Bonjour,
Tout d'abord bravo pour la suite d'outils ZHP. Bon nombre d'utilitaires de désinfection qui ont rendu bien des services par le passé sont frappés obsolescence (hijackthis, sybot...). Je dois l'être également puisque c'est la première fois que je demande de l'aide (j'ai mis mon amour-propre au congélateur et envoyé mon ego faire un tour jusqu'à désinfection).
Et bien voici :
- svchost s'emballe par moments sans que j'ai le temps de remonter le service.
- après le passage de combofix en mode sans échec, impossible d'ouvrir quoique ce soit, ni même d'arrêter un processus.
- des processus sont cachés (v. copie écran) : la somme des % d'occupation temps machine par processus < somme totale tous les utilisateurs.
- les logins dans les macros (fichiers txt iiopus, extension firefox) qui me servaient à la connexion pour la consultation des E-mails ont été tronqués après le "@" de mon adresse.
- les mots de passe de accès mail semblent avoir été modifiés (je n'ai pas insisté avent désinfection).
Encore merci pour vos actes solidaires.
Ci-dessous le rapport ZHPDiag, puis Combofix probablement inutile) :
Rapport de ZHPDiag v1.28.1321 par Nicolas Coolman, Update du 09/08/2011
Run by Patouche at 11/08/2011 10:54:23
Web site : ZHPDiag Outil de diagnostic
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
MFIE: Mozilla Firefox 5.0 v5.0
---\\ Windows Product Information
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : X7QB8
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3070 MB (52% free)
System Restore: Activé (Enable)
System drive C: has 141 GB (38%) free of 365 GB
---\\ Logged in mode
~ Computer Name: ORDIPOUNET
~ User Name: Patouche
~ All Users Names: UpdatusUser, Patouche, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Patouche\AppData\Roaming\
~ %Desktop% : C:\Users\Patouche\Desktop\
~ %Favorites% : C:\Users\Patouche\Favorites\
~ %LocalAppData% : C:\Users\Patouche\AppData\Local\
~ %StartMenu% : C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 365 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 99 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 2 Go)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ CD-ROM drive (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.07/08/2011 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.07/08/2011 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.07/08/2011 - 08:33:37.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.A1236375B74EA63C75657D564890C436] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.07/08/2011 - 11:24:46.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.07/08/2011 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.30/01/2011 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.30/01/2011 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.30/01/2011 - 08:34:10.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 4/516
~ Mes musiques (My Musics) : 50/2308
~ Mes Videos (My Videos) : 1/142
~ Mes Favoris (My Favorites) : 2/22
~ Mes Documents (My Documents) : 78/11526
~ Mon Bureau (My Desktop) : 616/9847
~ Menu demarrer (Programs) : 6/68
~ Scan Hidden Files in 00mn 12s
---\\ Processus lancés
[MD5.04DB1E60FBFB9A77AF16238A209C2CDD] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [373864]
[MD5.CCC08DE1286571175A75A56563C37715] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4706304]
[MD5.895E17BFF96D3114FD19CEC65A0E749E] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2554696]
[MD5.E1E2D028E40D58FFF8DC88514E858117] - (.Lexmark International, Inc. - Lexmark 1200 Series Button Manager.) -- C:\Program Files\Lexmark 1200 Series\LXCZbmgr.exe [74672]
[MD5.1727CE551D69F0DF0BF98FA20DD8D92E] - (.cFos Software GmbH - cFosSpeed Window.) -- C:\Program Files\cFosSpeed\cfosspeed.exe [881368]
[MD5.5D0F2626553613B22AF1BF709DD84148] - (.tzuk - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe [389120]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952]
[MD5.BDD713D351F065E20F12865B8CFD956D] - (.MagicISO, Inc. - MagicISO Virtual CD/DVD Manager.) -- C:\Program Files\MagicDisc\MagicDisc.exe [575488]
[MD5.4560FD06FD052712525EB088F58C103C] - (.Lexmark International, Inc. - Lexmark 1200 Series Button Monitor.) -- C:\Program Files\Lexmark 1200 Series\lxczbmon.exe [58288]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]
[MD5.DD0CC1613101093AAB0E99C24B207883] - (...) -- C:\Program Files\Hotspot Shield\bin\openvpntray.exe [129352]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]
[MD5.061CBB1058A10C0875D18CAFF835AE97] - (.Microsoft Corporation - Hôte des applications HTML de Microsoft®.) -- C:\Windows\System32\mshta.exe [11776]
[MD5.59161195EA070A0BB8A85B5B99D8F643] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\ccleaner.exe [2585408]
[MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120]
[MD5.16B28217497C9F1A70CA0A0D53FA04AC] - (.Nicolas Coolman - Analyseur de rapports sécurité.) -- C:\Program Files\ZebHelpProcess\ZHP2.exe [893440]
[MD5.C354A712DCCA3E4AC3C4B8C6A9BD28A0] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [664064]
[MD5.7C732AFF202DCD06C3D262966D71604C] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) -- C:\Windows\system32\nvvsvc.exe [615528]
[MD5.43F37E8F60F3677E84C6AFC70C784AFD] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1793712]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896]
[MD5.3D36332478EF0026439D8AD4471E800C] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [839272]
[MD5.11A52CF7B265631DEEB24C6149309EFF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [64952]
[MD5.47ABD3DC72929F42329D397151A9A6FA] - (.cFos Software GmbH - cFosSpeed Service.) -- C:\Program Files\cFosSpeed\spd.exe [390872]
[MD5.27CB54C0346EFD7B0536B0CB610131AE] - (...) -- C:\Program Files\Hotspot Shield\bin\openvpnas.exe [298824]
[MD5.2CFEA9C337B699ACA38487E8A7438F35] - (.AnchorFree Inc. - Pas de description.) -- C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe [363336]
[MD5.564BAB77CD96CE0E3FD5BBCDDED142DF] - (...) -- C:\Program Files\Hotspot Shield\bin\hsswd.exe [329544]
[MD5.FA88D61278C6B73D50EC441FBD91D1FC] - (.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxczcoms.exe [537520]
[MD5.D07C9575726797B0E9069E1108A1C483] - (.Microsoft Corporation - SQL Server Windows NT.) -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29178224]
[MD5.D701C5A242C31D018375459E1373FE22] - (.tzuk - Sandboxie Service.) -- C:\Program Files\Sandboxie\SbieSvc.exe [66560]
[MD5.54902536AAD0E9B99BC65F89C0CAF93F] - (.Microsoft Corporation - SQL Server VSS Writer.) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [89968]
[MD5.B1691AF4A072CB674D600DB16DD7308E] - (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968]
[MD5.A2ABC52CD8A5B60262B220A17A92EB31] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [378472]
[MD5.52B1899DF89DFFFC9C94F2214459C386] - (.TuneUp Software - TuneUp Program Statistics Service.) -- C:\Windows\System32\TUProgSt.exe [603904]
[MD5.5A0C788C5BC5F2C993CB60940ADCF95E] - (.X10 - X10 Module.) -- C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [20480]
[MD5.AD1870C8E5D6DD340C829E6074BF3C3F] - (.Microsoft Corporation - Service de planification Windows Media Cent.) -- C:\Windows\ehome\ehsched.exe [131072]
[MD5.9BE3744D295A7701EB425332014F0797] - (.Microsoft Corporation - Service de réception Windows Media Center.) -- C:\Windows\ehome\ehRecvr.exe [292352]
[MD5.262D2FBF211A88DCB84249DF0F6EF6E7] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2214504]
[MD5.B41FD804F2A6A86DA95C05632FD98117] - (...) -- C:\Program Files\Hotspot Shield\bin\openvpn.exe [609096]
~ Scan Processes Running in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\prefs.js
M3 - MFPP: Plugins - [Patouche] -- C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\searchplugins\aeromp3com.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\searchplugins\beemp3.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\searchplugins\mozilla-add-ons.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\searchplugins\mp3-downloads.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\searchplugins\search-tinysubs.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\privatesearch.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Patouche] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\chmfox@zhuoqiang.me] [] ChmFox v1.2 (.ZHUO Qiang.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\engine@conduit.com] [] Conduit Engine v3.3.3.2 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\https-everywhere@eff.org] [] HTTPS-Everywhere v1.0.0 (.Mike Perry & Peter Eckersley.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\max@subfighter.com] [] Flash Video Resources Downloader v1.0.3 (.Max Demian.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{3eaacb33-878f-44fa-b4cd-6e67cbaf828b}] [] Unofficial Google Translate Firefox extension v1.4 (.Jimmy Ruska.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}] [] ChatZilla v0.9.87 (.The ChatZilla Team.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{6e098d65-7d2d-46d4-ada0-2f882a29f795}] [] CHM Reader v0.2.3 (.Ling Li.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{71328583-3CA7-4809-B4BA-570A85818FBB}] [cacheviewer] CacheViewer v0.6.3 (.The Tiny BENKI.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}] [] iMacros for Firefox v7.3.0.0 (.iMacros Team, iOpus Software GmbH.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{9815d32d-08c2-42ca-a8c6-43e501a4512f}] [] Tor-Proxy.NET Toolbar v0.3.3 (.Tor-Proxy.NET.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20110704 (.WOT Services Oy.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.4 (.Michel Gutierrez.)
M2 - MFEP: prefs.js [Patouche - pycqkpj7.default\{e3868d2c-9a68-4c4a-87f2-4e9d78fd16ee}] [] v (.Avindra+Descriptor+Goolcharan+#avg+LESENUSpageURL></em:homepageURL><em:targetApplication><Description><em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id><e
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
P2 - FPN: [HKLM] [Adobe Acrobat] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Bing
R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Hotspot_Shield\tbHots.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Hotspot_Shield\tbHots.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 204.73.37.113:80
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Scan Hosts File in 00mn 04s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Hotspot_Shield\tbHots.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} . (...) -- C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Hotspot_Shield\tbHots.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
O4 - HKLM\..\Run: [lxczbmgr.exe] . (.Lexmark International, Inc. - Lexmark 1200 Series Button Manager.) -- C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
O4 - HKLM\..\Run: [cFosSpeed] . (.cFos Software GmbH - cFosSpeed Window.) -- C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKCU\..\Run: [sandboxieControl] . (.tzuk - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-2824818794-2576243679-2939498363-1004-2824818794-2576243679-2939498363-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2824818794-2576243679-2939498363-1004-2824818794-2576243679-2939498363-1000\..\Run: [WindowsWelcomeCenter] oobefldr.dll
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Run XP Repair Pro 4.0.lnk . (.DDX SOFTWARE INC.) -- C:\Program Files\XP Repair Pro 4.0\ControlCenter.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Install Clean Up.lnk . (...) -- C:\Users\Patouche\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Patouche\Desktop\Bureau XP(D).lnk . (...) -- D:\Documents and Settings\Pounet\Bureau
O4 - Global Startup: C:\Users\Patouche\Desktop\CyberLink WaveEditor.lnk . (.Cyberlink.) -- C:\Program Files\CyberLink\WaveEditor\WaveEditor.exe
O4 - Global Startup: C:\Users\Patouche\Desktop\Downloads - Raccourci.lnk . (...) -- C:\Downloads
O4 - Global Startup: C:\Users\Patouche\Desktop\IRAssistant.lnk . (...) -- C:\Program Files\IRAssistant\IRAssistant.exe
O4 - Global Startup: C:\Users\Patouche\Desktop\Restart Explorer.bat - Raccourci.lnk . (...) -- C:\Windows\Restart Explorer.bat
O4 - Global Startup: C:\Users\Patouche\Desktop\www - Raccourci.lnk . (...) -- C:\wamp\www
O4 - Global Startup: C:\Users\Patouche\Desktop\µpdater.lnk . (...) -- C:\Users\Patouche\AppData\Roaming\uTorrent\IP filter µpdater.bat
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ StreamTransport.lnk . (...) -- C:\Program Files\StreamTransport\StreamTransport.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\binload.exe - Raccourci.lnk . (.Binload.) -- C:\Program Files\Binload\binload.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Charon.exe - Raccourci.lnk . (...) -- C:\Users\Patouche\Logiciels vrac\charon\Charon.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DFD.exe - Raccourci.lnk . (.Key Metric Software, LLC..) -- C:\Program Files\Key Metric Software\Duplicate File Detective 4\DFD.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVR-MS 2 MPEG2.lnk . (...) -- C:\Program Files\DVR-MS 2 MPEG2\DVR-MS 2 MPEG2.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\frd.exe - Raccourci.lnk . (.Vity.) -- C:\Users\Patouche\Logiciels vrac\FreeRapid-0.85u1-final\frd.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free Download Manager.lnk . (.FreeDownloadManager.ORG.) -- C:\Program Files\Free Download Manager\fdm.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IsoBuster.lnk . (.Smart Projects.) -- C:\Program Files\Smart Projects\IsoBuster\IsoBuster.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MantraPortable.exe - Raccourci.lnk . (.PortableApps.com.) -- C:\Users\Patouche\Logiciels vrac\MantraPortable\MantraPortable.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\mediacoder.exe - Raccourci.lnk . (.Stanley Huang.) -- C:\Program Files\MediaCoder\mediacoder.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\notepad - Raccourci.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\notepad.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\paltalk.exe - Raccourci.lnk . (.AVM Software Inc..) -- C:\Program Files\Paltalk Messenger\paltalk.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ProxyFirewall.lnk . (.Unique Internet Services.) -- C:\Program Files\ProxyFirewall\ProxyFirewall.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuarkXPress.exe - Raccourci.lnk . (.Quark, Inc..) -- C:\Program Files (x86)\Quark\QuarkXPress 9\QuarkXPress.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QUICKMEDIACONVERTER.lnk . (.Actecom.) -- C:\Program Files\QuickMediaConverter\QMC.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Run XP Repair Pro 4.0.lnk . (.DDX SOFTWARE INC.) -- C:\Program Files\XP Repair Pro 4.0\ControlCenter.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\RVCap.exe - Raccourci.lnk . (.All Alex, Inc..) -- C:\Program Files\Replay Video Capture\RVCap.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Snagit32.exe - Raccourci.lnk . (.TechSmith Corporation.) -- C:\Program Files\TechSmith\Snagit 9\Snagit32.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Start Tor Browser.exe - Raccourci.lnk . (...) -- C:\Users\Patouche\Logiciels vrac\Tor Browser\Start Tor Browser.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\SUPERAntiSpyware Free Edition.lnk . (.SUPERAntiSpyware.com.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Super_macro.exe - Raccourci.lnk . (...) -- C:\Program Files\Super macro\Super_macro.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\swriter.exe - Raccourci.lnk . (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\swriter.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\TMAC.exe - Raccourci.lnk . (.Technitium.) -- C:\Program Files\Technitium\TMACv5.0R3\TMAC.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Total Video Converter.lnk . (...) -- C:\Program Files\Total Video Converter\tvc.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Transmiti.exe - Raccourci.lnk . (.Thomas Arlt.) -- C:\Users\Patouche\Downloads\Transmiti.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\TuneUp Maintenance en 1 clic.lnk . (.TuneUp Software GmbH.) -- C:\Program Files\TuneUp Utilities 2009\OneClick.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\TVO.exe - Raccourci.lnk . (...) -- C:\Users\Patouche\Logiciels vrac\TVO\TVO.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\universalis2011.exe - Raccourci.lnk . (...) -- C:\Program Files\Encyclopaedia Universalis 2011\Encyclopaedia Universalis 2011\universalis2011.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VLC media player.lnk . (...) -- C:\Program Files\VideoLAN\VLC\vlc.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WampServer.lnk . (.Aestan Software.) -- C:\wamp\wampmanager.exe
O4 - Global Startup: C:\Users\Patouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe
~ Scan Global Startup in 00mn 00s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Ajouter au fichier PDF existant . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: Ajouter le contenu des liens sélectionnés à un fichier PDF existant . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: Ajouter le contenu du lien à un fichier PDF existant . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: Créer des fichiers PDF à partir des liens sélectionnés . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: Créer fichier PDF . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: Créer un fichier PDF depuis le contenu du lien . (.Zeon Corporation - ZeonIEFavClient.dll.) -- C:\Program Files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - (.not file.) - file:\\C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - (.not file.) - file:\\C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - (.not file.) - file:\\C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - (.not file.) - file:\\C:\Program Files\Free Download Manager\dlfvideo.htm
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} . (.AVM Software Inc. - PaltalkScene.) -- C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.AVM Software Inc. - PaltalkScene.) -- C:\Program Files\Paltalk Messenger\Paltalk.exe
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{98517776-CBB5-4511-B979-43A90479F5B9}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpNameServer = 10.71.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F9E32B22-CA08-4CE2-A3C9-38C89F6E1EF0}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpDomain = hshld.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{3854B5DC-253B-4105-9612-5BF96795E62B}: DhcpNameServer = 86.64.145.143 84.103.237.143
O17 - HKLM\System\CS2\Services\Tcpip\..\{98517776-CBB5-4511-B979-43A90479F5B9}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS2\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpNameServer = 10.71.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{F9E32B22-CA08-4CE2-A3C9-38C89F6E1EF0}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS2\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpDomain = hshld.com
O17 - HKLM\System\CS3\Services\Tcpip\..\{98517776-CBB5-4511-B979-43A90479F5B9}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS3\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpNameServer = 10.71.0.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{F9E32B22-CA08-4CE2-A3C9-38C89F6E1EF0}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS3\Services\Tcpip\..\{B0640846-9E80-45B2-A6D5-7F8D6BBE1E07}: DhcpDomain = hshld.com
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: !SASWinLogon . (.SUPERAntiSpyware.com - SUPERAntiSpyware WinLogon Processor.) -- C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
~ Scan Winlogon in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.COMODO - COMODO Internet Security.) - C:\Windows\System32\guard32.dll
~ Scan AppInit DLL in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) . (.cFos Software GmbH - cFosSpeed Service.) - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Google Software Updater (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Hotspot Shield Service (hshld) . (...) - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) . (.AnchorFree Inc. - Pas de description.) - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Monitoring Service (HssWd) . (...) - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: lxcz_device (lxcz_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxczcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Sandboxie Service (SbieSvc) . (.tzuk - Sandboxie Service.) - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) . (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: C:\Windows\System32\TUProgSt.exe (TuneUp.ProgramStatisticsSvc) . (.TuneUp Software - TuneUp Program Statistics Service.) - C:\Windows\System32\TUProgSt.exe
O23 - Service: X10 Device Network Service (x10nets) . (.X10 - X10 Module.) - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
[MD5.5467F1FF0AF264566740F67E8B810735] [APT] [Google Software Updater] (.Google.) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
[MD5.3A0647BDED81DBE0BCBB51D70B22C9E0] [APT] [Java Update Scheduler] (.Sun Microsystems, Inc..) -- C:\Program Files\Java\jre6\bin\jusched.exe
[MD5.402832B3EEAB32E9AEB809FF7D8C3A8D] [APT] [Maintenance en 1 clic] (.TuneUp Software GmbH.) -- C:\Program Files\TuneUp Utilities 2009\OneClickStarter.exe
[MD5.00000000000000000000000000000000] [APT] [{094B910C-CC8B-4FB2-ABFD-4336C5DFBB9F}] (...) -- C:\Users\Patouche\Logiciels vrac\FreeRapid-0.83u1\frd.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{24E6F6C5-4BD8-4BFA-A1E4-F61FE7DE84B1}] (...) -- C:\Program Files\Cepstral\bin\ceptools.cpl" (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{3EF3CCB3-DD96-4699-B35D-2C5E220C18E7}] (...) -- C:\Users\Patouche\Desktop\Voix\AV Music Morpher Gold Full 4.0.68 + keygen\music_morpher_gold.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{48631814-5C7F-4619-94C0-90BAEAF8CE19}] (...) -- c:\users\Patouche\Documents\Transfert Maxtor 40\Documents Pounet\Bureau\Tof\Install_AACD_v3.exe (.not file.)
[MD5.108FCDE8AC9CF07C55CF19D7302DCCC8] [APT] [{A92A4ABD-EBBA-44EE-8E33-C7796BA785DE}] (...) -- C:\Users\Patouche\Logiciels vrac\VirtualDub 1.9.8\auxsetup.exe
[MD5.00000000000000000000000000000000] [APT] [{BC3EC294-1DD7-4F82-9523-21FF037ACA8B}] (...) -- C:\Users\Patouche\Desktop\Voix\AV Music Morpher Gold Full 4.0.68 + keygen\music_morpher_gold.exe (.not file.)
[MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [{EDC46986-AB54-4ECF-8516-9A8266253420}] (...) -- C:\Program Files\QuickTime\QTSystem\QuickTime.cpl"
~ Scan Scheduled Task in 00mn 02s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: (cmderd) . (.COMODO - COMODO Internet Security Eradication Driver.) - C:\Windows\system32\DRIVERS\cmderd.sys
O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\Windows\system32\DRIVERS\cmdguard.sys
O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\Windows\system32\DRIVERS\cmdhlp.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\system32\DRIVERS\inspect.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys
O41 - Driver: (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
O41 - Driver: (Inspect) . (.COMODO - COMODO Internet Security Firewall Driver.) - C:\Windows\system32\DRIVERS\inspect.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: CyberLink WaveEditor - (.CyberLink Corp..) [HKLM] -- InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}
O42 - Logiciel: CyberLink WaveEditor - (.CyberLink Corp..) [HKLM] -- {324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}
O42 - Logiciel: DVR-MS 2 MPEG2 1.3 - (.*Baby*.) [HKLM] -- {414CB829-7CCC-4426-BB2A-152E482EB081}_is1
O42 - Logiciel: DebugMode Wink - (.Pas de propriétaire.) [HKLM] -- DebugMode Wink
O42 - Logiciel: DivX Pro 6.8.0 VFW - (.Pas de propriétaire.) [HKLM] -- divx650vfw_is1
O42 - Logiciel: Dracula 3 - (.Microids.) [HKLM] -- Dracula 3_is1
O42 - Logiciel: Dungeon Siege 2 - (.Microsoft.) [HKLM] -- DungeonSiege2
O42 - Logiciel: EASEUS Partition Master 8.0.1 Home Edition - (.EASEUS.) [HKLM] -- EASEUS Partition Master Home Edition_is1
O42 - Logiciel: Encyclopaedia Universalis 2011 - (.Encyclopaedia Universalis.) [HKLM] -- Encyclopaedia Universalis 2011
O42 - Logiciel: Free Download Manager 3.0 - (.FreeDownloadManager.ORG.) [HKLM] -- Free Download Manager_is1
O42 - Logiciel: GameSpy Arcade - (.Pas de propriétaire.) [HKLM] -- GameSpy Arcade
O42 - Logiciel: HFSExplorer 0.21 - (.Catacombae Software.) [HKLM] -- HFSExplorer
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotspot_Shield Toolbar - (.Pas de propriétaire.) [HKLM] -- Hotspot_Shield Toolbar
O42 - Logiciel: I-Doser v4 - (.Pas de propriétaire.) [HKCU] -- I-Doser v4
O42 - Logiciel: IRAssistant 3.40b1 - (.Pas de propriétaire.) [HKLM] -- IRAssistant
O42 - Logiciel: IsoBuster 2.6 - (.Smart Projects.) [HKLM] -- IsoBuster_is1
O42 - Logiciel: KB408682 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A81300000003}_814
O42 - Logiciel: Lexmark 1200 Series - (.Lexmark International, Inc..) [HKLM] -- Lexmark 1200 Series
O42 - Logiciel: LimeWire 5.2.4 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
O42 - Logiciel: MSDN Library pour les éditions Microsoft Visual Studio 2008 Express - (.Microsoft Corporation.) [HKLM] -- MSDN Library for Microsoft Visual Studio 2008 Express Editions
O42 - Logiciel: Magic ISO Maker v5.4 (build 0255) - (.Pas de propriétaire.) [HKLM] -- Magic ISO Maker v5.4 (build 0255)
O42 - Logiciel: MagicDisc 2.7.105 - (.Pas de propriétaire.) [HKLM] -- MagicDisc 2.7.105
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.1.1800 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: MediaCoder 2011 - (.Broad Intelligence.) [HKLM] -- MediaCoder
O42 - Logiciel: MeuhMeuhTV Alpha 3.0.0.32 - (.La Communauté de la Vache.) [HKLM] -- MeuhMeuhTV Alpha_is1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005
O42 - Logiciel: Microsoft Visual Basic 2008 Express - Français - (.Microsoft Corporation.) [HKLM] -- Microsoft Visual Basic 2008 Express Edition - FRA
O42 - Logiciel: Mises à jour NVIDIA 1.3.5 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Morpheus Photo Animation Suite v3.10 - (.Morpheus Software, LLC.) [HKLM] -- Morpheus Photo Animation Suite_is1
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: Mozilla Thunderbird (2.0.0.23) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (2.0.0.23)
O42 - Logiciel: NVIDIA 3D Vision Controller Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIA StereoUSB Driver
O42 - Logiciel: NVIDIA 3D Vision Controller Driver 270.61 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA Pilote 3D Vision 270.61 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA Pilote audio HD : 1.2.22.1 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA Pilote graphique 275.33 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo
O42 - Logiciel: Natura Sound Therapy - (.Blissive Software.) [HKLM] -- Natura Sound Therapy
O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM] -- {734cc1bd-77bc-4b44-a028-1dc68def1d95}
O42 - Logiciel: PaltalkScene - (.AVM Software Inc..) [HKLM] -- PalTalk8.2
O42 - Logiciel: Perfect Uninstaller v6.3.3.5 - (.www.PerfectUninstaller.com.) [HKLM] -- Perfect Uninstaller_is1
O42 - Logiciel: Player - (.Pas de propriétaire.) [HKCU] -- QUICKMEDIACONVERTER
O42 - Logiciel: ProxyFirewall 1.0.4 Beta - (.Unique Internet Services.) [HKLM] -- ProxyFirewall_is1
O42 - Logiciel: QuickPar 0.9 - (.Peter B. Clements.) [HKLM] -- QuickPar
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Reason 4.0 - (.Propellerhead Software AB.) [HKLM] -- Reason4_is1
O42 - Logiciel: Replay Video Capture - (.Applian Technologies Inc..) [HKLM] -- Replay Video Capture4.1
O42 - Logiciel: Sandboxie 3.42 - (.Pas de propriétaire.) [HKLM] -- Sandboxie
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: SmartSound Quicktracks 5 - (.SmartSound Software Inc..) [HKLM] -- InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: StreamTransport version: 1.0.2.1975 - (.Pas de propriétaire.) [HKLM] -- {FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1
O42 - Logiciel: SubDownloader2 - (.Pas de propriétaire.) [HKLM] -- SubDownloader2
O42 - Logiciel: Super macro 3.1 - (.Pas de propriétaire.) [HKLM] -- Super macro
O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) [HKLM] -- SystemRequirementsLab
O42 - Logiciel: Technitium MAC Address Changer v5.0 Release 3 - (.Technitium.) [HKLM] -- TMACv5.0R3
O42 - Logiciel: Total Recorder 7.0 - (.Pas de propriétaire.) [HKLM] -- TotalRecorder
O42 - Logiciel: Total Video Converter 3.12 080330 - (.EffectMatrix Inc..) [HKLM] -- Total Video Converter 3.12_is1
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: WampServer 2.1 - (.Hervé Leclerc (HeL).) [HKLM] -- WampServer 2_is1
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: X10 Hardware - (.Pas de propriétaire.) [HKLM] -- X10Hardware
O42 - Logiciel: Xvid 1.2.2 final uninstall - (.Xvid team (Koepi).) [HKLM] -- Xvid_is1
O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM] -- Yahoo! Messenger
O42 - Logiciel: ZebHelpProcess 2.49 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process_is1
O42 - Logiciel: cFosSpeed v4.51 - (.cFos Software GmbH, Bonn.) [HKLM] -- cFosSpeed
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKCU] -- uTorrent
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AACD]
[HKCU\Software\Actecom]
[HKCU\Software\Adobe]
[HKCU\Software\Alcohol Soft]
[HKCU\Software\Antenet]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Hotspot_Shield]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Applian]
[HKCU\Software\AsfTools]
[HKCU\Software\Avnex]
[HKCU\Software\Bert's Software]
[HKCU\Software\Beyersdorf]
[HKCU\Software\BitTorrent]
[HKCU\Software\Borland]
[HKCU\Software\C:]
[HKCU\Software\CDDB]
[HKCU\Software\CamStudioOpenSource for Nick]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ComodoGroup]
[HKCU\Software\Comodo]
[HKCU\Software\Cyberlink]
[HKCU\Software\Cygwin]
[HKCU\Software\Debugmode]
[HKCU\Software\DirectShow]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EASEUS]
[HKCU\Software\EasyBits]
[HKCU\Software\FLEXnet]
[HKCU\Software\Foxit Software]
[HKCU\Software\FreeDownloadManager.ORG]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GameSpy]
[HKCU\Software\Google]
[HKCU\Software\Hensense.com]
[HKCU\Software\HighCriteria]
[HKCU\Software\HotspotShield]
[HKCU\Software\Intel]
[HKCU\Software\Intelore]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JaboSoft]
[HKCU\Software\JavaSoft]
[HKCU\Software\Jouve]
[HKCU\Software\Key Metric Software]
[HKCU\Software\Lake]
[HKCU\Software\Lavalys]
[HKCU\Software\Lavasoft]
[HKCU\Software\LexmarkPhoto]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Log Viewer]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Macrovision]
[HKCU\Software\MagicDisc]
[HKCU\Software\MagicISO]
[HKCU\Software\Magnet]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Microids]
[HKCU\Software\MimarSinan]
[HKCU\Software\Morpheus Software]
[HKCU\Software\Mozilla Backup]
[HKCU\Software\Mozilla]
[HKCU\Software\N64 Emulation]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nektra]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Noromaa Solutions]
[HKCU\Software\Nuance]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PC SOFT]
[HKCU\Software\Paint.NET]
[HKCU\Software\Paltalk]
[HKCU\Software\Perfect Software]
[HKCU\Software\Perfect Uninstaller]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Propellerhead Software]
[HKCU\Software\Quark]
[HKCU\Software\QuickPar]
[HKCU\Software\RayV]
[HKCU\Software\Realtek]
[HKCU\Software\Replay Video Capture]
[HKCU\Software\SUPERAntiSpyware.com]
[HKCU\Software\SWiSHzone.com]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\ScanSoft]
[HKCU\Software\SecuROM]
[HKCU\Software\SenBit]
[HKCU\Software\Skype]
[HKCU\Software\Smart Projects]
[HKCU\Software\SmartSound Software]
[HKCU\Software\Softonic]
[HKCU\Software\Sony Media Software]
[HKCU\Software\SubDownloader]
[HKCU\Software\SubSystems]
[HKCU\Software\Sysinternals]
[HKCU\Software\TechSmith]
[HKCU\Software\TuneUp]
[HKCU\Software\Ulead Systems]
[HKCU\Software\UniqueInternetServices]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\XPRepairPro4]
[HKCU\Software\Yahoo]
[HKCU\Software\Zeon]
[HKCU\Software\Zyrax Software]
[HKCU\Software\ej-technologies]
[HKCU\Software\iMacros]
[HKCU\Software\pth264]
[HKCU\Software\tvp]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ANI]
[HKLM\Software\Acronis]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\Alpha Networks]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Applian]
[HKLM\Software\Avnex]
[HKLM\Software\Beyersdorf]
[HKLM\Software\Blissive Software]
[HKLM\Software\Borland]
[HKLM\Software\CDDB]
[HKLM\Software\Caphyon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\ComodoGroup]
[HKLM\Software\Conduit]
[HKLM\Software\Converter]
[HKLM\Software\CyberLink]
[HKLM\Software\Cygwin]
[HKLM\Software\DebugMode]
[HKLM\Software\Debug]
[HKLM\Software\FreeDownloadManager.ORG]
[HKLM\Software\FullCircle]
[HKLM\Software\Google]
[HKLM\Software\HighCriteria]
[HKLM\Software\Hotspot_Shield]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\Iron Lore]
[HKLM\Software\JavaSoft]
[HKLM\Software\Jouve]
[HKLM\Software\JreMetrics]
[HKLM\Software\Kaydara]
[HKLM\Software\Khronos]
[HKLM\Software\L&H]
[HKLM\Software\Lake]
[HKLM\Software\LexmarkInkjet]
[HKLM\Software\Lexmark]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\MAXSOFT-OCRON]
[HKLM\Software\MC4D]
[HKLM\Software\MMTV]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MeuhMeuhTV]
[HKLM\Software\MimarSinan]
[HKLM\Software\Morpheus Software]
[HKLM\Software\Moyea]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PBSWProducts]
[HKLM\Software\Perfect Uninstaller]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\Quark]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Replay Video Capture]
[HKLM\Software\S3R521]
[HKLM\Software\SUPERAntiSpyware.com]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\ScanSoft]
[HKLM\Software\SenBit]
[HKLM\Software\Skype]
[HKLM\Software\SmartSound Software]
[HKLM\Software\Sonic]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sony Media Software]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Swearware]
[HKLM\Software\TechSmith]
[HKLM\Software\Technitium]
[HKLM\Software\TrendMicro]
[HKLM\Software\TuneUp]
[HKLM\Software\Ulead Systems]
[HKLM\Software\Unreal]
[HKLM\Software\VideoLAN]
[HKLM\Software\Wow6432Node]
[HKLM\Software\Yahoo]
[HKLM\Software\ZEON]
[HKLM\Software\cFos]
[HKLM\Software\ej-technologies]
[HKLM\Software\iTinySoft]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 13/01/2009 - 18:31:48 - [40014656] ----D- C:\Program Files\Acronis
O43 - CFD: 07/12/2007 - 16:54:20 - [12683094] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 10/08/2011 - 14:07:30 - [2599541589] ----D- C:\Program Files\Adobe
O43 - CFD: 01/10/2009 - 15:44:44 - [932461] ----D- C:\Program Files\adslTV
O43 - CFD: 05/07/2009 - 11:43:40 - [13133503] ----D- C:\Program Files\Alcohol Soft
O43 - CFD: 17/07/2011 - 16:02:02 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 28/04/2009 - 13:21:00 - [0] ----D- C:\Program Files\Auslogics
O43 - CFD: 19/02/2009 - 01:43:28 - [0] ----D- C:\Program Files\Babylon
O43 - CFD: 04/08/2011 - 21:34:38 - [23357186] ----D- C:\Program Files\Binload
O43 - CFD: 11/06/2009 - 13:02:46 - [2417595] ----D- C:\Program Files\BrainWave Generator
O43 - CFD: 31/07/2011 - 13:35:30 - [4092512] ----D- C:\Program Files\CCleaner
O43 - CFD: 11/08/2011 - 10:50:08 - [7272866] ----D- C:\Program Files\cFosSpeed
O43 - CFD: 11/08/2011 - 09:25:16 - [1389557951] ----D- C:\Program Files\Common Files
O43 - CFD: 04/04/2010 - 10:18:34 - [513159023] ----D- C:\Program Files\COMODO
O43 - CFD: 02/08/2011 - 21:34:12 - [520728] ----D- C:\Program Files\Conduit
O43 - CFD: 31/07/2011 - 15:14:44 - [513229641] ----D- C:\Program Files\CyberLink
O43 - CFD: 15/04/2011 - 06:52:26 - [0] ----D- C:\Program Files\D-Link
O43 - CFD: 04/07/2011 - 08:00:28 - [9889635] ----D- C:\Program Files\DebugMode
O43 - CFD: 07/02/2010 - 19:29:46 - [694087] ----D- C:\Program Files\DivX Pro VFW
O43 - CFD: 07/02/2010 - 11:53:36 - [39465930] ----D- C:\Program Files\DVR-MS 2 MPEG2
O43 - CFD: 12/07/2011 - 00:53:44 - [34375700] ----D- C:\Program Files\EASEUS
O43 - CFD: 05/07/2011 - 04:19:28 - [3135] ----D- C:\Program Files\EasyPHP-5.3.2i
O43 - CFD: 01/07/2011 - 09:59:12 - [6027969222] ----D- C:\Program Files\Encyclopaedia Universalis 2011
O43 - CFD: 11/09/2008 - 15:33:34 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 01/10/2009 - 13:27:04 - [19056752] ----D- C:\Program Files\Free Download Manager
O43 - CFD: 15/03/2009 - 07:59:10 - [9497761] ----D- C:\Program Files\GameSpy Arcade
O43 - CFD: 28/01/2009 - 09:08:36 - [27815141] ----D- C:\Program Files\Google
O43 - CFD: 12/07/2011 - 22:33:26 - [2898974] ----D- C:\Program Files\HFSExplorer
O43 - CFD: 12/05/2009 - 01:26:06 - [8519146] ----D- C:\Program Files\HighCriteria
O43 - CFD: 04/01/2008 - 18:17:06 - [652221248] ----D- C:\Program Files\HomeCinema
O43 - CFD: 02/08/2011 - 21:34:16 - [7392902] ----D- C:\Program Files\Hotspot Shield
O43 - CFD: 02/08/2011 - 21:34:14 - [2549523] ----D- C:\Program Files\Hotspot_Shield
O43 - CFD: 17/05/2009 - 11:51:24 - [7161150] ----D- C:\Program Files\IDoser v4
O43 - CFD: 31/07/2011 - 15:15:14 - [34948594] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 23/09/2008 - 18:53:32 - [1824041] ----D- C:\Program Files\Intelore
O43 - CFD: 17/07/2011 - 11:38:26 - [6386003] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 03/07/2011 - 11:10:24 - [2277841] ----D- C:\Program Files\IRAssistant
O43 - CFD: 14/06/2011 - 06:34:16 - [90223182] ----D- C:\Program Files\Java
O43 - CFD: 10/06/2011 - 00:26:24 - [0] ----D- C:\Program Files\JRE
O43 - CFD: 01/07/2011 - 10:41:40 - [24247317] ----D- C:\Program Files\Key Metric Software
O43 - CFD: 23/06/2011 - 16:21:56 - [78969695] ----D- C:\Program Files\Lexmark 1200 Series
O43 - CFD: 11/07/2009 - 07:28:22 - [77598309] ----D- C:\Program Files\LimeWire
O43 - CFD: 28/09/2008 - 15:51:18 - [937576] ----D- C:\Program Files\MagicDisc
O43 - CFD: 28/09/2008 - 18:09:00 - [3137968] ----D- C:\Program Files\MagicISO
O43 - CFD: 17/06/2011 - 21:51:56 - [21232200] ----D- C:\Program Files\MahJong Suite
O43 - CFD: 16/07/2011 - 15:15:34 - [7065135] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 30/07/2011 - 14:05:58 - [94696188] ----D- C:\Program Files\MediaCoder
O43 - CFD: 30/09/2008 - 09:44:40 - [19891430] ----D- C:\Program Files\Mediafour
O43 - CFD: 23/01/2010 - 19:14:02 - [8204356] ----D- C:\Program Files\MeuhMeuhTV Alpha
O43 - CFD: 20/07/2009 - 12:28:34 - [2502737873] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 23/03/2010 - 09:04:02 - [405352788] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 27/05/2009 - 02:23:10 - [2694269] ----D- C:\Program Files\Microsoft Reader
O43 - CFD: 18/10/2008 - 04:54:58 - [11794332] ----D- C:\Program Files\Microsoft SDKs
O43 - CFD: 08/05/2011 - 15:27:28 - [39414723] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 18/10/2008 - 05:08:36 - [233117447] ----D- C:\Program Files\Microsoft SQL Server
O43 - CFD: 18/10/2008 - 04:59:20 - [4475556] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 18/10/2008 - 04:59:20 - [616125] ----D- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 18/10/2008 - 05:00:08 - [813853404] ----D- C:\Program Files\Microsoft Visual Studio 9.0
O43 - CFD: 07/12/2007 - 16:59:42 - [144949414] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 15/04/2011 - 13:15:42 - [9739013] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 21/09/2008 - 19:57:00 - [136492044] ----D- C:\Program Files\Mindscape
O43 - CFD: 31/05/2009 - 19:00:50 - [12098261] ----D- C:\Program Files\Morpheus Photo Animation Suite
O43 - CFD: 15/04/2011 - 08:09:38 - [99342446] ----D- C:\Program Files\Movie Maker
O43 - CFD: 23/06/2011 - 10:26:52 - [39393903] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 09/09/2009 - 19:20:34 - [26612349] ----D- C:\Program Files\Mozilla Thunderbird
O43 - CFD: 02/11/2006 - 14:37:36 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 17/07/2011 - 08:38:28 - [0] ----D- C:\Program Files\MSECACHE
O43 - CFD: 17/12/2007 - 17:47:42 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 28/05/2009 - 20:03:00 - [60791135] ----D- C:\Program Files\Natura Sound Therapy
O43 - CFD: 26/07/2009 - 14:35:54 - [503998234] ----D- C:\Program Files\Nero
O43 - CFD: 28/09/2008 - 13:11:48 - [0] ----D- C:\Program Files\NetConceal
O43 - CFD: 10/07/2011 - 19:33:52 - [524761037] ----D- C:\Program Files\Nuance
O43 - CFD: 08/05/2011 - 11:09:50 - [806371196] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 10/06/2011 - 00:30:38 - [423181738] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 03/02/2010 - 21:05:46 - [21080073] ----D- C:\Program Files\Paltalk Messenger
O43 - CFD: 07/07/2009 - 19:45:12 - [13439408] ----D- C:\Program Files\Perfect Uninstaller
O43 - CFD: 26/10/2008 - 18:39:04 - [2467294] ----D- C:\Program Files\PROnetworks
O43 - CFD: 10/06/2009 - 10:36:00 - [1499468173] ----D- C:\Program Files\Propellerhead
O43 - CFD: 18/02/2010 - 18:11:34 - [2390068] ----D- C:\Program Files\ProxyFirewall
O43 - CFD: 30/07/2011 - 19:14:54 - [48071107] ----D- C:\Program Files\QuickMediaConverter
O43 - CFD: 27/07/2011 - 21:28:22 - [941108] ----D- C:\Program Files\QuickPar
O43 - CFD: 17/07/2011 - 16:06:00 - [76322555] ----D- C:\Program Files\QuickTime
O43 - CFD: 07/12/2007 - 15:17:42 - [16359636] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 14:37:36 - [60923158] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 27/05/2010 - 09:33:40 - [1773056] ----D- C:\Program Files\RegCleaner
O43 - CFD: 11/08/2011 - 07:46:54 - [435556628] ----D- C:\Program Files\RegTweaker
O43 - CFD: 23/07/2011 - 23:27:28 - [25567923] ----D- C:\Program Files\Replay Video Capture
O43 - CFD: 10/05/2009 - 13:59:16 - [2367370] ----D- C:\Program Files\Sandboxie
O43 - CFD: 01/12/2009 - 14:25:10 - [10451377] ----D- C:\Program Files\Smart Projects
O43 - CFD: 30/07/2011 - 23:31:32 - [22354572] ----D- C:\Program Files\SmartSound Software
O43 - CFD: 28/05/2009 - 13:42:56 - [140056594] ----D- C:\Program Files\Sony
O43 - CFD: 29/11/2009 - 17:46:26 - [82517518] ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 13/06/2011 - 07:46:06 - [5595691] ----D- C:\Program Files\StreamTransport
O43 - CFD: 23/08/2009 - 10:00:38 - [30000440] ----D- C:\Program Files\SubDownloader2
O43 - CFD: 20/01/2011 - 18:40:42 - [17503545] ----D- C:\Program Files\Super macro
O43 - CFD: 21/09/2009 - 08:20:28 - [22828817] ----D- C:\Program Files\SUPERAntiSpyware
O43 - CFD: 09/05/2011 - 12:42:32 - [396401] ----D- C:\Program Files\SystemRequirementsLab
O43 - CFD: 29/09/2009 - 22:39:18 - [2059346] ----D- C:\Program Files\Technitium
O43 - CFD: 05/07/2009 - 15:03:26 - [61878111] ----D- C:\Program Files\TechSmith
O43 - CFD: 13/12/2008 - 18:06:40 - [27495818] ----D- C:\Program Files\Total Video Converter
O43 - CFD: 08/08/2011 - 06:30:22 - [801475] ----D- C:\Program Files\trend micro
O43 - CFD: 13/07/2011 - 21:20:28 - [11055] ----D- C:\Program Files\Trojan Remover
O43 - CFD: 06/08/2009 - 07:58:28 - [42463405] ----D- C:\Program Files\TuneUp Utilities 2009
O43 - CFD: 07/12/2007 - 16:10:18 - [390235965] ----D- C:\Program Files\Ulead Systems
O43 - CFD: 30/06/2009 - 08:53:18 - [53248] ----D- C:\Program Files\UltraISO
O43 - CFD: 02/11/2006 - 15:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 16/09/2008 - 12:07:56 - [270128] ----D- C:\Program Files\uTorrent
O43 - CFD: 14/09/2008 - 13:45:36 - [91167406] ----D- C:\Program Files\VideoLAN
O43 - CFD: 28/05/2009 - 13:41:34 - [247] ----D- C:\Program Files\Vstplugins
O43 - CFD: 05/05/2009 - 05:27:24 - [858084] ----D- C:\Program Files\Western Digital Technologies
O43 - CFD: 27/05/2009 - 20:27:28 - [1016832] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 27/05/2009 - 20:27:22 - [2737152] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 27/05/2009 - 20:27:06 - [4490624] ----D- C:\Program Files\Windows Defender
O43 - CFD: 17/07/2011 - 08:35:04 - [142742] ----D- C:\Program Files\Windows Installer Clean Up
O43 - CFD: 27/05/2009 - 20:27:22 - [7084664] ----D- C:\Program Files\Windows Journal
O43 - CFD: 15/06/2011 - 08:35:16 - [9116344] ----D- C:\Program Files\Windows Mail
O43 - CFD: 15/04/2011 - 08:09:46 - [4498121] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 11/09/2008 - 15:33:34 - [7957544] ----D- C:\Program Files\Windows NT
O43 - CFD: 27/05/2009 - 20:27:16 - [13528738] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 27/05/2009 - 20:27:22 - [6527558] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 01/08/2011 - 11:28:30 - [3656864] ----D- C:\Program Files\WinRar
O43 - CFD: 22/01/2009 - 16:15:36 - [73026611] ----D- C:\Program Files\WorldOfGoo
O43 - CFD: 07/12/2007 - 15:32:14 - [18211] ----D- C:\Program Files\X10 Hardware
O43 - CFD: 09/07/2011 - 20:02:34 - [11894039] ----D- C:\Program Files\XP Repair Pro 4.0
O43 - CFD: 01/05/2010 - 18:11:48 - [770235] ----D- C:\Program Files\Xvid
O43 - CFD: 02/05/2009 - 12:07:36 - [25269443] ----D- C:\Program Files\Yahoo!
O43 - CFD: 11/08/2011 - 06:47:12 - [105755527] ----D- C:\Program Files\ZebHelpProcess
O43 - CFD: 01/07/2011 - 10:54:26 - [2562] --H-D- C:\Program Files\Zero G Registry
O43 - CFD: 11/08/2011 - 10:54:56 - [3999742] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 13/01/2009 - 18:31:54 - [110232435] ----D- C:\Program Files\Common Files\Acronis
O43 - CFD: 18/07/2011 - 13:43:44 - [384772482] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 17/07/2011 - 16:02:26 - [54774793] ----D- C:\Program Files\Common Files\Apple
O43 - CFD: 08/08/2011 - 18:30:48 - [7675827] ----D- C:\Program Files\Common Files\Borland Shared
O43 - CFD: 07/12/2007 - 16:38:50 - [92976] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 16/04/2009 - 16:17:40 - [17572458] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 12/06/2011 - 08:44:14 - [1258951] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 27/05/2009 - 02:24:10 - [2393173] ----D- C:\Program Files\Common Files\L&H
O43 - CFD: 23/07/2011 - 09:10:08 - [751228] ----D- C:\Program Files\Common Files\Logitech
O43 - CFD: 27/05/2009 - 02:24:10 - [514438994] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 26/07/2009 - 14:39:20 - [196915582] ----D- C:\Program Files\Common Files\Nero
O43 - CFD: 28/05/2009 - 10:36:28 - [0] ----D- C:\Program Files\Common Files\Screaming Bee
O43 - CFD: 02/11/2006 - 13:18:34 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 12/06/2011 - 09:16:16 - [2254216] ----D- C:\Program Files\Common Files\Skype
O43 - CFD: 02/11/2006 - 13:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 27/05/2009 - 20:27:16 - [43753230] ----D- C:\Program Files\Common Files\System
O43 - CFD: 07/12/2007 - 16:10:18 - [3070792] ----D- C:\Program Files\Common Files\Ulead Systems
O43 - CFD: 30/01/2009 - 13:56:04 - [5681152] ----D- C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 07/12/2007 - 15:31:50 - [2749689] ----D- C:\Program Files\Common Files\X10
O43 - CFD: 26/10/2008 - 03:34:02 - [6608] ----D- C:\ProgramData\2DBoy
O43 - CFD: 13/01/2009 - 18:37:48 - [36553] ----D- C:\ProgramData\Acronis
O43 - CFD: 18/07/2011 - 07:17:42 - [536174327] ----D- C:\ProgramData\Adobe
O43 - CFD: 17/07/2011 - 16:02:02 - [20614656] ----D- C:\ProgramData\Apple
O43 - CFD: 17/07/2011 - 16:05:52 - [26906557] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 11/09/2008 - 15:33:32 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 21/05/2011 - 17:48:26 - [20771855] ----D- C:\ProgramData\COMODO
O43 - CFD: 04/04/2010 - 10:23:16 - [0] ----D- C:\ProgramData\Comodo Downloader
O43 - CFD: 31/07/2011 - 07:03:20 - [55391] ----D- C:\ProgramData\CyberLink
O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 30/07/2011 - 23:31:32 - [360580] ----D- C:\ProgramData\eSellerate
O43 - CFD: 11/09/2008 - 15:33:32 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 10/07/2011 - 19:31:48 - [3552836] ----D- C:\ProgramData\FLEXnet
O43 - CFD: 01/10/2009 - 13:26:56 - [2796] ----D- C:\ProgramData\FreeDownloadManager.ORG
O43 - CFD: 16/09/2008 - 11:20:28 - [14402] ----D- C:\ProgramData\Google
O43 - CFD: 25/03/2009 - 21:00:22 - [14476] ----D- C:\ProgramData\Google Updater
O43 - CFD: 02/08/2011 - 21:43:12 - [0] ----D- C:\ProgramData\hssff
O43 - CFD: 07/12/2007 - 16:11:52 - [148] ----D- C:\ProgramData\InstallShield
O43 - CFD: 01/07/2011 - 10:59:48 - [124] ----D- C:\ProgramData\Key Metric Software
O43 - CFD: 10/07/2011 - 19:33:52 - [3552851] ----D- C:\ProgramData\Macrovision
O43 - CFD: 27/07/2009 - 08:26:02 - [16667929] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 30/09/2008 - 09:45:44 - [3120] ----D- C:\ProgramData\Mediafour
O43 - CFD: 11/09/2008 - 15:33:32 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 17/03/2009 - 14:17:48 - [11499] ----D- C:\ProgramData\Micro Application
O43 - CFD: 08/05/2011 - 11:39:32 - [520541668] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 15/12/2009 - 17:14:24 - [64118606] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 11/09/2008 - 15:33:34 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 26/07/2009 - 14:27:44 - [10019027] ----D- C:\ProgramData\Nero
O43 - CFD: 27/05/2010 - 10:12:24 - [64869] ----D- C:\ProgramData\Neuro-Programmer 2 Files
O43 - CFD: 10/07/2011 - 19:34:52 - [106] ----D- C:\ProgramData\Nuance
O43 - CFD: 11/08/2011 - 09:51:06 - [2410494] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 08/05/2011 - 09:56:04 - [608137] ----D- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 10/06/2009 - 10:36:32 - [3401039] ----D- C:\ProgramData\Propellerhead Software
O43 - CFD: 17/07/2011 - 11:44:38 - [14598520] ----D- C:\ProgramData\Quark
O43 - CFD: 18/07/2011 - 14:16:48 - [3420] ----D- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 10/07/2011 - 19:33:06 - [157501] ----D- C:\ProgramData\ScanSoft
O43 - CFD: 28/05/2009 - 10:35:36 - [142] ----D- C:\ProgramData\Screaming Bee
O43 - CFD: 12/06/2011 - 09:16:12 - [20366348] ----D- C:\ProgramData\Skype
O43 - CFD: 12/06/2011 - 12:51:46 - [2818489] ----D- C:\ProgramData\Skype Extras
O43 - CFD: 01/08/2011 - 00:06:36 - [57286093] ----D- C:\ProgramData\SmartSound Software Inc
O43 - CFD: 08/08/2011 - 17:59:46 - [7437831] ----D- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 08/04/2010 - 09:55:14 - [189] ----D- C:\ProgramData\Sun
O43 - CFD: 08/01/2009 - 09:03:14 - [692] ----D- C:\ProgramData\Sunbelt
O43 - CFD: 30/01/2009 - 13:56:58 - [0] ----D- C:\ProgramData\SUPERAntiSpyware.com
O43 - CFD: 05/07/2009 - 15:03:32 - [75993116] ----D- C:\ProgramData\TechSmith
O43 - CFD: 04/08/2011 - 20:06:28 - [438136] ---AD- C:\ProgramData\TEMP
O43 - CFD: 02/11/2006 - 15:02:06 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 22/01/2009 - 07:57:12 - [6322] ----D- C:\ProgramData\TreeCardGames
O43 - CFD: 29/04/2009 - 04:38:30 - [1645281] ----D- C:\ProgramData\TuneUp Software
O43 - CFD: 07/12/2007 - 16:10:32 - [93242] ----D- C:\ProgramData\Ulead Systems
O43 - CFD: 01/07/2011 - 10:02:26 - [6960] ----D- C:\ProgramData\UniversalisV16
O43 - CFD: 17/12/2007 - 18:22:46 - [2492] ----D- C:\ProgramData\Windows Genuine Advantage
O43 - CFD: 30/05/2009 - 08:26:04 - [0] ----D- C:\ProgramData\WindowsSearch
O43 - CFD: 03/07/2011 - 00:45:06 - [411625] ----D- C:\ProgramData\X10 Settings
O43 - CFD: 02/05/2009 - 12:31:00 - [609043] ----D- C:\ProgramData\Yahoo!
O43 - CFD: 10/07/2011 - 19:34:22 - [52073] ----D- C:\ProgramData\zeon
O43 - CFD: 20/02/2009 - 18:24:24 - [0] ----D- C:\ProgramData\_comodo_
O43 - CFD: 07/12/2007 - 16:54:24 - [6904816] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
O43 - CFD: 29/04/2009 - 04:36:20 - [16657408] -SH-D- C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
O43 - CFD: 16/01/2009 - 22:31:14 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Acronis
O43 - CFD: 29/07/2011 - 09:22:12 - [21183407] ----D- C:\Users\Patouche\AppData\Roaming\Adobe
O43 - CFD: 17/07/2011 - 15:01:24 - [355] ----D- C:\Users\Patouche\AppData\Roaming\Adobe Mini Bridge CS5.1
O43 - CFD: 17/07/2011 - 11:54:56 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Apple Computer
O43 - CFD: 24/06/2011 - 20:07:24 - [21644] ----D- C:\Users\Patouche\AppData\Roaming\Broad Intelligence
O43 - CFD: 17/07/2011 - 15:24:42 - [28938] ----D- C:\Users\Patouche\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 17/07/2011 - 15:23:28 - [0] ----D- C:\Users\Patouche\AppData\Roaming\com.adobe.DC3Module.AdobeADC
O43 - CFD: 31/07/2011 - 18:52:32 - [21398157] ----D- C:\Users\Patouche\AppData\Roaming\CyberLink
O43 - CFD: 06/04/2011 - 08:00:34 - [199] ----D- C:\Users\Patouche\AppData\Roaming\dvdcss
O43 - CFD: 10/07/2011 - 19:37:12 - [139] ----D- C:\Users\Patouche\AppData\Roaming\FLEXnet
O43 - CFD: 06/01/2010 - 16:08:24 - [0] ----D- C:\Users\Patouche\AppData\Roaming\FMZilla
O43 - CFD: 10/08/2011 - 09:04:02 - [1071] ----D- C:\Users\Patouche\AppData\Roaming\Free Download Manager
O43 - CFD: 28/01/2009 - 09:21:44 - [33225] ----D- C:\Users\Patouche\AppData\Roaming\Google
O43 - CFD: 10/06/2009 - 08:40:30 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Help
O43 - CFD: 22/07/2011 - 10:12:46 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Hensense.com
O43 - CFD: 11/09/2008 - 15:59:48 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Identities
O43 - CFD: 01/07/2011 - 10:40:46 - [916719] ----D- C:\Users\Patouche\AppData\Roaming\Key Metric Software
O43 - CFD: 13/09/2008 - 23:31:48 - [928128] ----D- C:\Users\Patouche\AppData\Roaming\Lavasoft
O43 - CFD: 03/07/2011 - 21:53:14 - [24490118] ----D- C:\Users\Patouche\AppData\Roaming\LimeWire
O43 - CFD: 13/09/2008 - 10:54:54 - [3123823] ----D- C:\Users\Patouche\AppData\Roaming\Macromedia
O43 - CFD: 18/04/2010 - 17:05:36 - [121928] ----D- C:\Users\Patouche\AppData\Roaming\MahJong Suite
O43 - CFD: 27/07/2009 - 08:26:16 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Malwarebytes
O43 - CFD: 02/11/2006 - 14:37:36 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Media Center Programs
O43 - CFD: 20/07/2009 - 14:44:22 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Media Player Classic
O43 - CFD: 22/01/2010 - 20:08:20 - [16393] ----D- C:\Users\Patouche\AppData\Roaming\MeuhMeuhTV
O43 - CFD: 18/06/2011 - 08:14:46 - [8537998] -S--D- C:\Users\Patouche\AppData\Roaming\Microsoft
O43 - CFD: 31/05/2009 - 19:01:04 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Morpheus Software
O43 - CFD: 19/07/2011 - 23:15:40 - [35867014] ----D- C:\Users\Patouche\AppData\Roaming\Mozilla
O43 - CFD: 04/08/2009 - 17:17:34 - [1070907] ----D- C:\Users\Patouche\AppData\Roaming\Nero
O43 - CFD: 10/07/2011 - 19:33:18 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Nuance
O43 - CFD: 13/10/2008 - 22:02:56 - [37783079] ----D- C:\Users\Patouche\AppData\Roaming\OpenOffice.org
O43 - CFD: 04/01/2010 - 12:45:32 - [51403] ----D- C:\Users\Patouche\AppData\Roaming\Paltalk
O43 - CFD: 08/11/2009 - 01:54:28 - [0] ----D- C:\Users\Patouche\AppData\Roaming\PeerNetworking
O43 - CFD: 10/06/2009 - 10:38:34 - [14912] ----D- C:\Users\Patouche\AppData\Roaming\Propellerhead Software
O43 - CFD: 28/05/2009 - 14:10:28 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Publish Providers
O43 - CFD: 17/07/2011 - 11:48:44 - [41208] ----D- C:\Users\Patouche\AppData\Roaming\Quark
O43 - CFD: 30/09/2008 - 02:27:30 - [0] ----D- C:\Users\Patouche\AppData\Roaming\RayV
O43 - CFD: 10/07/2011 - 22:39:12 - [1415789] ----D- C:\Users\Patouche\AppData\Roaming\ScanSoft
O43 - CFD: 28/05/2009 - 12:06:20 - [22958] ----D- C:\Users\Patouche\AppData\Roaming\Screaming Bee
O43 - CFD: 12/06/2011 - 13:31:02 - [2110241] ----D- C:\Users\Patouche\AppData\Roaming\Skype
O43 - CFD: 12/06/2011 - 09:16:34 - [87728] ----D- C:\Users\Patouche\AppData\Roaming\skypePM
O43 - CFD: 28/05/2009 - 13:43:52 - [0] ----D- C:\Users\Patouche\AppData\Roaming\Sony
O43 - CFD: 17/07/2011 - 15:01:24 - [0] ----D- C:\Users\Patouche\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
O43 - CFD: 30/01/2009 - 13:56:44 - [37771821] ----D- C:\Users\Patouche\AppData\Roaming\SUPERAntiSpyware.com
O43 - CFD: 09/05/2011 - 12:43:10 - [1163264] ----D- C:\Users\Patouche\AppData\Roaming\SystemRequirementsLab
O43 - CFD: 12/09/2008 - 10:27:26 - [22588] ----D- C:\Users\Patouche\AppData\Roaming\Talkback
O43 - CFD: 01/10/2008 - 13:13:36 - [13824] ----D- C:\Users\Patouche\AppData\Roaming\Template
O43 - CFD: 12/09/2008 - 10:27:06 - [393040712] ----D- C:\Users\Patouche\AppData\Roaming\Thunderbird
O43 - CFD: 12/05/2009 - 01:13:10 - [34748] ----D- C:\Users\Patouche\AppData\Roaming\TotalRecorder
O43 - CFD: 29/04/2009 - 04:38:48 - [49808] ----D- C:\Users\Patouche\AppData\Roaming\TuneUp Software
O43 - CFD: 25/01/2009 - 23:49:28 - [14703405] ----D- C:\Users\Patouche\AppData\Roaming\Ulead Systems
O43 - CFD: 03/08/2011 - 12:54:48 - [35194324] ----D- C:\Users\Patouche\AppData\Roaming\uTorrent
O43 - CFD: 19/12/2009 - 23:28:16 - [340801] ----D- C:\Users\Patouche\AppData\Roaming\VitySoft
O43 - CFD: 29/07/2011 - 19:36:48 - [80761] ----D- C:\Users\Patouche\AppData\Roaming\vlc
O43 - CFD: 14/09/2008 - 13:29:46 - [0] ----D- C:\Users\Patouche\AppData\Roaming\WinRAR
O43 - CFD: 25/01/2009 - 06:55:54 - [13904] ----D- C:\Users\Patouche\AppData\Roaming\WNR
O43 - CFD: 10/07/2011 - 19:37:02 - [54962] ----D- C:\Users\Patouche\AppData\Roaming\Zeon
O43 - CFD: 19/07/2011 - 08:14:20 - [35610453] ----D- C:\Users\Patouche\AppData\Local\Adobe
O43 - CFD: 12/09/2008 - 19:28:32 - [190265] ----D- C:\Users\Patouche\AppData\Local\Ahead
O43 - CFD: 17/07/2011 - 16:02:06 - [0] ----D- C:\Users\Patouche\AppData\Local\Apple
O43 - CFD: 17/07/2011 - 15:30:06 - [0] ----D- C:\Users\Patouche\AppData\Local\Apple Computer
O43 - CFD: 11/09/2008 - 15:59:40 - [0] -SH-D- C:\Users\Patouche\AppData\Local\Application Data
O43 - CFD: 16/02/2010 - 07:28:16 - [0] ----D- C:\Users\Patouche\AppData\Local\Apps
O43 - CFD: 23/01/2009 - 13:26:42 - [12697] ----D- C:\Users\Patouche\AppData\Local\COMODO
O43 - CFD: 28/01/2009 - 09:21:44 - [30687] ----D- C:\Users\Patouche\AppData\Local\Google
O43 - CFD: 10/12/2010 - 07:35:34 - [133356] ----D- C:\Users\Patouche\AppData\Local\Help
O43 - CFD: 11/09/2008 - 15:59:40 - [0] -SH-D- C:\Users\Patouche\AppData\Local\Historique
O43 - CFD: 05/10/2008 - 00:53:40 - [8139] ----D- C:\Users\Patouche\AppData\Local\MakeDisc
O43 - CFD: 18/06/2011 - 08:14:46 - [199411751] ----D- C:\Users\Patouche\AppData\Local\Microsoft
O43 - CFD: 27/02/2009 - 19:41:22 - [1099882] ----D- C:\Users\Patouche\AppData\Local\Microsoft Games
O43 - CFD: 18/10/2008 - 05:37:30 - [120944] ----D- C:\Users\Patouche\AppData\Local\Microsoft Help
O43 - CFD: 06/01/2009 - 13:41:50 - [263191] ----D- C:\Users\Patouche\AppData\Local\MigWiz
O43 - CFD: 11/09/2008 - 18:08:04 - [43275352] ----D- C:\Users\Patouche\AppData\Local\Mozilla
O43 - CFD: 09/10/2008 - 02:22:06 - [68340] ----D- C:\Users\Patouche\AppData\Local\Nero
O43 - CFD: 05/10/2008 - 00:53:28 - [0] ----D- C:\Users\Patouche\AppData\Local\PowerCinema
O43 - CFD: 17/07/2011 - 11:51:50 - [860359] ----D- C:\Users\Patouche\AppData\Local\Quark
O43 - CFD: 04/08/2011 - 07:31:26 - [750583] ----D- C:\Users\Patouche\AppData\Local\QuickPar
O43 - CFD: 28/05/2009 - 13:43:52 - [37220] ----D- C:\Users\Patouche\AppData\Local\Sony
O43 - CFD: 05/07/2009 - 15:03:26 - [5138216] ----D- C:\Users\Patouche\AppData\Local\TechSmith
O43 - CFD: 11/08/2011 - 10:53:12 - [40960] ----D- C:\Users\Patouche\AppData\Local\temp
O43 - CFD: 11/09/2008 - 15:59:40 - [0] -SH-D- C:\Users\Patouche\AppData\Local\Temporary Internet Files
O43 - CFD: 12/09/2008 - 10:27:18 - [3771268] ----D- C:\Users\Patouche\AppData\Local\Thunderbird
O43 - CFD: 12/09/2008 - 19:31:02 - [91305987] ----D- C:\Users\Patouche\AppData\Local\VirtualStore
O43 - CFD: 27/04/2010 - 20:34:48 - [11647155] ----D- C:\Users\Patouche\AppData\Local\Xenocode
O43 - CFD: 02/05/2009 - 12:31:00 - [128032] ----D- C:\Users\Patouche\AppData\Local\Yahoo
O43 - CFD: 09/07/2011 - 20:01:38 - [5998080] ----D- C:\Users\Patouche\AppData\Local\{42FFD6CD-1797-4302-8C84-959BECBCDA13}
O43 - CFD: 17/07/2011 - 11:44:38 - [755033914] ----D- C:\Program Files (x86)\Quark
~ Scan Program Folder in 00mn 43s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.5FDEDB92A83621A5B593B0FFF0522D92] - 11/08/2011 - 09:39:36 ---A- . (...) -- C:\PDOXUSRS.NET [13030]
O44 - LFC:[MD5.E8B2C85E0E26DCA5D644B671F4D21634] - 11/08/2011 - 09:25:15 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.CED80FB9F77B6FE28858BEA9347E689A] - 11/08/2011 - 08:50:51 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.76424DA08A5B6AD8E08A5D9BAD8B5291] - 11/08/2011 - 08:31:26 ---A- . (...) -- C:\ComboFix.txt [21263]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 11/08/2011 - 08:28:35 ---A- . (...) -- C:\Windows\system.ini [215]
O44 - LFC:[MD5.10A4CBFA036A7BFCD603FD774B50A69D] - 11/08/2011 - 07:42:27 ---A- . (...) -- C:\lxcz.log [1137088]
O44 - LFC:[MD5.9D05BB1B285D289A3453FA5C8F7340DC] - 11/08/2011 - 04:44:20 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1627304]
O44 - LFC:[MD5.89884003BC4879291A972EFA69E1CD30] - 11/08/2011 - 04:44:20 ---A- . (...) -- C:\Windows\system32\perfc009.dat [119570]
O44 - LFC:[MD5.66F0A617AFB68B1BDC082CB27B17B940] - 11/08/2011 - 04:44:20 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [147302]
O44 - LFC:[MD5.2A3D1614965594AFE2D204981E3AF83B] - 11/08/2011 - 04:44:20 ---A- . (...) -- C:\Windows\system32\perfh009.dat [638364]
O44 - LFC:[MD5.D475EF68B9404CD92E26991789757C2B] - 11/08/2011 - 04:44:20 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [728918]
O44 - LFC:[MD5.C8E7DBBC71D034CB62EA877E28FEB8BC] - 08/08/2011 - 20:47:54 ---A- . (...) -- C:\ZHPRegY2.zhp [1668]
O44 - LFC:[MD5.D4C4C0D78AB3F120855BD292FC309DC5] - 08/08/2011 - 20:47:50 ---A- . (...) -- C:\ZHPRegY1.zhp [1668]
O44 - LFC:[MD5.29485D501812B9CB0BD0DD414EAFE3F0] - 08/08/2011 - 20:47:46 ---A- . (...) -- C:\ZHPRegY0.zhp [1668]
O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 08/08/2011 - 06:34:36 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [60416]
O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 08/08/2011 - 06:34:35 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [518144]
O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 08/08/2011 - 06:34:35 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [406528]
O44 - LFC:[MD5.254FB16160D9FA5385F4B5CF47B9C7DF] - 08/08/2011 - 06:29:57 R---- . (.Swearware - ComboFix NSIS Installer.) -- C:\ComboFix.exe [4165965]
O44 - LFC:[MD5.CAC8625BD5BF14440B52FA9F1184BDF5] - 03/08/2011 - 10:23:21 ---A- . (...) -- C:\Windows\Sandboxie.ini [5528]
O44 - LFC:[MD5.FFC3D6AE9084F75EC0600305F06B1CFB] - 01/08/2011 - 07:35:55 ---A- . (...) -- C:\Windows\system32\FNTCACHE.DAT [3751616]
O44 - LFC:[MD5.F80B2B68002ADB19673B086DA1EEDD4F] - 17/07/2011 - 10:38:04 ---A- . (...) -- C:\Windows\QTFont.for [1409]
O44 - LFC:[MD5.DBA91CD5A3A68302967C03213E52BDE8] - 17/07/2011 - 10:38:04 --HA- . (...) -- C:\Windows\QTFont.qfn [54156]
O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 26/06/2011 - 07:45:56 ---A- . (...) -- C:\Windows\PEV.exe [256000]
O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\Windows\MBR.exe [208896]
O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 20/01/1999 - 04:01:00 ---A- . (...) -- C:\Windows\system32\DBCLIENT.DLL [210032]
O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 12/11/1999 - 04:11:00 ---A- . (...) -- C:\Windows\system32\BDEADMIN.CPL [183808]
O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\grep.exe [80412]
O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\sed.exe [98816]
O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\zip.exe [68096]
~ Scan Files in 00mn 06s
---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s
---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Labtec Inc. - Video Codec.) -- C:\Windows\system32\lvcodec2.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\system32\iccvid.dll
O52 - TDSD: \Drivers32\"wave"="DrvTrNTm.dll" . (.High Criteria inc. - Wave sound driver for the Total Recorder (Professional Edition).) -- C:\Windows\system32\DrvTrNTm.dll
O52 - TDSD: \Drivers32\"mixer"="DrvTrNTm.dll" . (.High Criteria inc. - Wave sound driver for the Total Recorder (Professional Edition).) -- C:\Windows\system32\DrvTrNTm.dll
O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\Windows\system32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\divx.dll
O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\system32\l3codecp.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"DrvTrNTm.dll"="Wave sound driver for the TotalRecorder" . (.High Criteria inc. - Wave sound driver for the Total Recorder (Professional Edition).) -- C:\Windows\system32\DrvTrNTm.dll
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec" . (...) -- C:\Windows\system32\xvidvfw.dll
O52 - TDSD: \drivers.desc\"divx.dll"="DivX Pro 6.8.0" . (...) -- (.not file.)
~ Scan Keys in 00mn 00s
---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Acrobat Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O53 - SMSR:HKLM\...\startupreg\PDF5 Registry Controller [Key] . (.Nuance Communications, Inc. - PDF Converter Registry Controller.) -- C:\Program Files\Nuance\PDF Create 5\RegistryController.exe
O53 - SMSR:HKLM\...\startupreg\PDFHook [Key] . (.Nuance Communications, Inc. - PdfCreateHook Application.) -- C:\Program Files\Nuance\PDF Create 5\pdfcreate5hook.exe
~ Scan SMSR Keys in 00mn 00s
---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
~ Scan Keys in 00mn 00s
---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0
~ Scan Keys in 00mn 00s
---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoBandCustomize"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0
~ Scan Keys in 00mn 00s
---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.651C54AC4EC5C5397C5AFF5D575CA45B] - 30/01/2011 - 08:17:08 ---A- . (.NXP Semiconductors Germany GmbH - 3xHybrid.) -- C:\Windows\system32\drivers\3xHybrid.sys [1302368]
O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 30/01/2011 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]
O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 30/01/2011 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]
O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 30/01/2011 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]
O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 30/01/2011 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]
O58 - SDL:[MD5.496EDA16A127AC9A38BB285BEF17DBB5] - 07/08/2011 - 15:45:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [17592]
O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 30/01/2011 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]
O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 30/01/2011 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 30/01/2011 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 30/01/2011 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 30/01/2011 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 30/01/2011 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 30/01/2011 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 30/01/2011 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.B1C737DBFDF2A2F1583D7A1F487390BB] - 30/06/2011 - 17:07:40 ---A- . (.cFos Software GmbH - cFosSpeed Driver.) -- C:\Windows\system32\drivers\cfosspeed.sys [974040]
O58 - SDL:[MD5.DE82681C08EB3840913ED0338CBEE0BA] - 30/01/2011 - 09:37:53 ---A- . (.COMODO - COMODO Internet Security Eradication Driver.) -- C:\Windows\system32\drivers\cmderd.sys [19088]
O58 - SDL:[MD5.BBE32E04E88B0048EC16F1D6C8936C4B] - 30/01/2011 - 09:37:54 ---A- . (.COMODO - COMODO Internet Security Sandbox Driver.) -- C:\Windows\system32\drivers\cmdGuard.sys [238960]
O58 - SDL:[MD5.497590EA7A94B98EA7A4516EBF0FB8D2] - 30/01/2011 - 09:37:55 ---A- . (.COMODO - COMODO Internet Security Helper Driver.) -- C:\Windows\system32\drivers\cmdhlp.sys [36568]
O58 - SDL:[MD5.59172A0724F2AB769F31D61B0571D75B] - 30/01/2011 - 15:45:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [19128]
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 30/01/2011 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]
O58 - SDL:[MD5.0AB8D9D7C5AC81FC736D7C208F737570] - 21/06/2011 - 09:18:02 ---A- . (.Ralink Technology, Corp. - Ralink 802.11 USB Wireless Adapter Driver.) -- C:\Windows\system32\drivers\Dr71WU.sys [489984]
O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 30/01/2011 - 08:30:54 ---A- . (.Intel Corporation - Intel® PRO/1000 Adapter NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]
O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 30/01/2011 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]
O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 30/01/2011 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]
O58 - SDL:[MD5.4F28652EC514FA1BA473BC1A695A5C98] - 02/08/2011 - 00:40:12 ---A- . (.AnchorFree Inc. - Hotspot Shield Routing Driver.) -- C:\Windows\system32\drivers\HssDrv.sys [37376]
O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 30/01/2011 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 30/01/2011 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]
O58 - SDL:[MD5.1C65E930ABA113F2CE59D32C7D8BC03F] - 30/01/2011 - 09:37:56 ---A- . (.COMODO - COMODO Internet Security Firewall Driver.) -- C:\Windows\system32\drivers\inspect.sys [82400]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 30/01/2011 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 30/01/2011 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]
O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 30/01/2011 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]
O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 30/01/2011 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]
O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 30/01/2011 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]
O58 - SDL:[MD5.03E86718BB5AA2716C7349A854FF6203] - 30/01/2011 - 11:14:38 ---A- . (.Labtec Inc. - Logitech Elch 2 Video Driver.) -- C:\Windows\system32\drivers\LV561AV.SYS [211712]
O58 - SDL:[MD5.C7FCB579956B7FDE002E6E9DE36728D3] - 30/01/2011 - 11:11:16 ---A- . (.Labtec Inc. - USB Statistic Driver.) -- C:\Windows\system32\drivers\LVUSBSta.sys [22016]
O58 - SDL:[MD5.ECA00EED9AB95489007B0EF84C7149DE] - 30/01/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22712]
O58 - SDL:[MD5.B18225739ED9CAA83BA2DF966E9F43E8] - 16/07/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [41272]
O58 - SDL:[MD5.AF61A1C34E2D3F7543F9CCFC323170B8] - 30/01/2011 - 16:19:28 ---A- . (.MagicISO, Inc. - MagicISO SCSI Host Controller.) -- C:\Windows\system32\drivers\mcdbus.sys [116736]
O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 30/01/2011 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 30/01/2011 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]
O58 - SDL:[MD5.9BA2F93E4F01EC58E722B36639E0CE5D] - 30/01/2011 - 10:38:22 ---A- . (.Ralink Technology Corp. - Ralink 802.11n Wireless Adapter Driver.) -- C:\Windows\system32\drivers\netr28u.sys [554496]
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 30/01/2011 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 30/01/2011 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]
O58 - SDL:[MD5.96C27791D5AE5C77E37C61B15112E38D] - 08/05/2011 - 16:59:19 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers\nvhda32v.sys [139368]
O58 - SDL:[MD5.847B1755F7757F825305A1FFE6DAC3E9] - 21/05/2011 - 05:01:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 275.33.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10589800]
O58 - SDL:[MD5.D668632606D1CEBF0B6EC64C1DF7ED6F] - 30/01/2011 - 02:39:50 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers\nvmfdx32.sys [1040544]
O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 30/01/2011 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]
O58 - SDL:[MD5.4876E7C3184BDF50EDE043FEF616B867] - 30/01/2011 - 11:23:20 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor32.sys [115744]
O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 30/01/2011 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 30/01/2011 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]
O58 - SDL:[MD5.56661BEAE591E59067710B6CBCA78184] - 30/01/2011 - 17:13:00 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [2016920]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 30/01/2011 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 30/01/2011 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]
O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 30/01/2011 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]
O58 - SDL:[MD5.5CE1CF27620B144E212D407CDB14D339] - 30/01/2011 - 17:32:07 ---A- . (.Acronis - Acronis Snapshot API.) -- C:\Windows\system32\drivers\snman380.sys [134272]
O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 30/01/2011 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys [717296]
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 30/01/2011 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 30/01/2011 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 30/01/2011 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]
O58 - SDL:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 30/01/2011 - 00:42:40 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\taphss.sys [32768]
O58 - SDL:[MD5.BE7B1A73272648622B39BE3C610E3CA0] - 30/01/2011 - 17:32:18 ---A- . (.Acronis - Acronis Try&Decide Volume Filter Driver.) -- C:\Windows\system32\drivers\tdrpm147.sys [971232]
O58 - SDL:[MD5.6DCB8DDB481CD3C40FA68593723B4D89] - 30/01/2011 - 17:32:11 ---A- . (.Acronis - Acronis True Image File System Filter.) -- C:\Windows\system32\drivers\tifsfilt.sys [44704]
O58 - SDL:[MD5.394FC70B88B7958FA85798BBC76D140A] - 30/01/2011 - 17:32:11 ---A- . (.Acronis - Acronis True Image Backup Archive Explorer.) -- C:\Windows\system32\drivers\timntr.sys [540000]
O58 - SDL:[MD5.7E55CBC1F285258C0475A8337F5BA324] - 30/01/2011 - 00:34:04 ---A- . (.High Criteria inc. - Total Recorder WDM audio driver.) -- C:\Windows\system32\drivers\TotRec7.sys [120472]
O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 30/01/2011 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 30/01/2011 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 30/01/2011 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]
O58 - SDL:[MD5.7AA7EC9A08DC2C39649C413B1A26E298] - 30/01/2011 - 15:45:21 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [20152]
O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 30/01/2011 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]
O58 - SDL:[MD5.59C90BC8317BD3F6E5559A4DEAF35090] - 23/07/2011 - 18:13:20 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Bus Enumerator Driver.) -- C:\Windows\system32\drivers\WmBEnum.sys [19336]
O58 - SDL:[MD5.999A4539AD634A741AFD357E290BD461] - 23/07/2011 - 18:13:28 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Hid Filter Driver.) -- C:\Windows\system32\drivers\WmFilter.sys [29192]
O58 - SDL:[MD5.0B8C64B13776F17537F0705FE62799C6] - 23/07/2011 - 18:13:44 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Hid Device Driver.) -- C:\Windows\system32\drivers\WmVirHid.sys [14728]
O58 - SDL:[MD5.8D388AEB1A12C1192AA9B4EBCEABCBA6] - 23/07/2011 - 18:13:52 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Translation Driver.) -- C:\Windows\system32\drivers\WmXlCore.sys [49160]
O58 - SDL:[MD5.AB2D77BF7222B007717ABB61B15F9AE2] - 30/01/2011 - 10:31:04 ---A- . (.X10 Wireless Technology, Inc. - X10 HID Control Interface.) -- C:\Windows\system32\drivers\x10hid.sys [13976]
O58 - SDL:[MD5.6BBF7A3BAB8FFDCCF82057FA2AAE2B7B] - 30/01/2011 - 15:18:18 ---A- . (.X10 Wireless Technology, Inc. - X10 USB Control Interface.) -- C:\Windows\system32\drivers\x10ufx2.sys [27416]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 07/08/2011 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 07/08/2011 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.539CA34FBC74EC366A0D751028C32A08] - 07/08/2011 - 09:57:54 ---A- . (...) -- C:\Windows\system32\epmntdrv.sys [14216]
O58 - SDL:[MD5.1F2F4AB15CE03ECC257FEB2F6DC5A013] - 07/08/2011 - 09:57:54 ---A- . (...) -- C:\Windows\system32\EuGdiDrv.sys [8456]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 07/08/2011 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 07/08/2011 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 07/08/2011 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 07/08/2011 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 07/08/2011 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 07/08/2011 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 07/08/2011 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 07/08/2011 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 07/08/2011 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 07/08/2011 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 07/08/2011 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 07/08/2011 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 07/08/2011 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]
~ Scan Drivers in 00mn 02s
---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: RSIT - (.random/random.)
~ Scan ADS in 00mn 00s
---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 29/10/2008 - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe - Acronis Scheduler2 Service(AcrSch2Svc) .(.Acronis - Acronis Scheduler 2.) - LEGACY_ACRSCH2SVC
O64 - Services: CurCS - ??/??/???? - C:\Users\Patouche\AppData\Local\Temp\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME
O64 - Services: CurCS - 30/06/2011 - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe - COMODO Internet Security Helper Service(cmdAgent) .(.COMODO - COMODO Internet Security.) - LEGACY_CMDAGENT
O64 - Services: CurCS - 30/06/2011 - C:\Windows\system32\DRIVERS\cmderd.sys - COMODO Internet Security Eradication Driver(cmderd) .(.COMODO - COMODO Internet Security Eradication Driver.) - LEGACY_CMDERD
O64 - Services: CurCS - 30/06/2011 - C:\Windows\system32\DRIVERS\cmdguard.sys - COMODO Internet Security Sandbox Driver(cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD
O64 - Services: CurCS - 30/06/2011 - C:\Windows\system32\DRIVERS\cmdhlp.sys - COMODO Internet Security Helper Driver(cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP
O64 - Services: CurCS - 25/09/2007 - C:\Program Files\MediaCoder\sysInfo.sys - CrystalSysInfo (CrystalSysInfo) .(...) - LEGACY_CRYSTALSYSINFO
O64 - Services: CurCS - 24/03/2011 - C:\Windows\system32\epmntdrv.sys - epmntdrv (epmntdrv) .(...) - LEGACY_EPMNTDRV
O64 - Services: CurCS - 24/03/2011 - C:\Windows\system32\EuGdiDrv.sys - EuGdiDrv (EuGdiDrv) .(...) - LEGACY_EUGDIDRV
O64 - Services: CurCS - 30/06/2011 - C:\Windows\system32\DRIVERS\inspect.sys - COMODO Internet Security Firewall Driver(Inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT
O64 - Services: CurCS - ??/??/???? - C:\Users\Patouche\AppData\Local\Temp\mbr.sys (.not file.) - mbr (mbr) .(...) - LEGACY_MBR
O64 - Services: CurCS - 25/01/2007 - C:\Program Files\Common Files\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(...) - LEGACY_NMSACCESSU
O64 - Services: CurCS - 04/04/2009 - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys - SASDIFSV(SASDIFSV) .(.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - LEGACY_SASDIFSV
O64 - Services: CurCS - 17/11/2008 - C:\Program Files\SUPERAntiSpyware\SASENUM.sys - SASENUM(SASENUM) .(. SUPERAdBlocker.com and SUPERAntiSpyware.co - SASENUM.SYS.) - LEGACY_SASENUM
O64 - Services: CurCS - 21/09/2009 - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys - SASKUTIL(SASKUTIL) .(.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - LEGACY_SASKUTIL
O64 - Services: CurCS - 01/12/2009 - C:\Program Files\Sandboxie\SbieDrv.sys - SbieDrv(SbieDrv) .(.tzuk - Sandboxie Kernel Mode Driver.) - LEGACY_SBIEDRV
O64 - Services: CurCS - ??/??/???? - C:\Windows\system32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD
O64 - Services: CurCS - 13/01/2009 - C:\Windows\system32\DRIVERS\tifsfilt.sys - Acronis True Image FS Filter(tifsfilter) .(.Acronis - Acronis True Image File System Filter.) - LEGACY_TIFSFILTER
~ Scan Services in 00mn 03s
---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s
---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Keys in 00mn 00s
---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} [DefaultScope] - (Google) - Google
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Hotspot Shield Customized Web Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} - (Private Search) - http://search.hotspotshield.com
~ Scan Keys in 00mn 00s
---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.945D09C0925F771F907DEE3D0452ECF4] [sPRF][11/08/2011] (.Realtek - rtdrvmon.) -- C:\Users\Patouche\AppData\Local\Temp\rtdrvmon.exe [40960]
[MD5.503D8B4497FD2EE1F8212FD4A3ECD2B0] [sPRF][22/07/2011] (.Logitech - Pas de description.) -- C:\Users\Patouche\Desktop\driver joystick logitech precision xp&vista.exe [13876432]
[MD5.B3575BA6D7596C2A0366F54F7E698156] [sPRF][20/01/2011] (...) -- C:\Users\Patouche\Desktop\Simon.exe [1242454]
[MD5.DAB14AB84B651318A5F7CD8C7DB991A4] [sPRF][31/07/2011] (.Gibson Research Corp. - Universal Plug & Play Enable/Disable..) -- C:\Users\Patouche\Desktop\UnPnP.exe [22528]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608]
[MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [172032]
~ Scan Files in 00mn 00s
---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{915F3C44-2AC4-40D6-8C72-012FD5AC2319}" | In - None - P17 - TRUE | .(.CyberLink Corp. - MakeDisc.) -- C:\Program Files\HomeCinema\MakeDisc\MakeDisc.exe
O87 - FAEL: "{70DF0481-5AE2-4957-B072-D0CA13455CC6}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\HomeCinema\PowerDirector\PDR.exe
O87 - FAEL: "{558BFA19-D1F3-4648-9F16-7A7EBCCEBD2D}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD.) -- C:\Program Files\HomeCinema\PowerDVD\PowerDVD.exe
O87 - FAEL: "{35AD0F8D-5639-4C9C-9DC1-AE87ADA5F1BF}" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "{3F95FEDC-CD48-450A-A71E-E68D9220F758}" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "TCP Query User{52E63CA1-8A04-4847-B728-F486703B3FE6}C:\vietcong\vietcong.exe" | In - Public - P6 - TRUE | .(...) -- C:\vietcong\vietcong.exe
O87 - FAEL: "UDP Query User{C0A20C5D-1F1D-4E0C-BBA3-1A32F5702E65}C:\vietcong\vietcong.exe" | In - Public - P17 - TRUE | .(...) -- C:\vietcong\vietcong.exe
O87 - FAEL: "TCP Query User{0556B251-244E-428F-B74B-760AA79FA315}C:\program files\mozilla firefox\firefox.exe" | In - Private - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "UDP Query User{5599CD0F-B146-4C7B-87B7-7A02C0F18511}C:\program files\mozilla firefox\firefox.exe" | In - Private - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "{42256B95-8EEE-445D-B0A8-7FC2250B589E}" | In - Private - P6 - TRUE | .(.Gas Powered Games - Dungeon Siege 2 Game Executable.) -- C:\Program Files\Microsoft Games\Dungeon Siege 2\DungeonSiege2.exe
O87 - FAEL: "{4485D963-83DD-4606-83D4-3F12F1777BB0}" | In - Private - P17 - TRUE | .(.Gas Powered Games - Dungeon Siege 2 Game Executable.) -- C:\Program Files\Microsoft Games\Dungeon Siege 2\DungeonSiege2.exe
O87 - FAEL: "TCP Query User{36426AAB-EEFD-46F7-B51B-DA6F11405758}C:\program files\utorrent\utorrent.exe" | In - Public - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "UDP Query User{479F9FE1-8FB2-468B-8A57-AAFFA75EB5B7}C:\program files\utorrent\utorrent.exe" | In - Public - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "{3239C7FC-8A00-48A7-BC0F-117D20017188}" | In - Private - P6 - TRUE | .(.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O87 - FAEL: "{4B9FECCA-A312-47EE-807A-854F47C313AC}" | In - Private - P17 - TRUE | .(.Yahoo! Inc. - Yahoo! Messenger.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O87 - FAEL: "TCP Query User{A8181ECD-242D-4D10-9A3E-71CE909375C2}C:\program files\free download manager\fdmwi.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files\free download manager\fdmwi.exe
O87 - FAEL: "UDP Query User{C234F548-F519-4275-ADD4-B409D7F1495E}C:\program files\free download manager\fdmwi.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files\free download manager\fdmwi.exe
O87 - FAEL: "TCP Query User{CE08CD50-123B-453B-9115-C85D581FC54B}C:\users\patouche\logiciels vrac\charon\charon.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\patouche\logiciels vrac\charon\charon.exe
O87 - FAEL: "UDP Query User{337526CB-9E61-494C-88FD-CA26EBA36302}C:\users\patouche\logiciels vrac\charon\charon.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\patouche\logiciels vrac\charon\charon.exe
O87 - FAEL: "TCP Query User{D79D032B-DFFF-4A43-9187-4FC13552353E}C:\program files\videolan\vlc\vlc.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files\videolan\vlc\vlc.exe
O87 - FAEL: "UDP Query User{100C1AA6-E91E-4AC2-BEA3-6F8DA3B9F6CE}C:\program files\videolan\vlc\vlc.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files\videolan\vlc\vlc.exe
O87 - FAEL: "TCP Query User{B17CF5A0-7D21-42B8-8CFF-7DF6BB155C1C}C:\program files\free download manager\fdm.exe" | In - Public - P6 - TRUE | .(.FreeDownloadManager.ORG - Free Download Manager.) -- C:\program files\free download manager\fdm.exe
O87 - FAEL: "UDP Query User{BE529950-976E-4610-A113-0E0A32BEA0B5}C:\program files\free download manager\fdm.exe" | In - Public - P17 - TRUE | .(.FreeDownloadManager.ORG - Free Download Manager.) -- C:\program files\free download manager\fdm.exe
O87 - FAEL: "TCP Query User{6E8227A8-D9F4-4E13-9640-F0A442F51C1E}C:\program files\paltalk messenger\paltalk.exe" | In - Public - P6 - TRUE | .(.AVM Software Inc. - PaltalkScene.) -- C:\program files\paltalk messenger\paltalk.exe
O87 - FAEL: "UDP Query User{8F2C6B48-8A66-4DC5-A933-BE4781664F33}C:\program files\paltalk messenger\paltalk.exe" | In - Public - P17 - TRUE | .(.AVM Software Inc. - PaltalkScene.) -- C:\program files\paltalk messenger\paltalk.exe
O87 - FAEL: "TCP Query User{7CA6C358-2566-4A92-BD41-3B7150CC3E46}C:\program files\yahoo!\messenger\yahoomessenger.exe" | In - Public - P6 - TRUE | .(.Yahoo! Inc. - Yahoo! Messenger.) -- C:\program files\yahoo!\messenger\yahoomessenger.exe
O87 - FAEL: "UDP Query User{3FBD3E98-70EA-4362-9A2A-5F10D85539A1}C:\program files\yahoo!\messenger\yahoomessenger.exe" | In - Public - P17 - TRUE | .(.Yahoo! Inc. - Yahoo! Messenger.) -- C:\program files\yahoo!\messenger\yahoomessenger.exe
O87 - FAEL: "TCP Query User{7021F29B-229E-4D80-8509-68D09FD80D37}C:\program files\mozilla firefox\firefox.exe" | In - Public - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "UDP Query User{FF938056-CA88-43D4-8904-031875C9ADDC}C:\program files\mozilla firefox\firefox.exe" | In - Public - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe
O87 - FAEL: "TCP Query User{83C26AF0-F13F-4D53-A6A9-25CF39C2BA14}C:\users\patouche\documents\transfert maxtor 40\program files\free download manager\fdmwi.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\patouche\documents\transfert maxtor 40\program
O87 - FAEL: "UDP Query User{780910C5-AF30-4EC0-A8FA-6F95C49A2F53}C:\users\patouche\documents\transfert maxtor 40\program files\free download manager\fdmwi.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\patouche\documents\transfert maxtor 40\program
O87 - FAEL: "TCP Query User{CEF5FFC6-C9C4-4F4D-A2E4-4F08A984ED97}C:\users\patouche\documents\transfert maxtor 40\program files\skype\phone\skype.exe" | In - Public - P6 - TRUE | .(.Skype Technologies S.A..) -- C:\users\patouche\documents\transfert maxtor
O87 - FAEL: "UDP Query User{76E9E3D0-C271-454D-8B19-1D76AA4000FE}C:\users\patouche\documents\transfert maxtor 40\program files\skype\phone\skype.exe" | In - Public - P17 - TRUE | .(.Skype Technologies S.A..) -- C:\users\patouche\documents\transfert maxto
O87 - FAEL: "{F70FB5D8-ABE6-404B-819B-5074EA3A7E9F}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Users\Patouche\Documents\Transfert Maxtor 40\Program Files\Skype\Phone\Skype.exe
O87 - FAEL: "{85F2B4E0-BE34-464E-BD64-9DFAF7992C06}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxczcoms.exe
O87 - FAEL: "{5EE0A869-F39A-4A51-BC30-B52EC5E90D2D}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - Printer Communication System.) -- C:\Windows\System32\lxczcoms.exe
O87 - FAEL: "{0CD477EB-35FC-4CBC-AE40-B8B48BFB7926}" | In - Public - P6 - TRUE | .(.Lexmark International Inc. - Print Status Window Interface.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxczpswx.exe
O87 - FAEL: "{50039E21-6C63-470B-A315-06DC30B35FF5}" | In - Public - P17 - TRUE | .(.Lexmark International Inc. - Print Status Window Interface.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxczpswx.exe
O87 - FAEL: "TCP Query User{EA5B2A1A-BD1F-44CE-9E9F-19B45DFF85B5}C:\program files\encyclopaedia universalis 2011\encyclopaedia universalis 2011\universalis2011.exe" | In - Public - P6 - TRUE | .(...) -- C:\program files\encyclopaedia universalis 2011\enc
O87 - FAEL: "UDP Query User{CE846682-1F86-43DD-991E-ABE0C93AD195}C:\program files\encyclopaedia universalis 2011\encyclopaedia universalis 2011\universalis2011.exe" | In - Public - P17 - TRUE | .(...) -- C:\program files\encyclopaedia universalis 2011\en
O87 - FAEL: "{DD92BD18-D3E7-4E75-AB30-9D916C105957}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O87 - FAEL: "{4CDFEDB3-AA1F-40D4-AC2D-811E9236872F}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O87 - FAEL: "TCP Query User{503EEEC5-0B8A-441B-9BA5-DE0125ED9033}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe" | In - Public - P6 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
O87 - FAEL: "UDP Query User{88592D76-35CC-4E44-83EE-81E26B50BF31}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe" | In - Public - P17 - TRUE | .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
O87 - FAEL: "{DE960D2D-6357-4D86-8583-A871A6FF8262}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\CyberLink\PowerDirector\PDR9.exe
~ Scan Firewall in 00mn 01s
---\\ Scan Additionnel (O88)
Database Version : 8614 - (09/08/2011)
Clés trouvées (Keys found) : 26
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 8
Fichiers trouvés (Files found) : 0
[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Toolbar.AskSBar
[HKLM\Software\Classes\Toolbar.CT1561552] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{4c07ea4f-5f52-4222-b170-4cd9ed33baea}] =>Adware.BHO
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b0de3308-5d5a-470d-81b9-634fc078393b}] =>Adware.BHO
[HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}] =>Adware.BHO
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c95a4e8e-816d-4655-8c79-d736da1adb6d}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c95a4e8e-816d-4655-8c79-d736da1adb6d}] =>Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{c95a4e8e-816d-4655-8c79-d736da1adb6d}] =>Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c95a4e8e-816d-4655-8c79-d736da1adb6d}] =>Toolbar.Conduit
[HKLM\Software\Classes\Interface\{f131923c-381d-4e4c-a472-4a17118fd742}] =>Adware.BHO
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar
[HKLM\SYSTEM\CurrentControlSet\Services\HssSrv] =>Toolbar.Agent
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit
[HKLM\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\HotspotShield] =>Toolbar.Conduit
[HKLM\Software\HotspotShield] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
C:\Program Files\Babylon =>Toolbar.Babylon
C:\Program Files\Conduit =>Toolbar.Conduit
C:\Program Files\Hotspot Shield =>Toolbar.Conduit
C:\ProgramData\hssff =>Toolbar.Conduit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield =>Toolbar.Conduit
C:\Users\Patouche\AppData\LocalLow\AskToolbar =>Toolbar.AskTBar
C:\Users\Patouche\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\Extensions\engine@conduit.com =>Toolbar.Conduit
~ Scan Additionnel in 00mn 10s
---\\ Recherche détournement de DNS routeur (O89)
Serveur : UnKnown
Address: 10.71.0.1
Nom : www.l.google.com
Addresses: 209.85.148.103
209.85.148.104
209.85.148.105
209.85.148.106
209.85.148.147
209.85.148.99
Aliases: www.google.fr
www.google.com
~ Scan DNS in 00mn 02s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Disabled 07/08/2011 554264 | (AcrSch2Svc) . (.Acronis.) - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
SR - | Auto 07/08/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 07/08/2011 390872 | (cFosSpeedS) . (.cFos Software GmbH.) - C:\Program Files\cFosSpeed\spd.exe
SR - | Auto 07/08/2011 1793712 | C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
SS - | Auto 07/08/2011 183280 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 07/08/2011 298824 | (hshld) . (...) - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
SR - | Auto 07/08/2011 363336 | (HssSrv) . (.AnchorFree Inc..) - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
SS - | Demand 07/08/2011 63976 | (HssTrayService) . (...) - C:\Program Files\Hotspot Shield\bin\HssTrayService.exe
SR - | Auto 07/08/2011 329544 | (HssWd) . (...) - C:\Program Files\Hotspot Shield\bin\hsswd.exe
SS - | Demand 07/08/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SR - | Auto 07/08/2011 537520 | (lxcz_device) . (...) - C:\Windows\system32\lxczcoms.exe
SS - | Demand 07/08/2011 65536 | (NMSAccessU) . (...) - C:\Program Files\Common Files\NMSAccessU.exe
SR - | Auto 07/08/2011 615528 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 07/08/2011 2214504 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
SR - | Auto 07/08/2011 66560 | (SbieSvc) . (.tzuk.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 07/08/2011 275968 | (StarWindServiceAE) . (.Rocket Division Software.) - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
SR - | Auto 07/08/2011 378472 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SS - | Demand 07/08/2011 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 07/08/2011 362240 | C:\Windows\System32\TuneUpDefragService.exe (TuneUp.Defrag) . (.TuneUp Software.) - C:\Windows\System32\TuneUpDefragService.exe
SR - | Auto 07/08/2011 603904 | C:\Windows\System32\TUProgSt.exe (TuneUp.ProgramStatisticsSvc) . (.TuneUp Software.) - C:\Windows\System32\TUProgSt.exe
SR - | Auto 07/08/2011 21504 | C:\Windows\System32\uxtuneup.dll (UxTuneUp) . (.TuneUp Software.) - C:\Windows\System32\svchost.exe
SS - | Demand 07/08/2011 20549 | (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
SS - | Demand 07/08/2011 8133120 | (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe
SR - | Auto 07/08/2011 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe
SR - | Auto 07/08/2011 20480 | (x10nets) . (.X10.) - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
~ Scan Services in 00mn 03s
---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover
Run by Patouche at 11/08/2011 10:56:24
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x85C291F8]<<
1 nt!IofCallDriver[0x82C5411B] -> \Device\Harddisk0\DR0[0x85DBD460]
3 CLASSPNP[0x8B3948B3] -> nt!IofCallDriver[0x82C5411B] -> [0x85CFCCD8]
5 acpi[0x8AF7C6BC] -> nt!IofCallDriver[0x82C5411B] -> \Device\Ide\IdeDeviceP2T0L0-3[0x85C5C3A0]
\Driver\atapi[0x85C93030] -> IRP_MJ_CREATE -> 0x85C291F8
kernel: MBR read successfully
detected disk devices:
detected hooks:
\Driver\atapi -> 0x85c291f8
user & kernel MBR OK
Warning: possible MBR rootkit infection !
~ Scan MBR in 00mn 07s
---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Patouche at 11/08/2011 10:56:26
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ Scan MBR in 00mn 09s
End of the scan (1610 lines in 02mn 03s)(0)
ComboFix 11-08-07.03 - Patouche 11/08/2011 9:19.9.2 - x86 MINIMAL
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3071.2546 [GMT 2:00]
Lancé depuis: C:\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-07-11 au 2011-08-11 ))))))))))))))))))))))))))))))))))))
.
.
2011-08-11 07:28 . 2011-08-11 07:28 -------- d-----w- c:\users\Patouche\AppData\Local\temp
2011-08-11 07:28 . 2011-08-11 07:28 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2011-08-11 07:28 . 2011-08-11 07:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-11 05:30 . 2011-08-11 05:46 -------- d-----w- c:\program files\RegTweaker
2011-08-10 08:54 . 2011-08-11 06:51 -------- d-----w- C:\ZHP
2011-08-10 08:26 . 2011-08-11 05:57 -------- d-----w- c:\program files\ZHPDiag
2011-08-08 17:50 . 2011-08-11 05:57 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-08-08 16:30 . 2011-08-08 16:30 -------- d-----w- c:\program files\Common Files\Borland Shared
2011-08-08 16:30 . 1999-11-12 03:11 183808 ----a-w- c:\windows\system32\BDEADMIN.CPL
2011-08-08 16:30 . 1999-01-20 03:01 210032 ----a-w- c:\windows\system32\DBCLIENT.DLL
2011-08-08 16:30 . 2011-08-11 04:47 -------- d-----w- c:\program files\ZebHelpProcess
2011-08-08 04:29 . 2011-08-08 04:30 -------- d-----w- c:\program files\trend micro
2011-08-08 04:29 . 2011-08-08 04:30 -------- d-----w- C:\rsit
2011-08-04 19:28 . 2011-08-04 19:28 -------- d-----w- c:\users\Patouche\.swt
2011-08-02 19:43 . 2011-08-02 19:43 -------- d-----w- c:\programdata\hssff
2011-08-02 19:34 . 2011-08-02 19:34 -------- d-----w- c:\program files\Conduit
2011-08-02 19:34 . 2011-08-02 19:34 -------- d-----w- c:\program files\Hotspot_Shield
2011-08-02 19:33 . 2011-08-02 19:34 -------- d-----w- C:\Hotspot Shield
2011-08-02 19:32 . 2011-06-22 22:05 755016 ----a-w- c:\program files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\components\afurladvisor50.dll
2011-08-02 19:32 . 2011-08-02 19:34 -------- d-----w- c:\program files\Hotspot Shield
2011-08-02 19:32 . 2011-06-22 22:05 756552 ----a-w- c:\program files\Mozilla Firefox\extensions\afurladvisor@anchorfree.com\components\afurladvisor.dll
2011-07-31 13:24 . 2011-08-03 09:27 -------- d-----w- C:\My Works
2011-07-31 12:40 . 2011-08-06 15:35 -------- d-----w- c:\users\Patouche\binload
2011-07-30 21:31 . 2011-07-31 22:06 -------- d-----w- c:\programdata\SmartSound Software Inc
2011-07-30 21:31 . 2011-07-30 21:31 -------- d-----w- c:\programdata\eSellerate
2011-07-30 21:31 . 2011-07-30 21:31 -------- d-----w- c:\program files\SmartSound Software
2011-07-27 19:30 . 2011-08-04 05:31 -------- d-----w- c:\users\Patouche\AppData\Local\QuickPar
2011-07-27 19:28 . 2011-07-27 19:28 -------- d-----w- c:\program files\QuickPar
2011-07-27 06:10 . 2011-07-29 17:36 -------- d-----w- c:\users\Patouche\AppData\Roaming\vlc
2011-07-27 03:54 . 2011-08-04 19:34 -------- d-----w- c:\program files\Binload
2011-07-23 21:16 . 2011-07-28 04:07 -------- d-----w- c:\windows\Replay Video Capture
2011-07-23 21:16 . 2011-07-23 21:27 -------- d-----w- c:\program files\Replay Video Capture
2011-07-23 06:36 . 2011-07-23 07:10 -------- d-----w- c:\program files\Common Files\Logitech
2011-07-22 08:12 . 2011-07-22 08:12 -------- d-----w- c:\users\Patouche\AppData\Roaming\Hensense.com
2011-07-21 04:11 . 2011-07-21 04:11 -------- d-----w- c:\users\Public\Roaming
2011-07-20 13:52 . 2011-07-29 08:26 -------- d-----w- C:\HotSpot SFR Reconnect auto
2011-07-17 14:02 . 2011-07-17 14:02 -------- d-----w- c:\program files\Common Files\Apple
2011-07-17 14:02 . 2011-07-17 14:02 -------- d-----w- c:\users\Patouche\AppData\Local\Apple
2011-07-17 14:02 . 2011-07-17 14:02 -------- d-----w- c:\programdata\Apple
2011-07-17 14:02 . 2011-07-17 14:02 -------- d-----w- c:\program files\Apple Software Update
2011-07-17 13:40 . 2011-07-17 13:40 -------- d-----w- c:\windows\system32\Quark ShapeMaker Presets
2011-07-17 13:30 . 2011-07-17 13:30 -------- d-----w- c:\users\Patouche\AppData\Local\Apple Computer
2011-07-17 13:24 . 2011-07-17 13:24 -------- d-----w- c:\users\Patouche\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-07-17 13:23 . 2011-07-17 13:23 -------- d-----w- c:\users\Patouche\AppData\Roaming\com.adobe.DC3Module.AdobeADC
2011-07-17 13:01 . 2011-07-17 13:01 -------- d-----w- c:\users\Patouche\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2011-07-17 13:01 . 2011-07-17 13:01 -------- d-----w- c:\users\Patouche\AppData\Roaming\Adobe Mini Bridge CS5.1
2011-07-17 10:59 . 2011-07-18 12:16 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2011-07-17 09:54 . 2011-07-17 09:54 -------- d-----w- c:\users\Patouche\AppData\Roaming\Apple Computer
2011-07-17 09:48 . 2011-07-17 09:48 -------- d-----w- c:\users\Patouche\AppData\Roaming\Quark
2011-07-17 09:45 . 2011-07-17 09:45 -------- d-----w- c:\windows\system32\QuickTime
2011-07-17 09:44 . 2011-07-17 09:44 -------- d-----w- c:\programdata\Quark
2011-07-17 09:44 . 2011-07-17 09:44 -------- d-----w- C:\Program Files (x86)
2011-07-17 09:37 . 2011-07-17 14:05 -------- d-----w- c:\program files\QuickTime
2011-07-17 09:36 . 2011-07-17 14:05 -------- d-----w- c:\programdata\Apple Computer
2011-07-17 06:35 . 2011-07-17 06:35 3584 ----a-r- c:\users\Patouche\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2011-07-17 06:35 . 2011-07-17 06:35 -------- d-----w- c:\program files\Windows Installer Clean Up
2011-07-17 06:34 . 2011-07-17 06:38 -------- d-----w- c:\program files\MSECACHE
2011-07-13 15:20 . 2011-06-02 13:34 2043392 ----a-w- c:\windows\system32\win32k.sys
2011-07-13 15:20 . 2011-04-20 15:55 375808 ----a-w- c:\windows\system32\winsrv.dll
2011-07-13 15:20 . 2011-04-20 15:50 49152 ----a-w- c:\windows\system32\csrsrv.dll
2011-07-12 20:33 . 2011-07-12 20:33 -------- d-----w- c:\program files\HFSExplorer
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-09 18:02 . 2011-07-09 18:02 78096 ----a-r- c:\users\Patouche\AppData\Roaming\Microsoft\Installer\{FE74C184-4939-4FFA-B8C9-8E0CD6A6AA57}\ARPPRODUCTICON.exe
2011-07-06 17:52 . 2009-07-27 06:26 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 17:52 . 2009-07-27 06:26 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-30 08:37 . 2010-03-03 15:53 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-06-30 08:37 . 2010-03-03 15:53 36568 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-06-30 08:37 . 2010-03-23 16:39 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-06-30 08:37 . 2010-03-03 15:53 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-06-30 08:37 . 2010-03-03 15:54 285256 ----a-w- c:\windows\system32\guard32.dll
2011-06-22 14:30 . 2011-05-16 18:46 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-06 19:55 . 2011-06-06 19:55 47512 ----a-w- c:\windows\system32\AdobePDF.dll
2011-06-06 19:55 . 2011-06-06 19:55 22936 ----a-w- c:\windows\system32\AdobePDFUI.dll
2011-05-24 23:40 . 2011-05-24 23:40 37376 ----a-w- c:\windows\system32\drivers\HssDrv.sys
2011-05-24 17:14 . 2009-10-03 14:15 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-05-21 04:01 . 2011-05-21 04:01 899688 ----a-w- c:\windows\system32\nvdispco3220150.dll
2011-05-21 04:01 . 2011-05-21 04:01 865896 ----a-w- c:\windows\system32\nvgenco322090.dll
2011-05-21 04:01 . 2011-05-21 04:01 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-05-21 04:01 . 2011-05-21 04:01 5301352 ----a-w- c:\windows\system32\nvcuda.dll
2011-05-21 04:01 . 2011-05-21 04:01 2804328 ----a-w- c:\windows\system32\nvcuvid.dll
2011-05-21 04:01 . 2011-05-21 04:01 2082408 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-05-21 04:01 . 2011-05-21 04:01 16456296 ----a-w- c:\windows\system32\nvoglv32.dll
2011-05-21 04:01 . 2011-05-21 04:01 13011560 ----a-w- c:\windows\system32\nvcompiler.dll
2011-05-21 04:01 . 2011-05-21 04:01 12392 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-05-21 04:01 . 2011-05-21 04:01 10589800 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-05-21 04:01 . 2011-05-08 07:54 6555240 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-05-21 04:01 . 2011-05-08 07:54 2335848 ----a-w- c:\windows\system32\nvapi.dll
2011-05-21 04:01 . 2011-05-08 07:54 11992680 ----a-w- c:\windows\system32\nvd3dum.dll
2011-05-21 04:01 . 2011-04-07 20:43 543336 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-05-21 04:01 . 2011-04-07 20:43 615528 ----a-w- c:\windows\system32\nvvsvc.exe
2011-05-21 04:01 . 2011-04-07 20:43 2560616 ----a-w- c:\windows\system32\nvsvcr.dll
2011-05-21 04:01 . 2011-04-07 20:43 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-05-21 04:01 . 2011-04-07 20:43 3693672 ----a-w- c:\windows\system32\nvcpl.dll
2011-05-21 04:01 . 2011-04-07 20:43 2557544 ----a-w- c:\windows\system32\nvsvc.dll
2011-05-21 04:01 . 2010-10-08 00:03 66664 ----a-w- c:\windows\system32\nvshext.dll
2007-01-25 01:52 . 2007-01-25 01:52 65536 ----a-w- c:\program files\Common Files\NMSAccessU.exe
2011-06-23 08:26 . 2011-04-15 10:35 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{c95a4e8e-816d-4655-8c79-d736da1adb6d}"= "c:\program files\Hotspot_Shield\tbHots.dll" [2009-12-31 2349080]
.
[HKEY_CLASSES_ROOT\clsid\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
2009-12-31 09:53 2349080 ----a-w- c:\program files\Hotspot_Shield\tbHots.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{c95a4e8e-816d-4655-8c79-d736da1adb6d}"= "c:\program files\Hotspot_Shield\tbHots.dll" [2009-12-31 2349080]
.
[HKEY_CLASSES_ROOT\clsid\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2009-12-01 389120]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-11-14 4706304]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-06-30 2554696]
"lxczbmgr.exe"="c:\program files\Lexmark 1200 Series\lxczbmgr.exe" [2007-04-19 74672]
"cFosSpeed"="c:\program files\cFosSpeed\cFosSpeed.exe" [2009-03-17 881368]
.
c:\users\Patouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2008-9-28 575488]
nwr_2-1-5.jar - Raccourci.lnk - c:\users\Patouche\Logiciels vrac\nwr WiFi HotSpot reconnect neuf sfr\nwr_2-1-5.jar [2011-7-29 110059]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-21 06:20 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"wave"=DrvTrNTm.dll
"mixer"=DrvTrNTm.dll
"aux5"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PalTalk.lnk]
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2011-06-06 19:55 2903448 ----a-w- c:\program files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
2011-06-06 19:55 36760 ----a-w- c:\program files\Adobe\Acrobat 10.0\Acrobat\acrobat_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2011-06-06 10:55 937920 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-05-27 12:52 40368 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF5 Registry Controller]
2008-12-13 01:27 58656 ----a-w- c:\program files\Nuance\PDF Create 5\RegistryController.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFHook]
2009-04-10 07:52 1277952 ----a-w- c:\program files\Nuance\PDF Create 5\PdfCreate5Hook.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ehTray.exe"=c:\windows\ehome\ehTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"AdobeCS5.5ServiceManager"="c:\program files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
"Nuance OmniPage 17-reminder"="c:\program files\Nuance\OmniPage17\Ereg\Ereg.exe" -r "c:\programdata\ScanSoft\OmniPage 17\Ereg\Ereg.ini"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
"SwitchBoard"=c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-06-30 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-06-30 36568]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-04-04 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2009-09-21 74480]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 hshld;Hotspot Shield Service;c:\program files\Hotspot Shield\bin\openvpnas.exe [2011-07-01 298824]
R2 HssWd;Hotspot Shield Monitoring Service;c:\program files\Hotspot Shield\bin\hsswd.exe [2011-05-25 329544]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
R3 3xHybrid;Philips SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybrid.sys [2008-01-08 1302368]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-03-24 14216]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-03-24 8456]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2007-09-21 554496]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-03-03 139368]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-11-17 7408]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TotRec7;Total Recorder WDM audio driver;c:\windows\system32\drivers\TotRec7.sys [2008-04-16 120472]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-07-05 717296]
S0 tdrpman147;Acronis Try&Decide and Restore Points filter (build 147);c:\windows\system32\DRIVERS\tdrpm147.sys [2009-01-13 971232]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2011-06-30 19088]
S3 X10Hid;X10 Hid Device;c:\windows\system32\Drivers\x10hid.sys [2006-11-17 13976]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'
.
2011-08-11 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-28 10:45]
.
.
------- Examen supplémentaire -------
.
mSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyServer = 204.73.37.113:80
IE: Ajouter au fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Ajouter le contenu du lien à un fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Créer des fichiers PDF à partir des liens sélectionnés - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Créer fichier PDF - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Créer un fichier PDF depuis le contenu du lien - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
TCP: DhcpNameServer = 109.0.66.10 109.0.66.20
FF - ProfilePath - c:\users\Patouche\AppData\Roaming\Mozilla\Firefox\Profiles\pycqkpj7.default\
FF - user.js: network.http.max-connections-per-server - 6
FF - user.js: network.http.max-persistent-connections-per-server - 3
FF - user.js: nglayout.initialpaint.delay - 750
FF - user.js: content.notify.interval - 750000
FF - user.js: content.max.tokenizing.time - 2250000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2011-08-11 09:28
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
Heure de fin: 2011-08-11 09:31:25
ComboFix-quarantined-files.txt 2011-08-11 07:31
ComboFix2.txt 2011-08-10 18:11
ComboFix3.txt 2011-08-10 10:04
ComboFix4.txt 2011-08-10 09:42
ComboFix5.txt 2011-08-11 07:18
.
Avant-CF: 151 597 215 744 octets libres
Après-CF: 151 479 582 720 octets libres
.
- - End Of File - - 3F8903AE111012FDCD314023E6A4AFB4
