Aller au contenu

prosper54

Membres
  • Compteur de contenus

    2
  • Inscription

  • Dernière visite

Autres informations

  • Mes langues
    Français

prosper54's Achievements

Junior Member

Junior Member (3/12)

0

Réputation sur la communauté

  1. Bonjour, je sais que ma demande n'est pas vielle, mais pouvez vous donnez votre avis sur mon log : http://forum.zebulon.fr/infecte-par-malwares-t188273.html&p=1575007&fromsearch=1?do=findComment&comment=1575007 Ma boite mail à un comportement bizarre en ce moment et je dois souvent redémarer mon pc pour que mes mails partent. Sincèrement Raphaël.
  2. Bonjour à tous, Je subis des ralentissements lors de l'envoi de mail via Outlook. Et ce pour des messages de quelques kilos Octets, pensez vous que je sois infecté par un malwares ? Merci pour votre aide ! Pouvez-vous me donner votre avis sur le log suivant : Rapport de ZHPDiag v1.28.1354 par Nicolas Coolman, Update du 25/09/2011 Run by NVIDIA at 28/09/2011 00:50:55 Web site : ZHPDiag Outil de diagnostic ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 (Defaut) MFIE: Mozilla Firefox 5.0.1 v5.0.1 GCIE: Google Chrome v14.0.835.186 ---\\ Windows Product Information Windows XP Professional Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\\ System Information ~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3583 MB (78% free) System Restore: Activé (Enable) System drive C: has 25 GB (42%) free of 59 GB ---\\ Logged in mode ~ Computer Name: MAISON-9324ABDA ~ User Name: NVIDIA ~ All Users Names: SUPPORT_388945a0, NVIDIA, HelpAssistant, ASPNET, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Documents and Settings\NVIDIA\Application Data\ ~ %Desktop% : C:\Documents and Settings\NVIDIA\Bureau\ ~ %Favorites% : C:\Documents and Settings\NVIDIA\Favoris\ ~ %LocalAppData% : C:\Documents and Settings\NVIDIA\Local Settings\Application Data\ ~ %StartMenu% : C:\Documents and Settings\NVIDIA\Menu Démarrer\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 25 Go of 59 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 22 Go of 25 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 67 Go of 67 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 146 Go of 148 Go) G:\ CD-ROM drive (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) K:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ Floppy drive, Flash card reader, USB Key (Not Inserted) N:\ Floppy drive, Flash card reader, USB Key (Not Inserted) O:\ Floppy drive, Flash card reader, USB Key (Not Inserted) P:\ Floppy drive, Flash card reader, USB Key (Not Inserted) Q:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.28/09/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824] [MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.28/09/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792] [MD5.3008D2F793F23FF0DDBC5A1FB9F8374F] - (.Microsoft Corporation - Internet Extensions for Win32.) (.28/09/2011 - 19:31:31.) -- C:\WINDOWS\system32\wininet.dll [916480] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.28/09/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.28/09/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.28/09/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 3/8 ~ Mes musiques (My Musics) : 1/3 ~ Mes Videos (My Videos) : 1/4 ~ Mes Favoris (My Favorites) : 1/225 ~ Mes Documents (My Documents) : 53/818 ~ Mon Bureau (My Desktop) : 7/453 ~ Menu demarrer (Programs) : 5/25 ~ Scan Hidden Files in 00mn 02s ---\\ Processus lancés [MD5.471087B5E1E01CC82604E81EA14781D8] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [PID.] [MD5.43F37E8F60F3677E84C6AFC70C784AFD] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1793712] [PID.] [MD5.12C13F85BE9D3A58FDB463A6F7DE4E61] - (.C-Dilla Ltd - C-Dilla RTS Service.) -- C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [46080] [PID.] [MD5.B6E01969246FCB67470E87E6957EE147] - (.GEAR Software - gearsec.) -- C:\WINDOWS\SYSTEM32\GEARSEC.EXE [53248] [PID.] [MD5.2276377973CB774F05044B2E48E49087] - (.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1336712] [PID.] [MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe [335872] [PID.] [MD5.C7F5C284B6F46FCAF6910EA4E644700B] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.] [MD5.359E5A91D26D0439933BEF1C29CEDEF7] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [96334] [PID.] [MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848] [PID.] [MD5.80233DB66B8B836365B9D0039EC4398F] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [18782720] [PID.3096] [MD5.05E10C2C3736E52FE33D16D2F9C73C04] - (.Microsoft Corporation - Type32.exe.) -- C:\Program Files\Microsoft IntelliType Pro\type32.exe [172032] [PID.3128] [MD5.D6C9858536249E31A5E9A1A4F3A08113] - (.Microsoft Corporation - Point32.exe.) -- C:\Program Files\Microsoft IntelliPoint\point32.exe [204800] [PID.3136] [MD5.895E17BFF96D3114FD19CEC65A0E749E] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2554696] [PID.] [MD5.6B87742F27B087AF7FD4ADC2DB685DE0] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3160] [MD5.4A0BBDF88636F2EF08420BDCD343D286] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [623992] [PID.3200] [MD5.40AD2272C250C578F1F518FA10748F98] - (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe [225280] [PID.3220] [MD5.B529A7AE03571EF8DA4795E8F615D036] - (.LogMeIn Inc. - Hamachi2 Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [1951112] [PID.3424] [MD5.227846995AFEEFA70D328BF5334A86A5] - (.Macrovision Europe Ltd. - Activation Licensing Service.) -- C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848] [PID.] [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.] [MD5.A07E8935CC8DCE6DB787DC99129CA17C] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe [1305408] [PID.1928] [MD5.B48EB6CE11823C5F0AC597551FAB4215] - (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe [861696] [PID.280] [MD5.B2F2C6B80624CF017504B125E843B3D3] - (.Voxmobili - Voxsync Desktop Companion.) -- C:\Program Files\PC Sync\Voxsync.exe [712704] [PID.2348] [MD5.1F706E1F23E4E4A7FBE4F243D0A6D5C4] - (...) -- C:\Program Files\Orange\Assistance Livebox\AssistanceLivebox.exe [147880] [PID.2356] [MD5.C95EC84F61F1ACD19248FB686B010FDD] - (...) -- C:\Program Files\PC Sync\SyncManager.exe [139264] [PID.3308] [MD5.4C08FB7ACB28689B586D986D3F5826CF] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [49152] [PID.2216] [MD5.1681D697C65628571C1B3114B1AF6772] - (...) -- C:\Program Files\Orange\Assistance Livebox\dist\ST2.exe [12412328] [PID.2284] [MD5.DAD05809F7D980104A7546EB487C9D80] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\application\Microsoft Office\Office12\OUTLOOK.EXE [13002608] [PID.3072] [MD5.EC23FDF23952A1942E2578AE8649B31A] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1030200] [PID.3260] [MD5.0411F7EE63AE48D2918AB4F2C79AB6C4] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [78848] [PID.] [MD5.D30EB2F98504F30ECAAEEF90DDC7DE98] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2122752] [PID.1828] [MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.] ~ Scan Processes Running in 00mn 14s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [user Data\Default] None G0 - GCSP: Preference [user Data\Default][HomePage] Google ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Documents and Settings\NVIDIA\Application Data\Mozilla\Firefox\Profiles\tr6hcg4o.default\prefs.js C:\Documents and Settings\NVIDIA\Application Data\Mozilla\Firefox\Profiles\tr6hcg4o.default\user.js (.not file.) M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml P2 - FPN: [HKLM] [@canon.com/MycameraPlugin] - (.CANON INC. - CANON iMAGE GATEWAY Mycamera Plugin.) -- C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com R0 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Bing R1 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)) -- C:\WINDOWS\system32\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 ~ Scan Proxy management in 00mn 00s ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {1d970ed5-3eda-438d-bffd-715931e2775b} Clé orpheline O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} . (.Euro-Information - Barre de Confiance.) -- C:\Program Files\Barre de Confiance\TAPBar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} . (.Euro-Information - Barre de Confiance.) -- C:\Program Files\Barre de Confiance\TAPBar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\utils\QuickTime\qttask.exe O4 - HKLM\..\Run: [CloneCDTray] . (.SlySoft, Inc. - CloneCD Tray.) -- C:\gravage\CloneCD\CloneCDTray.exe O4 - HKLM\..\Run: [Tweak UI] TWEAKUI.cpl O4 - HKLM\..\Run: [type32] . (.Microsoft Corporation - Type32.exe.) -- C:\Program Files\Microsoft IntelliType Pro\type32.exe O4 - HKLM\..\Run: [intelliPoint] . (.Microsoft Corporation - Point32.exe.) -- C:\Program Files\Microsoft IntelliPoint\point32.exe O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe O4 - HKLM\..\Run: [Device Detector] . (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi2 Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKCU\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Distiller 8.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-BA7E-000000000003}\_SC_Distiller.exe O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat 8 Standard.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-BA7E-000000000003}\_SC_Acrobat_Standard.exe O4 - Global Startup: C:\Documents And Settings\NVIDIA\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Scan Global Startup in 00mn 00s ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: Ajouter au fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: ajouter cette page à vos favoris Orange . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html O8 - Extra context menu item: Convertir en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir la sélection en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir les liens sélectionnés en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O8 - Extra context menu item: envoyer le texte sélectionné par sms . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html O8 - Extra context menu item: envoyer par sms . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html O8 - Extra context menu item: envoyer un mail . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll O8 - Extra context menu item: orange.fr . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\orange_html\orange.html O8 - Extra context menu item: rechercher le texte sélectionné . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html O8 - Extra context menu item: traduire la page . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\translate_html\translate.html O8 - Extra context menu item: traduire le texte sélectionné . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html ~ Scan IE Menu Contextuel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline O9 - Extra button: Console Java (Sun) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO O9 - Extra button: Console Java (Sun) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ~ Scan Winsock in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1310490613031 O16 - DPF: {7FA319FB-FFB9-4089-87EB-63179244E6E6} (NetDirect) - https://nomad.chu-nancy.fr/nortel_cacheable/NetDirect.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} () - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_4_0.cab O16 - DPF: {A2505C6C-6F17-456F-89D2-4301FBDC6EC7} (Iewiper Control) - https://nomad.chu-nancy.fr/nortel_cacheable/iewiper.cab ~ Scan Objets ActiveX in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL ~ Scan Protocole Additionnel in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll O20 - Winlogon Notify: igfxcui . (...) -- igfxdev.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll ~ Scan Winlogon in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (...) - C:\WINDOWS\system32\guard32.dll (.not file.) ~ Scan AppInit DLL in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ~ Scan SSODL in 00mn 00s ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ~ Scan STS/SSO in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart (ATI Smart) . (.Pas de propriétaire - ATI Smart.) - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: C-DillaSrv (C-DillaSrv) . (.C-Dilla Ltd - C-Dilla RTS Service.) - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: (GEARSecurity) . (.GEAR Software - gearsec.) - C:\WINDOWS\system32\GEARSEC.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Orange update Core Service (Orange update Core Service) . (.France Telecom SA - Orange Upd@te.) - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe ~ Scan Services in 00mn 00s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\application\Microsoft Office\Office12\WINWORD.exe ~ Scan Desktop Component in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003Core.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003UA.job [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003Core] (.Google Inc..) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003UA] (.Google Inc..) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe ~ Scan Scheduled Task in 00mn 29s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (cmderd) . (.COMODO - COMODO Internet Security Eradication Driver.) - C:\WINDOWS\system32\DRIVERS\cmderd.sys O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\WINDOWS\system32\DRIVERS\cmdguard.sys O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\WINDOWS\system32\DRIVERS\cmdhlp.sys O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MpKslaae8f1ac) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F8C326C6-1255-40DD-925D-80DEAFBA46DB}\MpKslaae8f1ac.sys (.not file.) O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: (wceusbsh) . (.Microsoft Corporation - Hôte série USB Windows CE.) - C:\WINDOWS\system32\DRIVERS\wceusbsh.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip O42 - Logiciel: AC3Filter (remove only) - (.Pas de propriétaire.) [HKLM] -- AC3Filter O42 - Logiciel: ACDSee for Pentax 2.0 - (.ACD Systems Ltd..) [HKLM] -- {22D0716E-FCF8-452F-94B5-7E2C3C31D50D} O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8} O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A} O42 - Logiciel: Adobe Acrobat 8.1.4 Standard - (.Adobe Systems.) [HKLM] -- Adobe Acrobat 8 Standard - English, Français, Deutsch O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Photoshop CS - (.Adobe Systems, Inc..) [HKLM] -- {EFB21DE7-8C19-4A88-BB28-A766E16493BC} O42 - Logiciel: Analyseur et SDK MSXML 4.0 SP2 - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC} O42 - Logiciel: AndreaMosaic 3.33.0 - (.Pas de propriétaire.) [HKLM] -- AndreaMosaic O42 - Logiciel: AnyDVD - (.SlySoft.) [HKLM] -- AnyDVD O42 - Logiciel: Assistance Livebox - (.Orange.) [HKLM] -- Assistance Livebox O42 - Logiciel: Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} O42 - Logiciel: Avery DesignPro - (.Pas de propriétaire.) [HKLM] -- {2CC982C0-7EAE-11D4-ACC3-0050568AD318} O42 - Logiciel: Barre de Confiance - (.Pas de propriétaire.) [HKLM] -- TAPBar O42 - Logiciel: C-Dilla Licence Management System - (.Pas de propriétaire.) [HKLM] -- LMS O42 - Logiciel: CANON iMAGE GATEWAY MyCamera Download Plugin - (.Canon Inc..) [HKLM] -- MyCamera Download Plugin O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CANON iMAGE GATEWAY Task O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: COMODO Internet Security - (.COMODO Security Solutions Inc..) [HKLM] -- {FD8E178D-8B4E-42DA-B434-EFF270329B1C} O42 - Logiciel: Canon Camera Access Library - (.Canon Inc..) [HKLM] -- CAL O42 - Logiciel: Canon Camera Support Core Library - (.Canon Inc..) [HKLM] -- CSCLIB O42 - Logiciel: Canon EOS Kiss_N REBEL_XT 350D Pilote WIA - (.Canon.) [HKLM] -- InstallShield_{33CF7CDF-9805-4500-9CC7-D19D52AD63C4} O42 - Logiciel: Canon G.726 WMP-Decoder - (.Canon Inc..) [HKLM] -- Canon G.726 WMP-Decoder O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- MovieEditTask O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {862983D7-FA08-493E-A9ED-6B7859E069D3} O42 - Logiciel: Canon RAW Codec - (.Canon Inc..) [HKLM] -- Canon RAW Codec O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RAW Image Task O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher O42 - Logiciel: Canon Utilities CameraWindow DC - (.Canon Inc..) [HKLM] -- CameraWindowDC O42 - Logiciel: Canon Utilities CameraWindow DC 8 - (.Canon Inc..) [HKLM] -- CameraWindowDC8 O42 - Logiciel: Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC5 O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC6 O42 - Logiciel: Canon Utilities Digital Photo Professional 3.10 - (.Canon Inc..) [HKLM] -- DPP O42 - Logiciel: Canon Utilities EOS Capture 1.5 - (.Canon.) [HKLM] -- InstallShield_{589D17BB-C997-48C0-BCD2-CC8DC3375FE8} O42 - Logiciel: Canon Utilities EOS Utility - (.Canon Inc..) [HKLM] -- EOS Utility O42 - Logiciel: Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- EOS Video Snapshot Task O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera O42 - Logiciel: Canon Utilities MyCamera DC - (.Canon Inc..) [HKLM] -- MyCameraDC O42 - Logiciel: Canon Utilities PhotoStitch - (.Pas de propriétaire.) [HKLM] -- PhotoStitch O42 - Logiciel: Canon Utilities Picture Style Editor - (.Canon Inc..) [HKLM] -- Picture Style Editor O42 - Logiciel: Canon Utilities RemoteCapture DC - (.Canon Inc..) [HKLM] -- RemoteCaptureDC O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RemoteCaptureTask O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA} O42 - Logiciel: CloneCD - (.SlySoft.) [HKLM] -- CloneCD O42 - Logiciel: CloneDVD2 - (.Elaborate Bytes.) [HKLM] -- CloneDVD2 O42 - Logiciel: Compel Adaptec WinASPI - (.Pas de propriétaire.) [HKLM] -- Compel install Adaptec WinASPI-4.6.0(1021)_is1 O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite O42 - Logiciel: DVD Decrypter 3.2.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- DVD Decrypter 3.2.2.0 Fr O42 - Logiciel: DaViDeo 4 professional - (.G DATA Software AG.) [HKLM] -- InstallShield_{EF4EA1D8-E44E-41BA-B4C4-B4BEFDFCF2AC} O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Digital Video Duplicator - (.BVRP Software.) [HKLM] -- {7CCFADC3-60C4-4DD2-A843-171FAFB9467A} O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2} O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E} O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8} O42 - Logiciel: Jasc Paint Shop Pro 8 - (.Nom de votre société.) [HKLM] -- {81A34902-9D0B-4920-A25C-4CDC5D14B328} O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_05 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142050} O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_10 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142100} O42 - Logiciel: KONICA MINOLTA magicolor 2480MF - (.Pas de propriétaire.) [HKLM] -- KONICA MINOLTA magicolor 2480MF O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player O42 - Logiciel: Les Indispensables Éducation pour Microsoft Office - (.Microsoft.) [HKLM] -- {75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2} O42 - Logiciel: LiveUpdate BVRP Software - (.BVRP Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE} O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- LogMeIn Hamachi O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- {EEF985E8-8B36-4230-B174-117A2381C17F} O42 - Logiciel: MSVCMergeModules - (.Nav N Go Kft..) [HKLM] -- {AA721D14-CFE2-410E-B975-79FE5F82F99F} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 6.0 Parser (KB933579) - (.Microsoft Corporation.) [HKLM] -- {0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033) O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700} O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128} O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6} O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E} O42 - Logiciel: Microsoft AutoRoute 2007 avec récepteur GPS - (.Microsoft Corporation.) [HKLM] -- {C82185E8-C27B-4EF4-2007-3333BC2C2B6D} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft Encarta 2008 - Études - (.Microsoft Corporation.) [HKLM] -- {08181881-FCA5-44A7-B863-D66037A16AAF} O42 - Logiciel: Microsoft Encarta Maths - (.Microsoft Corporation.) [HKLM] -- {07183840-959A-4B0D-8825-2C533F0DDB19} O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005 O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0} O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9} O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {928B06E4-DDAA-476A-926A-641620326327} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000 O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} O42 - Logiciel: Minecraft version 1.2_02 - (.Pas de propriétaire.) [HKLM] -- {D1C729A7-4B00-4E78-9372-90CC2ABC64E3}_is1 O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack O42 - Logiciel: Morgan Stream Switcher - (.Pas de propriétaire.) [HKLM] -- mmswitch O42 - Logiciel: Mozilla Firefox 5.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0.1 (x86 fr) O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM] -- {6a5081b7-5183-48fd-b691-29774c2f4d6d} O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {7E0610A2-E336-40B3-B685-C4905E97EC9A} O42 - Logiciel: Orange Inside - (.Orange.) [HKCU] -- Orange Inside O42 - Logiciel: Orange Installeur version 1.2.2.0 - (.Orange.) [HKLM] -- {D13FE823-C575-4451-AC37-E645A67AA581}_1.2.2.0 O42 - Logiciel: Orange update - (.Orange.) [HKLM] -- OrangeUpdateManager O42 - Logiciel: PC Sync - (.France Telecom.) [HKLM] -- {A4DCAA77-151D-4CE9-8D79-E4ADB48031A2} O42 - Logiciel: Package de base Microsoft de service de chiffrement pour cartes à puce - (.Microsoft Corporation.) [HKLM] -- KB909520 O42 - Logiciel: Petit Larousse 2007 - (.Pas de propriétaire.) [HKLM] -- {1444B13F-B744-4624-9695-D9E6471817B1} O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- PowerDVD O42 - Logiciel: PressReader - (. NewspaperDirect Inc..) [HKLM] -- {912CED74-88D3-4C5B-ACB0-132318649765} O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime O42 - Logiciel: RadioWeb Player V4 - (.Pas de propriétaire.) [HKLM] -- ST6UNST #1 O42 - Logiciel: RealSpeak Solo pour la voix francaise Virginie - (.Nuance.) [HKLM] -- {58B0F3ED-6FAE-486C-9AB9-1C06514097B4} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5729F1AE-5895-468F-9165-BAD161C9E982} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08} O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636 O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5} O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060} O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{65EA4836-B5A3-4C1D-8883-0C35E471003A} O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490} O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8} O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB} O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1} O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062} O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF} O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D} O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48} O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF} O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC} O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870 O42 - Logiciel: Security Update for Windows Search 4 - KB963093 - (.Microsoft Corporation.) [HKLM] -- KB963093 O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: SereneScreen Aquarium - (.Prolific Publishing, Inc..) [HKLM] -- SereneScreen Aquarium_is1 O42 - Logiciel: Shape Collage - (.Shape Collage Inc..) [HKLM] -- ShapeCollage O42 - Logiciel: ToolbarFR - (.Orange.) [HKLM] -- {A047FE02-C91C-41CB-898C-4ED21B86025A} O42 - Logiciel: Universalis 10 - (.Pas de propriétaire.) [HKLM] -- Encyclopædia Universalis O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D} O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4} O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2583910) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BDC21583-5601-4B2B-88F3-7919F6DE8FB1} O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2553110) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{05D27A23-8E87-46B5-9EAF-F5B4DE7CCCA0} O42 - Logiciel: VobSub v2.23 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- VobSub O42 - Logiciel: WBEncarta - (.Pas de propriétaire.) [HKLM] -- {WBEncarta_6189F431-6CA5-4A17-80F8-8B92994B4B00} O42 - Logiciel: WinISO 5.3 - (.WinISO Computing Inc..) [HKLM] -- WinISO_is1 O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B} O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930 O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Windows Media Format SDK Hotfix - KB891122 - (.Microsoft Corporation.) [HKLM] -- KB891122 O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11 O42 - Logiciel: Windows Search 4.0 - (.Microsoft Corporation.) [HKLM] -- KB940157 O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1 O42 - Logiciel: magicolor 2480MF scan - (.KONICA MINOLTA.) [HKLM] -- {82A70CC8-DC11-4E49-B869-47DB69286A57} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\AC3Filter] [HKCU\Software\ACD Systems] [HKCU\Software\ASUS] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\AndreaMosaic] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\ArcSoft] [HKCU\Software\Avery] [HKCU\Software\BVRP Software] [HKCU\Software\Borland] [HKCU\Software\CDDB] [HKCU\Software\CISRA] [HKCU\Software\Canon] [HKCU\Software\Classes] [HKCU\Software\ComodoGroup] [HKCU\Software\Cygwin] [HKCU\Software\DT Soft] [HKCU\Software\DVD Decrypter] [HKCU\Software\DivXNetworks] [HKCU\Software\EA Games] [HKCU\Software\Elaborate Bytes] [HKCU\Software\Freeware] [HKCU\Software\G DATA] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Ghisler] [HKCU\Software\Google] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\Jasc] [HKCU\Software\JavaSoft] [HKCU\Software\KasperskyLab] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\MozillaPlugins] [HKCU\Software\NavNGo] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\Northcode Inc] [HKCU\Software\ODBC] [HKCU\Software\ORANGE] [HKCU\Software\OpenOffice.org] [HKCU\Software\OrangeInside] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PressReader] [HKCU\Software\Realtek] [HKCU\Software\SereneScreen] [HKCU\Software\SlySoft] [HKCU\Software\Software] [HKCU\Software\Symantec] [HKCU\Software\Technicland] [HKCU\Software\Trolltech] [HKCU\Software\Voxmobili] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinZip Computing] [HKCU\Software\e-merge] [HKCU\Software\ej-technologies] [HKLM\Software\ACD Systems] [HKLM\Software\ACE Compression Software] [HKLM\Software\ASUS] [HKLM\Software\ATI Technologies Inc.] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adaptec] [HKLM\Software\Adobe Systems] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Ashmanov & Partners] [HKLM\Software\Atheros Communications Inc.] [HKLM\Software\Audible] [HKLM\Software\Avery] [HKLM\Software\BVRP Software] [HKLM\Software\BrowserChoice] [HKLM\Software\C-Dilla] [HKLM\Software\C07ft5Y] [HKLM\Software\CISRA] [HKLM\Software\Canon] [HKLM\Software\Canon_Inc_IC] [HKLM\Software\ClassesTypeLib] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\ComodoGroup] [HKLM\Software\Copernic] [HKLM\Software\Creative Tech] [HKLM\Software\CyberLink] [HKLM\Software\Cygwin] [HKLM\Software\DT Soft] [HKLM\Software\DivXNetworks] [HKLM\Software\EID] [HKLM\Software\Elaborate Bytes] [HKLM\Software\France Telecom] [HKLM\Software\G DATA] [HKLM\Software\Gemplus] [HKLM\Software\Google] [HKLM\Software\Havas Interactive] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\Jasc] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KONICA MINOLTA] [HKLM\Software\Larousse] [HKLM\Software\LogMeIn, Inc.] [HKLM\Software\MAXSOFT-OCRON] [HKLM\Software\Macromedia] [HKLM\Software\Macrovision] [HKLM\Software\Morgan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Naviextras] [HKLM\Software\Nero] [HKLM\Software\NewspaperDirect] [HKLM\Software\ODBC] [HKLM\Software\On2 Technologies] [HKLM\Software\OpenOffice.org] [HKLM\Software\Orange] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\S3R521] [HKLM\Software\Sanyo] [HKLM\Software\ScanSoft] [HKLM\Software\Schlumberger] [HKLM\Software\Secure] [HKLM\Software\SereneScreen] [HKLM\Software\SlySoft] [HKLM\Software\Sun Microsystems] [HKLM\Software\Symantec] [HKLM\Software\TightVNC] [HKLM\Software\Universalis] [HKLM\Software\Voxmobili] [HKLM\Software\WinISO] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\Zenographics] [HKLM\Software\ej-technologies] [HKLM\Software\mozilla.org] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 16/07/2011 - 14:24:10 - [3511045] ----D- C:\Program Files\7-Zip O43 - CFD: 12/07/2011 - 21:09:58 - [520749] ----D- C:\Program Files\AC3Filter O43 - CFD: 03/09/2011 - 18:22:54 - [13302842] ----D- C:\Program Files\ACD Systems O43 - CFD: 26/07/2011 - 22:54:20 - [1017074900] ----D- C:\Program Files\Adobe O43 - CFD: 16/09/2011 - 20:47:46 - [40066673] ----D- C:\Program Files\AndreaMosaic O43 - CFD: 13/07/2011 - 09:35:08 - [82846491] ----D- C:\Program Files\ATI Technologies O43 - CFD: 06/08/2011 - 11:13:32 - [461795] ----D- C:\Program Files\Barre de Confiance O43 - CFD: 16/07/2011 - 23:54:54 - [565483212] ----D- C:\Program Files\Canon O43 - CFD: 23/07/2011 - 18:43:34 - [517780531] ----D- C:\Program Files\COMODO O43 - CFD: 22/08/2011 - 23:34:32 - [17268545] ----D- C:\Program Files\DAEMON Tools Lite O43 - CFD: 28/07/2011 - 18:30:40 - [601] ----D- C:\Program Files\DAEMON Tools Toolbar O43 - CFD: 17/07/2011 - 00:41:34 - [4188184] ----D- C:\Program Files\Defraggler O43 - CFD: 28/07/2011 - 18:16:10 - [130560] ----D- C:\Program Files\Elaborate Bytes O43 - CFD: 03/09/2011 - 18:22:54 - [807379297] ----D- C:\Program Files\Fichiers communs O43 - CFD: 12/07/2011 - 21:09:54 - [62208] ----D- C:\Program Files\Gabest O43 - CFD: 23/07/2011 - 19:50:58 - [104723369] ----D- C:\Program Files\Google O43 - CFD: 01/08/2011 - 13:03:02 - [44980464] --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 12/07/2011 - 15:08:48 - [96701] ----D- C:\Program Files\Intel O43 - CFD: 23/08/2011 - 00:57:34 - [5432024] ----D- C:\Program Files\Internet Explorer O43 - CFD: 12/07/2011 - 20:53:54 - [42994546] ----D- C:\Program Files\Jasc Software Inc O43 - CFD: 17/09/2011 - 16:31:48 - [35602958] ----D- C:\Program Files\Java O43 - CFD: 13/07/2011 - 11:44:30 - [10214066] ----D- C:\Program Files\KONICA MINOLTA O43 - CFD: 12/07/2011 - 21:23:34 - [3119668] ----D- C:\Program Files\Larousse O43 - CFD: 12/07/2011 - 20:10:20 - [30108753] ----D- C:\Program Files\Learning Essentials O43 - CFD: 12/07/2011 - 21:09:40 - [1893766] ----D- C:\Program Files\LiveUpdate O43 - CFD: 17/09/2011 - 17:10:06 - [3519933] ----D- C:\Program Files\LogMeIn Hamachi O43 - CFD: 22/08/2011 - 23:36:08 - [197220] ----D- C:\Program Files\LogMeIn Hamachi(2) O43 - CFD: 12/07/2011 - 18:13:58 - [2152579] ----D- C:\Program Files\Messenger O43 - CFD: 12/07/2011 - 19:16:14 - [2892735] ----D- C:\Program Files\Microsoft O43 - CFD: 13/07/2011 - 07:15:22 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 12/07/2011 - 20:10:56 - [8746024] ----D- C:\Program Files\Microsoft Etudes O43 - CFD: 12/07/2011 - 15:03:58 - [0] ----D- C:\Program Files\microsoft frontpage O43 - CFD: 13/07/2011 - 09:22:56 - [6089660] ----D- C:\Program Files\Microsoft IntelliPoint O43 - CFD: 13/07/2011 - 09:22:10 - [6959587] ----D- C:\Program Files\Microsoft IntelliType Pro O43 - CFD: 13/07/2011 - 07:41:06 - [43998120] ----D- C:\Program Files\Microsoft Office O43 - CFD: 12/07/2011 - 21:19:46 - [38411899] ----D- C:\Program Files\Microsoft Silverlight O43 - CFD: 12/07/2011 - 19:17:56 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework O43 - CFD: 12/07/2011 - 20:34:50 - [14904] ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 12/07/2011 - 20:32:18 - [68119903] ----D- C:\Program Files\Microsoft Visual Studio 8 O43 - CFD: 13/07/2011 - 07:18:14 - [3726168] ----D- C:\Program Files\Microsoft Works O43 - CFD: 12/07/2011 - 20:34:14 - [8167779] ----D- C:\Program Files\Microsoft.NET O43 - CFD: 12/07/2011 - 21:09:58 - [96112] ----D- C:\Program Files\Morgan O43 - CFD: 16/09/2011 - 20:14:56 - [123] ----D- C:\Program Files\Mosaic-Pictures 2 O43 - CFD: 12/07/2011 - 18:37:56 - [10374874] ----D- C:\Program Files\Movie Maker O43 - CFD: 28/07/2011 - 20:32:56 - [34248952] ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 12/07/2011 - 20:35:02 - [26521] ----D- C:\Program Files\MSBuild O43 - CFD: 13/07/2011 - 07:40:58 - [39944647] ----D- C:\Program Files\MSECache O43 - CFD: 12/07/2011 - 14:59:52 - [0] ----D- C:\Program Files\MSN O43 - CFD: 12/07/2011 - 15:00:28 - [8745735] ----D- C:\Program Files\MSN Gaming Zone O43 - CFD: 12/07/2011 - 21:22:50 - [0] ----D- C:\Program Files\MSXML 4.0 O43 - CFD: 12/07/2011 - 17:49:40 - [6849] ----D- C:\Program Files\MSXML 6.0 O43 - CFD: 24/07/2011 - 12:21:02 - [4367] ----D- C:\Program Files\MyApp O43 - CFD: 02/09/2011 - 15:46:36 - [0] ----D- C:\Program Files\Naviextras O43 - CFD: 02/09/2011 - 15:46:56 - [15238249] ----D- C:\Program Files\NavNGo O43 - CFD: 12/07/2011 - 18:10:26 - [3285523] ----D- C:\Program Files\NetMeeting O43 - CFD: 02/09/2011 - 09:17:16 - [8533988] ----D- C:\Program Files\NewspaperDirect O43 - CFD: 04/08/2011 - 17:32:42 - [137388354] ----D- C:\Program Files\Orange O43 - CFD: 12/07/2011 - 18:40:18 - [4379321] ----D- C:\Program Files\Outlook Express O43 - CFD: 16/07/2011 - 15:45:26 - [5072416] ----D- C:\Program Files\PC Sync O43 - CFD: 12/07/2011 - 15:10:38 - [68293396] ----D- C:\Program Files\Realtek O43 - CFD: 12/07/2011 - 17:51:06 - [37949185] ----D- C:\Program Files\Reference Assemblies O43 - CFD: 12/07/2011 - 15:02:42 - [1025] ----D- C:\Program Files\Services en ligne O43 - CFD: 16/09/2011 - 20:17:20 - [793430] ----D- C:\Program Files\Shape Collage O43 - CFD: 12/07/2011 - 15:06:52 - [0] --H-D- C:\Program Files\Uninstall Information O43 - CFD: 12/07/2011 - 21:09:54 - [73042] ----D- C:\Program Files\WinASPI O43 - CFD: 12/07/2011 - 18:46:20 - [5418300] ----D- C:\Program Files\Windows Desktop Search O43 - CFD: 16/07/2011 - 11:34:34 - [46432861] ----D- C:\Program Files\Windows Live O43 - CFD: 12/07/2011 - 17:46:34 - [3581070] ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD: 13/07/2011 - 08:09:46 - [8321242] ----D- C:\Program Files\Windows Media Player O43 - CFD: 16/07/2011 - 14:45:56 - [3942655] ----D- C:\Program Files\Windows NT O43 - CFD: 13/07/2011 - 07:56:44 - [20081898] ----D- C:\Program Files\Windows Sidebar O43 - CFD: 12/07/2011 - 15:02:46 - [0] --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 12/07/2011 - 15:03:58 - [0] ----D- C:\Program Files\xerox O43 - CFD: 12/07/2011 - 21:15:24 - [152723] ----D- C:\Program Files\XviD O43 - CFD: 28/09/2011 - 00:51:14 - [6395870] ----D- C:\Program Files\ZHPDiag O43 - CFD: 03/09/2011 - 18:23:02 - [23957415] ----D- C:\Program Files\Fichiers Communs\ACD Systems O43 - CFD: 24/07/2011 - 21:33:36 - [130926912] ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD: 26/07/2011 - 22:54:20 - [31517343] ----D- C:\Program Files\Fichiers Communs\Adobe AIR O43 - CFD: 12/07/2011 - 21:30:38 - [68096] ----D- C:\Program Files\Fichiers Communs\Adobe Systems Shared O43 - CFD: 16/07/2011 - 22:52:50 - [7431415] ----D- C:\Program Files\Fichiers Communs\Canon O43 - CFD: 12/07/2011 - 20:34:50 - [92976] ----D- C:\Program Files\Fichiers Communs\DESIGNER O43 - CFD: 16/07/2011 - 15:45:26 - [204800] ----D- C:\Program Files\Fichiers Communs\France Telecom O43 - CFD: 12/07/2011 - 21:05:08 - [6099982] ----D- C:\Program Files\Fichiers Communs\G DATA O43 - CFD: 12/07/2011 - 21:10:18 - [17728085] ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD: 17/09/2011 - 19:19:20 - [23234022] ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD: 24/07/2011 - 21:35:06 - [655111] ----D- C:\Program Files\Fichiers Communs\Macrovision Shared O43 - CFD: 02/09/2011 - 09:17:18 - [262983462] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD: 12/07/2011 - 15:01:50 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD: 13/07/2011 - 08:08:24 - [205785973] ----D- C:\Program Files\Fichiers Communs\Nero O43 - CFD: 12/07/2011 - 16:30:26 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD: 12/07/2011 - 15:01:54 - [8106] ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD: 12/07/2011 - 16:30:24 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD: 12/07/2011 - 20:52:38 - [0] ----D- C:\Program Files\Fichiers Communs\SWF Studio O43 - CFD: 13/07/2011 - 07:17:04 - [41360161] ----D- C:\Program Files\Fichiers Communs\System O43 - CFD: 12/07/2011 - 19:12:06 - [51254049] ----D- C:\Program Files\Fichiers Communs\Windows Live O43 - CFD: 17/09/2011 - 18:14:44 - [90062234] ----D- C:\Documents and Settings\NVIDIA\Application Data\.minecraft O43 - CFD: 03/09/2011 - 18:27:18 - [5168962] ----D- C:\Documents and Settings\NVIDIA\Application Data\ACD Systems O43 - CFD: 01/08/2011 - 18:34:28 - [17899827] ----D- C:\Documents and Settings\NVIDIA\Application Data\Adobe O43 - CFD: 16/07/2011 - 19:06:06 - [1571] ----D- C:\Documents and Settings\NVIDIA\Application Data\ArcSoft O43 - CFD: 13/07/2011 - 09:37:24 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\ATI O43 - CFD: 03/09/2011 - 18:52:42 - [8] ----D- C:\Documents and Settings\NVIDIA\Application Data\Canon O43 - CFD: 16/07/2011 - 11:20:28 - [10] ----D- C:\Documents and Settings\NVIDIA\Application Data\Copernic O43 - CFD: 28/07/2011 - 18:29:10 - [506] ----D- C:\Documents and Settings\NVIDIA\Application Data\DAEMON Tools Lite O43 - CFD: 16/07/2011 - 12:21:56 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\DivX O43 - CFD: 15/07/2011 - 15:52:12 - [174721] ----D- C:\Documents and Settings\NVIDIA\Application Data\eu O43 - CFD: 23/07/2011 - 19:31:28 - [88934] ----D- C:\Documents and Settings\NVIDIA\Application Data\Google O43 - CFD: 12/07/2011 - 21:38:06 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Help O43 - CFD: 12/07/2011 - 15:06:52 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Identities O43 - CFD: 12/07/2011 - 20:53:54 - [7961159] ----D- C:\Documents and Settings\NVIDIA\Application Data\Jasc Software Inc O43 - CFD: 12/07/2011 - 22:01:58 - [81086] ----D- C:\Documents and Settings\NVIDIA\Application Data\Macromedia O43 - CFD: 01/08/2011 - 18:35:26 - [10944173] -S--D- C:\Documents and Settings\NVIDIA\Application Data\Microsoft O43 - CFD: 28/07/2011 - 20:33:20 - [12924968] ----D- C:\Documents and Settings\NVIDIA\Application Data\Mozilla O43 - CFD: 02/09/2011 - 15:39:48 - [2334684] ----D- C:\Documents and Settings\NVIDIA\Application Data\naviextras O43 - CFD: 13/07/2011 - 08:22:18 - [535256] ----D- C:\Documents and Settings\NVIDIA\Application Data\Nero O43 - CFD: 02/09/2011 - 09:17:22 - [16145] ----D- C:\Documents and Settings\NVIDIA\Application Data\NewspaperDirect O43 - CFD: 23/07/2011 - 23:41:50 - [1476461] ----D- C:\Documents and Settings\NVIDIA\Application Data\OpenOffice.org O43 - CFD: 04/08/2011 - 17:34:10 - [2358076] ----D- C:\Documents and Settings\NVIDIA\Application Data\Orange O43 - CFD: 12/07/2011 - 20:50:32 - [11770208] ----D- C:\Documents and Settings\NVIDIA\Application Data\Sun O43 - CFD: 12/07/2011 - 21:01:54 - [13682] ----D- C:\Documents and Settings\NVIDIA\Application Data\Symantec O43 - CFD: 12/07/2011 - 21:33:22 - [492] ----D- C:\Documents and Settings\NVIDIA\Application Data\Technicland O43 - CFD: 23/12/2011 - 14:24:40 - [1358065] ----D- C:\Documents and Settings\NVIDIA\Application Data\uTorrent O43 - CFD: 16/07/2011 - 15:53:42 - [314920] ----D- C:\Documents and Settings\NVIDIA\Application Data\Voxmobili O43 - CFD: 12/07/2011 - 17:47:34 - [196] ----D- C:\Documents and Settings\NVIDIA\Application Data\Windows Desktop Search O43 - CFD: 15/07/2011 - 15:50:20 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Windows Search O43 - CFD: 26/07/2011 - 22:54:16 - [19306599] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Adobe O43 - CFD: 12/07/2011 - 18:50:28 - [3458] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\ApplicationHistory O43 - CFD: 13/07/2011 - 09:37:24 - [64793] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\ATI O43 - CFD: 17/07/2011 - 00:02:00 - [1085] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\CANON_INC O43 - CFD: 28/07/2011 - 17:53:42 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\COMODO O43 - CFD: 23/07/2011 - 19:30:28 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Deployment O43 - CFD: 18/09/2011 - 14:54:36 - [766354270] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google O43 - CFD: 12/07/2011 - 21:38:06 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Help O43 - CFD: 16/07/2011 - 17:02:34 - [161360] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Identities O43 - CFD: 28/09/2011 - 00:13:22 - [543113] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\LogMeIn Hamachi O43 - CFD: 22/08/2011 - 23:36:06 - [135943] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\LogMeIn Hamachi(2) O43 - CFD: 24/12/2011 - 22:16:12 - [329930041] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Microsoft O43 - CFD: 12/07/2011 - 20:31:32 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Microsoft Help O43 - CFD: 28/07/2011 - 20:33:14 - [21142935] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Mozilla O43 - CFD: 10/08/2011 - 15:55:30 - [4417] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Nero O43 - CFD: 24/07/2011 - 20:57:10 - [6420] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\RcIncidents O43 - CFD: 03/09/2011 - 18:28:50 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Showtime O43 - CFD: 12/07/2011 - 22:04:22 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Temp O43 - CFD: 12/07/2011 - 20:49:42 - [10449920] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142050} O43 - CFD: 15/07/2011 - 15:33:36 - [10931200] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142100} ~ Scan Program Folder in 00mn 10s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.6E550847AC4833269109758D13FDC5FF] - 27/09/2011 - 23:41:52 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1458621] O44 - LFC:[MD5.DCED74DCFB9D48DAAF188E000F18A7CE] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1451468] O44 - LFC:[MD5.6632058FE20CD6F2AF778C6680D83077] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [100736] O44 - LFC:[MD5.22BA14236F480607EACFC40824CE53FA] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [128894] O44 - LFC:[MD5.54BF518104A79E0366480094DBA8EA7B] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [550848] O44 - LFC:[MD5.0B45336F652A295AC47618C91D3BF668] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [650004] O44 - LFC:[MD5.A94B1B5C2B95CB51D62D98241A39888B] - 27/09/2011 - 23:13:10 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13646] O44 - LFC:[MD5.C83F89E7878A038B21EB024F09093D02] - 27/09/2011 - 23:12:39 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/09/2011 - 23:12:38 ---A- . (...) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.4E6CF7E83E8642249BB1A04105FC806A] - 27/09/2011 - 23:12:37 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/09/2011 - 23:12:12 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.991F2B054A4102673BBCA6662707E22A] - 27/09/2011 - 23:11:11 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32558] O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 27/09/2011 - 22:06:19 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69] O44 - LFC:[MD5.EEBACD996A2059BAE2181BB60673B938] - 25/09/2011 - 08:00:46 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [404640] O44 - LFC:[MD5.4816922B108FF3C0F010EEAFDCFA24FA] - 22/09/2011 - 23:55:41 ---A- . (...) -- C:\WINDOWS\setupapi.log [373990] O44 - LFC:[MD5.0C69B1BA36F2D4CB69ED2728150FB4BB] - 17/09/2011 - 18:18:08 ---A- . (.Sun Microsystems - Java Plug-in Control Panel.) -- C:\WINDOWS\system32\jpicpl32.cpl [61555] O44 - LFC:[MD5.3FA50D19887B754914491A29DF836171] - 17/09/2011 - 15:31:47 ---A- . (...) -- C:\WINDOWS\system32\jupdate-1.6.0_26-b03.log [3794] O44 - LFC:[MD5.134A3396434DE451A905ED1CA0C52DCF] - 16/09/2011 - 19:41:57 ---A- . (...) -- C:\WINDOWS\AndreaMosaic Setup Log.txt [8083] O44 - LFC:[MD5.456462905091DB042141487FE030E3C9] - 16/09/2011 - 19:41:38 ---A- . (.Indigo Rose Corporation - SUF60Runtime.) -- C:\WINDOWS\iun6002.exe [737280] O44 - LFC:[MD5.CD1835CF8233E6255D073832C62DAEB2] - 16/09/2011 - 19:11:12 ---A- . (...) -- C:\WINDOWS\cadkasdeinst01e.exe [75776] O44 - LFC:[MD5.A145FEA81254A92666034D08B1C96BBA] - 16/09/2011 - 19:06:56 ---A- . (...) -- C:\dxlog.txt [148] O44 - LFC:[MD5.376415EB5E7F29131C5CF41596D48276] - 16/09/2011 - 14:25:52 ---A- . (...) -- C:\WINDOWS\IE4 Error Log.txt [1472] O44 - LFC:[MD5.1EDE734867243A39195FD27FD9075A55] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\KB2616676.log [13173] O44 - LFC:[MD5.30B5EB783CD7FB601EFE145A1EFF6AFE] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [9775] O44 - LFC:[MD5.0160CEEA626EBAF55FFC8FD316135371] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\comsetup.log [47106] O44 - LFC:[MD5.0A99249FE487803D2CEEF2AAD723540D] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\iis6.log [153412] O44 - LFC:[MD5.57800DADF3D522782AC0138BD726602C] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\imsins.log [1374] O44 - LFC:[MD5.478FE578901884A1C08974E1E33C2791] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\msgsocm.log [7107] O44 - LFC:[MD5.D439587F7153144D3B7CDB86F893F964] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\netfxocm.log [24909] O44 - LFC:[MD5.16E68DD0C7879AA897056426429F76B9] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [28493] O44 - LFC:[MD5.2C13D9202CBDCD36566C2FD097FDCF7F] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ocgen.log [67988] O44 - LFC:[MD5.A1DA1EDFCCCB42CDB10CCACBD0FFCA94] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ocmsn.log [7866] O44 - LFC:[MD5.3D47144D120D8FE77F96CDC87E207072] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\tabletoc.log [7153] O44 - LFC:[MD5.EC94BDDA3677F168AEBB71E366412747] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\tsoc.log [64860] O44 - LFC:[MD5.F4920196607D687BADCEE1E29D5840D3] - 14/09/2011 - 09:07:00 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [142215] O44 - LFC:[MD5.129EC49402826CF3505C41F82CFBD5BB] - 14/09/2011 - 09:06:59 ---A- . (...) -- C:\WINDOWS\msmqinst.log [43844] O44 - LFC:[MD5.343B7FBF81598082689CBCE6AEEE84FD] - 14/09/2011 - 09:06:58 ---A- . (...) -- C:\WINDOWS\updspapi.log [53149] O44 - LFC:[MD5.E3ADC1CF5517287D6CDB762F6F92A116] - 14/09/2011 - 09:03:44 ---A- . (...) -- C:\WINDOWS\KB2570947.log [8295] O44 - LFC:[MD5.ABBF3A732E9F613BADD9A50572A94F5E] - 14/09/2011 - 09:03:44 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374] O44 - LFC:[MD5.E1882E1206F6F0781DC74D9DC6263243] - 07/09/2011 - 09:01:47 ---A- . (...) -- C:\WINDOWS\KB2607712.log [11573] O44 - LFC:[MD5.5903FA75200807AD739286BBF40C4904] - 03/09/2011 - 17:23:21 ---A- . (.Padus, Inc. - Padus® ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [9856] O44 - LFC:[MD5.64B89B9E05B25D142C3EFC05E9C2D798] - 30/08/2011 - 21:35:43 ---A- . (...) -- C:\WINDOWS\KB2570791.log [3731] O44 - LFC:[MD5.5F0CAAE5F70CD34C55042200C34390DB] - 30/08/2011 - 21:35:43 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [13072] O44 - LFC:[MD5.1A02F340691C3A7755267DABD283B262] - 10/10/2005 - 14:09:40 ---A- . (...) -- C:\WINDOWS\system32\javaw.exe [45163] O44 - LFC:[MD5.56FC0617B7100622E84DC5858A3A8B08] - 10/10/2005 - 14:09:28 ---A- . (...) -- C:\WINDOWS\system32\java.exe [45161] ~ Scan Files in 00mn 38s ---\\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export SP - "C:\application\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\application\Microsoft Office\Office12\OUTLOOK.exe O47 - AAKE:Key Export SP - "C:\internet\eMule\emule.exe" [Enabled] .(...) -- C:\internet\eMule\emule.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 7.0.1.325\French\setup.exe" [Enabled] .(.Kaspersky Lab.) -- C:\Documents and Settings\All Users\Application Data\Kasper O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnserver.exe" [Enabled] .(...) -- C:\Program Files\TightVNC\tvnserver.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\vncviewer.exe" [Enabled] .(...) -- C:\Program Files\TightVNC\vncviewer.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe O47 - AAKE:Key Export SP - "C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe" [Enabled] .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.) ~ Scan CSB in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ Scan IFEO in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.MPG4"="vp31vfw.dll" . (.On2.com - On2_VP3.) -- C:\WINDOWS\system32\vp31vfw.dll O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\WINDOWS\system32\vorbis.acm O52 - TDSD: \Drivers32\"vidc.dvsd"="pdvcodec.dll" . (.Matsushita Electric Industrial Co., Ltd. - DV Video for Windows Driver.) -- C:\WINDOWS\system32\pdvcodec.dll O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll O52 - TDSD: \Drivers32\"VIDC.ACDV"="ACDV.dll" . (.ACD Systems - ACDV.) -- C:\WINDOWS\system32\ACDV.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (...) -- C:\WINDOWS\system32\xvidvfw.dll O52 - TDSD: \drivers.desc\"l3codecp.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\WINDOWS\system32\l3codecp.acm O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.5 Codec" . (...) -- (.not file.) O52 - TDSD: \drivers.desc\"ACDV.dll"="ACDV 1.0" . (...) -- (.not file.) ~ Scan Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"= O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 28/09/2011 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys [1684736] O58 - SDL:[MD5.4F0E198FD3D5CD8BEE02E0F014601BC5] - 28/09/2011 - 18:16:59 ---A- . (.SlySoft, Inc. - AnyDVD Filter Driver.) -- C:\WINDOWS\system32\drivers\AnyDVD.sys [96832] O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 28/09/2011 - 03:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys [5810] O58 - SDL:[MD5.B979979AB8027F7F53FB16EC4229B7DB] - 28/09/2011 - 11:06:00 ---A- . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\WINDOWS\system32\drivers\Aspi32.sys [25244] O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 28/09/2011 - 13:30:14 ---A- . (...) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS [10296] O58 - SDL:[MD5.C0B86ECB324E50F6BBD529F9D5C6B24B] - 28/09/2011 - 08:38:10 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [3565056] O58 - SDL:[MD5.A39393941B26BFFAFE464DCBF9FC72F0] - 28/09/2011 - 09:23:22 ---A- . (.Macrovision - C-Dilla Windows NT RTS.) -- C:\WINDOWS\system32\drivers\CDANT.SYS [58288] O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/09/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528] O58 - SDL:[MD5.D58B707F3D12AE410CA07D257FD28098] - 28/09/2011 - 08:38:12 ---A- . (.COMODO - COMODO Internet Security Eradication Driver.) -- C:\WINDOWS\system32\drivers\cmderd.sys [17416] O58 - SDL:[MD5.251F906328AF49E7927A1AD12B543A2F] - 28/09/2011 - 08:38:14 ---A- . (.COMODO - COMODO Internet Security Sandbox Driver.) -- C:\WINDOWS\system32\drivers\cmdGuard.sys [242600] O58 - SDL:[MD5.207F06D08AFCDD3BBC801EAB1A845CFB] - 28/09/2011 - 08:38:14 ---A- . (.COMODO - COMODO Internet Security Helper Driver.) -- C:\WINDOWS\system32\drivers\cmdhlp.sys [29400] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/09/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.555E54AC2F601A8821CEF58961653991] - 28/09/2011 - 17:26:33 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys [218688] O58 - SDL:[MD5.CE37E3D51912E59C80C6D84337C0B4CD] - 28/09/2011 - 01:57:04 ---A- . (.SlySoft, Inc. - ElbyCDIO Filter Driver.) -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys [34760] O58 - SDL:[MD5.D71233D7CCC2E64F8715A20428D5A33B] - 28/09/2011 - 23:57:57 ---A- . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys [31088] O58 - SDL:[MD5.E205C313417DA6FA7AFE85912A310A65] - 28/09/2011 - 01:56:49 ---A- . (.Elaborate Bytes AG - Elby Delay Lower Filter Driver.) -- C:\WINDOWS\system32\drivers\ElbyDelay.sys [11984] O58 - SDL:[MD5.833051C6C6C42117191935F734CFBD97] - 28/09/2011 - 16:35:40 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\WINDOWS\system32\drivers\hamachi.sys [26176] O58 - SDL:[MD5.C9953067B2C9E3D3DD44EC22D1E0815A] - 28/09/2011 - 08:38:16 ---A- . (.COMODO - COMODO Internet Security Firewall Driver.) -- C:\WINDOWS\system32\drivers\inspect.sys [97504] O58 - SDL:[MD5.96478FE91C5A37C673EBE3DA87C1A115] - 28/09/2011 - 08:09:52 R--A- . (.Atheros Communications, Inc. - Atheros AR813x/AR815x PCI-E Ethernet Controller ndis miniport d.) -- C:\WINDOWS\system32\drivers\l1c51x86.sys [44032] O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 28/09/2011 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys [1389056] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032] O58 - SDL:[MD5.5903FA75200807AD739286BBF40C4904] - 28/09/2011 - 17:23:21 ---A- . (.Padus, Inc. - Padus® ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [9856] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/09/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792] O58 - SDL:[MD5.E205C313417DA6FA7AFE85912A310A65] - 28/09/2011 - 01:56:49 ---A- . (.Elaborate Bytes AG - Elby Delay Lower Filter Driver.) -- C:\WINDOWS\system32\drivers\RegKill.sys [11984] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032] O58 - SDL:[MD5.3D3F703B44A26D9C676EC3E2A03BA811] - 28/09/2011 - 15:28:42 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [5934592] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 28/09/2011 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/09/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.FCE98C43B5C5DB8E0DA8EA0E2B45E044] - 28/09/2011 - 17:20:14 ---A- . (.Elaborate Bytes AG - VirtualCloneCD Driver.) -- C:\WINDOWS\system32\drivers\VClone.sys [30208] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/09/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 01/04/2003 - C:\WINDOWS\system32\drivers\CDANT.sys - C-Dilla(C-Dilla) .(.Macrovision - C-Dilla Windows NT RTS.) - LEGACY_C-DILLA O64 - Services: CurCS - 01/04/2003 - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe - C-DillaSrv(C-DillaSrv) .(.C-Dilla Ltd - C-Dilla RTS Service.) - LEGACY_C-DILLASRV O64 - Services: CurCS - 08/09/2009 - C:\Program Files\Canon\CAL\CALMAIN.exe - Canon Camera Access Library 8(CCALib8) .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8 O64 - Services: CurCS - 30/06/2011 - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe - COMODO Internet Security Helper Service(cmdAgent) .(.COMODO - COMODO Internet Security.) - LEGACY_CMDAGENT O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmderd.sys - COMODO Internet Security Eradication Driver(cmderd) .(.COMODO - COMODO Internet Security Eradication Driver.) - LEGACY_CMDERD O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmdguard.sys - COMODO Internet Security Sandbox Driver(cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmdhlp.sys - COMODO Internet Security Helper Driver(cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - 16/12/2010 - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys - ElbyCDIO Driver(ElbyCDIO) .(.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - LEGACY_ELBYCDIO O64 - Services: CurCS - 12/07/2011 - C:\WINDOWS\system32\GEARSEC.exe - GEARSecurity(GEARSecurity) .(.GEAR Software - gearsec.) - LEGACY_GEARSECURITY O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate)(gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdatem)(gupdatem) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater(gusvc) .(.Google - gusvc.) - LEGACY_GUSVC O64 - Services: CurCS - 25/05/2011 - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe - LogMeIn Hamachi 2.0 Tunneling Engine(Hamachi2Svc) .(.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) - LEGACY_HAMACHI2SVC O64 - Services: CurCS - 22/10/2004 - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\inspect.sys - COMODO Internet Security Firewall Driver(Inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT ~ Scan Services in 00mn 23s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (Orange) - Orange : téléphones, forfaits, Internet, actualité, sport, video O69 - SBI: SearchScopes [HKCU] {9D9CAD55-7EFE-4A19-B9EE-3973A3C35BC7} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} - (DAEMON Search) - DAEMON-Search.com :: EXPLORE ~ Scan Keys in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.444067F81B9D0728A2E7E58FDF1CAF65] [sPRF][25/04/2005] (.Macromedia, Inc. - Flash Player 5.0 r30.) -- C:\Documents and Settings\NVIDIA\Bureau\shanghai_dynasty.exe [516808] ~ Scan Files in 00mn 00s ---\\ Scan Additionnel (O88) Database Version : 8636 - (25/09/2011) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 0 [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{32099aac-c132-4136-9e9a-4e364a424e17} =>Toolbar.Agent C:\Program Files\DAEMON Tools Toolbar =>Toolbar.Agent ~ Scan Additionnel in 00mn 07s ---\\ Recherche détournement de DNS routeur (O89) Serveur : livebox.home Address: 192.168.1.1 Nom : www.l.google.com Addresses: 209.85.148.99, 209.85.148.103, 209.85.148.106, 209.85.148.147 209.85.148.105, 209.85.148.104 Aliases: www.google.fr, www.google.com ~ Scan DNS in 00mn 21s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 68096 | (Adobe LM Service) . (...) - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe SR - | Auto 28/09/2011 602112 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe SS - | Auto 593920 | (ATI Smart) . (...) - C:\WINDOWS\system32\ati2sgag.exe SR - | Auto 28/09/2011 46080 | (C-DillaSrv) . (.C-Dilla Ltd.) - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe SR - | Auto 28/09/2011 96334 | (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe SR - | Auto 28/09/2011 1793712 | C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe SS - | Demand 28/09/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe SR - | Demand 28/09/2011 654848 | (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe SR - | Auto 0 | (GEARSecurity) . (...) - c:\SYSTEM32\GEARSEC.exe SS - | Auto 28/09/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 28/09/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 28/09/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 28/09/2011 1336712 | LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe SS - | Demand 28/09/2011 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe SR - | Auto 28/09/2011 935208 | Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe SS - | Auto 28/09/2011 1055872 | (Orange update Core Service) . (.France Telecom SA.) - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe ~ Scan Services in 00mn 22s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover Run by NVIDIA at 28/09/2011 00:53:34 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS 1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8B02FAB8] 3 CLASSPNP[0xBA0E8FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000068[0x8B070780] 5 ACPI[0xB9F7E620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP2T0L0-5[0x8B060D98] kernel: MBR read successfully user & kernel MBR OK ~ Scan MBR in 00mn 28s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by NVIDIA at 28/09/2011 00:53:43 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 36s End of the scan (1363 lines in 02mn 47s)(0)
×
×
  • Créer...