Demande d'analyse (Merci)

[Pat07]

Bonjour,

Suite à un doute sur mon PC, je me permets de vous soumettre le rapport de ZHPDiag.

Très cordialement

 

Voici mon ZHPDiag :

 

Rapport de ZHPDiag v1.24.45 par Nicolas Coolman

Run by Bull51 at 16/01/2010 11:22:29

Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

Platform : Microsoft Windows XP (5.1.2600) Service Pack 3

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox (3.5.7)

 

Boot mode: Normal (Normal boot)

Total RAM: 1023 MB (50% free)

System drive D: has 173 GB (74%) free of 233 GB

 

---\\ DOS/Devices

A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

C:\ Hard drive, Flash drive, Thumb drive (Free 112 Go of 112 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 173 Go of 233 Go)

E:\ Hard drive, Flash drive, Thumb drive (Free 28 Go of 190 Go)

F:\ CD-ROM drive (Not Inserted)

 

---\\ Processus lancés

[MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

[MD5.9AEE9BCB32D82BCC36474EB921F3BB49] - D:\Program Files\Logitech\iTouch\iTouch.exe

[MD5.961364A3EDF09BDD1F6618DCA9E14DCF] - D:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE

[MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - D:\WINDOWS\System32\CTFMON.EXE

[MD5.419C06524DC5A79BAAD9A67339C1C65C] - D:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe

[MD5.557F35D1CA42AEA14A6690E21887A31F] - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

[MD5.5DEBC3519D489411073FA7E56FFB4A93] - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

[MD5.E4BDF223CD75478BF44567B4D5C2634D] - D:\WINDOWS\System32\svchost.exe

[MD5.0AAF6B848185899CF76AE04E62EAB3D2] - D:\Program Files\Alwil Software\Avast4\ashServ.exe

[MD5.C75830957AC833C0526CBC1D2CF48500] - D:\Program Files\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe

[MD5.ACC9C8C560C567FAD6F79C977AB2EA09] - D:\WINDOWS\system32\bgsvcgen.exe

[MD5.3F56903E124E820AEECE6D471583C6C1] - D:\Program Files\Bonjour\mDNSResponder.exe

[MD5.09EAE9824FBBB881E7B4D9F5CAFD24F0] - D:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

[MD5.4E9975F73039132A673DB1AAA90EFF74] - D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

[MD5.C3FB1D70CB88722267949694BA51759E] - D:\WINDOWS\system32\services.exe

[MD5.626A24ED1228580B9518C01930936DF9] - D:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.39133291CB607BDD87CFC565A4A1E7A5] - D:\Program Files\Java\jre6\bin\jqs.exe

[MD5.A1CC055CB3E20EC9717273011A94397B] - D:\Program Files\Kodak\Kodak Utilities\PTS\Kodak Picture Transfer Service.exe

[MD5.11F714F85530A2BD134074DC30E99FCA] - D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

[MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - D:\WINDOWS\System32\lsass.exe

[MD5.268F5EF1AC7A7A30E85B847756FC4D50] - D:\Program Files\Dassault Systemes\PhotoStudioSatellite\B19\rayserver.exe

[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - D:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

[MD5.460E4CE148BD07218DA0B6A3D31885A9] - D:\WINDOWS\system32\spoolsv.exe

 

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

 

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

 

---\\ Internet Explorer URLSearchHook (R3)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - D:\WINDOWS\system32\ieframe.dll

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - D:\Program Files\Windows Desktop Search\dsWebAllow.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (not file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - D:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - D:\Program Files\Windows Live\Toolbar\wltcore.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: (no name) - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} -

 

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe

O4 - HKLM\..\Run: [D066UUtility] D:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE

O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data=1

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe,302

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File - D:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File - D:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File - D:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File - D:\WINDOWS\system32\wshbth.dll

O10 - WLSP:\000000000005\Winsock LSP File - D:\WINDOWS\system32\nwprovau.dll

O10 - WLSP:\000000000006\Winsock LSP File - D:\Program Files\Bonjour\mdnsNSP.dll

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) - file://D:\WINDOWS\Java\classes\dajava.cab

O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - file://D:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/0...heckControl.cab

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} () - D:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1256032080531

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{B92917E9-3BF2-4883-8893-B0BB9CDD10A0}: NameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{B92917E9-3BF2-4883-8893-B0BB9CDD10A0}: NameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{B92917E9-3BF2-4883-8893-B0BB9CDD10A0}: NameServer = 192.168.1.1

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - D:\Program Files\Belarc\Advisor\System\BAVoilaX.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - D:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - D:\WINDOWS\system32\msvidctl.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - D:\Windows\System32\inetcomm.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - D:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - D:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - D:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - D:\Windows\System32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - D:\WINDOWS\system32\msvidctl.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - D:\WINDOWS\System32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - D:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - D:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - D:\Windows\system32\SHELL32.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - D:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: dimsntfy - D:\WINDOWS\System32\dimsntfy.dll

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - D:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - D:\WINDOWS\System32\stobject.dll

O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - D:\WINDOWS\system32\upnpui.dll

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\System32\browseui.dll

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - D:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus (avast! Antivirus) - D:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: Backbone Service (BBDemon) - D:\Program Files\Dassault Systemes\B18\intel_a\code\bin\CATSysDemon.exe" -service

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - D:\WINDOWS\system32\bgsvcgen.exe

O23 - Service: Service Bonjour (Bonjour Service) - D:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) - D:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - D:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

O23 - Service: Service Google Update (gupdate1ca6b932ce3479c) (gupdate1ca6b932ce3479c) - D:\Program Files\Google\Update\GoogleUpdate.exe" /svc

O23 - Service: Java Quick Starter (JavaQuickStarterService) - D:\Program Files\Java\jre6\bin\jqs.exe -service -config D:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf

O23 - Service: Kodak picture transfer agent (KODAK Picture Transfer Agent) - D:\Program Files\Kodak\Kodak Utilities\PTS\Kodak Picture Transfer Service.exe

O23 - Service: Machine Debug Manager (MDM) - D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

O23 - Service: Ray (Ray) - D:\Program Files\Dassault Systemes\PhotoStudioSatellite\B19\rayserver.exe

O23 - Service: SeaPort (SeaPort) - D:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

O23 - Service: Spouleur d'impression (Spooler) - D:\WINDOWS\system32\spoolsv.exe

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - D:\WINDOWS\Tasks\AppleSoftwareUpdate.job

O39 - APT:Automatic Planified Task - D:\WINDOWS\Tasks\EasyShare Registration Task.job

O39 - APT:Automatic Planified Task - D:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - D:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - D:\WINDOWS\Tasks\User_Feed_Synchronization-{0FE9A42F-3074-482F-ADE9-4A7ABC1FF098}.job

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - D:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Lecteur Windows Media - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - D:\WINDOWS\inf\unregmp2.exe /ShowWMP

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - D:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "D:\WINDOWS\system32\rundll32.exe" "D:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - D:\WINDOWS\system32\shmgrate.exe OCInstallUserConfigOE

O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)

O40 - ASIC: Internet Explorer Classes for Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - (not file)

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - D:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - D:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - D:\WINDOWS\system32\regsvr32.exe /s /n /i:/UserInstall D:\WINDOWS\system32\themeui.dll

O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)

O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Mise à jour de sécurité pour Windows XP (KB923789) - {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - (not file)

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\wmp.inf,PerUserStub

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)

O40 - ASIC: .NET Framework - {72AD53CC-CCC0-3757-8480-9EE176866A7C} - (not file)

O40 - ASIC: Dossiers Web - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file)

O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - D:\WINDOWS\system32\ie4uinit.exe -BaseSettings

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - d:\WINDOWS\system32\Rundll32.exe d:\WINDOWS\system32\mscories.dll,Install

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: .NET Framework - {B508B3F1-A24A-32C0-B310-85786919EF28} - (not file)

O40 - ASIC: .NET Framework - {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)

O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} - D:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: Environnement de prise en charge de réseau AFD (AFD) - D:\WINDOWS\System32\drivers\afd.sys

O41 - Driver: Belarc SMBios Access (BANTExt) - D:\WINDOWS\System32\Drivers\BANTExt.sys

O41 - Driver: Pilote de CD-ROM (Cdrom) - C:\WINDOWS\System32\DRIVERS\cdrom.sys

O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys

O41 - Driver: Pilote de filtre de gravure CD (Imapi) - C:\WINDOWS\System32\DRIVERS\imapi.sys

O41 - Driver: Pilote de processeur Intel (intelppm) - C:\WINDOWS\System32\DRIVERS\intelppm.sys

O41 - Driver: Pilote IPSEC (IPSec) - C:\WINDOWS\System32\DRIVERS\ipsec.sys

O41 - Driver: Pilote de la classe Clavier (Kbdclass) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys

O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys

O41 - Driver: LUMDriver (LUMDriver) - D:\WINDOWS\system32\drivers\LUMDriver.sys

O41 - Driver: Pilote de la classe Souris (Mouclass) - C:\WINDOWS\System32\DRIVERS\mouclass.sys

O41 - Driver: MRXSMB (MRxSmb) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys

O41 - Driver: Interface NetBIOS (NetBIOS) - C:\WINDOWS\System32\DRIVERS\netbios.sys

O41 - Driver: NetBIOS sur TCP/IP (NetBT) - C:\WINDOWS\System32\DRIVERS\netbt.sys

O41 - Driver: OMCI (OMCI) - D:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS

O41 - Driver: Pilote processeur (Processor) - C:\WINDOWS\System32\DRIVERS\processr.sys

O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys

O41 - Driver: Rdbss (Rdbss) - C:\WINDOWS\System32\DRIVERS\rdbss.sys

O41 - Driver: (no object) (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys

O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) - C:\WINDOWS\System32\DRIVERS\redbook.sys

O41 - Driver: Pilote de port série (Serial) - C:\WINDOWS\System32\DRIVERS\serial.sys

O41 - Driver: Pilote du protocole TCP/IP (Tcpip) - C:\WINDOWS\System32\DRIVERS\tcpip.sys

O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\System32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) - D:\WINDOWS\System32\drivers\vga.sys

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Adobe Flash Player 10 ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin

O42 - Logiciel: Adobe Photoshop 7.0

O42 - Logiciel: Adobe Reader 9.3 - Français

O42 - Logiciel: Apple Application Support

O42 - Logiciel: Apple Mobile Device Support

O42 - Logiciel: Apple Software Update

O42 - Logiciel: ArcSoft Panorama Maker 3

O42 - Logiciel: ArcSoft PhotoBase

O42 - Logiciel: ArcSoft PhotoStudio 2000

O42 - Logiciel: ArcSoft Software Suite

O42 - Logiciel: Archiveur WinRAR

O42 - Logiciel: Assistant de connexion Windows Live

O42 - Logiciel: Avanquest update

O42 - Logiciel: Avidemux 2.5

O42 - Logiciel: BeatJam

O42 - Logiciel: Belarc Advisor 8.1

O42 - Logiciel: Bonjour

O42 - Logiciel: Broadcom Advanced Control Suite

O42 - Logiciel: CCScore

O42 - Logiciel: CCleaner

O42 - Logiciel: COSMOSMotion 2007 SP0

O42 - Logiciel: COSMOSWorks 2007 SP0

O42 - Logiciel: Canon ScanGear Toolbox CS 2.5

O42 - Logiciel: Canon ScanGear Toolbox FAU 2.5

O42 - Logiciel: CodeStuff Starter

O42 - Logiciel: Dassault Systemes Software B18

O42 - Logiciel: Dassault Systemes Software B19

O42 - Logiciel: Dassault Systemes Software Prerequisites x86

O42 - Logiciel: Defraggler

O42 - Logiciel: Dell ResourceCD

O42 - Logiciel: DivX Codec

O42 - Logiciel: DivX Content Uploader

O42 - Logiciel: DivX Converter

O42 - Logiciel: DivX Converter Mobile

O42 - Logiciel: DivX Player

O42 - Logiciel: DivX Plus DirectShow Filters

O42 - Logiciel: DivX Web Player

O42 - Logiciel: Dongle Sagem 760N

O42 - Logiciel: EPSON Logiciel imprimante

O42 - Logiciel: ESSBrwr

O42 - Logiciel: ESSCDBK

O42 - Logiciel: ESSPCD

O42 - Logiciel: ESSSONIC

O42 - Logiciel: ESSTOOLS

O42 - Logiciel: ESScore

O42 - Logiciel: ESSgui

O42 - Logiciel: ESSini

O42 - Logiciel: EVEREST Home Edition v2.20

O42 - Logiciel: FileZilla Client 3.3.1

O42 - Logiciel: FindyKill

O42 - Logiciel: Free FLV Converter V 6.7.4

O42 - Logiciel: Galerie de photos Windows Live

O42 - Logiciel: Google Chrome

O42 - Logiciel: Google Update Helper

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399)

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5)

O42 - Logiciel: Installation Windows Live

O42 - Logiciel: Intel® PRO Network Connections Drivers

O42 - Logiciel: Java 6 Update 17

O42 - Logiciel: Java 6 Update 6

O42 - Logiciel: Junk Mail filter update

O42 - Logiciel: K-Lite Codec Pack 5.5.1 (Full)

O42 - Logiciel: KSU

O42 - Logiciel: LG MC USB U330 driver

O42 - Logiciel: LG PC Suite II

O42 - Logiciel: LG USB Modem driver

O42 - Logiciel: Logiciel Kodak EasyShare

O42 - Logiciel: Logiciel iTouch de Logitech

O42 - Logiciel: Logitech Desktop Messenger

O42 - Logiciel: Logitech MouseWare 9.75

O42 - Logiciel: Logitech Resource Center

O42 - Logiciel: Luxor

O42 - Logiciel: MSVCRT

O42 - Logiciel: MSXML 4.0 SP2 (KB954430)

O42 - Logiciel: Ma Cuisine Lapeyre Prima

O42 - Logiciel: Ma-Config.com

O42 - Logiciel: Macromedia Dreamweaver 8

O42 - Logiciel: Macromedia Extension Manager

O42 - Logiciel: Macromedia Fireworks 8

O42 - Logiciel: Macromedia Flash 5

O42 - Logiciel: Macromedia Flash 8 Video Encoder

O42 - Logiciel: Macromedia Flash Player 8

O42 - Logiciel: Macrovision FLEXid Drivers

O42 - Logiciel: Mahjong Quest

O42 - Logiciel: Malwarebytes' Anti-Malware

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft Baseline Security Analyzer 1.2.1

O42 - Logiciel: Microsoft Choice Guard

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs

O42 - Logiciel: Microsoft National Language Support Downlevel APIs

O42 - Logiciel: Microsoft Office 2003 Web Components

O42 - Logiciel: Microsoft Office FrontPage 2003

O42 - Logiciel: Microsoft Office Live Add-in 1.3

O42 - Logiciel: Microsoft Office Outlook Connector

O42 - Logiciel: Microsoft Office Professional Edition 2003

O42 - Logiciel: Microsoft Office Visio Professional 2003

O42 - Logiciel: Microsoft Office XP Web Components

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]

O42 - Logiciel: Microsoft Search Enhancement Pack

O42 - Logiciel: Microsoft Silverlight

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86)

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86)

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable

O42 - Logiciel: MobileMe Control Panel

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra

O42 - Logiciel: MovieXone 4.0

O42 - Logiciel: Mozilla Firefox (3.5.7)

O42 - Logiciel: Mozilla Thunderbird (2.0.0.18)

O42 - Logiciel: MyDefrag v4.2.4

O42 - Logiciel: Nero 6 Ultra Edition

O42 - Logiciel: Nikon FotoShare

O42 - Logiciel: Nikon Message Center

O42 - Logiciel: Notifier

O42 - Logiciel: OfotoXMI

O42 - Logiciel: OmniPage Pro 9.0

O42 - Logiciel: OpenMG Limited Patch 3.3-03-04-28-01

O42 - Logiciel: OpenMG Secure Module 3.3

O42 - Logiciel: OpenOffice.org Installer 1.0

O42 - Logiciel: Orange Plug-in messagerie vocale 888

O42 - Logiciel: Outil de téléchargement Windows Live

O42 - Logiciel: PC Inspector File Recovery

O42 - Logiciel: PHOTOfunSTUDIO HD Edition

O42 - Logiciel: PTS

O42 - Logiciel: QuickTime

O42 - Logiciel: Recuva (remove only)

O42 - Logiciel: Revo Uninstaller 1.85

O42 - Logiciel: SCRABBLE® Interactif EDITION 2007 Désinstaller

O42 - Logiciel: SFR

O42 - Logiciel: SHASTA

O42 - Logiciel: SIW version 2009-05-12

O42 - Logiciel: Segoe UI

O42 - Logiciel: Sentinel System Driver

O42 - Logiciel: SolidWorks 2007 API SDK

O42 - Logiciel: SolidWorks 2007 SP0

O42 - Logiciel: SoundMAX

O42 - Logiciel: Spybot - Search & Destroy

O42 - Logiciel: StudioTools 12.0.2

O42 - Logiciel: TmNationsForever

O42 - Logiciel: Unlocker 1.8.7

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053

O42 - Logiciel: VC80MFCRedist - 8.0.50727.4053

O42 - Logiciel: VLC media player 1.0.3

O42 - Logiciel: VPRINTOL

O42 - Logiciel: VSO Image Resizer 3.0.0.140

O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime

O42 - Logiciel: Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)

O42 - Logiciel: Vsk5Online

O42 - Logiciel: Windows Desktop Search

O42 - Logiciel: Windows Desktop Search Multilingual User Interface Pack

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130)

O42 - Logiciel: Windows Internet Explorer 7

O42 - Logiciel: Windows Internet Explorer 8

O42 - Logiciel: Windows Live Call

O42 - Logiciel: Windows Live Communications Platform

O42 - Logiciel: Windows Live Contrôle parental

O42 - Logiciel: Windows Live FolderShare

O42 - Logiciel: Windows Live Mail

O42 - Logiciel: Windows Live Messenger

O42 - Logiciel: Windows Live Writer

O42 - Logiciel: Windows Password Recovery Bootdisk 3.0

O42 - Logiciel: Windows XP Service Pack 3

O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0

O42 - Logiciel: ZebHelpProcess 2.34

O42 - Logiciel: avast! Antivirus

O42 - Logiciel: eDrawings 2007

O42 - Logiciel: eMule

O42 - Logiciel: essvatgt

O42 - Logiciel: getPlus® for Adobe

O42 - Logiciel: kgcbaby

O42 - Logiciel: kgcbase

O42 - Logiciel: kgchday

O42 - Logiciel: kgchlwn

O42 - Logiciel: kgcinvt

O42 - Logiciel: kgckids

O42 - Logiciel: kgcmove

O42 - Logiciel: kgcvday

O42 - Logiciel: la version française 1.28-F34 de K9

O42 - Logiciel: medfiltr

O42 - Logiciel: mobile PhoneTools

O42 - Logiciel: netbrdg

O42 - Logiciel: skin0001

O42 - Logiciel: staticcr

O42 - Logiciel: tooltips

 

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory ----D- D:\Program Files\Adobe

O43 - CFD:Common File Directory ----D- D:\Program Files\Agnitum

O43 - CFD:Common File Directory ----D- D:\Program Files\Ahead

O43 - CFD:Common File Directory ----D- D:\Program Files\AIST

O43 - CFD:Common File Directory ----D- D:\Program Files\Alias

O43 - CFD:Common File Directory ----D- D:\Program Files\Alwil Software

O43 - CFD:Common File Directory ----D- D:\Program Files\Analog Devices

O43 - CFD:Common File Directory ----D- D:\Program Files\Apple Software Update

O43 - CFD:Common File Directory ----D- D:\Program Files\ArcSoft

O43 - CFD:Common File Directory ----D- D:\Program Files\AVG

O43 - CFD:Common File Directory ----D- D:\Program Files\Avidemux 2.5

O43 - CFD:Common File Directory ----D- D:\Program Files\AVS4YOU

O43 - CFD:Common File Directory ----D- D:\Program Files\Belarc

O43 - CFD:Common File Directory ----D- D:\Program Files\BFG

O43 - CFD:Common File Directory ----D- D:\Program Files\Bonjour

O43 - CFD:Common File Directory ----D- D:\Program Files\Caere

O43 - CFD:Common File Directory ----D- D:\Program Files\Canon

O43 - CFD:Common File Directory ----D- D:\Program Files\CCleaner

O43 - CFD:Common File Directory ----D- D:\Program Files\CodeStuff

O43 - CFD:Common File Directory ----D- D:\Program Files\ComPlus Applications

O43 - CFD:Common File Directory ----D- D:\Program Files\Dassault Systemes

O43 - CFD:Common File Directory ----D- D:\Program Files\Defraggler

O43 - CFD:Common File Directory ----D- D:\Program Files\DELL

O43 - CFD:Common File Directory ----D- D:\Program Files\DivX

O43 - CFD:Common File Directory ----D- D:\Program Files\DWGeditor

O43 - CFD:Common File Directory ----D- D:\Program Files\eMule

O43 - CFD:Common File Directory ----D- D:\Program Files\EPSON

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers communs

O43 - CFD:Common File Directory ----D- D:\Program Files\FileZilla FTP Client

O43 - CFD:Common File Directory ----D- D:\Program Files\FormatFactory

O43 - CFD:Common File Directory ----D- D:\Program Files\Free FLV Converter

O43 - CFD:Common File Directory ----D- D:\Program Files\FreeTime

O43 - CFD:Common File Directory ----D- D:\Program Files\Google

O43 - CFD:Common File Directory ----D- D:\Program Files\Illustrate

O43 - CFD:Common File Directory --H-D- D:\Program Files\InstallShield Installation Information

O43 - CFD:Common File Directory ----D- D:\Program Files\Internet Explorer

O43 - CFD:Common File Directory ----D- D:\Program Files\iTunes

O43 - CFD:Common File Directory ----D- D:\Program Files\Java

O43 - CFD:Common File Directory ----D- D:\Program Files\Justsystem

O43 - CFD:Common File Directory ----D- D:\Program Files\K-Lite Codec Pack

O43 - CFD:Common File Directory ----D- D:\Program Files\K9-F

O43 - CFD:Common File Directory ----D- D:\Program Files\Kodak

O43 - CFD:Common File Directory ----D- D:\Program Files\Lavalys

O43 - CFD:Common File Directory ----D- D:\Program Files\LG Electronics

O43 - CFD:Common File Directory ----D- D:\Program Files\LG PC Suite II

O43 - CFD:Common File Directory ----D- D:\Program Files\LiveUpdate

O43 - CFD:Common File Directory ----D- D:\Program Files\Logitech

O43 - CFD:Common File Directory ----D- D:\Program Files\Luxor

O43 - CFD:Common File Directory ----D- D:\Program Files\ma-config.com

O43 - CFD:Common File Directory ----D- D:\Program Files\Macromedia

O43 - CFD:Common File Directory ----D- D:\Program Files\Macrovision Corporation

O43 - CFD:Common File Directory ----D- D:\Program Files\MaCuisineLapeyrePrima

O43 - CFD:Common File Directory ----D- D:\Program Files\Mahjong Quest

O43 - CFD:Common File Directory ----D- D:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD:Common File Directory ----D- D:\Program Files\Messenger

O43 - CFD:Common File Directory ----D- D:\Program Files\metagenia

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft ActiveSync

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Baseline Security Analyzer

O43 - CFD:Common File Directory ----D- D:\Program Files\microsoft frontpage

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Office

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Office Outlook Connector

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Silverlight

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Sync Framework

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Visual Studio

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Visual Studio .NET

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Visual Studio .NET 2003

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft Visual Studio 8

O43 - CFD:Common File Directory ----D- D:\Program Files\Microsoft.NET

O43 - CFD:Common File Directory ----D- D:\Program Files\mobile PhoneTools

O43 - CFD:Common File Directory ----D- D:\Program Files\Movie Maker

O43 - CFD:Common File Directory ----D- D:\Program Files\Mozilla Firefox

O43 - CFD:Common File Directory ----D- D:\Program Files\Mozilla Thunderbird

O43 - CFD:Common File Directory ----D- D:\Program Files\MSBuild

O43 - CFD:Common File Directory ----D- D:\Program Files\MSECache

O43 - CFD:Common File Directory ----D- D:\Program Files\MSN

O43 - CFD:Common File Directory ----D- D:\Program Files\MSN Gaming Zone

O43 - CFD:Common File Directory ----D- D:\Program Files\MSXML 4.0

O43 - CFD:Common File Directory ----D- D:\Program Files\MyDefrag v4.2.4

O43 - CFD:Common File Directory ----D- D:\Program Files\NetMeeting

O43 - CFD:Common File Directory ----D- D:\Program Files\Nikon

O43 - CFD:Common File Directory ----D- D:\Program Files\NOS

O43 - CFD:Common File Directory ----D- D:\Program Files\Orange

O43 - CFD:Common File Directory ----D- D:\Program Files\Outlook Express

O43 - CFD:Common File Directory ----D- D:\Program Files\Panasonic

O43 - CFD:Common File Directory ----D- D:\Program Files\Passware

O43 - CFD:Common File Directory ----D- D:\Program Files\PC Inspector File Recovery

O43 - CFD:Common File Directory ----D- D:\Program Files\QuickTime

O43 - CFD:Common File Directory ----D- D:\Program Files\Recuva

O43 - CFD:Common File Directory ----D- D:\Program Files\Reference Assemblies

O43 - CFD:Common File Directory ----D- D:\Program Files\ReflexiveArcade

O43 - CFD:Common File Directory ----D- D:\Program Files\Roxio

O43 - CFD:Common File Directory ----D- D:\Program Files\Runtime Software

O43 - CFD:Common File Directory ----D- D:\Program Files\Services en ligne

O43 - CFD:Common File Directory ----D- D:\Program Files\Sharp Corporation

O43 - CFD:Common File Directory ----D- D:\Program Files\Siemens Data Suite

O43 - CFD:Common File Directory ----D- D:\Program Files\SIW

O43 - CFD:Common File Directory ----D- D:\Program Files\SolidWorks

O43 - CFD:Common File Directory ----D- D:\Program Files\Sony

O43 - CFD:Common File Directory ----D- D:\Program Files\Spybot - Search & Destroy

O43 - CFD:Common File Directory ----D- D:\Program Files\Sun

O43 - CFD:Common File Directory ----D- D:\Program Files\Sunbelt Software

O43 - CFD:Common File Directory ----D- D:\Program Files\TmNationsForever

O43 - CFD:Common File Directory ----D- D:\Program Files\trend micro

O43 - CFD:Common File Directory ----D- D:\Program Files\UBISOFT

O43 - CFD:Common File Directory --H-D- D:\Program Files\Uninstall Information

O43 - CFD:Common File Directory ----D- D:\Program Files\Unlocker

O43 - CFD:Common File Directory ----D- D:\Program Files\VideoLAN

O43 - CFD:Common File Directory ----D- D:\Program Files\VS Revo Group

O43 - CFD:Common File Directory ----D- D:\Program Files\Vsk5Online

O43 - CFD:Common File Directory ----D- D:\Program Files\VSO

O43 - CFD:Common File Directory ----D- D:\Program Files\Wanadoo

O43 - CFD:Common File Directory ----D- D:\Program Files\WIDCOMM

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Desktop Search

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Live

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Live SkyDrive

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Media Connect 2

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Media Player

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows NT

O43 - CFD:Common File Directory ----D- D:\Program Files\Windows Password Recovery Bootdisk

O43 - CFD:Common File Directory ----D- D:\Program Files\WinRAR

O43 - CFD:Common File Directory ----D- D:\Program Files\xerox

O43 - CFD:Common File Directory ----D- D:\Program Files\ZebHelpProcess

O43 - CFD:Common File Directory ----D- D:\Program Files\ZHPDiag

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Adobe

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Agnitum Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Ahead

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Alias Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Apple

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\ArcSoft

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\AVSMedia

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Borland Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Caere

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\DivX Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\eDrawings2007

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\EPSON

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\France Telecom

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\InstallShield

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Java

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Kodak

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\L&H

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Logitech

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Macromedia

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\MSSoap

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Nikon

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\ODBC

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Roxio Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Services

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Solidworks Data

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\SolidWorks Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Sony Shared

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\System

O43 - CFD:Common File Directory ----D- D:\Program Files\Fichiers Communs\Windows Live

O43 - CFD:Common File Directory -SH-D- D:\Program Files\Fichiers Communs\WindowsLiveInstaller

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.00000000000000000000000000000000] - 16/01/2010 - 10:12:06 ---A- D:\WINDOWS\WindowsUpdate.log

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/01/2010 - 10:10:36 ---A- D:\WINDOWS\0.log

O44 - LFC:[MD5.00000000000000000000000000000000] - 16/01/2010 - 10:10:35 ---A- D:\WINDOWS\wiadebug.log

O44 - LFC:[MD5.00000000000000000000000000000000] - 16/01/2010 - 10:10:18 ---A- D:\WINDOWS\wiaservc.log

O44 - LFC:[MD5.DEF0104B2A16F5C592C05E869EE67A75] - 16/01/2010 - 10:09:30 ---A- D:\WINDOWS\System32\wpa.dbl

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 16/01/2010 - 10:09:26 -S-A- D:\WINDOWS\bootstat.dat

O44 - LFC:[MD5.00000000000000000000000000000000] - 16/01/2010 - 00:45:30 ---A- D:\WINDOWS\SchedLgU.Txt

O44 - LFC:[MD5.636D3342DBCC8408067068909ABFA276] - 16/01/2010 - 00:32:40 ---A- D:\Raccourci vers Disque local ©.lnk

O44 - LFC:[MD5.1037B278138865ED6F88A536ECA5C066] - 15/01/2010 - 17:31:36 ---A- D:\WINDOWS\iTouch.ini

O44 - LFC:[MD5.229B3B28E206BAE16A9B37C172ADB5CE] - 15/01/2010 - 15:10:50 ---A- D:\WINDOWS\setupapi.log

O44 - LFC:[MD5.CD2D63BCCCED9B9B7223B84106740DEE] - 15/01/2010 - 07:21:11 ---A- D:\WINDOWS\System32\PerfStringBackup.INI

O44 - LFC:[MD5.292A19F59E2C2A581E5AE4A5AAEDA1A1] - 15/01/2010 - 07:21:11 ---A- D:\WINDOWS\System32\perfc009.dat

O44 - LFC:[MD5.DEFE546F4B36DC2BF17421D9000C3C90] - 15/01/2010 - 07:21:11 ---A- D:\WINDOWS\System32\perfc00C.dat

O44 - LFC:[MD5.EC31620ACCE6726428C7A073C3AF2C3D] - 15/01/2010 - 07:21:11 ---A- D:\WINDOWS\System32\perfh009.dat

O44 - LFC:[MD5.DFDDCF9C153B4561785EC4C1F1818A8D] - 15/01/2010 - 07:21:11 ---A- D:\WINDOWS\System32\perfh00C.dat

O44 - LFC:[MD5.58B67950A651CA88CBE5B829B48DFB2A] - 10/01/2010 - 09:12:18 ---A- D:\WINDOWS\OP70.INI

O44 - LFC:[MD5.346D387D91C2BD71694FC4F6232A4055] - 06/01/2010 - 13:34:23 ---A- D:\WINDOWS\System32\SpoonUninstall.exe

O44 - LFC:[MD5.6626F8DF052DF5252673E9380CEEFEC8] - 05/01/2010 - 01:17:46 ---A- D:\WINDOWS\System32\MRT.exe

O44 - LFC:[MD5.5C35ADBF2F214921FCAB452287EA5457] - 29/12/2009 - 07:47:24 ---A- D:\WINDOWS\win.ini

O44 - LFC:[MD5.3C5EE698A52A3594D98DD70031A44549] - 29/12/2009 - 07:46:51 ---A- D:\WINDOWS\mmproxy_40.mdb

O44 - LFC:[MD5.5BCDF58A969E0527E6DAFBF9ECE8EC49] - 28/12/2009 - 08:58:41 ---A- D:\WINDOWS\System32\jupdate-1.6.0_17-b04.log

O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 27/12/2009 - 16:33:50 ---A- D:\WINDOWS\WMSysPr9.prx

O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 27/12/2009 - 16:33:02 ---A- D:\WINDOWS\System32\amcompat.tlb

O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 27/12/2009 - 16:33:01 ---A- D:\WINDOWS\System32\nscompat.tlb

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

O46 - SEH:ShellExecuteHooks - Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - D:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll

 

---\\ Export de clé d'application autorisée (ECAA)(O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export SP - "D:\Documents and Settings\Bull51\temp\TeamViewer\Version4\TeamViewer.exe"="D:\Documents and Settings\Bull51\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Application de pilotage à distance TeamViewer"

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

 

---\\ Déni du service (Local Security Authority) (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages - D:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages - D:\WINDOWS\System32\scecli.dll

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

---\\ Trojan Driver Search Data (TDSD) (O52)

O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"

O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm"

O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.I420"="msh263.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg723"="msg723.acm"

O52 - TDSD:HKLM\...\Drivers32\"vidc.M263"="msh263.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.M261"="msh261.drv"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="D:\WINDOWS\system32\l3codeca.acm"

O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"SENTINEL"="snti386.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.yv12"="DivX.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.dvsd"="pdvcodec.dll"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.XVID"="xvidvfw.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.ac3acm"="ac3acm.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.lameacm"="lameACM.acm"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.FFDS"="ff_vfw.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.DIVX"="DivX.dll"

O52 - TDSD:HKLM\...\drivers.desc\"msaud32.acm"="Windows Media Audio Codec"

O52 - TDSD:HKLM\...\drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec"

O52 - TDSD:HKLM\...\drivers.desc\"D:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"

O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="SoundMAX Integrated Digital Audio"

O52 - TDSD:HKLM\...\drivers.desc\"snti386.dll"="Sentinel for i386 Systems"

O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"

O52 - TDSD:HKLM\...\drivers.desc\"l3codecp.acm"="Fraunhofer IIS MPEG Layer-3 Codec"

O52 - TDSD:HKLM\...\drivers.desc\"pdvcodec.dll"="DV Video Codec"

O52 - TDSD:HKLM\...\drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2"

O52 - TDSD:HKLM\...\drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2"

O52 - TDSD:HKLM\...\drivers.desc\"ac3acm.acm"="AC-3 ACM Codec"

O52 - TDSD:HKLM\...\drivers.desc\"ff_vfw.dll"="ffdshow video encoder"

O52 - TDSD:HKLM\...\drivers.desc\"DivX.dll"="DivX 6.7.0 Codec"

 

---\\ Microsoft Control Security Providers (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

 

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0

 

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=

O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=1

 

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:[MD5.2CCFA74242741CA22A4267CCE9B586F4] - 25/11/2009 - 00:47:54 ---A- D:\WINDOWS\system32\drivers\aavmker4.sys

O58 - SDL:[MD5.E5E6DBFC41EA8AAD005CB9A57A96B43B] - 14/04/2008 - 02:52:42 ---A- D:\WINDOWS\system32\drivers\acpi.sys

O58 - SDL:[MD5.E4ABC1212B70BB03D35E60681C447210] - 18/09/2002 - 16:22:05 ---A- D:\WINDOWS\system32\drivers\acpiec.sys

O58 - SDL:[MD5.11C04B17ED2ABBB4833694BCD644AC90] - 01/04/2002 - 12:15:00 ---A- D:\WINDOWS\system32\drivers\aeaudio.sys

O58 - SDL:[MD5.8BED39E3C35D6A489438B8141717A557] - 13/04/2008 - 17:39:23 ---A- D:\WINDOWS\system32\drivers\aec.sys

O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 14:58:56 ---A- D:\WINDOWS\system32\drivers\afc.sys

O58 - SDL:[MD5.7E775010EF291DA96AD17CA4B17137D7] - 14/08/2008 - 11:04:36 ---A- D:\WINDOWS\system32\drivers\afd.sys

O58 - SDL:[MD5.C6C0F974AB7E825813F8E6B4E5581750] - 14/04/2008 - 02:54:28 ---A- D:\WINDOWS\system32\drivers\amdk6.sys

O58 - SDL:[MD5.D3DABC57BE6D456DFD4BC026CFA582FF] - 14/04/2008 - 02:54:29 ---A- D:\WINDOWS\system32\drivers\amdk7.sys

O58 - SDL:[MD5.B5B8A80875C1DEDEDA8B02765642C32F] - 13/04/2008 - 19:51:25 ---A- D:\WINDOWS\system32\drivers\arp1394.sys

O58 - SDL:[MD5.B4079A98F294A3E262872CB76F4849F0] - 15/09/2009 - 11:55:19 ---A- D:\WINDOWS\system32\drivers\aswFsBlk.sys

O58 - SDL:[MD5.F5296ECFCBFE5935253AE6C29E6D086E] - 25/11/2009 - 00:51:09 ---A- D:\WINDOWS\system32\drivers\aswmon.sys

O58 - SDL:[MD5.DBEE7B5ECB50FC2CF9323F52CBF41141] - 15/09/2009 - 11:56:14 ---A- D:\WINDOWS\system32\drivers\aswmon2.sys

O58 - SDL:[MD5.2E5A2AD5004B55DF39B7606130A88142] - 15/09/2009 - 11:55:30 ---A- D:\WINDOWS\system32\drivers\aswSP.sys

O58 - SDL:[MD5.B153AFFAC761E7F5FCFA822B9C4E97BC] - 13/04/2008 - 19:57:27 ---A- D:\WINDOWS\system32\drivers\asyncmac.sys

O58 - SDL:[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 13/04/2008 - 19:40:30 ---A- D:\WINDOWS\system32\drivers\atapi.sys

O58 - SDL:[MD5.9916C1225104BA14794209CFA8012159] - 13/04/2008 - 19:51:25 ---A- D:\WINDOWS\system32\drivers\atmarpc.sys

O58 - SDL:[MD5.39A0A59180F19946374275745B21AEBA] - 18/09/2002 - 16:22:12 ---A- D:\WINDOWS\system32\drivers\atmepvc.sys

O58 - SDL:[MD5.AE76348A2605FB197FA8FF1D6F547836] - 13/04/2008 - 19:51:30 ---A- D:\WINDOWS\system32\drivers\atmlane.sys

O58 - SDL:[MD5.E7EF69B38D17BA01F914AE8F66216A38] - 18/09/2002 - 16:22:13 ---A- D:\WINDOWS\system32\drivers\atmuni.sys

O58 - SDL:[MD5.D9F724AA26C010A217C97606B160ED68] - 17/08/2001 - 21:59:44 ---A- D:\WINDOWS\system32\drivers\audstub.sys

O58 - SDL:[MD5.5D7BE7B19E827125E016325334E58FF1] - 06/03/2008 - 11:51:14 ---A- D:\WINDOWS\system32\drivers\BANTExt.sys

O58 - SDL:[MD5.CE218C09CAF41537CEB5A872A019A7E2] - 13/03/2002 - 14:20:02 ---A- D:\WINDOWS\system32\drivers\BASFND.sys

O58 - SDL:[MD5.3292260A6AE8F328C7EF698B6EBD56E2] - 15/11/2002 - 11:15:08 ---A- D:\WINDOWS\system32\drivers\bcbthub.sys

O58 - SDL:[MD5.DA1F27D85E0D1525F6621372E7B685E9] - 18/09/2002 - 16:22:15 ---A- D:\WINDOWS\system32\drivers\beep.sys

O58 - SDL:[MD5.F934D1B230F84E1D19DD00AC5A7A83ED] - 13/04/2008 - 19:53:23 ---A- D:\WINDOWS\system32\drivers\bridge.sys

O58 - SDL:[MD5.377A0B30EDAEF799D43A9676748E118E] - 01/07/2003 - 11:19:20 ---A- D:\WINDOWS\system32\drivers\btaudio.sys

O58 - SDL:[MD5.9DF0ADF74CE1D6371ED60CF92EB1D9A6] - 04/08/2004 - 07:10:38 ---A- D:\WINDOWS\system32\drivers\bthmodem.sys

O58 - SDL:[MD5.58A9FCBB9D3307C27BAE4F39009FFB87] - 29/07/2003 - 14:43:44 ---A- D:\WINDOWS\system32\drivers\btkrnl.sys

O58 - SDL:[MD5.ED6B3D61578B996C55F32ACE07618BBB] - 01/07/2003 - 11:20:38 ---A- D:\WINDOWS\system32\drivers\btport.sys

O58 - SDL:[MD5.CBF5A79F3D2177E80CA79C2BC20119DB] - 01/07/2003 - 11:29:10 ---A- D:\WINDOWS\system32\drivers\btserial.sys

O58 - SDL:[MD5.26FA6F56CE3152505D8A44CDEABE002F] - 01/07/2003 - 11:28:46 ---A- D:\WINDOWS\system32\drivers\btslbcsp.sys

O58 - SDL:[MD5.899B4C1EFBD86B71076CCBC15FC7EDDC] - 01/07/2003 - 11:45:02 ---A- D:\WINDOWS\system32\drivers\btwdndis.sys

O58 - SDL:[MD5.90A673FC8E12A79AFBED2576F6A7AAF9] - 18/09/2002 - 16:22:21 ---A- D:\WINDOWS\system32\drivers\cbidf2k.sys

O58 - SDL:[MD5.C1B486A7658353D33A10CC15211A873B] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\cdaudio.sys

O58 - SDL:[MD5.C885B02847F5D2FD45A24E219ED93B32] - 13/04/2008 - 20:14:21 ---A- D:\WINDOWS\system32\drivers\cdfs.sys

O58 - SDL:[MD5.BF79E659C506674C0497CC9C61F1A165] - 18/10/2006 - 02:00:00 ---A- D:\WINDOWS\system32\drivers\cdr4_xp.sys

O58 - SDL:[MD5.2C41CD49D82D5FD85C72D57B6CA25471] - 18/10/2006 - 02:00:00 ---A- D:\WINDOWS\system32\drivers\cdralw2k.sys

O58 - SDL:[MD5.E0042BD5BEF17A6A3EF1DF576BDE24D1] - 20/02/2006 - 19:17:40 ---A- D:\WINDOWS\system32\drivers\cdrbsdrv.sys

O58 - SDL:[MD5.1F4260CC5B42272D71F79E570A27A4FE] - 13/04/2008 - 19:40:46 ---A- D:\WINDOWS\system32\drivers\cdrom.sys

O58 - SDL:[MD5.AD486DA4FAA4448E6827B18E377F6ACB] - 27/02/2003 - 03:36:06 ---A- D:\WINDOWS\system32\drivers\Cdudf_xp.sys

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\cinemst2.sys

O58 - SDL:[MD5.FE47DD8FE6D7768FF94EBEC6C74B2719] - 13/04/2008 - 20:16:22 ---A- D:\WINDOWS\system32\drivers\classpnp.sys

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\cpqdap01.sys

O58 - SDL:[MD5.D68AE021109A74E491B83F3F69FB92CD] - 14/04/2008 - 03:02:47 ---A- D:\WINDOWS\system32\drivers\crusoe.sys

O58 - SDL:[MD5.044452051F3E02E7963599FC8F4F3E25] - 13/04/2008 - 19:40:47 ---A- D:\WINDOWS\system32\drivers\disk.sys

O58 - SDL:[MD5.E65E2353A5D74EA89971CB918EEEB2F6] - 13/04/2008 - 19:40:44 ---A- D:\WINDOWS\system32\drivers\diskdump.sys

O58 - SDL:[MD5.F5DEADD42335FB33EDCA74ECB2F36CBA] - 14/04/2008 - 03:05:07 ---A- D:\WINDOWS\system32\drivers\dmboot.sys

O58 - SDL:[MD5.5A7C47C9B3F9FB92A66410A7509F0C71] - 14/04/2008 - 03:05:12 ---A- D:\WINDOWS\system32\drivers\dmio.sys

O58 - SDL:[MD5.E9317282A63CA4D188C0DF5E09C6AC5F] - 18/09/2002 - 16:22:57 ---A- D:\WINDOWS\system32\drivers\dmload.sys

O58 - SDL:[MD5.8A208DFCF89792A484E76C40E5F50B45] - 13/04/2008 - 19:45:01 ---A- D:\WINDOWS\system32\drivers\dmusic.sys

O58 - SDL:[MD5.6CB08593487F5701D2D2254E693EAFCE] - 13/04/2008 - 19:45:14 ---A- D:\WINDOWS\system32\drivers\drmk.sys

O58 - SDL:[MD5.8F5FCFF8E8848AFAC920905FBD9D33C8] - 13/04/2008 - 19:45:13 ---A- D:\WINDOWS\system32\drivers\drmkaud.sys

O58 - SDL:[MD5.0E29AD39B2896BD0530A65109DE6A375] - 18/06/2001 - 08:44:20 ---A- D:\WINDOWS\system32\drivers\ds1410d.sys

O58 - SDL:[MD5.5438D49873EAC6DE7D336D7BE7DBF6DB] - 27/02/2003 - 03:36:06 ---A- D:\WINDOWS\system32\drivers\Dvd_2k.sys

O58 - SDL:[MD5.FE97D0343ACFDEBDD578FC67CC91FA87] - 18/09/2002 - 16:23:16 ---A- D:\WINDOWS\system32\drivers\dxapi.sys

O58 - SDL:[MD5.AC7280566A7BB85CB3291F04DDC1198E] - 13/04/2008 - 19:38:29 ---A- D:\WINDOWS\system32\drivers\dxg.sys

O58 - SDL:[MD5.A73F5D6705B1D820C19B18782E176EFD] - 18/09/2002 - 16:23:16 ---A- D:\WINDOWS\system32\drivers\dxgthk.sys

O58 - SDL:[MD5.D57A8FC800B501AC05B10D00F66D127A] - 13/06/2005 - 12:58:04 ---A- D:\WINDOWS\system32\drivers\e100b325.sys

O58 - SDL:[MD5.1A26DA5FC7BE1C822E52C7E21BAC2DEB] - 18/02/2002 - 20:22:14 ---A- D:\WINDOWS\system32\drivers\fad.sys

O58 - SDL:[MD5.38D332A6D56AF32635675F132548343E] - 13/04/2008 - 20:14:29 ---A- D:\WINDOWS\system32\drivers\fastfat.sys

O58 - SDL:[MD5.92CDD60B6730B9F50F6A1A0C1F8CDC81] - 13/04/2008 - 19:40:25 ---A- D:\WINDOWS\system32\drivers\fdc.sys

O58 - SDL:[MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - 02:57:38 ---A- D:\WINDOWS\system32\drivers\fips.sys

O58 - SDL:[MD5.9D27E7B80BFCDF1CDD9B555862D5E7F0] - 13/04/2008 - 19:40:25 ---A- D:\WINDOWS\system32\drivers\flpydisk.sys

O58 - SDL:[MD5.C6EE3A87FE609D3E1DB9DBD072A248DE] - 05/08/2009 - 22:48:42 ---A- D:\WINDOWS\system32\drivers\fssfltr_tdi.sys

O58 - SDL:[MD5.B71A69BB9CC88803F455341BD3992E0C] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\fsvga.sys

O58 - SDL:[MD5.3E1E2BD4F39B0E2B7DC4F4D2BCC2779A] - 18/09/2002 - 16:23:31 ---A- D:\WINDOWS\system32\drivers\fs_rec.sys

O58 - SDL:[MD5.A86859B77B908C18C2657F284AA29FE3] - 18/09/2002 - 16:23:31 ---A- D:\WINDOWS\system32\drivers\ftdisk.sys

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 14:17:00 ---A- D:\WINDOWS\system32\drivers\GEARAspiWDM.sys

O58 - SDL:[MD5.D64A40B94602158E40527AE95E7A9193] - 05/11/2004 - 11:08:06 ---A- D:\WINDOWS\system32\drivers\hardlock.sys

O58 - SDL:[MD5.2DD25F060DC9F79B5CDF33D90ED93669] - 30/11/2008 - 23:49:27 ---A- D:\WINDOWS\system32\drivers\Haspnt.sys

O58 - SDL:[MD5.1AF592532532A402ED7C060F6954004F] - 13/04/2008 - 19:45:26 ---A- D:\WINDOWS\system32\drivers\hidclass.sys

O58 - SDL:[MD5.96ECCF28FDBF1B2CC12725818A63628D] - 13/04/2008 - 19:45:22 ---A- D:\WINDOWS\system32\drivers\hidparse.sys

O58 - SDL:[MD5.CCF82C5EC8A7326C3066DE870C06DAF1] - 13/04/2008 - 19:45:27 ---A- D:\WINDOWS\system32\drivers\hidusb.sys

O58 - SDL:[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - 04:00:52 ---A- D:\WINDOWS\system32\drivers\i8042prt.sys

O58 - SDL:[MD5.44CF518D68E6F92526415159718DB6C4] - 06/10/2003 - 07:41:16 ---A- D:\WINDOWS\system32\drivers\imagedrv.sys

O58 - SDL:[MD5.BA37504807A4558630813B000DC6C839] - 06/10/2003 - 07:41:18 ---A- D:\WINDOWS\system32\drivers\imagesrv.sys

O58 - SDL:[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 13/04/2008 - 19:40:58 ---A- D:\WINDOWS\system32\drivers\imapi.sys

O58 - SDL:[MD5.FCAB28FFD3A8964581E16455EFAF81C8] - 06/05/2005 - 13:42:26 ---A- D:\WINDOWS\system32\drivers\IntelC51.sys

O58 - SDL:[MD5.A288E7E3A6255255B9066686D860FBC5] - 01/03/2006 - 19:30:54 ---A- D:\WINDOWS\system32\drivers\IntelC52.sys

O58 - SDL:[MD5.D5E5A1ABF6BDBA7CA49941A044F04598] - 06/05/2005 - 13:40:50 ---A- D:\WINDOWS\system32\drivers\IntelC53.sys

O58 - SDL:[MD5.731F22BA402EE4B62748ADAF6363C182] - 18/09/2002 - 16:24:12 ---A- D:\WINDOWS\system32\drivers\ipfltdrv.sys

O58 - SDL:[MD5.B87AB476DCF76E72010632B5550955F5] - 13/04/2008 - 19:57:07 ---A- D:\WINDOWS\system32\drivers\ipinip.sys

O58 - SDL:[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 13/04/2008 - 19:57:15 ---A- D:\WINDOWS\system32\drivers\ipnat.sys

O58 - SDL:[MD5.23C74D75E36E7158768DD63D92789A91] - 13/04/2008 - 20:19:42 ---A- D:\WINDOWS\system32\drivers\ipsec.sys

O58 - SDL:[MD5.C93C9FF7B04D772627A3646D89F7BF89] - 13/04/2008 - 19:54:28 ---A- D:\WINDOWS\system32\drivers\irenum.sys

O58 - SDL:[MD5.355836975A67B6554BCA60328CD6CB74] - 14/04/2008 - 03:04:35 ---A- D:\WINDOWS\system32\drivers\isapnp.sys

O58 - SDL:[MD5.8F1BA487B35F0C8F637E05113AA815F8] - 10/03/2004 - 13:42:24 ---A- D:\WINDOWS\system32\drivers\itchfltr.sys

O58 - SDL:[MD5.16813155807C6881F4BFBF6657424659] - 14/04/2008 - 04:05:14 ---A- D:\WINDOWS\system32\drivers\kbdclass.sys

O58 - SDL:[MD5.94C59CB884BA010C063687C3A50DCE8E] - 14/04/2008 - 03:05:15 ---A- D:\WINDOWS\system32\drivers\kbdhid.sys

O58 - SDL:[MD5.692BCF44383D056AED41B045A323D378] - 13/04/2008 - 19:45:09 ---A- D:\WINDOWS\system32\drivers\kmixer.sys

O58 - SDL:[MD5.0753515F78DF7F271A5E61C20BCD36A1] - 13/04/2008 - 20:16:36 ---A- D:\WINDOWS\system32\drivers\ks.sys

O58 - SDL:[MD5.B467646C54CC746128904E1654C750C1] - 24/06/2009 - 12:18:41 ---A- D:\WINDOWS\system32\drivers\ksecdd.sys

O58 - SDL:[MD5.733ECECF4371AC99410EE0F00BFD51E7] - 08/11/2002 - 10:50:00 ---A- D:\WINDOWS\system32\drivers\L8042pr2.Sys

O58 - SDL:[MD5.54FEC13B60914784AA06685F352AED70] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdbus.sys

O58 - SDL:[MD5.4E8EDAF3D265EFD466B35B1B13CDFBCE] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdcm.sys

O58 - SDL:[MD5.4E8EDAF3D265EFD466B35B1B13CDFBCE] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdcmnt.sys

O58 - SDL:[MD5.97B52613F0B621FC9EAE007668DA7B01] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdmdfl.sys

O58 - SDL:[MD5.B9CC203836509083D8BE07B6A5B40862] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdmdm.sys

O58 - SDL:[MD5.B5E3263CA8173F9619075898DF5D4718] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdmgmt.sys

O58 - SDL:[MD5.A218C22FD0C4B8AC3CE38E08D1AC9E88] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdobex.sys

O58 - SDL:[MD5.37F3D6D2B73E53033F74B05E31C64D38] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdwh.sys

O58 - SDL:[MD5.37F3D6D2B73E53033F74B05E31C64D38] - 08/07/2008 - 13:55:56 ---A- D:\WINDOWS\system32\drivers\lgmdwhnt.sys

O58 - SDL:[MD5.128F0B4CD156872D440AE77202923A32] - 08/11/2002 - 10:50:00 ---A- D:\WINDOWS\system32\drivers\LMouFlt2.Sys

O58 - SDL:[MD5.CA020DB361524D1182138EFEAA8CF8F3] - 24/04/2007 - 17:52:10 ---A- D:\WINDOWS\system32\drivers\LUMDriver.sys

O58 - SDL:[MD5.2A292EBC65745181352F514FA55AA177] - 03/12/2009 - 16:13:56 ---A- D:\WINDOWS\system32\drivers\mbam.sys

O58 - SDL:[MD5.376C6F143BDC33456F49D881742D663C] - 03/12/2009 - 16:14:06 ---A- D:\WINDOWS\system32\drivers\mbamswissarmy.sys

O58 - SDL:[MD5.D1F8BE91ED4DDB671D42E473E3FE71AB] - 18/09/2002 - 16:25:03 ---A- D:\WINDOWS\system32\drivers\mcd.sys

O58 - SDL:[MD5.F1B8B6ACEB55C84508174715AF37BD9B] - 19/05/2003 - 09:05:50 ---A- D:\WINDOWS\system32\drivers\MDSHA031.sys

O58 - SDL:[MD5.A7DA20AB18A1BDAE28B0F349E57DA0D1] - 13/04/2008 - 19:36:41 ---A- D:\WINDOWS\system32\drivers\mf.sys

O58 - SDL:[MD5.E9DC68BF135238485703AD9B045DE0DA] - 27/02/2003 - 03:36:06 ---A- D:\WINDOWS\system32\drivers\Mmc_2k.sys

O58 - SDL:[MD5.4AE068242760A1FB6E1A44BF4E16AFA6] - 18/09/2002 - 16:25:46 ---A- D:\WINDOWS\system32\drivers\mnmdd.sys

O58 - SDL:[MD5.510ADE9327FE84C10254E1902697E25F] - 14/04/2008 - 02:53:05 ---A- D:\WINDOWS\system32\drivers\modem.sys

O58 - SDL:[MD5.C6A08C4F34B3048A73BBB2951150F98D] - 06/05/2005 - 13:40:20 ---A- D:\WINDOWS\system32\drivers\mohfilt.sys

O58 - SDL:[MD5.027C01BD7EF3349AAEBC883D8A799EFB] - 14/04/2008 - 02:53:18 ---A- D:\WINDOWS\system32\drivers\mouclass.sys

O58 - SDL:[MD5.124D6846040C79B9C997F78EF4B2A4E5] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\mouhid.sys

O58 - SDL:[MD5.A80B9A0BAD1B73637DBCBBA7DF72D3FD] - 13/04/2008 - 19:39:46 ---A- D:\WINDOWS\system32\drivers\mountmgr.sys

O58 - SDL:[MD5.11D42BB6206F33FBB3BA0288D3EF81BD] - 13/04/2008 - 19:32:44 ---A- D:\WINDOWS\system32\drivers\mrxdav.sys

O58 - SDL:[MD5.60AE98742484E7AB80C3C1450E708148] - 24/10/2008 - 12:21:09 ---A- D:\WINDOWS\system32\drivers\mrxsmb.sys

O58 - SDL:[MD5.C941EA2454BA8350021D774DAF0F1027] - 13/04/2008 - 19:32:39 ---A- D:\WINDOWS\system32\drivers\msfs.sys

O58 - SDL:[MD5.0A02C63C8B144BD8C86B103DEE7C86A2] - 13/04/2008 - 19:56:32 ---A- D:\WINDOWS\system32\drivers\msgpc.sys

O58 - SDL:[MD5.D1575E71568F4D9E14CA56B7B0453BF1] - 13/04/2008 - 19:39:52 ---A- D:\WINDOWS\system32\drivers\mskssrv.sys

O58 - SDL:[MD5.325BB26842FC7CCC1FCCE2C457317F3E] - 13/04/2008 - 19:39:50 ---A- D:\WINDOWS\system32\drivers\mspclock.sys

O58 - SDL:[MD5.BAD59648BA099DA4A17680B39730CB3D] - 13/04/2008 - 19:39:51 ---A- D:\WINDOWS\system32\drivers\mspqm.sys

O58 - SDL:[MD5.2F625D11385B1A94360BFC70AAEFDEE1] - 13/04/2008 - 20:17:05 ---A- D:\WINDOWS\system32\drivers\mup.sys

O58 - SDL:[MD5.1DF7F42665C94B825322FAE71721130D] - 13/04/2008 - 20:20:37 ---A- D:\WINDOWS\system32\drivers\ndis.sys

O58 - SDL:[MD5.1AB3D00C991AB086E69DB84B6C0ED78F] - 13/04/2008 - 19:57:27 ---A- D:\WINDOWS\system32\drivers\ndistapi.sys

O58 - SDL:[MD5.F927A4434C5028758A842943EF1A3849] - 13/04/2008 - 19:55:58 ---A- D:\WINDOWS\system32\drivers\ndisuio.sys

O58 - SDL:[MD5.EDC1531A49C80614B2CFDA43CA8659AB] - 13/04/2008 - 20:20:42 ---A- D:\WINDOWS\system32\drivers\ndiswan.sys

O58 - SDL:[MD5.6215023940CFD3702B46ABC304E1D45A] - 13/04/2008 - 19:57:29 ---A- D:\WINDOWS\system32\drivers\ndproxy.sys

O58 - SDL:[MD5.5D81CF9A2F1A3A756B66CF684911CDF0] - 13/04/2008 - 19:56:02 ---A- D:\WINDOWS\system32\drivers\netbios.sys

O58 - SDL:[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 13/04/2008 - 20:21:00 ---A- D:\WINDOWS\system32\drivers\netbt.sys

O58 - SDL:[MD5.E9E47CFB2D461FA0FC75B7A74C6383EA] - 13/04/2008 - 19:51:25 ---A- D:\WINDOWS\system32\drivers\nic1394.sys

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\nikedrv.sys

O58 - SDL:[MD5.1E421A6BCF2203CC61B821ADA9DE878B] - 13/04/2008 - 19:53:09 ---A- D:\WINDOWS\system32\drivers\nmnt.sys

O58 - SDL:[MD5.3182D64AE053D6FB034F44B6DEF8034A] - 13/04/2008 - 19:32:39 ---A- D:\WINDOWS\system32\drivers\npfs.sys

O58 - SDL:[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 13/04/2008 - 20:15:53 ---A- D:\WINDOWS\system32\drivers\ntfs.sys

O58 - SDL:[MD5.73C1E1F395918BC2C6DD67AF7591A3AD] - 18/09/2002 - 16:30:49 ---A- D:\WINDOWS\system32\drivers\null.sys

O58 - SDL:[MD5.B305F3FAD35083837EF46A0BBCE2FC57] - 18/09/2002 - 16:30:51 ---A- D:\WINDOWS\system32\drivers\nwlnkflt.sys

O58 - SDL:[MD5.C99B3415198D1AAB7227F2C88FD664B9] - 18/09/2002 - 16:30:51 ---A- D:\WINDOWS\system32\drivers\nwlnkfwd.sys

O58 - SDL:[MD5.8B8B1BE2DBA4025DA6786C645F77F123] - 13/04/2008 - 19:56:06 ---A- D:\WINDOWS\system32\drivers\nwlnkipx.sys

O58 - SDL:[MD5.56D34A67C05E94E16377C60609741FF8] - 18/09/2002 - 16:30:52 ---A- D:\WINDOWS\system32\drivers\nwlnknb.sys

O58 - SDL:[MD5.C0BB7D1615E1ACBDC99757F6CEAF8CF0] - 18/09/2002 - 16:30:52 ---A- D:\WINDOWS\system32\drivers\nwlnkspx.sys

O58 - SDL:[MD5.4BB30DDC53EBC76895E38694580CDFE9] - 18/09/2002 - 16:31:06 ---A- D:\WINDOWS\system32\drivers\oprghdlr.sys

O58 - SDL:[MD5.CECB679633523AC5EB7EB85F92DCD806] - 14/04/2008 - 03:09:37 ---A- D:\WINDOWS\system32\drivers\p3.sys

O58 - SDL:[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - 03:09:40 ---A- D:\WINDOWS\system32\drivers\parport.sys

O58 - SDL:[MD5.BEB3BA25197665D82EC7065B724171C6] - 13/04/2008 - 19:40:49 ---A- D:\WINDOWS\system32\drivers\partmgr.sys

O58 - SDL:[MD5.9575C5630DB8FB804649A6959737154C] - 18/09/2002 - 16:31:13 ---A- D:\WINDOWS\system32\drivers\parvdm.sys

O58 - SDL:[MD5.043410877BDA580C528F45165F7125BC] - 14/04/2008 - 03:09:47 ---A- D:\WINDOWS\system32\drivers\pci.sys

O58 - SDL:[MD5.F4BFDE7209C14A07AAA61E4D6AE69EAC] - 18/09/2002 - 16:31:15 ---A- D:\WINDOWS\system32\drivers\pciide.sys

O58 - SDL:[MD5.52E60F29221D0D1AC16737E8DBF7C3E9] - 13/04/2008 - 19:40:29 ---A- D:\WINDOWS\system32\drivers\pciidex.sys

O58 - SDL:[MD5.F0406CBC60BDB0394A0E17FFB04CDD3D] - 14/04/2008 - 03:09:53 ---A- D:\WINDOWS\system32\drivers\pcmcia.sys

O58 - SDL:[MD5.E82A496C3961EFC6828B508C310CE98F] - 13/04/2008 - 20:19:41 ---A- D:\WINDOWS\system32\drivers\portcls.sys

O58 - SDL:[MD5.E19C9632AC828F6F214391E2BDDA11CB] - 14/04/2008 - 02:55:30 ---A- D:\WINDOWS\system32\drivers\processr.sys

O58 - SDL:[MD5.09298EC810B07E5D582CB3A3F9255424] - 13/04/2008 - 19:56:38 ---A- D:\WINDOWS\system32\drivers\psched.sys

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 18/09/2002 - 16:31:48 ---A- D:\WINDOWS\system32\drivers\ptilink.sys

O58 - SDL:[MD5.D7DA4DA78005727F78CC9EB11972C712] - 27/02/2003 - 03:36:06 ---A- D:\WINDOWS\system32\drivers\pwd_2K.sys

O58 - SDL:[MD5.FE0D99D6F31E4FAD8159F690D68DED9C] - 18/09/2002 - 16:31:58 ---A- D:\WINDOWS\system32\drivers\rasacd.sys

O58 - SDL:[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 13/04/2008 - 20:19:43 ---A- D:\WINDOWS\system32\drivers\rasl2tp.sys

O58 - SDL:[MD5.5BC962F2654137C9909C3D4603587DEE] - 13/04/2008 - 19:57:32 ---A- D:\WINDOWS\system32\drivers\raspppoe.sys

O58 - SDL:[MD5.EFEEC01B1D3CF84F16DDD24D9D9D8F99] - 13/04/2008 - 20:19:48 ---A- D:\WINDOWS\system32\drivers\raspptp.sys

O58 - SDL:[MD5.FDBB1D60066FCFBB7452FD8F9829B242] - 18/09/2002 - 16:32:03 ---A- D:\WINDOWS\system32\drivers\raspti.sys

O58 - SDL:[MD5.01524CD237223B18ADBB48F70083F101] - 18/09/2002 - 16:32:05 ---A- D:\WINDOWS\system32\drivers\rawwan.sys

O58 - SDL:[MD5.7AD224AD1A1437FE28D89CF22B17780A] - 13/04/2008 - 20:28:39 ---A- D:\WINDOWS\system32\drivers\rdbss.sys

O58 - SDL:[MD5.4912D5B403614CE99C28420F75353332] - 18/09/2002 - 16:32:06 ---A- D:\WINDOWS\system32\drivers\rdpcdd.sys

O58 - SDL:[MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - 19:32:51 ---A- D:\WINDOWS\system32\drivers\rdpdr.sys

O58 - SDL:[MD5.6728E45B66F93C08F11DE2E316FC70DD] - 14/04/2008 - 03:34:54 ---A- D:\WINDOWS\system32\drivers\rdpwd.sys

O58 - SDL:[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 14/04/2008 - 02:57:34 ---A- D:\WINDOWS\system32\drivers\redbook.sys

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\rio8drv.sys

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\riodrv.sys

O58 - SDL:[MD5.96F7A9A7BF0C9C0440A967440065D33C] - 08/05/2008 - 15:02:52 ---A- D:\WINDOWS\system32\drivers\rmcast.sys

O58 - SDL:[MD5.601844CBCF617FF8C868130CA5B2039D] - 13/04/2008 - 19:56:49 ---A- D:\WINDOWS\system32\drivers\rndismp.sys

O58 - SDL:[MD5.D8B0B4ADE32574B2D9C5CC34DC0DBBE7] - 18/09/2002 - 16:32:21 ---A- D:\WINDOWS\system32\drivers\rootmdm.sys

O58 - SDL:[MD5.76C465F570E90C28942D52CCB2580A10] - 13/04/2008 - 19:40:30 ---A- D:\WINDOWS\system32\drivers\scsiport.sys

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/11/2007 - 11:25:54 ---A- D:\WINDOWS\system32\drivers\secdrv.sys

O58 - SDL:[MD5.8627C992B8A80504FC477B2E8FF8EC4F] - 21/06/2001 - 21:39:02 ---A- D:\WINDOWS\system32\drivers\SENTINEL.SYS

O58 - SDL:[MD5.0F29512CCD6BEAD730039FB4BD2C85CE] - 13/04/2008 - 19:40:12 ---A- D:\WINDOWS\system32\drivers\serenum.sys

O58 - SDL:[MD5.93D313C31F7AD9EA2B75F26075413C7C] - 14/04/2008 - 03:00:08 ---A- D:\WINDOWS\system32\drivers\serial.sys

O58 - SDL:[MD5.8E6B8C671615D126FDC553D1E2DE5562] - 13/04/2008 - 19:40:48 ---A- D:\WINDOWS\system32\drivers\sfloppy.sys

O58 - SDL:[MD5.017DAECF0ED3AA731313433601EC40FA] - 18/09/2002 - 16:33:34 ---A- D:\WINDOWS\system32\drivers\smclib.sys

O58 - SDL:[MD5.F1771926A47A18BD3A3EDAC334FC78E0] - 28/10/2002 - 10:26:06 ---A- D:\WINDOWS\system32\drivers\smsens.sys

O58 - SDL:[MD5.31FD0707C7DBE715234F2823B27214FE] - 28/02/2003 - 08:17:18 ---A- D:\WINDOWS\system32\drivers\smwdm.sys

O58 - SDL:[MD5.87F799C486302ACEFF098E067D481D9C] - 21/06/2001 - 21:39:02 R--A- D:\WINDOWS\system32\drivers\SNTNLUSB.SYS

O58 - SDL:[MD5.489703624DAC94ED943C2ABDA022A1CD] - 13/04/2008 - 19:46:07 ---A- D:\WINDOWS\system32\drivers\sonydcam.sys

O58 - SDL:[MD5.AB8B92451ECB048A4D1DE7C3FFCB4A9F] - 13/04/2008 - 19:45:07 ---A- D:\WINDOWS\system32\drivers\splitter.sys

O58 - SDL:[MD5.39626E6DC1FB39434EC40C42722B660A] - 14/04/2008 - 03:10:03 ---A- D:\WINDOWS\system32\drivers\sr.sys

O58 - SDL:[MD5.3BB03F2BA89D2BE417206C373D2AF17C] - 11/12/2008 - 11:57:09 ---A- D:\WINDOWS\system32\drivers\srv.sys

O58 - SDL:[MD5.3E5D89099DED9E86E5639F411693218F] - 13/04/2008 - 19:45:15 ---A- D:\WINDOWS\system32\drivers\stream.sys

O58 - SDL:[MD5.3941D127AEF12E93ADDF6FE6EE027E0F] - 13/04/2008 - 19:39:53 ---A- D:\WINDOWS\system32\drivers\swenum.sys

O58 - SDL:[MD5.8CE882BCC6CF8A62F2B2323D95CB3D01] - 13/04/2008 - 19:45:09 ---A- D:\WINDOWS\system32\drivers\swmidi.sys

O58 - SDL:[MD5.8B83F3ED0F1688B4958F77CD6D2BF290] - 13/04/2008 - 20:15:55 ---A- D:\WINDOWS\system32\drivers\sysaudio.sys

O58 - SDL:[MD5.FD6093E3DECD925F1CFFC8A0DD539D72] - 13/04/2008 - 19:40:50 ---A- D:\WINDOWS\system32\drivers\tape.sys

O58 - SDL:[MD5.9AEFA14BD6B182D61E3119FA5F436D3D] - 20/06/2008 - 12:51:12 ---A- D:\WINDOWS\system32\drivers\tcpip.sys

O58 - SDL:[MD5.FB9F32ACC1D3AD523F7EC900B66FC1BB] - 20/06/2008 - 12:08:27 ---A- D:\WINDOWS\system32\drivers\tcpip6.sys

O58 - SDL:[MD5.0539D5E53587F82D1B4FD74C5BE205CF] - 13/04/2008 - 20:00:05 ---A- D:\WINDOWS\system32\drivers\tdi.sys

O58 - SDL:[MD5.6471A66807F5E104E4885F5B67349397] - 14/04/2008 - 03:34:52 ---A- D:\WINDOWS\system32\drivers\tdpipe.sys

O58 - SDL:[MD5.C56B6D0402371CF3700EB322EF3AAF61] - 14/04/2008 - 03:34:53 ---A- D:\WINDOWS\system32\drivers\tdtcp.sys

O58 - SDL:[MD5.88155247177638048422893737429D9E] - 14/04/2008 - 03:34:52 ---A- D:\WINDOWS\system32\drivers\termdd.sys

O58 - SDL:[MD5.699450901C5CCFD82357CBC531CEDD23] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\tosdvd.sys

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\tsbvcap.sys

O58 - SDL:[MD5.8F861EDA21C05857EB8197300A92501C] - 13/04/2008 - 19:56:01 ---A- D:\WINDOWS\system32\drivers\tunmp.sys

O58 - SDL:[MD5.3831D5499AD1E61217ABB88E93BB17DC] - 23/02/2002 - 00:02:50 ---A- D:\WINDOWS\system32\drivers\udfreadr.sys

O58 - SDL:[MD5.AB1BB4E728D26552996662FC3A25A994] - 27/02/2003 - 03:36:06 ---A- D:\WINDOWS\system32\drivers\UdfReadr_xp.sys

O58 - SDL:[MD5.5787B80C2E3C5E2F56C2A233D91FA2C9] - 13/04/2008 - 19:32:36 ---A- D:\WINDOWS\system32\drivers\udfs.sys

O58 - SDL:[MD5.402DDC88356B1BAC0EE3DD1580C76A31] - 13/04/2008 - 19:39:46 ---A- D:\WINDOWS\system32\drivers\update.sys

O58 - SDL:[MD5.BEE793D4A059CAEA55D6AC20E19B3A8F] - 13/04/2008 - 19:56:49 ---A- D:\WINDOWS\system32\drivers\usb8023.sys

O58 - SDL:[MD5.C1CA131F4E3ED63D6BC89A35FFAD4CDA] - 01/10/2008 - 12:01:28 ---A- D:\WINDOWS\system32\drivers\usbaapl.sys

O58 - SDL:[MD5.1C1A47B40C23358245AA8D0443B6935E] - 13/04/2008 - 19:45:40 ---A- D:\WINDOWS\system32\drivers\usbcamd.sys

O58 - SDL:[MD5.CE97845D2E3F0D274B8BAC1ED07C6149] - 13/04/2008 - 19:45:41 ---A- D:\WINDOWS\system32\drivers\usbcamd2.sys

O58 - SDL:[MD5.173F317CE0DB8E21322E71B7E60A27E8] - 13/04/2008 - 19:45:39 ---A- D:\WINDOWS\system32\drivers\usbccgp.sys

O58 - SDL:[MD5.596EB39B50D6EBD9B734DC4AE0544693] - 18/09/2002 - 16:35:45 ---A- D:\WINDOWS\system32\drivers\usbd.sys

O58 - SDL:[MD5.65DCF09D0E37D4C6B11B5B0B76D470A7] - 13/04/2008 - 19:45:35 ---A- D:\WINDOWS\system32\drivers\usbehci.sys

O58 - SDL:[MD5.1AB3CDDE553B6E064D2E754EFE20285C] - 13/04/2008 - 19:45:37 ---A- D:\WINDOWS\system32\drivers\usbhub.sys

O58 - SDL:[MD5.290913DC4F1125E5A82DE52579A44C43] - 13/04/2008 - 19:45:43 ---A- D:\WINDOWS\system32\drivers\usbintel.sys

O58 - SDL:[MD5.791912E524CC2CC6F50B5F2B52D1EB71] - 13/04/2008 - 19:45:36 ---A- D:\WINDOWS\system32\drivers\usbport.sys

O58 - SDL:[MD5.A717C8721046828520C9EDF31288FC00] - 13/04/2008 - 19:47:37 ---A- D:\WINDOWS\system32\drivers\usbprint.sys

O58 - SDL:[MD5.A0B8CF9DEB1184FBDD20784A58FA75D4] - 13/04/2008 - 19:45:34 ---A- D:\WINDOWS\system32\drivers\usbscan.sys

O58 - SDL:[MD5.A32426D9B14A089EAA1D922E0C5801A9] - 13/04/2008 - 19:45:38 ---A- D:\WINDOWS\system32\drivers\usbstor.sys

O58 - SDL:[MD5.26496F9DEE2D787FC3E61AD54821FFE6] - 13/04/2008 - 19:45:35 ---A- D:\WINDOWS\system32\drivers\usbuhci.sys

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 18/09/2002 - 16:23:11 ---A- D:\WINDOWS\system32\drivers\vdmindvd.sys

O58 - SDL:[MD5.0D3A8FAFCEACD8B7625CD549757A7DF1] - 13/04/2008 - 19:44:40 ---A- D:\WINDOWS\system32\drivers\vga.sys

O58 - SDL:[MD5.E28726B72C46821A28830E077D39A55B] - 13/04/2008 - 19:44:40 ---A- D:\WINDOWS\system32\drivers\videoprt.sys

O58 - SDL:[MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - 02:56:04 ---A- D:\WINDOWS\system32\drivers\volsnap.sys

O58 - SDL:[MD5.E20B95BAEDB550F32DD489265C1DA1F6] - 13/04/2008 - 19:57:21 ---A- D:\WINDOWS\system32\drivers\wanarp.sys

O58 - SDL:[MD5.6768ACF64B18196494413695F0C3A00F] - 13/04/2008 - 20:17:18 ---A- D:\WINDOWS\system32\drivers\wdmaud.sys

O58 - SDL:[MD5.FA30E1C37B67DE5A2E4CB8815D022880] - 16/01/2007 - 12:56:52 ---A- D:\WINDOWS\system32\drivers\WlanBZXP.sys

O58 - SDL:[MD5.2F31B7F954BED437F2C75026C65CAF7B] - 18/09/2002 - 16:37:22 ---A- D:\WINDOWS\system32\drivers\wmilib.sys

O58 - SDL:[MD5.6ABE6E225ADB5A751622A9CC3BC19CE8] - 18/09/2002 - 16:37:48 ---A- D:\WINDOWS\system32\drivers\ws2ifsl.sys

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 18/09/2002 - 16:22:09 ---A- D:\WINDOWS\system32\ansi.sys

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 18/09/2002 - 16:22:33 ---A- D:\WINDOWS\system32\country.sys

O58 - SDL:[MD5.DBCD41D42CF6F2C472B03E079057CBD2] - 30/11/2008 - 23:49:27 ---A- D:\WINDOWS\system32\haspdos.sys

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 18/09/2002 - 16:23:47 ---A- D:\WINDOWS\system32\himem.sys

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 18/09/2002 - 16:24:42 ---A- D:\WINDOWS\system32\key01.sys

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 18/09/2002 - 16:24:42 ---A- D:\WINDOWS\system32\keyboard.sys

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 18/09/2002 - 16:30:40 ---A- D:\WINDOWS\system32\ntdos.sys

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 18/09/2002 - 16:30:40 ---A- D:\WINDOWS\system32\ntdos404.sys

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 18/09/2002 - 16:30:40 ---A- D:\WINDOWS\system32\ntdos411.sys

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 18/09/2002 - 16:30:40 ---A- D:\WINDOWS\system32\ntdos412.sys

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 18/09/2002 - 16:30:41 ---A- D:\WINDOWS\system32\ntdos804.sys

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 04/08/2004 - 06:45:25 ---A- D:\WINDOWS\system32\ntio.sys

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 04/08/2004 - 06:45:14 ---A- D:\WINDOWS\system32\ntio404.sys

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 04/08/2004 - 06:45:10 ---A- D:\WINDOWS\system32\ntio411.sys

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 04/08/2004 - 06:45:15 ---A- D:\WINDOWS\system32\ntio412.sys

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 04/08/2004 - 06:45:12 ---A- D:\WINDOWS\system32\ntio804.sys

O58 - SDL:[MD5.B670C5D89F0726B7A2A7DFB4E968CDF8] - 23/09/2003 - 10:38:34 ---A- D:\WINDOWS\system32\pcampr5.sys

O58 - SDL:[MD5.ECD2F9D67B06606064DAF6961A6D5EFE] - 01/03/2006 - 18:53:54 ---A- D:\WINDOWS\system32\pcandis5.sys

O58 - SDL:[MD5.354585D8E53F2FF9B8AD5E1E2EF68CEF] - 25/09/2008 - 21:07:08 ---A- D:\WINDOWS\system32\PhDi2.sys

O58 - SDL:[MD5.9A10AACBFDC4922715375FB4065EC930] - 13/04/2008 - 19:44:59 ---A- D:\WINDOWS\system32\watchdog.sys

O58 - SDL:[MD5.8441F8A5DC42BD5F2BEAA95297EE0E10] - 14/08/2009 - 16:13:59 ---A- D:\WINDOWS\system32\win32k.sys

 

---\\ Alternate Data Stream File (ADS) (O62)

O62 - ADS:Alternate Data Stream File - D:\Windows\System32\SpoonUninstall.exe:Zone.Identifier

 

---\\ Liste des outils de nettoyage (LATC) (O63)

O63 - Logiciel: HijackThis 2.0.2

O63 - Logiciel: ZHPDiag 1.24

 

---\\ Liste des services Legacy (LALS) (O64)

O64 - Services: CurCS - avast! Asynchronous Virus Monitor (Aavmker4) - LEGACY_AAVMKER4

O64 - Services: CurCS - ArcSoft Connect Daemon (ACDaemon) - LEGACY_ACDAEMON

O64 - Services: CurCS - No object (No service) - LEGACY_ADBLOCK.DLL

O64 - Services: CurCS - General Purpose USB Driver (adildr.sys) (ADILOADER) - LEGACY_ADILOADER

O64 - Services: CurCS - Environnement de prise en charge de réseau AFD (AFD) - LEGACY_AFD

O64 - Services: CurCS - Service de la passerelle de la couche Application (ALG) - LEGACY_ALG

O64 - Services: CurCS - Apple Mobile Device (Apple Mobile Device) - LEGACY_APPLE_MOBILE_DEVICE

O64 - Services: CurCS - Gestion d'applications (AppMgmt) - LEGACY_APPMGMT

O64 - Services: CurCS - aswFsBlk (aswFsBlk) - LEGACY_ASWFSBLK

O64 - Services: CurCS - avast! Standard Shield Support (aswMon2) - LEGACY_ASWMON2

O64 - Services: CurCS - aswRdr (aswRdr) - LEGACY_ASWRDR

O64 - Services: CurCS - avast! Self Protection (aswSP) - LEGACY_ASWSP

O64 - Services: CurCS - avast! Network Shield Support (aswTdi) - LEGACY_ASWTDI

O64 - Services: CurCS - avast! iAVS4 Control Service (aswUpdSv) - LEGACY_ASWUPDSV

O64 - Services: CurCS - Audio Windows (AudioSrv) - LEGACY_AUDIOSRV

O64 - Services: CurCS - avast! Antivirus (avast! Antivirus) - LEGACY_AVAST!_ANTIVIRUS

O64 - Services: CurCS - AVG Anti-Spyware Clean Driver (AvgAsCln) - LEGACY_AVGASCLN

O64 - Services: CurCS - AVG Anti-Spyware Driver (AVG Anti-Spyware Driver) - LEGACY_AVG_ANTI-SPYWARE_DRIVER

O64 - Services: CurCS - awtdqpow (awtdqpow) - LEGACY_AWTDQPOW

O64 - Services: CurCS - Belarc SMBios Access (BANTExt) - LEGACY_BANTEXT

O64 - Services: CurCS - Backbone Service (BBDemon) - LEGACY_BBDEMON

O64 - Services: CurCS - Beep (Beep) - LEGACY_BEEP

O64 - Services: CurCS - B's Recorder GOLD Library General Service (bgsvcgen) - LEGACY_BGSVCGEN

O64 - Services: CurCS - Service de transfert intelligent en arrière-plan (BITS) - LEGACY_BITS

O64 - Services: CurCS - Service Bonjour (Bonjour Service) - LEGACY_BONJOUR_SERVICE

O64 - Services: CurCS - Explorateur d'ordinateur (Browser) - LEGACY_BROWSER

O64 - Services: CurCS - Bluetooth Support Service (BthServ) - LEGACY_BTHSERV

O64 - Services: CurCS - Bluetooth Protocol Stack (BTKRNL) - LEGACY_BTKRNL

O64 - Services: CurCS - Bluetooth Serial Driver (BTSERIAL) - LEGACY_BTSERIAL

O64 - Services: CurCS - Bluetooth Port Client Driver (BTSLBCSP) - LEGACY_BTSLBCSP

O64 - Services: CurCS - Bluetooth Service (btwdins) - LEGACY_BTWDINS

O64 - Services: CurCS - cdfs (cdfs) - LEGACY_CDFS

O64 - Services: CurCS - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32

O64 - Services: CurCS - Application système COM+ (COMSysApp) - LEGACY_COMSYSAPP

O64 - Services: CurCS - No object (No service) - LEGACY_CONTENT.DLL

O64 - Services: CurCS - Services de cryptographie (CryptSvc) - LEGACY_CRYPTSVC

O64 - Services: CurCS - Lanceur de processus serveur DCOM (DcomLaunch) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - Client DHCP (Dhcp) - LEGACY_DHCP

O64 - Services: CurCS - Service d'administration du Gestionnaire de disque logique (dmadmin) - LEGACY_DMADMIN

O64 - Services: CurCS - dmboot (dmboot) - LEGACY_DMBOOT

O64 - Services: CurCS - dmload (dmload) - LEGACY_DMLOAD

O64 - Services: CurCS - Gestionnaire de disque logique (dmserver) - LEGACY_DMSERVER

O64 - Services: CurCS - Client DNS (Dnscache) - LEGACY_DNSCACHE

O64 - Services: CurCS - No object (No service) - LEGACY_DNSCACHE.DLL

O64 - Services: CurCS - Configuration automatique de réseau câblé (Dot3svc) - LEGACY_DOT3SVC

O64 - Services: CurCS - driverhardwarev2 (driverhardwarev2) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - DS1410D (DS1410D) - LEGACY_DS1410D

O64 - Services: CurCS - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) - LEGACY_EAPHOST

O64 - Services: CurCS - EPSON Printer Status Agent2 (EPSONStatusAgent2) - LEGACY_EPSONSTATUSAGENT2

O64 - Services: CurCS - Service de rapport d'erreurs (ERSvc) - LEGACY_ERSVC

O64 - Services: CurCS - Système d'événements de COM+ (EventSystem) - LEGACY_EVENTSYSTEM

O64 - Services: CurCS - fastfat (fastfat) - LEGACY_FASTFAT

O64 - Services: CurCS - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY

O64 - Services: CurCS - Fips (Fips) - LEGACY_FIPS

O64 - Services: CurCS - FltMgr (FltMgr) - LEGACY_FLTMGR

O64 - Services: CurCS - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) - LEGACY_FONTCACHE3.0.0.0

O64 - Services: CurCS - FssFltr (fssfltr) - LEGACY_FSSFLTR

O64 - Services: CurCS - Fs_Rec (Fs_Rec) - LEGACY_FS_REC

O64 - Services: CurCS - No object (No service) - LEGACY_FTPFILT.DLL

O64 - Services: CurCS - Firewall Driver (fwdrv) - LEGACY_FWDRV

O64 - Services: CurCS - getPlus® Helper (getPlusHelper) - LEGACY_GETPLUSHELPER

O64 - Services: CurCS - Classificateur de paquets générique (Gpc) - LEGACY_GPC

O64 - Services: CurCS - Service Google Update (gupdate1ca6b932ce3479c) (gupdate1ca6b932ce3479c) - LEGACY_GUPDATE1CA6B932CE3479C

O64 - Services: CurCS - hardlock (hardlock) - LEGACY_HARDLOCK

O64 - Services: CurCS - Haspnt (Haspnt) - LEGACY_HASPNT

O64 - Services: CurCS - Aide et support (helpsvc) - LEGACY_HELPSVC

O64 - Services: CurCS - HID Input Service (HidServ) - LEGACY_HIDSERV

O64 - Services: CurCS - No object (No service) - LEGACY_HTMLFILT.DLL

O64 - Services: CurCS - HTTP (HTTP) - LEGACY_HTTP

O64 - Services: CurCS - No object (No service) - LEGACY_HTTPFILT.DLL

O64 - Services: CurCS - HTTP SSL (HTTPFilter) - LEGACY_HTTPFILTER

O64 - Services: CurCS - Windows CardSpace (idsvc) - LEGACY_IDSVC

O64 - Services: CurCS - No object (No service) - LEGACY_IMAPFILT.DLL

O64 - Services: CurCS - Service COM de gravage de CD IMAPI (ImapiService) - LEGACY_IMAPISERVICE

O64 - Services: CurCS - Pilote du pare-feu Windows IPv6 (ip6fw) - LEGACY_IP6FW

O64 - Services: CurCS - Traducteur d'adresses réseau IP (IpNat) - LEGACY_IPNAT

O64 - Services: CurCS - Pilote IPSEC (IPSec) - LEGACY_IPSEC

O64 - Services: CurCS - Java Quick Starter (JavaQuickStarterService) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - Kerio HIPS Driver (khips) - LEGACY_KHIPS

O64 - Services: CurCS - Kodak picture transfer agent (KODAK Picture Transfer Agent) - LEGACY_KODAK_PICTURE_TRANSFER_AGENT

O64 - Services: CurCS - ksecdd (ksecdd) - LEGACY_KSECDD

O64 - Services: CurCS - Serveur (lanmanserver) - LEGACY_LANMANSERVER

O64 - Services: CurCS - Station de travail (LanmanWorkstation) - LEGACY_LANMANWORKSTATION

O64 - Services: CurCS - Assistance TCP/IP NetBIOS (LmHosts) - LEGACY_LMHOSTS

O64 - Services: CurCS - LUMDriver (LUMDriver) - LEGACY_LUMDRIVER

O64 - Services: CurCS - Ma-Config Service (maconfservice) - LEGACY_MACONFSERVICE

O64 - Services: CurCS - No object (No service) - LEGACY_MAILFILT.DLL

O64 - Services: CurCS - No object (No service) - LEGACY_MBAMCATCHME

O64 - Services: CurCS - Machine Debug Manager (MDM) - LEGACY_MDM

O64 - Services: CurCS - Affichage des messages (Messenger) - LEGACY_MESSENGER

O64 - Services: CurCS - mnmdd (mnmdd) - LEGACY_MNMDD

O64 - Services: CurCS - mountmgr (mountmgr) - LEGACY_MOUNTMGR

O64 - Services: CurCS - Redirecteur client WebDav (MRxDAV) - LEGACY_MRXDAV

O64 - Services: CurCS - MRXSMB (MRxSmb) - LEGACY_MRXSMB

O64 - Services: CurCS - Distributed Transaction Coordinator (MSDTC) - LEGACY_MSDTC

O64 - Services: CurCS - Msfs (Msfs) - LEGACY_MSFS

O64 - Services: CurCS - Windows Installer (MSIServer) - LEGACY_MSISERVER

O64 - Services: CurCS - Mup (Mup) - LEGACY_MUP

O64 - Services: CurCS - Agent de protection d'accès réseau (napagent) - LEGACY_NAPAGENT

O64 - Services: CurCS - Pilote système NDIS (NDIS) - LEGACY_NDIS

O64 - Services: CurCS - Pilote TAPI NDIS d'accès distant (NdisTapi) - LEGACY_NDISTAPI

O64 - Services: CurCS - NDIS mode utilisateur E/S Protocole (Ndisuio) - LEGACY_NDISUIO

O64 - Services: CurCS - NDProxy (NDProxy) - LEGACY_NDPROXY

O64 - Services: CurCS - Interface NetBIOS (NetBIOS) - LEGACY_NETBIOS

O64 - Services: CurCS - NetBIOS sur TCP/IP (NetBT) - LEGACY_NETBT

O64 - Services: CurCS - DSDM DDE réseau (NetDDEdsdm) - LEGACY_NETDDEDSDM

O64 - Services: CurCS - Connexions réseau (Netman) - LEGACY_NETMAN

O64 - Services: CurCS - NLA (Network Location Awareness) (Nla) - LEGACY_NLA

O64 - Services: CurCS - No object (No service) - LEGACY_NNTPFILT.DLL

O64 - Services: CurCS - Npfs (Npfs) - LEGACY_NPFS

O64 - Services: CurCS - ntfs (ntfs) - LEGACY_NTFS

O64 - Services: CurCS - Stockage amovible (NtmsSvc) - LEGACY_NTMSSVC

O64 - Services: CurCS - Null (Null) - LEGACY_NULL

O64 - Services: CurCS - Protocole de transport compatible NWLink IPX/SPX/NetBIOS (NwlnkIpx) - LEGACY_NWLNKIPX

O64 - Services: CurCS - NetBIOS NWLink (NwlnkNb) - LEGACY_NWLNKNB

O64 - Services: CurCS - Protocole NWLink SPX/SPXII (NwlnkSpx) - LEGACY_NWLNKSPX

O64 - Services: CurCS - Agent SAP (NwSapAgent) - LEGACY_NWSAPAGENT

O64 - Services: CurCS - OMCI (OMCI) - LEGACY_OMCI

O64 - Services: CurCS - Office Source Engine (ose) - LEGACY_OSE

O64 - Services: CurCS - PAGEDFRG (PAGEDFRG) - LEGACY_PAGEDFRG

O64 - Services: CurCS - PartMgr (PartMgr) - LEGACY_PARTMGR

O64 - Services: CurCS - ParVdm (ParVdm) - LEGACY_PARVDM

O64 - Services: CurCS - No object (No service) - LEGACY_PCAMPR5

O64 - Services: CurCS - PCANDIS5 NDIS Protocol Driver (PCANDIS5) - LEGACY_PCANDIS5

O64 - Services: CurCS - Services IPSEC (PolicyAgent) - LEGACY_POLICYAGENT

O64 - Services: CurCS - No object (No service) - LEGACY_POP3FILT.DLL

O64 - Services: CurCS - No object (No service) - LEGACY_PROTECT.DLL

O64 - Services: CurCS - Emplacement protégé (ProtectedStorage) - LEGACY_PROTECTEDSTORAGE

O64 - Services: CurCS - Pilote de connexion automatique d'accès distant (RasAcd) - LEGACY_RASACD

O64 - Services: CurCS - Gestionnaire de connexion automatique d'accès distant (RasAuto) - LEGACY_RASAUTO

O64 - Services: CurCS - Gestionnaire de connexions d'accès distant (RasMan) - LEGACY_RASMAN

O64 - Services: CurCS - Ray (Ray) - LEGACY_RAY

O64 - Services: CurCS - Rdbss (Rdbss) - LEGACY_RDBSS

O64 - Services: CurCS - RDPCDD (RDPCDD) - LEGACY_RDPCDD

O64 - Services: CurCS - RDPNP (RDPNP) - LEGACY_RDPNP

O64 - Services: CurCS - RDPWD (RDPWD) - LEGACY_RDPWD

O64 - Services: CurCS - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - LEGACY_RDSESSMGR

O64 - Services: CurCS - Routage et accès distant (RemoteAccess) - LEGACY_REMOTEACCESS

O64 - Services: CurCS - Appel de procédure distante (RPC) (RpcSs) - LEGACY_RPCSS

O64 - Services: CurCS - QoS RSVP (RSVP) - LEGACY_RSVP

O64 - Services: CurCS - Gestionnaire de comptes de sécurité (SamSs) - LEGACY_SAMSS

O64 - Services: CurCS - SandBox (SandBox) - LEGACY_SANDBOX

O64 - Services: CurCS - Planificateur de tâches (Schedule) - LEGACY_SCHEDULE

O64 - Services: CurCS - SeaPort (SeaPort) - LEGACY_SEAPORT

O64 - Services: CurCS - Connexion secondaire (seclogon) - LEGACY_SECLOGON

O64 - Services: CurCS - Notification d'événement système (SENS) - LEGACY_SENS

O64 - Services: CurCS - Sentinel (Sentinel) - LEGACY_SENTINEL

O64 - Services: CurCS - Pare-feu Windows / Partage de connexion Internet (SharedAccess) - LEGACY_SHAREDACCESS

O64 - Services: CurCS - Détection matériel noyau (ShellHWDetection) - LEGACY_SHELLHWDETECTION

O64 - Services: CurCS - SolidWorks Licensing Service (SolidWorks Licensing Service) - LEGACY_SOLIDWORKS_LICENSING_SERVICE

O64 - Services: CurCS - Spouleur d'impression (Spooler) - LEGACY_SPOOLER

O64 - Services: CurCS - Pilote de filtre de restauration système (sr) - LEGACY_SR

O64 - Services: CurCS - Service de restauration système (srservice) - LEGACY_SRSERVICE

O64 - Services: CurCS - Srv (Srv) - LEGACY_SRV

O64 - Services: CurCS - Service de découvertes SSDP (SSDPSRV) - LEGACY_SSDPSRV

O64 - Services: CurCS - Acquisition d'image Windows (WIA) (stisvc) - LEGACY_STISVC

O64 - Services: CurCS - Journaux et alertes de performance (SysmonLog) - LEGACY_SYSMONLOG

O64 - Services: CurCS - Téléphonie (TapiSrv) - LEGACY_TAPISRV

O64 - Services: CurCS - Pilote du protocole TCP/IP (Tcpip) - LEGACY_TCPIP

O64 - Services: CurCS - TDTCP (TDTCP) - LEGACY_TDTCP

O64 - Services: CurCS - Services Terminal Server (TermService) - LEGACY_TERMSERVICE

O64 - Services: CurCS - Thèmes (Themes) - LEGACY_THEMES

O64 - Services: CurCS - tmcomm (tmcomm) - LEGACY_TMCOMM

O64 - Services: CurCS - Client de suivi de lien distribué (TrkWks) - LEGACY_TRKWKS

O64 - Services: CurCS - Udfs (Udfs) - LEGACY_UDFS

O64 - Services: CurCS - UnlockerDriver5 (UnlockerDriver5) - LEGACY_UNLOCKERDRIVER5

O64 - Services: CurCS - Gestionnaire de téléchargement (uploadmgr) - LEGACY_UPLOADMGR

O64 - Services: CurCS - Hôte de périphérique universel Plug-and-Play (upnphost) - LEGACY_UPNPHOST

O64 - Services: CurCS - No object (No service) - LEGACY_VFILT

O64 - Services: CurCS - vga (vga) - LEGACY_VGA

O64 - Services: CurCS - VgaSave (VgaSave) - LEGACY_VGASAVE

O64 - Services: CurCS - VolSnap (VolSnap) - LEGACY_VOLSNAP

O64 - Services: CurCS - Horloge Windows (W32Time) - LEGACY_W32TIME

O64 - Services: CurCS - Pilote ARP IP d'accès distant (Wanarp) - LEGACY_WANARP

O64 - Services: CurCS - WebClient (WebClient) - LEGACY_WEBCLIENT

O64 - Services: CurCS - Infrastructure de gestion Windows (winmgmt) - LEGACY_WINMGMT

O64 - Services: CurCS - Carte de performance WMI (WmiApSrv) - LEGACY_WMIAPSRV

O64 - Services: CurCS - Centre de sécurité (wscsvc) - LEGACY_WSCSVC

O64 - Services: CurCS - Mises à jour automatiques (wuauserv) - LEGACY_WUAUSERV

O64 - Services: CurCS - Configuration automatique sans fil (WZCSVC) - LEGACY_WZCSVC

 

 

End of the scan: 1211 lines

 

 

Modifié le 16 janvier 2010 par bull51

[pear]

Bonjour,

 

rkill.comTélécharger Rkill de Grinler sur le bureau,

double clic pour le lancer.

Sous Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur"

Une fenêtre (très rapide) indiquera que tout s'est bien déroulé.

Pour Vista, faire un clic droit sur le fichier rkill téléchargé puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

Notez que Rkill ne produit pas de rapport

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Vous devez désactiver vos protections et ne savez pas comment faire

 

Sur Bleeping Computers en Anglais:

 

Sur PCA,En Français

* Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

* Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

Si le pare-feu demande l'autorisation à MBAM de se connecter, acceptez.

* Une fois la mise à jour terminée, allez dans l'onglet Recherche.

* Sélectionnez "Exécuter un examen complet"

* Cliquez sur "Rechercher"

* .L' analyse prendra un certain temps, soyez patient !

* A la fin , un message affichera :

L'examen s'est terminé normalement.

 

*Si MBAM n'a rien trouvé, il le dira aussi.

Cliquez sur "Ok" pour poursuivre.

*Fermez les navigateurs.

Cliquez sur Afficher les résultats .

 

*Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

* Copiez-collez ce rapport dans la prochaine réponse.

[Pat07]

Bonjour et merci de votre intervention,

 

Rapport Malwarebytes' Anti-Malware :

Malwarebytes' Anti-Malware 1.44

Version de la base de données: 3580

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

 

17/01/2010 09:12:50

mbam-log-2010-01-17 (09-12-50).txt

 

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|)

Eléments examinés: 544053

Temps écoulé: 2 hour(s), 6 minute(s), 34 second(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 1

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

E:\LOGICIELS\FindyKill\FindyKill.exe (Trojan.Backdoor) -> Quarantined and deleted successfully.

 

Cordialement

Modifié le 20 janvier 2010 par Pat07

[Pat07]

Bonsoir,

 

N'ayant pas de nouvelles je viens relancer le sujet, concernant mon analyse.

 

Car j'ai toujours le soucis sur le rapport ZHPDiag Ligne 058 qui m'indique toujours un Malware et j'aimerai en avoir le cœur net.

 

Cordialement.

Modifié le 4 février 2010 par Pat07

[Pat07]

Hepl me!

Cordialement - Merci

Modifié le 4 février 2010 par Pat07

[pear]

Bonjour,

Je vous avais oublié

Peut-être parce que vous avez changé de pseudo.

Votre rapport Rsit ne montre pas d'infection.

[Pat07]

Bonjour,

Je vous avais oublié

Peut-être parce que vous avez changé de pseudo.

Votre rapport Rsit ne montre pas d'infection.

 

Bonjour,

Mon pseudo à été modifié avant effectivement, mais ce n'est pas grave l'important c'est que, l'on ai pu renouer le contact.

Merci de m'avoir répondu, mais qu'appelez-vous rapport Rsit ?

Cordialement

Modifié le 6 février 2010 par Pat07