merci pour votre aide

Bonsoir, Voici ce qui ressort du scan Bien à vous et merci encore Rapport de ZHPDiag v1.27.1832 par Nicolas Coolman, Update du 24/03/2011 Run by jamel at 24/03/2011 16:58:47 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v7.0.6000.16982 (Defaut) GCIE: Google Chrome v10.0.648.151 GCIE: Google Chrome Frame v10.0.648.151 ---\\ System Information Windows Vista Home Premium Edition, 32-bit (Build 6000) Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1022 MB (35% free) System Restore: Activé (Enable) System drive C: has 32 GB (28%) free of 112 GB ---\\ Logged in mode Computer Name: PC-DE-JAMEL User Name: jamel All Users Names: jamel, Administrateur, Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables %AppData%=C:\Users\jamel\AppData\Roaming %LocalAppData%=C:\Users\jamel\AppData\Local %StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 112 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 7 Go) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ Hard drive, Flash drive, Thumb drive (Free 74 Go of 233 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ---\\ Recherche particulière de fichiers génériques [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520] [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744] [MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512] [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224] [MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048] [MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360] ---\\ Processus lancés [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624] [MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320] [MD5.E2724029D3648C2EB226D16678727FA9] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256] [MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704] [MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440] [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632] [MD5.88C44CA9A052AEAEC0C91A57CE5AB41A] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304] [MD5.FF7F14FDA901090E337488A1900E3660] - (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe [151040] [MD5.3BD9A5E2020F84253C21B554AE8E01AB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [641536] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.) P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search G0 - GCSP: Preference [user Data\Default][HomePage] Google G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé) G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé) ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} Clé orpheline R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ---\\ ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKCU\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.) O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.) O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ---\\ ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\jamel\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe O4 - Global Startup: C:\Users\jamel\Desktop\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.) O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: (CLTNetCnService) - Clé orpheline O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe [MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700} O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2} O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75} O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75} O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35} O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37} O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36} O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8} O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA} O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0} O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D} O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47} O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799} O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293} O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9 O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047} O42 - Logiciel: Google Toolbar for Firefox - (.Google Inc..) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008} O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E} O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3 O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F} O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB} O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2} O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005 O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD} O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4} O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE} O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A} O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1} O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF} O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748} O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E} O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1 O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1} O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5 O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ACD Systems] [HKCU\Software\ALWIL Software] [HKCU\Software\Acer] [HKCU\Software\Ad-Remover] [HKCU\Software\Adobe] [HKCU\Software\Alibaba] [HKCU\Software\AppDataLow\Google] [HKCU\Software\AppDataLow\Software\DivXNetworks] [HKCU\Software\AppDataLow\Software\DivX] [HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\Softonic_France] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\Software\settings] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Bugsplat] [HKCU\Software\CDDB] [HKCU\Software\Camfrog] [HKCU\Software\CanonBJ] [HKCU\Software\Catbytes Software] [HKCU\Software\Classes.crx] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Crystal Decisions] [HKCU\Software\CyberLink] [HKCU\Software\Cygnus Solutions] [HKCU\Software\Digimarc] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EPSON] [HKCU\Software\GNU] [HKCU\Software\GRETECH] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Génération 5] [HKCU\Software\Hofmann] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Leadertech] [HKCU\Software\LogiShrd] [HKCU\Software\Logitech] [HKCU\Software\MEGAUPLOADER] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MegauploadToolbar] [HKCU\Software\Megaupload] [HKCU\Software\MimarSinan] [HKCU\Software\Mindscape] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MyHeritage.com] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Opera Software] [HKCU\Software\Orange] [HKCU\Software\Piriform] [HKCU\Software\PoivY] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\Realtek] [HKCU\Software\SSPrint] [HKCU\Software\STOIK Imagic 30] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Stoik] [HKCU\Software\SubSystems] [HKCU\Software\SupportSoft] [HKCU\Software\Symantec] [HKCU\Software\Sysinternals] [HKCU\Software\The Complete Genealogy Reporter] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VoipCheapCom] [HKCU\Software\Wget] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\cybelsoft] [HKCU\Software\eBay] [HKCU\Software\eMule] [HKCU\Software\keyhole.com] [HKLM\Software\ABBYY] [HKLM\Software\ACD Systems] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ALWIL Software] [HKLM\Software\Acer Inc.] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\America Online] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Compedia] [HKLM\Software\Crystal Decisions] [HKLM\Software\CyberLink] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EPSON] [HKLM\Software\EpsonNet] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\GRETECH] [HKLM\Software\Google] [HKLM\Software\Hulabee] [HKLM\Software\Imikimi] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Kutoka] [HKLM\Software\LiberTV] [HKLM\Software\LightScribe] [HKLM\Software\LogiShrd] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Megaupload Limited] [HKLM\Software\Megaupload] [HKLM\Software\Micro Application] [HKLM\Software\MimarSinan] [HKLM\Software\Mindscape] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\MyHeritage.com] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\NewTech Infosystems] [HKLM\Software\Nullsoft] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\SEC] [HKLM\Software\SEIKO EPSON CORPORATION] [HKLM\Software\SPanel] [HKLM\Software\SRS Labs] [HKLM\Software\SSPrint] [HKLM\Software\Safer Networking Limited] [HKLM\Software\SamsungMaster] [HKLM\Software\Samsung] [HKLM\Software\Secure] [HKLM\Software\Skype] [HKLM\Software\Softonic_France] [HKLM\Software\Sonic] [HKLM\Software\Sony Corporation] [HKLM\Software\SupportSoft] [HKLM\Software\Swearware] [HKLM\Software\Symantec] [HKLM\Software\The Learning Company] [HKLM\Software\TrendMicro] [HKLM\Software\VideoLAN] [HKLM\Software\WinRAR] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\Yahoo] [HKLM\Software\ZSMC] [HKLM\Software\cybelsoft] [HKLM\Software\eZee] [HKLM\Software\mozilla.org] [HKLM\Software\muvee Technologies] ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone O43 - CFD: 21/03/2011 - 10:36:58 - [92062695] ----D- C:\Program Files\Ad-Remover O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba O43 - CFD: 4/06/2010 - 20:22:10 - [144361794] ----D- C:\Program Files\Alwil Software O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner O43 - CFD: 9/03/2011 - 18:52:14 - [848944467] ----D- C:\Program Files\Common Files O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson O43 - CFD: 9/03/2011 - 19:01:02 - [168424485] ----D- C:\Program Files\Epson Software O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 22/03/2011 - 0:17:14 - [895677548] ----D- C:\Program Files\Google O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6 O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com O43 - CFD: 24/03/2011 - 13:16:48 - [4921783] ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office O43 - CFD: 30/12/2010 - 17:23:26 - [272588467] ----D- C:\Program Files\Microsoft SQL Server O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1 O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo! O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe O43 - CFD: 8/01/2010 - 21:21:08 - [39202830] ----D- C:\Program Files\Common Files\logishrd O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared O43 - CFD: 9/03/2011 - 18:52:14 - [1859874] ----D- C:\ProgramData\ABBYY O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe O43 - CFD: 4/06/2010 - 20:14:22 - [13505506] ----D- C:\ProgramData\Alwil Software O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites O43 - CFD: 25/03/2010 - 9:27:00 - [6937500] ----D- C:\ProgramData\Google O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com O43 - CFD: 23/09/2009 - 0:38:36 - [6463665] ----D- C:\ProgramData\Malwarebytes O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 16/03/2011 - 8:27:56 - [500634187] -S--D- C:\ProgramData\Microsoft O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS O43 - CFD: 24/03/2011 - 16:21:32 - [2053053] ----D- C:\ProgramData\NVIDIA O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 28/01/2010 - 16:16:22 - [27167901] ----D- C:\ProgramData\Skype O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun O43 - CFD: 23/09/2009 - 0:01:20 - [6233781] ----D- C:\ProgramData\SupportSoft O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems O43 - CFD: 5/01/2011 - 12:48:02 - [17303688] ----D- C:\Users\jamel\AppData\Roaming\Adobe O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss O43 - CFD: 20/03/2011 - 0:56:42 - [7831] ----D- C:\Users\jamel\AppData\Roaming\Epson O43 - CFD: 25/03/2010 - 9:27:48 - [890] ----D- C:\Users\jamel\AppData\Roaming\Google O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0 O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech O43 - CFD: 22/09/2009 - 22:41:04 - [160369] ----D- C:\Users\jamel\AppData\Roaming\Macromedia O43 - CFD: 23/09/2009 - 0:38:48 - [1368933] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar O43 - CFD: 16/03/2011 - 9:13:32 - [3420854] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre O43 - CFD: 24/03/2011 - 11:01:00 - [486674] ----D- C:\Users\jamel\AppData\Roaming\PoivY O43 - CFD: 18/01/2011 - 16:22:42 - [2366867] ----D- C:\Users\jamel\AppData\Roaming\Real O43 - CFD: 24/03/2011 - 16:18:58 - [19883543] ----D- C:\Users\jamel\AppData\Roaming\Skype O43 - CFD: 24/03/2011 - 16:02:52 - [122504] ----D- C:\Users\jamel\AppData\Roaming\skypePM O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409] O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24] O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560] O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920] O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672] O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368] O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928] O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160] O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736] O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976] O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312] O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272] O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656] O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960] O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096] O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0] O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734] O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144] O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165] O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920] O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756] O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872] O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392] O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504] O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488] O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696] O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392] O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306] O44 - LFC:[MD5.38EF1200D8DC457600FCFD7F0CF01200] - 24/03/2011 - 16:57:57 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1476893] O44 - LFC:[MD5.AE04CF777F1F4FCFE5C424F6C2A78D1D] - 24/03/2011 - 16:55:40 ---A- . (...) -- C:\Ad-Report-SCAN[3].txt [4684] O44 - LFC:[MD5.D286B44E536D4F528365E07DEBF89202] - 24/03/2011 - 16:20:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.38A40AB1E59516AFFCAB8BC3C84C9BD5] - 24/03/2011 - 16:20:45 ---A- . (...) -- C:\Windows\PFRO.log [139538] O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 24/03/2011 - 13:16:44 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224] O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 24/03/2011 - 13:16:41 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952] O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796] O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428] O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068] O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652] O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302] O44 - LFC:[MD5.32FCF71EDF4AA4149EA017C17E0632E5] - 21/03/2011 - 13:33:37 ---A- . (...) -- C:\Ad-Report-SCAN[2].txt [4620] O44 - LFC:[MD5.CD0BCCC2FE477777BE1415F863706C02] - 21/03/2011 - 11:19:03 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [4600] O44 - LFC:[MD5.51C1BDEFF408C562DDD78FF17DB188F8] - 21/03/2011 - 11:16:48 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [4487] O44 - LFC:[MD5.F982B58FC2CC7F2B4DADFC0ACEA13270] - 16/03/2011 - 22:44:49 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0] O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965] O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098] O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847] O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572] ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968] O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576] O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408] O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048] O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952] O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688] O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688] O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744] O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280] O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632] O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608] O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760] O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480] O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640] O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640] O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640] O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512] O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160] O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608] O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656] O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680] O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040] O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264] O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680] O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712] O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184] O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592] O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504] O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504] O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512] O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672] ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15 O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20 O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113 O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6 O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000 ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} - (Enter Search Term...) - blinkx Search O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe ---\\ Scan Additionnel (O88) Database Version : 21754 - (24/03/2011) [HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Trojan.HumourCanine [HKLM\Software\Classes\CLSID\{1cd6b362-8731-47b4-9e4f-d51377629c07}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Adware.BHO [HKLM\Software\Classes\CLSID\{b5db4f86-dc85-48d1-bdb4-661e1ae5c625}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{bcc5376b-a466-439b-886d-3e10dc1b56a5}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{c9e52dae-9726-42f2-a0a5-db62fa3aa63e}] =>PUP.Eorezo [HKLM\Software\Classes\toolband.easyhidebtn] =>Toolbar.Agent [HKLM\Software\Classes\toolband.easyhidebtn.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.localizer] =>Toolbar.Agent [HKLM\Software\Classes\toolband.localizer.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighter] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighter.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighterstatistics] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighterstatistics.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.skypeiehelper] =>Toolbar.Agent [HKLM\Software\Classes\toolband.skypeiehelper.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.snameproxy] =>Toolbar.Agent [HKLM\Software\Classes\toolband.snameproxy.1] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{937936af-28ca-4973-b8ae-f250406149a2}] =>Adware.BHO [HKLM\Software\sec] =>Rogue.Multiple ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 22/03/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover Run by jamel at 24/03/2011 17:02:32 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys partmgr.sys volmgr.sys ecache.sys volsnap.sys Ntfs.sys 1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851AD418] 3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848F0350] 5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x83F688B8] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by jamel at 24/03/2011 17:02:34 Use the desktop link 'MBRCheck' to have full report Dump file Name : C:\PhysicalDisk0_MBR.bin End of the scan (1308 lines in 03mn 47s)(0)

Bonsoir, Voici ce qui ressort du scan Bien à vous et merci encore Rapport de ZHPDiag v1.27.1832 par Nicolas Coolman, Update du 24/03/2011 Run by jamel at 24/03/2011 16:58:47 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v7.0.6000.16982 (Defaut) GCIE: Google Chrome v10.0.648.151 GCIE: Google Chrome Frame v10.0.648.151 ---\\ System Information Windows Vista Home Premium Edition, 32-bit (Build 6000) Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1022 MB (35% free) System Restore: Activé (Enable) System drive C: has 32 GB (28%) free of 112 GB ---\\ Logged in mode Computer Name: PC-DE-JAMEL User Name: jamel All Users Names: jamel, Administrateur, Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables %AppData%=C:\Users\jamel\AppData\Roaming %LocalAppData%=C:\Users\jamel\AppData\Local %StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 112 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 7 Go) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ Hard drive, Flash drive, Thumb drive (Free 74 Go of 233 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ---\\ Recherche particulière de fichiers génériques [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520] [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744] [MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512] [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224] [MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048] [MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360] ---\\ Processus lancés [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624] [MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320] [MD5.E2724029D3648C2EB226D16678727FA9] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256] [MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704] [MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440] [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632] [MD5.88C44CA9A052AEAEC0C91A57CE5AB41A] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304] [MD5.FF7F14FDA901090E337488A1900E3660] - (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe [151040] [MD5.3BD9A5E2020F84253C21B554AE8E01AB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [641536] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.) P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search G0 - GCSP: Preference [user Data\Default][HomePage] Google G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé) G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé) ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} Clé orpheline R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ---\\ ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKCU\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.) O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.) O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ---\\ ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\jamel\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe O4 - Global Startup: C:\Users\jamel\Desktop\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.) O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: (CLTNetCnService) - Clé orpheline O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe [MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700} O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2} O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75} O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75} O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35} O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37} O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36} O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8} O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA} O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0} O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D} O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47} O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799} O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293} O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9 O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047} O42 - Logiciel: Google Toolbar for Firefox - (.Google Inc..) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008} O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E} O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3 O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F} O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB} O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2} O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005 O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD} O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4} O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE} O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A} O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1} O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF} O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748} O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E} O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1 O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1} O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5 O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ACD Systems] [HKCU\Software\ALWIL Software] [HKCU\Software\Acer] [HKCU\Software\Ad-Remover] [HKCU\Software\Adobe] [HKCU\Software\Alibaba] [HKCU\Software\AppDataLow\Google] [HKCU\Software\AppDataLow\Software\DivXNetworks] [HKCU\Software\AppDataLow\Software\DivX] [HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\Softonic_France] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\Software\settings] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Bugsplat] [HKCU\Software\CDDB] [HKCU\Software\Camfrog] [HKCU\Software\CanonBJ] [HKCU\Software\Catbytes Software] [HKCU\Software\Classes.crx] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Crystal Decisions] [HKCU\Software\CyberLink] [HKCU\Software\Cygnus Solutions] [HKCU\Software\Digimarc] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EPSON] [HKCU\Software\GNU] [HKCU\Software\GRETECH] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Génération 5] [HKCU\Software\Hofmann] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Leadertech] [HKCU\Software\LogiShrd] [HKCU\Software\Logitech] [HKCU\Software\MEGAUPLOADER] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MegauploadToolbar] [HKCU\Software\Megaupload] [HKCU\Software\MimarSinan] [HKCU\Software\Mindscape] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MyHeritage.com] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Opera Software] [HKCU\Software\Orange] [HKCU\Software\Piriform] [HKCU\Software\PoivY] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\Realtek] [HKCU\Software\SSPrint] [HKCU\Software\STOIK Imagic 30] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Stoik] [HKCU\Software\SubSystems] [HKCU\Software\SupportSoft] [HKCU\Software\Symantec] [HKCU\Software\Sysinternals] [HKCU\Software\The Complete Genealogy Reporter] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VoipCheapCom] [HKCU\Software\Wget] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\cybelsoft] [HKCU\Software\eBay] [HKCU\Software\eMule] [HKCU\Software\keyhole.com] [HKLM\Software\ABBYY] [HKLM\Software\ACD Systems] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ALWIL Software] [HKLM\Software\Acer Inc.] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\America Online] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Compedia] [HKLM\Software\Crystal Decisions] [HKLM\Software\CyberLink] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EPSON] [HKLM\Software\EpsonNet] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\GRETECH] [HKLM\Software\Google] [HKLM\Software\Hulabee] [HKLM\Software\Imikimi] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Kutoka] [HKLM\Software\LiberTV] [HKLM\Software\LightScribe] [HKLM\Software\LogiShrd] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Megaupload Limited] [HKLM\Software\Megaupload] [HKLM\Software\Micro Application] [HKLM\Software\MimarSinan] [HKLM\Software\Mindscape] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\MyHeritage.com] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\NewTech Infosystems] [HKLM\Software\Nullsoft] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\SEC] [HKLM\Software\SEIKO EPSON CORPORATION] [HKLM\Software\SPanel] [HKLM\Software\SRS Labs] [HKLM\Software\SSPrint] [HKLM\Software\Safer Networking Limited] [HKLM\Software\SamsungMaster] [HKLM\Software\Samsung] [HKLM\Software\Secure] [HKLM\Software\Skype] [HKLM\Software\Softonic_France] [HKLM\Software\Sonic] [HKLM\Software\Sony Corporation] [HKLM\Software\SupportSoft] [HKLM\Software\Swearware] [HKLM\Software\Symantec] [HKLM\Software\The Learning Company] [HKLM\Software\TrendMicro] [HKLM\Software\VideoLAN] [HKLM\Software\WinRAR] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\Yahoo] [HKLM\Software\ZSMC] [HKLM\Software\cybelsoft] [HKLM\Software\eZee] [HKLM\Software\mozilla.org] [HKLM\Software\muvee Technologies] ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone O43 - CFD: 21/03/2011 - 10:36:58 - [92062695] ----D- C:\Program Files\Ad-Remover O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba O43 - CFD: 4/06/2010 - 20:22:10 - [144361794] ----D- C:\Program Files\Alwil Software O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner O43 - CFD: 9/03/2011 - 18:52:14 - [848944467] ----D- C:\Program Files\Common Files O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson O43 - CFD: 9/03/2011 - 19:01:02 - [168424485] ----D- C:\Program Files\Epson Software O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 22/03/2011 - 0:17:14 - [895677548] ----D- C:\Program Files\Google O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6 O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com O43 - CFD: 24/03/2011 - 13:16:48 - [4921783] ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office O43 - CFD: 30/12/2010 - 17:23:26 - [272588467] ----D- C:\Program Files\Microsoft SQL Server O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1 O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo! O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe O43 - CFD: 8/01/2010 - 21:21:08 - [39202830] ----D- C:\Program Files\Common Files\logishrd O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared O43 - CFD: 9/03/2011 - 18:52:14 - [1859874] ----D- C:\ProgramData\ABBYY O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe O43 - CFD: 4/06/2010 - 20:14:22 - [13505506] ----D- C:\ProgramData\Alwil Software O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites O43 - CFD: 25/03/2010 - 9:27:00 - [6937500] ----D- C:\ProgramData\Google O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com O43 - CFD: 23/09/2009 - 0:38:36 - [6463665] ----D- C:\ProgramData\Malwarebytes O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 16/03/2011 - 8:27:56 - [500634187] -S--D- C:\ProgramData\Microsoft O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS O43 - CFD: 24/03/2011 - 16:21:32 - [2053053] ----D- C:\ProgramData\NVIDIA O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 28/01/2010 - 16:16:22 - [27167901] ----D- C:\ProgramData\Skype O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun O43 - CFD: 23/09/2009 - 0:01:20 - [6233781] ----D- C:\ProgramData\SupportSoft O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems O43 - CFD: 5/01/2011 - 12:48:02 - [17303688] ----D- C:\Users\jamel\AppData\Roaming\Adobe O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss O43 - CFD: 20/03/2011 - 0:56:42 - [7831] ----D- C:\Users\jamel\AppData\Roaming\Epson O43 - CFD: 25/03/2010 - 9:27:48 - [890] ----D- C:\Users\jamel\AppData\Roaming\Google O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0 O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech O43 - CFD: 22/09/2009 - 22:41:04 - [160369] ----D- C:\Users\jamel\AppData\Roaming\Macromedia O43 - CFD: 23/09/2009 - 0:38:48 - [1368933] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar O43 - CFD: 16/03/2011 - 9:13:32 - [3420854] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre O43 - CFD: 24/03/2011 - 11:01:00 - [486674] ----D- C:\Users\jamel\AppData\Roaming\PoivY O43 - CFD: 18/01/2011 - 16:22:42 - [2366867] ----D- C:\Users\jamel\AppData\Roaming\Real O43 - CFD: 24/03/2011 - 16:18:58 - [19883543] ----D- C:\Users\jamel\AppData\Roaming\Skype O43 - CFD: 24/03/2011 - 16:02:52 - [122504] ----D- C:\Users\jamel\AppData\Roaming\skypePM O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409] O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24] O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560] O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920] O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672] O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368] O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928] O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160] O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736] O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976] O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312] O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272] O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656] O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960] O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096] O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0] O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734] O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144] O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165] O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920] O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756] O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872] O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392] O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504] O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488] O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696] O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392] O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306] O44 - LFC:[MD5.38EF1200D8DC457600FCFD7F0CF01200] - 24/03/2011 - 16:57:57 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1476893] O44 - LFC:[MD5.AE04CF777F1F4FCFE5C424F6C2A78D1D] - 24/03/2011 - 16:55:40 ---A- . (...) -- C:\Ad-Report-SCAN[3].txt [4684] O44 - LFC:[MD5.D286B44E536D4F528365E07DEBF89202] - 24/03/2011 - 16:20:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.38A40AB1E59516AFFCAB8BC3C84C9BD5] - 24/03/2011 - 16:20:45 ---A- . (...) -- C:\Windows\PFRO.log [139538] O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 24/03/2011 - 13:16:44 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224] O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 24/03/2011 - 13:16:41 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952] O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796] O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428] O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068] O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652] O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302] O44 - LFC:[MD5.32FCF71EDF4AA4149EA017C17E0632E5] - 21/03/2011 - 13:33:37 ---A- . (...) -- C:\Ad-Report-SCAN[2].txt [4620] O44 - LFC:[MD5.CD0BCCC2FE477777BE1415F863706C02] - 21/03/2011 - 11:19:03 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [4600] O44 - LFC:[MD5.51C1BDEFF408C562DDD78FF17DB188F8] - 21/03/2011 - 11:16:48 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [4487] O44 - LFC:[MD5.F982B58FC2CC7F2B4DADFC0ACEA13270] - 16/03/2011 - 22:44:49 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0] O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965] O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098] O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847] O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572] ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968] O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576] O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408] O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048] O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952] O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688] O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688] O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744] O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280] O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632] O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608] O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760] O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480] O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640] O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640] O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640] O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512] O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160] O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608] O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656] O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680] O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040] O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264] O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680] O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712] O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184] O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592] O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504] O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504] O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512] O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672] ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15 O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20 O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113 O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6 O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000 ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} - (Enter Search Term...) - blinkx Search O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe ---\\ Scan Additionnel (O88) Database Version : 21754 - (24/03/2011) [HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Trojan.HumourCanine [HKLM\Software\Classes\CLSID\{1cd6b362-8731-47b4-9e4f-d51377629c07}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Adware.BHO [HKLM\Software\Classes\CLSID\{b5db4f86-dc85-48d1-bdb4-661e1ae5c625}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{bcc5376b-a466-439b-886d-3e10dc1b56a5}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{c9e52dae-9726-42f2-a0a5-db62fa3aa63e}] =>PUP.Eorezo [HKLM\Software\Classes\toolband.easyhidebtn] =>Toolbar.Agent [HKLM\Software\Classes\toolband.easyhidebtn.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.localizer] =>Toolbar.Agent [HKLM\Software\Classes\toolband.localizer.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighter] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighter.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighterstatistics] =>Toolbar.Agent [HKLM\Software\Classes\toolband.namehighlighterstatistics.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.skypeiehelper] =>Toolbar.Agent [HKLM\Software\Classes\toolband.skypeiehelper.1] =>Toolbar.Agent [HKLM\Software\Classes\toolband.snameproxy] =>Toolbar.Agent [HKLM\Software\Classes\toolband.snameproxy.1] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{937936af-28ca-4973-b8ae-f250406149a2}] =>Adware.BHO [HKLM\Software\sec] =>Rogue.Multiple ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 22/03/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover Run by jamel at 24/03/2011 17:02:32 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys partmgr.sys volmgr.sys ecache.sys volsnap.sys Ntfs.sys 1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851AD418] 3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848F0350] 5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x83F688B8] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by jamel at 24/03/2011 17:02:34 Use the desktop link 'MBRCheck' to have full report Dump file Name : C:\PhysicalDisk0_MBR.bin End of the scan (1308 lines in 03mn 47s)(0)

Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 6151 Windows 6.0.6000 Internet Explorer 7.0.6000.16982 24/03/2011 16:14:26 mbam-log-2011-03-24 (16-14-26).txt Type d'examen: Examen complet (C:\|D:\|E:\|L:\|) Elément(s) analysé(s): 365182 Temps écoulé: 2 heure(s), 36 minute(s), 1 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 2 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\Windows\System32\repair-pro.exe (Rogue.ErrorRepairProfessional) -> Quarantined and deleted successfully. l:\system volume information\_restore{1209f1c0-2de9-47db-a59c-f06bdb114164}\RP31\A0012545.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Merci pour ce poste. Je procède comme décrit plus haut. A tout à l'heure...

Bonjourà tous, Voila les résultats Jéai fait 1 scan puis 1 nétoyage et un re-scan. et voiçi ce qu'il en ressort ======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 01/03/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 10:36:58 le 21/03/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Premium (X86) jamel@PC-DE-JAMEL (Acer Aspire M1600) ============== RECHERCHE ============== ============== SCAN ADDITIONNEL ============== **** Internet Explorer Version [7.0.6000.16982] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://google.be/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} (x) HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...) HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x) HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?) HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.) HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x) HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.) HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll) BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll) BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll) BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 21/03/2011 11:15:22 (4349 Octet(s)) Fin à: 11:16:48, 21/03/2011 ============== E.O.F ============== Et pour le 2 èmme ======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 01/03/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 13:32:28 le 21/03/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Premium (X86) jamel@PC-DE-JAMEL (Acer Aspire M1600) ============== RECHERCHE ============== ============== SCAN ADDITIONNEL ============== **** Internet Explorer Version [7.0.6000.16982] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} (x) HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...) HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x) HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?) HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.) HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x) HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.) HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll) BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll) BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll) BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files\Ad-Remover\Backup: 17 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 21/03/2011 11:17:35 (4600 Octet(s)) C:\Ad-Report-SCAN[1].txt - 21/03/2011 11:15:22 (4487 Octet(s)) C:\Ad-Report-SCAN[2].txt - 21/03/2011 13:32:39 (4482 Octet(s)) Fin à: 13:33:37, 21/03/2011 ============== E.O.F ============== Voila que faire à présent? Merci encore

Voila je refait tout du début j'ai désinstaller tout je le réinstaleraisce soir merci encore

Bonjour, Je n'arive pas à sortir le deuxième rapport Je fait comment car il me donne un fichier dat Quand je'ouvre ad-remover J'ai BACKUP BIN*ERENT LANG RES MAIN UNISTALL De là je suis bloquer Que dois-je faire ? merci

Bonjour voiçi le rapport, ======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 01/03/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 03:39:11 le 18/03/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Premium (X86) jamel@PC-DE-JAMEL (Acer Aspire M1600) ============== RECHERCHE ============== Dossier trouvé: C:\Users\jamel\AppData\LocalLow\Conduit Dossier trouvé: C:\Program Files\Conduit Dossier trouvé: C:\Users\jamel\AppData\LocalLow\ConduitEngine Dossier trouvé: C:\Program Files\ConduitEngine Dossier trouvé: C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 Dossier trouvé: C:\Program Files\blinkx Remote Toolbar Dossier trouvé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato Dossier trouvé: C:\Users\jamel\AppData\Roaming\ClickPotatoLite Dossier trouvé: C:\Program Files\ClickPotatoLite Dossier trouvé: C:\ProgramData\ClickPotatoLiteSA Dossier trouvé: C:\Users\jamel\AppData\LocalLow\PriceGong Dossier trouvé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports Dossier trouvé: C:\Users\jamel\AppData\Roaming\ShopperReports3 Dossier trouvé: C:\Program Files\ShopperReports3 Dossier trouvé: C:\Users\jamel\AppData\LocalLow\ShoppingReport2 Dossier trouvé: C:\Program Files\ShoppingReport2 Clé trouvée: HKLM\Software\Classes\CLSID\{0069B690-7A2B-41C5-98CA-9F535B4C8532} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0069B690-7A2B-41C5-98CA-9F535B4C8532} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0069B690-7A2B-41C5-98CA-9F535B4C8532} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0069B690-7A2B-41C5-98CA-9F535B4C8532} Clé trouvée: HKLM\Software\Classes\CLSID\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} Clé trouvée: HKLM\Software\Classes\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{258C9770-1713-4021-8D7E-1F184A2BD754} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{258C9770-1713-4021-8D7E-1F184A2BD754} Clé trouvée: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D} Clé trouvée: HKLM\Software\Classes\CLSID\{3E2DFD6A-4E20-4D4C-AA8B-E1F9DBEF3C80} Clé trouvée: HKLM\Software\Classes\CLSID\{710FEBCB-DE3E-44C6-88D7-4D760446C73B} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{710FEBCB-DE3E-44C6-88D7-4D760446C73B} Clé trouvée: HKLM\Software\Classes\CLSID\{714E0876-FCEE-49CE-A429-B9AD8AEFCB56} Clé trouvée: HKLM\Software\Classes\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C} Clé trouvée: HKLM\Software\Classes\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29} Clé trouvée: HKLM\Software\Classes\CLSID\{8B38D5D0-5B0F-4A39-965E-AEC5B7682945} Clé trouvée: HKLM\Software\Classes\CLSID\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} Clé trouvée: HKLM\Software\Classes\CLSID\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} Clé trouvée: HKLM\Software\Classes\CLSID\{C5067F59-9D0D-11D2-AA90-000000000567} Clé trouvée: HKLM\Software\Classes\CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D} Clé trouvée: HKLM\Software\Classes\CLSID\{CFC16189-8A92-4a29-A940-60248385F426} Clé trouvée: HKLM\Software\Classes\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26} Clé trouvée: HKLM\Software\Classes\CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB} Clé trouvée: HKLM\Software\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} Clé trouvée: HKLM\Software\Classes\CLSID\{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} Clé trouvée: HKLM\Software\Classes\CLSID\{F08555B0-9CC3-11D2-AA8E-000000000567} Clé trouvée: HKLM\Software\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8} Clé trouvée: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} Clé trouvée: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393} Clé trouvée: HKLM\Software\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9} Clé trouvée: HKLM\Software\Classes\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D} Clé trouvée: HKLM\Software\Classes\Interface\{38493F7F-2922-4C6C-9A9A-8DA2C940D0EE} Clé trouvée: HKLM\Software\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4} Clé trouvée: HKLM\Software\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861} Clé trouvée: HKLM\Software\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3} Clé trouvée: HKLM\Software\Classes\Interface\{855DEB19-A43C-4A35-909D-0E62A98C8FDA} Clé trouvée: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C} Clé trouvée: HKLM\Software\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110} Clé trouvée: HKLM\Software\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337} Clé trouvée: HKLM\Software\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB} Clé trouvée: HKLM\Software\Classes\Interface\{F08555AF-9CC3-11D2-AA8E-000000000567} Clé trouvée: HKLM\Software\Classes\TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9} Clé trouvée: HKLM\Software\Classes\TypeLib\{3277CD27-4001-4EF8-9D96-C6CA745AC2F9} Clé trouvée: HKLM\Software\Classes\TypeLib\{814BAA91-DC22-4350-87D6-0C86E93F7F08} Clé trouvée: HKLM\Software\Classes\TypeLib\{87CB4A6A-DD84-454C-A93E-75BA129135D2} Clé trouvée: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} Clé trouvée: HKLM\Software\Classes\TypeLib\{C55CA95C-324B-451C-B2D2-6E895AA75FEC} Clé trouvée: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872} Clé trouvée: HKLM\Software\Classes\TypeLib\{F08555A1-9CC3-11D2-AA8E-000000000567} Clé trouvée: HKLM\Software\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA} Clé trouvée: HKLM\Software\Classes\BBar.BBarBand Clé trouvée: HKLM\Software\Classes\BBar.BBarBand.1 Clé trouvée: HKLM\Software\Classes\BlinkxToolbar_BHO.BlinkxToolbarBHO Clé trouvée: HKLM\Software\Classes\BlinkxToolbar_BHO.BlinkxToolbarBHO.1 Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAx.Info Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAx.Info.1 Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles.1 Clé trouvée: HKLM\Software\Classes\Conduit.Engine Clé trouvée: HKLM\Software\Classes\MenuButtonIE.ButtonIE Clé trouvée: HKLM\Software\Classes\MenuButtonIE.ButtonIE.1 Clé trouvée: HKLM\Software\Classes\SearchHook.SrchHook Clé trouvée: HKLM\Software\Classes\SearchHook.SrchHook.1 Clé trouvée: HKLM\Software\Classes\SearchHook.URLSearchHook Clé trouvée: HKLM\Software\Classes\SearchHook.URLSearchHook.1 Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDic Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDic.1 Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDisp Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDisp.1 Clé trouvée: HKLM\Software\Classes\ShopperReports.Stock Clé trouvée: HKLM\Software\Classes\ShopperReports.Stock.1 Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbAx Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbAx.1 Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbInfoBand Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbInfoBand.1 Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButton Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButton.1 Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButtonA Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButtonA.1 Clé trouvée: HKLM\Software\Classes\ShoppingReport2.RprtCtrl Clé trouvée: HKLM\Software\Classes\ShoppingReport2.RprtCtrl.1 Clé trouvée: HKLM\Software\Classes\Toolbar.CT2542115 Clé trouvée: HKLM\Software\Classes\AppID\BRNstIE.DLL Clé trouvée: HKLM\Software\Classes\AppID\MenuButtonIE.DLL Clé trouvée: HKLM\Software\blinkx_toolbar Clé trouvée: HKLM\Software\ClickPotatoLite Clé trouvée: HKLM\Software\Conduit Clé trouvée: HKLM\Software\conduitEngine Clé trouvée: HKLM\Software\ShopperReports3 Clé trouvée: HKLM\Software\ShoppingReport2 Clé trouvée: HKCU\Software\blinkx_toolbar Clé trouvée: HKCU\Software\ClickPotatoLiteSA Clé trouvée: HKCU\Software\ShopperReports3 Clé trouvée: HKCU\Software\ShoppingReport2 Clé trouvée: HKCU\Software\AppDataLow\Toolbar Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit Clé trouvée: HKCU\Software\AppDataLow\Software\conduitEngine Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong Clé trouvée: HKCU\Software\AppDataLow\Software\ShoppingReport2 Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{813C71B5-19A1-4DBD-82A0-2E51448E3814} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2 Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\blinkx Remote Toolbar Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ClickpotatoliteSA Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2 Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5} Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|ShopperReports 3.0.517.0 Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E8790776BD765F573FAA90 Valeur trouvée: HKLM\Software\Mozilla\Firefox\Extensions|clickpotatolite@clickpotatolite.com Valeur trouvée: HKLM\Software\Mozilla\Firefox\Extensions|Shopperreports@shopperreports.com Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ClickPotatoLiteSA Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== SCAN ADDITIONNEL ============== **** Internet Explorer Version [7.0.6000.16982] **** HKCU_Main|SearchMigratedDefaultURL - hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://google.be/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://fr.fr.acer.yahoo.com HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} - "the blinkx toolbar" (C:\Program Files\blinkx Remote Toolbar\the_blinkx_shook.dll) HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) HKCU_SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - "Search the web (Babylon)" (hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch) HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...) HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\ConduitEngine.dll) HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll) HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll) HKLM_Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\ConduitEngine.dll) HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) HKLM_Toolbar|{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} (C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.dll) HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x) HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?) HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.) HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x) HKLM_ElevationPolicy\{813C71B5-19A1-4DBD-82A0-2E51448E3814} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (?) HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?) HKLM_ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} - C:\Program Files\ClickPotatoLite\bin\10.0.659.0\Weather.exe (x) HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.) HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.) HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?) HKLM_Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} - "ClickPotato" (C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSABHO.dll,201) HKLM_Extensions\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} - "ShopperReports - Compare product prices" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll,203) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) HKLM_Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} - "ShopperReports - Compare travel rates" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll,201) BHO\{0069B690-7A2B-41C5-98CA-9F535B4C8532} - "The blinkx Toolbar" (C:\Program Files\blinkx Remote Toolbar\the_blinkx_bho.dll) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll) BHO\{258C9770-1713-4021-8D7E-1F184A2BD754} - "ShoppingReport2" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll) BHO\{30F9B915-B755-4826-820B-08FBA6BD249D} - "Conduit Engine" (C:\Program Files\ConduitEngine\ConduitEngine.dll) BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll) BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll) BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL) BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll) BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 18/03/2011 03:41:11 (17855 Octet(s)) Fin à: 03:42:03, 18/03/2011 ============== E.O.F ============== je vais à présent passer à l'étape du nettoyage, Merci

Bonjour, Merci je vais réaliser l'aplication et je reviend à vous par après Merci encore

Rapport de ZHPDiag v1.27.17041 par Nicolas Coolman, Update du 16/03/2011 Run by jamel at 16/03/2011 22:41:20 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v7.0.6000.16982 (Defaut) GCIE: Google Chrome v10.0.648.133 GCIE: Google Chrome Frame v10.0.648.133 ---\\ System Information Windows Vista Home Premium Edition, 32-bit (Build 6000) Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1022 MB (30% free) System Restore: Activé (Enable) System drive C: has 33 GB (29%) free of 112 GB ---\\ Logged in mode Computer Name: PC-DE-JAMEL User Name: jamel All Users Names: jamel, Administrateur, Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables %AppData%=C:\Users\jamel\AppData\Roaming %LocalAppData%=C:\Users\jamel\AppData\Local %StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 33 Go of 112 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go) E:\ CD-ROM drive (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ---\\ Recherche particulière de fichiers génériques [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520] [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744] [MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512] [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224] [MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048] [MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360] ---\\ Processus lancés [MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624] [MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320] [MD5.C9C19BF75D9E1BB66F9564DDC14F9862] - (.Pinball Corporation. - ClickPotato Search assistant.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSA.exe [742192] [MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704] [MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440] [MD5.12A6D5E1800AF41423B755E638E84B24] - (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe [196608] [MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [25623336] [MD5.89CF33E9040E3CC39F097238D3D97032] - (.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe [78008] [MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632] [MD5.AE82B3B6A33DC23019B604DA5920D726] - (.Skype Technologies S.A. - SkypeNames.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe [238888] [MD5.C464CE70A57DA04861A29015814E0DD1] - (...) -- C:\Program Files\WinRAR\WinRAR.exe [1093120] [MD5.431A6893FB3333B810820BF4D9703AA6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [639488] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.) P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search G0 - GCSP: Preference [user Data\Default][HomePage] Google G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé) G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé) ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! France R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Bing R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = yahoo! search R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = Yahoo! Search - Web Search R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline R3 - URLSearchHook: the blinkx toolbar - {F08555B0-9CC3-11D2-AA8E-000000000567} . (.Pas de propriétaire - SearchHook Module.) (1, 0, 0, 1) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_shook.dll R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: The blinkx Toolbar - {0069B690-7A2B-41C5-98CA-9F535B4C8532} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_bho.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.134\npchrome_frame.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O3 - Toolbar: The blinkx Toolbar - {E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.dll ---\\ ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (.not file.) O4 - HKLM\..\Run: [ClickPotatoLiteSA] . (.Pinball Corporation. - ClickPotato Search assistant.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSA.exe O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKCU\..\Run: [blinkx_toolbar] . (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] . (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe ---\\ ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\jamel\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe O4 - Global Startup: C:\Users\jamel\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VoipCheapCom.lnk . (.VoipCheapCom.) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.) O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico O9 - Extra button: Skype add-on for Internet Explorer - {B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} . (.Pinball Corporation - ClickPotato.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSABHO.dll O9 - Extra button: Skype add-on for Internet Explorer - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll O9 - Extra button: Spybot - Search & Destroy Configuration - {EB620C54-E229-4942-87CE-E717109FC8C6} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.134\npchrome_frame.dll O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: (CLTNetCnService) - Clé orpheline O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe [MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe [MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700} O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2} O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75} O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75} O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35} O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37} O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36} O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033} O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8} O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA} O42 - Logiciel: ClickPotato - (.Pinball Corporation..) [HKLM] -- ClickPotatoLiteSA O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0} O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D} O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47} O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799} O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293} O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9 O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008} O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E} O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3 O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F} O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB} O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E} O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2} O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005 O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD} O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4} O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE} O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A} O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1} O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1 O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D} O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0 O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF} O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: ShopperReports - (.ShopperReports.) [HKLM] -- ShoppingReport2 O42 - Logiciel: ShopperReports - (.SmartShopper.) [HKLM] -- ShopperReportsSA O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748} O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E} O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421} O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1 O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1} O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5 O42 - Logiciel: blinkx Remote Toolbar - (.blinkx.) [HKLM] -- blinkx Remote Toolbar O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ACD Systems] [HKCU\Software\ALWIL Software] [HKCU\Software\Acer] [HKCU\Software\Adobe] [HKCU\Software\Alibaba] [HKCU\Software\AppDataLow\Google] [HKCU\Software\AppDataLow\Software\Conduit] [HKCU\Software\AppDataLow\Software\DivXNetworks] [HKCU\Software\AppDataLow\Software\DivX] [HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\PriceGong] [HKCU\Software\AppDataLow\Software\ShoppingReport2] [HKCU\Software\AppDataLow\Software\Softonic_France] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\Software\conduitEngine] [HKCU\Software\AppDataLow\Software\settings] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow\Toolbar] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\Bugsplat] [HKCU\Software\CDDB] [HKCU\Software\Camfrog] [HKCU\Software\CanonBJ] [HKCU\Software\Catbytes Software] [HKCU\Software\Classes.crx] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Crystal Decisions] [HKCU\Software\CyberLink] [HKCU\Software\Cygnus Solutions] [HKCU\Software\Digimarc] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\EPSON] [HKCU\Software\GNU] [HKCU\Software\GRETECH] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Génération 5] [HKCU\Software\Hofmann] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Leadertech] [HKCU\Software\LogiShrd] [HKCU\Software\Logitech] [HKCU\Software\MEGAUPLOADER] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MegauploadToolbar] [HKCU\Software\Megaupload] [HKCU\Software\MimarSinan] [HKCU\Software\Mindscape] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MyHeritage.com] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Opera Software] [HKCU\Software\Orange] [HKCU\Software\Piriform] [HKCU\Software\PoivY] [HKCU\Software\Policies] [HKCU\Software\RealNetworks] [HKCU\Software\Realtek] [HKCU\Software\SSPrint] [HKCU\Software\STOIK Imagic 30] [HKCU\Software\Safer Networking Limited] [HKCU\Software\ShopperReports3] [HKCU\Software\ShoppingReport2] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\Stoik] [HKCU\Software\SubSystems] [HKCU\Software\SupportSoft] [HKCU\Software\Symantec] [HKCU\Software\Sysinternals] [HKCU\Software\The Complete Genealogy Reporter] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VoipCheapCom] [HKCU\Software\Wget] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\blinkx_toolbar] [HKCU\Software\clickpotatolitesa] [HKCU\Software\cybelsoft] [HKCU\Software\eBay] [HKCU\Software\eMule] [HKCU\Software\keyhole.com] [HKLM\Software\ABBYY] [HKLM\Software\ACD Systems] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ALWIL Software] [HKLM\Software\Acer Inc.] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\America Online] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\CDDB] [HKLM\Software\Classes] [HKLM\Software\ClickPotatoLite] [HKLM\Software\Clients] [HKLM\Software\Compedia] [HKLM\Software\Conduit] [HKLM\Software\Crystal Decisions] [HKLM\Software\CyberLink] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\EPSON] [HKLM\Software\EpsonNet] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\GRETECH] [HKLM\Software\Google] [HKLM\Software\Hulabee] [HKLM\Software\Imikimi] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Kutoka] [HKLM\Software\LiberTV] [HKLM\Software\LightScribe] [HKLM\Software\LogiShrd] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\Megaupload Limited] [HKLM\Software\Megaupload] [HKLM\Software\Micro Application] [HKLM\Software\MimarSinan] [HKLM\Software\Mindscape] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\MyHeritage.com] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\NewTech Infosystems] [HKLM\Software\Nullsoft] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\RichFX] [HKLM\Software\SEC] [HKLM\Software\SEIKO EPSON CORPORATION] [HKLM\Software\SPanel] [HKLM\Software\SRS Labs] [HKLM\Software\SSPrint] [HKLM\Software\Safer Networking Limited] [HKLM\Software\SamsungMaster] [HKLM\Software\Samsung] [HKLM\Software\Secure] [HKLM\Software\ShopperReports3] [HKLM\Software\Skype] [HKLM\Software\Softonic_France] [HKLM\Software\Sonic] [HKLM\Software\Sony Corporation] [HKLM\Software\SupportSoft] [HKLM\Software\Swearware] [HKLM\Software\Symantec] [HKLM\Software\The Learning Company] [HKLM\Software\TrendMicro] [HKLM\Software\VideoLAN] [HKLM\Software\WinRAR] [HKLM\Software\Xing Technology Corp.] [HKLM\Software\Yahoo] [HKLM\Software\ZSMC] [HKLM\Software\blinkx_toolbar] [HKLM\Software\cybelsoft] [HKLM\Software\eZee] [HKLM\Software\mozilla.org] [HKLM\Software\muvee Technologies] ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba O43 - CFD: 4/06/2010 - 20:22:10 - [146186903] ----D- C:\Program Files\Alwil Software O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom O43 - CFD: 16/03/2011 - 9:21:26 - [854378] ----D- C:\Program Files\blinkx Remote Toolbar O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner O43 - CFD: 2/02/2011 - 17:47:54 - [1746277] ----D- C:\Program Files\ClickPotatoLite O43 - CFD: 9/03/2011 - 18:52:14 - [848931073] ----D- C:\Program Files\Common Files O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia O43 - CFD: 24/01/2011 - 14:15:44 - [532064] ----D- C:\Program Files\Conduit O43 - CFD: 24/01/2011 - 14:15:12 - [3989046] ----D- C:\Program Files\ConduitEngine O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson O43 - CFD: 9/03/2011 - 19:01:02 - [168424452] ----D- C:\Program Files\Epson Software O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 24/01/2011 - 19:04:06 - [882389582] ----D- C:\Program Files\Google O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6 O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office O43 - CFD: 30/12/2010 - 17:23:26 - [272330479] ----D- C:\Program Files\Microsoft SQL Server O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1 O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung O43 - CFD: 16/03/2011 - 9:20:10 - [2365572] ----D- C:\Program Files\ShopperReports3 O43 - CFD: 2/02/2011 - 17:47:48 - [1232400] ----D- C:\Program Files\ShoppingReport2 O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo! O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe O43 - CFD: 8/01/2010 - 21:21:08 - [39189436] ----D- C:\Program Files\Common Files\logishrd O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared O43 - CFD: 2/02/2011 - 17:47:56 - [0] ----D- C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 O43 - CFD: 9/03/2011 - 18:52:14 - [1853718] ----D- C:\ProgramData\ABBYY O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe O43 - CFD: 4/06/2010 - 20:14:22 - [9625763] ----D- C:\ProgramData\Alwil Software O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ O43 - CFD: 16/03/2011 - 14:16:08 - [9352155] ----D- C:\ProgramData\ClickPotatoLiteSA O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites O43 - CFD: 25/03/2010 - 9:27:00 - [2759149] ----D- C:\ProgramData\Google O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com O43 - CFD: 23/09/2009 - 0:38:36 - [262] ----D- C:\ProgramData\Malwarebytes O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 16/03/2011 - 8:27:56 - [504451712] -S--D- C:\ProgramData\Microsoft O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS O43 - CFD: 16/03/2011 - 13:29:32 - [2053053] ----D- C:\ProgramData\NVIDIA O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 28/01/2010 - 16:16:22 - [27167677] ----D- C:\ProgramData\Skype O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun O43 - CFD: 23/09/2009 - 0:01:20 - [6155933] ----D- C:\ProgramData\SupportSoft O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems O43 - CFD: 5/01/2011 - 12:48:02 - [16729124] ----D- C:\Users\jamel\AppData\Roaming\Adobe O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 2/02/2011 - 17:47:54 - [0] ----D- C:\Users\jamel\AppData\Roaming\ClickPotatoLite O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss O43 - CFD: 10/03/2011 - 7:42:28 - [6817] ----D- C:\Users\jamel\AppData\Roaming\Epson O43 - CFD: 25/03/2010 - 9:27:48 - [396] ----D- C:\Users\jamel\AppData\Roaming\Google O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0 O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech O43 - CFD: 22/09/2009 - 22:41:04 - [150113] ----D- C:\Users\jamel\AppData\Roaming\Macromedia O43 - CFD: 23/09/2009 - 0:38:48 - [26981] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar O43 - CFD: 16/03/2011 - 9:13:32 - [4844654] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre O43 - CFD: 12/03/2011 - 13:39:06 - [489822] ----D- C:\Users\jamel\AppData\Roaming\PoivY O43 - CFD: 18/01/2011 - 16:22:42 - [2301671] ----D- C:\Users\jamel\AppData\Roaming\Real O43 - CFD: 16/03/2011 - 9:20:10 - [0] ----D- C:\Users\jamel\AppData\Roaming\ShopperReports3 O43 - CFD: 16/03/2011 - 22:24:24 - [20014319] ----D- C:\Users\jamel\AppData\Roaming\Skype O43 - CFD: 16/03/2011 - 18:21:54 - [175160] ----D- C:\Users\jamel\AppData\Roaming\skypePM O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409] O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24] O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560] O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920] O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672] O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368] O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928] O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160] O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736] O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976] O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312] O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272] O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656] O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960] O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096] O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0] O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734] O44 - LFC:[MD5.476F8C1F5219A260F72E8D76E9FEAFEC] - 16/03/2011 - 8:46:46 ---A- . (.www.error-repair-pro.com - Error Repair Professional Setup.) -- C:\Windows\System32\repair-pro.exe [1315717] O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 16/03/2011 - 9:10:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796] O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 16/03/2011 - 9:10:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428] O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068] O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652] O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302] O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144] O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165] O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920] O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756] O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872] O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392] O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504] O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488] O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696] O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392] O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892] O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611] O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392] O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306] O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56] O44 - LFC:[MD5.48EF1200D8DCC47600FCFD7F1CF01200] - 16/03/2011 - 16:15:06 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1248908] O44 - LFC:[MD5.EA3AEC1B61D656D96F547AB6A0B8CB28] - 16/03/2011 - 13:28:57 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0] O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965] O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098] O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847] O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572] ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0 ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0 ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968] O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576] O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408] O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048] O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952] O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688] O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688] O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744] O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280] O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632] O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608] O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760] O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480] O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640] O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640] O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640] O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512] O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752] O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160] O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608] O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656] O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680] O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040] O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264] O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680] O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712] O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184] O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592] O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504] O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504] O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512] O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672] ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15 O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20 O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113 O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6 O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000 ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - Babylon Search O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} [DefaultScope] - (Enter Search Term...) - blinkx Search O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.80793BE6A12267569F95546203211E7A] [sPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\jamel\AppData\Local\Temp\ABBYY.Sprint.Registrator.log [5366] [MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF] (.Macrovision Corporation - Setup.exe.) -- C:\Users\jamel\AppData\Local\Temp\_is7F50.exe [460248] [MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF] (.Macrovision Corporation - Setup.exe.) -- C:\Users\jamel\AppData\Local\Temp\_is897A.exe [460248] ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "MCX-Prov-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.) O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.) O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.) O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover Run by jamel at 16/03/2011 22:44:49 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851A8330] 3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848E9960] 5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x848EBBB0] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by jamel at 16/03/2011 22:44:51 Use the desktop link 'MBRCheck' to have full report Dump file Name : C:\PhysicalDisk0_MBR.bin End of the scan (1306 lines in 03mn 30s)(0) Je vous remercie pour votre aide et j'espère que tout rentrera d'ici peut dans l'ordre.

Bonjour, dès que j'éssaie de charger une page web mon cpu s'affolle et mon ordi rame. De plus même après avoir fait plusieurs recherche pour trouver des virus rien y change... J'ai aussi lancé spybot, je ne sais plus quoi faire??? Si vous avez des idées, je vous en serais très reconnaissant. Merci bien à tous