ENcore des pubs :(

[oneill76]

bonjour je suis envahie de pub plus de 40 fenetres en moins d'une demi heure

 

DEpuis que l'ordi est rentré de reparation je suis envahie a se demander ce qu'il y ont fait.

 

voici different rapport

 

 

Rapport de ZHPDiag v1.24.39 par Nicolas Coolman

Run by nicolas alexis at 17/01/2010 14:01:03

Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

Platform : Windows Vista Home Premium (6.0.6002) Service Pack 2

MSIE: Internet Explorer v8.0.6001.18865

MFIE: Mozilla Firefox (3.0.17)

 

Boot mode: Normal (Normal boot)

Total RAM: 3069 MB (65% free)

System drive C: has 120 GB (41%) free of 287 GB

 

---\\ Processus lancés

[MD5.F08A76C5E56BDB6F98F41BD22A4692E1] - C:\Program Files\HP\QuickPlay\QPService.exe

[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe

[MD5.CB4EE42EE2D33A58EFD48C276B683663] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

[MD5.B8AF02700299CD308046BB9339165813] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe

[MD5.9AEF1107109189F955192D4B714B516C] - C:\Program Files\OrangeHSS\Systray\SystrayApp.exe

[MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

[MD5.A91148D8F5AB52EFF43804BD60314BC2] - C:\Program Files\Apoint2K\Apoint.exe

[MD5.626A24ED1228580B9518C01930936DF9] - C:\Users\nicolas alexis\AppData\Local\Google\Update\GoogleUpdate.exe

[MD5.BF08674925F151BD4537B89A493E3E0C] - C:\Windows\ehome\ehTray.exe

[MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\windows sidebar\sidebar.exe

[MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe

 

---\\ Pages de recherche de Mozilla Firefox (M1)

M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\YPlayer@yummy.net

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: Shell=explorer.exe

 

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cherche.us

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop

 

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.cherche.us

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.cherche.us

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.cherche.us

 

---\\ Internet Explorer URLSearchHook (R3)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

 

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [QPService] C:\Program Files\HP\QuickPlay\QPService.exe

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe

O4 - HKLM\..\Run: [systrayORAHSS] C:\Program Files\OrangeHSS\Systray\SystrayApp.exe

O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKCU\..\Run: [Google Update] C:\Users\nicolas alexis\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKLM\..\policies\Explorer: [bindDirectlyToPropertySetStorage] Data=0

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Recherche avec cherche.us - C:\Users\nicolas alexis\scriptjava.html

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll,103

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab

O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} () - http://messenger.zone.msn.com/MessengerGam...S.cab109791.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927338426-3503636070-3307974538-1000Core.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927338426-3503636070-3307974538-1000UA.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{B6785230-04AC-4480-A14F-41EF3D7C9065}.job

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig

O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

O40 - ASIC: Viewpoint Media Player - {03F998B2-0E00-11D3-A498-00104B6EB52E} - C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll

O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)

O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"

O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} - C:\Windows\system32\Adobe\Director\SwDir.dll

O40 - ASIC: Viewpoint Media Player - {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll

O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll

O40 - ASIC: Adobe Shockwave Director 10.4 - {233C1507-6A77-46A4-9443-F871F945D258} - C:\Windows\System32\Adobe\Director\swdir.dll

O40 - ASIC: Adobe Shockwave Director 10.4 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.7 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file)

O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file)

O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: .NET Framework - {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash10a.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ABBYY FineReader 6.0 Sprint

O42 - Logiciel: AGEIA PhysX v7.09.13

O42 - Logiciel: ALZip

O42 - Logiciel: Adobe Flash Player 10 ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin

O42 - Logiciel: Adobe Flash Player 9 ActiveX

O42 - Logiciel: Adobe Reader 8.1.3 - Français

O42 - Logiciel: Adobe Shockwave Player

O42 - Logiciel: Age of Empires III

O42 - Logiciel: Assistant de connexion Windows Live

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus

O42 - Logiciel: CCleaner (remove only)

O42 - Logiciel: Call of Duty® 2

O42 - Logiciel: Camfrog Video Chat 5.1

O42 - Logiciel: Command & Conquer Generals

O42 - Logiciel: Conexant HD Audio

O42 - Logiciel: CyberLink YouCam

O42 - Logiciel: DVD Suite

O42 - Logiciel: DivX Plus Web Player

O42 - Logiciel: EVEREST Home Edition v2.20

O42 - Logiciel: Faire Part Edition Classic

O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP

O42 - Logiciel: HP Customer Experience Enhancements

O42 - Logiciel: HP Doc Viewer

O42 - Logiciel: HP Easy Setup - Frontend

O42 - Logiciel: HP Help and Support

O42 - Logiciel: HP Integrated Module with Bluetooth wireless technology 6.0.1.5500

O42 - Logiciel: HP Quick Launch Buttons 6.30 E1

O42 - Logiciel: HP QuickPlay 3.6

O42 - Logiciel: HP QuickTouch 1.00 C4

O42 - Logiciel: HP Total Care Advisor

O42 - Logiciel: HP Update

O42 - Logiciel: HP User Guides 0090

O42 - Logiciel: HP Wireless Assistant

O42 - Logiciel: Half-Life 2

O42 - Logiciel: Half-Life 2: Episode One

O42 - Logiciel: Half-Life 2: Episode Two

O42 - Logiciel: Half-Life 2: Lost Coast

O42 - Logiciel: Hamachi 1.0.3.0

O42 - Logiciel: Hauppauge MCE XP/Vista Software Encoder (2.0.25149)

O42 - Logiciel: Heroes of Might and Magic® III

O42 - Logiciel: Hewlett-Packard Active Check

O42 - Logiciel: Hewlett-Packard Asset Agent for Health Check

O42 - Logiciel: Hotel Giant 2

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

O42 - Logiciel: Installation Windows Live

O42 - Logiciel: Java 6 Update 13

O42 - Logiciel: Java 6 Update 2

O42 - Logiciel: Java 6 Update 7

O42 - Logiciel: Junk Mail filter update

O42 - Logiciel: KaraFun 1.18

O42 - Logiciel: La Bataille pour la Terre du Milieu™ II

O42 - Logiciel: LabelPrint

O42 - Logiciel: Left 4 Dead 2

O42 - Logiciel: Lexmark 4800 Series

O42 - Logiciel: LimeWire 4.18.8

O42 - Logiciel: MSVCRT

O42 - Logiciel: MSXML 4.0 SP2 (KB936181)

O42 - Logiciel: MSXML 4.0 SP2 (KB941833)

O42 - Logiciel: MSXML 4.0 SP2 (KB954430)

O42 - Logiciel: MSXML 4.0 SP2 (KB973688)

O42 - Logiciel: Malwarebytes' Anti-Malware

O42 - Logiciel: Marvell Miniport Driver

O42 - Logiciel: Medal of Honor débarquement allié

O42 - Logiciel: Messenger Plus! 3

O42 - Logiciel: Messenger Plus! Live

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft Choice Guard

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007

O42 - Logiciel: Microsoft Office Home and Student 2007

O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007

O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French)

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007

O42 - Logiciel: Microsoft Office Proof (English) 2007

O42 - Logiciel: Microsoft Office Proof (French) 2007

O42 - Logiciel: Microsoft Office Proof (German) 2007

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007

O42 - Logiciel: Microsoft Office Proofing (French) 2007

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007

O42 - Logiciel: Microsoft Office Word MUI (French) 2007

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable

O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

O42 - Logiciel: Microsoft Works

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra

O42 - Logiciel: Mozilla Firefox (3.0.17)

O42 - Logiciel: Mumble and Murmur

O42 - Logiciel: My HP Games

O42 - Logiciel: NVIDIA Drivers

O42 - Logiciel: Navigateur Orange

O42 - Logiciel: NetWaiting

O42 - Logiciel: Norton Security Scan

O42 - Logiciel: Norton Security Scan (Symantec Corporation)

O42 - Logiciel: Orange - Logiciels Internet

O42 - Logiciel: Outil de téléchargement Windows Live

O42 - Logiciel: PhotoFiltre

O42 - Logiciel: PhotoFiltre Studio

O42 - Logiciel: Power Defrag

O42 - Logiciel: Power2Go

O42 - Logiciel: PowerDirector

O42 - Logiciel: PunkBuster Services

O42 - Logiciel: QuickPlay SlingPlayer 0.4.6

O42 - Logiciel: RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02

O42 - Logiciel: Rappelz

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559)

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704)

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593)

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789)

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613)

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234)

O42 - Logiciel: Skype™ 4.0

O42 - Logiciel: SoftwareUpdate 1.0

O42 - Logiciel: Solutions de télécopie Lexmark

O42 - Logiciel: Source SDK

O42 - Logiciel: Source SDK Base

O42 - Logiciel: Steam

O42 - Logiciel: Team Fortress 2

O42 - Logiciel: Team Fortress 2 Dedicated Server

O42 - Logiciel: TeamSpeak 2 RC2

O42 - Logiciel: Touch Pad Driver

O42 - Logiciel: UltraMixer 2.3.7.1

O42 - Logiciel: Unreal Tournament 3

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416)

O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561)

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053

O42 - Logiciel: Veoh Web Player Beta

O42 - Logiciel: VideoLAN VLC media player 0.8.6i

O42 - Logiciel: Viewpoint Media Player

O42 - Logiciel: Virtual DJ - Atomix Productions

O42 - Logiciel: Windows Live Call

O42 - Logiciel: Windows Live Communications Platform

O42 - Logiciel: Windows Live Mail

O42 - Logiciel: Windows Live Messenger

O42 - Logiciel: Windows Media Player Firefox Plugin

O42 - Logiciel: eMule

O42 - Logiciel: scrabbleproB 1.0.14

 

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory ----D- C:\Program Files\3DO

O43 - CFD:Common File Directory ----D- C:\Program Files\Abbyy FineReader 6.0 Sprint

O43 - CFD:Common File Directory ----D- C:\Program Files\Activision

O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe

O43 - CFD:Common File Directory ----D- C:\Program Files\AGEIA Technologies

O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software

O43 - CFD:Common File Directory ----D- C:\Program Files\Anuman Interactive

O43 - CFD:Common File Directory ----D- C:\Program Files\Apoint2K

O43 - CFD:Common File Directory ----D- C:\Program Files\AV Vcs 6.0

O43 - CFD:Common File Directory ----D- C:\Program Files\AV Vcs 6.0 DIAMOND

O43 - CFD:Common File Directory ----D- C:\Program Files\AV Vcs 7.0 DIAMOND

O43 - CFD:Common File Directory ----D- C:\Program Files\Avira

O43 - CFD:Common File Directory ----D- C:\Program Files\BFG

O43 - CFD:Common File Directory ----D- C:\Program Files\Bullfrog

O43 - CFD:Common File Directory ----D- C:\Program Files\Camfrog

O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files

O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT

O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink

O43 - CFD:Common File Directory ----D- C:\Program Files\DelMp3Kok

O43 - CFD:Common File Directory ----D- C:\Program Files\Destineer

O43 - CFD:Common File Directory ----D- C:\Program Files\DivX

O43 - CFD:Common File Directory ----D- C:\Program Files\Doom 3

O43 - CFD:Common File Directory ----D- C:\Program Files\EA GAMES

O43 - CFD:Common File Directory ----D- C:\Program Files\Electronic Arts

O43 - CFD:Common File Directory ----D- C:\Program Files\eMule

O43 - CFD:Common File Directory ----D- C:\Program Files\EoRezo

O43 - CFD:Common File Directory ----D- C:\Program Files\ESTsoft

O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs

O43 - CFD:Common File Directory ----D- C:\Program Files\FireFly Studios

O43 - CFD:Common File Directory ----D- C:\Program Files\gPotato.eu

O43 - CFD:Common File Directory ----D- C:\Program Files\Hamachi

O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard

O43 - CFD:Common File Directory ----D- C:\Program Files\Hp

O43 - CFD:Common File Directory ----D- C:\Program Files\HP Games

O43 - CFD:Common File Directory ----D- C:\Program Files\HPQ

O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD:Common File Directory ----D- C:\Program Files\Intel

O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer

O43 - CFD:Common File Directory ----D- C:\Program Files\Inventel

O43 - CFD:Common File Directory ----D- C:\Program Files\Java

O43 - CFD:Common File Directory ----D- C:\Program Files\KaraFun

O43 - CFD:Common File Directory ----D- C:\Program Files\Kiwee Toolbar

O43 - CFD:Common File Directory ----D- C:\Program Files\Lavalys

O43 - CFD:Common File Directory ----D- C:\Program Files\Lexmark 4800 Series

O43 - CFD:Common File Directory ----D- C:\Program Files\Lexmark Fax Solutions

O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire

O43 - CFD:Common File Directory ----D- C:\Program Files\LucasArts

O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD:Common File Directory ----D- C:\Program Files\ManyCam 2.2

O43 - CFD:Common File Directory ----D- C:\Program Files\Marvell

O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live

O43 - CFD:Common File Directory ----D- C:\Program Files\MessengerPlus! 3

O43 - CFD:Common File Directory ----D- C:\Program Files\Micro Application

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET

O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker

O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox

O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild

O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0

O43 - CFD:Common File Directory ----D- C:\Program Files\Mumble

O43 - CFD:Common File Directory ----D- C:\Program Files\Navilog1

O43 - CFD:Common File Directory ----D- C:\Program Files\NetWaiting

O43 - CFD:Common File Directory ----D- C:\Program Files\Nobilis

O43 - CFD:Common File Directory ----D- C:\Program Files\Norton Security Scan

O43 - CFD:Common File Directory ----D- C:\Program Files\NortonInstaller

O43 - CFD:Common File Directory ----D- C:\Program Files\NOS

O43 - CFD:Common File Directory ----D- C:\Program Files\online services

O43 - CFD:Common File Directory ----D- C:\Program Files\OrangeHSS

O43 - CFD:Common File Directory ----D- C:\Program Files\PhotoFiltre

O43 - CFD:Common File Directory ----D- C:\Program Files\PhotoFiltre Studio

O43 - CFD:Common File Directory ----D- C:\Program Files\Player Metaboli

O43 - CFD:Common File Directory ----D- C:\Program Files\Power Defrag

O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies

O43 - CFD:Common File Directory ----D- C:\Program Files\Rockstar Games

O43 - CFD:Common File Directory ----D- C:\Program Files\scrabbleproB

O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne

O43 - CFD:Common File Directory R---D- C:\Program Files\Skype

O43 - CFD:Common File Directory ----D- C:\Program Files\SP39373

O43 - CFD:Common File Directory ----D- C:\Program Files\Steam

O43 - CFD:Common File Directory ----D- C:\Program Files\Teamspeak2_RC2

O43 - CFD:Common File Directory ----D- C:\Program Files\TeamViewer

O43 - CFD:Common File Directory ----D- C:\Program Files\Ubisoft

O43 - CFD:Common File Directory ----D- C:\Program Files\UltraMixer

O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information

O43 - CFD:Common File Directory ----D- C:\Program Files\Unreal Tournament 3

O43 - CFD:Common File Directory ----D- C:\Program Files\vanBasco's Karaoke Player

O43 - CFD:Common File Directory ----D- C:\Program Files\Veoh Networks

O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN

O43 - CFD:Common File Directory ----D- C:\Program Files\Viewpoint

O43 - CFD:Common File Directory ----D- C:\Program Files\VirtualDJ

O43 - CFD:Common File Directory ----D- C:\Program Files\WIDCOMM

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Journal

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar

O43 - CFD:Common File Directory ----D- C:\Program Files\WinTV

O43 - CFD:Common File Directory ----D- C:\Program Files\Wyzo

O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DivX Shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\France Telecom

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\INCA Shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Steam

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SWF Studio

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD:Common File Directory -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller

O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Wise Installation Wizard

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:Last File Created 17/01/2010 - 13:52:46 ---A- C:\Windows\WindowsUpdate.log

O44 - LFC:Last File Created 17/01/2010 - 13:48:42 -S-A- C:\Windows\bootstat.dat

O44 - LFC:Last File Created 16/01/2010 - 23:57:08 ---A- C:\Windows\System32\CmdLineExt.dll

O44 - LFC:Last File Created 16/01/2010 - 22:07:47 ---A- C:\Windows\DirectX.log

O44 - LFC:Last File Created 16/01/2010 - 22:07:29 ---A- C:\Windows\DIFx.log

O44 - LFC:Last File Created 16/01/2010 - 13:22:55 ---A- C:\cleannavi.txt

O44 - LFC:Last File Created 05/01/2010 - 01:17:46 ---A- C:\Windows\System32\mrt.exe

O44 - LFC:Last File Created 29/12/2009 - 22:58:50 ---A- C:\Windows\System32\drivers\atksgt.sys

O44 - LFC:Last File Created 29/12/2009 - 22:58:50 ---A- C:\Windows\System32\drivers\lirsgt.sys

O44 - LFC:Last File Created 28/12/2009 - 15:45:24 ---A- C:\Windows\PFRO.log

O44 - LFC:Last File Created 22/12/2009 - 11:37:18 ---A- C:\Windows\setupact.log

O44 - LFC:Last File Created 22/12/2009 - 11:37:18 ---A- C:\Windows\setuperr.log

O44 - LFC:Last File Created 20/12/2009 - 22:12:02 ---A- C:\Windows\System32\ealregsnapshot1.reg

O44 - LFC:Last File Created 20/12/2009 - 15:00:46 ---A- C:\Windows\System32\PerfStringBackup.INI

O44 - LFC:Last File Created 20/12/2009 - 15:00:46 ---A- C:\Windows\System32\perfc009.dat

O44 - LFC:Last File Created 20/12/2009 - 15:00:46 ---A- C:\Windows\System32\perfc00C.dat

O44 - LFC:Last File Created 20/12/2009 - 15:00:46 ---A- C:\Windows\System32\perfh009.dat

O44 - LFC:Last File Created 20/12/2009 - 15:00:46 ---A- C:\Windows\System32\perfh00C.dat

 

---\\ MountPoints2 Shell Key (MPSK) (O51)

O51 - MPSK:{434fa7bf-d493-11de-ae4d-00218664f867}\Shell\AutoRun\command - F:\MSS12\MSS.exe

O51 - MPSK:{a1b55dad-7902-11dd-bc31-806e6f6e6963}\Shell\AutoRun\command - E:\HG2Setup.exe

O51 - MPSK:{cec2a749-3bb5-11de-b3dc-00218664f867}\Shell\AutoRun\command - explorer.exe .

 

---\\ Trojan Driver Search Data (TDSD) (O52)

O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"

O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"

O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"

O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="iyuv_32.dll"

O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm"

O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.l3codecp"="l3codecp.acm"

O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll"

O52 - TDSD:HKLM\...\Drivers32\"msacm.lhacm"="lhacm.acm"

O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"

O52 - TDSD:HKLM\...\Drivers32\"wave2"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi2"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer2"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave5"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi5"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer5"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"aux3"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave6"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi6"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer6"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"aux4"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave4"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi4"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer4"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"aux2"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"wave3"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"midi3"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"mixer3"="wdmaud.drv"

O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv"

O52 - TDSD:HKLM\...\drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"

O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Périphérique audio USB"

O52 - TDSD:HKLM\...\drivers.desc\"vfwwdm32.dll"="WDM Video For Windows Capture Driver (Win32)"

O52 - TDSD:HKLM\...\drivers.desc\"l3codecp.acm"=""

O52 - TDSD:HKLM\...\drivers.desc\"lhacm.acm"="lhacm.acm"

O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"

 

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

 

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKLM\...\Policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

 

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\1394bus.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\acpi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adp94xx.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpahci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu160m.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu320.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\afd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AGP440.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\aliide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AMDAGP.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk7.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk8.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Apfiltr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arcsas.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\asyncmac.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\atapi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ataport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\atksgt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avgntflt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avipbb.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\battc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BCMWL6.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bdasup.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\beep.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\blbdrive.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bowser.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltLo.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltUp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bridge.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerId.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerWdm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbMdm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbSer.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthenum.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthmodem.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthpan.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BTHUSB.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\btwaudio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\btwavdt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\btwrchid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdfs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdrom.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\CHDART.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\CHDRT32.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\circlass.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Classpnp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\CmBatt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cmdide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\compbatt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crashdmp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crcdisk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crusoe.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dfsc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\disk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Diskdump.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\djsvs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmkaud.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Dumpata.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxapi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxg.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxgkrnl.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\E1G60I32.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ecache.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\elxstor.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\errdev.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\exfat.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fastfat.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fdc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fileinfo.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\filetrace.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\flpydisk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fltMgr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fs_rec.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\FWPKCLNT.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\GAGP30KX.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hamachi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hdaudbus.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HdAudio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidbth.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidclass.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidir.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidparse.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidusb.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HpCISSs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HpqKbFiltr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HpqRemHid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HSXHWAZL.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HSX_CNXT.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HSX_DPV.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\http.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omgmt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i8042prt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStor.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStorV.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iirsp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelppm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipfltdrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\IPMIDrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipnat.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irda.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irenum.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\isapnp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteatapi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteraid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdclass.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdhid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ks.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ksecdd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lirsgt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lltdio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_fc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_sas.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_scsi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\luafv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mbam.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mbamswissarmy.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mcd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mdmxsdk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\megasas.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\MegaSR.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\modem.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\monitor.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouclass.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouhid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mountmgr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpsdrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Mraid35x.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxdav.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb10.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb20.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msahci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msdsm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msfs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msisadrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msiscsi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mskssrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspclock.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspqm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msrpc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mssmbios.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mstee.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mup.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndis.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndistapi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndisuio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndiswan.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndproxy.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbios.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NETw4v32.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nfrd960.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\npfs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nsiproxy.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntfs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntrigdigi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\null.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvlddmkm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvm60x32.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvraid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvstor.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NV_AGP.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nwifi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ohci1394.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pacer.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\partmgr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parvdm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PCAMp50.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PCASp50.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciidex.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pcmcia.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PEAuth.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PnkBstrK.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\portcls.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\processr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql2300.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql40xx.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\qwavedrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasacd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasl2tp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspppoe.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspptp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rassstp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdbss.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPCDD.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpdr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPENCDD.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpwd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rfcomm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rimmptsk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rimsptsk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rixdptsk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rmcast.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RNDISMP.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rootmdm.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rspndr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sbp2port.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\scsiport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sdbus.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\secdrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serenum.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serial.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sermouse.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfdrv01.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfdrv01a.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffdisk.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_mmc.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_sd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfhlp02.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfloppy.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfsync04.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\SISAGP.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid2.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid4.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smb.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smclib.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spldr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spsys.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv2.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srvnet.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ssmdrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Storport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\stream.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\swenum.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\symc8xx.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_hi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_u3.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tape.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpip.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpipreg.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdpipe.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdtcp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdx.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\termdd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tssecsrv.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\TUNMP.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tunnel.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\UAGP35.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\udfs.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ULIAGPKX.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\uliahci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata2.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umbus.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umpass.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usb8023.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBAUDIO.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD2.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbccgp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbcir.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbehci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbhub.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbohci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbport.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbprint.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbscan.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBSTOR.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbuhci.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbvideo.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vga.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vgapnp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VIAAGP.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viac7.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viaide.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\videoprt.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgrx.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volsnap.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vsmraid.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VSTAZL3.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VSTCNXT3.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VSTDPV3.SYS

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wacompen.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wanarp.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\watchdog.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Wdf01000.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WdfLdr.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmiacpi.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmilib.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WpdUsb.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ws2ifsl.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFPf.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFRd.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\XAudio.sys

O58 - SDL:System Drivers List - C:\Windows\system32\drivers\yk60x86.sys

 

---\\ Liste des outils de nettoyage (LATC) (O63)

O63 - Logiciel: HijackThis 2.0.2

O63 - Logiciel: ZHPDiag 1.24

 

 

End of the scan: 830 lines

 

 

 

________________________________________________________________________________

_

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:03:54, on 17/01/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18865)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Hp\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe

C:\Program Files\OrangeHSS\Systray\SystrayApp.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Apoint2K\Apoint.exe

C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Users\nicolas alexis\AppData\Local\Google\Update\1.2.183.13\GoogleCrashHandler.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Apoint2K\ApMsgFwd.exe

C:\Program Files\Apoint2K\Apntex.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Users\nicolas alexis\Desktop\HiJackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cherche.us

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.cherche.us/keyword/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.cherche.us

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.cherche.us

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cherche.us

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.cherche.us/keyword/%s

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.cherche.us

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe

O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\nicolas alexis\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Recherche avec cherche.us - C:\Users\nicolas alexis\scriptjava.html

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O13 - Gopher Prefix:

O15 - Trusted Zone: *.chat-land.org

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab

O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/MessengerGam...S.cab109791.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: lxdeCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdeserv.exe

O23 - Service: lxde_device - - C:\Windows\system32\lxdecoms.exe

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe

O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe

O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 8838 bytes

 

 

_______________________________________________________________________________

 

 

 

 

UN netoyage Effectuer avec navilog 1( la derniere version ) na rien donné .

 

Pouvez vous m'aider ? et tant que j'y suis faire un maximum de tri

 

COrdialement

[pear]

Bonjour,

 

Dans Hijackthis cochez et fixez:

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cherche.us

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.cherche.us/keyword/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.cherche.us

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.cherche.us

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cherche.us

 

Si vous êtes sous Vista:Désactiver L'UAC ,avant sont utilisation.

Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valider par OK ,

il sera demandé de redémarrer

 

 

Téléchargez AD-Remover( de Cyrildu17 / C_XX ) sur le bureau

Déconnectez-vous et fermez toutes les applications en cours

Cliquer sur "Ad-R.exe" pour lancer l'installation et laisser les paramètres par défaut .

Une fenêtre s'affichera Vous prévenant des risques de l'utilisation de ce logiciel

Cliquez sur "OUI"

Double cliquer sur l'icône Ad-remover sur le bureau

Au menu principal choisir l'optionScanner et Validez

 

Patientez pendant le travail de l'outil.

Poster le rapport qui apparait à la fin .

Il est sauvegardé aussi sous C:\Ad-report.log

 

Ensuite

 

Relancer Ad- remover , choisir l'option Lancer pour Nettoyer

 

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Vous devez désactiver vos protections et ne savez pas comment faire

 

Sur Bleeping Computers en Anglais:

 

Sur PCA,En Français

* Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

* Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

Si le pare-feu demande l'autorisation à MBAM de se connecter, acceptez.

* Une fois la mise à jour terminée, allez dans l'onglet Recherche.

* Sélectionnez "Exécuter un examen complet"

* Cliquez sur "Rechercher"

* .L' analyse prendra un certain temps, soyez patient !

* A la fin , un message affichera :

L'examen s'est terminé normalement.

 

*Si MBAM n'a rien trouvé, il le dira aussi.

Cliquez sur "Ok" pour poursuivre.

*Fermez les navigateurs.

Cliquez sur Afficher les résultats .

 

*Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

* Copiez-collez ce rapport dans la prochaine réponse.

[oneill76]

.

======= RAPPORT D'AD-REMOVER 1.1.4.6_H | UNIQUEMENT XP/VISTA/7 =======

.

Mis à jour par C_XX le 17.01.2010 à 20:47

Contact: AdRemover.contact@gmail.com

Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

.

Lancé à: 22:58:09, 17/01/2010 | Mode Normal | Option: SCAN

Exécuté de: C:\Ad-Remover\

Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 2 v6.0.6002

Nom du PC: PC-DE-NICOLASAL | Utilisateur actuel: nicolas alexis

.

============== ÉLÉMENT(S) TROUVÉ(S) ==============

.

 

C:\Users\nicolas alexis\winternet.exe

C:\Users\nicolas alexis\scriptjava.html

C:\Users\nicolas alexis\temp1.6

C:\Users\NICOLA~1\AppData\Roaming\Mozilla\FireFox\Profiles\8mgqlmkr.default\searchplugins\ask.xml

C:\Users\NICOLA~1\AppData\Roaming\Mozilla\FireFox\Profiles\8mgqlmkr.default\searchplugins\cherche.xml

C:\Windows\System32\poinstall.exe

C:\Program Files\Kiwee Toolbar

C:\Program Files\Viewpoint

C:\Users\NICOLA~1\AppData\Roaming\EoRezo

C:\Users\nicolas alexis\AppData\Local\Kiwee Toolbar

C:\Users\nicolas alexis\AppData\LocalLow\Kiwee Toolbar

C:\ProgramData\Trymedia

C:\ProgramData\Viewpoint

C:\Windows\system32\config\systemprofile\AppData\Roaming\agi

C:\Users\nicolas alexis\AppData\Local\cqcygoq.bat

.

HKCU\software\appdatalow\0aee516a-2564-c95d-9238-780847faa1b7

HKCU\Software\AppDataLow\software\{7D683C7A-B090-02DA-A7F1-C1704157427E}

HKCU\software\EoRezo

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

HKCU\software\Poker 770

HKLM\software\classes\AxMetaStream.MetaStreamCtl

HKLM\software\classes\AxMetaStream.MetaStreamCtl.1

HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary

HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary.1

HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}

HKLM\software\Dealio

HKLM\software\EoRezo

HKLM\software\MetaStream

HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine

HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1

HKLM\software\microsoft\windows\currentversion\uninstall\ViewpointMediaPlayer

HKLM\software\Poker 770

HKLM\software\Trymedia Systems

HKLM\software\Viewpoint

HKU\s-1-5-21-3927338426-3503636070-3307974538-1000\software\EoRezo

HKU\s-1-5-21-3927338426-3503636070-3307974538-1000\software\Poker 770

.

============== Scan additionnel ==============

.

.

* Mozilla FireFox Version 3.0.17 [fr] *

.

Nom du profil: 8mgqlmkr.default (nicolas alexis)

.

(NICOLA~1, Invalidprefs.js) Browser.download.dir, C:\Users\nicolas alexis\Downloads

(NICOLA~1, Invalidprefs.js) Browser.download.lastDir, C:\Users\nicolas alexis\Desktop

(NICOLA~1, Invalidprefs.js) Browser.search.selectedEngine, Kiwee Live Search

(NICOLA~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st

(NICOLA~1, Invalidprefs.js) Extensions.enabledItems, {CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}:1.5.2.35,{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.84,{b66bc4c3-6d25-4a10-8c59-01daa9063051}:1.5.1,gamestats.org@gmail.com:1.0,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,web@veoh.com:1.4,{B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.8

(NICOLA~1, Invalidprefs.js) Keyword.URL, hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q=

.

(NICOLA~1, Invalidprefs.js) TROUVE - Browser.startup.homepage, hxxp://y.lo.st

.

(NICOLA~1, prefs.js) Browser.download.dir, C:\Users\nicolas alexis\Downloads

(NICOLA~1, prefs.js) Browser.download.lastDir, C:\Users\nicolas alexis\Desktop

(NICOLA~1, prefs.js) Browser.search.selectedEngine, Kiwee Live Search

(NICOLA~1, prefs.js) Browser.startup.homepage, google.fr

(NICOLA~1, prefs.js) Extensions.enabledItems, {59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.84,{b66bc4c3-6d25-4a10-8c59-01daa9063051}:1.5.1,gamestats.org@gmail.com:1.0,{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20090123.1,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{20a82645-c095-46ed-80e3-08825760534b}:1.1,web@veoh.com:1.4,YPlayer@yummy.net:1.0.0.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.17

(NICOLA~1, prefs.js) Keyword.URL, hxxp://google.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%3BGFNT%3AB7B7B7%3BLC%3A2200cc%3BBGC%3AFFFFFF%3BVLC%3A551a8b%3BGALT%3A008B45%3BFORID%3A11%3BDIV%3A%23FFFFF0%3B&ie=ISO-8859-1&q=

.

.

.

* Internet Explorer Version 8.0.6001.18865 *

.

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

.

Start Page: hxxp://www.msn.com/

Do404Search: 01000000

Local Page: C:\Windows\system32\blank.htm

Show_ToolBar: yes

Enable Browser Extensions: yes

Start Page Restore: hxxp://google.fr/

.

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

.

Start Page: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=laptop

Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Delete_Temp_Files_On_Exit: yes

Local Page: C:\Windows\System32\blank.htm

.

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

.

Tabs: hxxp://y.lo.st

.

============== Suspect (Cracks, Serials, ...) ==============

.

C:\Users\nicolas alexis\Documents\DungeonParty\UpdaterDownloads\patch-dungeonparty-1.0.0.0-1.0.0.1.exe

C:\Users\nicolas alexis\Documents\DungeonParty\UpdaterDownloads\patch-dungeonparty-1.0.0.1-1.0.0.2.exe

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\T-77641-cle cd faire-part editioncrack (ZWT).zip

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\OSFZGKDMWZEAVVSVY6U7KKYF6OXW6RLQ\Virtual Villagers 1 + 2\Virtual Villagers 1 + Crack.zip

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\OSFZGKDMWZEAVVSVY6U7KKYF6OXW6RLQ\Virtual Villagers 1 + 2\Virtual Villagers 2 + Crack.zip

C:\Users\nicolas alexis\Documents\LimeWire\Saved\Bigfish Games - Virtual Villagers - The Secret City + Adnan_Boy 2008 + Precracked\Virtual Villagers - The Secret City.exe

C:\Users\nicolas alexis\Downloads\doom_3_patch_v1.31_version_windows_multi-langues_31778.exe

.

===================================

.

6817 Octet(s) - C:\Ad-Report-SCAN[1].log

.

673 Fichier(s) - C:\Users\NICOLA~1\AppData\Local\Temp

0 Fichier(s) - C:\Windows\Temp

54 Fichier(s) - C:\Windows\Prefetch

.

3 Fichier(s) - C:\Ad-Remover\BACKUP

0 Fichier(s) - C:\Ad-Remover\QUARANTINE

.

Fin à: 23:09:25 | 17/01/2010 - SCAN[1]

.

============== E.O.F ==============

.

 

 

 

 

.

======= RAPPORT D'AD-REMOVER 1.1.4.6_H | UNIQUEMENT XP/VISTA/7 =======

.

Mis à jour par C_XX le 17.01.2010 à 20:47

Contact: AdRemover.contact@gmail.com

Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

.

Lancé à: 18:42:32, 18/01/2010 | Mode Normal | Option: CLEAN

Exécuté de: C:\Ad-Remover\

Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 2 v6.0.6002

Nom du PC: PC-DE-NICOLASAL | Utilisateur actuel: nicolas alexis

.

============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============

.

 

C:\Users\nicolas alexis\winternet.exe

C:\Users\nicolas alexis\scriptjava.html

C:\Users\nicolas alexis\temp1.6

C:\Users\NICOLA~1\AppData\Roaming\Mozilla\FireFox\Profiles\8mgqlmkr.default\searchplugins\ask.xml

C:\Users\NICOLA~1\AppData\Roaming\Mozilla\FireFox\Profiles\8mgqlmkr.default\searchplugins\cherche.xml

C:\Windows\System32\poinstall.exe

C:\Program Files\Kiwee Toolbar

C:\Program Files\Viewpoint

C:\Users\NICOLA~1\AppData\Roaming\EoRezo

C:\Users\nicolas alexis\AppData\Local\Kiwee Toolbar

C:\Users\nicolas alexis\AppData\LocalLow\Kiwee Toolbar

C:\ProgramData\Trymedia

C:\ProgramData\Viewpoint

C:\Windows\system32\config\systemprofile\AppData\Roaming\agi

C:\Users\nicolas alexis\AppData\Local\cqcygoq.bat

 

(!) -- Fichiers temporaires supprimés.

 

.

HKCU\software\appdatalow\0aee516a-2564-c95d-9238-780847faa1b7

HKCU\Software\AppDataLow\software\{7D683C7A-B090-02DA-A7F1-C1704157427E}

HKCU\software\EoRezo

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

HKCU\software\Poker 770

HKLM\software\classes\AxMetaStream.MetaStreamCtl

HKLM\software\classes\AxMetaStream.MetaStreamCtl.1

HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary

HKLM\software\classes\AxMetaStream.MetaStreamCtlSecondary.1

HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}

HKLM\software\Dealio

HKLM\software\EoRezo

HKLM\software\MetaStream

HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine

HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1

HKLM\software\microsoft\windows\currentversion\uninstall\ViewpointMediaPlayer

HKLM\software\Poker 770

HKLM\software\Trymedia Systems

HKLM\software\Viewpoint

.

============== Scan additionnel ==============

.

.

* Mozilla FireFox Version 3.0.17 [fr] *

.

Nom du profil: 8mgqlmkr.default (nicolas alexis)

.

(NICOLA~1, Invalidprefs.js) Browser.download.dir, C:\Users\nicolas alexis\Downloads

(NICOLA~1, Invalidprefs.js) Browser.download.lastDir, C:\Users\nicolas alexis\Desktop

(NICOLA~1, Invalidprefs.js) Browser.search.selectedEngine, Kiwee Live Search

(NICOLA~1, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st

(NICOLA~1, Invalidprefs.js) Extensions.enabledItems, {CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}:1.5.2.35,{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.84,{b66bc4c3-6d25-4a10-8c59-01daa9063051}:1.5.1,gamestats.org@gmail.com:1.0,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,web@veoh.com:1.4,{B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.8

(NICOLA~1, Invalidprefs.js) Keyword.URL, hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q=

.

(NICOLA~1, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st

.

(NICOLA~1, prefs.js) Browser.download.dir, C:\Users\nicolas alexis\Downloads

(NICOLA~1, prefs.js) Browser.download.lastDir, C:\Users\nicolas alexis\Desktop

(NICOLA~1, prefs.js) Browser.search.selectedEngine, Kiwee Live Search

(NICOLA~1, prefs.js) Browser.startup.homepage, google.fr

(NICOLA~1, prefs.js) Extensions.enabledItems, {59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.84,{b66bc4c3-6d25-4a10-8c59-01daa9063051}:1.5.1,gamestats.org@gmail.com:1.0,{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20090123.1,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{20a82645-c095-46ed-80e3-08825760534b}:1.1,web@veoh.com:1.4,YPlayer@yummy.net:1.0.0.0,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.17

(NICOLA~1, prefs.js) Keyword.URL, hxxp://google.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%3BGFNT%3AB7B7B7%3BLC%3A2200cc%3BBGC%3AFFFFFF%3BVLC%3A551a8b%3BGALT%3A008B45%3BFORID%3A11%3BDIV%3A%23FFFFF0%3B&ie=ISO-8859-1&q=

.

.

.

* Internet Explorer Version 8.0.6001.18865 *

.

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

.

Start Page: hxxp://fr.msn.com/

Do404Search: 01000000

Local Page: C:\Windows\system32\blank.htm

Show_ToolBar: yes

Enable Browser Extensions: yes

Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896

.

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

.

Start Page: hxxp://fr.msn.com/

Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Delete_Temp_Files_On_Exit: yes

Local Page: C:\Windows\System32\blank.htm

Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

Search bar: hxxp://search.msn.com/spbasic.htm

.

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

.

Tabs: res://ieframe.dll/tabswelcome.htm

.

============== Suspect (Cracks, Serials, ...) ==============

.

C:\Users\nicolas alexis\Documents\DungeonParty\UpdaterDownloads\patch-dungeonparty-1.0.0.0-1.0.0.1.exe

C:\Users\nicolas alexis\Documents\DungeonParty\UpdaterDownloads\patch-dungeonparty-1.0.0.1-1.0.0.2.exe

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\T-77641-cle cd faire-part editioncrack (ZWT).zip

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\OSFZGKDMWZEAVVSVY6U7KKYF6OXW6RLQ\Virtual Villagers 1 + 2\Virtual Villagers 1 + Crack.zip

C:\Users\nicolas alexis\Documents\LimeWire\Incomplete\OSFZGKDMWZEAVVSVY6U7KKYF6OXW6RLQ\Virtual Villagers 1 + 2\Virtual Villagers 2 + Crack.zip

C:\Users\nicolas alexis\Documents\LimeWire\Saved\Bigfish Games - Virtual Villagers - The Secret City + Adnan_Boy 2008 + Precracked\Virtual Villagers - The Secret City.exe

C:\Users\nicolas alexis\Downloads\doom_3_patch_v1.31_version_windows_multi-langues_31778.exe

.

===================================

.

7023 Octet(s) - C:\Ad-Report-CLEAN[1].log

7157 Octet(s) - C:\Ad-Report-SCAN[1].log

.

855 Fichier(s) - C:\Users\NICOLA~1\AppData\Local\Temp

2 Fichier(s) - C:\Windows\Temp

14 Fichier(s) - C:\Windows\Prefetch

.

22 Fichier(s) - C:\Ad-Remover\BACKUP

66 Fichier(s) - C:\Ad-Remover\QUARANTINE

.

Fin à: 18:54:22 | 18/01/2010 - CLEAN[1]

.

============== E.O.F ==============

.

[pear]

Bonsoir,

 

C'est une bonne chose de faite.

Voyons la suite .

[oneill76]

Malwarebytes' Anti-Malware 1.44

Version de la base de données: 3593

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18865

 

18/01/2010 21:14:57

mbam-log-2010-01-18 (21-14-55).txt

 

Type de recherche: Examen complet (C:\|D:\|)

Eléments examinés: 352752

Temps écoulé: 1 hour(s), 57 minute(s), 13 second(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 3

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.SearchPage) -> Bad: (http://www.iesearch.com/) Good: (http://www.Google.com/) -> No action taken.

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

C:\Ad-Remover\QUARANTINE\Users\NICOLA~1\AppData\Roaming\EoRezo\SOFTWA~1\SoftwareUpdate.exe.vir (Rogue.Eorezo) -> No action taken.

C:\Ad-Remover\QUARANTINE\Users\NICOLA~1\AppData\Roaming\EoRezo\SOFTWA~1\SoftwareUpdateHP.exe.vir (Rogue.Eorezo) -> No action taken.

C:\Users\nicolas alexis\Downloads\Live-Player_setup.exe (Adware.NaviPromo) -> No action taken.