 18:57:46 ---A- - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf O45 - LFCP:[MD5.944D3A0F09BC0C58F2D61F3BCAD7D2A3] - 26/01/2011 - 19:02:29 ---A- - C:\WINDOWS\Prefetch\POWERPNT.EXE-2F940E7E.pf O45 - LFCP:[MD5.9D29FC4EDAF5460008BE47B084C3465B] - 26/01/2011 - 19:24:25 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf O45 - LFCP:[MD5.6783AA6968AAB3E0218AF1243AF0A87F] - 26/01/2011 - 19:24:48 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf O45 - LFCP:[MD5.AFD2810DB8D63E84F9266A02FA7BEC6C] - 26/01/2011 - 20:34:03 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf O45 - LFCP:[MD5.07BDAF4CB74061CB151A87C15EE85FB5] - 26/01/2011 - 20:49:16 ---A- - C:\WINDOWS\Prefetch\ZHPFIX.EXE-3A07CBCA.pf O45 - LFCP:[MD5.C1BCBAED365853AAB27BAB385EF29894] - 26/01/2011 - 20:49:33 ---A- - C:\WINDOWS\Prefetch\SECURITYCHECK.EXE-00D10559.pf O45 - LFCP:[MD5.9C3287E32BE59AE33407A87FFA80F4E1] - 27/01/2011 - 09:18:16 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf O45 - LFCP:[MD5.EFCB041F5BD46E30BE9527F4D8374DCE] - 27/01/2011 - 09:20:12 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf O45 - LFCP:[MD5.9E96610F007911733F7DAD091FA9140C] - 27/01/2011 - 09:47:12 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf O45 - LFCP:[MD5.AABCC59803AE6F2E7F8B6AE49FEB0FC3] - 27/01/2011 - 09:47:45 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf O45 - LFCP:[MD5.89084F4347A89EAAD3B90C0186C2E042] - 27/01/2011 - 10:17:51 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf O45 - LFCP:[MD5.0DE690B3616828CC012C0E00B0628B62] - 27/01/2011 - 10:17:51 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf O45 - LFCP:[MD5.41253D97F4D646B45235F8A9CDFC2325] - 27/01/2011 - 10:18:24 ---A- - C:\WINDOWS\Prefetch\DSLMON.EXE-1476FDB3.pf O45 - LFCP:[MD5.072502D48A3706DADA1A27666C916A2B] - 27/01/2011 - 10:18:25 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf O45 - LFCP:[MD5.EA517D25B3C8E019A9CE37C62ECC25EA] - 27/01/2011 - 10:18:30 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf O45 - LFCP:[MD5.48BA13EA6E85F7F82E8B265BBCDC0151] - 27/01/2011 - 10:19:10 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf O45 - LFCP:[MD5.B660B08CE99EF6CE4986151A9BEBC334] - 27/01/2011 - 10:21:50 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf O45 - LFCP:[MD5.B57A623CF9666DFB38B40EF99D0B0398] - 27/01/2011 - 10:23:04 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf O45 - LFCP:[MD5.73310E66D0E7E01A80ED1559552D883C] - 27/01/2011 - 10:23:37 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-01FBC16A.pf O45 - LFCP:[MD5.BAA20CAD4FF3E0EAAC0A219461BD9B13] - 27/01/2011 - 10:25:23 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-38379543.pf O45 - LFCP:[MD5.41A3BFE03B37FE1641FB88976B186A34] - 27/01/2011 - 10:28:39 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf O45 - LFCP:[MD5.4E94B9FBC0C7EE582A4E75BC97218648] - 27/01/2011 - 10:28:43 ---A- - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf O45 - LFCP:[MD5.ACE3812CC75A5E36545DB74E40F01668] - 27/01/2011 - 10:29:17 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf O45 - LFCP:[MD5.DB8D701FB11F1527CBD1ECF8AF526E02] - 27/01/2011 - 10:33:41 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf O45 - LFCP:[MD5.7C05C8B6B5B772CDE474E673008EA8C4] - 27/01/2011 - 10:48:30 ---A- - C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-00101112.pf O45 - LFCP:[MD5.76F71C1EED9ED867C7C85CD4D1D8B7A3] - 27/01/2011 - 10:53:56 ---A- - C:\WINDOWS\Prefetch\XNVIEW.EXE-18AD42DD.pf O45 - LFCP:[MD5.04276837A64AE48616EFDCC42E3EFF6F] - 27/01/2011 - 10:59:14 ---A- - C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf O45 - LFCP:[MD5.9788E872C7917FBDEDE1D11A677F30D0] - 27/01/2011 - 10:59:52 ---A- - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf O45 - LFCP:[MD5.3FFA037DB3B288867BFD63E39AA6091B] - 27/01/2011 - 11:17:13 ---A- - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf O45 - LFCP:[MD5.FA043081E23E939A238015331D01CE97] - 27/01/2011 - 11:17:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13DA0E71.pf O45 - LFCP:[MD5.3ACDD84ED36FDB2E0EB4899CC7857D6E] - 27/01/2011 - 11:17:17 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1831A4F3.pf O45 - LFCP:[MD5.04FAE9BAF50874FFA23A413CE94C29CC] - 27/01/2011 - 11:17:28 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3BA0187D.pf O45 - LFCP:[MD5.3B96882BF204CC282D9325C200EFC567] - 27/01/2011 - 11:17:33 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf O45 - LFCP:[MD5.4C2480F960E0535D25B9D30ACE235425] - 27/01/2011 - 11:17:59 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf O45 - LFCP:[MD5.FEDFAF69118CC8EEBA9E5BD64897F48F] - 30/12/2010 - 18:27:23 ---A- - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" [Disabled] .(.Hewlett-Packard Co. - Embedded Web Server Link application.) -- C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" [Disabled] .(.Hewlett-Packard Co. - HP AiO Fax Manager.) -- C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" [Disabled] .(.Hewlett-Packard Co. - HP OfficeJet SendFax Interface.) -- C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Disabled] .(.Hewlett-Packard Co. - HP All-in-One Launcher Utility.) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Disabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Network Device Rediscovery Service.) -- C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" [Disabled] .(.Pas de propriétaire - hpqscnvw.) -- C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" [Disabled] .(.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" [Disabled] .(.Hewlett-Packard Co. - HP Fax Setup Wizard.) -- C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\SpybotSD TeaTimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"= O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [29392] O58 - SDL:[MD5.2B3B8C0A2C979DD77BA6DC9376074854] - 02/03/2004 - 07:26:58 ---A- . (.Analog Deivces - USB Firmware loader.) -- C:\WINDOWS\system32\drivers\adildr.sys [50007] O58 - SDL:[MD5.D478C566318803A7063B120F026DC0B7] - 02/03/2004 - 07:24:16 ---A- . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\WINDOWS\system32\drivers\adiusbaw.sys [127065] O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [17744] O58 - SDL:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [94544] O58 - SDL:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [100176] O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [23632] O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [294608] O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [47440] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D24DFD16A1E2A76034DF5AA18125C35D] - 01/09/2010 - 09:30:58 ---A- . (.Secunia - Secunia PSI Driver.) -- C:\WINDOWS\system32\drivers\psi_mf.sys [15544] O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 12/05/2008 - 23:06:44 ---A- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\system32\drivers\wdcsam.sys [11520] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 24/01/2011 - 00:39:13 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GHISLER\wcx_ftp.ini [326] O61 - LFC:Last File Created 24/01/2011 - 00:43:44 -SHA- C:\Documents And Settings\Docteur LANGERON\IECompatCache\index.dat [868352] O61 - LFC:Last File Created 24/01/2011 - 00:43:44 -SHA- C:\Documents And Settings\Docteur LANGERON\PrivacIE\index.dat [360448] O61 - LFC:Last File Created 24/01/2011 - 00:44:20 ---A- C:\Documents And Settings\Docteur LANGERON\Cookies\docteur langeron@CA53UXSR.txt [130] O61 - LFC:Last File Created 24/01/2011 - 00:44:46 ---A- C:\Documents And Settings\Docteur LANGERON\Cookies\docteur langeron@CALMYAK0.txt [418] O61 - LFC:Last File Created 24/01/2011 - 00:59:23 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GHISLER\wincmd.ini [4509] O61 - LFC:Last File Created 24/01/2011 - 09:42:15 ---A- C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk [2349] O61 - LFC:Last File Created 24/01/2011 - 10:38:47 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-24.json [876507] O61 - LFC:Last File Created 24/01/2011 - 10:39:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Address Book\Docteur LANGERON.wab [330626] O61 - LFC:Last File Created 24/01/2011 - 10:39:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Address Book\Docteur LANGERON.wab~ [256369] O61 - LFC:Last File Created 24/01/2011 - 10:46:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Sun\Java\Deployment\deployment.properties [821] O61 - LFC:Last File Created 24/01/2011 - 10:49:27 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\scan sans nom.txt [3497103019] O61 - LFC:Last File Created 24/01/2011 - 11:09:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GlarySoft\Glary Utilities\Backups\40567,4649696991 [272] O61 - LFC:Last File Created 24/01/2011 - 11:09:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GlarySoft\Glary Utilities\Backups\index.ini [557] O61 - LFC:Last File Created 24/01/2011 - 11:18:10 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\Languages\French.lng [6521] O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\history.txt [56] O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\lang.ini [77] O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\regfav.ini [441] O61 - LFC:Last File Created 24/01/2011 - 11:27:44 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\desktop.ini [145] O61 - LFC:Last File Created 24/01/2011 - 11:27:44 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\desktop.ini [145] O61 - LFC:Last File Created 24/01/2011 - 12:02:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt.old [498] O61 - LFC:Last File Created 24/01/2011 - 12:21:36 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\Desktop.htt [2722] O61 - LFC:Last File Created 24/01/2011 - 12:25:59 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\ZHP\ZHPDiag2.exe [2295301] O61 - LFC:Last File Created 24/01/2011 - 12:51:23 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A [528] O61 - LFC:Last File Created 24/01/2011 - 12:51:23 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A [140] O61 - LFC:Last File Created 24/01/2011 - 12:51:34 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD [781] O61 - LFC:Last File Created 24/01/2011 - 12:51:34 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD [156] O61 - LFC:Last File Created 24/01/2011 - 12:51:39 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6 [561] O61 - LFC:Last File Created 24/01/2011 - 12:51:39 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6 [134] O61 - LFC:Last File Created 24/01/2011 - 12:51:51 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96019] O61 - LFC:Last File Created 24/01/2011 - 12:51:51 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124] O61 - LFC:Last File Created 24/01/2011 - 12:52:01 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\1B749B72855CB97BF2F58675617C9BF9 [576] O61 - LFC:Last File Created 24/01/2011 - 12:52:01 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\1B749B72855CB97BF2F58675617C9BF9 [162] O61 - LFC:Last File Created 24/01/2011 - 12:52:50 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\C554DCF706A5AAB8B360FAD227EAB9C7 [1310] O61 - LFC:Last File Created 24/01/2011 - 12:52:50 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\C554DCF706A5AAB8B360FAD227EAB9C7 [100] O61 - LFC:Last File Created 24/01/2011 - 12:52:55 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E8974A4669383843486E5AFDB09650F5 [2249] O61 - LFC:Last File Created 24/01/2011 - 12:52:55 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E8974A4669383843486E5AFDB09650F5 [124] O61 - LFC:Last File Created 24/01/2011 - 12:53:57 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\570FB14ABC805C46708F32F92F10C3B4 [573] O61 - LFC:Last File Created 24/01/2011 - 12:53:57 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\570FB14ABC805C46708F32F92F10C3B4 [174] O61 - LFC:Last File Created 24/01/2011 - 12:57:33 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70 [65460] O61 - LFC:Last File Created 24/01/2011 - 12:57:33 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70 [128] O61 - LFC:Last File Created 24/01/2011 - 13:01:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\search.sqlite [2048] O61 - LFC:Last File Created 24/01/2011 - 13:30:09 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [666] O61 - LFC:Last File Created 24/01/2011 - 13:30:09 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [661] O61 - LFC:Last File Created 24/01/2011 - 13:53:35 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\HTML Help\hh.dat [36094] O61 - LFC:Last File Created 24/01/2011 - 14:02:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\ZHP\ZHPLite.exe [12650657] O61 - LFC:Last File Created 24/01/2011 - 14:03:48 ---A- C:\Documents And Settings\All Users\Bureau\ZHP.lnk [700] O61 - LFC:Last File Created 24/01/2011 - 15:24:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Divers.dbx [139376] O61 - LFC:Last File Created 24/01/2011 - 15:24:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\François et Martine.dbx [60116] O61 - LFC:Last File Created 24/01/2011 - 15:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Servat.dbx [60116] O61 - LFC:Last File Created 24/01/2011 - 15:26:18 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Eric.dbx [10276976] O61 - LFC:Last File Created 24/01/2011 - 15:52:27 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Tenot Anny.dbx [1485869864] O61 - LFC:Last File Created 24/01/2011 - 15:52:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Brouillons.dbx [60116] O61 - LFC:Last File Created 24/01/2011 - 17:54:36 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1ca9c53f8705d14-c441f5fd.dat [187392] O61 - LFC:Last File Created 24/01/2011 - 18:50:39 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\1-AdeuxC_estMieux.2.pps.lnk [868] O61 - LFC:Last File Created 24/01/2011 - 19:01:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\signons.sqlite [23552] O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.js [0] O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js [10] O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMDocs.sav [36] O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMGrpPrm.sav [54] O61 - LFC:Last File Created 25/01/2011 - 11:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\ReaderMessages [10240] O61 - LFC:Last File Created 25/01/2011 - 12:02:37 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments envoyés.dbx [129892976] O61 - LFC:Last File Created 25/01/2011 - 12:33:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-25.json [876507] O61 - LFC:Last File Created 25/01/2011 - 14:27:15 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 25/01/2011 - 18:04:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.11 [32456] O61 - LFC:Last File Created 25/01/2011 - 19:58:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt [4554] O61 - LFC:Last File Created 25/01/2011 - 19:58:09 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswBoot.log [2932] O61 - LFC:Last File Created 25/01/2011 - 19:59:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2SM-Global.reg [205] O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [0] O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\History [0] O61 - LFC:Last File Created 25/01/2011 - 22:31:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Ignominie.pdf [228733] O61 - LFC:Last File Created 25/01/2011 - 22:58:24 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\SecurityCheck.exe [879047] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk [784] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk [820] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [796] O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [796] O61 - LFC:Last File Created 25/07/2002 - 22:07:36 ----- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Modem Sagem Adsl\SAGEM F@st 800 v3.0.4\tools\ikernel.ex_ [346602] O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte de réception.dbx [7744752] O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Langeron Eric.dbx [294819056] O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Pop3uidl.dbx [9404] O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments supprimés.dbx [191188] O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte d'envoi.dbx [191188] O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Folders.dbx [74720] O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Offline.dbx [9656] O61 - LFC:Last File Created 26/01/2011 - 09:26:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS2-Docteur LANGERON.reg [85] O61 - LFC:Last File Created 26/01/2011 - 09:26:03 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86] O61 - LFC:Last File Created 26/01/2011 - 09:47:09 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat.bak [10752] O61 - LFC:Last File Created 26/01/2011 - 09:48:12 R--A- C:\Documents And Settings\Docteur LANGERON\Bureau\ComboFix.exe [4160433] O61 - LFC:Last File Created 26/01/2011 - 09:52:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt [496] O61 - LFC:Last File Created 26/01/2011 - 09:53:15 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGCP-Global.reg [114] O61 - LFC:Last File Created 26/01/2011 - 09:53:16 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [347] O61 - LFC:Last File Created 26/01/2011 - 09:53:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDCMD-Docteur LANGERON.reg [0] O61 - LFC:Last File Created 26/01/2011 - 09:55:13 --HA- C:\Documents And Settings\Default User\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 [36753] O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 [114] O61 - LFC:Last File Created 26/01/2011 - 10:14:41 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js.BAK [29242] O61 - LFC:Last File Created 26/01/2011 - 11:40:50 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66.jpg [3145] O61 - LFC:Last File Created 26/01/2011 - 11:41:56 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66_1.jpg [11358] O61 - LFC:Last File Created 26/01/2011 - 11:42:27 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66_2.png [32077] O61 - LFC:Last File Created 26/01/2011 - 11:45:37 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\usa_smiley_2.gif [4945] O61 - LFC:Last File Created 26/01/2011 - 11:46:14 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\usa_route_66.gif [38234] O61 - LFC:Last File Created 26/01/2011 - 11:51:28 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66.jpg [52098] O61 - LFC:Last File Created 26/01/2011 - 11:51:50 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\preloader.gif [2509] O61 - LFC:Last File Created 26/01/2011 - 11:52:06 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\btnLeft.gif [845] O61 - LFC:Last File Created 26/01/2011 - 11:52:20 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\btnRight.gif [851] O61 - LFC:Last File Created 26/01/2011 - 11:53:18 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\buyIt_right.gif [318] O61 - LFC:Last File Created 26/01/2011 - 11:53:23 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\buyIt_left.gif [320] O61 - LFC:Last File Created 26/01/2011 - 11:56:07 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\plaque-d-immatriculation-rte-66.jpg [28570] O61 - LFC:Last File Created 26/01/2011 - 11:57:01 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66-deco-auto-tag.jpg [28784] O61 - LFC:Last File Created 26/01/2011 - 11:59:11 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66_3.jpg [106780] O61 - LFC:Last File Created 26/01/2011 - 12:01:02 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\map-of-route-66.jpg [44124] O61 - LFC:Last File Created 26/01/2011 - 12:02:21 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\strewe-oliver-road-sign-on-old-route-66-at-texas-new-mexico-border-usa.jpg [23359] O61 - LFC:Last File Created 26/01/2011 - 12:04:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\blocklist.xml [4694] O61 - LFC:Last File Created 26/01/2011 - 12:04:51 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\med-route-66-abandon.jpg [96821] O61 - LFC:Last File Created 26/01/2011 - 12:33:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws.ori [1944] O61 - LFC:Last File Created 26/01/2011 - 12:51:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws [0] O61 - LFC:Last File Created 26/01/2011 - 12:52:37 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Docteur LANGERON.reg [379] O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Docteur LANGERON.reg [132] O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUNTCVW-Docteur LANGERON.reg [235] O61 - LFC:Last File Created 26/01/2011 - 12:52:39 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDRegT-Global.reg [133] O61 - LFC:Last File Created 26/01/2011 - 13:20:20 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan rapide.txt [51551] O61 - LFC:Last File Created 26/01/2011 - 13:44:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\OTL.exe [602624] O61 - LFC:Last File Created 26/01/2011 - 13:49:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-26.json [876507] O61 - LFC:Last File Created 26/01/2011 - 13:51:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\selfdef.log [102488] O61 - LFC:Last File Created 26/01/2011 - 16:04:24 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:28 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\1I9AV9ZL\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\KHW2L9LM\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\TE8CV091\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\Z3VBC61H\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini [145] O61 - LFC:Last File Created 26/01/2011 - 16:05:59 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBTB1-Docteur LANGERON.reg [4041] O61 - LFC:Last File Created 26/01/2011 - 16:25:14 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\L'analyse d'Erik Izraelewicz - Blogs - Les Echos~.feed-ms [73728] O61 - LFC:Last File Created 26/01/2011 - 16:25:54 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [7524] O61 - LFC:Last File Created 26/01/2011 - 16:26:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.log [1955] O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.cache [92] O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.ini [87] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\compreg.dat [147965] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.rdf [850] O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\xpti.dat [102368] O61 - LFC:Last File Created 26/01/2011 - 16:26:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [456] O61 - LFC:Last File Created 26/01/2011 - 16:57:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Windows\Themes\Custom.theme [5385] O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\CurrScanSet.cfg [44] O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\mru.cfg [1510] O61 - LFC:Last File Created 26/01/2011 - 17:39:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012620110127\index.dat [49152] O61 - LFC:Last File Created 26/01/2011 - 17:39:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS5-Docteur LANGERON.reg [320] O61 - LFC:Last File Created 26/01/2011 - 17:46:27 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk [1757] O61 - LFC:Last File Created 26/01/2011 - 17:48:21 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT13.xml [2026] O61 - LFC:Last File Created 26/01/2011 - 17:48:21 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT14.xml [426] O61 - LFC:Last File Created 26/01/2011 - 17:48:22 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT15.xml [805416] O61 - LFC:Last File Created 26/01/2011 - 17:48:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT16.xml [2026] O61 - LFC:Last File Created 26/01/2011 - 17:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT17.xml [426] O61 - LFC:Last File Created 26/01/2011 - 17:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT18.xml [805416] O61 - LFC:Last File Created 26/01/2011 - 17:49:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT28.xml [2026] O61 - LFC:Last File Created 26/01/2011 - 17:49:08 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT29.xml [426] O61 - LFC:Last File Created 26/01/2011 - 17:49:08 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2A.xml [805416] O61 - LFC:Last File Created 26/01/2011 - 17:50:50 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2B.xml [2787756] O61 - LFC:Last File Created 26/01/2011 - 17:50:51 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2C.dtd [1022] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\02Q1OUBH\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\1GGGR282\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\90IOFFS3\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\IBY26ZT8\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\History\History.IE5\desktop.ini [145] O61 - LFC:Last File Created 26/01/2011 - 18:08:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1caaaf1c0948ba2-78a1309b.dat [4344] O61 - LFC:Last File Created 26/01/2011 - 18:14:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\VBE\MSForms.exd [147284] O61 - LFC:Last File Created 26/01/2011 - 18:14:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\VBE\RefEdit.exd [15040] O61 - LFC:Last File Created 26/01/2011 - 18:15:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m44.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:26:44 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\VB11.pip [144] O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Cookies\index.dat [16384] O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768] O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\History\History.IE5\index.dat [16384] O61 - LFC:Last File Created 26/01/2011 - 18:28:53 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\AdobeARM.log [2301] O61 - LFC:Last File Created 26/01/2011 - 18:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Modèle mercredi décembre janvier février.lnk [484] O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Bibliothèque.lnk [775] O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\EUROTOOL.lnk [890] O61 - LFC:Last File Created 26/01/2011 - 18:29:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours du mercredi CVS.lnk [360] O61 - LFC:Last File Created 26/01/2011 - 18:30:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m12.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Parcours du mercredi.lnk [287] O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m45.lnk [355] O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Disque amovible (I).lnk [179] O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours CVS.lnk [324] O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Publis11.pip [1672] O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Publisher\pubcmd.dat [2361] O61 - LFC:Last File Created 26/01/2011 - 18:42:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Excel\Excel11.xlb [19277] O61 - LFC:Last File Created 26/01/2011 - 18:42:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Excel11.pip [1628] O61 - LFC:Last File Created 26/01/2011 - 18:42:34 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [5120] O61 - LFC:Last File Created 26/01/2011 - 18:47:31 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [32768] O61 - LFC:Last File Created 26/01/2011 - 18:48:00 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS1-Docteur LANGERON.reg [81] O61 - LFC:Last File Created 26/01/2011 - 18:49:22 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini [0] O61 - LFC:Last File Created 26/01/2011 - 18:50:23 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Docteur LANGERON.reg [226] O61 - LFC:Last File Created 26/01/2011 - 18:50:28 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [227] O61 - LFC:Last File Created 26/01/2011 - 18:50:35 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [332] O61 - LFC:Last File Created 26/01/2011 - 18:50:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [157] O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log [1029] O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [608] O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [4850] O61 - LFC:Last File Created 26/01/2011 - 18:54:04 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Overview.ini [0] O61 - LFC:Last File Created 26/01/2011 - 18:54:13 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 26/01/2011 - 18:55:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.log [627] O61 - LFC:Last File Created 26/01/2011 - 18:57:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:57:49 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 26/01/2011 - 18:58:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\permissions.sqlite [2853888] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [3849] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0] O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [1240] O61 - LFC:Last File Created 26/01/2011 - 18:59:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Crash Reports\InstallTime20101203075014 [10] O61 - LFC:Last File Created 26/01/2011 - 19:01:53 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\XPC.mfl [2404548] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\La_messe.lnk [813] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\temp.lnk [698] O61 - LFC:Last File Created 26/01/2011 - 19:02:34 --H-- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\index.dat [2987] O61 - LFC:Last File Created 26/01/2011 - 19:03:47 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\downloads.sqlite [2048] O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\PowerP11.pip [1860] O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\PowerPoint\PPT11.pcb [2196] O61 - LFC:Last File Created 26/01/2011 - 19:22:32 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk [549] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [94] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78] O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6094433] O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18] O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216] O61 - LFC:Last File Created 26/01/2011 - 20:54:21 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [44156] O61 - LFC:Last File Created 27/01/2011 - 09:20:18 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [8192] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Finances Personnelles~.feed-ms [380928] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\La Vie Financière~.feed-ms [385024] O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Les Echos - recommandations, conseils et analyses~.feed-ms [352256] O61 - LFC:Last File Created 27/01/2011 - 09:34:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\webappsstore.sqlite [3072] O61 - LFC:Last File Created 27/01/2011 - 09:36:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cert8.db [196608] O61 - LFC:Last File Created 27/01/2011 - 09:36:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\key3.db [16384] O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_001_ [261711] O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_002_ [117955] O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_003_ [311874] O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 27/01/2011 - 09:36:27 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite [8192] O61 - LFC:Last File Created 27/01/2011 - 09:47:38 -SHA- C:\Documents And Settings\Docteur LANGERON\Recent\Desktop.ini [150] O61 - LFC:Last File Created 27/01/2011 - 10:14:07 -SH-- C:\Documents And Settings\Docteur LANGERON\ntuser.ini [184] O61 - LFC:Last File Created 27/01/2011 - 10:16:15 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 27/01/2011 - 10:16:16 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 27/01/2011 - 10:16:17 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Credentials\S-1-5-21-790525478-2052111302-682003330-1003\Credentials [940] O61 - LFC:Last File Created 27/01/2011 - 10:16:17 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 27/01/2011 - 10:16:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Chest.log [40572] O61 - LFC:Last File Created 27/01/2011 - 10:16:37 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012720110128\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384] O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384] O61 - LFC:Last File Created 27/01/2011 - 10:16:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\avast5.ini [16412] O61 - LFC:Last File Created 27/01/2011 - 10:16:47 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [16384] O61 - LFC:Last File Created 27/01/2011 - 10:18:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5375] O61 - LFC:Last File Created 27/01/2011 - 10:18:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232] O61 - LFC:Last File Created 27/01/2011 - 10:20:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\Log.db [113664] O61 - LFC:Last File Created 27/01/2011 - 10:21:34 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Assistant Configuration du réseau.lnk [1640] O61 - LFC:Last File Created 27/01/2011 - 10:23:35 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384] O61 - LFC:Last File Created 27/01/2011 - 10:23:35 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 27/01/2011 - 10:23:46 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Setup.log [740772] O61 - LFC:Last File Created 27/01/2011 - 10:24:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswAr.log [161662] O61 - LFC:Last File Created 27/01/2011 - 10:28:48 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js [28648] O61 - LFC:Last File Created 27/01/2011 - 10:28:50 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\06AF6CA2d01 [30601] O61 - LFC:Last File Created 27/01/2011 - 10:28:51 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DD066E1Cd01 [38418] O61 - LFC:Last File Created 27/01/2011 - 10:29:04 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\03D6DE48d01 [21120] O61 - LFC:Last File Created 27/01/2011 - 10:29:04 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\F3782808d01 [40164] O61 - LFC:Last File Created 27/01/2011 - 10:29:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat [10206] O61 - LFC:Last File Created 27/01/2011 - 10:29:09 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\AAE1D354d01 [18596] O61 - LFC:Last File Created 27/01/2011 - 10:29:09 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\AB6D9503d01 [19918] O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\3C01F00Dd01 [23799] O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\6DBD22DDd01 [50618] O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DA17B4E5d01 [19494] O61 - LFC:Last File Created 27/01/2011 - 10:29:23 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\formhistory.sqlite [4096] O61 - LFC:Last File Created 27/01/2011 - 10:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DF0977E2d01 [19057] O61 - LFC:Last File Created 27/01/2011 - 10:29:31 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\EA6E706Fd01 [17417] O61 - LFC:Last File Created 27/01/2011 - 10:29:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\25766069d01 [21374] O61 - LFC:Last File Created 27/01/2011 - 10:29:35 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\8BA2D107d01 [28833] O61 - LFC:Last File Created 27/01/2011 - 10:30:02 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twunk001.MTX [156] O61 - LFC:Last File Created 27/01/2011 - 10:30:02 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twunk002.MTX [0] O61 - LFC:Last File Created 27/01/2011 - 10:30:03 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twain001.Mtx [2] O61 - LFC:Last File Created 27/01/2011 - 10:30:26 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 10:30:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\4I7I3CKP\oXMLStoreUnit[1].xml [56] O61 - LFC:Last File Created 27/01/2011 - 10:33:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifierkey3.txt [154] O61 - LFC:Last File Created 27/01/2011 - 10:33:40 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\TWAIN.LOG [8440] O61 - LFC:Last File Created 27/01/2011 - 10:33:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\HP\ScLogs\SolutionCenter.htm [45960] O61 - LFC:Last File Created 27/01/2011 - 10:36:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste.jpg [1991451] O61 - LFC:Last File Created 27/01/2011 - 10:36:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 0.jpg [1991451] O61 - LFC:Last File Created 27/01/2011 - 10:36:41 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Numériser0001.lnk [827] O61 - LFC:Last File Created 27/01/2011 - 10:41:26 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 1.jpg [1447214] O61 - LFC:Last File Created 27/01/2011 - 10:45:17 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\Copie de piste 0.jpg [1372442] O61 - LFC:Last File Created 27/01/2011 - 10:45:23 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Copie de piste 0.lnk [842] O61 - LFC:Last File Created 27/01/2011 - 10:46:58 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 2.jpg [337652] O61 - LFC:Last File Created 27/01/2011 - 10:47:11 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Copie de Copie de piste 0.lnk [887] O61 - LFC:Last File Created 27/01/2011 - 10:47:29 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\piste 1.lnk [797] O61 - LFC:Last File Created 27/01/2011 - 10:47:35 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\piste 0.lnk [797] O61 - LFC:Last File Created 27/01/2011 - 10:50:10 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 0.lnk [463] O61 - LFC:Last File Created 27/01/2011 - 10:50:25 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 0.jpg [1427662] O61 - LFC:Last File Created 27/01/2011 - 10:51:08 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 1.jpg [347963] O61 - LFC:Last File Created 27/01/2011 - 10:53:22 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 2.jpg [242171] O61 - LFC:Last File Created 27/01/2011 - 10:53:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\PhotoFiltre\PhotoFiltre.ini [4482] O61 - LFC:Last File Created 27/01/2011 - 10:53:42 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 1.lnk [842] O61 - LFC:Last File Created 27/01/2011 - 10:53:46 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 2.lnk [842] O61 - LFC:Last File Created 27/01/2011 - 10:54:27 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\7137D911d01 [97261] O61 - LFC:Last File Created 27/01/2011 - 10:54:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DB9CAF24d01 [37200] O61 - LFC:Last File Created 27/01/2011 - 10:54:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\F07A4F93d01 [22134] O61 - LFC:Last File Created 27/01/2011 - 10:54:31 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\FD4207E4d01 [20865] O61 - LFC:Last File Created 27/01/2011 - 10:54:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\BCF52B01d01 [41728] O61 - LFC:Last File Created 27/01/2011 - 10:54:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\2A5B56D1d01 [29694] O61 - LFC:Last File Created 27/01/2011 - 10:57:55 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\XUL.mfl [1136720] O61 - LFC:Last File Created 27/01/2011 - 10:58:27 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\localstore.rdf [35197] O61 - LFC:Last File Created 27/01/2011 - 10:59:05 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\8CF9F348d01 [55633] O61 - LFC:Last File Created 27/01/2011 - 10:59:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\E42967C4d01 [35600] O61 - LFC:Last File Created 27/01/2011 - 10:59:13 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\EC206000d01 [32128] O61 - LFC:Last File Created 27/01/2011 - 10:59:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite-journal [6704] O61 - LFC:Last File Created 27/01/2011 - 10:59:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\sessionstore.js [60345] O61 - LFC:Last File Created 27/01/2011 - 11:00:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite [1175552] O61 - LFC:Last File Created 27/01/2011 - 11:00:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite-journal [0] O61 - LFC:Last File Created 27/01/2011 - 11:03:04 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\usntr.log [2464518] O61 - LFC:Last File Created 27/01/2011 - 11:09:22 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifier3.sqlite [38903808] O61 - LFC:Last File Created 27/01/2011 - 11:10:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\URL.db [2806784] O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558] O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144] O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569] O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142] O61 - LFC:Last File Created 27/01/2011 - 11:13:37 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt [118064] O61 - LFC:Last File Created 27/01/2011 - 11:13:38 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\BehaviorShield.ini [169] O61 - LFC:Last File Created 27/01/2011 - 11:13:38 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\FileSystemShield.txt [88011] O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\FileSystemShield.ini [967] O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\IMShield.ini [717] O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\IMShield.txt [87415] O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\EmailShield.ini [1269] O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Mail.log [1329480] O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\EmailShield.txt [87415] O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\NetworkShield.txt [87415] O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\NetworkShield.ini [29] O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\P2PShield.ini [843] O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\P2PShield.txt [87415] O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\WebShield.txt [88449] O61 - LFC:Last File Created 27/01/2011 - 11:13:43 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\WebShield.ini [632] O61 - LFC:Last File Created 27/01/2011 - 11:16:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1c91e8e6fac7132-14549e04.dat [5586480] O61 - LFC:Last File Created 27/01/2011 - 11:17:11 --HA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\index.dat [196608] O61 - LFC:Last File Created 27/01/2011 - 11:17:11 -SHA- C:\Documents And Settings\Docteur LANGERON\Cookies\index.dat [32768] O61 - LFC:Last File Created 27/01/2011 - 11:17:11 -SHA- C:\Documents And Settings\Docteur LANGERON\IETldCache\index.dat [262144] ---\\ Alternate Data Stream File (ADS) (O62) O62 - ADS:Alternate Data Stream File - C:\WINDOWS\System32\SpoonUninstall.exe:Zone.Identifier ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: OTL - (.OldTimer.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\AAVMKER4.sys - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4 O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - Environnement de prise en charge de réseau AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\System32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASPI32.sys - Aspi32 (Aspi32) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASPI32 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWMON2.sys - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI O64 - Services: CurCS - C:\WINDOWS\System32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Antivirus (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\BrPar.sys - BrPar (BrPar) .(.Brother Industries Ltd. - Brother Parallel class Driver version 1.01.) - LEGACY_BRPAR O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\catchme.sys (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\system32\cisvc.exe - Service d'indexation (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC O64 - Services: CurCS - C:\WINDOWS\system32\clipsrv.exe - Gestionnaire de l'Album (ClipSrv) .(.Microsoft Corporation - Windows NT DDE Server.) - LEGACY_CLIPSRV O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\DMLOAD.sys - dmload (dmload) .(.Pas de propriétaire - Pas de description.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate1c9dba399512e1a) (gupdate1c9dba399512e1a) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1C9DBA399512E1A O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Updater Service (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - hpqcxs08 (hpqcxs08) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQCXS08 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service HP CUE DeviceDiscovery (hpqddsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQDDSVC O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Administration IIS (IISADMIN) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_IISADMIN O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - C:\Windows\System32\drivers\ip6fw.sys - Pilote du pare-feu Windows IPv6 (ip6fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Écouteur RIP (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\mbr.sys (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\System32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\WINDOWS\system32\drivers\mqac.sys - Message Queuing access control (MQAC) .(.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) - LEGACY_MQAC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\WINDOWS\System32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication FTP (MSFTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_MSFTPSVC O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - C:\WINDOWS\system32\mqsvc.exe - Message Queuing (MSMQ) .(.Microsoft Corporation - Message Queuing Service.) - LEGACY_MSMQ O64 - Services: CurCS - C:\WINDOWS\system32\mqtgsvc.exe - Message Queuing Triggers (MSMQTriggers) .(.Microsoft Corporation - Windows NT MSMQ Trigger Service.) - LEGACY_MSMQTRIGGERS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Net Driver HPZ12 (Net Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NET_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper 3004 (nosGetPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NOSGETPLUSHELPER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(.Pas de propriétaire - Pas de description.) - LEGACY_PROCEXP113 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psi_mf.sys - PSI (PSI) .(.Secunia - Secunia PSI Driver.) - LEGACY_PSI O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - C:\WINDOWS\system32\drivers\RMCast.sys - Reliable Multicast Protocol driver (RMCAST) .(.Microsoft Corporation - Reliable Multicast Transport.) - LEGACY_RMCAST O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\Program Files\Secunia\PSI\PSIA.exe - Secunia PSI Agent (Secunia PSI Agent) .(.Secunia - Secunia PSI Agent.) - LEGACY_SECUNIA_PSI_AGENT O64 - Services: CurCS - C:\Program Files\Secunia\PSI\sua.exe - Secunia Update Agent (Secunia Update Agent) .(.Secunia - Secunia Update Agent.) - LEGACY_SECUNIA_UPDATE_AGENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pare-feu de connexion Internet (ICF) / Partage de connexion Internet (ICS) (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\System32\tcpsvcs.exe - Services TCP/IP simplifiés (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Simple Mail Transfer Protocol (SMTP) (SMTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_SMTPSVC O64 - Services: CurCS - C:\WINDOWS\System32\snmp.exe - Service SNMP (SNMP) .(.Microsoft Corporation - Service SNMP.) - LEGACY_SNMP O64 - Services: CurCS - C:\WINDOWS\System32\snmptrap.exe - Service d'interruption SNMP (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication World Wide Web (w3svc) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_W3SVC O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe - WD Drive Manager Service (WDBtnMgrSvc.exe) .(.WDC - WD Drive Manager Service.) - LEGACY_WDBTNMGRSVC.EXE O64 - Services: CurCS - C:\Windows\System32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Portable Media Serial Number Service (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC ---\\ Liste des fichiers non signés (LUF) (O65) O65 - LUF:09/01/2004 (.Pas de propriétaire - ActiveSkin Module.) (4, 2, 7, 3) - c:\windows\system32\actskin4.ocx O65 - LUF:13/06/1998 (.Pas de propriétaire - Gif89 Module.) (1, 0, 0, 1) - c:\windows\system32\GIF89.DLL O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHS O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHT O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DE O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DEU O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ES O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ESP O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.exe O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FR O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FRA O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.IT O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ITA O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JP O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JPN O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.59) - c:\windows\system32\PSDrvCheck.KO O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.KOR O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NL O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NLD ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - Bing O69 - SBI: SearchScopes [HKCU] {543AE12E-0651-4B4B-A098-7C124535ECEE} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.co ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Auto 19/12/2002 147456 | (Ati HotKey Poller) . (.Pas de propriétaire.) - C:\WINDOWS\System32\Ati2evxx.exe SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe SS - | Auto 17/02/2009 133104 | (gupdate1c9dba399512e1a) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 22/12/2009 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 14/11/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe SR - | Auto 14/10/2010 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe SR - | Auto 10/01/2011 993848 | (Secunia PSI Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\PSIA.exe SR - | Auto 10/01/2011 399416 | (Secunia Update Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\sua.exe SR - | Auto 26/06/2009 102400 | (WDBtnMgrSvc.exe) . (.WDC.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover Run by Docteur LANGERON at 27/01/2011 11:27:46 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS 1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F92AB8] 3 CLASSPNP[0xF87A5FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000005b[0x82F7CE98] 5 ACPI[0xF86EB620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-4[0x82F84D98] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Docteur LANGERON at 27/01/2011 11:27:46 Use the desktop link 'MBRCheck' to have full report ---\\ Infection BT - BHO/Toolbar (Possible) [HKCU\Software\Search Settings] [HKLM\Software\Search Settings] End of the scan (1452 lines in 09mn 57s)(0)

Je viens de refaire selon la procédure que vous m'avez indiquée OTL, ce qui donne le rapport ci-contre : All processes killed ========== OTL ========== Service HidServ stopped successfully! Service HidServ deleted successfully! Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.defaultenginename Prefs.js: "Ask.com" removed from browser.search.order.1 Prefs.js: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=BCPA&o=16145&locale=fr_FR&apn_uid=ABF47116-4D56-43F5-A74D-739C4BCDB5B2&apn_ptnrs=QK&apn_sauid=55F260F0-FFC5-4033-AA86-42E13B72CFBA&apn_dtid=YYYYYYYYFR&q=" removed from keyword.URL C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Extensions folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\META-INF folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome\content folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}\chrome folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66} folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\defaults\preferences folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\defaults folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\components folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\chrome folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com folder moved successfully. C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions folder moved successfully. Folder C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66}\ not found. Folder C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}\ not found. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully. C:\Program Files\Mozilla Firefox\extensions folder moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully. File move failed. H:\autorun.inf scheduled to be moved on reboot. ADS C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34 deleted successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56502 bytes User: Docteur LANGERON ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 320678 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 38428989 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 1261 bytes User: LocalService ->Temp folder emptied: 65748 bytes ->Temporary Internet Files folder emptied: 49286 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 48569 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 18960230 bytes RecycleBin emptied: 439 bytes Total Files Cleaned = 55,00 mb [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 0 bytes User: Docteur LANGERON ->Flash cache emptied: 0 bytes User: LocalService User: NetworkService Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 01262011_155916 Files\Folders moved on Reboot... File move failed. H:\autorun.inf scheduled to be moved on reboot. C:\WINDOWS\temp\Perflib_Perfdata_1d8.dat moved successfully. Registry entries deleted on Reboot... Avec tous mes remerciements pour votre gentillesse et votre promptitude. NB : J'ai bien un petit problème, assez ancien. Lorsque j'exécute Microsoft Baseline Security Analyzer 2.2 il m'indique toujours qu'une mise à jour ne s'est pas effectuée et qu'il faut redémarrer Windows mais ceci est sans effet. Il ne m'indique pas quelle mise à jour ne s'est pas effectuée. Le problème est signalé dans la base de donnée de Microsoft mais la correction ou les corrections me semblent bien difficiles à mettre en œuvre. Je souhaiterai votre avis. Encore une fois tous mes remerciements.