[Résolu] - Analyse ZHPDiag

Eku28 · le 3 septembre 2010

Voici le rapport d' OTM

All processes killed

========== REGISTRY ==========

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found.

========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur

->Temp folder emptied: 121064 bytes

->Temporary Internet Files folder emptied: 33170 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 2435812 bytes

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

User: LocalService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

User: Mamounette

->Temp folder emptied: 98304 bytes

->Temporary Internet Files folder emptied: 81920 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 40223940 bytes

->Flash cache emptied: 1131 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

User: Papounet

->Temp folder emptied: 143781822 bytes

->Temporary Internet Files folder emptied: 237993 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 41133209 bytes

->Flash cache emptied: 824 bytes

User: Taranis

->Temp folder emptied: 12709921 bytes

->Temporary Internet Files folder emptied: 306494 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 41717485 bytes

->Flash cache emptied: 514 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 2351795 bytes

%systemroot%\System32 .tmp files removed: 3072 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 1139408 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 520192 bytes

Total Files Cleaned = 274,00 mb

OTM by OldTimer - Version 3.1.15.0 log created on 09032010_214216

Files moved on Reboot...

C:\Documents and Settings\Taranis\Local Settings\Temp\~DF83FE.tmp moved successfully.

C:\WINDOWS\temp\ZLT032ba.TMP moved successfully.

Registry entries deleted on Reboot...

pear · le 4 septembre 2010

C'est bon.

Une remarque: avant d'installer un outil de désinfection, on demande toujours de désinstaller les antivirus car ces outils touchent au coeur du système et certains de leurs processus sont considérés , à tort, comme des dangers pour le système.

Eku28 · le 4 septembre 2010

Bonjour pear, Apparement il y aurait des récalcitrants. Voici un nouveau ZHPDiag. Rapport de ZHPDiag v1.26.49 par Nicolas Coolman, Update du 17/08/2010 Run by Taranis at 04/09/2010 14:10:50 Web site : <a href="http://www.premiumorange.com/zeb-help-process/zhpdiag.html" class="bbc_url" title="Lien externe" rel="nofollow external">ZHPDiag Outil de diagnostic</a> Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif"'>http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif"'>http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""> ---\\ System Information Platform : Microsoft Windows XP (5.1.2600) Service Pack 3 Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 1790 MB (66% free) System drive C: has 88 GB (88%) free of 100 GB ---\\ Logged in mode Computer Name: MAISON-8F808655 User Name: Taranis All Users Names: Taranis, SUPPORT_388945a0, Papounet, Mamounette, HelpAssistant, Administrateur, Unselected Option: None Logged in as Administrator ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 88 Go of 100 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 92 Go of 200 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 100 Go of 100 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 66 Go of 66 Go) G:\ CD-ROM drive (Not Inserted) H:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK ---\\ Processus lancés [MD5.2CC5E66C4A424FBB8E67F23AB7C5EA5C] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [MD5.3F62CBAC09D8C039C488B5D00D21C3DC] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2384240] [MD5.703485A2C9EC94C35ED7EC56B13778B2] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336] [MD5.B2764687AA998206879AA53379C0AF31] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267432] [MD5.936209B6F93D0E11659CB2D229FE6583] - (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [212232] [MD5.2C31DCAA88D269E13A935910DBB4CC61] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136] [MD5.126A16F569122AE00AD3D12EF831D651] - (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.8C91BD35AE9AA8B628EEC5E637BB1D0F] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [MD5.9B03B2D34D46F88638D51066531D08DC] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\system32\IoctlSvc.exe [53248] [MD5.16022DAAE7BB83C00D0210D5433216BA] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1037192] [MD5.E7704CBF568815C1CAA6E513387BD3F2] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [65536] [MD5.CF4A0E2C240501C826977ACC5F0E8411] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [282792] [MD5.AE46C853FD91107E39A779EE86FB6387] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe [1312848] [MD5.895F37527D10256247F1D36E09CCDD27] - (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe [94208] [MD5.FB234CF688D9EE2619AB854BD9290C3C] - (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe [45056] [MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [248552] [MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [MD5.B346A8EA9B9D03D60260BB6E30427F09] - (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\Program Files\Fichiers communs\LogiShrd\KHAL3\KHALMNPR.EXE [112208] [MD5.61C028ABA5E49573A6332F4A7C744E87] - (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe [360448] [MD5.B27935893393B1FD117D95A659310676] - (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe [1024000] [MD5.74EF310FAC89341CE2897B7F2C4A7B0F] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [65536] [MD5.A80D0704537C0EF97DB2BEF24B99AF1A] - (.Pas de propriétaire - SG Browser Hijacking Protection.) -- C:\Program Files\SpywareGuard\sgbhp.exe [233472] [MD5.6D4AAA65E4003DEC5EBEEF86AF1AE77C] - (.Gadwin Systems, Inc. - PrintScreen captures the contents of the sc.) -- C:\Program Files\PrintScreen.exe [946176] [MD5.3D177013918C8602E43D41742D9BCAC7] - (.Nicolas Coolman - Analyseur de rapports sécurité.) -- C:\Program Files\ZebHelpProcess\ZHP2.exe [2860032] [MD5.16A692EDA8253BEB5F3A588055F7869B] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZebHelpProcess\ZHPDiag.exe [482304] ---\\ Plugins de navigateurs Opera/Firefox(P1/P2) P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java™ Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.3.3".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16263.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.8.612.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.2] - (.the VideoLAN Team - Version 1.1.3, copyright 1996-2010 The VideoLAN Team <a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" class="bbc_url" title="Lien externe" rel="nofollow external">http://www.microsoft...er=6&ar=msnhome</a> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" class="bbc_url" title="Lien externe" rel="nofollow external">Sign In</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk ---\\ Internet Explorer URLSearchHook (R3) R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} . (.DeviceVM, Inc. - Browser Configuration Utility Address Bar S.) (1, 1, 7, 0) -- C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll R3 - URLSearchHook: SearchHook Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} . (.Pas de propriétaire - SpywareGuard Download Protection.) -- C:\Program Files\SpywareGuard\dlprotect.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} . (.DeviceVM, Inc. - Browser Configuration Utility IE BHO for U.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\IEHelper.dll O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java™ Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [bootSkin Startup Jobs] . (.Pas de propriétaire - Stardock BootSkin!.) -- C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe O4 - HKLM\..\Run: [CORSAIR_PLUtil] . (.Prolific Technology Inc. - Corsair Flash Voyager Log On Application.) -- C:\Program Files\Corsair\Corsair Flash Voyager Utility\PLBkMon.exe O4 - HKLM\..\Run: [PLFFAP] . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\system32\HotfixQ0306270.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java™ Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-21-1547161642-1897051121-725345543-1007-1547161642-1897051121-725345543-1003\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: SpywareGuard.lnk . (.Pas de propriétaire - SpywareGuard.) -- C:\Program Files\SpywareGuard\sgmain.exe O4 - Global Startup: StartClock.lnk . (.Grégory HARGOUS - www.GregLand.Net - Pas de description.) -- C:\Program Files\StartClock\StartClock.exe ---\\ Restriction de l'accès aux options IE par l'Administrateur (O6) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restriction présente ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.) O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - <a href="http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1265445165234" class="bbc_url" title="Lien externe" rel="nofollow external">http://update.micros...b?1265445165234</a> ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{033FE895-6845-43B0-BB4F-CBB9CF81FD09}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Browser Configuration Utility Service (BCUService) . (.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: ES lite Service for program management. (ES lite Service) . (.Pas de propriétaire - Pas de description.) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\WINDOWS\system32\IoctlSvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Desktop General: WallPaper - .(.Pas de propriétaire - Pas de description.) - C:\WINDOWS\web\wallpaper\Colline verdoyante.bmp O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: 127.0.0.1 localhost ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1265220527.job ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Personnalisation du navigateur - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS . (.Pas de propriétaire - Pas de description.) -- RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java™ Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\INF\wmp.inf O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Macromedia, Inc. - Macromedia Flash Player 6.0 r88.) -- C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: Pilote de processeur AMD HwPState (AmdPPM) . (.Advanced Micro Devices - AMD Processor Driver.) - C:\Windows\system32\DRIVERS\AmdPPM.sys O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys O41 - Driver: vsdatant (vsdatant) . (.Check Point Software Technologies LTD - TrueVector Device Driver.) - C:\Windows\system32\vsdatant.sys ---\\ Logiciels installés (O42) O42 - Logiciel: ABBYY FineReader 9.0 Professional Edition - (.ABBYY.) [HKLM] -- {F9000000-0001-0000-0000-074957833700} O42 - Logiciel: AMD Processor Driver - (.AMD.) [HKLM] -- {C151CE54-E7EA-4804-854B-F515368B0798} O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8} O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 9.3.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} O42 - Logiciel: Audacity 1.2.6 - (.Pas de propriétaire.) [HKLM] -- Audacity O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: BootSkin - (.Pas de propriétaire.) [HKLM] -- BootSkin O42 - Logiciel: Browser Configuration Utility - (.DeviceVM.) [HKLM] -- {5B363E1D-8C36-4458-BAE4-D5081999E094} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM] -- {7054ED85-498D-4D20-906F-14646AEC5581} O42 - Logiciel: Corsair Flash Voyager Utility - (.Pas de propriétaire.) [HKLM] -- {41FC7856-55A1-41A6-94B1-15A1E3C050B8} O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70} O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D} O42 - Logiciel: EasySaver B9.0610.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95} O42 - Logiciel: Hercules WebCam Station - (.Pas de propriétaire.) [HKLM] -- {D208F4A7-6B73-4C2A-8B1E-8756FCBA831E} O42 - Logiciel: Hercules Webcam - (.Pas de propriétaire.) [HKLM] -- {A250D351-A07F-4D5D-AB6C-693C69B9BFAF} O42 - Logiciel: HotFix Q0306270 - (.Pas de propriétaire.) [HKLM] -- {7D9B8EE1-7E8E-411C-8F36-2A26D2D20D5F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5 O42 - Logiciel: IZArc 3.81 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8} O42 - Logiciel: Java™ 6 Update 21 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} O42 - Logiciel: KeyScrambler - (.QFX Software Corporation.) [HKLM] -- KeyScrambler O42 - Logiciel: Logitech SetPoint 6.0 - (.Logitech.) [HKLM] -- SP6 O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27} O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office Excel Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9084040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wudf01009 O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM] -- {911B040C-6000-11D3-8CFE-0050048383C9} O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {E6BAE954-487E-488B-BC4E-2E69E54E8117} O42 - Logiciel: Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""> - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.<img src="http://forum.zebulon.fr/public/style_emoticons/default/icon_cool.gif" class="bbc_emoticon" alt=""> O42 - Logiciel: Mozilla Thunderbird (3.1.2) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.2) O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {F1FDAA01-988C-423F-AC12-0D8F333943FD} O42 - Logiciel: Nokia Maps Updater 1.0.12 - (.Pas de propriétaire.) [HKLM] -- Nokia Maps Updater O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- Nokia Ovi Suite O42 - Logiciel: Nokia Ovi Suite - (.Nokia.) [HKLM] -- {8070452B-15D6-4169-B9B9-FCC3B54588AD} O42 - Logiciel: Nokia Ovi Suite Software Updater - (.Nokia Corporation.) [HKLM] -- {A0D65C73-F2C5-432F-8788-90F8A2E99B98} O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {225DB4AA-3CFF-47E8-B3C8-6DAD713E986E} O42 - Logiciel: Nokia Software Updater - (.Nokia Corporation.) [HKLM] -- {09C468CA-2940-466A-AAE8-DCC0C6E9323C} O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080} O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: Ovi Desktop Sync Engine - (.Nokia.) [HKLM] -- {2D10FC46-1D96-44C4-8855-85F21B9B011E} O42 - Logiciel: OviMPlatform - (.Nokia.) [HKLM] -- {1373559F-6DC6-44EA-9079-6ABDCCE8CDAD} O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {29F563F4-8807-4496-8463-441EAA0E96AB} O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/05/2008 3.7) - (.Nokia.) [HKLM] -- CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A O42 - Logiciel: Package de pilotes Windows - Nokia Modem (03/13/2008 6.86.0.1) - (.Nokia.) [HKLM] -- E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 4.5) - (.Nokia.) [HKLM] -- 34EA302E7F4CBD17A19E33BBCB72363234956D7E O42 - Logiciel: Package de pilotes Windows - Nokia Modem (06/09/2010 7.01.0.7) - (.Nokia.) [HKLM] -- EEEE705096F837B7907659F100C9FE6DA001970F O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693 O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One - (.Hewlett-Packard Company.) [HKLM] -- {9867A917-5D17-40DE-83BA-BEA5293194B1} O42 - Logiciel: Photo et imagerie HP 2.0 - All-in-One Pilote - (.Hewlett-Packard Company.) [HKLM] -- {6ECB39BD-73C2-44DD-B1A0-898207C58D8B} O42 - Logiciel: Photo et imagerie HP 2.0 - hp psc 1100 series - (.Pas de propriétaire.) [HKLM] -- HP PSC 1100 Series O42 - Logiciel: Q-Dir - (.Pas de propriétaire.) [HKLM] -- Q-Dir O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525} O42 - Logiciel: RagTime Solo - (.Pas de propriétaire.) [HKLM] -- RagTime Solo O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Revo Uninstaller 1.89 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster O42 - Logiciel: SpywareGuard v2.2 - (.Javacool Software LLC.) [HKLM] -- SpywareGuard O42 - Logiciel: StartClock 3.4 - (.Grégory HARGOUS.) [HKLM] -- StartClock O42 - Logiciel: Sélecteur d'installation de Microsoft Works 2004 - (.Pas de propriétaire.) [HKLM] -- Works2004Setup O42 - Logiciel: Unlocker 1.9.0 - (.Cedrick Collomb.) [HKLM] -- Unlocker O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130 O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B} O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime O42 - Logiciel: Winmail Reader 1.1.12 - (.Kopf.) [HKLM] -- Winmail Reader O42 - Logiciel: XnView 1.97.5 - (.Gougelet Pierre-e.) [HKLM] -- XnView O42 - Logiciel: ZebHelpProcess 2.37 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm O42 - Logiciel: eBay Icon - (.AD ON Multimedia Advertising GmbH.) [HKLM] -- eBay Icon O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} O42 - Logiciel: hp psc 1100 series - (.Hewlett-Packard Company.) [HKLM] -- {01161F64-6897-4885-93A0-A9F7BE9A4253} O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} O42 - Logiciel: xp-AntiSpy 3.97-3 - (.Christian Taubenheim.) [HKLM] -- xp-AntiSpy ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\AppDataLow\ISWVolatile] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Astonsoft] [HKCU\Software\Avira] [HKCU\Software\Canneverbe Limited] [HKCU\Software\CheckPoint] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Corsair] [HKCU\Software\DeviceVM] [HKCU\Software\Gadwin Systems] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IDAVLab] [HKCU\Software\IM Providers] [HKCU\Software\IZSoftware] [HKCU\Software\Innovative Solutions] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Jetico] [HKCU\Software\Lavalys] [HKCU\Software\Leadertech] [HKCU\Software\Logitech] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Netscape] [HKCU\Software\Nokia] [HKCU\Software\ODBC] [HKCU\Software\Oak Technology] [HKCU\Software\OpenOffice.org] [HKCU\Software\PDFCreator] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\QFX Software] [HKCU\Software\Realtek] [HKCU\Software\Safer Networking Limited] [HKCU\Software\SoftwareOK.de] [HKCU\Software\Sysinternals] [HKCU\Software\TAdvCheckList] [HKCU\Software\Theorica] [HKCU\Software\Trend Micro] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSRevoGroup] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinmailReader] [HKCU\Software\XnView] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Zone Labs] [HKCU\Software\xp-AntiSpy] [HKLM\Software\ABBYY] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\Ahead] [HKLM\Software\Alienware] [HKLM\Software\AppDataLow] [HKLM\Software\ArcSoft] [HKLM\Software\Avira] [HKLM\Software\Borland] [HKLM\Software\C07ft5Y] [HKLM\Software\CheckPoint] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\DeviceVM] [HKLM\Software\Gemplus] [HKLM\Software\Gigabyte] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDAVLab] [HKLM\Software\Innovative Solutions] [HKLM\Software\Intel] [HKLM\Software\JavaRa] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Licenses] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\Nokia Mobile Phones] [HKLM\Software\Nokia] [HKLM\Software\ODBC] [HKLM\Software\OMSI] [HKLM\Software\Oak Technology] [HKLM\Software\OldTimer Tools] [HKLM\Software\OmniVision] [HKLM\Software\OpenOffice.org] [HKLM\Software\PC Connectivity Solution] [HKLM\Software\PCSuite] [HKLM\Software\PDFCreator] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\Program Groups] [HKLM\Software\QFX Software] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Secunia] [HKLM\Software\Stardock] [HKLM\Software\Sun Microsystems] [HKLM\Software\ToniArts] [HKLM\Software\TrendMicro] [HKLM\Software\TuneUp] [HKLM\Software\Uniblue] [HKLM\Software\VideoLAN] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\X-AVCSD] [HKLM\Software\Zone Labs] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers ProgramFiles/ProgramData (O43) O43 - CFD:Common File Directory ----D- C:\Program Files\ABBYY FineReader 9.0 O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\AMD O43 - CFD:Common File Directory ----D- C:\Program Files\Astonsoft O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies O43 - CFD:Common File Directory ----D- C:\Program Files\Audacity O43 - CFD:Common File Directory ----D- C:\Program Files\Avira O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner O43 - CFD:Common File Directory ----D- C:\Program Files\CDBurnerXP O43 - CFD:Common File Directory ----D- C:\Program Files\CheckPoint O43 - CFD:Common File Directory ----D- C:\Program Files\ComPlus Applications O43 - CFD:Common File Directory ----D- C:\Program Files\Corsair O43 - CFD:Common File Directory ----D- C:\Program Files\Defraggler O43 - CFD:Common File Directory --H-D- C:\Program Files\DeviceVM O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers communs O43 - CFD:Common File Directory ----D- C:\Program Files\Gigabyte O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules O43 - CFD:Common File Directory ----D- C:\Program Files\Hewlett-Packard O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer O43 - CFD:Common File Directory ----D- C:\Program Files\IZArc O43 - CFD:Common File Directory ----D- C:\Program Files\Java O43 - CFD:Common File Directory ----D- C:\Program Files\JavaRa O43 - CFD:Common File Directory ----D- C:\Program Files\JRE O43 - CFD:Common File Directory ----D- C:\Program Files\KeyScrambler O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft O43 - CFD:Common File Directory ----D- C:\Program Files\microsoft frontpage O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works Suite 2004 O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Thunderbird O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild O43 - CFD:Common File Directory ----D- C:\Program Files\MSECache O43 - CFD:Common File Directory ----D- C:\Program Files\MSN O43 - CFD:Common File Directory ----D- C:\Program Files\MSN Gaming Zone O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0 O43 - CFD:Common File Directory ----D- C:\Program Files\NetMeeting O43 - CFD:Common File Directory ----D- C:\Program Files\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\NOS O43 - CFD:Common File Directory ----D- C:\Program Files\Online Services O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3 O43 - CFD:Common File Directory ----D- C:\Program Files\Outlook Express O43 - CFD:Common File Directory ----D- C:\Program Files\PC Connectivity Solution O43 - CFD:Common File Directory ----D- C:\Program Files\PDFCreator O43 - CFD:Common File Directory ----D- C:\Program Files\Q-Dir O43 - CFD:Common File Directory ----D- C:\Program Files\RagTime Solo O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies O43 - CFD:Common File Directory ----D- C:\Program Files\RegSeeker O43 - CFD:Common File Directory ----D- C:\Program Files\SafeXP O43 - CFD:Common File Directory ----D- C:\Program Files\Services en ligne O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareBlaster O43 - CFD:Common File Directory ----D- C:\Program Files\SpywareGuard O43 - CFD:Common File Directory ----D- C:\Program Files\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\StartClock O43 - CFD:Common File Directory ----D- C:\Program Files\ToniArts O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information O43 - CFD:Common File Directory ----D- C:\Program Files\Unlocker O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN O43 - CFD:Common File Directory ----D- C:\Program Files\VS Revo Group O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT O43 - CFD:Common File Directory --H-D- C:\Program Files\WindowsUpdate O43 - CFD:Common File Directory ----D- C:\Program Files\Winmail Reader O43 - CFD:Common File Directory ----D- C:\Program Files\xerox O43 - CFD:Common File Directory ----D- C:\Program Files\XnView O43 - CFD:Common File Directory ----D- C:\Program Files\xp-AntiSpy O43 - CFD:Common File Directory ----D- C:\Program Files\ZebHelpProcess O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag O43 - CFD:Common File Directory ----D- C:\Program Files\Zone Labs O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ABBYY O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Adobe O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Ahead O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ArcSoft O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Borland Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Designer O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\InstallShield O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Java O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\LogiShrd O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Microsoft Shared O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\MSSoap O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Nokia O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\ODBC O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\PCSuite O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Services O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\SpeechEngines O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Stardock O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\System O43 - CFD:Common File Directory ----D- C:\Program Files\Fichiers Communs\Windows Live ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.F5E1852A3E1D3AF74859AE3829E4E453] - 04/09/2010 - 13:08:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ativvaxx.cap [219120] O44 - LFC:[MD5.00000000000000000000000000000000] - 04/09/2010 - 11:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [157] O44 - LFC:[MD5.00000000000000000000000000000000] - 04/09/2010 - 11:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.7E0E4C60408C99AC4050E08ADC2BF32A] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\PerfStringBackup.INI [1094606] O44 - LFC:[MD5.A63E88AF842EC101F736293127FCE835] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc009.dat [67448] O44 - LFC:[MD5.A34AF276B8F8AC67F4485241586525F0] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfc00C.dat [80712] O44 - LFC:[MD5.95FCED42B5B829D0D05A530771621F7B] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh009.dat [432492] O44 - LFC:[MD5.C6A79BBFF71B8D83F9ADE8E2A4648B12] - 04/09/2010 - 08:31:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\perfh00C.dat [500812] O44 - LFC:[MD5.379810E74A3DA84E4130B5E229F3916D] - 04/09/2010 - 08:27:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\service.log [144] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/09/2010 - 08:27:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.D556CB79967E92B5CC69686D16C1D846] - 04/09/2010 - 08:26:52 ---A- . (.Windows ® 2000 DDK provider - GIGABYTE Tools.) -- C:\WINDOWS\gdrv.sys [17488] O44 - LFC:[MD5.C49582596A0D160FB1C3C1182955E217] - 04/09/2010 - 08:26:21 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.3CF489A6F65166B5A3AEE08DDC62092B] - 03/09/2010 - 21:42:08 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1640353] O44 - LFC:[MD5.5F1EEBCBAFADEA35EC022691D5046F3A] - 03/09/2010 - 17:42:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.log [117823] O44 - LFC:[MD5.C5AD6B60FB6ED96FB29C9C7DC3EA2FFC] - 03/09/2010 - 17:39:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\hpfr3420.xml [524] O44 - LFC:[MD5.00000000000000000000000000000000] - 03/09/2010 - 17:18:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.B2D1DDC268D9B900C5EDE7E3E202E5E8] - 03/09/2010 - 16:54:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [5711] O44 - LFC:[MD5.E5039ABB056C3215A7AD895477A4219C] - 31/08/2010 - 20:06:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\EventSystem.log [95628] O44 - LFC:[MD5.01830591B17164C668C0FC447AF8930C] - 01/09/2010 - 17:28:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Q-Dir.ini [3600] O44 - LFC:[MD5.D6CC816315DB456DBF834E59BB98BA14] - 31/08/2010 - 16:24:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.DAA169C075E645111151458155FDA9B2] - 30/08/2010 - 19:58:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\COM+.log [1092] O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 26/08/2010 - 18:14:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224] O44 - LFC:[MD5.D0E675E1479A8BE24D30EEC2B8A152E7] - 26/08/2010 - 17:46:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\jupdate-1.6.0_21-b07.log [5222] O44 - LFC:[MD5.FB234CF688D9EE2619AB854BD9290C3C] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - HotFix Q0306270.) -- C:\WINDOWS\System32\HotFixQ0306270.exe [45056] O44 - LFC:[MD5.9B03B2D34D46F88638D51066531D08DC] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\WINDOWS\System32\IoctlSvc.exe [53248] O44 - LFC:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 21/08/2010 - 15:25:05 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\System32\drivers\plff.sys [7424] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.8F840A0F7D1240BD4FB306FBC5613CFF] - 07/08/2010 - 16:05:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\win.ini [532] O44 - LFC:[MD5.85661F752B156BEC10CB77FCD04981EE] - 07/08/2010 - 16:05:03 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [223] ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - SpywareGuard.Handler - {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ---\\ Export de clé d'application autorisée (ECAA) (O47) O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe ---\\ Déni du service (Local Security Authority) (LSA) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - outlook.exe - StripMyRights.exe /D /L N O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech™ DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.A7B8A3A79D35215D798A300DF49ED23F] - 23/02/2005 - 14:58:56 ---A- . (.Arcsoft, Inc. - Arcsoft® ASPI Shell.) -- C:\WINDOWS\system32\drivers\afc.sys O58 - SDL:[MD5.B34B1AB0A7690A0E2301FEC6D17B2FC1] - 30/07/2010 - 20:28:37 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 05/08/2008 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 16/04/2007 - 16:46:34 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys O58 - SDL:[MD5.F620AE184CB3BCBE32ED40982957BE41] - 03/06/2009 - 22:00:18 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys O58 - SDL:[MD5.A88D29D928AD2B830E87B53E3F9BC182] - 16/02/2010 - 12:24:01 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 11/05/2009 - 10:49:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys O58 - SDL:[MD5.1289E9A5D9118A25A13C0009519088E3] - 01/03/2010 - 08:05:24 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys O58 - SDL:[MD5.C3963D85B721A7F80D8A55F4E2867A3A] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmb.sys O58 - SDL:[MD5.3859C69A77793180548802DAC9F34A38] - 26/02/2010 - 13:32:44 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/08/2001 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 08:36:06 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys O58 - SDL:[MD5.863CC3A82C63C9F60ACF2E85D5310620] - 09/03/2003 - 05:31:00 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys O58 - SDL:[MD5.08CB72E95DD75B61F2966B311D0E4366] - 09/03/2003 - 05:31:02 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys O58 - SDL:[MD5.CA990306ED4EF732AF9695BFF24FC96F] - 09/03/2003 - 05:31:02 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys O58 - SDL:[MD5.83A174AC30D12186E5C2E56D362D3604] - 04/10/2009 - 22:33:14 ---A- . (.QFX Software Corporation - KeyScrambler Keyboard Encryption Driver.) -- C:\WINDOWS\system32\drivers\keyscrambler.sys O58 - SDL:[MD5.F5E165B4E3DF145F6E8BF3C0573F94D8] - 10/11/2009 - 12:54:52 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.B46E39B8AE439D7CE75A923E7F950040] - 10/11/2009 - 12:55:08 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.C0382C12B784394BF16C2D8F0F1F17DC] - 26/03/2010 - 17:44:00 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\WINDOWS\system32\drivers\LNonPnP.sys O58 - SDL:[MD5.67B48A903430C6D4FB58CBACA1866601] - 29/04/2010 - 14:39:26 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 04/01/2006 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 26/08/2008 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys O58 - SDL:[MD5.A20AC92609F3B246BE3B761BB72FC6A5] - 06/10/2003 - 10:29:08 R--A- . (.Prolific Technology Inc. - Prolific Flash Disk Filter Driver.) -- C:\WINDOWS\system32\drivers\plff.sys O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/08/2001 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/08/2001 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys O58 - SDL:[MD5.00FD6811350E175585ABCF7D4A61DD90] - 24/04/2009 - 03:22:16 R--A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys O58 - SDL:[MD5.0C5A04F0FFAEBC25AC815EE14441A8CB] - 02/06/2009 - 11:02:46 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys O58 - SDL:[MD5.1674A34F0084BFFDEC2DCDB1625A87F0] - 21/05/2009 - 02:03:54 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 08:39:16 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 11/05/2009 - 08:12:49 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys O58 - SDL:[MD5.F92254B0BCFCD10CAAC7BCCC7CB7F467] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\StarOpen.sys O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/08/2001 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys O58 - SDL:[MD5.0CCADC7391021376EDBB8AA649D04E68] - 26/02/2010 - 13:32:46 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys O58 - SDL:[MD5.68B4F83CCCF70A2FF32EE142C234332A] - 26/02/2010 - 13:32:58 ---A- . (.Nokia - Filter Driver for Nokia USB Phone Bus Driver.) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/08/2001 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys O58 - SDL:[MD5.5B7512131637D60EA79EF8960AA01575] - 02/03/2010 - 20:54:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\vidstub.sys O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/04/2008 - 08:50:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/08/2001 - 13:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 13/04/2008 - 08:49:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 13/04/2008 - 08:49:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 13/04/2008 - 08:49:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 13/04/2008 - 08:49:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys O58 - SDL:[MD5.55B0D841B1E97F60ACFE3CC7409FD6B7] - 04/12/2009 - 16:34:56 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\dbstore.ini [181] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\edb.chk [8192] O61 - LFC:Last File Created 01/09/2010 - 06:14:04 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [186685] O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [37] O61 - LFC:Last File Created 01/09/2010 - 06:14:08 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [328] O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 [840] O61 - LFC:Last File Created 01/09/2010 - 06:23:02 -S-A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 [134] O61 - LFC:Last File Created 01/09/2010 - 10:57:11 ---A- C:\Documents And Settings\Mamounette\Application Data\wklnhst.dat [4124] O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Bureau.lnk [308] O61 - LFC:Last File Created 01/09/2010 - 11:01:57 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Nouveau Document Microsoft Word.doc.lnk [538] O61 - LFC:Last File Created 01/09/2010 - 11:02:13 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Modèles\Normal.dot [50176] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Modèles.lnk [775] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\Normal.dot.lnk [878] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Word10.pip [1656] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\fbc8.tmp [60492] O61 - LFC:Last File Created 01/09/2010 - 11:02:14 --H-- C:\Documents And Settings\Mamounette\Application Data\Microsoft\Office\Fichiers récents\index.dat [487] O61 - LFC:Last File Created 01/09/2010 - 11:24:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\SharedDataEvents [3072] O61 - LFC:Last File Created 01/09/2010 - 16:38:07 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup4.ini [236339] O61 - LFC:Last File Created 01/09/2010 - 17:28:22 ---A- C:\Documents And Settings\Mamounette\Application Data\Q-Dir\Q-Dir.ini [3389] O61 - LFC:Last File Created 01/09/2010 - 17:28:26 ---A- C:\Documents And Settings\Taranis\Application Data\Q-Dir\start.qdr [690] O61 - LFC:Last File Created 01/09/2010 - 17:37:17 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [103295] O61 - LFC:Last File Created 01/09/2010 - 17:53:27 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 01/09/2010 - 17:55:23 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 01/09/2010 - 17:55:23 -SHA- C:\Documents And Settings\LocalService\Cookies\index.dat [16384] O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024] O61 - LFC:Last File Created 01/09/2010 - 17:56:08 --HA- C:\Documents And Settings\LocalService\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 01/09/2010 - 17:57:16 ---A- C:\Documents And Settings\LocalService\NTUSER.DAT [245760] O61 - LFC:Last File Created 01/09/2010 - 17:57:16 -SHA- C:\Documents And Settings\LocalService\ntuser.ini [184] O61 - LFC:Last File Created 01/09/2010 - 18:33:45 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [236637] O61 - LFC:Last File Created 01/09/2010 - 19:40:19 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1915] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [747] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [8471] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1310] O61 - LFC:Last File Created 01/09/2010 - 19:41:56 ---A- C:\Documents And Settings\Mamounette\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [2438] O61 - LFC:Last File Created 01/09/2010 - 19:47:51 ---A- C:\Documents And Settings\Mamounette\Application Data\XnView\xnview.ini [13089] O61 - LFC:Last File Created 01/09/2010 - 20:03:56 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [46908] O61 - LFC:Last File Created 01/09/2010 - 20:08:07 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187] O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [234605] O61 - LFC:Last File Created 01/09/2010 - 20:08:14 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-01.json [110766] O61 - LFC:Last File Created 01/09/2010 - 20:09:01 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1 [47926] O61 - LFC:Last File Created 01/09/2010 - 20:09:56 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Sent-1.msf [4777] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\junklog.html [2431] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\training.dat [6876] O61 - LFC:Last File Created 01/09/2010 - 20:10:48 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\traits.dat [8] O61 - LFC:Last File Created 01/09/2010 - 20:18:20 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\XUL.mfl [2334394] O61 - LFC:Last File Created 01/09/2010 - 20:19:14 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\localstore.rdf [10038] O61 - LFC:Last File Created 02/09/2010 - 16:09:20 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup3.ini [236339] O61 - LFC:Last File Created 02/09/2010 - 16:13:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\00294823-0000004E.eml [4091] O61 - LFC:Last File Created 02/09/2010 - 16:49:21 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\18BE6784-0000004F.eml [6811] O61 - LFC:Last File Created 02/09/2010 - 16:53:03 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\4AE13D6C-00000050.eml [1945] O61 - LFC:Last File Created 02/09/2010 - 17:09:20 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Deleted Items\1E597D0C-00000121.eml [8368] O61 - LFC:Last File Created 02/09/2010 - 17:15:39 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\AdobeSysFnt09.lst [51685] O61 - LFC:Last File Created 02/09/2010 - 17:18:29 ---A- C:\Documents And Settings\Mamounette\Application Data\Adobe\Acrobat\9.0\UserCache.bin [32960] O61 - LFC:Last File Created 02/09/2010 - 17:19:29 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerizeJson.json [435187] O61 - LFC:Last File Created 02/09/2010 - 17:20:15 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [104980] O61 - LFC:Last File Created 02/09/2010 - 17:24:45 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-SCAN[1].txt [5221] O61 - LFC:Last File Created 02/09/2010 - 17:27:20 ---A- C:\Documents And Settings\Taranis\Bureau\Ad-Report-CLEAN[1].txt [5492] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [453] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [211] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [1399] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Taranis.reg [270] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Taranis.reg [473] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP4-Taranis.reg [88] O61 - LFC:Last File Created 02/09/2010 - 17:29:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Taranis.reg [177] O61 - LFC:Last File Created 02/09/2010 - 17:30:10 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [291] O61 - LFC:Last File Created 02/09/2010 - 17:35:03 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\user.xml [23243] O61 - LFC:Last File Created 02/09/2010 - 17:41:13 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 02/09/2010 - 17:41:15 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Linguistic.xcu [10020] O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048] O61 - LFC:Last File Created 02/09/2010 - 17:41:50 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594] O61 - LFC:Last File Created 02/09/2010 - 17:41:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12639] O61 - LFC:Last File Created 02/09/2010 - 17:44:58 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert_override.txt [1720] O61 - LFC:Last File Created 02/09/2010 - 17:52:05 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\site-confim.xml [2654] O61 - LFC:Last File Created 02/09/2010 - 17:53:19 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236637] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [1614] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [376] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [3884] O61 - LFC:Last File Created 02/09/2010 - 17:53:24 ---A- C:\Documents And Settings\Taranis\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [1484] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Archives.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Drafts.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Templates.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Archives.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Drafts.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:38 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Templates.msf [0] O61 - LFC:Last File Created 02/09/2010 - 17:59:41 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX [10122660] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\3DB78327d01 [63021] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\504A194Bd01 [66641] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5837404Bd01 [58614] O61 - LFC:Last File Created 02/09/2010 - 18:00:14 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D23CE59Dd01 [64554] O61 - LFC:Last File Created 02/09/2010 - 18:00:15 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D0D8D5D8d01 [31254] O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\05C68366d01 [36882] O61 - LFC:Last File Created 02/09/2010 - 18:00:37 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A7FC289Dd01 [18936] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\2318CD3Fd01 [22647] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\41A46494d01 [27141] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\715D71CEd01 [35431] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7B4EF581d01 [28587] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\7C6E5708d01 [107703] O61 - LFC:Last File Created 02/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\E8461768d01 [28207] O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A4356D5Cd01 [24918] O61 - LFC:Last File Created 02/09/2010 - 18:00:41 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\D664BA74d01 [20770] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\5233A958d01 [22770] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A05F80A3d01 [56974] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\A44A3705d01 [23814] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\BDE75931d01 [43395] O61 - LFC:Last File Created 02/09/2010 - 18:00:42 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\DCDAB2A9d01 [55987] O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Junk-1.msf [4709] O61 - LFC:Last File Created 02/09/2010 - 18:00:58 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\pluginreg.dat [6291] O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\folderTree.json [316] O61 - LFC:Last File Created 02/09/2010 - 18:01:08 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\session.json [663] O61 - LFC:Last File Created 02/09/2010 - 18:01:11 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\global-messages-db.sqlite [615424] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.msf [4128] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr-1.fr\INBOX.sbd\Trash-1.msf [1979] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.msf [4593] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\ImapMail\imap.sfr.fr\INBOX.sbd\Trash.msf [2597] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\Mail\smart mailboxes\Trash.msf [1638] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\cert8.db [65536] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\key3.db [16384] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\panacea.dat [16113] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\prefs.js [13691] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Application Data\Thunderbird\Profiles\n50d62na.default\virtualFolders.dat [252] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_001_ [97660] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_002_ [161729] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_003_ [253487] O61 - LFC:Last File Created 02/09/2010 - 18:01:13 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Thunderbird\Profiles\n50d62na.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 02/09/2010 - 20:08:05 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236866] O61 - LFC:Last File Created 02/09/2010 - 21:04:33 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-02.json [47550] O61 - LFC:Last File Created 02/09/2010 - 21:15:01 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup2.ini [236339] O61 - LFC:Last File Created 03/09/2010 - 16:08:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196] O61 - LFC:Last File Created 03/09/2010 - 16:08:28 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [57791] O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634] O61 - LFC:Last File Created 03/09/2010 - 16:08:29 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1104210] O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\Gmail - Rechargement WEB_WAP.pdf.lnk [504] O61 - LFC:Last File Created 03/09/2010 - 16:15:16 ---A- C:\Documents And Settings\Papounet\Recent\PDF.lnk [341] O61 - LFC:Last File Created 03/09/2010 - 16:16:44 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [110766] O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:27:24 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\searchplugins\netvibes-ecosystem-search.xml [1594] O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [86068] O61 - LFC:Last File Created 03/09/2010 - 16:27:25 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\search.json [12642] O61 - LFC:Last File Created 03/09/2010 - 16:27:26 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 03/09/2010 - 16:30:38 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7810] O61 - LFC:Last File Created 03/09/2010 - 16:30:49 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236866] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [38808] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56810] O61 - LFC:Last File Created 03/09/2010 - 16:35:59 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 03/09/2010 - 16:36:31 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys [1] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 ---A- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\AN5J4D18\oXMLStoreUnit[1].xml [56] O61 - LFC:Last File Created 03/09/2010 - 16:42:51 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [5327] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Histories.xcu [10598] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu [713] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu [12290] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu [1312] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Application Data\OpenOffice.org\3\user\uno_packages\cache\log.txt [5777] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\OOo.lnk [604] O61 - LFC:Last File Created 03/09/2010 - 16:50:56 ---A- C:\Documents And Settings\Papounet\Recent\Scann pleine page.odt.lnk [822] O61 - LFC:Last File Created 03/09/2010 - 16:51:18 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [16348] O61 - LFC:Last File Created 03/09/2010 - 16:51:20 ---A- C:\Documents And Settings\Papounet\Application Data\Logitech\SetPoint\gamelist.xml [37] O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1005\Credentials [14578] O61 - LFC:Last File Created 03/09/2010 - 16:53:52 -SHA- C:\Documents And Settings\Papounet\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\IETldCache\index.dat [245760] O61 - LFC:Last File Created 03/09/2010 - 16:53:54 -SHA- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\MSHist012010090320100904\index.dat [32768] O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 03/09/2010 - 16:53:57 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 03/09/2010 - 16:53:58 ----- C:\Documents And Settings\Papounet\Local Settings\Historique\History.IE5\index.dat [131072] O61 - LFC:Last File Created 03/09/2010 - 16:54:03 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\LaunchApplication\Settings.xml [1451] O61 - LFC:Last File Created 03/09/2010 - 16:55:07 ---A- C:\Documents And Settings\Papounet\Application Data\Nokia\PC Suite\statistics.dat [1184] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [126] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [87] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [60] O61 - LFC:Last File Created 03/09/2010 - 16:56:11 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [5612931] O61 - LFC:Last File Created 03/09/2010 - 17:00:30 ---A- C:\Documents And Settings\Taranis\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2010-09-03 (18-00-30).txt [1047] O61 - LFC:Last File Created 03/09/2010 - 17:12:37 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A [528] O61 - LFC:Last File Created 03/09/2010 - 17:12:37 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A [140] O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD [781] O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6 [561] O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD [156] O61 - LFC:Last File Created 03/09/2010 - 17:12:38 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6 [134] O61 - LFC:Last File Created 03/09/2010 - 17:12:40 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\1B749B72855CB97BF2F58675617C9BF9 [576] O61 - LFC:Last File Created 03/09/2010 - 17:12:40 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\1B749B72855CB97BF2F58675617C9BF9 [162] O61 - LFC:Last File Created 03/09/2010 - 17:12:52 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18] O61 - LFC:Last File Created 03/09/2010 - 17:12:52 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216] O61 - LFC:Last File Created 03/09/2010 - 17:13:07 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5 [571] O61 - LFC:Last File Created 03/09/2010 - 17:13:07 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5 [136] O61 - LFC:Last File Created 03/09/2010 - 17:14:10 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558] O61 - LFC:Last File Created 03/09/2010 - 17:14:10 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144] O61 - LFC:Last File Created 03/09/2010 - 17:14:15 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [95949] O61 - LFC:Last File Created 03/09/2010 - 17:14:15 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124] O61 - LFC:Last File Created 03/09/2010 - 17:14:22 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569] O61 - LFC:Last File Created 03/09/2010 - 17:14:22 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142] O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 [469] O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 [460] O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 [98] O61 - LFC:Last File Created 03/09/2010 - 17:14:31 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 [110] O61 - LFC:Last File Created 03/09/2010 - 17:14:32 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 [14468] O61 - LFC:Last File Created 03/09/2010 - 17:14:32 -S-A- C:\Documents And Settings\Taranis\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 [110] O61 - LFC:Last File Created 03/09/2010 - 17:31:08 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [105223] O61 - LFC:Last File Created 03/09/2010 - 17:31:09 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236637] O61 - LFC:Last File Created 03/09/2010 - 17:39:06 -SHA- C:\Documents And Settings\Papounet\Application Data\Microsoft\Internet Explorer\Desktop.htt [2702] O61 - LFC:Last File Created 03/09/2010 - 17:39:11 ---A- C:\Documents And Settings\Papounet\Recent\501 - Revenu 2009.pdf.lnk [856] O61 - LFC:Last File Created 03/09/2010 - 17:42:24 ---A- C:\Documents And Settings\Papounet\Recent\002 - Resume 2009-1273758692781.pdf.lnk [898] O61 - LFC:Last File Created 03/09/2010 - 17:42:35 ---A- C:\Documents And Settings\Papounet\Recent\003 - Détail impôt 2009.pdf.lnk [874] O61 - LFC:Last File Created 03/09/2010 - 17:46:43 ---A- C:\Documents And Settings\Papounet\Recent\011 - calcul IR 2009 sans enfant ni perco.pdf.lnk [928] O61 - LFC:Last File Created 03/09/2010 - 17:46:56 ---A- C:\Documents And Settings\Papounet\Recent\010 - calcul IR 2009 avec enfant et perco.pdf.lnk [928] O61 - LFC:Last File Created 03/09/2010 - 17:47:01 ---A- C:\Documents And Settings\Papounet\Recent\012 - calcul IR 2009 sans enfant avec perco.pdf.lnk [934] O61 - LFC:Last File Created 03/09/2010 - 17:47:01 ---A- C:\Documents And Settings\Papounet\Recent\Impôts 2009.lnk [626] O61 - LFC:Last File Created 03/09/2010 - 17:50:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Éléments en 784\00294823-0000000A.eml [4187] O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\5DF51807-00000023.eml [141968] O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\5EC531D9-00000022.eml [143771] O61 - LFC:Last File Created 03/09/2010 - 17:52:15 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\Messages su ae1\635036E8-00000024.eml [1843] O61 - LFC:Last File Created 03/09/2010 - 17:53:09 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\WLCalendarStore.edb [2121728] O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\WLCalendarStore.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\Backup\new\edb0003F.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb0003F.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:10 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:53:13 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.edb [4218880] O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\contacts.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\Backup\new\edb00022.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb00022.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:14 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:53:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.edb [4218880] O61 - LFC:Last File Created 03/09/2010 - 17:53:22 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb00022.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\contacts.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\Backup\new\edb00022.log [4194304] O61 - LFC:Last File Created 03/09/2010 - 17:53:23 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.pat [16384] O61 - LFC:Last File Created 03/09/2010 - 17:56:59 --HA- C:\Documents And Settings\Papounet\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [1024] O61 - LFC:Last File Created 03/09/2010 - 17:59:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:00:30 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2874368] O61 - LFC:Last File Created 03/09/2010 - 18:00:34 ---A- C:\Documents And Settings\Papounet\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2876416] O61 - LFC:Last File Created 03/09/2010 - 18:00:38 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\permissions.sqlite [2873344] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [18] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [126] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0] O61 - LFC:Last File Created 03/09/2010 - 18:01:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [2314] O61 - LFC:Last File Created 03/09/2010 - 18:01:57 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopager-patterns.json [1589] O61 - LFC:Last File Created 03/09/2010 - 18:01:57 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerLite.json [196] O61 - LFC:Last File Created 03/09/2010 - 18:02:00 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\all-sites.xml [634] O61 - LFC:Last File Created 03/09/2010 - 18:02:00 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\autopager\autopagerTee.json [1103451] O61 - LFC:Last File Created 03/09/2010 - 18:04:30 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\IDX\master.idx [56] O61 - LFC:Last File Created 03/09/2010 - 18:05:04 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2010-09-03-19-04-26.log [22634] O61 - LFC:Last File Created 03/09/2010 - 18:05:04 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\c33d1e8e.avl [1890] O61 - LFC:Last File Created 03/09/2010 - 19:43:06 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Deleted Items\0E352D39-00000122.eml [4583] O61 - LFC:Last File Created 03/09/2010 - 19:45:40 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Inbox\2A0647D6-000000DF.eml [6087] O61 - LFC:Last File Created 03/09/2010 - 19:45:43 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Cegetel\Sent Items\6BB85A8E-00000051.eml [6712] O61 - LFC:Last File Created 03/09/2010 - 20:10:02 -SHA- C:\Documents And Settings\Mamounette\Recent\Desktop.ini [150] O61 - LFC:Last File Created 03/09/2010 - 20:10:22 ---A- C:\Documents And Settings\Mamounette\Mes documents\cc_20100903_211018.reg [12468] O61 - LFC:Last File Created 03/09/2010 - 20:12:02 ---A- C:\Documents And Settings\Papounet\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963] O61 - LFC:Last File Created 03/09/2010 - 20:14:21 --HA- C:\Documents And Settings\Papounet\NTUSER.DAT [7864320] O61 - LFC:Last File Created 03/09/2010 - 20:14:21 -SHA- C:\Documents And Settings\Papounet\ntuser.ini [184] O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4ecfee99.qua [180704] O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20100903-211643-4035BA63.LOG [20276] O61 - LFC:Last File Created 03/09/2010 - 20:17:50 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\920b8835.avl [1692] O61 - LFC:Last File Created 03/09/2010 - 20:19:12 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4ecfeb07.qua [145447] O61 - LFC:Last File Created 03/09/2010 - 20:19:12 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\REPORTS\91be6600.avl [1692] O61 - LFC:Last File Created 03/09/2010 - 20:19:13 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20100903-211828-56C77E6B.LOG [20474] O61 - LFC:Last File Created 03/09/2010 - 20:27:58 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 03/09/2010 - 20:38:43 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 20:43:33 -SH-- C:\Documents And Settings\Taranis\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 03/09/2010 - 20:45:30 ---A- C:\Documents And Settings\Taranis\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [456] O61 - LFC:Last File Created 03/09/2010 - 20:45:59 -SH-- C:\Documents And Settings\NetworkService\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 03/09/2010 - 20:50:32 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XPC.mfl [2224568] O61 - LFC:Last File Created 03/09/2010 - 20:50:37 ---A- C:\Documents And Settings\Taranis\Application Data\Logitech\SetPoint\gamelist.xml [37] O61 - LFC:Last File Created 03/09/2010 - 20:50:45 -SH-- C:\Documents And Settings\Mamounette\Local Settings\Temporary Internet Files\desktop.ini [67] O61 - LFC:Last File Created 03/09/2010 - 20:50:50 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF1BFD.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 20:51:01 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@c.live[1].txt [68] O61 - LFC:Last File Created 03/09/2010 - 20:51:01 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@c.msn[2].txt [67] O61 - LFC:Last File Created 03/09/2010 - 20:51:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns-backup1.ini [236339] O61 - LFC:Last File Created 03/09/2010 - 20:51:14 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\downloads.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 20:52:08 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF28A3.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 20:52:08 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF4CEF.tmp [16384] O61 - LFC:Last File Created 03/09/2010 - 20:52:13 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF3ECB.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 20:52:45 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité\SpywareBlaster\SpywareBlaster Help.lnk [660] O61 - LFC:Last File Created 03/09/2010 - 20:52:45 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité\SpywareBlaster\SpywareBlaster.lnk [702] O61 - LFC:Last File Created 03/09/2010 - 20:53:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [2329449] O61 - LFC:Last File Created 03/09/2010 - 20:53:43 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [7777] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236637] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [196608] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [40593] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [483328] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [56534] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240] O61 - LFC:Last File Created 03/09/2010 - 20:53:52 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [10850304] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\EasyCleaner tray icon.lnk [567] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\EasyCleaner.lnk [561] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\Help\EasyCleaner help (English).lnk [637] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\Help\EasyCleaner help (Finnish).lnk [637] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\The Web\EasyCleaner home.lnk [222] O61 - LFC:Last File Created 03/09/2010 - 20:55:21 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Optimisation\EasyCleaner\The Web\ToniArts.lnk [198] O61 - LFC:Last File Created 03/09/2010 - 20:59:00 -SHA- C:\Documents And Settings\Taranis\Recent\Desktop.ini [150] O61 - LFC:Last File Created 03/09/2010 - 20:59:01 -SH-- C:\Documents And Settings\Taranis\ntuser.ini [184] O61 - LFC:Last File Created 03/09/2010 - 20:59:17 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DF27AF.tmp [98304] O61 - LFC:Last File Created 03/09/2010 - 20:59:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [341] O61 - LFC:Last File Created 03/09/2010 - 21:38:27 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\bookmarkbackups\bookmarks-2010-09-03.json [47550] O61 - LFC:Last File Created 03/09/2010 - 21:41:57 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl.old [700] O61 - LFC:Last File Created 03/09/2010 - 21:42:02 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows\WindowsUpdate.log [29386] O61 - LFC:Last File Created 03/09/2010 - 21:42:07 -SH-- C:\Documents And Settings\Mamounette\ntuser.ini [184] O61 - LFC:Last File Created 04/09/2010 - 08:26:23 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 04/09/2010 - 08:26:32 -SHA- C:\Documents And Settings\Mamounette\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 04/09/2010 - 08:26:43 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384] O61 - LFC:Last File Created 04/09/2010 - 08:26:43 -SHA- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384] O61 - LFC:Last File Created 04/09/2010 - 08:26:46 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\sched.log [166940] O61 - LFC:Last File Created 04/09/2010 - 08:27:07 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES\avguard.log [534474] O61 - LFC:Last File Created 04/09/2010 - 08:27:09 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\EVENTDB\avevtdb.dbe [31744] O61 - LFC:Last File Created 04/09/2010 - 08:27:27 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\AdobeARM.log [3114] O61 - LFC:Last File Created 04/09/2010 - 08:27:45 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\~DFA7F5.tmp [98304] O61 - LFC:Last File Created 04/09/2010 - 08:27:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 04/09/2010 - 08:27:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 04/09/2010 - 08:30:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.MSMessageStore [2121728] O61 - LFC:Last File Created 04/09/2010 - 08:30:29 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb00050.log [2097152] O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\Mail.pat [16384] O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Backup\new\edb00050.log [2097152] O61 - LFC:Last File Created 04/09/2010 - 08:30:30 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.pat [16384] O61 - LFC:Last File Created 04/09/2010 - 08:32:25 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\jusched.log [806] O61 - LFC:Last File Created 04/09/2010 - 08:44:35 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl [92] O61 - LFC:Last File Created 04/09/2010 - 09:58:45 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\s.ytimg.com\soundData.sol [49] O61 - LFC:Last File Created 04/09/2010 - 09:58:45 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol [81] O61 - LFC:Last File Created 04/09/2010 - 10:04:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d2syub29v5lge2.cloudfront.net\settings.sol [99] O61 - LFC:Last File Created 04/09/2010 - 10:04:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static-cdn.playfish.com\settings.sol [93] O61 - LFC:Last File Created 04/09/2010 - 10:05:29 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\blocklist.xml [3837] O61 - LFC:Last File Created 04/09/2010 - 10:13:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\game\cooking\swf\0.35.2\game.swf\blockz.sol [44] O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\ccmq.games.freshplanet.com\analytics.sol [459] O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ccmq.games.freshplanet.com\settings.sol [96] O61 - LFC:Last File Created 04/09/2010 - 10:16:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [575] O61 - LFC:Last File Created 04/09/2010 - 10:26:18 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\game\cooking\swf\0.35.2\game.swf\448a31f7758cee8797f69753c8952953_stored_session.sol [177] O61 - LFC:Last File Created 04/09/2010 - 10:26:19 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\d2syub29v5lge2.cloudfront.net\console\v2\swf\widgets_2_2_0_11\core.swf\448a31f7758cee8797f69753c8952953_stored_session.sol [177] O61 - LFC:Last File Created 04/09/2010 - 10:36:24 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\d2syub29v5lge2.cloudfront.net\analytics.sol [457] O61 - LFC:Last File Created 04/09/2010 - 10:36:24 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\static-cdn.playfish.com\analytics.sol [457] O61 - LFC:Last File Created 04/09/2010 - 10:38:05 ---A- C:\Documents And Settings\Mamounette\Local Settings\Temp\IswTmp\Logs\TrustcheckerMozillaPlugin.swl [1308] O61 - LFC:Last File Created 04/09/2010 - 11:06:35 -SHA- C:\Documents And Settings\Taranis\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1003\Credentials [10042] O61 - LFC:Last File Created 04/09/2010 - 11:06:35 -SHA- C:\Documents And Settings\Taranis\Local Settings\desktop.ini [62] O61 - LFC:Last File Created 04/09/2010 - 11:06:36 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\MSHist012010090420100905\index.dat [32768] O61 - LFC:Last File Created 04/09/2010 - 11:06:38 ---A- C:\Documents And Settings\All Users\Application Data\Avira\AntiVir Desktop\JOBS\updjob.avj [1496] O61 - LFC:Last File Created 04/09/2010 - 11:06:39 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\AdobeARM.log [1814] O61 - LFC:Last File Created 04/09/2010 - 11:06:40 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF6DD8.tmp [16384] O61 - LFC:Last File Created 04/09/2010 - 11:06:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.Bin [27603] O61 - LFC:Last File Created 04/09/2010 - 11:06:42 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Manifest.xml [20011] O61 - LFC:Last File Created 04/09/2010 - 11:06:43 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DF8722.tmp [16384] O61 - LFC:Last File Created 04/09/2010 - 11:06:45 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\~DFB32F.tmp [98304] O61 - LFC:Last File Created 04/09/2010 - 11:09:52 ---A- C:\Documents And Settings\Taranis\Recent\AUTO-PLUS_Contestation PV.pdf.lnk [912] O61 - LFC:Last File Created 04/09/2010 - 11:09:52 ---A- C:\Documents And Settings\Taranis\Recent\Automobiles.lnk [646] O61 - LFC:Last File Created 04/09/2010 - 11:10:17 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst [7979] O61 - LFC:Last File Created 04/09/2010 - 11:11:38 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\jusched.log [1203] O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [4218] O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log [1281] O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegBHO-Global.reg [1701] O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBTB1-Global.reg [81] O61 - LFC:Last File Created 04/09/2010 - 11:16:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [9119] O61 - LFC:Last File Created 04/09/2010 - 11:18:53 -SHA- C:\Documents And Settings\Taranis\IETldCache\index.dat [245760] O61 - LFC:Last File Created 04/09/2010 - 11:22:09 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\ATI\ACE\Profiles.xml [10963] O61 - LFC:Last File Created 04/09/2010 - 12:54:49 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\x@hotmail.fr\oeconfig.xml [19588] O61 - LFC:Last File Created 04/09/2010 - 12:54:54 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail\account{40ABED59-A09A-4768-B71D-F0E514FC1989}.oeaccount [5164] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\WLCalendarStore.edb [2113536] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\dbstore.ini [181] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Calendars\x@hotmail.fr\DBStore\edb.chk [8192] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\RssFeeds.xml [264] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml [41] O61 - LFC:Last File Created 04/09/2010 - 12:54:59 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\WindowsLiveMail.log [660441] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@bing[2].txt [235] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@live[2].txt [235] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@msn[2].txt [233] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@windowsmarketplace[2].txt [263] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Cookies\mamounette@zune[2].txt [235] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Messenger\ContactsLog.txt [549374] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\contacts.edb [4210688] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\dbstore.ini [174] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{544d73b8-f606-4167-a5d3-5cbea96a5896}\DBStore\edb.chk [8192] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\LogFiles\edb.log [4194304] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\contacts.edb [4210688] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\dbstore.ini [174] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Contacts\{77d1c2fb-eea1-48fe-b360-30d2f502ced6}\DBStore\edb.chk [8192] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.MSMessageStore [2113536] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.chk [8192] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.log [2097152] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Windows Live Mail\sqmnoopt00.sqm [800] O61 - LFC:Last File Created 04/09/2010 - 12:55:00 -SHA- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1547161642-1897051121-725345543-1007\Credentials [10066] O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.cache [1559] O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.ini [1525] O61 - LFC:Last File Created 04/09/2010 - 12:55:02 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\extensions.rdf [54772] O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ----- C:\Documents And Settings\Mamounette\Local Settings\Historique\History.IE5\index.dat [114688] O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\compreg.dat [155891] O61 - LFC:Last File Created 04/09/2010 - 12:55:03 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\xpti.dat [102852] O61 - LFC:Last File Created 04/09/2010 - 12:55:03 -SHA- C:\Documents And Settings\Mamounette\Cookies\index.dat [32768] O61 - LFC:Last File Created 04/09/2010 - 12:55:03 -SHA- C:\Documents And Settings\Mamounette\IETldCache\index.dat [245760] O61 - LFC:Last File Created 04/09/2010 - 12:55:04 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\pluginreg.dat [6777] O61 - LFC:Last File Created 04/09/2010 - 12:55:04 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XUL.mfl [1090172] O61 - LFC:Last File Created 04/09/2010 - 12:55:17 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\XPC.mfl [2714534] O61 - LFC:Last File Created 04/09/2010 - 12:57:42 ---A- C:\Documents And Settings\Mamounette\Application Data\Macromedia\Flash Player\#SharedObjects\VJHP385W\s.ytimg.com\videostats.sol [161] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\adblockplus\patterns.ini [236339] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cert8.db [163840] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\cookies.sqlite [2048] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\key3.db [16384] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\localstore.rdf [29072] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite [286720] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\places.sqlite-journal [0] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\prefs.js [25482] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\webappsstore.sqlite [4096] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_001_ [4096] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_002_ [4096] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_003_ [4096] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\Cache\_CACHE_MAP_ [8468] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\OfflineCache\index.sqlite [10240] O61 - LFC:Last File Created 04/09/2010 - 12:58:32 ---A- C:\Documents And Settings\Mamounette\Local Settings\Application Data\Mozilla\Firefox\Profiles\8yv5jtro.default\urlclassifier3.sqlite [23302144] O61 - LFC:Last File Created 04/09/2010 - 13:08:16 --HA- C:\Documents And Settings\Papounet\ntuser.dat.LOG [1024] O61 - LFC:Last File Created 04/09/2010 - 13:08:30 ---A- C:\Documents And Settings\All Users\Application Data\ATI\ACE\Profiles.xml [188] O61 - LFC:Last File Created 04/09/2010 - 13:08:30 ---A- C:\Documents And Settings\Taranis\Local Settings\Application Data\ATI\ACE\Profiles.xml [10959] O61 - LFC:Last File Created 04/09/2010 - 13:10:18 ---A- C:\Documents And Settings\Taranis\Local Settings\Temp\INMEM000.REM [0] O61 - LFC:Last File Created 04/09/2010 - 13:10:18 -SHA- C:\Documents And Settings\Taranis\Cookies\index.dat [32768] O61 - LFC:Last File Created 04/09/2010 - 13:10:18 -SHA- C:\Documents And Settings\Taranis\Local Settings\Historique\History.IE5\index.dat [32768] O61 - LFC:Last File Created 04/09/2010 - 13:10:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [9192] ---\\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.) O63 - Logiciel: HiJackThis - (.Trend Micro.) ---\\ Liste des services Legacy (LALS) (O64) O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Scheduler (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394 O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - ASP.NET State Service (aspnet_state) .(.Microsoft Corporation - Microsoft ASP.NET State Server.) - LEGACY_ASPNET_STATE O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - (.not file.) - BCFTDI (bcftdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_BCFTDI O64 - Services: CurCS - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe - Browser Configuration Utility Service (BCUService) .(.DeviceVM, Inc. - Browser Configuration Utility Auto-recovery.) - LEGACY_BCUSERVICE O64 - Services: CurCS - (.not file.) - BC_Filter (bc_filter) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_FILTER O64 - Services: CurCS - (.not file.) - BC_IP_Filter (bc_ip_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_IP_F O64 - Services: CurCS - (.not file.) - BC_Engine (bc_ngn) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_NGN O64 - Services: CurCS - (.not file.) - BC_PAT_Filter (bc_pat_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PAT_F O64 - Services: CurCS - (.not file.) - BC_Protocol_Filter (bc_prt_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_PRT_F O64 - Services: CurCS - (.not file.) - BC_TDI_Filter (bc_tdi_f) .(.Pas de propriétaire - Pas de description.) - LEGACY_BC_TDI_F O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vidstub.sys - BootScreen (BootScreen) .(.Pas de propriétaire - Pas de description.) - LEGACY_BOOTSCREEN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Explorateur d'ordinateur (Browser) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BROWSER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32 O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - Application système COM+ (COMSysApp) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_COMSYSAPP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k DcomLaunch (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN O64 - Services: CurCS - C:\Windows\system32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT O64 - Services: CurCS - C:\Windows\system32\drivers\dmload.sys - dmload (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE O64 - Services: CurCS - (.not file.) - driverhardwarev2 (driverhardwarev2) .(.Pas de propriétaire - Pas de description.) - LEGACY_DRIVERHARDWAREV2 O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service Protocole EAP (Extensible Authentication Protocol) (EapHost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EAPHOST O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC O64 - Services: CurCS - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe - ES lite Service for program management. (ES lite Service) .(.Pas de propriétaire - Pas de description.) - LEGACY_ES_LITE_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\fltMgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0 O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\WINDOWS\gdrv.sys - gdrv (gdrv) .(.Windows ® 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper (getPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_GETPLUSHELPER O64 - Services: CurCS - C:\Windows\system32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HID Input Service (HidServ) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HIDSERV O64 - Services: CurCS - C:\Windows\system32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER O64 - Services: CurCS - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE O64 - Services: CurCS - (.not file.) - InCD File System (InCDfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDFS O64 - Services: CurCS - (.not file.) - InCDrec (InCDrec) .(.Pas de propriétaire - Pas de description.) - LEGACY_INCDREC O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC O64 - Services: CurCS - (.not file.) - ZoneAlarm Toolbar ISWKL (ISWKL) .(.Pas de propriétaire - Pas de description.) - LEGACY_ISWKL O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java™ Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Serveur (LanmanServer) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANSERVER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Station de travail (LanmanWorkstation) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LANMANWORKSTATION O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Affichage des messages (Messenger) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_MESSENGER O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD O64 - Services: CurCS - C:\WINDOWS\system32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\mrxsmb.sys - MRXSMB (MRxSmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\WINDOWS\system32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Agent de protection d'accès réseau (napagent) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NAPAGENT O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbios.sys - Interface NetBIOS (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Ouverture de session réseau (Netlogon) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NETLOGON O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA O64 - Services: CurCS - (.not file.) - NMIndexingService (NMIndexingService) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMINDEXINGSERVICE O64 - Services: CurCS - C:\Program Files\CDBurnerXP\NMSAccessU.exe - NMSAccessU (NMSAccessU) .(.Pas de propriétaire - Pas de description.) - LEGACY_NMSACCESSU O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_NTLMSSP O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARPORT.sys - Parport (Parport) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARPORT O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM O64 - Services: CurCS - C:\WINDOWS\system32\IoctlSvc.exe - PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) .(.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - LEGACY_PLFLASH_DEVICEIOCONTROL_SERVICE O64 - Services: CurCS - C:\WINDOWS\system32\HPZipm12.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12 O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN O64 - Services: CurCS - C:\Windows\system32\DRIVERS\rdbss.sys - Rdbss (Rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY O64 - Services: CurCS - C:\WINDOWS\system32\locator.exe - Localisateur d'appels de procédure distante (RPC) (RpcLocator) .(.Microsoft Corporation - Rpc Locator.) - LEGACY_RPCLOCATOR O64 - Services: CurCS - C:\WINDOWS\system32\svchost -k rpcss (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - ServiceLayer (ServiceLayer) .(.Nokia - ServiceLayer Module.) - LEGACY_SERVICELAYER O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Pare-feu Windows / Partage de connexion Internet (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE O64 - Services: CurCS - C:\Windows\system32\DRIVERS\srv.sys - Srv (Srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC O64 - Services: CurCS - C:\WINDOWS\system32\dllhost.exe - MS Software Shadow Copy Provider (SwPrv) .(.Microsoft Corporation - COM Surrogate.) - LEGACY_SWPRV O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP O64 - Services: CurCS - C:\WINDOWS\System32\svchost -k DComLaunch (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS O64 - Services: CurCS - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(.Pas de propriétaire - Pas de description.) - LEGACY_UNLOCKERDRIVER5 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VGA.sys - vga (vga) .(.Pas de propriétaire - Pas de description.) - LEGACY_VGA O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\system32\vsdatant.sys - vsdatant (vsdatant) .(.Check Point Software Technologies LTD - TrueVector Device Driver.) - LEGACY_VSDATANT O64 - Services: CurCS - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor (vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\system32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP O64 - Services: CurCS - C:\Windows\system32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) - LEGACY_WDF01000 O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de numéro de série du lecteur multimédia portable (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV O64 - Services: CurCS - C:\Windows\system32\DRIVERS\WudfPf.sys - Windows Driver Foundation - User-mode Driver Framework Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Windows Driver Foundation - User-mode Driver Framework (WudfSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUDFSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service d'approvisionnement réseau (xmlprov) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_XMLPROV ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - <a href="http://search.live.com" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a> O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - <a href="http://www.bing.com" class="bbc_url" title="Lien externe" rel="nofollow external">Bing</a> O69 - SBI: SearchScopes [HKCU] {B92E9C19-2391-4420-A2B3-0ED981AAF20B} - (Yahoo! Search) - <a href="http://fr.search.yahoo.com" class="bbc_url" title="Lien externe" rel="nofollow external">Yahoo! Search - Recherche Web</a> ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, <a href="http://www.gmer.net" class="bbc_url" title="Lien externe" rel="nofollow external">GMER - Rootkit Detector and Remover</a> Run by Taranis at 04/09/2010 14:14:21 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\System32\appmgmts.dll [176640] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496] O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\System32\hidserv.dll [21504] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [96768] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows™.) -- C:\WINDOWS\System32\tapisrv.dll [249856] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840] O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\System32\advapi32.dll [685568] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [27136] End of the scan (1409 lines in 04mn 12s)(0)

Modifié le 24 septembre 2011 par Eku28

pear · le 4 septembre 2010

Bonjour,

Corrigé hier pat Otm.

Télécharger ZHPFix de Nicolas Coolman sur le bureau.

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Suivre les instructions qui apparaissent à l'écran.

Lancer ZHPFix (laisser la case cochée)

Cliquer ensuite sur le H

Copier-coller (Ctrl C CTRL V) les lignes suivantes dans le cadre blanc et Cliquer OK

O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw)

O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw)

Cocher les cases et appuyer sur "Nettoyer"

Copier-coller ici le rapport de suppression dans la prochaine réponse.

Eku28 · le 4 septembre 2010

Hello,

Le rapport ZHPFix

Rapport de ZHPFix v1.12.3143 par Nicolas Coolman, Update du 01/09/2010

Fichier d'export Registre :

Run by Taranis at 04/09/2010 15:36:34

Web site : ZHPFix Fix de rapport

Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========

O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw) => Clé supprimée avec succès

O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} . (.Pas de propriétaire - Pas de description.) -- (.not file.) => Infection BT (Search Settings.Adw) => Clé supprimée avec succès

========== Récapitulatif ==========

2 : Clé(s) du Registre

End of the scan

Eku28 · le 4 septembre 2010

Bonjour,

Je pense que là c' est bon.

J' ai redémmarré la machine et un dernier scan ZHPDiag qui est propre.

Il y at il d' autres manips à faire, genre nettoyage et défragmentation ?

Eku28 · le 6 septembre 2010

Bonsoir,

Merci "pear" de votre aide précieuse.

Si je peux me risquer au jeu de mot, [ Vous êtes un "pear" pour nous ]. Je ne pouvais pas ne pas le faire, trop tentant ..........

Trèves de plaisanteries, la machine à retrouver ses élans de jeunesse.

Démarrage plus rapide

Changement de session idem

Fermeture de session idem

Arrêt idem.

J' oubliai, merci aussi à Nicolas Coolman pour ces outils de diagnostics.

Au revoir.

Connexion

Pas encore inscrit ?

[Résolu] - Analyse ZHPDiag

Messages recommandés

Eku28

pear

Eku28

pear

Eku28

Eku28

Eku28

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer