[Résolu] Virus récalcitrant sur mon ordinateur

pear · le 4 février 2010

Je posterai ce soir depuis pc home les rapports de MBAM et celui zHP ou hijackthis.

Pas hijackthis pour l'instant.

Prévoyez d'avoir à lancer Usbfix.(si je vous le demandais)

Télécharger Usb Fix de C_XX & Chiquitine29, sur le bureau

Installez le.

Vous devez désactiver la protection en temps réel de votre Antivirus qui peut considérer certains composants de ce logiciel comme néfastes.

* Pour cela, faites un clic droit sur l'icône de l'antivirus en bas à droite à côté de l'horloge puis Disable Guard ou Shield ou Résident...

Si vous utilisez Spybot

Pour désactiver TeaTimer qui ne set à rien et peut faire échouer une désinfection:!

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Si vous êtes Sous Vista:

Désactivez le contrôle des comptes utilisateurs (Vous le réactiverez par la suite):

http://www.zebulon.fr/astuces/220-desactiv...dans-vista.html

- Démarrer puis panneau de configuration->"Comptes d'utilisateurs"

- Cliquer ensuite sur désactiver et valider.

Lancer l'installation avec les paramètres par défault

Brancher les périphériques externes (clé USB, disque dur externe, etc...) sans les ouvrir

Faire un Clic-droit sur le raccourci Usbfix sur le bureau et choisir "Exécuter en tant qu'administrateur".

Lancer l' option 1(Recherche)

le rapport UsbFix.txt est sauvegardé à la racine du disque .

Faites en un copier/coller dans le bloc notes pour le poster.

Ensuite,

Lancer l'option 2(Suppression)

Le bureau disparait et le pc redémarre

Patientez le temps du scan.

le rapport UsbFix.txt est sauvegardé à la racine du disque

Faites en un copier/coller dans le bloc notes pour le poster.

Vaccination

Pour vous éviter une infection ultérieure:

Lancer l' Option 3 (vaccination)

Prévention:

Désactiver l'autorun sur tous les lecteur (USB, CD, DVD, SATA, Firewire, etc.

Pour cela:

Copier/coller ,dans le bloc notes,ce qui suit ,(en vert)sans ligne blanche au début.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:000000ff

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:000000ff

Enregistrez sur le bureau sous regis.reg.

Attention;c'est regis.reg et non regis.txt ou regis.reg.txt

Cliquez droit sur le fichier ->fusionner

Acceptez la modification du Régistre:

Pour Désinstaller

Double clic sur le raccourci UsbFix sur le bureau

Lancer l' option 5 ( Désinstaller ) ....

Modifié le 4 février 2010 par pear

ma_rhaja · le 5 février 2010

Bonjour pear. Je n'ai pas pu vous envoyer les rapports hier soir parce que ça m'a pris un peu plus de temps que prévu : MAJ de MBAM, téléchargement de USBfix, scan, désinfection..., et coupure d'électricité comme bonus

et voici les rapports :

1-Celui de MBAM que j'ai fait dernièrement :

Malwarebytes' Anti-Malware 1.44

Version de la base de données: 3628

Windows 5.1.2600 Service Pack 2

Internet Explorer 6.0.2900.2180

28/01/2010 23:02:35

mbam-log-2010-01-28 (23-02-35).txt

Type de recherche: Examen complet (C:\|D:\|O:\|)

Eléments examinés: 188104

Temps écoulé: 42 minute(s), 28 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 2

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 5

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\frameworkservice (Trojan.Delf) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\frameworkservice (Trojan.Delf) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (2) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

C:\Documents and Settings\User\Application Data\lsass.exe (Trojan.Delf) -> Quarantined and deleted successfully.

C:\Documents and Settings\User\Application Data\smss.exe (Trojan.Delf) -> Quarantined and deleted successfully.

C:\Documents and Settings\User\Application Data\svchost.exe (Trojan.Delf) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\Sexy Girls.scr (Trojan.Delf) -> Quarantined and deleted successfully.

C:\WINDOWS\inf\smss.exe (Trojan.Delf) -> Quarantined and deleted successfully.

Celui de USBfix de ce soir (option désinfection avec clé insérée) :

############################## | UsbFix V6.088 |

User : User (Administrateurs) # XPSP2-888540E65

Update on 04/02/2010 by El Desaparecido , C_XX & Chimay8

Start at: 20:07:34 | 04/02/2010

Website : http://pagesperso-orange.fr/NosTools/index.html

Contact : FindyKill.Contact@gmail.com

Intel® Pentium® Dual CPU E2180 @ 2.00GHz

Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2

Internet Explorer 6.0.2900.2180

Windows Firewall Status : Enabled

AV : AntiVir Desktop 9.0.1.32 [ (!) Disabled | Updated ]

C:\ -> Disque fixe local # 29,29 Go (10,58 Go free) [Disque local] # NTFS

D:\ -> Disque CD-ROM # 1,17 Mo (0 Mo free) [CONCERT_23_NOVEMBRE_2003] # CDFS

E:\ -> Disque fixe local # 45,23 Go (1,59 Go free) [Travail] # NTFS

O:\ -> Disque amovible # 951,38 Mo (845,77 Mo free) [HAJA_FLASH] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\logonui.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\WINDOWS\system32\userinit.exe

c:\program files\speedoptimizer\SPO.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Panda USB Vaccine\USBVaccine.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\alg.exe

################## | Elements infectieux |

Supprimé ! C:\WINDOWS\inf\smss.exe

Supprimé ! C:\DOCUME~1\User\MENUDM~1\PROGRA~1\DMARRA~1\DosÿOptimizer.pif

Supprimé ! C:\DOCUME~1\User\APPLIC~1\lsass.exe

Supprimé ! C:\DOCUME~1\User\APPLIC~1\smss.exe

Supprimé ! C:\DOCUME~1\User\APPLIC~1\svchost.exe

Supprimé ! C:\smss.exe

Supprimé ! C:\Recycler\S-1-5-21-1390067357-602609370-839522115-1003

Supprimé ! E:\Recycler\S-1-5-21-1390067357-602609370-839522115-1003

Supprimé ! O:\User_Fichiers.exe

Non supprimé ! O:\autorun.inf

################## | MD5 |

Supprimé ! C:\WINDOWS\system32\Sexy Girls.scr

Supprimé ! E:\Utilitaires\MahJong Suite 2009\MahJong Suite 2009.exe

Supprimé ! O:\CA\CA.exe

################## | Registre |

Supprimé ! [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFind"

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRun"

################## | Mountpoints2 |

################## | Listing des fichiers présent |

[06/02/2008 18:27|--a------|0] C:\AUTOEXEC.BAT

[06/02/2008 18:23|--a------|212] C:\Boot.bak

[26/11/2009 18:59|-rahs----|282] C:\boot.ini

[24/08/2001 13:00|-rahs----|4952] C:\Bootfont.bin

[03/08/2004 23:00|--a------|263488] C:\cmldr

[01/12/2009 20:55|--a------|19743] C:\ComboFix.txt

[06/02/2008 18:27|--a------|0] C:\CONFIG.SYS

[06/02/2008 18:58|--a------|10] C:\csb.log

[14/03/2009 00:46|--a------|184] C:\drwtsn32.log

[06/02/2008 18:27|-rahs----|0] C:\IO.SYS

[15/11/2008 17:11|--a------|1084131] C:\lma_log.html

[10/02/2009 18:36|--a------|51272] C:\log.html

[02/06/2009 21:20|--a------|4194322] C:\memory_map.tga

[06/02/2008 18:27|-rahs----|0] C:\MSDOS.SYS

[03/08/2004 22:38|-rahs----|47564] C:\NTDETECT.COM

[03/08/2004 22:59|-rahs----|251712] C:\ntldr

[?|?|?] C:\pagefile.sys

[26/01/2010 20:46|--a------|13030] C:\PDOXUSRS.NET

[04/02/2010 20:18|--a------|4066] C:\UsbFix.txt

[30/01/2010 13:14|--a------|0] C:\ZipCodec.txt

[19/12/2009 11:24|--a------|287] E:\Disque local ©.lnk

[?|?|?] O:\AUTORUN.INF

[01/02/2010 16:24|--a------|4343424] O:\mbam-rules_2.exe

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix .

# C:\adober.exe -> Dossier créé par VaccinUSB (Gof).

# C:\copy.exe -> Dossier créé par VaccinUSB (Gof).

# C:\comment.htt -> Dossier créé par VaccinUSB (Gof).

# C:\host.exe -> Dossier créé par VaccinUSB (Gof).

# C:\msvcr71.dll -> Dossier créé par VaccinUSB (Gof).

# C:\ravmon.exe -> Dossier créé par VaccinUSB (Gof).

# C:\ravmon.log -> Dossier créé par VaccinUSB (Gof).

# C:\sqlserv.exe -> Dossier créé par VaccinUSB (Gof).

# C:\start.exe -> Dossier créé par VaccinUSB (Gof).

# C:\temp.exe -> Dossier créé par VaccinUSB (Gof).

# C:\temp1.exe -> Dossier créé par VaccinUSB (Gof).

# C:\temp2.exe -> Dossier créé par VaccinUSB (Gof).

# C:\winfile.exe -> Dossier créé par VaccinUSB (Gof).

# C:\ntdelect.com -> Dossier créé par VaccinUSB (Gof).

# E:\autorun.inf -> Dossier créé par UsbFix .

# E:\adober.exe -> Dossier créé par VaccinUSB (Gof).

# E:\copy.exe -> Dossier créé par VaccinUSB (Gof).

# E:\comment.htt -> Dossier créé par VaccinUSB (Gof).

# E:\host.exe -> Dossier créé par VaccinUSB (Gof).

# E:\msvcr71.dll -> Dossier créé par VaccinUSB (Gof).

# E:\ravmon.exe -> Dossier créé par VaccinUSB (Gof).

# E:\ravmon.log -> Dossier créé par VaccinUSB (Gof).

# E:\sqlserv.exe -> Dossier créé par VaccinUSB (Gof).

# E:\start.exe -> Dossier créé par VaccinUSB (Gof).

# E:\temp.exe -> Dossier créé par VaccinUSB (Gof).

# E:\temp1.exe -> Dossier créé par VaccinUSB (Gof).

# E:\temp2.exe -> Dossier créé par VaccinUSB (Gof).

# E:\winfile.exe -> Dossier créé par VaccinUSB (Gof).

# E:\ntdelect.com -> Dossier créé par VaccinUSB (Gof).

################## | Upload |

Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_XPSP2-888540E65.zip : http://chiquitine.changelog.fr/Sample/Upload.php

Merci pour votre contribution .

################## | ! Fin du rapport # UsbFix V6.088 ! |

Et enfin le dernier rapport de MBAM après MAJ de ce soir (avec clé insérée) :

Malwarebytes' Anti-Malware 1.44

Version de la base de données: 3689

Windows 5.1.2600 Service Pack 2

Internet Explorer 6.0.2900.2180

04/02/2010 21:56:29

mbam-log-2010-02-04 (21-56-29).txt

Type de recherche: Examen complet (C:\|E:\|M:\|O:\|)

Eléments examinés: 254236

Temps écoulé: 1 hour(s), 20 minute(s), 12 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 1

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

E:\Games\EM4\Mods\Winterberg Winter 2009\WinterbergUpdater.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Je n'arrive pas à retrouver le premier rapport de scan de USBfix. J'ai oublié de renommer le fichier USBfix.txt (rapport de scan), et en relançant une seconde fois USBfix pour la désinfection j'ai toujours eu le même fichier : USBfix.txt. J'en déduis que le premier a été écrasé. Désolé

pear · le 5 février 2010

Bonjour,

C'est très bien comme cela.

Plus d'informations sur la version complète de cet outil.

Lancez cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Il ne nécessite aucune installation.

- Il peut être lancé depuis n'importe quelle unité de disque.

- Il peut être lancé d'une clé USB.

Cliquez sur letournevis

Dans la fenêtre qui s'ouvre, cochez tout.

Clic sur la Loupe pour lancer le scan

Au bout d'un moment ,vous aurez à accepter Sysinternal->I agree

Postez en le rapport qui apparait en cliquant l'appareil photo.

Modifié le 5 février 2010 par pear

ma_rhaja · le 5 février 2010

Bonsoir pear. Voici le rapport de ZHPdiag

Rapport de ZHPDiag v1.25.03 par Nicolas Coolman

Run by User at 05/02/2010 18:41:48

Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

Platform : Microsoft Windows XP (5.1.2600) Service Pack 2

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox (3.0.6)

Boot mode: Normal (Normal boot)

Total RAM: 1023 MB (66% free)

System drive C: has 11 GB (36%) free of 29 GB

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 11 Go of 29 Go)

D:\ CD-ROM drive (Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 45 Go)

F:\ CD-ROM drive (Not Inserted)

G:\ CD-ROM drive (Not Inserted)

H:\ CD-ROM drive (Not Inserted)

I:\ CD-ROM drive (Not Inserted)

J:\ CD-ROM drive (Not Inserted)

K:\ CD-ROM drive (Not Inserted)

L:\ CD-ROM drive (Not Inserted)

M:\ Floppy drive, Flash card reader, USB Key (Inserted)

O:\ Floppy drive, Flash card reader, USB Key (Inserted)

---\\ Processus lancés

[MD5.98E40849720813B5DD4D976F95E7A52E] - (.VIA Technologies, Inc. - HDeck MFC Application.) -- C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe

[MD5.3E4C03CEFAD8DE135263236B61A49C90] - (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe

[MD5.FC9F5C5D87D0A6D1E10773D20CB3C3EF] - (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe

[MD5.3BC3E304679E1E6CD2E5DB206B6EF4C6] - (.Crawler.com - Spyware Terminator Realtime Shield.) -- C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe

[MD5.AFC7EB091B9324C451ED12F12BBAB5BB] - (.PowerISO Computing, Inc. - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.EXE

[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

[MD5.5D060BC514037A537F0DAEA2293D6D54] - (.zbshareware, Inc - Antivirus software.) -- C:\Program Files\USB Disk Security\USBGuard.exe

[MD5.B8DA797CEA896C42F5BAD9E08E21AF9F] - (.SFX TEAM - SuperCopier 2 (explorer file copy replacement).) -- C:\Program Files\SuperCopier2\SuperCopier2.exe

[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[MD5.B40D86D515B1D09AAD956162D6715C98] - (.Tonec Inc. - Internet Download Manager (IDM).) -- E:\Internet Download Manager\IDMan.exe

[MD5.64E41E8FEE655B03E3F19DED21BA5118] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

[MD5.D2D52012C5A3CD41FEC0F090A8E47EE7] - (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe

[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe

[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe

[MD5.2979B03D5382A602623C0535B16AB9C0] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe

[MD5.63DCDE1A0D86EEB8924D6738FF616EAD] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe

[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

[MD5.AA78C4677E06CFD4FE048718EE7F6332] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 84.21.) -- C:\WINDOWS\system32\nvsvc32.exe

[MD5.259AF82A0932EEA4F316F92DB94707B6] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe

[MD5.DA81EC57ACD4CDC3D4C51CF3D409AF9F] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe

[MD5.766371A83A8182DCDA15FF8BE1BDB165] - (.Crawler.com - Spyware Terminator Realtime Shield Service.) -- C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: Shell=explorer.exe

---\\ Pages de démarrage d'Internet Explorer (R0)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

---\\ Pages de recherche d'Internet Explorer (R1)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

---\\ Internet Explorer URLSearchHook (R3)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\WINDOWS\system32\ieframe.dll

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Tonec Inc. - IDM BHO Module.) -- E:\Internet Download Manager\IDMIECC.dll

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar 5.6 for Internet Explorer.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_6_0_1.dll

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} . (.Crawler.com - Crawler Toolbar Browser Object.) -- C:\PROGRA~1\Crawler\Toolbar\ctbr.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google IE Client Toolbar.) -- c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar 5.6 for Internet Explorer.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_6_0_1.dll

O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} . (.Crawler.com - Crawler Toolbar Browser Object.) -- C:\PROGRA~1\Crawler\Toolbar\ctbr.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google IE Client Toolbar.) -- c:\program files\google\googletoolbar1.dll

---\\ Applications démarrées automatiquement par le registre (O4)

O4 - HKLM\..\Run: [HDAudDeck] . (.VIA Technologies, Inc. - HDeck MFC Application.) -- C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe

O4 - HKLM\..\Run: [NeroFilterCheck] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKLM\..\Run: [spywareTerminator] . (.Crawler.com - Spyware Terminator Realtime Shield.) -- C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe

O4 - HKLM\..\Run: [PWRISOVM.EXE] . (.PowerISO Computing, Inc. - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.EXE

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [uSB Antivirus] . (.zbshareware, Inc - Antivirus software.) -- C:\Program Files\USB Disk Security\USBGuard.exe

O4 - HKCU\..\Run: [superCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [iDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- E:\Internet Download Manager\IDMan.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [tscuninstall] . (.Microsoft Corporation - DLL d'action personnalisée d'installation.) -- C:\WINDOWS\system32\tscupgrd.exe

O4 - Global Startup: Adobe Reader Synchronizer.lnk . (.Adobe Systems Incorporated - Adobe Collaboration Synchronizer 8.0.) -- C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

O4 - Global Startup: ERUNT AutoBackup.lnk . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\ERUNT\AUTOBACK.EXE

O4 - Global Startup: Yahoo! Widgets.lnk . (.Yahoo! Inc. - Yahoo! Widgets.) -- C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Crawler Search - (No file) - tbr:iemenu

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE

O8 - Extra context menu item: Télécharger avec IDM . (.Pas de propriétaire - Pas de description.) -- E:\Internet Download Manager\IEExt.htm

O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM . (.Pas de propriétaire - Pas de description.) -- E:\Internet Download Manager\IEGetVL.htm

O8 - Extra context menu item: Télécharger tous les liens avec IDM . (.Pas de propriétaire - Pas de description.) -- E:\Internet Download Manager\IEGetAll.htm

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{DAF74477-3409-4F68-92D3-239103EC8A76}: NameServer = 193.251.141.253,80.15.245.3

O17 - HKLM\System\CS1\Services\Tcpip\..\{DAF74477-3409-4F68-92D3-239103EC8A76}: NameServer = 193.251.141.253,80.15.245.3

O17 - HKLM\System\CS2\Services\Tcpip\..\{DAF74477-3409-4F68-92D3-239103EC8A76}: NameServer = 193.251.141.253,80.15.245.3

O17 - HKLM\System\CS3\Services\Tcpip\..\{DAF74477-3409-4F68-92D3-239103EC8A76}: NameServer = 193.251.141.253,80.15.245.3

O17 - HKLM\System\CS4\Services\Tcpip\..\{DAF74477-3409-4F68-92D3-239103EC8A76}: NameServer = 193.251.141.253,80.15.245.3

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\Windows\system32\inetcomm.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} . (.Crawler.com - Crawler Toolbar Browser Object.) -- C:\PROGRA~1\Crawler\Toolbar\ctbr.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\system32\SHELL32.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Pas de propriétaire - Pas de description.) -- %SystemRoot%\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Machine Debug Manager (MDM) . (.Microsoft Corporation.) - C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Spouleur d'impression (Spooler) . (.Microsoft Corporation.) - C:\WINDOWS\system32\spoolsv.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) . (.Crawler.com.) - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\PandaUSBVaccine.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SpeedOptimizer Startup.job

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe

O40 - ASIC: Personnalisation du navigateur - >{CB58DED6-4AF3-4080-9DF1-DEE72075169F} . (.Pas de propriétaire - Pas de description.) -- Run

O40 - ASIC: Installation Support - {0291E591-EA41-4c82-8106-3DC6CE7F7664} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O40 - ASIC: Rendu VML (Vector Graphics Rendering) - {10072CEC-8CC1-11D1-986E-00A0C955B42F} - (not file)

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media 6.4 Player Shim.) -- C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Lecteur Windows Media Microsoft 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Pas de propriétaire - Pas de description.) -- advpack.dll

O40 - ASIC: Adobe Shockwave Director 10.2 - {233C1507-6A77-46A4-9443-F871F945D258} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Macromed\Director\SwDir.dll

O40 - ASIC: DirectAnimation - {283807B5-2C60-11D0-A31D-00AA00B92C03} - (not file)

O40 - ASIC: Adobe Shockwave Director 10.2 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)

O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll

O40 - ASIC: Installation Support - {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O40 - ASIC: Installation Support - {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O40 - ASIC: Liaison de données Dynamic HTML pour Java - {36f8ec70-c29a-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Uniscribe - {3bf42070-b3b1-11d1-b5c5-0000f8051515} - (not file)

O40 - ASIC: Création avancée - {4278c270-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe

O40 - ASIC: DirectShow - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)

O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)

O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)

O40 - ASIC: Classes Java DirectAnimation - {4f216970-c90c-11d1-b5c7-0000f8051515} - (not file)

O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)

O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- advpack.dll

O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)

O40 - ASIC: .NET Framework - {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - (not file)

O40 - ASIC: Dossiers Web - {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - (not file)

O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe

O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\System32\shell32.dll

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} - (not file)

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r124.) -- C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

O40 - ASIC: .NET Framework - {F196AC50-7C95-42E1-9947-BDAB18BF3C8C} - (not file)

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: AFD (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\System32\drivers\afd.sys

O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys

O41 - Driver: Pilote de CD-ROM (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: Pilote de filtre de gravure CD (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: Pilote de processeur Intel (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: Pilote IPSEC (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: Pilote de la classe Clavier (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: Pilote de la classe Souris (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: MRXSMB (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: Interface NetBIOS (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: NetBIOS sur TCP/IP (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: Pilote de connexion automatique d'accès distant (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: Rdbss (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (no object) (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys

O41 - Driver: Pilote de filtre de lecture digitale de CD audio (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: Pilote de port série (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: Spyware Terminator Driver 2 (sp_rsdrv2) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\system32\drivers\sp_rsdrv2.sys

O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

O41 - Driver: Pilote du protocole TCP/IP (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: Pilote de périphérique terminal (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: (no object) (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\System32\drivers\vga.sys

---\\ Logiciels installés (O42)

O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.)

O42 - Logiciel: AGEIA PhysX v6.10.25 - (.AGEIA Technologies, Inc..)

O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..)

O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..)

O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..)

O42 - Logiciel: Adibou V.3.10 (E:) - (.Pas de propriétaire.)

O42 - Logiciel: Adibou et l'Ombre Verte V.1.00 on E - (.Pas de propriétaire.)

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.)

O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.)

O42 - Logiciel: Adobe Reader 8 - Français - (.Adobe Systems Incorporated.)

O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..)

O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.)

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.)

O42 - Logiciel: Avira UnErase Personal - (.Pas de propriétaire.)

O42 - Logiciel: B17 - The Mighty Eighth - (.Pas de propriétaire.)

O42 - Logiciel: Bibliothèques GTK+ 2.14.7 rev a (supprimer uniquement) - (.Pas de propriétaire.)

O42 - Logiciel: Bus Driver - (.Pas de propriétaire.)

O42 - Logiciel: CDisplay 1.8.5.2 - (.trad-fr.com.)

O42 - Logiciel: Cinema Tycoon 2 Movie Mania - (.Adnan_Boy 2008.)

O42 - Logiciel: Coach Cérébral 3 - (.SBT.)

O42 - Logiciel: Colin McRae Rally 04 - (.Pas de propriétaire.)

O42 - Logiciel: Crawler Toolbar with Web Security Guard - (.Crawler, LLC.)

O42 - Logiciel: DivX Codec - (.DivX, Inc..)

O42 - Logiciel: DivX Content Uploader - (.DivX, Inc..)

O42 - Logiciel: DivX Converter - (.DivX, Inc..)

O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..)

O42 - Logiciel: DivX Web Player - (.DivX,Inc..)

O42 - Logiciel: Driver: Parallel Lines - (.Ubisoft.)

O42 - Logiciel: ERUNT 1.1j - (.Lars Hederer.)

O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.)

O42 - Logiciel: EasyPHP 2.0b1 - (.Pas de propriétaire.)

O42 - Logiciel: Emergency 4 - (.Pas de propriétaire.)

O42 - Logiciel: Entraîneur Cérébral 2 - (.Mindscape.)

O42 - Logiciel: FIFA 08 - (.Electronic Arts.)

O42 - Logiciel: FTP Expert 3 - (.Pas de propriétaire.)

O42 - Logiciel: GIMP 2.6.6 - (.Pas de propriétaire.)

O42 - Logiciel: GSM 1.1.4.2 - (.GuitarScalesMethod.com.)

O42 - Logiciel: GST 2.3.8.4 - (.GuitarSpeed.com.)

O42 - Logiciel: Google Talk (remove only) - (.Pas de propriétaire.)

O42 - Logiciel: Google Toolbar for Firefox - (.Google.)

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..)

O42 - Logiciel: Guitar Pro 5.2 - (.Arobas Music.)

O42 - Logiciel: Hacker Evolution: Untold (2.01.033)(remove only) - (.Pas de propriétaire.)

O42 - Logiciel: Internet Download Manager - (.Pas de propriétaire.)

O42 - Logiciel: King - (.Pas de propriétaire.)

O42 - Logiciel: L&H Power Translator Pro 7.0 - (.Pas de propriétaire.)

O42 - Logiciel: Les Indispensables Éducation pour Microsoft Office - (.Microsoft.)

O42 - Logiciel: MSXML 6.0 Parser - (.Microsoft Corporation.)

O42 - Logiciel: MSXML4 Parser - (.Microsoft Game Studios.)

O42 - Logiciel: Macromedia Dreamweaver 8 - (..)

O42 - Logiciel: Macromedia Extension Manager - (.Nom de votre société.)

O42 - Logiciel: Macromedia Fireworks MX 2004 - (.Macromedia.)

O42 - Logiciel: Macromedia Flash 8 - (.Macromedia.)

O42 - Logiciel: Macromedia Flash 8 Video Encoder - (.Macromedia.)

O42 - Logiciel: Macromedia FreeHand MXa - (.Macromedia.)

O42 - Logiciel: MahJong Suite 2009 v6.1 - (.TreeCardGames.com.)

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.)

O42 - Logiciel: Microsoft .NET Framework 2.0 - (.Microsoft Corporation.)

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.)

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.)

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.)

O42 - Logiciel: Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA - (.Microsoft Corporation.)

O42 - Logiciel: Monopoly - (.Pas de propriétaire.)

O42 - Logiciel: Mozilla Firefox (3.0.6) - (.Mozilla.)

O42 - Logiciel: Mozilla Thunderbird (2.0.0.12) - (.Mozilla.)

O42 - Logiciel: MuseScore 0.9 MuseScore score typesetter - (.Werner Schweer and Others.)

O42 - Logiciel: Nero 6 Ultra Edition - (.Pas de propriétaire.)

O42 - Logiciel: NoteWorthy Composer 2 Viewer - (.NoteWorthy Software, Inc..)

O42 - Logiciel: Notepad++ - (.Pas de propriétaire.)

O42 - Logiciel: OpenAL - (.Pas de propriétaire.)

O42 - Logiciel: PHP and MySQL Web Development - (.Pas de propriétaire.)

O42 - Logiciel: Panda USB Vaccine 1.0.1.4 - (.Panda Security.)

O42 - Logiciel: Pidgin - (.Pas de propriétaire.)

O42 - Logiciel: PowerISO - (.Pas de propriétaire.)

O42 - Logiciel: Prison Tycoon 4 - (.Valusoft.)

O42 - Logiciel: ProtectDisc Driver, Version 11 - (.ProtectDisc Software GmbH.)

O42 - Logiciel: QuickTime - (.Pas de propriétaire.)

O42 - Logiciel: Sid Meier's Pirates! - (.Firaxis Games.)

O42 - Logiciel: SimCity 4 - (.Pas de propriétaire.)

O42 - Logiciel: Software Informer 1.0 BETA - (.FreeDownloadManager.ORG.)

O42 - Logiciel: SpeedOptimizer - (.SpeedBit Ltd..)

O42 - Logiciel: Spyware Terminator - (.Crawler Inc..)

O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.)

O42 - Logiciel: Theatre Of War - (.Kalypso Media.)

O42 - Logiciel: Trivial Pursuit Family Edition - (.Zylom Games.)

O42 - Logiciel: USB Disk Security 5.1.0.8 - (.zbshareware, Inc..)

O42 - Logiciel: Unlocker 1.8.8 - (.Cedrick Collomb.)

O42 - Logiciel: VIA Platform Device Manager - (.VIA Technologies, Inc..)

O42 - Logiciel: VIA Rhine-Family Fast-Ethernet Adapter - (.Pas de propriétaire.)

O42 - Logiciel: VIA/S3G Display Driver 6.14.10.0086 - (.Pas de propriétaire.)

O42 - Logiciel: VLC media player 1.0.3 - (.VideoLAN Team.)

O42 - Logiciel: WBEncarta - (.Pas de propriétaire.)

O42 - Logiciel: Windows Installer 3.1 (KB893803) - (.Microsoft Corporation.)

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.)

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.)

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.)

O42 - Logiciel: Yahoo! Companion - (.Pas de propriétaire.)

O42 - Logiciel: Yahoo! Widgets - (.Yahoo! Inc..)

O42 - Logiciel: ZebHelpProcess 2.34 - (.Nicolas Coolman.)

O42 - Logiciel: vanBasco's Karaoke Player - (.Pas de propriétaire.)

---\\ Contenu des dossiers Fichiers Communs (O43)

O43 - CFD:Common File Directory ----D- C:\Program Files\7-Zip

O43 - CFD:Common File Directory ----D- C:\Program Files\a-squared Anti-Malware

O43 - CFD:Common File Directory ----D- C:\Program Files\ACDSee32

O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe

O43 - CFD:Common File Directory ----D- C:\Program Files\AGEIA Technologies

O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead

O43 - CFD:Common File Directory ----D- C:\Program Files\Avira

O43 - CFD:Common File Directory ----D- C:\Program Files\AVS4YOU

O43 - CFD:Common File Directory ----D- C:\Program Files\Bus Driver

O43 - CFD:Common File Directory ----D- C:\Program Files\CDisplay

O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications

O43 - CFD:Common File Directory ----D- C:\Program Files\Crawler

O43 - CFD:Common File Directory ----D- C:\Program Files\directx

O43 - CFD:Common File Directory ----D- C:\Program Files\DivX

O43 - CFD:Common File Directory ----D- C:\Program Files\ERUNT

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs

O43 - CFD:Common File Directory ----D- C:\Program Files\GameSpy Arcade

O43 - CFD:Common File Directory ----D- C:\Program Files\GIMP-2.0

O43 - CFD:Common File Directory ----D- C:\Program Files\Google

O43 - CFD:Common File Directory ----D- C:\Program Files\Guitar Pro 5

O43 - CFD:Common File Directory ----D- C:\Program Files\Guitar Scales Method

O43 - CFD:Common File Directory ----D- C:\Program Files\Guitar Speed Trainer

O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer

O43 - CFD:Common File Directory ----D- C:\Program Files\JoWooD

O43 - CFD:Common File Directory ----D- C:\Program Files\Lavalys

O43 - CFD:Common File Directory ----D- C:\Program Files\Learning Essentials

O43 - CFD:Common File Directory ----D- C:\Program Files\LHSP

O43 - CFD:Common File Directory ----D- C:\Program Files\Macromedia

O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Etudes

O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works

O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET

O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker

O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox

O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Thunderbird

O43 - CFD:Common File Directory ----D- C:\Program Files\msn gaming zone

O43 - CFD:Common File Directory ----D- C:\Program Files\netmeeting

O43 - CFD:Common File Directory ----D- C:\Program Files\Notepad++

O43 - CFD:Common File Directory ----D- C:\Program Files\OpenAL

O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express

O43 - CFD:Common File Directory ----D- C:\Program Files\Panda Security

O43 - CFD:Common File Directory ----D- C:\Program Files\Panda USB Vaccine

O43 - CFD:Common File Directory ----D- C:\Program Files\Pidgin

O43 - CFD:Common File Directory ----D- C:\Program Files\PowerISO

O43 - CFD:Common File Directory ----D- C:\Program Files\ProtectDisc Driver Installer

O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime

O43 - CFD:Common File Directory ----D- C:\Program Files\S3

O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne

O43 - CFD:Common File Directory ----D- C:\Program Files\Software Informer

O43 - CFD:Common File Directory ----D- C:\Program Files\SoftwarePassport

O43 - CFD:Common File Directory ----D- C:\Program Files\SpeedOptimizer

O43 - CFD:Common File Directory ----D- C:\Program Files\Spyware Terminator

O43 - CFD:Common File Directory ----D- C:\Program Files\SuperCopier2

O43 - CFD:Common File Directory ----D- C:\Program Files\trend micro

O43 - CFD:Common File Directory ----D- C:\Program Files\Ubi Soft

O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information

O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker

O43 - CFD:Common File Directory ----D- C:\Program Files\USB Disk Security

O43 - CFD:Common File Directory ----D- C:\Program Files\vanBasco's Karaoke Player

O43 - CFD:Common File Directory ----D- C:\Program Files\VIA

O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN

O43 - CFD:Common File Directory ----D- C:\Program Files\Visicom Media

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player

O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT

O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate

O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR

O43 - CFD:Common File Directory ----D- C:\Program Files\xerox

O43 - CFD:Common File Directory ----D- C:\Program Files\Yahoo!

O43 - CFD:Common File Directory ----D- C:\Program Files\ZebHelpProcess

O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag

O43 - CFD:Common File Directory ----D- C:\Program Files\Zylom Games

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\AVSMedia

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\GTK

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Macromedia

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Macromedia Shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Wise Installation Wizard

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.E4B9B8695533D636E023137035305F19] - 05/02/2010 - 18:40:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ModemLog_HUAWEI WIRELESS MODEM(153.6K).txt

O44 - LFC:[MD5.00000000000000000000000000000000] - 05/02/2010 - 18:36:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 05/02/2010 - 18:36:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log

O44 - LFC:[MD5.FC07DC547AD755EB8EC6D3614422FE90] - 05/02/2010 - 18:36:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nvapps.xml

O44 - LFC:[MD5.DBA91CD5A3A68302967C03213E52BDE8] - 05/02/2010 - 18:36:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\QTFont.qfn

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 05/02/2010 - 18:36:09 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat

O44 - LFC:[MD5.00000000000000000000000000000000] - 04/02/2010 - 22:45:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt

O44 - LFC:[MD5.B487D2ABB8C1F12EF306762418EA94AA] - 04/02/2010 - 22:21:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\spupdsvc.log

O44 - LFC:[MD5.8560FDEDAF0D2E6EC95A184F52DF2882] - 04/02/2010 - 22:20:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ie8_main.log

O44 - LFC:[MD5.A4D56FB62089B485A563D5196E596D64] - 04/02/2010 - 22:19:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log

O44 - LFC:[MD5.29C30FF93A0ECA52CCA74E0B0DB31B2B] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\comsetup.log

O44 - LFC:[MD5.5D1B45911F53D14988223CFBF34925D4] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ie8.log

O44 - LFC:[MD5.7870A26765DA3A47ABFBEFEE1A649F2C] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\iis6.log

O44 - LFC:[MD5.C49A1BE66786EE5F7A19BC99DC08A706] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.log

O44 - LFC:[MD5.62EC11A1CCD2D1E1697C0D876783435C] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ntdtcsetup.log

O44 - LFC:[MD5.87BEDDC3B51CB622F0592B452F5DBEAE] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tabletoc.log

O44 - LFC:[MD5.297AF98BFCE84A0AEF173F886434D779] - 04/02/2010 - 22:19:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\tsoc.log

O44 - LFC:[MD5.E13D5514694980C55CE7013A13480F68] - 04/02/2010 - 22:19:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\FaxSetup.log

O44 - LFC:[MD5.0F29243D3B8021F963BD7AC79B7C43C9] - 04/02/2010 - 22:19:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MedCtrOC.log

O44 - LFC:[MD5.FBC7BED6D469FB62CC67B119EF354ADB] - 04/02/2010 - 22:19:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ocgen.log

O44 - LFC:[MD5.C76F9ABE86CEA1F92F2E4D48A68A68EC] - 04/02/2010 - 22:19:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\msmqinst.log

O44 - LFC:[MD5.A509A1ED3B5727B5166AAD7DDC8F3AFC] - 04/02/2010 - 22:19:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\updspapi.log

O44 - LFC:[MD5.CF7E565E60ECB658245781CA90B55E4A] - 04/02/2010 - 22:15:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\KB932823-v3.log

O44 - LFC:[MD5.E1034D757709F37F2D1EBD96D5EAD02B] - 04/02/2010 - 21:59:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\QTFont.for

O44 - LFC:[MD5.990E1D5C518A30E77FB5739D9176CA64] - 04/02/2010 - 20:29:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_vaccin.txt

O44 - LFC:[MD5.B23EF3C448C649120F77EC3D7B58240B] - 04/02/2010 - 20:21:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_clean.txt

O44 - LFC:[MD5.BC523C4FFADBDFFA24DE2E92DDFC647C] - 04/02/2010 - 20:18:59 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_Upload_Me_XPSP2-888540E65.zip

O44 - LFC:[MD5.FC1057AB1B415F5ADFE8701D2CFD3B35] - 04/02/2010 - 20:18:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupact.log

O44 - LFC:[MD5.DDD52541618ECA66F92C5642F5EE1F63] - 02/02/2010 - 22:20:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log

O44 - LFC:[MD5.9A70066832A1795536D8B52A558915F0] - 02/02/2010 - 21:46:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 30/01/2010 - 13:14:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ZipCodec.txt

O44 - LFC:[MD5.FD59AB401DE6981373F88C2EC01B66AF] - 26/01/2010 - 20:46:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET

O44 - LFC:[MD5.4EA2F9C90AAC89CB818E6F6F265B41ED] - 26/01/2010 - 20:18:37 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl

O44 - LFC:[MD5.FEEF9D273AB64748DEFA5AF5A7702B69] - 23/01/2010 - 10:53:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wmsetup.log

O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 23/01/2010 - 10:53:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\amcompat.tlb

O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 23/01/2010 - 10:53:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nscompat.tlb

O44 - LFC:[MD5.9E6939938072101771BAB91610886122] - 23/01/2010 - 10:50:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Directx.log

O44 - LFC:[MD5.4BE7661C89897EAA9B28DAE290C3922F] - 22/01/2010 - 19:47:32 ---A- . (.Microsoft Corporation - W95INF32.) -- C:\WINDOWS\System32\w95inf32.dll

O44 - LFC:[MD5.7210D5407A2D2F52E851604666403024] - 22/01/2010 - 19:47:32 ---A- . (.Microsoft Corporation - WExtract 16bit Library.) -- C:\WINDOWS\System32\w95inf16.dll

O44 - LFC:[MD5.834A6379AA4A3A5A2F63C348342A3500] - 21/01/2010 - 22:10:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini

O44 - LFC:[MD5.1026721276442809633195C435889B0D] - 15/01/2010 - 09:17:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT

O44 - LFC:[MD5.D4761D8CDB9DEF6C39253C4166C610A7] - 08/01/2010 - 20:22:09 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ODBC.INI

O44 - LFC:[MD5.C72263A0B16B36E0B4BD2FD442FFFD54] - 08/01/2010 - 19:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\SIntf16.dll

O44 - LFC:[MD5.9A7A95E48E629A075C6D883D0EE524C8] - 08/01/2010 - 19:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\SIntf32.dll

O44 - LFC:[MD5.222810667D9FC2FAB1BEF82A8E510A1B] - 08/01/2010 - 19:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\SIntfNT.dll

O44 - LFC:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 07/01/2010 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

O44 - LFC:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 07/01/2010 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 15:08:28 ---A- C:\WINDOWS\Prefetch\DIVX PLAYER.EXE-2B5FB89F.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 15:09:52 ---A- C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 17:14:12 ---A- C:\WINDOWS\Prefetch\SIMCITY 4.EXE-0B6C28F4.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 19:33:01 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-2DAF499B.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 19:33:33 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-32437504.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 19:43:57 ---A- C:\WINDOWS\Prefetch\MMC.EXE-239D8F72.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 19:43:58 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A0169F6.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 20:05:42 ---A- C:\WINDOWS\Prefetch\GST.EXE-209D60FF.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 20:29:10 ---A- C:\WINDOWS\Prefetch\GSM.EXE-1FE21272.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 20:47:13 ---A- C:\WINDOWS\Prefetch\DRIVERPARALLELLINES.EXE-20F64E98.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:04:08 ---A- C:\WINDOWS\Prefetch\POWERISO.EXE-051276F4.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:04:24 ---A- C:\WINDOWS\Prefetch\FIFA08.EXE-34FF6C9B.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:14:46 ---A- C:\WINDOWS\Prefetch\VLC.EXE-22DF01AA.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:30:45 ---A- C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:30:48 ---A- C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 21:30:48 ---A- C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 22:55:52 ---A- C:\WINDOWS\Prefetch\KING.EXE-31EDC3AA.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 23:18:49 ---A- C:\WINDOWS\Prefetch\SPYWARETERMINATOR.EXE-2ED40363.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 23:37:19 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A94BB85.pf

O45 - LFCP:Last File Created Prefetch 03/02/2010 - 23:37:19 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-2E5AF1D7.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 19:47:10 ---A- C:\WINDOWS\Prefetch\KILL.EXE-25FB2C73.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 19:58:19 ---A- C:\WINDOWS\Prefetch\EGWREG.COM-3AF6A872.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:06:10 ---A- C:\WINDOWS\Prefetch\KILL_P.EXE-15C7A895.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:06:15 ---A- C:\WINDOWS\Prefetch\ERUNT.COM-00F1DDEA.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:06:17 ---A- C:\WINDOWS\Prefetch\SHUTDOWN.EXE-12DAD820.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:16:04 ---A- C:\WINDOWS\Prefetch\GUARDGUI.EXE-00ECD849.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:16:41 ---A- C:\WINDOWS\Prefetch\SWREG.EXE-2A961210.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:17:31 ---A- C:\WINDOWS\Prefetch\CLEANMGR.EXE-1F86EA8E.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:18:02 ---A- C:\WINDOWS\Prefetch\OSE.EXE-0125EB9C.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:18:57 ---A- C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:18:57 ---A- C:\WINDOWS\Prefetch\SED.EXE-2A032EBB.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:18:59 ---A- C:\WINDOWS\Prefetch\ZIP.EXE-020FF746.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:19:07 ---A- C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:27:25 ---A- C:\WINDOWS\Prefetch\ATTRIB.EXE-39EAFB02.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:07 ---A- C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:07 ---A- C:\WINDOWS\Prefetch\FSUM.EXE-1427D985.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:07 ---A- C:\WINDOWS\Prefetch\MODE.COM-31685BAE.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:07 ---A- C:\WINDOWS\Prefetch\SWXCACLS.COM-1C7BAF22.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:08 ---A- C:\WINDOWS\Prefetch\ECHOX.EXE-0EC32D49.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:19 ---A- C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:29:57 ---A- C:\WINDOWS\Prefetch\USBFIX.EXE-2CC34654.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:30:07 ---A- C:\WINDOWS\Prefetch\GO.EXE-39722D3E.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:30:08 ---A- C:\WINDOWS\Prefetch\SETPATH.EXE-2D3D2E76.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:32:12 ---A- C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 20:52:23 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-13DA0E71.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 21:58:24 ---A- C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:00:29 ---A- C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:00:29 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-1831A4F3.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:04:05 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-147710F4.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:04:06 ---A- C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:08:03 ---A- C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:08:30 ---A- C:\WINDOWS\Prefetch\AVGUARD.EXE-27095CE7.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:12:22 ---A- C:\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:14:46 ---A- C:\WINDOWS\Prefetch\WINDOWSXP-KB932823-V3-X86-FRA-166FD8B4.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:14:48 ---A- C:\WINDOWS\Prefetch\UPDATE.EXE-35E54297.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:17:15 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-310651A1.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:17:15 ---A- C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:03 ---A- C:\WINDOWS\Prefetch\INSTALLATION_IE8-XP.EXE-2BA560A0.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:05 ---A- C:\WINDOWS\Prefetch\IE8-SETUP-FULL-XP.EXE-270F4D72.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:08 ---A- C:\WINDOWS\Prefetch\IE-REDIST.EXE-34734092.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:16 ---A- C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:22 ---A- C:\WINDOWS\Prefetch\IESETUP.EXE-39902760.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:18:41 ---A- C:\WINDOWS\Prefetch\UPDATE.EXE-08C7F4AC.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:19:41 ---A- C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:19:41 ---A- C:\WINDOWS\Prefetch\SPUPDSVC.EXE-21B36524.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\ADOBECOLLABSYNC.EXE-26E90E96.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\AUTOBACK.EXE-14D36A86.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-3629C61D.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\IDMAN.EXE-12EDB88F.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\READER_SL.EXE-1A438403.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-1340EF7F.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-415F88EC.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\SUPERCOPIER2.EXE-05742BB9.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:23:11 ---A- C:\WINDOWS\Prefetch\YAHOOWIDGETS.EXE-21E9B73B.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:25:56 ---A- C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:38:02 ---A- C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf

O45 - LFCP:Last File Created Prefetch 04/02/2010 - 22:38:17 ---A- C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:17 ---A- C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:17 ---A- C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:17 ---A- C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:17 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-35A483DA.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:17 ---A- C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:18 ---A- C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:20 ---A- C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:37:29 ---A- C:\WINDOWS\Prefetch\CTOOLBAR.EXE-30BB9B12.pf

O45 - LFCP:Last File Created Prefetch 05/02/2010 - 18:41:48 ---A- C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:Last File Created Prefetch 30/01/2010 - 12:00:02 ---A- C:\WINDOWS\Prefetch\AVSCAN.EXE-07FC469C.pf

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

---\\ Export de clé d'application autorisée (ECAA)(O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

---\\ Déni du service (Local Security Authority) (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpdd.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Minimal\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpdd.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sermouse.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CS3\Network\vgasave.sys . (.Pas de propriétaire - Pas de description.) -- (not file)

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

---\\ Trojan Driver Search Data (TDSD) (O52)

O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv" . (.Microsoft Corporation - Pilote de minuteur pour les compatibles PC.) -- C:\WINDOWS\System32\timer.drv

O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll" . (.Microsoft Corporation - Mappeur MIDI Microsoft.) -- C:\WINDOWS\System32\midimap.dll

O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm" . (.Microsoft Corporation - Codec IMA ADPCM pour MSACM.) -- C:\WINDOWS\System32\imaadp32.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm" . (.Microsoft Corporation - Codec Microsoft ADPCM pour MSACM.) -- C:\WINDOWS\System32\msadp32.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm" . (.Microsoft Corporation - CODEC A-Law et u-Law pour MSACM Microsoft CCITT G.711.) -- C:\WINDOWS\System32\msg711.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm" . (.Microsoft Corporation - Codec audio Microsoft GSM 6.10 pour MSACM.) -- C:\WINDOWS\System32\msgsm32.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm

O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="msh263.drv" . (.Microsoft Corporation - Pilote Microsoft H.263 ICM.) -- C:\WINDOWS\System32\msh263.drv

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax

O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll" . (.Microsoft Corporation - Intel Indeo® Video YUV Codec.) -- C:\WINDOWS\System32\iyuv_32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll" . (.Microsoft Corporation - Compresseur Microsoft RLE.) -- C:\WINDOWS\System32\msrle32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll" . (.Microsoft Corporation - Compresseur Microsoft Vidéo 1.) -- C:\WINDOWS\System32\msvidc32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll" . (.Microsoft Corporation - Microsoft UYVY Video Decompressor.) -- C:\WINDOWS\System32\msyuv.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll" . (.Microsoft Corporation - Microsoft UYVY Video Decompressor.) -- C:\WINDOWS\System32\msyuv.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll" . (.Microsoft Corporation - Toshiba Video Codec.) -- C:\WINDOWS\System32\tsbyuv.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll" . (.Microsoft Corporation - Microsoft UYVY Video Decompressor.) -- C:\WINDOWS\System32\msyuv.dll

O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv" . (.Microsoft Corporation - Mappeur de sons Microsoft.) -- C:\WINDOWS\System32\msacm32.drv

O52 - TDSD:HKLM\...\Drivers32\"msacm.msaudio1"="msaud32.acm" . (.Microsoft Corporation - Windows Media Audio.) -- C:\WINDOWS\System32\msaud32.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD:HKLM\...\Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD:HKLM\...\Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll

O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv" . (.Microsoft Corporation - WDM Audio driver mapper.) -- C:\WINDOWS\System32\wdmaud.drv

O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv" . (.Microsoft Corporation - WDM Audio driver mapper.) -- C:\WINDOWS\System32\wdmaud.drv

O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv" . (.Microsoft Corporation - WDM Audio driver mapper.) -- C:\WINDOWS\System32\wdmaud.drv

O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv" . (.Microsoft Corporation - WDM Audio driver mapper.) -- C:\WINDOWS\System32\wdmaud.drv

O52 - TDSD:HKLM\...\Drivers32\"VIDC.MPG4"="mpg4c32.dll" . (.Microsoft Corporation - Microsoft MPEG-4 Video Codec.) -- C:\WINDOWS\System32\mpg4c32.dll

O52 - TDSD:HKLM\...\Drivers32\"VIDC.MP42"="mpg4c32.dll" . (.Microsoft Corporation - Microsoft MPEG-4 Video Codec.) -- C:\WINDOWS\System32\mpg4c32.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll

O52 - TDSD:HKLM\...\Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll

O52 - TDSD:HKLM\...\drivers.desc\"msaud32.acm"="Windows Media Audio" . (.Microsoft Corporation - Windows Media Audio.) -- C:\WINDOWS\System32\msaud32.acm

O52 - TDSD:HKLM\...\drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD:HKLM\...\drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (not file)

O52 - TDSD:HKLM\...\drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="VIA High Definition Audio" . (.Microsoft Corporation - WDM Audio driver mapper.) -- C:\WINDOWS\System32\wdmaud.drv

O52 - TDSD:HKLM\...\drivers.desc\"mpg4c32.dll"="Microsoft MPEG-4 Video Codec" . (.Microsoft Corporation - Microsoft MPEG-4 Video Codec.) -- C:\WINDOWS\System32\mpg4c32.dll

O52 - TDSD:HKLM\...\drivers.desc\"DivX.dll"="DivX 6.5.1 Codec" . (.Pas de propriétaire - Pas de description.) -- (not file)

---\\ Microsoft Control Security Providers (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoLowDiskSpaceChecks"=1

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoStartBanner"=

O56 - MWPE:[HKCU\...\Policies\Explorer] - "MemCheckBoxInRunDlg"=1

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoSMBalloonTip"=1

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDesktopCleanupWizard"=1

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoWelcomeScreen"=1

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoStrCmpLogical"=0

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoInstrumentation"=0

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoStartMenuMFUprogramsList"=0

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveAutoRun"=255

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoTrayItemsDisplay"=0

O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=255

O56 - MWPE:[HKCU\...\Policies\Explorer] - "HonorAutoRunSetting"=0

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveAutoRun"=255

O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDriveTypeAutoRun"=255

O56 - MWPE:[HKLM\...\Policies\Explorer] - "HonorAutoRunSetting"=0

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:[MD5.66DC3740111238C91B875D8A0021834D] - 23/01/2008 - 09:19:44 ---A- . (.Protect Software GmbH - ProtectDisc x64/x86 Hybrid Driver.) -- C:\WINDOWS\system32\drivers\ACEDRV11.sys

O58 - SDL:[MD5.0BD94FBFC14EA3606CD6CA4C0255BAA3] - 19/08/2004 - 15:51:56 ---A- . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\system32\drivers\acpi.sys

O58 - SDL:[MD5.1EE7B434BA961EF845DE136224C30FEC] - 27/05/2005 - 21:14:30 ---A- . (.Microsoft Corporation - Microsoft Acoustic Echo Canceller.) -- C:\WINDOWS\system32\drivers\aec.sys

O58 - SDL:[MD5.5AC495F4CB807B2B98AD2AD591E6D92E] - 03/08/2004 - 23:14:16 ---A- . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\system32\drivers\afd.sys

O58 - SDL:[MD5.F7DDE198231BE379DF7F9E1FD6777BFF] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\amdk6.sys

O58 - SDL:[MD5.C0F59933070392E662B3C2BB2BE77955] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\amdk7.sys

O58 - SDL:[MD5.F0D692B0BFFB46E30EB3CEA168BBC49F] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - IP/1394 Arp Client.) -- C:\WINDOWS\system32\drivers\arp1394.sys

O58 - SDL:[MD5.6E996CF8459A2594E0E9609D0E34D41F] - 02/12/2008 - 20:09:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\atksgt.sys

O58 - SDL:[MD5.EC88DA854AB7D7752EC8BE11A741BB7F] - 03/08/2004 - 22:58:32 ---A- . (.Microsoft Corporation - IP/ATM Arp Client.) -- C:\WINDOWS\system32\drivers\atmarpc.sys

O58 - SDL:[MD5.39A0A59180F19946374275745B21AEBA] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - ATM Ethernet Encapsulation Intermediate Driver.) -- C:\WINDOWS\system32\drivers\atmepvc.sys

O58 - SDL:[MD5.0128E78FE835F074E469F03DB681CA9E] - 03/08/2004 - 22:58:36 ---A- . (.Microsoft Corporation - ATM Lan Emulation Driver.) -- C:\WINDOWS\system32\drivers\atmlane.sys

O58 - SDL:[MD5.E7EF69B38D17BA01F914AE8F66216A38] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - ATM UNI Call Manager.) -- C:\WINDOWS\system32\drivers\atmuni.sys

O58 - SDL:[MD5.D9F724AA26C010A217C97606B160ED68] - 17/08/2001 - 21:59:44 ---A- . (.Microsoft Corporation - AudStub Driver.) -- C:\WINDOWS\system32\drivers\audstub.sys

O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 11:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys

O58 - SDL:[MD5.91C8887520EE93B2FC7387687FD182CB] - 07/10/2009 - 22:29:23 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys

O58 - SDL:[MD5.5ACEA1331BD4D9DAD232A23CFD7616BF] - 13/02/2009 - 11:29:11 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys

O58 - SDL:[MD5.452E382340BB0C5E694ED9D3625356D0] - 30/03/2009 - 09:33:07 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\WINDOWS\system32\drivers\avipbb.sys

O58 - SDL:[MD5.E4E6A0922E3D983728C9AD4E8D466954] - 03/08/2004 - 22:59:58 ---A- . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\system32\drivers\bridge.sys

O58 - SDL:[MD5.90A673FC8E12A79AFBED2576F6A7AAF9] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - CardBus/PCMCIA IDE Miniport Driver.) -- C:\WINDOWS\system32\drivers\cbidf2k.sys

O58 - SDL:[MD5.C1B486A7658353D33A10CC15211A873B] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - CD-ROM Audio Filter Driver.) -- C:\WINDOWS\system32\drivers\cdaudio.sys

O58 - SDL:[MD5.CD7D5152DF32B47F4E36F710B35AAE02] - 03/08/2004 - 23:14:12 ---A- . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\system32\drivers\cdfs.sys

O58 - SDL:[MD5.AF9C19B3100FE010496B1A27181FBF72] - 03/08/2004 - 22:59:54 ---A- . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\system32\drivers\cdrom.sys

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 09/03/2006 - 10:36:35 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys

O58 - SDL:[MD5.D86173B401470F06D9810F7962969DDF] - 03/08/2004 - 23:14:28 ---A- . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\system32\drivers\classpnp.sys

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 09/03/2006 - 10:36:35 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys

O58 - SDL:[MD5.3B2457605666FD854E738C3D25859CA3] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\crusoe.sys

O58 - SDL:[MD5.00CA44E4534865F8A3B64F7C0984BFF0] - 03/08/2004 - 22:59:56 ---A- . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\system32\drivers\disk.sys

O58 - SDL:[MD5.D16C81677A9BE399C63CD2EA486472A5] - 03/08/2004 - 22:59:54 ---A- . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\system32\drivers\diskdump.sys

O58 - SDL:[MD5.E2D3B7620310FE56685F9B15A6B404B3] - 19/08/2004 - 16:01:16 ---A- . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\drivers\dmboot.sys

O58 - SDL:[MD5.C77F5C20AA70197A69AA84BAA9DE43C8] - 19/08/2004 - 16:01:22 ---A- . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\drivers\dmio.sys

O58 - SDL:[MD5.E9317282A63CA4D188C0DF5E09C6AC5F] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\drivers\dmload.sys

O58 - SDL:[MD5.A6F881284AC1150E37D9AE47FF601267] - 03/08/2004 - 19:07:40 ---A- . (.Microsoft Corporation - Microsoft Kernel DLS Synthesizer.) -- C:\WINDOWS\system32\drivers\DMusic.sys

O58 - SDL:[MD5.FF86422268DE771D571E123EB7092C6A] - 03/08/2004 - 19:08:00 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Descrambler Filter.) -- C:\WINDOWS\system32\drivers\drmk.sys

O58 - SDL:[MD5.1ED4DBBAE9F5D558DBBA4CC450E3EB2E] - 03/08/2004 - 19:07:58 ---A- . (.Microsoft Corporation - Microsoft Kernel DRM Audio Descrambler Filter.) -- C:\WINDOWS\system32\drivers\drmkaud.sys

O58 - SDL:[MD5.FE97D0343ACFDEBDD578FC67CC91FA87] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - DirectX API Driver.) -- C:\WINDOWS\system32\drivers\dxapi.sys

O58 - SDL:[MD5.D3DAC8432110AAD0B02A58B4459AB835] - 03/08/2004 - 23:00:56 ---A- . (.Microsoft Corporation - DirectX Graphics Driver.) -- C:\WINDOWS\system32\drivers\dxg.sys

O58 - SDL:[MD5.A73F5D6705B1D820C19B18782E176EFD] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - DirectX Graphics Driver Thunk.) -- C:\WINDOWS\system32\drivers\dxgthk.sys

O58 - SDL:[MD5.3117F595E9615E04F05A54FC15A03B20] - 03/08/2004 - 23:14:18 ---A- . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\system32\drivers\fastfat.sys

O58 - SDL:[MD5.CED2E8396A8838E59D8FD529C680E02C] - 03/08/2004 - 22:59:28 ---A- . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\system32\drivers\fdc.sys

O58 - SDL:[MD5.E9648254056BCE81A85380C0C3647DC4] - 17/08/2001 - 20:13:08 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\drivers\fetnd5.sys

O58 - SDL:[MD5.8787449F8EF116DB0E8E06C3555746A7] - 17/04/2007 - 04:58:56 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\drivers\fetnd5bv.sys

O58 - SDL:[MD5.8B121FF880683607AB2AEF0340721718] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\system32\drivers\fips.sys

O58 - SDL:[MD5.0DD1DE43115B93F4D85E889D7A86F548] - 03/08/2004 - 22:59:28 ---A- . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\system32\drivers\flpydisk.sys

O58 - SDL:[MD5.157754F0DF355A9E0A6F54721914F9C6] - 03/08/2004 - 23:01:20 ---A- . (.Microsoft Corporation - Microsoft Filesystem Filter Manager.) -- C:\WINDOWS\system32\drivers\fltMgr.sys

O58 - SDL:[MD5.B71A69BB9CC88803F455341BD3992E0C] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - Pilote vidéo plein écran.) -- C:\WINDOWS\system32\drivers\fsvga.sys

O58 - SDL:[MD5.3E1E2BD4F39B0E2B7DC4F4D2BCC2779A] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\system32\drivers\fs_rec.sys

O58 - SDL:[MD5.A86859B77B908C18C2657F284AA29FE3] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Pilote de disque à FT.) -- C:\WINDOWS\system32\drivers\ftdisk.sys

O58 - SDL:[MD5.378055AB8DDA86228683C697C4E11685] - 03/08/2004 - 23:08:20 ---A- . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\system32\drivers\hidclass.sys

O58 - SDL:[MD5.5FFF41CD5108E9051D255C37825AF697] - 03/08/2004 - 23:08:18 ---A- . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\system32\drivers\hidparse.sys

O58 - SDL:[MD5.1DE6783B918F540149AA69943BDFEBA8] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\system32\drivers\hidusb.sys

O58 - SDL:[MD5.BFB7B73C942E816C4FB4A5A7BAE87136] - 09/03/2006 - 09:24:50 ---A- . (.Microsoft Corporation - HTTP Protocol Stack.) -- C:\WINDOWS\system32\drivers\http.sys

O58 - SDL:[MD5.D1EFCBD693B5BA21314D06368C471070] - 19/08/2004 - 15:56:40 ---A- . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\system32\drivers\i8042prt.sys

O58 - SDL:[MD5.0A7C49B48C772591A2D362DAA00246C8] - 03/03/2004 - 21:30:54 ---A- . (.Ahead Software AG - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys

O58 - SDL:[MD5.549BA4F539E7B8D8129500B96DD7B27A] - 03/03/2004 - 21:30:54 ---A- . (.Ahead Software AG - Nero Image Server.) -- C:\WINDOWS\system32\drivers\imagesrv.sys

O58 - SDL:[MD5.F8AA320C6A0409C0380E5D8A99D76EC6] - 03/08/2004 - 23:00:16 ---A- . (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\system32\drivers\imapi.sys

O58 - SDL:[MD5.DD5AD1E79AC26D3F8D8828AD4627F160] - 19/08/2004 - 15:59:10 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\intelppm.sys

O58 - SDL:[MD5.731F22BA402EE4B62748ADAF6363C182] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\system32\drivers\ipfltdrv.sys

O58 - SDL:[MD5.E1EC7F5DA720B640CD8FB8424F1B14BB] - 03/08/2004 - 23:04:46 ---A- . (.Microsoft Corporation - IP in IP Encapsulation Driver.) -- C:\WINDOWS\system32\drivers\ipinip.sys

O58 - SDL:[MD5.E2168CBC7098FFE963C6F23F472A3593] - 09/03/2006 - 09:24:51 ---A- . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\drivers\ipnat.sys

O58 - SDL:[MD5.64537AA5C003A6AFEEE1DF819062D0D1] - 03/08/2004 - 23:14:30 ---A- . (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\system32\drivers\ipsec.sys

O58 - SDL:[MD5.50708DAA1B1CBB7D6AC1CF8F56A24410] - 03/08/2004 - 23:00:48 ---A- . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\WINDOWS\system32\drivers\irenum.sys

O58 - SDL:[MD5.54632F1A7DE61DC3615D756F2A90FA72] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\system32\drivers\isapnp.sys

O58 - SDL:[MD5.D93CAD07C5683DB066B0B2D2D3790EAD] - 03/08/2004 - 19:07:50 ---A- . (.Microsoft Corporation - Kernel Mode Audio Mixer.) -- C:\WINDOWS\system32\drivers\kmixer.sys

O58 - SDL:[MD5.B9540E258F952650DE8DEC68719A5C97] - 03/08/2004 - 19:15:22 ---A- . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\system32\drivers\ks.sys

O58 - SDL:[MD5.EB7FFE87FD367EA8FCA0506F74A87FBB] - 03/08/2004 - 22:59:48 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\system32\drivers\ksecdd.sys

O58 - SDL:[MD5.975B6CF65F44E95883F3855BAE8CECAF] - 02/12/2008 - 20:09:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\lirsgt.sys

O58 - SDL:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 07/01/2010 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys

O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 07/01/2010 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

O58 - SDL:[MD5.D1F8BE91ED4DDB671D42E473E3FE71AB] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\system32\drivers\mcd.sys

O58 - SDL:[MD5.729D83E56C29C510258A6E9E79FFDDC3] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Multifunction Enumerator.) -- C:\WINDOWS\system32\drivers\mf.sys

O58 - SDL:[MD5.5AC7E16F5B40A6DA14B5F2B3ADA4693E] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\system32\drivers\modem.sys

O58 - SDL:[MD5.7D4F19411BD941E1D432A99E24230386] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\system32\drivers\mouclass.sys

O58 - SDL:[MD5.124D6846040C79B9C997F78EF4B2A4E5] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\system32\drivers\mouhid.sys

O58 - SDL:[MD5.65653F3B4477F3C63E68A9659F85EE2E] - 03/08/2004 - 22:58:32 ---A- . (.Microsoft Corporation - Mount Manager.) -- C:\WINDOWS\system32\drivers\mountmgr.sys

O58 - SDL:[MD5.DB07B0088CDFD20C2A22E675120EDE34] - 03/08/2004 - 22:58:22 ---A- . (.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) -- C:\WINDOWS\system32\drivers\mqac.sys

O58 - SDL:[MD5.46EDCC8F2DB2F322C24F48785CB46366] - 03/08/2004 - 23:00:58 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\system32\drivers\mrxdav.sys

O58 - SDL:[MD5.1B9329A08B56963DB7F36B1A364D63AC] - 09/03/2006 - 09:24:52 ---A- . (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\system32\drivers\mrxsmb.sys

O58 - SDL:[MD5.561B3A4333CA2DBDBA28B5B956822519] - 03/08/2004 - 23:00:42 ---A- . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\system32\drivers\msfs.sys

O58 - SDL:[MD5.C0F1D4A21DE5A415DF8170616703DEBF] - 03/08/2004 - 23:04:14 ---A- . (.Microsoft Corporation - MS General Packet Classifier.) -- C:\WINDOWS\system32\drivers\msgpc.sys

O58 - SDL:[MD5.AE431A8DD3C1D0D0610CDBAC16057AD0] - 03/08/2004 - 18:58:42 ---A- . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\system32\drivers\MSKSSRV.sys

O58 - SDL:[MD5.13E75FEF9DFEB08EEDED9D0246E1F448] - 03/08/2004 - 18:58:40 ---A- . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\system32\drivers\MSPCLOCK.sys

O58 - SDL:[MD5.1988A33FF19242576C3D0EF9CE785DA7] - 03/08/2004 - 18:58:42 ---A- . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\system32\drivers\MSPQM.sys

O58 - SDL:[MD5.469541F8BFD2B32659D5D463A6714BCE] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\system32\drivers\mssmbios.sys

O58 - SDL:[MD5.F66B6B1CDDEE6CA87CEFC016EB7A0D8E] - 09/03/2006 - 09:25:00 ---A- . (.Microsoft Corporation - Multiple UNC Provider driver.) -- C:\WINDOWS\system32\drivers\mup.sys

O58 - SDL:[MD5.08D43BBDACDF23F34D79E44ED35C1B4C] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\system32\drivers\ndistapi.sys

O58 - SDL:[MD5.8D3CE6B579CDE8D37ACC690B67DC2106] - 19/04/2005 - 21:54:04 ---A- . (.Microsoft Corporation - NDIS User mode I/O Driver.) -- C:\WINDOWS\system32\drivers\ndisuio.sys

O58 - SDL:[MD5.0B90E255A9490166AB368CD55A529893] - 03/08/2004 - 23:14:32 ---A- . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\system32\drivers\ndiswan.sys

O58 - SDL:[MD5.59FC3FB44D2669BC144FD87826BB571F] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\system32\drivers\ndproxy.sys

O58 - SDL:[MD5.3A2ACA8FC1D7786902CA434998D7CEB4] - 03/08/2004 - 23:03:22 ---A- . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\system32\drivers\netbios.sys

O58 - SDL:[MD5.0C80E410CD2F47134407EE7DD19CC86B] - 03/08/2004 - 23:14:38 ---A- . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\system32\drivers\netbt.sys

O58 - SDL:[MD5.5C5C53DB4FEF16CF87B9911C7E8C6FBC] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - IEEE1394 Ndis Miniport and Call Manager.) -- C:\WINDOWS\system32\drivers\nic1394.sys

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 09/03/2006 - 10:36:35 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys

O58 - SDL:[MD5.60CF8C7192B3614F240838DDBAA4A245] - 03/08/2004 - 22:59:52 ---A- . (.Microsoft Corporation - Netmon NT Driver.) -- C:\WINDOWS\system32\drivers\nmnt.sys

O58 - SDL:[MD5.4F601BCB8F64EA3AC0994F98FED03F8E] - 03/08/2004 - 23:00:44 ---A- . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\system32\drivers\npfs.sys

O58 - SDL:[MD5.29B9163A6D9C486DCAEFED190130ACB0] - 09/03/2006 - 15:29:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 84.21 .) -- C:\WINDOWS\system32\drivers\nv4_mini.sys

O58 - SDL:[MD5.B305F3FAD35083837EF46A0BBCE2FC57] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NWLINK2 Traffic Filter Driver.) -- C:\WINDOWS\system32\drivers\nwlnkflt.sys

O58 - SDL:[MD5.C99B3415198D1AAB7227F2C88FD664B9] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NWLINK2 Forwarder Driver.) -- C:\WINDOWS\system32\drivers\nwlnkfwd.sys

O58 - SDL:[MD5.79EA3FCDA7067977625B3363A2657C80] - 03/08/2004 - 23:03:36 ---A- . (.Microsoft Corporation - NWLINK2 IPX Protocol Driver.) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys

O58 - SDL:[MD5.56D34A67C05E94E16377C60609741FF8] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NWLINK2 IPX Netbios Protocol Driver.) -- C:\WINDOWS\system32\drivers\nwlnknb.sys

O58 - SDL:[MD5.C0BB7D1615E1ACBDC99757F6CEAF8CF0] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - NWLINK2 SPX Protocol Driver.) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys

O58 - SDL:[MD5.03373A79440473062C6F3AEDEC6A49C8] - 03/08/2004 - 23:02:24 ---A- . (.Microsoft Corporation - NetWare Redirector File System Driver.) -- C:\WINDOWS\system32\drivers\nwrdr.sys

O58 - SDL:[MD5.4BB30DDC53EBC76895E38694580CDFE9] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - ACPI Operation Registration Driver.) -- C:\WINDOWS\system32\drivers\oprghdlr.sys

O58 - SDL:[MD5.136E0CEA9BD1C42066692DECFA5C6418] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\p3.sys

O58 - SDL:[MD5.318696359AC7DF48D1E51974EC527DD2] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\system32\drivers\parport.sys

O58 - SDL:[MD5.3334430C29DC338092F79C38EF7B4CD0] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Partition Manager.) -- C:\WINDOWS\system32\drivers\partmgr.sys

O58 - SDL:[MD5.9575C5630DB8FB804649A6959737154C] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Pilote parallèle VDM.) -- C:\WINDOWS\system32\drivers\parvdm.sys

O58 - SDL:[MD5.7C5DA5C1ED801AD8B0309D5514F0B75E] - 19/08/2004 - 15:52:04 ---A- . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\system32\drivers\pci.sys

O58 - SDL:[MD5.F4BFDE7209C14A07AAA61E4D6AE69EAC] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Pilote de bus générique PCI IDE.) -- C:\WINDOWS\system32\drivers\pciide.sys

O58 - SDL:[MD5.520B91AB011456B940D9B05FC91108FF] - 03/08/2004 - 22:59:42 ---A- . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\system32\drivers\pciidex.sys

O58 - SDL:[MD5.641DA274E163617EA7A33506BC6DA8E3] - 19/08/2004 - 15:52:10 ---A- . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\system32\drivers\pcmcia.sys

O58 - SDL:[MD5.BC6B2BC69C1E009443E8B1FE2DB96101] - 16/03/2004 - 10:58:20 ---A- . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport Devices).) -- C:\WINDOWS\system32\drivers\portcls.sys

O58 - SDL:[MD5.F480712B761E538BC8E44EDE60F3A3C3] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Pilote de périphérique processeur.) -- C:\WINDOWS\system32\drivers\processr.sys

O58 - SDL:[MD5.48671F327553DCF1D27F6197F622A668] - 03/08/2004 - 23:04:20 ---A- . (.Microsoft Corporation - MS QoS Packet Scheduler.) -- C:\WINDOWS\system32\drivers\psched.sys

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 24/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys

O58 - SDL:[MD5.FE0D99D6F31E4FAD8159F690D68DED9C] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\system32\drivers\rasacd.sys

O58 - SDL:[MD5.98FAEB4A4DCF812BA1C6FCA4AA3E115C] - 03/08/2004 - 23:14:24 ---A- . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\system32\drivers\rasl2tp.sys

O58 - SDL:[MD5.7306EEED8895454CBED4669BE9F79FAA] - 03/08/2004 - 23:05:08 ---A- . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\system32\drivers\raspppoe.sys

O58 - SDL:[MD5.1C5CC65AAC0783C344F16353E60B72AC] - 03/08/2004 - 23:14:28 ---A- . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\system32\drivers\raspptp.sys

O58 - SDL:[MD5.FDBB1D60066FCFBB7452FD8F9829B242] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - PTI DirectParallel® mini-port/call-manager driver.) -- C:\WINDOWS\system32\drivers\raspti.sys

O58 - SDL:[MD5.01524CD237223B18ADBB48F70083F101] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Raw WAN Transport.) -- C:\WINDOWS\system32\drivers\rawwan.sys

O58 - SDL:[MD5.809CA45CAA9072B3176AD44579D7F688] - 09/03/2006 - 09:25:06 ---A- . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) -- C:\WINDOWS\system32\drivers\rdbss.sys

O58 - SDL:[MD5.4912D5B403614CE99C28420F75353332] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\drivers\rdpcdd.sys

O58 - SDL:[MD5.A2CAE2C60BC37E0751EF9DDA7CEAF4AD] - 03/08/2004 - 19:01:16 ---A- . (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\system32\drivers\rdpdr.sys

O58 - SDL:[MD5.B54CD38A9EBFBF2B3561426E3FE26F62] - 09/03/2006 - 09:25:06 ---A- . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\drivers\rdpwd.sys

O58 - SDL:[MD5.2CC30B68DD62B73D444A41322CD7FC4C] - 19/08/2004 - 12:54:52 ---A- . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\system32\drivers\redbook.sys

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 09/03/2006 - 10:36:35 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 09/03/2006 - 10:36:35 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys

O58 - SDL:[MD5.35E81B908AE4E97FC7BDF4607C516FF4] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\system32\drivers\RMCast.sys

O58 - SDL:[MD5.7CE8B277F3207EA82D7D22AD348BEFC6] - 03/08/2004 - 23:04:32 ---A- . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\system32\drivers\rndismp.sys

O58 - SDL:[MD5.D8B0B4ADE32574B2D9C5CC34DC0DBBE7] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\system32\drivers\rootmdm.sys

O58 - SDL:[MD5.31A36C43B6660D4859996A602091991A] - 05/03/2007 - 02:54:54 R--A- . (.S3 Graphics Co., Ltd. - S3 Graphics 86c700-series Miniport.) -- C:\WINDOWS\system32\drivers\S3gIGPm.sys

O58 - SDL:[MD5.3B35CE540758BBABB721E234CB5A4F3F] - 07/07/2008 - 08:40:49 ---A- . (.PowerISO Computing, Inc. - PowerISO Virtual Drive.) -- C:\WINDOWS\system32\drivers\scdemu.sys

O58 - SDL:[MD5.D7FD0FF761E28AC0EA35AD71E0CD67E9] - 03/08/2004 - 22:59:42 ---A- . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\system32\drivers\scsiport.sys

O58 - SDL:[MD5.02FC71B020EC8700EE8A46C58BC6F276] - 03/08/2004 - 23:07:48 ---A- . (.Microsoft Corporation - SecureDigital Bus Driver.) -- C:\WINDOWS\system32\drivers\sdbus.sys

O58 - SDL:[MD5.72DFFA33F8ED1C847075EEE2C1E790EE] - 19/08/2008 - 20:09:31 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys

O58 - SDL:[MD5.A2D868AEEFF612E70E213C451A70CAFB] - 03/08/2004 - 17:59:08 ---A- . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\system32\drivers\serenum.sys

O58 - SDL:[MD5.653201755CA96AB4AAA4131DAF6DA356] - 19/08/2004 - 15:56:40 ---A- . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\system32\drivers\serial.sys

O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 10/08/2005 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\drivers\sfdrv01.sys

O58 - SDL:[MD5.1D9F1BEC651815741F088A8FB88E17EE] - 03/08/2004 - 22:59:56 ---A- . (.Microsoft Corporation - Small Form Factor Disk Driver.) -- C:\WINDOWS\system32\drivers\sffdisk.sys

O58 - SDL:[MD5.586499FD312FFD7F78553F408E71682E] - 03/08/2004 - 22:59:56 ---A- . (.Microsoft Corporation - Small Form Factor SD Protocol Driver.) -- C:\WINDOWS\system32\drivers\sffp_sd.sys

O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 16/05/2005 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\drivers\sfhlp02.sys

O58 - SDL:[MD5.0D13B6DF6E9E101013A7AFB0CE629FE0] - 03/08/2004 - 22:59:56 ---A- . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\system32\drivers\sfloppy.sys

O58 - SDL:[MD5.EFEBBC1D13FDB77A6AF4EDDFC7232EDF] - 10/08/2005 - 15:06:28 ---A- . (.Protection Technology - StarForce Protection Synchronization Driver.) -- C:\WINDOWS\system32\drivers\sfsync02.sys

O58 - SDL:[MD5.017DAECF0ED3AA731313433601EC40FA] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Smard Card Driver Library.) -- C:\WINDOWS\system32\drivers\smclib.sys

O58 - SDL:[MD5.ADDC9E4757A68AB60562AD3CB9C288D6] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - 1394 Desktop Camera Driver.) -- C:\WINDOWS\system32\drivers\sonydcam.sys

O58 - SDL:[MD5.8E186B8F23295D1E42C573B82B80D548] - 03/08/2004 - 19:07:48 ---A- . (.Microsoft Corporation - Microsoft Kernel Audio Splitter.) -- C:\WINDOWS\system32\drivers\splitter.sys

O58 - SDL:[MD5.71E276F6D189413266EA22171806597B] - 07/02/2009 - 16:09:15 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\WINDOWS\system32\drivers\sptd.sys

O58 - SDL:[MD5.CCD6E6C387E3EFA3BA5FE0E7883821C1] - 02/08/2008 - 15:04:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys

O58 - SDL:[MD5.B52181023B827ACDA36C1B76751EBFFD] - 19/08/2004 - 16:04:58 ---A- . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du.) -- C:\WINDOWS\system32\drivers\sr.sys

O58 - SDL:[MD5.553007ECCE7F6565BBE645BEB66D3B69] - 09/03/2006 - 09:25:14 ---A- . (.Microsoft Corporation - Server driver.) -- C:\WINDOWS\system32\drivers\srv.sys

O58 - SDL:[MD5.654DFEA96BC82B4ACDA4F37E5E4A3BBF] - 11/05/2009 - 09:12:24 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys

O58 - SDL:[MD5.C43356072EB3E88CD62958DB10CEAD47] - 03/08/2004 - 19:08:04 ---A- . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\system32\drivers\stream.sys

O58 - SDL:[MD5.03C1BAE4766E2450219D20B993D6E046] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\WINDOWS\system32\drivers\swenum.sys

O58 - SDL:[MD5.94ABC808FC4B6D7D2BBF42B85E25BB4D] - 17/08/2001 - 21:00:52 ---A- . (.Microsoft Corporation - Microsoft GS Wavetable Synthesizer.) -- C:\WINDOWS\system32\drivers\swmidi.sys

O58 - SDL:[MD5.650AD082D46BAC0E64C9C0E0928492FD] - 03/08/2004 - 19:15:56 ---A- . (.Microsoft Corporation - System Audio WDM Filter.) -- C:\WINDOWS\system32\drivers\sysaudio.sys

O58 - SDL:[MD5.A2A9CA0D1A9AC1FF54220AA0789FE5CF] - 03/08/2004 - 23:00:00 ---A- . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\system32\drivers\tape.sys

O58 - SDL:[MD5.667192A11DB19F36624119C0DD4DE4F2] - 14/02/2006 - 20:56:26 ---A- . (.Microsoft Corporation - TCP/IP Protocol Driver.) -- C:\WINDOWS\system32\drivers\tcpip.sys

O58 - SDL:[MD5.4D58BB1AE8841AAFD8790AD7E1E3B8EA] - 03/08/2004 - 23:07:46 ---A- . (.Microsoft Corporation - IPv6 driver.) -- C:\WINDOWS\system32\drivers\tcpip6.sys

O58 - SDL:[MD5.6891B74AB9A016064E82A419388D0601] - 03/08/2004 - 23:07:50 ---A- . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\system32\drivers\tdi.sys

O58 - SDL:[MD5.38D437CF2D98965F239B0ABCD66DCB0F] - 19/08/2004 - 16:10:20 ---A- . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\drivers\tdpipe.sys

O58 - SDL:[MD5.ED0580AF02502D00AD8C4C066B156BE9] - 19/08/2004 - 16:10:20 ---A- . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\drivers\tdtcp.sys

O58 - SDL:[MD5.A540A99C281D933F3D69D55E48727F47] - 19/08/2004 - 12:10:18 ---A- . (.Microsoft Corporation - Terminal Server Driver.) -- C:\WINDOWS\system32\drivers\termdd.sys

O58 - SDL:[MD5.699450901C5CCFD82357CBC531CEDD23] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - TOSHIBA DVD Stream Minidriver.) -- C:\WINDOWS\system32\drivers\tosdvd.sys

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 09/03/2006 - 10:36:35 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys

O58 - SDL:[MD5.87A0E9E18C10A9E454238E3330E2A26D] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Microsoft Tunnel Interface Driver.) -- C:\WINDOWS\system32\drivers\tunmp.sys

O58 - SDL:[MD5.49C805D42D75EDDC9B6A7130999C9054] - 03/08/2004 - 20:07:44 ---A- . (.Microsoft Corporation - MS AGPv3.5 Filter.) -- C:\WINDOWS\system32\drivers\UAGP35.SYS

O58 - SDL:[MD5.12F70256F140CD7D52C58C7048FDE657] - 03/08/2004 - 23:00:32 ---A- . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\system32\drivers\udfs.sys

O58 - SDL:[MD5.889C5043FD95D83315FD63EFFB69F698] - 20/07/2004 - 21:39:08 ---A- . (.Texas Instruments - Win2K/WinXP UMP USB Device Driver.) -- C:\WINDOWS\system32\drivers\UmpUsbXP.sys

O58 - SDL:[MD5.A4815A4884898F355A3513E60843A4FD] - 09/03/2006 - 09:25:16 ---A- . (.Microsoft Corporation - Update Driver.) -- C:\WINDOWS\system32\drivers\update.sys

O58 - SDL:[MD5.AF090265EC388BAB320F1FF7E7A7D5EA] - 03/08/2004 - 23:04:34 ---A- . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\system32\drivers\usb8023.sys

O58 - SDL:[MD5.2654EECC6FB13603EBDDCD5C8EA943D1] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\usbcamd.sys

O58 - SDL:[MD5.61018BA9DF6B63E51D9753C980E73EC2] - 09/03/2006 - 10:36:35 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\usbcamd2.sys

O58 - SDL:[MD5.596EB39B50D6EBD9B734DC4AE0544693] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\system32\drivers\usbd.sys

O58 - SDL:[MD5.15E993BA2F6946B2BFBBFCD30398621E] - 03/08/2004 - 23:08:38 ---A- . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\system32\drivers\usbehci.sys

O58 - SDL:[MD5.C72F40947F92CEA56A8FB532EDF025F1] - 03/08/2004 - 23:08:44 ---A- . (.Microsoft Corporation - Default Hub Driver for USB.) -- C:\WINDOWS\system32\drivers\usbhub.sys

O58 - SDL:[MD5.2853FD4C4489E0F8BFCF78EFCDB7E998] - 09/05/2006 - 09:11:17 ---A- . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\usbintel.sys

O58 - SDL:[MD5.2034CA78F9C6E787B4B76D81AC888351] - 03/08/2004 - 23:08:44 ---A- . (.Microsoft Corporation - USB 1.1 & 2.0 Port Driver.) -- C:\WINDOWS\system32\drivers\usbport.sys

O58 - SDL:[MD5.6CD7B22193718F1D17A47A1CD6D37E75] - 03/08/2004 - 19:08:48 ---A- . (.Microsoft Corporation - USB Mass Storage Class Driver.) -- C:\WINDOWS\system32\drivers\USBSTOR.SYS

O58 - SDL:[MD5.F8FD1400092E23C8F2F31406EF06167B] - 03/08/2004 - 23:08:38 ---A- . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\system32\drivers\usbuhci.sys

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 09/03/2006 - 10:36:35 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys

O58 - SDL:[MD5.8A60EDD72B4EA5AEA8202DAF0E427925] - 03/08/2004 - 23:07:08 ---A- . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\drivers\vga.sys

O58 - SDL:[MD5.2C618A71FB58616A1EBF48F729BD6264] - 23/04/2007 - 09:56:32 R--A- . (.VIA Technologies, Inc. - VIA High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\viahduaa.sys

O58 - SDL:[MD5.59CB1338AD3654417BEA49636457F65D] - 03/08/2004 - 22:59:44 ---A- . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\system32\drivers\viaide.sys

O58 - SDL:[MD5.D5A9D123F5ED7C9965A481BD20CF66D8] - 03/08/2004 - 23:07:06 ---A- . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\system32\drivers\videoprt.sys

O58 - SDL:[MD5.313B1A0D5DB26DFE1C34A6C13B2CE0A7] - 19/08/2004 - 15:59:14 ---A- . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\system32\drivers\volsnap.sys

O58 - SDL:[MD5.984EF0B9788ABF89974CFED4BFBAACBC] - 03/08/2004 - 23:04:58 ---A- . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\system32\drivers\wanarp.sys

O58 - SDL:[MD5.2797F33EBF50466020C430EE4F037933] - 03/08/2004 - 19:15:06 ---A- . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) -- C:\WINDOWS\system32\drivers\wdmaud.sys

O58 - SDL:[MD5.2F31B7F954BED437F2C75026C65CAF7B] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\system32\drivers\wmilib.sys

O58 - SDL:[MD5.D7467F619F574AB36286D2903E751DEB] - 24/08/2006 - 20:26:02 ---A- . (.Microsoft Corporation - WPD USB Driver.) -- C:\WINDOWS\system32\drivers\wpdusb.sys

O58 - SDL:[MD5.6ABE6E225ADB5A751622A9CC3BC19CE8] - 24/08/2001 - 13:00:00 ---A- . (.Microsoft Corporation - Winsock2 IFS Layer.) -- C:\WINDOWS\system32\drivers\ws2ifsl.sys

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 03/08/2004 - 22:46:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 24/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 03/08/2004 - 22:45:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 03/08/2004 - 22:45:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 03/08/2004 - 22:45:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 03/08/2004 - 22:45:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 03/08/2004 - 22:45:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys

O58 - SDL:[MD5.C9BF2F12C4E6C12F8A85FBA4B6BC6208] - 03/08/2004 - 23:07:34 ---A- . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\system32\watchdog.sys

O58 - SDL:[MD5.692ED535C8ABAA2B38A13025DC0ED758] - 09/03/2006 - 09:25:18 ---A- . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\WINDOWS\system32\win32k.sys

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 02/02/2010 - 19:27:10 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\c70b32b8bd814721d45edf18c386a423_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 02/02/2010 - 20:50:12 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\bookmarkbackups\bookmarks-2010-02-02.json

O61 - LFC:Last File Created 02/02/2010 - 21:15:19 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Identities\{F3E70C1D-0213-41EA-9DD4-4CF992C7AEFA}\Microsoft\Outlook Express\Pop3uidl.dbx

O61 - LFC:Last File Created 02/02/2010 - 21:42:38 ---A- C:\Documents And Settings\User\Local Settings\Historique\History.IE5\MSHist012010020220100203\index.dat

O61 - LFC:Last File Created 03/02/2010 - 15:07:11 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\c1d0161643a68857c5a7e79cd9c24aa4_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 03/02/2010 - 15:08:05 ---A- C:\Documents And Settings\All Users\Application Data\SpeedBit\SpeedOptimizer3\State.xml

O61 - LFC:Last File Created 03/02/2010 - 15:08:29 ---A- C:\Documents And Settings\User\Application Data\DivX\DivX Player\DownloadQueue.dlq

O61 - LFC:Last File Created 03/02/2010 - 15:08:29 ---A- C:\Documents And Settings\User\Local Settings\temp\aax8.tmp

O61 - LFC:Last File Created 03/02/2010 - 15:08:53 ---A- C:\Documents And Settings\User\Recent\22-La Maison Et La Ville.avi.lnk

O61 - LFC:Last File Created 03/02/2010 - 15:09:17 ---A- C:\Documents And Settings\User\Recent\01 - Et la Terre fut.avi.lnk

O61 - LFC:Last File Created 03/02/2010 - 15:09:17 ---A- C:\Documents And Settings\User\Recent\BD.lnk

O61 - LFC:Last File Created 03/02/2010 - 15:09:29 ---A- C:\Documents And Settings\User\Local Settings\temp\aax9.tmp

O61 - LFC:Last File Created 03/02/2010 - 15:09:53 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Identities\{F3E70C1D-0213-41EA-9DD4-4CF992C7AEFA}\Microsoft\Outlook Express\Boîte d'envoi.dbx

O61 - LFC:Last File Created 03/02/2010 - 15:09:53 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Identities\{F3E70C1D-0213-41EA-9DD4-4CF992C7AEFA}\Microsoft\Outlook Express\Boîte de réception.dbx

O61 - LFC:Last File Created 03/02/2010 - 15:09:53 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Identities\{F3E70C1D-0213-41EA-9DD4-4CF992C7AEFA}\Microsoft\Outlook Express\Folders.dbx

O61 - LFC:Last File Created 03/02/2010 - 15:09:53 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Identities\{F3E70C1D-0213-41EA-9DD4-4CF992C7AEFA}\Microsoft\Outlook Express\Offline.dbx

O61 - LFC:Last File Created 03/02/2010 - 15:10:57 ---A- C:\Documents And Settings\User\Recent\ENTRIES.VCD.lnk

O61 - LFC:Last File Created 03/02/2010 - 15:10:57 ---A- C:\Documents And Settings\User\Recent\VCD.lnk

O61 - LFC:Last File Created 03/02/2010 - 16:22:23 ---A- C:\Documents And Settings\User\Application Data\ValuSoft\Prison Tycoon 4\maps\autoSave.fds

O61 - LFC:Last File Created 03/02/2010 - 16:24:44 ---A- C:\Documents And Settings\User\Application Data\ValuSoft\Prison Tycoon 4\setup.xml

O61 - LFC:Last File Created 03/02/2010 - 16:25:05 ---A- C:\Documents And Settings\User\.gimp-2.6\themerc

O61 - LFC:Last File Created 03/02/2010 - 16:25:08 ---A- C:\Documents And Settings\User\Local Settings\temp\fontconfig\cache\a95f601f309e559a801b3dc2772e780e-mipsel.cache-2

O61 - LFC:Last File Created 03/02/2010 - 16:25:32 ---A- C:\Documents And Settings\User\Local Settings\temp\fontconfig\cache\ef9c9ad8cc5857eb63cb3660bc8bd202-mipsel.cache-2

O61 - LFC:Last File Created 03/02/2010 - 17:11:51 ---A- C:\Documents And Settings\User\Mes documents\My Games\Driver Parallel Lines\fidy_et_fandry.DPLSave

O61 - LFC:Last File Created 03/02/2010 - 17:15:15 ---A- C:\Documents And Settings\User\Mes documents\SimCity 4\Regions\New York\region.ini

O61 - LFC:Last File Created 03/02/2010 - 17:15:15 ---A- C:\Documents And Settings\User\Mes documents\SimCity 4\SimCity 4.cfg

O61 - LFC:Last File Created 03/02/2010 - 19:08:31 ---A- C:\Documents And Settings\User\Local Settings\Historique\History.IE5\MSHist012010020320100204\index.dat

O61 - LFC:Last File Created 03/02/2010 - 19:08:46 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\4e9a8035d385d61dc218dd62192a0713_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 03/02/2010 - 19:27:18 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\Services.lnk

O61 - LFC:Last File Created 03/02/2010 - 19:28:26 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\Stratégie de sécurité locale.lnk

O61 - LFC:Last File Created 03/02/2010 - 19:32:54 ---A- C:\Documents And Settings\User\Application Data\Microsoft\MMC\secpol

O61 - LFC:Last File Created 03/02/2010 - 19:52:10 ---A- C:\Documents And Settings\User\Recent\CECE WINAMS.lnk

O61 - LFC:Last File Created 03/02/2010 - 20:47:30 ---A- C:\Documents And Settings\User\Mes documents\My Games\Driver Parallel Lines\Config.DPLUser

O61 - LFC:Last File Created 03/02/2010 - 21:04:07 ---A- C:\Documents And Settings\User\Recent\Film.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:04:07 ---A- C:\Documents And Settings\User\Recent\fifa08.daa.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 03 - Falling In Love With Jesus.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 04 - Lord I Lift Your Name On High.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 05 - That's Why We Praise Him.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 06 - Don't You Worry.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 07 - It's Already There.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 08 - When We Pray.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 09 - No Matter What.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 10 - No Higher Calling.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 11 - Lord, I'm Ready.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler - The Worship Project - 12 - You Are So Beautiful.mp3.lnk

O61 - LFC:Last File Created 03/02/2010 - 21:15:09 ---A- C:\Documents And Settings\User\Recent\Jonathan Butler-2004-Worship Project.lnk

O61 - LFC:Last File Created 03/02/2010 - 22:01:01 ---A- C:\Documents And Settings\User\Application Data\vlc\ml.xspf

O61 - LFC:Last File Created 03/02/2010 - 22:01:02 ---A- C:\Documents And Settings\User\Application Data\vlc\CACHEDIR.TAG

O61 - LFC:Last File Created 03/02/2010 - 22:01:02 ---A- C:\Documents And Settings\User\Application Data\vlc\plugins-04041e.dat

O61 - LFC:Last File Created 03/02/2010 - 22:01:02 ---A- C:\Documents And Settings\User\Application Data\vlc\vlc-qt-interface.ini

O61 - LFC:Last File Created 03/02/2010 - 22:01:02 ---A- C:\Documents And Settings\User\Application Data\vlc\vlcrc

O61 - LFC:Last File Created 03/02/2010 - 22:35:45 ---A- C:\Documents And Settings\User\Mes documents\FIFA 08\B. CARRIERE - Portug\B. CARRIERE - Portug

O61 - LFC:Last File Created 04/02/2010 - 19:08:30 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\1cd43b9aec10a3e48686562d5dd0b50d_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 04/02/2010 - 19:15:13 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt

O61 - LFC:Last File Created 04/02/2010 - 19:23:21 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref

O61 - LFC:Last File Created 04/02/2010 - 19:41:45 ---A- C:\Documents And Settings\User\Application Data\IDM\Scheduler\q_1.dt

O61 - LFC:Last File Created 04/02/2010 - 20:16:19 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4b9b1d66.qua

O61 - LFC:Last File Created 04/02/2010 - 20:18:58 R--A- C:\Documents And Settings\User\Local Settings\temp\Répertoire temporaire 1 pour UsbFix_Upload_Me_XPSP2-888540E65.zip\UsbFix_Upload_Me\UsbFix.txt

O61 - LFC:Last File Created 04/02/2010 - 20:19:26 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\XUL.mfl

O61 - LFC:Last File Created 04/02/2010 - 20:33:28 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\blocklist.xml

O61 - LFC:Last File Created 04/02/2010 - 20:34:38 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates.xml

O61 - LFC:Last File Created 04/02/2010 - 21:56:25 ---A- C:\Documents And Settings\User\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.26400

O61 - LFC:Last File Created 04/02/2010 - 21:56:25 ---A- C:\Documents And Settings\User\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP5.36914

O61 - LFC:Last File Created 04/02/2010 - 21:56:25 ---A- C:\Documents And Settings\User\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.26400

O61 - LFC:Last File Created 04/02/2010 - 21:56:29 ---A- C:\Documents And Settings\User\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-02-04 (21-56-29).txt

O61 - LFC:Last File Created 04/02/2010 - 21:58:04 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\bookmarkbackups\bookmarks-2010-02-04.json

O61 - LFC:Last File Created 04/02/2010 - 21:59:40 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\1007f0ad8a8d39dbeb18bff9b5992f53_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 04/02/2010 - 22:02:45 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\CBEBE581d01

O61 - LFC:Last File Created 04/02/2010 - 22:03:32 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\08401624d01

O61 - LFC:Last File Created 04/02/2010 - 22:04:19 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\active-update.xml

O61 - LFC:Last File Created 04/02/2010 - 22:08:18 ---A- C:\Documents And Settings\User\Recent\ivdf_fusebundle_nt_en.zip.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:16:19 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\41d188004140ffa1906101c63e11b309_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 04/02/2010 - 22:17:26 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb

O61 - LFC:Last File Created 04/02/2010 - 22:18:04 ---A- C:\Documents And Settings\User\Local Settings\temp\IE8-Setup-Full-XP.exe

O61 - LFC:Last File Created 04/02/2010 - 22:21:17 ---A- C:\Documents And Settings\User\Local Settings\Historique\History.IE5\MSHist012010020420100205\index.dat

O61 - LFC:Last File Created 04/02/2010 - 22:21:17 -SHA- C:\Documents And Settings\User\IETldCache\index.dat

O61 - LFC:Last File Created 04/02/2010 - 22:21:19 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.bak

O61 - LFC:Last File Created 04/02/2010 - 22:21:20 -SHA- C:\Documents And Settings\User\Mes documents\Ma musique\Desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:20 -SHA- C:\Documents And Settings\User\Mes documents\Mes images\Desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:20 -SHA- C:\Documents And Settings\User\Mes documents\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Application Data\Microsoft\Internet Explorer\Quick Launch\Démarrer Internet Explorer.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Favoris\Liens\Débuter avec IE8.url

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Favoris\Sites Web Microsoft\Microsoft Store.url

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Favoris\Sites Web Microsoft\Site Internet Explorer sur Microsoft.com.url

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Menu Démarrer\Programmes\Accessoires\Outils système\Internet Explorer (sans module complémentaire).lnk

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 ---A- C:\Documents And Settings\User\Menu Démarrer\Programmes\Internet Explorer.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 -SHA- C:\Documents And Settings\User\Favoris\Liens\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:22 -SHA- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 ---A- C:\Documents And Settings\User\Favoris\Liens\Galerie de composants Web Slice.url

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\AHI34FLL\fwlink[1]

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Galerie de composants Web Slice~.feed-ms

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 -SH-- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\5WQOBVEL\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 -SH-- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\AHI34FLL\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 -SH-- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\WFVALKTW\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 -SH-- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\XHJZ5YLC\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:21:23 -SH-- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini

O61 - LFC:Last File Created 04/02/2010 - 22:22:23 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt

O61 - LFC:Last File Created 04/02/2010 - 22:22:34 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\4e3001de44e20afc1b4e7ce4765081e9_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 04/02/2010 - 22:23:31 ---A- C:\Documents And Settings\User\Recent\UsbFix_vaccin.txt.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:24:51 ---A- C:\Documents And Settings\User\Recent\UsbFix_clean.txt.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:30:01 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Yahoo\Widget Engine\Widget Data\Digital Clock\alarm.mp3

O61 - LFC:Last File Created 04/02/2010 - 22:43:37 ---A- C:\Documents And Settings\User\Recent\CA.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:43:37 ---A- C:\Documents And Settings\User\Recent\pear.txt.lnk

O61 - LFC:Last File Created 04/02/2010 - 22:45:26 --HA- C:\Documents And Settings\User\Local Settings\Application Data\IconCache.db

O61 - LFC:Last File Created 04/02/2010 - 22:45:34 -SH-- C:\Documents And Settings\User\ntuser.ini

O61 - LFC:Last File Created 05/02/2010 - 18:36:10 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini

O61 - LFC:Last File Created 05/02/2010 - 18:36:11 ---A- C:\Documents And Settings\User\Application Data\SpeedBit\SpeedOptimizer3\Log.txt

O61 - LFC:Last File Created 05/02/2010 - 18:36:11 -SHA- C:\Documents And Settings\User\Local Settings\desktop.ini

O61 - LFC:Last File Created 05/02/2010 - 18:36:12 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\sched.log

O61 - LFC:Last File Created 05/02/2010 - 18:36:17 ---A- C:\Documents And Settings\User\Application Data\Adobe\Acrobat\8.0\Synchronizer\adobesynchronizersu80

O61 - LFC:Last File Created 05/02/2010 - 18:36:19 ---A- C:\Documents And Settings\User\Application Data\DMCache\settings.bak

O61 - LFC:Last File Created 05/02/2010 - 18:36:27 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\avguard.log

O61 - LFC:Last File Created 05/02/2010 - 18:36:29 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\EVENTDB\avevtdb.dbe

O61 - LFC:Last File Created 05/02/2010 - 18:36:29 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini

O61 - LFC:Last File Created 05/02/2010 - 18:36:30 -S-A- C:\Documents And Settings\User\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1390067357-602609370-839522115-1003\06f43b7259e795574a5063bb7cad4dd1_988031cf-d332-4c05-8d71-fa5a3552faca

O61 - LFC:Last File Created 05/02/2010 - 18:36:32 ---A- C:\Documents And Settings\User\Application Data\IDM\defextmap.dat

O61 - LFC:Last File Created 05/02/2010 - 18:36:32 ---A- C:\Documents And Settings\User\Application Data\IDM\urlexclist.dat

O61 - LFC:Last File Created 05/02/2010 - 18:36:36 ---A- C:\Documents And Settings\All Users\Application Data\SpeedBit\SpeedOptimizer3\DB\StartupAppList.xml

O61 - LFC:Last File Created 05/02/2010 - 18:36:36 ---A- C:\Documents And Settings\User\Application Data\SpeedBit\SpeedOptimizer3\DB\StartupAppList.xml

O61 - LFC:Last File Created 05/02/2010 - 18:37:19 ----- C:\Documents And Settings\User\Cookies\index.dat

O61 - LFC:Last File Created 05/02/2010 - 18:37:19 ---A- C:\Documents And Settings\User\Local Settings\Historique\History.IE5\index.dat

O61 - LFC:Last File Created 05/02/2010 - 18:37:26 -SHA- C:\Documents And Settings\User\Local Settings\Historique\History.IE5\MSHist012010020520100206\index.dat

O61 - LFC:Last File Created 05/02/2010 - 18:37:33 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\pluginreg.dat

O61 - LFC:Last File Created 05/02/2010 - 18:37:36 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\urlclassifierkey3.txt

O61 - LFC:Last File Created 05/02/2010 - 18:39:55 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\places.sqlite

O61 - LFC:Last File Created 05/02/2010 - 18:40:12 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\firebug\annotations.json

O61 - LFC:Last File Created 05/02/2010 - 18:40:12 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\prefs.js

O61 - LFC:Last File Created 05/02/2010 - 18:40:13 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\places.sqlite-journal

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\cert8.db

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\cookies.sqlite

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\key3.db

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\localstore.rdf

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\_CACHE_001_

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\_CACHE_002_

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\_CACHE_003_

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\Cache\_CACHE_MAP_

O61 - LFC:Last File Created 05/02/2010 - 18:40:15 ---A- C:\Documents And Settings\User\Local Settings\Application Data\Mozilla\Firefox\Profiles\bxi629es.default\urlclassifier3.sqlite

---\\ Liste des outils de nettoyage (LATC) (O63)

O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.)

O63 - Logiciel: RSIT - (random/random)

O63 - Logiciel: UsbFix - (Chiquitne29)

---\\ Liste des services Legacy (LALS) (O64)

O64 - Services: CurCS - avast! Asynchronous Virus Monitor (Aavmker4) - LEGACY_AAVMKER4

O64 - Services: CurCS - acedrv11 (acedrv11) - LEGACY_ACEDRV11

O64 - Services: CurCS - AFD (AFD) - LEGACY_AFD

O64 - Services: CurCS - Service de la passerelle de la couche Application (ALG) - LEGACY_ALG

O64 - Services: CurCS - AMON (AMON) - LEGACY_AMON

O64 - Services: CurCS - Avira AntiVir Guard (AntiVirService) - LEGACY_ANTIVIRSERVICE

O64 - Services: CurCS - Gestion d'applications (AppMgmt) - LEGACY_APPMGMT

O64 - Services: CurCS - avast! Standard Shield Support (aswMon2) - LEGACY_ASWMON2

O64 - Services: CurCS - aswRdr (aswRdr) - LEGACY_ASWRDR

O64 - Services: CurCS - avast! Network Shield Support (aswTdi) - LEGACY_ASWTDI

O64 - Services: CurCS - atksgt (atksgt) - LEGACY_ATKSGT

O64 - Services: CurCS - Audio Windows (AudioSrv) - LEGACY_AUDIOSRV

O64 - Services: CurCS - avast! Antivirus (avast! Antivirus) - LEGACY_AVAST!_ANTIVIRUS

O64 - Services: CurCS - avgio (avgio) - LEGACY_AVGIO

O64 - Services: CurCS - avgntflt (avgntflt) - LEGACY_AVGNTFLT

O64 - Services: CurCS - avipbb (avipbb) - LEGACY_AVIPBB

O64 - Services: CurCS - Beep (Beep) - LEGACY_BEEP

O64 - Services: CurCS - Explorateur d'ordinateur (Browser) - LEGACY_BROWSER

O64 - Services: CurCS - catchme (catchme) - LEGACY_CATCHME

O64 - Services: CurCS - cdfs (cdfs) - LEGACY_CDFS

O64 - Services: CurCS - CLASSPNP_2 (CLASSPNP_2) - LEGACY_CLASSPNP_2

O64 - Services: CurCS - Application système COM+ (COMSysApp) - LEGACY_COMSYSAPP

O64 - Services: CurCS - Services de cryptographie (CryptSvc) - LEGACY_CRYPTSVC

O64 - Services: CurCS - Lanceur de processus serveur DCOM (DcomLaunch) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - Client DHCP (Dhcp) - LEGACY_DHCP

O64 - Services: CurCS - Service d'administration du Gestionnaire de disque logique (dmadmin) - LEGACY_DMADMIN

O64 - Services: CurCS - dmboot (dmboot) - LEGACY_DMBOOT

O64 - Services: CurCS - dmload (dmload) - LEGACY_DMLOAD

O64 - Services: CurCS - Gestionnaire de disque logique (dmserver) - LEGACY_DMSERVER

O64 - Services: CurCS - Client DNS (Dnscache) - LEGACY_DNSCACHE

O64 - Services: CurCS - Service de rapport d'erreurs (ERSvc) - LEGACY_ERSVC

O64 - Services: CurCS - Système d'événements de COM+ (EventSystem) - LEGACY_EVENTSYSTEM

O64 - Services: CurCS - fastfat (fastfat) - LEGACY_FASTFAT

O64 - Services: CurCS - Fips (Fips) - LEGACY_FIPS

O64 - Services: CurCS - FltMgr (FltMgr) - LEGACY_FLTMGR

O64 - Services: CurCS - Fs_Rec (Fs_Rec) - LEGACY_FS_REC

O64 - Services: CurCS - gdrv (gdrv) - LEGACY_GDRV

O64 - Services: CurCS - Classificateur de paquets générique (Gpc) - LEGACY_GPC

O64 - Services: CurCS - Aide et support (helpsvc) - LEGACY_HELPSVC

O64 - Services: CurCS - HTTP (HTTP) - LEGACY_HTTP

O64 - Services: CurCS - Traducteur d'adresses réseau IP (IpNat) - LEGACY_IPNAT

O64 - Services: CurCS - Pilote IPSEC (IPSec) - LEGACY_IPSEC

O64 - Services: CurCS - Pilote de bus Plug-and-Play ISA/EISA (isapnp) - LEGACY_ISAPNP

O64 - Services: CurCS - ksecdd (ksecdd) - LEGACY_KSECDD

O64 - Services: CurCS - Serveur (lanmanserver) - LEGACY_LANMANSERVER

O64 - Services: CurCS - Station de travail (LanmanWorkstation) - LEGACY_LANMANWORKSTATION

O64 - Services: CurCS - lirsgt (lirsgt) - LEGACY_LIRSGT

O64 - Services: CurCS - Assistance TCP/IP NetBIOS (LmHosts) - LEGACY_LMHOSTS

O64 - Services: CurCS - mbr (mbr) - LEGACY_MBR

O64 - Services: CurCS - mchInjDrv (mchInjDrv) - LEGACY_MCHINJDRV

O64 - Services: CurCS - Machine Debug Manager (MDM) - LEGACY_MDM

O64 - Services: CurCS - mountmgr (mountmgr) - LEGACY_MOUNTMGR

O64 - Services: CurCS - Redirecteur client WebDav (MRxDAV) - LEGACY_MRXDAV

O64 - Services: CurCS - MRXSMB (MRxSmb) - LEGACY_MRXSMB

O64 - Services: CurCS - Distributed Transaction Coordinator (MSDTC) - LEGACY_MSDTC

O64 - Services: CurCS - Msfs (Msfs) - LEGACY_MSFS

O64 - Services: CurCS - Windows Installer (MSIServer) - LEGACY_MSISERVER

O64 - Services: CurCS - Mup (Mup) - LEGACY_MUP

O64 - Services: CurCS - Pilote système NDIS (NDIS) - LEGACY_NDIS

O64 - Services: CurCS - Pilote TAPI NDIS d'accès distant (NdisTapi) - LEGACY_NDISTAPI

O64 - Services: CurCS - NDIS mode utilisateur E/S Protocole (Ndisuio) - LEGACY_NDISUIO

O64 - Services: CurCS - NDProxy (NDProxy) - LEGACY_NDPROXY

O64 - Services: CurCS - Interface NetBIOS (NetBIOS) - LEGACY_NETBIOS

O64 - Services: CurCS - NetBIOS sur TCP/IP (NetBT) - LEGACY_NETBT

O64 - Services: CurCS - Connexions réseau (Netman) - LEGACY_NETMAN

O64 - Services: CurCS - NLA (Network Location Awareness) (Nla) - LEGACY_NLA

O64 - Services: CurCS - nod32drv (nod32drv) - LEGACY_NOD32DRV

O64 - Services: CurCS - NOD32 Kernel Service (NOD32krn) - LEGACY_NOD32KRN

O64 - Services: CurCS - Npfs (Npfs) - LEGACY_NPFS

O64 - Services: CurCS - ntfs (ntfs) - LEGACY_NTFS

O64 - Services: CurCS - Null (Null) - LEGACY_NULL

O64 - Services: CurCS - NVIDIA Display Driver Service (NVSvc) - LEGACY_NVSVC

O64 - Services: CurCS - Office Source Engine (ose) - LEGACY_OSE

O64 - Services: CurCS - PartMgr (PartMgr) - LEGACY_PARTMGR

O64 - Services: CurCS - ParVdm (ParVdm) - LEGACY_PARVDM

O64 - Services: CurCS - Pilote de bus PCI (PCI) - LEGACY_PCI

O64 - Services: CurCS - PROCEXP113 (PROCEXP113) - LEGACY_PROCEXP113

O64 - Services: CurCS - Emplacement protégé (ProtectedStorage) - LEGACY_PROTECTEDSTORAGE

O64 - Services: CurCS - Pilote de connexion automatique d'accès distant (RasAcd) - LEGACY_RASACD

O64 - Services: CurCS - Gestionnaire de connexions d'accès distant (RasMan) - LEGACY_RASMAN

O64 - Services: CurCS - Rdbss (Rdbss) - LEGACY_RDBSS

O64 - Services: CurCS - RDPCDD (RDPCDD) - LEGACY_RDPCDD

O64 - Services: CurCS - RDPNP (RDPNP) - LEGACY_RDPNP

O64 - Services: CurCS - Accès à distance au Registre (RemoteRegistry) - LEGACY_REMOTEREGISTRY

O64 - Services: CurCS - Appel de procédure distante (RPC) (RpcSs) - LEGACY_RPCSS

O64 - Services: CurCS - Gestionnaire de comptes de sécurité (SamSs) - LEGACY_SAMSS

O64 - Services: CurCS - SCDEmu (SCDEmu) - LEGACY_SCDEMU

O64 - Services: CurCS - Planificateur de tâches (Schedule) - LEGACY_SCHEDULE

O64 - Services: CurCS - Secdrv (Secdrv) - LEGACY_SECDRV

O64 - Services: CurCS - Connexion secondaire (seclogon) - LEGACY_SECLOGON

O64 - Services: CurCS - Notification d'événement système (SENS) - LEGACY_SENS

O64 - Services: CurCS - StarForce Protection Environment Driver (version 1.x) (sfdrv01) - LEGACY_SFDRV01

O64 - Services: CurCS - StarForce Protection Helper Driver (version 2.x) (sfhlp02) - LEGACY_SFHLP02

O64 - Services: CurCS - StarForce Protection Synchronization Driver (version 2.x) (sfsync02) - LEGACY_SFSYNC02

O64 - Services: CurCS - No object (No service) - LEGACY_SFSYNC05

O64 - Services: CurCS - Pare-feu Windows / Partage de connexion Internet (SharedAccess) - LEGACY_SHAREDACCESS

O64 - Services: CurCS - Détection matériel noyau (ShellHWDetection) - LEGACY_SHELLHWDETECTION

O64 - Services: CurCS - Spouleur d'impression (Spooler) - LEGACY_SPOOLER

O64 - Services: CurCS - sptd (sptd) - LEGACY_SPTD

O64 - Services: CurCS - Spyware Terminator Driver 2 (sp_rsdrv2) - LEGACY_SP_RSDRV2

O64 - Services: CurCS - Spyware Terminator Realtime Shield Service (sp_rssrv) - LEGACY_SP_RSSRV

O64 - Services: CurCS - Pilote de filtre de restauration système (sr) - LEGACY_SR

O64 - Services: CurCS - Service de restauration système (srservice) - LEGACY_SRSERVICE

O64 - Services: CurCS - Srv (Srv) - LEGACY_SRV

O64 - Services: CurCS - Service de découvertes SSDP (SSDPSRV) - LEGACY_SSDPSRV

O64 - Services: CurCS - ssmdrv (ssmdrv) - LEGACY_SSMDRV

O64 - Services: CurCS - Acquisition d'image Windows (WIA) (stisvc) - LEGACY_STISVC

O64 - Services: CurCS - Téléphonie (TapiSrv) - LEGACY_TAPISRV

O64 - Services: CurCS - Pilote du protocole TCP/IP (Tcpip) - LEGACY_TCPIP

O64 - Services: CurCS - Services Terminal Server (TermService) - LEGACY_TERMSERVICE

O64 - Services: CurCS - Thèmes (Themes) - LEGACY_THEMES

O64 - Services: CurCS - Client de suivi de lien distribué (TrkWks) - LEGACY_TRKWKS

O64 - Services: CurCS - Udfs (Udfs) - LEGACY_UDFS

O64 - Services: CurCS - UnlockerDriver5 (UnlockerDriver5) - LEGACY_UNLOCKERDRIVER5

O64 - Services: CurCS - vga (vga) - LEGACY_VGA

O64 - Services: CurCS - VgaSave (VgaSave) - LEGACY_VGASAVE

O64 - Services: CurCS - VolSnap (VolSnap) - LEGACY_VOLSNAP

O64 - Services: CurCS - Horloge Windows (W32Time) - LEGACY_W32TIME

O64 - Services: CurCS - Pilote ARP IP d'accès distant (Wanarp) - LEGACY_WANARP

O64 - Services: CurCS - WebClient (WebClient) - LEGACY_WEBCLIENT

O64 - Services: CurCS - Infrastructure de gestion Windows (winmgmt) - LEGACY_WINMGMT

O64 - Services: CurCS - Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (WS2IFSL) - LEGACY_WS2IFSL

O64 - Services: CurCS - Centre de sécurité (wscsvc) - LEGACY_WSCSVC

O64 - Services: CurCS - Mises à jour automatiques (wuauserv) - LEGACY_WUAUSERV

O64 - Services: CurCS - Configuration automatique sans fil (WZCSVC) - LEGACY_WZCSVC

---\\ Liste des fichiers non signés (LUF) (O65)

O65 - LUF:25/02/2007 (.Pas de propriétaire - .) (4.20) - c:\windows\system32\ArmAccess.dll

O65 - LUF:28/09/2004 (.Pas de propriétaire - .) (1.0.0.0) - c:\windows\system32\radevcl.bpl

O65 - LUF:28/04/2006 (. - .) (1, 0, 0, 1) - c:\windows\system32\TweakUI.cpl

End of the scan: 1203 lines

Modifié le 5 février 2010 par ma_rhaja

pear · le 5 février 2010

Bonsoir,

Rien de grave sur cette machine.

Avec Spyware Terminator, vous avez installé la crawler toolbar(nocive= espiogiciel)

Dans Hijackthis, cochez et fixez: