Résolu - Découverte d'infections grace à HZPDiag

[Papougnet49]

Je viens de refaire selon la procédure que vous m'avez indiquée OTL, ce qui donne le rapport ci-contre :

 

All processes killed

========== OTL ==========

Service HidServ stopped successfully!

Service HidServ deleted successfully!

Prefs.js: "Ask.com" removed from browser.search.defaultengine

Prefs.js: "Ask.com" removed from browser.search.defaultenginename

Prefs.js: "Ask.com" removed from browser.search.order.1

Prefs.js: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=BCPA&o=16145&locale=fr_FR&apn_uid=ABF47116-4D56-43F5-A74D-739C4BCDB5B2&apn_ptnrs=QK&apn_sauid=55F260F0-FFC5-4033-AA86-42E13B72CFBA&apn_dtid=YYYYYYYYFR&q=" removed from keyword.URL

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Extensions folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\META-INF folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome\content folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}\chrome folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66} folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\defaults\preferences folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\defaults folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\components folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com\chrome folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\activities@kaply.com folder moved successfully.

C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions folder moved successfully.

Folder C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66}\ not found.

Folder C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}\ not found.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\locale folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome\content folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\chrome folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.

C:\Program Files\Mozilla Firefox\extensions folder moved successfully.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.

Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ not found.

Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.

File move failed. H:\autorun.inf scheduled to be moved on reboot.

ADS C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34 deleted successfully.

========== SERVICES/DRIVERS ==========

========== REGISTRY ==========

========== FILES ==========

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->Flash cache emptied: 56502 bytes

 

User: Docteur LANGERON

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 320678 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 38428989 bytes

->Google Chrome cache emptied: 0 bytes

->Flash cache emptied: 1261 bytes

 

User: LocalService

->Temp folder emptied: 65748 bytes

->Temporary Internet Files folder emptied: 49286 bytes

 

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 48569 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 18960230 bytes

RecycleBin emptied: 439 bytes

 

Total Files Cleaned = 55,00 mb

 

 

[EMPTYFLASH]

 

User: All Users

 

User: Default User

->Flash cache emptied: 0 bytes

 

User: Docteur LANGERON

->Flash cache emptied: 0 bytes

 

User: LocalService

 

User: NetworkService

 

Total Flash Files Cleaned = 0,00 mb

 

 

OTL by OldTimer - Version 3.2.20.6 log created on 01262011_155916

 

Files\Folders moved on Reboot...

File move failed. H:\autorun.inf scheduled to be moved on reboot.

C:\WINDOWS\temp\Perflib_Perfdata_1d8.dat moved successfully.

 

Registry entries deleted on Reboot...

 

 

Avec tous mes remerciements pour votre gentillesse et votre promptitude.

 

NB : J'ai bien un petit problème, assez ancien. Lorsque j'exécute Microsoft Baseline Security Analyzer 2.2 il m'indique toujours qu'une mise à jour ne s'est pas effectuée et qu'il faut redémarrer Windows mais ceci est sans effet. Il ne m'indique pas quelle mise à jour ne s'est pas effectuée. Le problème est signalé dans la base de donnée de Microsoft mais la correction ou les corrections me semblent bien difficiles à mettre en œuvre. Je souhaiterai votre avis.

 

Encore une fois tous mes remerciements.

[lance_yien]

Bonjour,

 

NB : J'ai bien un petit problème, assez ancien. Lorsque j'exécute Microsoft Baseline Security Analyzer 2.2 il m'indique toujours qu'une mise à jour ne s'est pas effectuée...

Télécharger la mise à jour manquante sur Bureau puis l'exécuter (en Mode sans échec si nécessaire).

 

 

>>> Supprimer les utilitaires:

- Pour supprimer ComboFix, cliquer sur Démarrer => Exécuter et saisir (ou copier/ coller) ComboFix /Uninstall (espace entre "ComboFix" et "/Uninstall"). Cliquer sur OK.

Ce qui a pour effet de supprimer ComboFix ainsi que les dossiers/ fichiers qu'il a installé et ré-initialiser les points de restauration.

- Lancer OTL et cliquer sur Purge outils. Laisser faire et redémarrer le PC.

- Pour supprimer les autres utilitaires et leur rapports, cliquer-droit dessus => "Supprimer".

 

 

>>> Très important: Toute ancienne version d'un programme quel qu'il soit peut comporter des vulnérabilités susceptibles d'être exploitées pour infecter un PC et notre meilleur moyen pour limiter les dégâts c'est la mise à jour régulièrement[/b]:

Utiliser, IMPÉRATIVEMENT, Internet Explorer pour téléchargez (sur le Bureau) la dernière version qui correspond à votre Système d'exploitation (le tien est un 32bits): Téléchargements Java pour tous les systèmes d'exploitation.

 

 

Avant l'installation il est important de commencer par supprimer TOUTES les anciennes versions dans votre machine parce qu'elles peuvent contenir des vulnérabilités de sécurité:

Cliquer sur "Démarrer" => "Panneau de Configuration" => "Ajout/ Suppr des Programmes".

Chercher, dans la liste les lignes concernant Java (J2SE Runtime Environment.... ) et repérables avec cette icône .

Sélectionner une ligne à la fois et cliquer sur Modifier/ Supprimer.

Quand il n'y en a plus fermez tout et installez la nouvelle version en cliquant sur le fichier que vous avez téléchargé.

 

 

>>> Protéger/ Sécuriser:

• Contrôler et configurer les mises à jour Windows:
  - Cliquer ICI et installer toutes les Mises à jour critiques après avoir accepté l'installation de l'activex (si proposé).
  - OU, cliquer sur "Démarrer" => "Tous les programmes" => "Windows update".
  - ET, optez (si ce n'est pas encore fait) pour une MAJ Automatique à une heure où vous êtes sûr que votre PC n'est pas éteint.
   
  
  
  

  
   
  

• Installer PSI de Secunia pour des MAJ logiciels
  
• Installer Update Checker pour des MAJ pilotes
  
• Utiliser PC Pitstop pour Optimiser votre PC (en anglais)
  
• Sauvegarder le Registre avec Erunt
  Pour des raisons évidentes, garder les copies de sauvegarde sur un support autre que le disque système.
  
• Immunisez votre machine avec Spyware Blaster, compatible avec Toutes les versions de Windows 32bit et 64bit. Tuto.
  
• Opter pour Firefox ou Opera pour la navigation de tous les jours et réserver Internet Explorer pour les Mises à jour et les cas bien spécifiques.
  
• Nettoyer et dé-fragmenter, régulièrement, les Partitions/ Disques.

 

>>> Ce qu'il faut ÉVITER ABSOLUMENT: Parce qu'il existe toujours un programme/logiciel gratuit et légal pour pratiquement tout ce qu'on veut, supprimer de votre machine et rester à l'écart de tout ce qui est,

• Warez , Crack , keygen etc. Arrêter de croire que ces programmes sont là juste pour faire plaisir ou rendre service. Il n'y a qu'à parcourir les Forums pour voir le nombre de PC victimes de ces programmes.
  
• P2P , *.Torrent etc: Lire attentivement Le danger des P2P.

 

>>> Ajouter Résolu: Merci d'éditer ton 1er post pour ajouter [Résolu] à la fin du titre après avoir cliqué sur le bouton "Modifier".

 

Bonne chance!

[Papougnet49]

Bonjour monsieur,

J'ai bien reçu votre réponse, toutefois avant de désinstaller les outils de diagnostic et de désinfection j'ai préféré refaire un ZHPDiag qui révèle "peut-être" la persistance d''une possible infection. Je vous adresse donc le ZHPDiag.txt.

 

D'autre part au sujet de la MaJ de sécurité de Windows pour laquelle on me demande de redémarrer l'ordinateur, je n'ai pas la référence de la MaJ donc je ne peux pas la télécharger.

 

Pour finir faudra t-il effectuer un point de restauration après la fin des opérations et effacer toutes les précédentes.

Merci beaucoup et veuillez m'excuser de toutes ces questions.

 

Rapport de ZHPDiag v1.27.1511 par Nicolas Coolman, Update du 24/01/2011

Run by Docteur LANGERON at 27/01/2011 11:17:49

Web site : ZHPDiag Outil de diagnostic

Contact : nicolascoolman@yahoo.fr

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)

 

---\\ System Information

Windows XP Professional Service Pack 3 (Build 2600)

Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 511 MB (30% free)

System Restore: Activé (Enable)

System drive C: has 33 GB (44%) free of 75 GB

 

---\\ Logged in mode

Computer Name: BUREAU01

User Name: Docteur LANGERON

All Users Names: SUPPORT_388945a0, IWAM_BUREAU01, IUSR_BUREAU01, HelpAssistant, Docteur LANGERON, ASPNET, Administrateur,

Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=%USERPROFILE%\Application Data

%LocalAppData%=%USERPROFILE%\Local Settings\Application Data

%StartMenu%=%USERPROFILE%\Menu Démarrer

 

---\\ DOS/Devices

A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

C:\ Hard drive, Flash drive, Thumb drive (Free 33 Go of 75 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ CD-ROM drive (Not Inserted)

F:\ Hard drive, Flash drive, Thumb drive (Free 16 Go of 19 Go)

G:\ Hard drive, Flash drive, Thumb drive (Free 462 Go of 466 Go)

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\Windows\Explorer.exe [1037824]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\Winlogon.exe [512000]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\atapi.sys [96512]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\ntfs.sys [574976]

 

 

---\\ Processus lancés

[MD5.25FB74EABCE5EC7836BA3CFB3C58449A] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384]

[MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3396624]

[MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104]

[MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - (.Microsoft Corporation - Services Internet (IIS).) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872]

[MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]

[MD5.7198BBFBE46C0070257278C536386687] - (.Secunia - Secunia PSI Agent.) -- C:\Program Files\Secunia\PSI\PSIA.exe [993848]

[MD5.50F22575C0FB5D85A9D41EF963610C32] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\System32\tcpsvcs.exe [19456]

[MD5.45A0772A49914786AD64471205938CE9] - (.Microsoft Corporation - Service SNMP.) -- C:\WINDOWS\System32\snmp.exe [33280]

[MD5.949B71704FD641F3CC058F498BBA6E3B] - (.WDC - WD Drive Manager Service.) -- C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400]

[MD5.D322AEEBDB406D85F752CB5615F51960] - (.Pas de propriétaire - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962660]

[MD5.D179E1DE532C903AB1D57A4E81342F40] - (.Secunia - Secunia PSI Tray.) -- C:\Program Files\Secunia\PSI\psi_tray.exe [291896]

[MD5.D2FCA567F9BE87E29B9A9FA32FFE79CA] - (.Secunia - Secunia Update Agent.) -- C:\Program Files\Secunia\PSI\sua.exe [399416]

[MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344]

[MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472]

[MD5.81932D4F939244D17B7AFE8E1D5F4E28] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [624128]

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll

P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

 

 

---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)) -- C:\WINDOWS\system32\ieframe.dll

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk . (.Pas de propriétaire.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi_tray.exe

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Baseline Security Analyzer 2.2.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Baseline Security Analyzer 2\mbsa.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Secunia PSI.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk . (.Pas de propriétaire.) -- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) - (.not file.) - file:\\C:\WINDOWS\Java\classes\dajava.cab

O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241627464750

O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CS1\Services\Tcpip\..\{AC038FB4-9390-4C0E-A182-22514E560A4F}: NameServer = 80.10.246.1 81.253.149.2

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: (Ati HotKey Poller) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (gupdate1c9dba399512e1a) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files\Secunia\PSI\PSIA.exe

O23 - Service: (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files\Secunia\PSI\sua.exe

O23 - Service: (WDBtnMgrSvc.exe) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{9E8113EC-34EE-46BE-99BF-553D3CABC91A}.job

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (lusbaudio) . (.Microsoft Corporation - Sound Driver.) - C:\Windows\System32\drivers\OVSound2.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\processr.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: (wdmaud) . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) - C:\Windows\System32\drivers\wdmaud.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\Windows\System32\DRIVERS\tcpip6.sys

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}

O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}

O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}

O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: Brother HL-5240 - (.Brother.) [HKLM] -- {FC85DBFD-4BD4-4306-9929-0AFF31594372}

O42 - Logiciel: C-Media WDM Audio Driver - (.Pas de propriétaire.) [HKLM] -- C-Media Audio Driver

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: Ciel Paye 14.20 - (.CIEL.) [HKLM] -- {615E501A-7F7E-433C-979E-830D2B911FA3}

O42 - Logiciel: Creative Commons Add-in for Microsoft Office - (.Microsoft Corporation..) [HKLM] -- {EC719582-B6B4-436A-922B-67094106AB81}

O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler

O42 - Logiciel: Diagnostic Sésam Vitale - (.Pas de propriétaire.) [HKLM] -- Diagnostic Sésam Vitale

O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}

O42 - Logiciel: ExamDiff 1.8 - (.PrestoSoft.) [HKLM] -- ExamDiff_is1

O42 - Logiciel: Gimp Pack Mode 2.6.2 - (.Association Mode.) [HKLM] -- Gimp Pack Mode_is1

O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {C768790F-04FB-11E0-9B2C-001AA037B01E}

O42 - Logiciel: HP Imaging Device Functions 9.0 - (.HP.) [HKLM] -- HP Imaging Device Functions

O42 - Logiciel: HP OCR Software 9.0 - (.HP.) [HKLM] -- HPOCR

O42 - Logiciel: HP Photosmart All-In-One Software 9.0 - (.HP.) [HKLM] -- {D64BC2CF-0F12-47d7-B412-B4F3FD684253}

O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC}

O42 - Logiciel: HP Solution Center 9.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools

O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: IIS UrlScan Tool 2.0 (Uninstall) - (.Pas de propriétaire.) [HKLM] -- IisUrlScan

O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView

O42 - Logiciel: Java 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Logiciel Médical RM Ingénierie - (.RM Ingénierie.) [HKLM] -- {26D777D4-E8AA-46A3-BFBA-83A03090CFCB}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Macromedia Dreamweaver 3 Fr - (.Macromedia.) [HKLM] -- Macromedia Dreamweaver 3 Fr

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Baseline Security Analyzer 2.2 - (.Microsoft Corporation.) [HKLM] -- {13CD417D-F1F1-4AC4-945D-FDDEB884756F}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft GIF Animator - (.Pas de propriétaire.) [HKLM] -- GIF Animator

O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007

O42 - Logiciel: Microsoft Office 2003 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {91490409-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Small Business Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {91CA040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Module Français pour Irfanview version 4.27 - (.jfm.) [HKLM] -- Module Français pour Irfanview version 4.27

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)

O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: Paint Shop Pro 6.0 (CD-ROM) - (.Pas de propriétaire.) [HKLM] -- Paint Shop Pro 6.0

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3

O42 - Logiciel: Polar Precision Performance SW 3.0 - (.Pas de propriétaire.) [HKLM] -- Polar Precision Performance SW 3.0

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva

O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller

O42 - Logiciel: SAGEM F@st 800-840 - (.Pas de propriétaire.) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}

O42 - Logiciel: Secunia PSI (2.0.0.3001) - (.Pas de propriétaire.) [HKLM] -- Secunia PSI

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Skype™ 5.1 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster_is1

O42 - Logiciel: Série+4000 - (.Pas de propriétaire.) [HKLM] -- Série+4000

O42 - Logiciel: Toolbar Uninstaller 1.0.0.1 - (.Decomputeur.nl.) [HKLM] -- Toolbar Uninstaller_is1

O42 - Logiciel: Total Commander (Remove or Repair) - (.Ghisler Software GmbH.) [HKLM] -- Totalcmd

O42 - Logiciel: Télétrans sécurisée - (.Pas de propriétaire.) [HKLM] -- Télétrans sécurisée

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: VC 9.0 Runtime - (.Check Point Software Technologies Ltd.) [HKLM] -- {02E89EFC-7B07-4D5A-AA03-9EC0902914EE}

O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}

O42 - Logiciel: WD Drive Manager (x86) - (.Western Digital.) [HKLM] -- {813EE1F0-D251-4F98-AC91-9B98CF22717E}

O42 - Logiciel: Wanadoo ADSL ECI USB - (.Pas de propriétaire.) [HKLM] -- {C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130

O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52}

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1

O42 - Logiciel: ZebHelpProcess 2.44 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process_is1

O42 - Logiciel: Zune Desktop Theme - (.Microsoft Corporation.) [HKLM] -- {7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}

O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

O42 - Logiciel: dBpoweramp Music Converter - (.Illustrate.) [HKLM] -- dBpoweramp Music Converter

O42 - Logiciel: dBpoweramp Windows Media Audio 10 Codec - (.Illustrate.) [HKLM] -- dBpoweramp Windows Media Audio 10 Codec

O42 - Logiciel: memDOC 3.5.1 - (.Pas de propriétaire.) [HKLM] -- memDOC 3.5.1_is1

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\ALWIL Software]

[HKCU\Software\Adobe]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Applications WinDev]

[HKCU\Software\BVRP Software]

[HKCU\Software\Borland]

[HKCU\Software\Brother]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\GIP-CPS]

[HKCU\Software\Gadwin Systems]

[HKCU\Software\Ghisler]

[HKCU\Software\GlarySoft]

[HKCU\Software\Google]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\Illustrate]

[HKCU\Software\Intel]

[HKCU\Software\Iris]

[HKCU\Software\JASC]

[HKCU\Software\JEDI-VCL]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lavalys]

[HKCU\Software\Licenses]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Mozilla]

[HKCU\Software\Netscape]

[HKCU\Software\NirSoft]

[HKCU\Software\Novell]

[HKCU\Software\ODBC]

[HKCU\Software\ORL]

[HKCU\Software\PDFCreator]

[HKCU\Software\Pc Soft]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\PrestoSoft]

[HKCU\Software\RMIngénierie]

[HKCU\Software\RMinformatique]

[HKCU\Software\SCC]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Sage]

[HKCU\Software\Search Settings]

[HKCU\Software\Secunia]

[HKCU\Software\Sensaura]

[HKCU\Software\Siemens]

[HKCU\Software\Skype]

[HKCU\Software\Sonic Desktop Software]

[HKCU\Software\Sysinternals]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VOB]

[HKCU\Software\VSRevoGroup]

[HKCU\Software\Wget]

[HKLM\Software\781]

[HKLM\Software\ALWIL Software]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\AppDataLow]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Application Updater]

[HKLM\Software\Borland]

[HKLM\Software\Brother]

[HKLM\Software\C07ft5Y]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\DivXNetworks]

[HKLM\Software\ECI]

[HKLM\Software\GIMP_Back_Mode]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\Identification]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Licenses]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\NSCPID]

[HKLM\Software\ODBC]

[HKLM\Software\OldTimer Tools]

[HKLM\Software\PDFCreator]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RMinformatique]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Sage]

[HKLM\Software\Schlumberger]

[HKLM\Software\Search Settings]

[HKLM\Software\Secunia]

[HKLM\Software\Skype]

[HKLM\Software\SpywareBlaster]

[HKLM\Software\Swearware]

[HKLM\Software\SymNRT]

[HKLM\Software\WebUpdate]

[HKLM\Software\Western Digital]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\XnView]

[HKLM\Software\analog devices]

[HKLM\Software\mozilla.org]

[HKLM\Software\sagem]

 

 

---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 23/12/2010 - 19:33:56 ----D- C:\Program Files\7-Zip

O43 - CFD: 31/12/2010 - 12:22:40 ----D- C:\Program Files\Adobe

O43 - CFD: 23/01/2010 - 17:50:26 ----D- C:\Program Files\Alwil Software

O43 - CFD: 11/06/2010 - 09:35:40 ----D- C:\Program Files\Apple Software Update

O43 - CFD: 08/01/2011 - 16:38:06 ----D- C:\Program Files\Application Updater

O43 - CFD: 18/11/2010 - 10:18:04 ----D- C:\Program Files\AxBx

O43 - CFD: 06/09/2007 - 23:34:16 ----D- C:\Program Files\Axis Communications

O43 - CFD: 16/05/2009 - 11:15:06 ----D- C:\Program Files\Axon Data

O43 - CFD: 09/07/2009 - 09:58:46 ----D- C:\Program Files\Brother

O43 - CFD: 09/07/2009 - 09:59:24 ----D- C:\Program Files\Brownie

O43 - CFD: 10/01/2011 - 13:52:26 ----D- C:\Program Files\CCleaner

O43 - CFD: 05/06/2008 - 21:59:06 ----D- C:\Program Files\Cegedim

O43 - CFD: 16/10/2008 - 14:07:08 ----D- C:\Program Files\CIEL

O43 - CFD: 20/02/2004 - 12:33:22 ----D- C:\Program Files\Common Files

O43 - CFD: 20/02/2004 - 11:10:30 ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 03/01/2011 - 17:31:14 ----D- C:\Program Files\Defraggler

O43 - CFD: 03/10/2010 - 16:22:08 ----D- C:\Program Files\ExamDiff

O43 - CFD: 26/01/2011 - 10:05:06 ----D- C:\Program Files\Fichiers communs

O43 - CFD: 01/09/2010 - 13:03:44 ----D- C:\Program Files\Fonction Sesam Vitale

O43 - CFD: 27/12/2010 - 19:18:28 ----D- C:\Program Files\Gimp Pack Mode

O43 - CFD: 17/01/2011 - 15:19:10 ----D- C:\Program Files\Glary Utilities

O43 - CFD: 13/08/2010 - 20:47:04 ----D- C:\Program Files\Google

O43 - CFD: 09/07/2009 - 10:36:42 ----D- C:\Program Files\Hewlett-Packard

O43 - CFD: 09/07/2009 - 10:38:08 ----D- C:\Program Files\HP

O43 - CFD: 22/09/2010 - 14:47:56 ----D- C:\Program Files\Illustrate

O43 - CFD: 09/07/2009 - 09:58:10 --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 15/12/2010 - 18:42:06 ----D- C:\Program Files\Internet Explorer

O43 - CFD: 11/06/2010 - 08:35:56 ----D- C:\Program Files\IrfanView

O43 - CFD: 16/08/2010 - 16:22:44 ----D- C:\Program Files\Java

O43 - CFD: 28/01/2010 - 17:01:14 ----D- C:\Program Files\Macromedia

O43 - CFD: 25/01/2011 - 23:00:44 ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 07/07/2009 - 09:15:52 ----D- C:\Program Files\memDOC

O43 - CFD: 04/05/2009 - 12:10:04 ----D- C:\Program Files\Messenger

O43 - CFD: 11/10/2010 - 13:05:44 ----D- C:\Program Files\Microsoft Baseline Security Analyzer 2

O43 - CFD: 21/02/2004 - 07:19:34 ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 15/11/2010 - 09:44:36 ----D- C:\Program Files\Microsoft GIF Animator

O43 - CFD: 28/08/2009 - 11:07:52 ----D- C:\Program Files\Microsoft Office

O43 - CFD: 23/01/2010 - 19:04:44 ----D- C:\Program Files\Microsoft Office Creative Commons Add-in

O43 - CFD: 11/12/2008 - 19:22:34 ----D- C:\Program Files\Microsoft Sites publics français

O43 - CFD: 21/12/2010 - 17:17:10 ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 04/05/2009 - 13:29:40 ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 10/08/2010 - 22:15:58 ----D- C:\Program Files\Movie Maker

O43 - CFD: 06/10/2007 - 15:47:50 ----D- C:\Program Files\Mozilla ActiveX Control v1.7.12

O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 31/03/2009 - 10:58:08 ----D- C:\Program Files\MSBuild

O43 - CFD: 02/12/2010 - 09:44:46 ----D- C:\Program Files\MSECache

O43 - CFD: 17/05/2008 - 18:49:06 ----D- C:\Program Files\msn

O43 - CFD: 04/05/2009 - 10:21:28 ----D- C:\Program Files\msn gaming zone

O43 - CFD: 16/11/2006 - 20:48:52 ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 17/05/2008 - 18:45:06 ----D- C:\Program Files\NetMeeting

O43 - CFD: 31/12/2010 - 10:42:52 ----D- C:\Program Files\NOS

O43 - CFD: 09/01/2011 - 19:50:12 ----D- C:\Program Files\Notepad++

O43 - CFD: 15/12/2010 - 18:33:28 ----D- C:\Program Files\Outlook Express

O43 - CFD: 12/12/2010 - 07:34:08 ----D- C:\Program Files\Paint Shop Pro 6

O43 - CFD: 07/01/2011 - 14:32:10 ----D- C:\Program Files\PDFCreator

O43 - CFD: 08/12/2010 - 10:13:30 ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 10/02/2010 - 11:49:32 ----D- C:\Program Files\Polar

O43 - CFD: 13/12/2010 - 14:15:58 ----D- C:\Program Files\QuickTime

O43 - CFD: 03/01/2011 - 17:29:08 ----D- C:\Program Files\Recuva

O43 - CFD: 02/05/2010 - 21:32:20 ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 04/12/2009 - 12:31:50 ----D- C:\Program Files\RegCleaner

O43 - CFD: 19/02/2006 - 12:53:08 ----D- C:\Program Files\SAGEM

O43 - CFD: 17/01/2011 - 14:34:20 ----D- C:\Program Files\Secunia

O43 - CFD: 13/01/2011 - 09:35:58 ----D- C:\Program Files\Services en ligne

O43 - CFD: 11/08/2010 - 09:17:46 ----D- C:\Program Files\sesam

O43 - CFD: 16/01/2011 - 12:40:24 R---D- C:\Program Files\Skype

O43 - CFD: 12/11/2009 - 16:59:46 ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 23/01/2011 - 12:01:22 ----D- C:\Program Files\SpywareBlaster

O43 - CFD: 03/07/2009 - 13:43:30 ----D- C:\Program Files\ToniArts

O43 - CFD: 12/01/2011 - 17:26:24 ----D- C:\Program Files\Toolbar Uninstaller

O43 - CFD: 02/07/2004 - 23:02:18 --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 02/05/2009 - 08:45:08 ----D- C:\Program Files\VS Revo Group

O43 - CFD: 24/02/2010 - 18:02:54 ----D- C:\Program Files\Western Digital

O43 - CFD: 28/01/2010 - 16:49:24 ----D- C:\Program Files\Western Digital Technologies

O43 - CFD: 13/03/2010 - 09:24:48 ----D- C:\Program Files\Windows Installer Clean Up

O43 - CFD: 06/05/2009 - 16:09:52 ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 16/05/2009 - 10:02:58 ----D- C:\Program Files\Windows Media Player

O43 - CFD: 02/05/2009 - 10:03:14 ----D- C:\Program Files\Windows NT

O43 - CFD: 24/09/2008 - 22:22:44 ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 20/04/2006 - 23:22:52 --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 20/02/2004 - 11:13:56 ----D- C:\Program Files\xerox

O43 - CFD: 28/09/2010 - 09:27:22 ----D- C:\Program Files\XnView

O43 - CFD: 27/01/2011 - 11:00:10 ----D- C:\Program Files\ZebHelpProcess

O43 - CFD: 27/01/2011 - 11:18:00 ----D- C:\Program Files\ZHPDiag

O43 - CFD: 31/07/2004 - 08:58:00 ----D- C:\Program Files\Common Files\System

O43 - CFD: 22/09/2010 - 14:48:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AccurateRip

O43 - CFD: 31/12/2010 - 18:01:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Adobe

O43 - CFD: 12/06/2006 - 06:48:32 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AdobeUM

O43 - CFD: 13/08/2010 - 14:40:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Apple Computer

O43 - CFD: 22/09/2010 - 23:35:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Application Updater

O43 - CFD: 02/07/2007 - 11:06:44 R---D- C:\Documents and Settings\Docteur LANGERON\Application Data\Brother

O43 - CFD: 05/11/2008 - 20:00:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O43 - CFD: 22/09/2010 - 15:21:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\dBpoweramp

O43 - CFD: 24/02/2010 - 17:14:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Download Manager

O43 - CFD: 06/07/2009 - 09:44:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\ESTsoft

O43 - CFD: 26/01/2010 - 15:05:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GHISLER

O43 - CFD: 11/01/2011 - 09:45:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GlarySoft

O43 - CFD: 25/09/2006 - 17:51:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Google

O43 - CFD: 17/01/2011 - 10:28:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\gtk-2.0

O43 - CFD: 20/02/2004 - 13:35:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Help

O43 - CFD: 30/07/2008 - 22:26:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HP

O43 - CFD: 10/04/2009 - 15:35:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HPAppData

O43 - CFD: 29/06/2010 - 18:35:58 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HpUpdate

O43 - CFD: 21/02/2004 - 12:13:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Identities

O43 - CFD: 24/01/2011 - 11:10:36 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Macromedia

O43 - CFD: 09/04/2009 - 09:08:24 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Malwarebytes

O43 - CFD: 31/12/2010 - 18:01:04 -S--D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft

O43 - CFD: 25/01/2010 - 11:42:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Corporation

O43 - CFD: 21/02/2004 - 07:13:12 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Web Folders

O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla

O43 - CFD: 04/09/2004 - 16:29:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\MSN6

O43 - CFD: 19/05/2009 - 18:32:50 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\OfficeUpdate12

O43 - CFD: 16/08/2010 - 16:12:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\pdfforge

O43 - CFD: 08/12/2010 - 10:13:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\PhotoFiltre

O43 - CFD: 16/08/2010 - 16:12:16 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Search Settings

O43 - CFD: 16/01/2011 - 19:55:14 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Skype

O43 - CFD: 31/03/2009 - 09:03:34 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Sun

O43 - CFD: 23/01/2011 - 14:23:10 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\U3

O43 - CFD: 31/08/2010 - 13:19:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\VSRevoGroup

O43 - CFD: 24/02/2010 - 18:34:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\WD

O43 - CFD: 24/01/2011 - 11:28:18 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\XnView

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 11:17:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1689227]

O44 - LFC:[MD5.78ACB0E002999EAAB76DD11FA0E8BB8D] - 27/01/2011 - 11:00:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:57:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [289]

O44 - LFC:[MD5.C7C21C26190600F28FEFFC2865DBF09E] - 27/01/2011 - 10:18:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [13868]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/01/2011 - 10:18:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:16:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/01/2011 - 10:16:14 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 27/01/2011 - 10:14:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [3478]

O44 - LFC:[MD5.185C81EA37FE619506156A762DF29D42] - 27/01/2011 - 09:47:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\setupapi.log [767]

O44 - LFC:[MD5.31FAC467141BED800838AD335B6EB477] - 26/01/2011 - 10:15:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ComboFix.txt [23725]

O44 - LFC:[MD5.E9EE6F21F3311E440286FB99B1B0F9CF] - 26/01/2011 - 10:08:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [246]

O44 - LFC:[MD5.8EA62145D76D8F2AC09555F7035194D4] - 26/01/2011 - 09:58:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Boot.bak [212]

O44 - LFC:[MD5.2F83A627FD57B5802FA6062E785740EB] - 26/01/2011 - 09:58:40 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [328]

O44 - LFC:[MD5.48C65662EC81FBCAA110509F50C51497] - 26/01/2011 - 09:58:35 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\cmldr [263488]

O44 - LFC:[MD5.AE72E8619CB31D84DA25E2435E55003C] - 26/01/2011 - 09:54:28 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [31232]

O44 - LFC:[MD5.9DAA7218961710008D7385B01BD3F386] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MBR.exe [89088]

O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\PEV.exe [256512]

O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\grep.exe [80412]

O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\sed.exe [98816]

O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\zip.exe [68096]

O44 - LFC:[MD5.01D95A1F8CF13D07CC564AABB36BCC0B] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [161792]

O44 - LFC:[MD5.B7517DB073B28F5696A1E5528ABEB5D0] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [136704]

O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480]

O44 - LFC:[MD5.98F205D859DCA7707488399CC55E9900] - 25/01/2011 - 22:22:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wininit.ini [755]

O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\BDEADMIN.CPL [183808]

O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\DBCLIENT.DLL [210032]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\Msft_Kernel_nielprt_01007.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf [0]

O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 16/01/2011 - 16:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT [3121]

O44 - LFC:[MD5.976AD1B5891D4663EB41BC12702415A4] - 13/01/2011 - 18:43:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pbcb.inf [16]

O44 - LFC:[MD5.2818237D7004CB68AE6CEBDCBD05186E] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [188216]

O44 - LFC:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [294608]

O44 - LFC:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [47440]

O44 - LFC:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [100176]

O44 - LFC:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [94544]

O44 - LFC:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23632]

O44 - LFC:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [29392]

O44 - LFC:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [17744]

O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 07/01/2011 - 14:31:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224]

O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 31/12/2010 - 21:06:36 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [38848]

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.54F3D2DEAA59631B4871F9E44059E8D5] - 07/01/2011 - 12:02:10 ---A- - C:\WINDOWS\Prefetch\OIS.EXE-33076924.pf

O45 - LFCP:[MD5.9636BFC2FB387C82B2B977DBEA2C8982] - 19/01/2011 - 19:11:18 ---A- - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf

O45 - LFCP:[MD5.602B0812D9FDF94725E420C75C1FB821] - 23/01/2011 - 19:16:17 ---A- - C:\WINDOWS\Prefetch\I_VIEW32.EXE-38F9F646.pf

O45 - LFCP:[MD5.12C12339455416BD9E156948BCBD31BB] - 24/01/2011 - 00:39:10 ---A- - C:\WINDOWS\Prefetch\TOTALCMD.EXE-08C82D3C.pf

O45 - LFCP:[MD5.F73948C0C0FA24DFB7688B3D4476DD3A] - 24/01/2011 - 00:45:50 ---A- - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-39EC5E32.pf

O45 - LFCP:[MD5.B1CB6B2FD1DA7ED671C6199F467F74BC] - 24/01/2011 - 12:25:59 ---A- - C:\WINDOWS\Prefetch\SF.BIN-2BD7295A.pf

O45 - LFCP:[MD5.766E0683679AA3299EDBAB17FDF4C911] - 24/01/2011 - 17:25:31 ---A- - C:\WINDOWS\Prefetch\SF.BIN-05D63443.pf

O45 - LFCP:[MD5.BF1AE3033AEC92ECBBD7E88C1411D8A8] - 25/01/2011 - 11:53:29 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1F48A76E.pf

O45 - LFCP:[MD5.41FD1245250480DA31BA037C7D5D12BA] - 25/01/2011 - 14:07:59 ---A- - C:\WINDOWS\Prefetch\SF.BIN-09AED27E.pf

O45 - LFCP:[MD5.A9FB296854D3041ADF7BD990002CA358] - 25/01/2011 - 19:58:32 ---A- - C:\WINDOWS\Prefetch\WINLOGON.EXE-32C57D49.pf

O45 - LFCP:[MD5.A7689859D9C2C0C2903FEE69045D7B73] - 25/01/2011 - 19:58:33 ---A- - C:\WINDOWS\Prefetch\CSRSS.EXE-12B63473.pf

O45 - LFCP:[MD5.80F6BAC7885F5470D6873E0770D939A0] - 25/01/2011 - 19:58:33 ---A- - C:\WINDOWS\Prefetch\SERVICES.EXE-2F433351.pf

O45 - LFCP:[MD5.9D27F59DE8442EA3DDC49508CA64D99C] - 25/01/2011 - 19:58:34 ---A- - C:\WINDOWS\Prefetch\LSASS.EXE-20DB6D1B.pf

O45 - LFCP:[MD5.D37B94F74702A8FD0D988FECC1B6940D] - 25/01/2011 - 19:58:36 ---A- - C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf

O45 - LFCP:[MD5.6B600C2FB818D8202D3A65D6A2922211] - 25/01/2011 - 19:58:58 ---A- - C:\WINDOWS\Prefetch\MSDTC.EXE-0E6E4AF7.pf

O45 - LFCP:[MD5.B686519AB80DDFAB11C049F67FEB06C7] - 25/01/2011 - 19:59:01 ---A- - C:\WINDOWS\Prefetch\ATI2EVXX.EXE-19D16EB9.pf

O45 - LFCP:[MD5.A632E0D02FE1EC4C20D7096341916A23] - 25/01/2011 - 19:59:06 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf

O45 - LFCP:[MD5.B64D7FDA83C6FB4A4150AEC7C80C7952] - 25/01/2011 - 19:59:09 ---A- - C:\WINDOWS\Prefetch\TCPSVCS.EXE-05847ECC.pf

O45 - LFCP:[MD5.91953443AADB50C10ED5241DEDC74072] - 25/01/2011 - 19:59:12 ---A- - C:\WINDOWS\Prefetch\WDBTNMGRSVC.EXE-10AE084E.pf

O45 - LFCP:[MD5.2BE6F81B7A11945C16607C5261BCA6D9] - 25/01/2011 - 21:32:09 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.CD4E5EBAB3EF80BD15075CA6A3CEECBF] - 25/01/2011 - 23:00:26 ---A- - C:\WINDOWS\Prefetch\MBAM-SETUP-1.50.1.1100.EXE-2AB59545.pf

O45 - LFCP:[MD5.2DB3349AA82987606AF39092DB64BEAE] - 25/01/2011 - 23:00:26 ---A- - C:\WINDOWS\Prefetch\MBAM-SETUP-1.50.1.1100.TMP-0C45D327.pf

O45 - LFCP:[MD5.FD067B4A12A9CADBA434BCFDD485F4EB] - 25/01/2011 - 23:00:38 ---A- - C:\WINDOWS\Prefetch\MBAMGUI.EXE-1286D63B.pf

O45 - LFCP:[MD5.7E8E859BA232458E2ED02BF462B96885] - 25/01/2011 - 23:42:17 ---A- - C:\WINDOWS\Prefetch\CMDINFO.EXE-0F292E46.pf

O45 - LFCP:[MD5.FCFE64EFCA1E773F22ABB5401D54810A] - 25/01/2011 - 23:42:17 ---A- - C:\WINDOWS\Prefetch\FIND.EXE-0EC32F1E.pf

O45 - LFCP:[MD5.7029AAABA68169AC211CA2D85A287DBE] - 25/01/2011 - 23:42:26 ---A- - C:\WINDOWS\Prefetch\OBJLIST.EXE-3082CF34.pf

O45 - LFCP:[MD5.84F3CF7873966130AF0BC1290156CA4F] - 25/01/2011 - 23:42:29 ---A- - C:\WINDOWS\Prefetch\SC.EXE-012262AF.pf

O45 - LFCP:[MD5.59B9A9BF1480338B6ABA0B9E7FA78654] - 25/01/2011 - 23:42:32 ---A- - C:\WINDOWS\Prefetch\NETSH.EXE-085CFFDE.pf

O45 - LFCP:[MD5.1EA829C51EF9A6F5C4FEE4739AF272BE] - 25/01/2011 - 23:42:50 ---A- - C:\WINDOWS\Prefetch\WMIC.EXE-3B772CC6.pf

O45 - LFCP:[MD5.E3C48A9568759C6257BFA17F4FBA38BE] - 25/01/2011 - 23:43:06 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-330534DB.pf

O45 - LFCP:[MD5.A6EF2BAE677DE37AB88E2966DB4CCC70] - 25/01/2011 - 23:43:15 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.EXE-050F38AC.pf

O45 - LFCP:[MD5.6BDD936A7BD1FE3BA9E58FB55EC861DF] - 25/01/2011 - 23:43:15 ---A- - C:\WINDOWS\Prefetch\SED.EXE-108014A2.pf

O45 - LFCP:[MD5.22F1D9A40F80C11CC554FA016BC2615C] - 25/01/2011 - 23:43:22 ---A- - C:\WINDOWS\Prefetch\NOTEPAD++.EXE-14917D45.pf

O45 - LFCP:[MD5.901D810B988E5D5D2AD85F6A30591E09] - 26/01/2011 - 00:33:29 ---A- - C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf

O45 - LFCP:[MD5.6EE986DF5A822CD0F65521706AC38630] - 26/01/2011 - 09:51:46 ---A- - C:\WINDOWS\Prefetch\LAUNCHU3.EXE-209CBEEF.pf

O45 - LFCP:[MD5.9428D8B4EDC6352B8138706D5773BE44] - 26/01/2011 - 09:52:02 ---A- - C:\WINDOWS\Prefetch\LAUNCHPAD.EXE-14A751D2.pf

O45 - LFCP:[MD5.C6D59A66BC986204395B0E8B9A746FE3] - 26/01/2011 - 09:53:12 ---A- - C:\WINDOWS\Prefetch\COMBOFIX.EXE-2BD745C9.pf

O45 - LFCP:[MD5.28977A2D0ED837EB4809C4B341D1AE04] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-01E072AE.pf

O45 - LFCP:[MD5.CD3A02231DAE9718C175C5C54C1EE5BB] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-0A31FE70.pf

O45 - LFCP:[MD5.72FAF5C0D336AEBA8983DCE4670F546C] - 26/01/2011 - 09:53:20 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-12915967.pf

O45 - LFCP:[MD5.50D8A672DFC2FE84C13B82CD5F6379A3] - 26/01/2011 - 09:53:23 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-1A265FEC.pf

O45 - LFCP:[MD5.15C06FB37272011B56D8A16FA9875648] - 26/01/2011 - 09:53:27 ---A- - C:\WINDOWS\Prefetch\GSAR.CFXXE-064C1B3A.pf

O45 - LFCP:[MD5.D00B7151B4E1750FEB316E047BD13F9F] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\GRPCONV.EXE-111CD845.pf

O45 - LFCP:[MD5.9B2FB8F13922B21A7663704D2C47DE7F] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1EE676D0.pf

O45 - LFCP:[MD5.F04B57AA6B94C36E336A87F0A7EA161C] - 26/01/2011 - 09:53:28 ---A- - C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf

O45 - LFCP:[MD5.7D44ADEC1F7C15129CB1D044C31A91EA] - 26/01/2011 - 09:53:31 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-0937BD77.pf

O45 - LFCP:[MD5.B69E59983B5EEBC1542C7F2E07634A52] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\CSCRIPT.EXE-1C26180C.pf

O45 - LFCP:[MD5.6AEF5B23F28AAF9C3E6DD756D980413D] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\N.PIF-1B75D06C.pf

O45 - LFCP:[MD5.F280535CB297DC3AD9FD8A37ECC0ACC5] - 26/01/2011 - 09:53:33 ---A- - C:\WINDOWS\Prefetch\PEV.EXE-2937A365.pf

O45 - LFCP:[MD5.EB38525162974DC0D3726326D00F5E0A] - 26/01/2011 - 09:53:34 ---A- - C:\WINDOWS\Prefetch\SWREG.CFXXE-16776A8B.pf

O45 - LFCP:[MD5.A8760AACE6A163C217340DF2929BF7BA] - 26/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\CMD.CFXXE-12A6B182.pf

O45 - LFCP:[MD5.457EF4BFDA496F43789FC7C950DD9EFD] - 26/01/2011 - 09:53:45 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.CFXXE-1A395113.pf

O45 - LFCP:[MD5.59E0018A8F3834589BEEEC05941DE2C2] - 26/01/2011 - 09:54:10 ---A- - C:\WINDOWS\Prefetch\SWSC.CFXXE-1F9C68EB.pf

O45 - LFCP:[MD5.AAEF815331F83770FA36D1891176B3BE] - 26/01/2011 - 09:54:11 ---A- - C:\WINDOWS\Prefetch\GREP.CFXXE-005CE245.pf

O45 - LFCP:[MD5.AB03189F4F118DC18E4FF6EC38262D0F] - 26/01/2011 - 09:54:11 ---A- - C:\WINDOWS\Prefetch\RMBR.CFXXE-2738B6F9.pf

O45 - LFCP:[MD5.452364EBF525EECB7CD6A25A976B6656] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\ATTRIB.CFXXE-18D70E5B.pf

O45 - LFCP:[MD5.BC387C6E89BC08D6A28C3A42EE1FEDD4] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\CSCRIPT.CFXXE-2F5062B6.pf

O45 - LFCP:[MD5.9498C3E0D0AE15D997FD2C97CBE0B71C] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\SED.CFXXE-384BB311.pf

O45 - LFCP:[MD5.18A89402E5F207466A99A19893971559] - 26/01/2011 - 09:54:12 ---A- - C:\WINDOWS\Prefetch\SWXCACLS.CFXXE-1ECB3953.pf

O45 - LFCP:[MD5.D182BFECD3C429D15F514D7FE0972E7B] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\ATTRIB.EXE-39EAFB02.pf

O45 - LFCP:[MD5.6505688CBAAF5F80D4DBBA434DE1C667] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\HIDEC.EXE-3B166DB3.pf

O45 - LFCP:[MD5.01615C79C9D8CF75843155C5A735AAD8] - 26/01/2011 - 09:54:13 ---A- - C:\WINDOWS\Prefetch\PEV.CFXXE-3B65BD28.pf

O45 - LFCP:[MD5.D903FD05C2BD2BA51F9EAE537F42E913] - 26/01/2011 - 09:54:15 ---A- - C:\WINDOWS\Prefetch\NIRCMD.CFXXE-351E2F5E.pf

O45 - LFCP:[MD5.15433F39980968B5B4273A4AE4DBE032] - 26/01/2011 - 09:54:22 ---A- - C:\WINDOWS\Prefetch\FINDSTR.EXE-0CA6274B.pf

O45 - LFCP:[MD5.74F312C6FD12F57F7C9D5A09DC1E6F69] - 26/01/2011 - 09:54:25 ---A- - C:\WINDOWS\Prefetch\PING.CFXXE-37757ECD.pf

O45 - LFCP:[MD5.73BD06536EEB05D3CEC2965230D8CE3A] - 26/01/2011 - 09:54:26 ---A- - C:\WINDOWS\Prefetch\COMBOFIX-DOWNLOAD.CFXXE-31D203D3.pf

O45 - LFCP:[MD5.EBF29D60DE9726910E490F24E6426CA3] - 26/01/2011 - 09:54:27 ---A- - C:\WINDOWS\Prefetch\SWSC.CFXXE-2693FE93.pf

O45 - LFCP:[MD5.78B6E7FCC227D31B5CF9220161BDF4CC] - 26/01/2011 - 09:54:28 ---A- - C:\WINDOWS\Prefetch\HIDEC.EXE-3818BC01.pf

O45 - LFCP:[MD5.3B7217CC73B45877C48376BB6EB6C192] - 26/01/2011 - 09:54:30 ---A- - C:\WINDOWS\Prefetch\PEV.EXE-0806C34B.pf

O45 - LFCP:[MD5.CD9B6B651FE7BBD7E81BC98F00B94391] - 26/01/2011 - 09:54:38 ---A- - C:\WINDOWS\Prefetch\CF13131.CFXXE-2571EC31.pf

O45 - LFCP:[MD5.424AD28C4DFBEAE64CD64880FB09D4D5] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\ATTRIB.CFXXE-0D17129C.pf

O45 - LFCP:[MD5.751E93AB6EDA6E8D580EA9991630BF6D] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\GSAR.CFXXE-00AB7A6E.pf

O45 - LFCP:[MD5.B56D5673FB1A62543372BC9D27DF9F9A] - 26/01/2011 - 09:54:42 ---A- - C:\WINDOWS\Prefetch\SWREG.EXE-3560BE42.pf

O45 - LFCP:[MD5.BD8313688F13861763DC35DA27BBA469] - 26/01/2011 - 09:54:49 ---A- - C:\WINDOWS\Prefetch\GREP.EXE-3309531C.pf

O45 - LFCP:[MD5.B4462CD65BF8AAA02DD9666DA2FBC55E] - 26/01/2011 - 09:54:49 ---A- - C:\WINDOWS\Prefetch\SED.EXE-0F4B402F.pf

O45 - LFCP:[MD5.CA328A528B3402DF300630F6F9E09B5C] - 26/01/2011 - 10:15:45 ---A- - C:\WINDOWS\Prefetch\PV.CFXXE-232B0D6C.pf

O45 - LFCP:[MD5.33F2BF8436B549163620B529945389E5] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\NIRCMD.CFXXE-05436116.pf

O45 - LFCP:[MD5.AA4A60453BB6002DA6466E49F094852A] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\NIRCMDC.CFXXE-101D6E86.pf

O45 - LFCP:[MD5.2A9CE6B119FE6573C70A86D1BE07CC19] - 26/01/2011 - 10:15:46 ---A- - C:\WINDOWS\Prefetch\SORT.EXE-194AE83C.pf

O45 - LFCP:[MD5.CCB9D958DD8FEBD91D163500BF974BFF] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\CHCP.COM-18156052.pf

O45 - LFCP:[MD5.938E49B0C1AF1C771109AC0A7A01E6A5] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\GREP.CFXXE-350016A4.pf

O45 - LFCP:[MD5.7D595457E0C8A9242C0923924EBAE09C] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\SED.CFXXE-3B4964C3.pf

O45 - LFCP:[MD5.6A669C48DC5931C35EB1B20BC822BA85] - 26/01/2011 - 10:15:47 ---A- - C:\WINDOWS\Prefetch\SWREG.CFXXE-17391962.pf

O45 - LFCP:[MD5.D610F3CBC4E44C8E2D3132B42EFCC75C] - 26/01/2011 - 10:15:48 ---A- - C:\WINDOWS\Prefetch\SWXCACLS.CFXXE-0F8095D7.pf

O45 - LFCP:[MD5.98CE25B68231F3898333DE514F8D54CB] - 26/01/2011 - 10:15:50 ---A- - C:\WINDOWS\Prefetch\PEV.CFXXE-02C8A4D3.pf

O45 - LFCP:[MD5.79B96F99BDD64EDF9370D664242D9C75] - 26/01/2011 - 10:44:43 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1E61F3BC.pf

O45 - LFCP:[MD5.B5EA55C7A5228E3782465E496C2608F6] - 26/01/2011 - 13:48:35 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4BD19A5C.pf

O45 - LFCP:[MD5.D905BD6F60EFBA85A69D13C81A03A5CD] - 26/01/2011 - 15:55:37 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf

O45 - LFCP:[MD5.8B28E3747EB0ED9840B2DB272518D6A8] - 26/01/2011 - 16:06:17 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-1CBCA997.pf

O45 - LFCP:[MD5.E37AC3C3BC4BBB66FAFAEFE95E7948C5] - 26/01/2011 - 16:06:17 ---A- - C:\WINDOWS\Prefetch\WDBTNMGRUI.EXE-2E0F4242.pf

O45 - LFCP:[MD5.6E0CE7A3A31053FE3A5A7A496AD306CA] - 26/01/2011 - 17:49:14 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf

O45 - LFCP:[MD5.9DF0C6A7435AC39EEFF9CFB7174EEC7D] - 26/01/2011 - 17:50:23 ---A- - C:\WINDOWS\Prefetch\PING.EXE-31216D26.pf

O45 - LFCP:[MD5.8D05BB00160C91ABABE873141595CFCE] - 26/01/2011 - 18:27:56 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf

O45 - LFCP:[MD5.140FFE4B2796EBE49AC0D4A79C330345] - 26/01/2011 - 18:54:25 ---A- - C:\WINDOWS\Prefetch\SDUPDATE.EXE-00420EF0.pf

O45 - LFCP:[MD5.9B4C473813E75F20B1579D8D9E14B33A] - 26/01/2011 - 18:57:46 ---A- - C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf

O45 - LFCP:[MD5.944D3A0F09BC0C58F2D61F3BCAD7D2A3] - 26/01/2011 - 19:02:29 ---A- - C:\WINDOWS\Prefetch\POWERPNT.EXE-2F940E7E.pf

O45 - LFCP:[MD5.9D29FC4EDAF5460008BE47B084C3465B] - 26/01/2011 - 19:24:25 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf

O45 - LFCP:[MD5.6783AA6968AAB3E0218AF1243AF0A87F] - 26/01/2011 - 19:24:48 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:[MD5.AFD2810DB8D63E84F9266A02FA7BEC6C] - 26/01/2011 - 20:34:03 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-0180118E.pf

O45 - LFCP:[MD5.07BDAF4CB74061CB151A87C15EE85FB5] - 26/01/2011 - 20:49:16 ---A- - C:\WINDOWS\Prefetch\ZHPFIX.EXE-3A07CBCA.pf

O45 - LFCP:[MD5.C1BCBAED365853AAB27BAB385EF29894] - 26/01/2011 - 20:49:33 ---A- - C:\WINDOWS\Prefetch\SECURITYCHECK.EXE-00D10559.pf

O45 - LFCP:[MD5.9C3287E32BE59AE33407A87FFA80F4E1] - 27/01/2011 - 09:18:16 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf

O45 - LFCP:[MD5.EFCB041F5BD46E30BE9527F4D8374DCE] - 27/01/2011 - 09:20:12 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf

O45 - LFCP:[MD5.9E96610F007911733F7DAD091FA9140C] - 27/01/2011 - 09:47:12 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.AABCC59803AE6F2E7F8B6AE49FEB0FC3] - 27/01/2011 - 09:47:45 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf

O45 - LFCP:[MD5.89084F4347A89EAAD3B90C0186C2E042] - 27/01/2011 - 10:17:51 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.0DE690B3616828CC012C0E00B0628B62] - 27/01/2011 - 10:17:51 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.41253D97F4D646B45235F8A9CDFC2325] - 27/01/2011 - 10:18:24 ---A- - C:\WINDOWS\Prefetch\DSLMON.EXE-1476FDB3.pf

O45 - LFCP:[MD5.072502D48A3706DADA1A27666C916A2B] - 27/01/2011 - 10:18:25 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf

O45 - LFCP:[MD5.EA517D25B3C8E019A9CE37C62ECC25EA] - 27/01/2011 - 10:18:30 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf

O45 - LFCP:[MD5.48BA13EA6E85F7F82E8B265BBCDC0151] - 27/01/2011 - 10:19:10 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf

O45 - LFCP:[MD5.B660B08CE99EF6CE4986151A9BEBC334] - 27/01/2011 - 10:21:50 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf

O45 - LFCP:[MD5.B57A623CF9666DFB38B40EF99D0B0398] - 27/01/2011 - 10:23:04 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf

O45 - LFCP:[MD5.73310E66D0E7E01A80ED1559552D883C] - 27/01/2011 - 10:23:37 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-01FBC16A.pf

O45 - LFCP:[MD5.BAA20CAD4FF3E0EAAC0A219461BD9B13] - 27/01/2011 - 10:25:23 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-38379543.pf

O45 - LFCP:[MD5.41A3BFE03B37FE1641FB88976B186A34] - 27/01/2011 - 10:28:39 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf

O45 - LFCP:[MD5.4E94B9FBC0C7EE582A4E75BC97218648] - 27/01/2011 - 10:28:43 ---A- - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf

O45 - LFCP:[MD5.ACE3812CC75A5E36545DB74E40F01668] - 27/01/2011 - 10:29:17 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf

O45 - LFCP:[MD5.DB8D701FB11F1527CBD1ECF8AF526E02] - 27/01/2011 - 10:33:41 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf

O45 - LFCP:[MD5.7C05C8B6B5B772CDE474E673008EA8C4] - 27/01/2011 - 10:48:30 ---A- - C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-00101112.pf

O45 - LFCP:[MD5.76F71C1EED9ED867C7C85CD4D1D8B7A3] - 27/01/2011 - 10:53:56 ---A- - C:\WINDOWS\Prefetch\XNVIEW.EXE-18AD42DD.pf

O45 - LFCP:[MD5.04276837A64AE48616EFDCC42E3EFF6F] - 27/01/2011 - 10:59:14 ---A- - C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf

O45 - LFCP:[MD5.9788E872C7917FBDEDE1D11A677F30D0] - 27/01/2011 - 10:59:52 ---A- - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf

O45 - LFCP:[MD5.3FFA037DB3B288867BFD63E39AA6091B] - 27/01/2011 - 11:17:13 ---A- - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf

O45 - LFCP:[MD5.FA043081E23E939A238015331D01CE97] - 27/01/2011 - 11:17:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13DA0E71.pf

O45 - LFCP:[MD5.3ACDD84ED36FDB2E0EB4899CC7857D6E] - 27/01/2011 - 11:17:17 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1831A4F3.pf

O45 - LFCP:[MD5.04FAE9BAF50874FFA23A413CE94C29CC] - 27/01/2011 - 11:17:28 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3BA0187D.pf

O45 - LFCP:[MD5.3B96882BF204CC282D9325C200EFC567] - 27/01/2011 - 11:17:33 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.4C2480F960E0535D25B9D30ACE235425] - 27/01/2011 - 11:17:59 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:[MD5.FEDFAF69118CC8EEBA9E5BD64897F48F] - 30/12/2010 - 18:27:23 ---A- - C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-242CE4AA.pf

 

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

 

 

---\\ Export de clé d'application autorisée (ECAA) (O47)

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" [Disabled] .(.Hewlett-Packard Co. - Embedded Web Server Link application.) -- C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" [Disabled] .(.Hewlett-Packard Co. - HP AiO Fax Manager.) -- C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" [Disabled] .(.Hewlett-Packard Co. - HP OfficeJet SendFax Interface.) -- C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Disabled] .(.Hewlett-Packard Co. - HP All-in-One Launcher Utility.) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Disabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Network Device Rediscovery Service.) -- C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" [Disabled] .(.Pas de propriétaire - hpqscnvw.) -- C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" [Disabled] .(.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" [Disabled] .(.Hewlett-Packard Co. - HP Fax Setup Wizard.) -- C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

 

 

---\\ Déni du service (Local Security Authority) (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

 

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

 

 

---\\ ShareTools MSconfig StartupReg (SMSR) (O53)

O53 - SMSR:HKLM\...\startupreg\SpybotSD TeaTimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

 

 

---\\ Microsoft Control Security Providers (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

 

 

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

 

 

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

 

 

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [29392]

O58 - SDL:[MD5.2B3B8C0A2C979DD77BA6DC9376074854] - 02/03/2004 - 07:26:58 ---A- . (.Analog Deivces - USB Firmware loader.) -- C:\WINDOWS\system32\drivers\adildr.sys [50007]

O58 - SDL:[MD5.D478C566318803A7063B120F026DC0B7] - 02/03/2004 - 07:24:16 ---A- . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\WINDOWS\system32\drivers\adiusbaw.sys [127065]

O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [94544]

O58 - SDL:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [100176]

O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [23632]

O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [294608]

O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [47440]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.D24DFD16A1E2A76034DF5AA18125C35D] - 01/09/2010 - 09:30:58 ---A- . (.Secunia - Secunia PSI Driver.) -- C:\WINDOWS\system32\drivers\psi_mf.sys [15544]

O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 12/05/2008 - 23:06:44 ---A- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\system32\drivers\wdcsam.sys [11520]

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 24/01/2011 - 00:39:13 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GHISLER\wcx_ftp.ini [326]

O61 - LFC:Last File Created 24/01/2011 - 00:43:44 -SHA- C:\Documents And Settings\Docteur LANGERON\IECompatCache\index.dat [868352]

O61 - LFC:Last File Created 24/01/2011 - 00:43:44 -SHA- C:\Documents And Settings\Docteur LANGERON\PrivacIE\index.dat [360448]

O61 - LFC:Last File Created 24/01/2011 - 00:44:20 ---A- C:\Documents And Settings\Docteur LANGERON\Cookies\docteur langeron@CA53UXSR.txt [130]

O61 - LFC:Last File Created 24/01/2011 - 00:44:46 ---A- C:\Documents And Settings\Docteur LANGERON\Cookies\docteur langeron@CALMYAK0.txt [418]

O61 - LFC:Last File Created 24/01/2011 - 00:59:23 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GHISLER\wincmd.ini [4509]

O61 - LFC:Last File Created 24/01/2011 - 09:42:15 ---A- C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk [2349]

O61 - LFC:Last File Created 24/01/2011 - 10:38:47 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-24.json [876507]

O61 - LFC:Last File Created 24/01/2011 - 10:39:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Address Book\Docteur LANGERON.wab [330626]

O61 - LFC:Last File Created 24/01/2011 - 10:39:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Address Book\Docteur LANGERON.wab~ [256369]

O61 - LFC:Last File Created 24/01/2011 - 10:46:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Sun\Java\Deployment\deployment.properties [821]

O61 - LFC:Last File Created 24/01/2011 - 10:49:27 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\scan sans nom.txt [3497103019]

O61 - LFC:Last File Created 24/01/2011 - 11:09:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GlarySoft\Glary Utilities\Backups\40567,4649696991 [272]

O61 - LFC:Last File Created 24/01/2011 - 11:09:33 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\GlarySoft\Glary Utilities\Backups\index.ini [557]

O61 - LFC:Last File Created 24/01/2011 - 11:18:10 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\Languages\French.lng [6521]

O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\history.txt [56]

O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\lang.ini [77]

O61 - LFC:Last File Created 24/01/2011 - 11:25:28 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Regseeker\RegSeeker\regfav.ini [441]

O61 - LFC:Last File Created 24/01/2011 - 11:27:44 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\desktop.ini [145]

O61 - LFC:Last File Created 24/01/2011 - 11:27:44 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\desktop.ini [145]

O61 - LFC:Last File Created 24/01/2011 - 12:02:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt.old [498]

O61 - LFC:Last File Created 24/01/2011 - 12:21:36 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\Desktop.htt [2722]

O61 - LFC:Last File Created 24/01/2011 - 12:25:59 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\ZHP\ZHPDiag2.exe [2295301]

O61 - LFC:Last File Created 24/01/2011 - 12:51:23 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A [528]

O61 - LFC:Last File Created 24/01/2011 - 12:51:23 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A [140]

O61 - LFC:Last File Created 24/01/2011 - 12:51:34 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD [781]

O61 - LFC:Last File Created 24/01/2011 - 12:51:34 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD [156]

O61 - LFC:Last File Created 24/01/2011 - 12:51:39 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6 [561]

O61 - LFC:Last File Created 24/01/2011 - 12:51:39 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6 [134]

O61 - LFC:Last File Created 24/01/2011 - 12:51:51 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96019]

O61 - LFC:Last File Created 24/01/2011 - 12:51:51 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]

O61 - LFC:Last File Created 24/01/2011 - 12:52:01 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\1B749B72855CB97BF2F58675617C9BF9 [576]

O61 - LFC:Last File Created 24/01/2011 - 12:52:01 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\1B749B72855CB97BF2F58675617C9BF9 [162]

O61 - LFC:Last File Created 24/01/2011 - 12:52:50 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\C554DCF706A5AAB8B360FAD227EAB9C7 [1310]

O61 - LFC:Last File Created 24/01/2011 - 12:52:50 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\C554DCF706A5AAB8B360FAD227EAB9C7 [100]

O61 - LFC:Last File Created 24/01/2011 - 12:52:55 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E8974A4669383843486E5AFDB09650F5 [2249]

O61 - LFC:Last File Created 24/01/2011 - 12:52:55 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E8974A4669383843486E5AFDB09650F5 [124]

O61 - LFC:Last File Created 24/01/2011 - 12:53:57 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\570FB14ABC805C46708F32F92F10C3B4 [573]

O61 - LFC:Last File Created 24/01/2011 - 12:53:57 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\570FB14ABC805C46708F32F92F10C3B4 [174]

O61 - LFC:Last File Created 24/01/2011 - 12:57:33 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70 [65460]

O61 - LFC:Last File Created 24/01/2011 - 12:57:33 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70 [128]

O61 - LFC:Last File Created 24/01/2011 - 13:01:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\search.sqlite [2048]

O61 - LFC:Last File Created 24/01/2011 - 13:30:09 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [666]

O61 - LFC:Last File Created 24/01/2011 - 13:30:09 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [661]

O61 - LFC:Last File Created 24/01/2011 - 13:53:35 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\HTML Help\hh.dat [36094]

O61 - LFC:Last File Created 24/01/2011 - 14:02:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\ZHP\ZHPLite.exe [12650657]

O61 - LFC:Last File Created 24/01/2011 - 14:03:48 ---A- C:\Documents And Settings\All Users\Bureau\ZHP.lnk [700]

O61 - LFC:Last File Created 24/01/2011 - 15:24:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Divers.dbx [139376]

O61 - LFC:Last File Created 24/01/2011 - 15:24:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\François et Martine.dbx [60116]

O61 - LFC:Last File Created 24/01/2011 - 15:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Servat.dbx [60116]

O61 - LFC:Last File Created 24/01/2011 - 15:26:18 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Eric.dbx [10276976]

O61 - LFC:Last File Created 24/01/2011 - 15:52:27 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Tenot Anny.dbx [1485869864]

O61 - LFC:Last File Created 24/01/2011 - 15:52:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Brouillons.dbx [60116]

O61 - LFC:Last File Created 24/01/2011 - 17:54:36 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1ca9c53f8705d14-c441f5fd.dat [187392]

O61 - LFC:Last File Created 24/01/2011 - 18:50:39 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\1-AdeuxC_estMieux.2.pps.lnk [868]

O61 - LFC:Last File Created 24/01/2011 - 19:01:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\signons.sqlite [23552]

O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.js [0]

O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js [10]

O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMDocs.sav [36]

O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMGrpPrm.sav [54]

O61 - LFC:Last File Created 25/01/2011 - 11:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\ReaderMessages [10240]

O61 - LFC:Last File Created 25/01/2011 - 12:02:37 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments envoyés.dbx [129892976]

O61 - LFC:Last File Created 25/01/2011 - 12:33:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-25.json [876507]

O61 - LFC:Last File Created 25/01/2011 - 14:27:15 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 25/01/2011 - 18:04:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.11 [32456]

O61 - LFC:Last File Created 25/01/2011 - 19:58:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt [4554]

O61 - LFC:Last File Created 25/01/2011 - 19:58:09 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswBoot.log [2932]

O61 - LFC:Last File Created 25/01/2011 - 19:59:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2SM-Global.reg [205]

O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [0]

O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\History [0]

O61 - LFC:Last File Created 25/01/2011 - 22:31:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Ignominie.pdf [228733]

O61 - LFC:Last File Created 25/01/2011 - 22:58:24 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\SecurityCheck.exe [879047]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk [784]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk [820]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [796]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [796]

O61 - LFC:Last File Created 25/07/2002 - 22:07:36 ----- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Modem Sagem Adsl\SAGEM F@st 800 v3.0.4\tools\ikernel.ex_ [346602]

O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte de réception.dbx [7744752]

O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Langeron Eric.dbx [294819056]

O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Pop3uidl.dbx [9404]

O61 - LFC:Last File Created 26/01/2011 - 00:37:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments supprimés.dbx [191188]

O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte d'envoi.dbx [191188]

O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Folders.dbx [74720]

O61 - LFC:Last File Created 26/01/2011 - 00:37:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Offline.dbx [9656]

O61 - LFC:Last File Created 26/01/2011 - 09:26:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS2-Docteur LANGERON.reg [85]

O61 - LFC:Last File Created 26/01/2011 - 09:26:03 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86]

O61 - LFC:Last File Created 26/01/2011 - 09:47:09 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat.bak [10752]

O61 - LFC:Last File Created 26/01/2011 - 09:48:12 R--A- C:\Documents And Settings\Docteur LANGERON\Bureau\ComboFix.exe [4160433]

O61 - LFC:Last File Created 26/01/2011 - 09:52:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt [496]

O61 - LFC:Last File Created 26/01/2011 - 09:53:15 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGCP-Global.reg [114]

O61 - LFC:Last File Created 26/01/2011 - 09:53:16 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [347]

O61 - LFC:Last File Created 26/01/2011 - 09:53:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDCMD-Docteur LANGERON.reg [0]

O61 - LFC:Last File Created 26/01/2011 - 09:55:13 --HA- C:\Documents And Settings\Default User\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 [36753]

O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 [114]

O61 - LFC:Last File Created 26/01/2011 - 10:14:41 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js.BAK [29242]

O61 - LFC:Last File Created 26/01/2011 - 11:40:50 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66.jpg [3145]

O61 - LFC:Last File Created 26/01/2011 - 11:41:56 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66_1.jpg [11358]

O61 - LFC:Last File Created 26/01/2011 - 11:42:27 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route66_2.png [32077]

O61 - LFC:Last File Created 26/01/2011 - 11:45:37 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\usa_smiley_2.gif [4945]

O61 - LFC:Last File Created 26/01/2011 - 11:46:14 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\usa_route_66.gif [38234]

O61 - LFC:Last File Created 26/01/2011 - 11:51:28 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66.jpg [52098]

O61 - LFC:Last File Created 26/01/2011 - 11:51:50 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\preloader.gif [2509]

O61 - LFC:Last File Created 26/01/2011 - 11:52:06 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\btnLeft.gif [845]

O61 - LFC:Last File Created 26/01/2011 - 11:52:20 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\btnRight.gif [851]

O61 - LFC:Last File Created 26/01/2011 - 11:53:18 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\buyIt_right.gif [318]

O61 - LFC:Last File Created 26/01/2011 - 11:53:23 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\buyIt_left.gif [320]

O61 - LFC:Last File Created 26/01/2011 - 11:56:07 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\plaque-d-immatriculation-rte-66.jpg [28570]

O61 - LFC:Last File Created 26/01/2011 - 11:57:01 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66-deco-auto-tag.jpg [28784]

O61 - LFC:Last File Created 26/01/2011 - 11:59:11 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\route-66_3.jpg [106780]

O61 - LFC:Last File Created 26/01/2011 - 12:01:02 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\map-of-route-66.jpg [44124]

O61 - LFC:Last File Created 26/01/2011 - 12:02:21 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\strewe-oliver-road-sign-on-old-route-66-at-texas-new-mexico-border-usa.jpg [23359]

O61 - LFC:Last File Created 26/01/2011 - 12:04:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\blocklist.xml [4694]

O61 - LFC:Last File Created 26/01/2011 - 12:04:51 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\med-route-66-abandon.jpg [96821]

O61 - LFC:Last File Created 26/01/2011 - 12:33:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws.ori [1944]

O61 - LFC:Last File Created 26/01/2011 - 12:51:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws [0]

O61 - LFC:Last File Created 26/01/2011 - 12:52:37 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Docteur LANGERON.reg [379]

O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Docteur LANGERON.reg [132]

O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUNTCVW-Docteur LANGERON.reg [235]

O61 - LFC:Last File Created 26/01/2011 - 12:52:39 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDRegT-Global.reg [133]

O61 - LFC:Last File Created 26/01/2011 - 13:20:20 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan rapide.txt [51551]

O61 - LFC:Last File Created 26/01/2011 - 13:44:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\OTL.exe [602624]

O61 - LFC:Last File Created 26/01/2011 - 13:49:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-26.json [876507]

O61 - LFC:Last File Created 26/01/2011 - 13:51:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\selfdef.log [102488]

O61 - LFC:Last File Created 26/01/2011 - 16:04:24 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:28 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\1I9AV9ZL\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\KHW2L9LM\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\TE8CV091\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\Z3VBC61H\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 16:04:29 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini [145]

O61 - LFC:Last File Created 26/01/2011 - 16:05:59 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBTB1-Docteur LANGERON.reg [4041]

O61 - LFC:Last File Created 26/01/2011 - 16:25:14 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\L'analyse d'Erik Izraelewicz - Blogs - Les Echos~.feed-ms [73728]

O61 - LFC:Last File Created 26/01/2011 - 16:25:54 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [7524]

O61 - LFC:Last File Created 26/01/2011 - 16:26:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.log [1955]

O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.cache [92]

O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.ini [87]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\compreg.dat [147965]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.rdf [850]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\xpti.dat [102368]

O61 - LFC:Last File Created 26/01/2011 - 16:26:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [456]

O61 - LFC:Last File Created 26/01/2011 - 16:57:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Windows\Themes\Custom.theme [5385]

O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\CurrScanSet.cfg [44]

O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\mru.cfg [1510]

O61 - LFC:Last File Created 26/01/2011 - 17:39:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012620110127\index.dat [49152]

O61 - LFC:Last File Created 26/01/2011 - 17:39:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS5-Docteur LANGERON.reg [320]

O61 - LFC:Last File Created 26/01/2011 - 17:46:27 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk [1757]

O61 - LFC:Last File Created 26/01/2011 - 17:48:21 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT13.xml [2026]

O61 - LFC:Last File Created 26/01/2011 - 17:48:21 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT14.xml [426]

O61 - LFC:Last File Created 26/01/2011 - 17:48:22 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT15.xml [805416]

O61 - LFC:Last File Created 26/01/2011 - 17:48:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT16.xml [2026]

O61 - LFC:Last File Created 26/01/2011 - 17:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT17.xml [426]

O61 - LFC:Last File Created 26/01/2011 - 17:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT18.xml [805416]

O61 - LFC:Last File Created 26/01/2011 - 17:49:07 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT28.xml [2026]

O61 - LFC:Last File Created 26/01/2011 - 17:49:08 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT29.xml [426]

O61 - LFC:Last File Created 26/01/2011 - 17:49:08 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2A.xml [805416]

O61 - LFC:Last File Created 26/01/2011 - 17:50:50 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2B.xml [2787756]

O61 - LFC:Last File Created 26/01/2011 - 17:50:51 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\IMT2C.dtd [1022]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\02Q1OUBH\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\1GGGR282\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\90IOFFS3\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\IBY26ZT8\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:08:42 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\History\History.IE5\desktop.ini [145]

O61 - LFC:Last File Created 26/01/2011 - 18:08:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1caaaf1c0948ba2-78a1309b.dat [4344]

O61 - LFC:Last File Created 26/01/2011 - 18:14:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\VBE\MSForms.exd [147284]

O61 - LFC:Last File Created 26/01/2011 - 18:14:48 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\VBE\RefEdit.exd [15040]

O61 - LFC:Last File Created 26/01/2011 - 18:15:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m44.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:26:44 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\VB11.pip [144]

O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 26/01/2011 - 18:28:32 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 26/01/2011 - 18:28:53 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\AdobeARM.log [2301]

O61 - LFC:Last File Created 26/01/2011 - 18:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Modèle mercredi décembre janvier février.lnk [484]

O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Bibliothèque.lnk [775]

O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\EUROTOOL.lnk [890]

O61 - LFC:Last File Created 26/01/2011 - 18:29:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours du mercredi CVS.lnk [360]

O61 - LFC:Last File Created 26/01/2011 - 18:30:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m12.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Parcours du mercredi.lnk [287]

O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m45.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Disque amovible (I).lnk [179]

O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours CVS.lnk [324]

O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Publis11.pip [1672]

O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Publisher\pubcmd.dat [2361]

O61 - LFC:Last File Created 26/01/2011 - 18:42:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Excel\Excel11.xlb [19277]

O61 - LFC:Last File Created 26/01/2011 - 18:42:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Excel11.pip [1628]

O61 - LFC:Last File Created 26/01/2011 - 18:42:34 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [5120]

O61 - LFC:Last File Created 26/01/2011 - 18:47:31 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [32768]

O61 - LFC:Last File Created 26/01/2011 - 18:48:00 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS1-Docteur LANGERON.reg [81]

O61 - LFC:Last File Created 26/01/2011 - 18:49:22 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini [0]

O61 - LFC:Last File Created 26/01/2011 - 18:50:23 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Docteur LANGERON.reg [226]

O61 - LFC:Last File Created 26/01/2011 - 18:50:28 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [227]

O61 - LFC:Last File Created 26/01/2011 - 18:50:35 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [332]

O61 - LFC:Last File Created 26/01/2011 - 18:50:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [157]

O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.log [1029]

O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [608]

O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [4850]

O61 - LFC:Last File Created 26/01/2011 - 18:54:04 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Overview.ini [0]

O61 - LFC:Last File Created 26/01/2011 - 18:54:13 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 26/01/2011 - 18:55:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.log [627]

O61 - LFC:Last File Created 26/01/2011 - 18:57:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:57:49 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 26/01/2011 - 18:58:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\permissions.sqlite [2853888]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [3849]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [1240]

O61 - LFC:Last File Created 26/01/2011 - 18:59:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Crash Reports\InstallTime20101203075014 [10]

O61 - LFC:Last File Created 26/01/2011 - 19:01:53 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\XPC.mfl [2404548]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\La_messe.lnk [813]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\temp.lnk [698]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 --H-- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\index.dat [2987]

O61 - LFC:Last File Created 26/01/2011 - 19:03:47 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\downloads.sqlite [2048]

O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\PowerP11.pip [1860]

O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\PowerPoint\PPT11.pcb [2196]

O61 - LFC:Last File Created 26/01/2011 - 19:22:32 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk [549]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [94]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6094433]

O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18]

O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216]

O61 - LFC:Last File Created 26/01/2011 - 20:54:21 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [44156]

O61 - LFC:Last File Created 27/01/2011 - 09:20:18 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [8192]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Finances Personnelles~.feed-ms [380928]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\La Vie Financière~.feed-ms [385024]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Les Echos - recommandations, conseils et analyses~.feed-ms [352256]

O61 - LFC:Last File Created 27/01/2011 - 09:34:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\webappsstore.sqlite [3072]

O61 - LFC:Last File Created 27/01/2011 - 09:36:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cert8.db [196608]

O61 - LFC:Last File Created 27/01/2011 - 09:36:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\key3.db [16384]

O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_001_ [261711]

O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_002_ [117955]

O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_003_ [311874]

O61 - LFC:Last File Created 27/01/2011 - 09:36:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\_CACHE_MAP_ [8468]

O61 - LFC:Last File Created 27/01/2011 - 09:36:27 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite [8192]

O61 - LFC:Last File Created 27/01/2011 - 09:47:38 -SHA- C:\Documents And Settings\Docteur LANGERON\Recent\Desktop.ini [150]

O61 - LFC:Last File Created 27/01/2011 - 10:14:07 -SH-- C:\Documents And Settings\Docteur LANGERON\ntuser.ini [184]

O61 - LFC:Last File Created 27/01/2011 - 10:16:15 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 27/01/2011 - 10:16:16 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 27/01/2011 - 10:16:17 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Credentials\S-1-5-21-790525478-2052111302-682003330-1003\Credentials [940]

O61 - LFC:Last File Created 27/01/2011 - 10:16:17 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 27/01/2011 - 10:16:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Chest.log [40572]

O61 - LFC:Last File Created 27/01/2011 - 10:16:37 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012720110128\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 10:16:38 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 27/01/2011 - 10:16:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\avast5.ini [16412]

O61 - LFC:Last File Created 27/01/2011 - 10:16:47 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [16384]

O61 - LFC:Last File Created 27/01/2011 - 10:18:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5375]

O61 - LFC:Last File Created 27/01/2011 - 10:18:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232]

O61 - LFC:Last File Created 27/01/2011 - 10:20:01 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\Log.db [113664]

O61 - LFC:Last File Created 27/01/2011 - 10:21:34 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Assistant Configuration du réseau.lnk [1640]

O61 - LFC:Last File Created 27/01/2011 - 10:23:35 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 27/01/2011 - 10:23:35 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 27/01/2011 - 10:23:46 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Setup.log [740772]

O61 - LFC:Last File Created 27/01/2011 - 10:24:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswAr.log [161662]

O61 - LFC:Last File Created 27/01/2011 - 10:28:48 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js [28648]

O61 - LFC:Last File Created 27/01/2011 - 10:28:50 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\06AF6CA2d01 [30601]

O61 - LFC:Last File Created 27/01/2011 - 10:28:51 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DD066E1Cd01 [38418]

O61 - LFC:Last File Created 27/01/2011 - 10:29:04 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\03D6DE48d01 [21120]

O61 - LFC:Last File Created 27/01/2011 - 10:29:04 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\F3782808d01 [40164]

O61 - LFC:Last File Created 27/01/2011 - 10:29:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat [10206]

O61 - LFC:Last File Created 27/01/2011 - 10:29:09 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\AAE1D354d01 [18596]

O61 - LFC:Last File Created 27/01/2011 - 10:29:09 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\AB6D9503d01 [19918]

O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\3C01F00Dd01 [23799]

O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\6DBD22DDd01 [50618]

O61 - LFC:Last File Created 27/01/2011 - 10:29:12 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DA17B4E5d01 [19494]

O61 - LFC:Last File Created 27/01/2011 - 10:29:23 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\formhistory.sqlite [4096]

O61 - LFC:Last File Created 27/01/2011 - 10:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DF0977E2d01 [19057]

O61 - LFC:Last File Created 27/01/2011 - 10:29:31 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\EA6E706Fd01 [17417]

O61 - LFC:Last File Created 27/01/2011 - 10:29:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\25766069d01 [21374]

O61 - LFC:Last File Created 27/01/2011 - 10:29:35 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\8BA2D107d01 [28833]

O61 - LFC:Last File Created 27/01/2011 - 10:30:02 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twunk001.MTX [156]

O61 - LFC:Last File Created 27/01/2011 - 10:30:02 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twunk002.MTX [0]

O61 - LFC:Last File Created 27/01/2011 - 10:30:03 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\Twain001.Mtx [2]

O61 - LFC:Last File Created 27/01/2011 - 10:30:26 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 10:30:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\4I7I3CKP\oXMLStoreUnit[1].xml [56]

O61 - LFC:Last File Created 27/01/2011 - 10:33:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifierkey3.txt [154]

O61 - LFC:Last File Created 27/01/2011 - 10:33:40 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\temp\TWAIN.LOG [8440]

O61 - LFC:Last File Created 27/01/2011 - 10:33:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\HP\ScLogs\SolutionCenter.htm [45960]

O61 - LFC:Last File Created 27/01/2011 - 10:36:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste.jpg [1991451]

O61 - LFC:Last File Created 27/01/2011 - 10:36:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 0.jpg [1991451]

O61 - LFC:Last File Created 27/01/2011 - 10:36:41 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Numériser0001.lnk [827]

O61 - LFC:Last File Created 27/01/2011 - 10:41:26 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 1.jpg [1447214]

O61 - LFC:Last File Created 27/01/2011 - 10:45:17 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\Copie de piste 0.jpg [1372442]

O61 - LFC:Last File Created 27/01/2011 - 10:45:23 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Copie de piste 0.lnk [842]

O61 - LFC:Last File Created 27/01/2011 - 10:46:58 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\piste 2.jpg [337652]

O61 - LFC:Last File Created 27/01/2011 - 10:47:11 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\Copie de Copie de piste 0.lnk [887]

O61 - LFC:Last File Created 27/01/2011 - 10:47:29 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\piste 1.lnk [797]

O61 - LFC:Last File Created 27/01/2011 - 10:47:35 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\piste 0.lnk [797]

O61 - LFC:Last File Created 27/01/2011 - 10:50:10 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 0.lnk [463]

O61 - LFC:Last File Created 27/01/2011 - 10:50:25 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 0.jpg [1427662]

O61 - LFC:Last File Created 27/01/2011 - 10:51:08 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 1.jpg [347963]

O61 - LFC:Last File Created 27/01/2011 - 10:53:22 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\Route 66\2e essai piste 2.jpg [242171]

O61 - LFC:Last File Created 27/01/2011 - 10:53:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\PhotoFiltre\PhotoFiltre.ini [4482]

O61 - LFC:Last File Created 27/01/2011 - 10:53:42 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 1.lnk [842]

O61 - LFC:Last File Created 27/01/2011 - 10:53:46 ---A- C:\Documents And Settings\Docteur LANGERON\Recent\2e essai piste 2.lnk [842]

O61 - LFC:Last File Created 27/01/2011 - 10:54:27 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\7137D911d01 [97261]

O61 - LFC:Last File Created 27/01/2011 - 10:54:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\DB9CAF24d01 [37200]

O61 - LFC:Last File Created 27/01/2011 - 10:54:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\F07A4F93d01 [22134]

O61 - LFC:Last File Created 27/01/2011 - 10:54:31 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\FD4207E4d01 [20865]

O61 - LFC:Last File Created 27/01/2011 - 10:54:32 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\BCF52B01d01 [41728]

O61 - LFC:Last File Created 27/01/2011 - 10:54:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\2A5B56D1d01 [29694]

O61 - LFC:Last File Created 27/01/2011 - 10:57:55 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\XUL.mfl [1136720]

O61 - LFC:Last File Created 27/01/2011 - 10:58:27 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\localstore.rdf [35197]

O61 - LFC:Last File Created 27/01/2011 - 10:59:05 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\8CF9F348d01 [55633]

O61 - LFC:Last File Created 27/01/2011 - 10:59:06 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\E42967C4d01 [35600]

O61 - LFC:Last File Created 27/01/2011 - 10:59:13 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\Cache\EC206000d01 [32128]

O61 - LFC:Last File Created 27/01/2011 - 10:59:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite-journal [6704]

O61 - LFC:Last File Created 27/01/2011 - 10:59:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\sessionstore.js [60345]

O61 - LFC:Last File Created 27/01/2011 - 11:00:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite [1175552]

O61 - LFC:Last File Created 27/01/2011 - 11:00:55 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite-journal [0]

O61 - LFC:Last File Created 27/01/2011 - 11:03:04 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\usntr.log [2464518]

O61 - LFC:Last File Created 27/01/2011 - 11:09:22 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifier3.sqlite [38903808]

O61 - LFC:Last File Created 27/01/2011 - 11:10:16 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\URL.db [2806784]

O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]

O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]

O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569]

O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142]

O61 - LFC:Last File Created 27/01/2011 - 11:13:37 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt [118064]

O61 - LFC:Last File Created 27/01/2011 - 11:13:38 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\BehaviorShield.ini [169]

O61 - LFC:Last File Created 27/01/2011 - 11:13:38 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\FileSystemShield.txt [88011]

O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\FileSystemShield.ini [967]

O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\IMShield.ini [717]

O61 - LFC:Last File Created 27/01/2011 - 11:13:40 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\IMShield.txt [87415]

O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\EmailShield.ini [1269]

O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Mail.log [1329480]

O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\EmailShield.txt [87415]

O61 - LFC:Last File Created 27/01/2011 - 11:13:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\NetworkShield.txt [87415]

O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\NetworkShield.ini [29]

O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\P2PShield.ini [843]

O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\P2PShield.txt [87415]

O61 - LFC:Last File Created 27/01/2011 - 11:13:42 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\WebShield.txt [88449]

O61 - LFC:Last File Created 27/01/2011 - 11:13:43 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\WebShield.ini [632]

O61 - LFC:Last File Created 27/01/2011 - 11:16:03 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1c91e8e6fac7132-14549e04.dat [5586480]

O61 - LFC:Last File Created 27/01/2011 - 11:17:11 --HA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\index.dat [196608]

O61 - LFC:Last File Created 27/01/2011 - 11:17:11 -SHA- C:\Documents And Settings\Docteur LANGERON\Cookies\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 11:17:11 -SHA- C:\Documents And Settings\Docteur LANGERON\IETldCache\index.dat [262144]

 

 

---\\ Alternate Data Stream File (ADS) (O62)

O62 - ADS:Alternate Data Stream File - C:\WINDOWS\System32\SpoonUninstall.exe:Zone.Identifier

 

 

---\\ Liste des outils de nettoyage (LATC) (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: OTL - (.OldTimer.)

 

 

---\\ Liste des services Legacy (LALS) (O64)

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\AAVMKER4.sys - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - Environnement de prise en charge de réseau AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD

O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASPI32.sys - Aspi32 (Aspi32) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASPI32

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWMON2.sys - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\WINDOWS\System32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATI_HOTKEY_POLLER

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV

O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Antivirus (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\BrPar.sys - BrPar (BrPar) .(.Brother Industries Ltd. - Brother Parallel class Driver version 1.01.) - LEGACY_BRPAR

O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\catchme.sys (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS

O64 - Services: CurCS - C:\WINDOWS\system32\cisvc.exe - Service d'indexation (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC

O64 - Services: CurCS - C:\WINDOWS\system32\clipsrv.exe - Gestionnaire de l'Album (ClipSrv) .(.Microsoft Corporation - Windows NT DDE Server.) - LEGACY_CLIPSRV

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32

O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC

O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP

O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\DMLOAD.sys - dmload (dmload) .(.Pas de propriétaire - Pas de description.) - LEGACY_DMLOAD

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS

O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC

O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate1c9dba399512e1a) (gupdate1c9dba399512e1a) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1C9DBA399512E1A

O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Updater Service (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - hpqcxs08 (hpqcxs08) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQCXS08

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service HP CUE DeviceDiscovery (hpqddsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQDDSVC

O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER

O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Administration IIS (IISADMIN) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_IISADMIN

O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE

O64 - Services: CurCS - C:\Windows\System32\drivers\ip6fw.sys - Pilote du pare-feu Windows IPv6 (ip6fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Écouteur RIP (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC

O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS

O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\mbr.sys (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD

O64 - Services: CurCS - C:\WINDOWS\System32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\mqac.sys - Message Queuing access control (MQAC) .(.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) - LEGACY_MQAC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV

O64 - Services: CurCS - C:\WINDOWS\System32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication FTP (MSFTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_MSFTPSVC

O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER

O64 - Services: CurCS - C:\WINDOWS\system32\mqsvc.exe - Message Queuing (MSMQ) .(.Microsoft Corporation - Message Queuing Service.) - LEGACY_MSMQ

O64 - Services: CurCS - C:\WINDOWS\system32\mqtgsvc.exe - Message Queuing Triggers (MSMQTriggers) .(.Microsoft Corporation - Windows NT MSMQ Trigger Service.) - LEGACY_MSMQTRIGGERS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Net Driver HPZ12 (Net Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NET_DRIVER_HPZ12

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper 3004 (nosGetPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NOSGETPLUSHELPER

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL

O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_PML_DRIVER_HPZ12

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT

O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(.Pas de propriétaire - Pas de description.) - LEGACY_PROCEXP113

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psi_mf.sys - PSI (PSI) .(.Secunia - Secunia PSI Driver.) - LEGACY_PSI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD

O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\RMCast.sys - Reliable Multicast Protocol driver (RMCAST) .(.Microsoft Corporation - Reliable Multicast Transport.) - LEGACY_RMCAST

O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS

O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS

O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON

O64 - Services: CurCS - C:\Program Files\Secunia\PSI\PSIA.exe - Secunia PSI Agent (Secunia PSI Agent) .(.Secunia - Secunia PSI Agent.) - LEGACY_SECUNIA_PSI_AGENT

O64 - Services: CurCS - C:\Program Files\Secunia\PSI\sua.exe - Secunia Update Agent (Secunia Update Agent) .(.Secunia - Secunia Update Agent.) - LEGACY_SECUNIA_UPDATE_AGENT

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pare-feu de connexion Internet (ICF) / Partage de connexion Internet (ICS) (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION

O64 - Services: CurCS - C:\WINDOWS\System32\tcpsvcs.exe - Services TCP/IP simplifiés (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Simple Mail Transfer Protocol (SMTP) (SMTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_SMTPSVC

O64 - Services: CurCS - C:\WINDOWS\System32\snmp.exe - Service SNMP (SNMP) .(.Microsoft Corporation - Service SNMP.) - LEGACY_SNMP

O64 - Services: CurCS - C:\WINDOWS\System32\snmptrap.exe - Service d'interruption SNMP (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP

O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC

O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP

O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST

O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP

O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication World Wide Web (w3svc) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_W3SVC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP

O64 - Services: CurCS - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe - WD Drive Manager Service (WDBtnMgrSvc.exe) .(.WDC - WD Drive Manager Service.) - LEGACY_WDBTNMGRSVC.EXE

O64 - Services: CurCS - C:\Windows\System32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Portable Media Serial Number Service (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN

O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC

 

 

---\\ Liste des fichiers non signés (LUF) (O65)

O65 - LUF:09/01/2004 (.Pas de propriétaire - ActiveSkin Module.) (4, 2, 7, 3) - c:\windows\system32\actskin4.ocx

O65 - LUF:13/06/1998 (.Pas de propriétaire - Gif89 Module.) (1, 0, 0, 1) - c:\windows\system32\GIF89.DLL

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHS

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHT

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DE

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DEU

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ES

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ESP

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.exe

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FR

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FRA

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.IT

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ITA

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JP

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JPN

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.59) - c:\windows\system32\PSDrvCheck.KO

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.KOR

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NL

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NLD

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

 

 

---\\ Start Menu Internet (SMI) (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

---\\ Search Browser Infection (SBI) (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - Bing

O69 - SBI: SearchScopes [HKCU] {543AE12E-0651-4B4B-A098-7C124535ECEE} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.co

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Auto 19/12/2002 147456 | (Ati HotKey Poller) . (.Pas de propriétaire.) - C:\WINDOWS\System32\Ati2evxx.exe

SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SS - | Auto 17/02/2009 133104 | (gupdate1c9dba399512e1a) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 22/12/2009 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 14/11/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

SR - | Auto 14/10/2010 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 10/01/2011 993848 | (Secunia PSI Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\PSIA.exe

SR - | Auto 10/01/2011 399416 | (Secunia Update Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\sua.exe

SR - | Auto 26/06/2009 102400 | (WDBtnMgrSvc.exe) . (.WDC.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by Docteur LANGERON at 27/01/2011 11:27:46

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS

1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F92AB8]

3 CLASSPNP[0xF87A5FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000005b[0x82F7CE98]

5 ACPI[0xF86EB620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-4[0x82F84D98]

kernel: MBR read successfully

user & kernel MBR OK

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Docteur LANGERON at 27/01/2011 11:27:46

Use the desktop link 'MBRCheck' to have full report

 

 

 

---\\ Infection BT - BHO/Toolbar (Possible)

[HKCU\Software\Search Settings]

[HKLM\Software\Search Settings]

 

 

 

End of the scan (1452 lines in 09mn 57s)(0)

[lance_yien]

Bonjour Monsieur,

 

... j'ai préféré refaire un ZHPDiag qui révèle "peut-être" la persistance d''une possible infection. Je vous adresse donc le ZHPDiag.txt.

Bien fait, ce sont des entrées (pas catastrophiques mais à supprimer). Ni OTL ni ComboFix ne les ont détectées.

 

D'autre part au sujet de la MaJ de sécurité de Windows pour laquelle on me demande de redémarrer l'ordinateur, je n'ai pas la référence de la MaJ donc je ne peux pas la télécharger.

Il faut passer directement par Windows updates.

Normalement, il doit y avoir un lien nommé "Historique des Mises à jour" ou quelque chose de ce genre (désolé je n"ai pas XP pour donner le nom exact). Relever cette référence ("KB...") de celles dont l'installation a échouée.

Sinon lancer une recherche rapide de mises à jour depuis la même page de Windows updates et attendre la fin de l'installation. Celle qui échouent sont affichées automatiquement avec leur références.

 

Pour finir faudra t-il effectuer un point de restauration après la fin des opérations et effacer toutes les précédentes.

Comme indiqué dans mon dernier message les points de restauration sont ré-initialisés en désinstallant ComboFix (effacement de tous les points et création d'un nouveau point).

 

 

Pour supprimer les entrées signalées par ZHPDiag et nettoyer les fichiers temporaires et les caches, relancer OTL et copier la liste suivante (commençant par :OTL) et la coller dans l'espace sous "Personnalisation" (les : au début et le ] à la fin sont très important, merci de vérifier).

 

:Files

C:\Program Files\Application Updater

C:\Documents and Settings\Docteur LANGERON\Application Data\Application Updater

C:\Documents and Settings\Docteur LANGERON\Application Data\pdfforge

C:\Documents and Settings\Docteur LANGERON\Application Data\Search Settings

 

:Reg

[-HKCU\Software\Search Settings]

[-HKLM\Software\Search Settings]

[-HKLM\Software\Application Updater]

 

:Commands

[EMPTYTEMP]

[EMPTYFLASH]

Cliquer sur le bouton rouge Correction et laisser faire.

Si un ou plusieurs fichiers ne peuvent pas être supprimés normalement, le programme demandera de redémarrer la machine pour finir le processus, cliquer sur Oui.

 

Bonne journée!

[Papougnet49]

Merci de votre aide, le fonctionnement de mon ordinateur est beaucoup plus fluide

Après le nouveau passage de OTL, ZHPDiag ne semble plus trouver d'infection (voir liste jointe)

 

Deux petites questions pour finir :

- le nettoyage de l'ordinateur a supprimé l'extension de Firefox : Web Developer qui me sert à vérifier les pages htm du site de vélo dont je m'occupe. Puis je la réinstaller sans danger ?

- Quelle est l'utilité de Spybot - Search & Destroy que j'utilise depuis de longues années en association avec SpywareBlaster et Malwarebytes' Anti-Malware ?

 

A signaler que la toolbar ask.com s'était installée insidieusement au cours de la dernière mise à jour de pdfcreator sur Sourceforge ...

 

Très amicalement et surtout un immense merci.

 

 

Rapport de ZHPDiag v1.27.1511 par Nicolas Coolman, Update du 24/01/2011

Run by Docteur LANGERON at 28/01/2011 10:01:07

Web site : ZHPDiag Outil de diagnostic

Contact : nicolascoolman@yahoo.fr

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)

 

---\\ System Information

Windows XP Professional Service Pack 3 (Build 2600)

Processor: x86 Family 15 Model 2 Stepping 7, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 511 MB (46% free)

System Restore: Activé (Enable)

System drive C: has 34 GB (45%) free of 75 GB

 

---\\ Logged in mode

Computer Name: BUREAU01

User Name: Docteur LANGERON

All Users Names: SUPPORT_388945a0, IWAM_BUREAU01, IUSR_BUREAU01, HelpAssistant, Docteur LANGERON, ASPNET, Administrateur,

Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=%USERPROFILE%\Application Data

%LocalAppData%=%USERPROFILE%\Local Settings\Application Data

%StartMenu%=%USERPROFILE%\Menu Démarrer

 

---\\ DOS/Devices

A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

C:\ Hard drive, Flash drive, Thumb drive (Free 34 Go of 75 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ CD-ROM drive (Not Inserted)

F:\ Hard drive, Flash drive, Thumb drive (Free 16 Go of 19 Go)

G:\ Hard drive, Flash drive, Thumb drive (Free 462 Go of 466 Go)

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\Windows\Explorer.exe [1037824]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\Winlogon.exe [512000]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\atapi.sys [96512]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\Windows\System32\drivers\ntfs.sys [574976]

 

 

---\\ Processus lancés

[MD5.25FB74EABCE5EC7836BA3CFB3C58449A] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384]

[MD5.626A24ED1228580B9518C01930936DF9] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104]

[MD5.3FE5A84FAC62753A20F539BE3E7BFC56] - (.Microsoft Corporation - Services Internet (IIS).) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe [15872]

[MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]

[MD5.7198BBFBE46C0070257278C536386687] - (.Secunia - Secunia PSI Agent.) -- C:\Program Files\Secunia\PSI\PSIA.exe [993848]

[MD5.D2FCA567F9BE87E29B9A9FA32FFE79CA] - (.Secunia - Secunia Update Agent.) -- C:\Program Files\Secunia\PSI\sua.exe [399416]

[MD5.50F22575C0FB5D85A9D41EF963610C32] - (.Microsoft Corporation - TCP/IP Services Application.) -- C:\WINDOWS\System32\tcpsvcs.exe [19456]

[MD5.45A0772A49914786AD64471205938CE9] - (.Microsoft Corporation - Service SNMP.) -- C:\WINDOWS\System32\snmp.exe [33280]

[MD5.949B71704FD641F3CC058F498BBA6E3B] - (.WDC - WD Drive Manager Service.) -- C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [102400]

[MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3396624]

[MD5.D322AEEBDB406D85F752CB5615F51960] - (.Pas de propriétaire - ADIMON MFC Application.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [962660]

[MD5.D179E1DE532C903AB1D57A4E81342F40] - (.Secunia - Secunia PSI Tray.) -- C:\Program Files\Secunia\PSI\psi_tray.exe [291896]

[MD5.81932D4F939244D17B7AFE8E1D5F4E28] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [624128]

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll

P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

 

 

---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)) -- C:\WINDOWS\system32\ieframe.dll

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\DSLMON.lnk . (.Pas de propriétaire.) -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi_tray.exe

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Baseline Security Analyzer 2.2.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Baseline Security Analyzer 2\mbsa.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Secunia PSI.lnk . (.Secunia.) -- C:\Program Files\Secunia\PSI\psi.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (.Pas de propriétaire.) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Install Clean Up.lnk . (.Pas de propriétaire.) -- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe

O4 - Global Startup: C:\Documents And Settings\Docteur LANGERON\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\WINDOWS\system32\pnrpnsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: DirectAnimation Java Classes (DirectAnimation Java Classes) - (.not file.) - file:\\C:\WINDOWS\Java\classes\dajava.cab

O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241627464750

O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CS1\Services\Tcpip\..\{AC038FB4-9390-4C0E-A182-22514E560A4F}: NameServer = 80.10.246.1 81.253.149.2

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\Windows\System32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: (Ati HotKey Poller) . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (gupdate1c9dba399512e1a) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files\Secunia\PSI\PSIA.exe

O23 - Service: (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files\Secunia\PSI\sua.exe

O23 - Service: (WDBtnMgrSvc.exe) . (.WDC - WD Drive Manager Service.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{9E8113EC-34EE-46BE-99BF-553D3CABC91A}.job

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (lusbaudio) . (.Microsoft Corporation - Sound Driver.) - C:\Windows\System32\drivers\OVSound2.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\processr.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: (wdmaud) . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) - C:\Windows\System32\drivers\wdmaud.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (Tcpip6) . (.Microsoft Corporation - IPv6 driver.) - C:\Windows\System32\DRIVERS\tcpip6.sys

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}

O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}

O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}

O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: Brother HL-5240 - (.Brother.) [HKLM] -- {FC85DBFD-4BD4-4306-9929-0AFF31594372}

O42 - Logiciel: C-Media WDM Audio Driver - (.Pas de propriétaire.) [HKLM] -- C-Media Audio Driver

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: Ciel Paye 14.20 - (.CIEL.) [HKLM] -- {615E501A-7F7E-433C-979E-830D2B911FA3}

O42 - Logiciel: Creative Commons Add-in for Microsoft Office - (.Microsoft Corporation..) [HKLM] -- {EC719582-B6B4-436A-922B-67094106AB81}

O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler

O42 - Logiciel: Diagnostic Sésam Vitale - (.Pas de propriétaire.) [HKLM] -- Diagnostic Sésam Vitale

O42 - Logiciel: EasyCleaner - (.ToniArts.) [HKLM] -- {F5346614-B7C4-4E94-826A-E2363155233D}

O42 - Logiciel: ExamDiff 1.8 - (.PrestoSoft.) [HKLM] -- ExamDiff_is1

O42 - Logiciel: Gimp Pack Mode 2.6.2 - (.Association Mode.) [HKLM] -- Gimp Pack Mode_is1

O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {C768790F-04FB-11E0-9B2C-001AA037B01E}

O42 - Logiciel: HP Imaging Device Functions 9.0 - (.HP.) [HKLM] -- HP Imaging Device Functions

O42 - Logiciel: HP OCR Software 9.0 - (.HP.) [HKLM] -- HPOCR

O42 - Logiciel: HP Photosmart All-In-One Software 9.0 - (.HP.) [HKLM] -- {D64BC2CF-0F12-47d7-B412-B4F3FD684253}

O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC}

O42 - Logiciel: HP Solution Center 9.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools

O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: IIS UrlScan Tool 2.0 (Uninstall) - (.Pas de propriétaire.) [HKLM] -- IisUrlScan

O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView

O42 - Logiciel: Java 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Logiciel Médical RM Ingénierie - (.RM Ingénierie.) [HKLM] -- {26D777D4-E8AA-46A3-BFBA-83A03090CFCB}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Macromedia Dreamweaver 3 Fr - (.Macromedia.) [HKLM] -- Macromedia Dreamweaver 3 Fr

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Baseline Security Analyzer 2.2 - (.Microsoft Corporation.) [HKLM] -- {13CD417D-F1F1-4AC4-945D-FDDEB884756F}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft GIF Animator - (.Pas de propriétaire.) [HKLM] -- GIF Animator

O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007

O42 - Logiciel: Microsoft Office 2003 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {91490409-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Small Business Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {91CA040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Module Français pour Irfanview version 4.27 - (.jfm.) [HKLM] -- Module Français pour Irfanview version 4.27

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)

O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM] -- Notepad++

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: Paint Shop Pro 6.0 (CD-ROM) - (.Pas de propriétaire.) [HKLM] -- Paint Shop Pro 6.0

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3

O42 - Logiciel: Polar Precision Performance SW 3.0 - (.Pas de propriétaire.) [HKLM] -- Polar Precision Performance SW 3.0

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva

O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller

O42 - Logiciel: SAGEM F@st 800-840 - (.Pas de propriétaire.) [HKLM] -- {4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}

O42 - Logiciel: Secunia PSI (2.0.0.3001) - (.Pas de propriétaire.) [HKLM] -- Secunia PSI

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Skype™ 5.1 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-5464-3428-900000000004}

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster_is1

O42 - Logiciel: Série+4000 - (.Pas de propriétaire.) [HKLM] -- Série+4000

O42 - Logiciel: Toolbar Uninstaller 1.0.0.1 - (.Decomputeur.nl.) [HKLM] -- Toolbar Uninstaller_is1

O42 - Logiciel: Total Commander (Remove or Repair) - (.Ghisler Software GmbH.) [HKLM] -- Totalcmd

O42 - Logiciel: Télétrans sécurisée - (.Pas de propriétaire.) [HKLM] -- Télétrans sécurisée

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: VC 9.0 Runtime - (.Check Point Software Technologies Ltd.) [HKLM] -- {02E89EFC-7B07-4D5A-AA03-9EC0902914EE}

O42 - Logiciel: WD Diagnostics - (.Western Digital Technologies.) [HKLM] -- {0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}

O42 - Logiciel: WD Drive Manager (x86) - (.Western Digital.) [HKLM] -- {813EE1F0-D251-4F98-AC91-9B98CF22717E}

O42 - Logiciel: Wanadoo ADSL ECI USB - (.Pas de propriétaire.) [HKLM] -- {C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130

O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52}

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1

O42 - Logiciel: Zune Desktop Theme - (.Microsoft Corporation.) [HKLM] -- {7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}

O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

O42 - Logiciel: dBpoweramp Music Converter - (.Illustrate.) [HKLM] -- dBpoweramp Music Converter

O42 - Logiciel: dBpoweramp Windows Media Audio 10 Codec - (.Illustrate.) [HKLM] -- dBpoweramp Windows Media Audio 10 Codec

O42 - Logiciel: memDOC 3.5.1 - (.Pas de propriétaire.) [HKLM] -- memDOC 3.5.1_is1

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\ALWIL Software]

[HKCU\Software\Adobe]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Applications WinDev]

[HKCU\Software\BVRP Software]

[HKCU\Software\Borland]

[HKCU\Software\Brother]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\GIP-CPS]

[HKCU\Software\Gadwin Systems]

[HKCU\Software\Ghisler]

[HKCU\Software\GlarySoft]

[HKCU\Software\Google]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\Illustrate]

[HKCU\Software\Intel]

[HKCU\Software\Iris]

[HKCU\Software\JASC]

[HKCU\Software\JEDI-VCL]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lavalys]

[HKCU\Software\Licenses]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Mozilla]

[HKCU\Software\Netscape]

[HKCU\Software\NirSoft]

[HKCU\Software\Novell]

[HKCU\Software\ODBC]

[HKCU\Software\ORL]

[HKCU\Software\PDFCreator]

[HKCU\Software\Pc Soft]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\PrestoSoft]

[HKCU\Software\RMIngénierie]

[HKCU\Software\RMinformatique]

[HKCU\Software\SCC]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Sage]

[HKCU\Software\Secunia]

[HKCU\Software\Sensaura]

[HKCU\Software\Siemens]

[HKCU\Software\Skype]

[HKCU\Software\Sonic Desktop Software]

[HKCU\Software\Sysinternals]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VOB]

[HKCU\Software\VSRevoGroup]

[HKCU\Software\Wget]

[HKLM\Software\781]

[HKLM\Software\ALWIL Software]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\AppDataLow]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Borland]

[HKLM\Software\Brother]

[HKLM\Software\C07ft5Y]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\DivXNetworks]

[HKLM\Software\ECI]

[HKLM\Software\GIMP_Back_Mode]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\Identification]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Licenses]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\NSCPID]

[HKLM\Software\ODBC]

[HKLM\Software\OldTimer Tools]

[HKLM\Software\PDFCreator]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RMinformatique]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Sage]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secunia]

[HKLM\Software\Skype]

[HKLM\Software\SpywareBlaster]

[HKLM\Software\Swearware]

[HKLM\Software\SymNRT]

[HKLM\Software\WebUpdate]

[HKLM\Software\Western Digital]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\XnView]

[HKLM\Software\analog devices]

[HKLM\Software\mozilla.org]

[HKLM\Software\sagem]

 

 

---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 23/12/2010 - 19:33:56 ----D- C:\Program Files\7-Zip

O43 - CFD: 31/12/2010 - 12:22:40 ----D- C:\Program Files\Adobe

O43 - CFD: 23/01/2010 - 17:50:26 ----D- C:\Program Files\Alwil Software

O43 - CFD: 11/06/2010 - 09:35:40 ----D- C:\Program Files\Apple Software Update

O43 - CFD: 18/11/2010 - 10:18:04 ----D- C:\Program Files\AxBx

O43 - CFD: 06/09/2007 - 23:34:16 ----D- C:\Program Files\Axis Communications

O43 - CFD: 16/05/2009 - 11:15:06 ----D- C:\Program Files\Axon Data

O43 - CFD: 09/07/2009 - 09:58:46 ----D- C:\Program Files\Brother

O43 - CFD: 09/07/2009 - 09:59:24 ----D- C:\Program Files\Brownie

O43 - CFD: 10/01/2011 - 13:52:26 ----D- C:\Program Files\CCleaner

O43 - CFD: 05/06/2008 - 21:59:06 ----D- C:\Program Files\Cegedim

O43 - CFD: 16/10/2008 - 14:07:08 ----D- C:\Program Files\CIEL

O43 - CFD: 20/02/2004 - 12:33:22 ----D- C:\Program Files\Common Files

O43 - CFD: 20/02/2004 - 11:10:30 ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 03/01/2011 - 17:31:14 ----D- C:\Program Files\Defraggler

O43 - CFD: 03/10/2010 - 16:22:08 ----D- C:\Program Files\ExamDiff

O43 - CFD: 26/01/2011 - 10:05:06 ----D- C:\Program Files\Fichiers communs

O43 - CFD: 01/09/2010 - 13:03:44 ----D- C:\Program Files\Fonction Sesam Vitale

O43 - CFD: 27/12/2010 - 19:18:28 ----D- C:\Program Files\Gimp Pack Mode

O43 - CFD: 17/01/2011 - 15:19:10 ----D- C:\Program Files\Glary Utilities

O43 - CFD: 13/08/2010 - 20:47:04 ----D- C:\Program Files\Google

O43 - CFD: 09/07/2009 - 10:36:42 ----D- C:\Program Files\Hewlett-Packard

O43 - CFD: 09/07/2009 - 10:38:08 ----D- C:\Program Files\HP

O43 - CFD: 22/09/2010 - 14:47:56 ----D- C:\Program Files\Illustrate

O43 - CFD: 09/07/2009 - 09:58:10 --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 15/12/2010 - 18:42:06 ----D- C:\Program Files\Internet Explorer

O43 - CFD: 11/06/2010 - 08:35:56 ----D- C:\Program Files\IrfanView

O43 - CFD: 16/08/2010 - 16:22:44 ----D- C:\Program Files\Java

O43 - CFD: 28/01/2010 - 17:01:14 ----D- C:\Program Files\Macromedia

O43 - CFD: 25/01/2011 - 23:00:44 ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 07/07/2009 - 09:15:52 ----D- C:\Program Files\memDOC

O43 - CFD: 04/05/2009 - 12:10:04 ----D- C:\Program Files\Messenger

O43 - CFD: 11/10/2010 - 13:05:44 ----D- C:\Program Files\Microsoft Baseline Security Analyzer 2

O43 - CFD: 21/02/2004 - 07:19:34 ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 15/11/2010 - 09:44:36 ----D- C:\Program Files\Microsoft GIF Animator

O43 - CFD: 28/08/2009 - 11:07:52 ----D- C:\Program Files\Microsoft Office

O43 - CFD: 23/01/2010 - 19:04:44 ----D- C:\Program Files\Microsoft Office Creative Commons Add-in

O43 - CFD: 11/12/2008 - 19:22:34 ----D- C:\Program Files\Microsoft Sites publics français

O43 - CFD: 21/12/2010 - 17:17:10 ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 04/05/2009 - 13:29:40 ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 10/08/2010 - 22:15:58 ----D- C:\Program Files\Movie Maker

O43 - CFD: 06/10/2007 - 15:47:50 ----D- C:\Program Files\Mozilla ActiveX Control v1.7.12

O43 - CFD: 27/01/2011 - 11:55:52 ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 31/03/2009 - 10:58:08 ----D- C:\Program Files\MSBuild

O43 - CFD: 02/12/2010 - 09:44:46 ----D- C:\Program Files\MSECache

O43 - CFD: 17/05/2008 - 18:49:06 ----D- C:\Program Files\msn

O43 - CFD: 04/05/2009 - 10:21:28 ----D- C:\Program Files\msn gaming zone

O43 - CFD: 16/11/2006 - 20:48:52 ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 17/05/2008 - 18:45:06 ----D- C:\Program Files\NetMeeting

O43 - CFD: 31/12/2010 - 10:42:52 ----D- C:\Program Files\NOS

O43 - CFD: 09/01/2011 - 19:50:12 ----D- C:\Program Files\Notepad++

O43 - CFD: 15/12/2010 - 18:33:28 ----D- C:\Program Files\Outlook Express

O43 - CFD: 12/12/2010 - 07:34:08 ----D- C:\Program Files\Paint Shop Pro 6

O43 - CFD: 07/01/2011 - 14:32:10 ----D- C:\Program Files\PDFCreator

O43 - CFD: 08/12/2010 - 10:13:30 ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 10/02/2010 - 11:49:32 ----D- C:\Program Files\Polar

O43 - CFD: 13/12/2010 - 14:15:58 ----D- C:\Program Files\QuickTime

O43 - CFD: 03/01/2011 - 17:29:08 ----D- C:\Program Files\Recuva

O43 - CFD: 02/05/2010 - 21:32:20 ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 04/12/2009 - 12:31:50 ----D- C:\Program Files\RegCleaner

O43 - CFD: 19/02/2006 - 12:53:08 ----D- C:\Program Files\SAGEM

O43 - CFD: 17/01/2011 - 14:34:20 ----D- C:\Program Files\Secunia

O43 - CFD: 13/01/2011 - 09:35:58 ----D- C:\Program Files\Services en ligne

O43 - CFD: 11/08/2010 - 09:17:46 ----D- C:\Program Files\sesam

O43 - CFD: 16/01/2011 - 12:40:24 R---D- C:\Program Files\Skype

O43 - CFD: 12/11/2009 - 16:59:46 ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 23/01/2011 - 12:01:22 ----D- C:\Program Files\SpywareBlaster

O43 - CFD: 03/07/2009 - 13:43:30 ----D- C:\Program Files\ToniArts

O43 - CFD: 12/01/2011 - 17:26:24 ----D- C:\Program Files\Toolbar Uninstaller

O43 - CFD: 02/07/2004 - 23:02:18 --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 02/05/2009 - 08:45:08 ----D- C:\Program Files\VS Revo Group

O43 - CFD: 24/02/2010 - 18:02:54 ----D- C:\Program Files\Western Digital

O43 - CFD: 28/01/2010 - 16:49:24 ----D- C:\Program Files\Western Digital Technologies

O43 - CFD: 13/03/2010 - 09:24:48 ----D- C:\Program Files\Windows Installer Clean Up

O43 - CFD: 06/05/2009 - 16:09:52 ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 16/05/2009 - 10:02:58 ----D- C:\Program Files\Windows Media Player

O43 - CFD: 02/05/2009 - 10:03:14 ----D- C:\Program Files\Windows NT

O43 - CFD: 24/09/2008 - 22:22:44 ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 20/04/2006 - 23:22:52 --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 20/02/2004 - 11:13:56 ----D- C:\Program Files\xerox

O43 - CFD: 28/09/2010 - 09:27:22 ----D- C:\Program Files\XnView

O43 - CFD: 28/01/2011 - 10:01:18 ----D- C:\Program Files\ZHPDiag

O43 - CFD: 31/07/2004 - 08:58:00 ----D- C:\Program Files\Common Files\System

O43 - CFD: 22/09/2010 - 14:48:08 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AccurateRip

O43 - CFD: 31/12/2010 - 18:01:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Adobe

O43 - CFD: 12/06/2006 - 06:48:32 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\AdobeUM

O43 - CFD: 13/08/2010 - 14:40:56 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Apple Computer

O43 - CFD: 02/07/2007 - 11:06:44 R---D- C:\Documents and Settings\Docteur LANGERON\Application Data\Brother

O43 - CFD: 05/11/2008 - 20:00:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O43 - CFD: 22/09/2010 - 15:21:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\dBpoweramp

O43 - CFD: 24/02/2010 - 17:14:02 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Download Manager

O43 - CFD: 06/07/2009 - 09:44:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\ESTsoft

O43 - CFD: 26/01/2010 - 15:05:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GHISLER

O43 - CFD: 11/01/2011 - 09:45:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\GlarySoft

O43 - CFD: 25/09/2006 - 17:51:00 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Google

O43 - CFD: 17/01/2011 - 10:28:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\gtk-2.0

O43 - CFD: 20/02/2004 - 13:35:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Help

O43 - CFD: 30/07/2008 - 22:26:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HP

O43 - CFD: 10/04/2009 - 15:35:22 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HPAppData

O43 - CFD: 29/06/2010 - 18:35:58 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\HpUpdate

O43 - CFD: 21/02/2004 - 12:13:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Identities

O43 - CFD: 24/01/2011 - 11:10:36 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Macromedia

O43 - CFD: 09/04/2009 - 09:08:24 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Malwarebytes

O43 - CFD: 31/12/2010 - 18:01:04 -S--D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft

O43 - CFD: 25/01/2010 - 11:42:44 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Corporation

O43 - CFD: 21/02/2004 - 07:13:12 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Microsoft Web Folders

O43 - CFD: 26/01/2011 - 16:26:04 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Mozilla

O43 - CFD: 04/09/2004 - 16:29:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\MSN6

O43 - CFD: 19/05/2009 - 18:32:50 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\OfficeUpdate12

O43 - CFD: 08/12/2010 - 10:13:40 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\PhotoFiltre

O43 - CFD: 16/01/2011 - 19:55:14 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Skype

O43 - CFD: 31/03/2009 - 09:03:34 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\Sun

O43 - CFD: 23/01/2011 - 14:23:10 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\U3

O43 - CFD: 31/08/2010 - 13:19:48 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\VSRevoGroup

O43 - CFD: 24/02/2010 - 18:34:54 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\WD

O43 - CFD: 24/01/2011 - 11:28:18 ----D- C:\Documents and Settings\Docteur LANGERON\Application Data\XnView

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.C7C21C26190600F28FEFFC2865DBF09E] - 28/01/2011 - 09:54:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl [13868]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/01/2011 - 09:54:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:53:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log [1726806]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:52:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log [237]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:52:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log [0]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 28/01/2011 - 09:52:07 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.04F568F29DB387A9BC4B84DB7BD1DE71] - 28/01/2011 - 09:52:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\FNTCACHE.DAT [267800]

O44 - LFC:[MD5.ECED1200F915817C00FCFD7FC0EE1200] - 28/01/2011 - 09:50:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt [4932]

O44 - LFC:[MD5.78ACB0E002999EAAB76DD11FA0E8BB8D] - 27/01/2011 - 20:02:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\PDOXUSRS.NET [13030]

O44 - LFC:[MD5.31FAC467141BED800838AD335B6EB477] - 26/01/2011 - 10:15:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\ComboFix.txt [23725]

O44 - LFC:[MD5.E9EE6F21F3311E440286FB99B1B0F9CF] - 26/01/2011 - 10:08:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system.ini [246]

O44 - LFC:[MD5.8EA62145D76D8F2AC09555F7035194D4] - 26/01/2011 - 09:58:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Boot.bak [212]

O44 - LFC:[MD5.2F83A627FD57B5802FA6062E785740EB] - 26/01/2011 - 09:58:40 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\boot.ini [328]

O44 - LFC:[MD5.48C65662EC81FBCAA110509F50C51497] - 26/01/2011 - 09:58:35 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\cmldr [263488]

O44 - LFC:[MD5.AE72E8619CB31D84DA25E2435E55003C] - 26/01/2011 - 09:54:28 ---A- . (.NirSoft - NirCmd.) -- C:\WINDOWS\NIRCMD.exe [31232]

O44 - LFC:[MD5.9DAA7218961710008D7385B01BD3F386] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\MBR.exe [89088]

O44 - LFC:[MD5.F1FBA6185A6A2BC6456970914875078E] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\PEV.exe [256512]

O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\grep.exe [80412]

O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\sed.exe [98816]

O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 26/01/2011 - 09:54:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\zip.exe [68096]

O44 - LFC:[MD5.01D95A1F8CF13D07CC564AABB36BCC0B] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\WINDOWS\SWREG.exe [161792]

O44 - LFC:[MD5.B7517DB073B28F5696A1E5528ABEB5D0] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\WINDOWS\SWSC.exe [136704]

O44 - LFC:[MD5.B1A9CF0B6F80611D31987C247EC630B4] - 26/01/2011 - 09:54:28 ---A- . (.SteelWerX - Freeware implementation of XCACLS.) -- C:\WINDOWS\SWXCACLS.exe [212480]

O44 - LFC:[MD5.98F205D859DCA7707488399CC55E9900] - 25/01/2011 - 22:22:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wininit.ini [755]

O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\BDEADMIN.CPL [183808]

O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 24/01/2011 - 14:04:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\DBCLIENT.DLL [210032]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:27 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\Msft_Kernel_nielprt_01007.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/01/2011 - 10:43:16 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf [0]

O44 - LFC:[MD5.9501CE82389A3B51720E7B8A4B614216] - 16/01/2011 - 16:16:52 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\CONFIG.NT [3121]

O44 - LFC:[MD5.976AD1B5891D4663EB41BC12702415A4] - 13/01/2011 - 18:43:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pbcb.inf [16]

O44 - LFC:[MD5.2818237D7004CB68AE6CEBDCBD05186E] - 13/01/2011 - 09:47:32 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\WINDOWS\System32\aswBoot.exe [188216]

O44 - LFC:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [294608]

O44 - LFC:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\System32\drivers\aswTdi.sys [47440]

O44 - LFC:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon2.sys [100176]

O44 - LFC:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Window.) -- C:\WINDOWS\System32\drivers\aswmon.sys [94544]

O44 - LFC:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23632]

O44 - LFC:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) -- C:\WINDOWS\System32\drivers\aavmker4.sys [29392]

O44 - LFC:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [17744]

O44 - LFC:[MD5.1574DD9D409F2DC45CF82C22B99164A4] - 07/01/2011 - 14:31:28 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\pdfcmnnt.dll [116224]

O44 - LFC:[MD5.50F6C017223B985398D4B68107338ECB] - 31/12/2010 - 21:06:36 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\WINDOWS\avastSS.scr [38848]

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.602B0812D9FDF94725E420C75C1FB821] - 23/01/2011 - 19:16:17 ---A- - C:\WINDOWS\Prefetch\I_VIEW32.EXE-38F9F646.pf

O45 - LFCP:[MD5.48BA13EA6E85F7F82E8B265BBCDC0151] - 27/01/2011 - 10:19:10 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf

O45 - LFCP:[MD5.7D911FB9D1B5D69B472636A4D98DDE0C] - 27/01/2011 - 11:57:39 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf

O45 - LFCP:[MD5.8BF676BA32592A06552BFA509C62212E] - 27/01/2011 - 12:01:42 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-1095AC0A.pf

O45 - LFCP:[MD5.7F4BE13250E5BD58A855247EDA10A828] - 27/01/2011 - 12:06:02 ---A- - C:\WINDOWS\Prefetch\MSIMN.EXE-38BA891D.pf

O45 - LFCP:[MD5.8DB2C1540F29A18CC09FB457497EECDA] - 27/01/2011 - 12:12:54 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf

O45 - LFCP:[MD5.3AC521A65F5FA1D2DE643F8E05945ABD] - 27/01/2011 - 12:12:56 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:[MD5.FF53816E7B585AA2B439C831A7DFB4EC] - 27/01/2011 - 14:05:35 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.166AE38EA5BD5B1BBFC1ABCFC32D2A6E] - 27/01/2011 - 15:13:50 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf

O45 - LFCP:[MD5.D1BAF620048DFE5FB3A1A2C7483D0F94] - 27/01/2011 - 15:16:58 ---A- - C:\WINDOWS\Prefetch\PSI.EXE-18FF3F5A.pf

O45 - LFCP:[MD5.8925C33E0EE9D765575FA603E3B1DE73] - 27/01/2011 - 16:45:10 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf

O45 - LFCP:[MD5.DD2AFDBFF8B795D4EA24C164156CFFDB] - 27/01/2011 - 18:28:36 ---A- - C:\WINDOWS\Prefetch\DREAMWEAVER.EXE-39EC5E32.pf

O45 - LFCP:[MD5.8C1FD4640D80B1118E030362186EBA4C] - 27/01/2011 - 19:36:11 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.816E1A1BC6159978EA7379E6D106D1AB] - 27/01/2011 - 19:42:17 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-145A81D9.pf

O45 - LFCP:[MD5.DE58EB2E3035044F16E4D9E76446F32D] - 27/01/2011 - 19:51:41 ---A- - C:\WINDOWS\Prefetch\SF.BIN-1724081C.pf

O45 - LFCP:[MD5.6E486109BFE833DBCC67C619BD8458C5] - 27/01/2011 - 20:02:21 ---A- - C:\WINDOWS\Prefetch\ZHP2.EXE-3374FBD7.pf

O45 - LFCP:[MD5.3D2CA0DABCB052CAEBB747CA35976B9E] - 27/01/2011 - 20:02:58 ---A- - C:\WINDOWS\Prefetch\UNINS000.EXE-00890270.pf

O45 - LFCP:[MD5.18790ABDE9DDC43CD491C9F0040FA9EB] - 27/01/2011 - 20:03:20 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-300CF922.pf

O45 - LFCP:[MD5.FCB8DEFFF6240D0E37C846FF4B8CD33D] - 27/01/2011 - 20:05:04 ---A- - C:\WINDOWS\Prefetch\ZHPFIX.EXE-3A07CBCA.pf

O45 - LFCP:[MD5.23793C8AA525B65DC2B3E956E86EF364] - 27/01/2011 - 20:05:16 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf

O45 - LFCP:[MD5.7B8B2AD9916E0B3D0E4867CE4D818F9F] - 27/01/2011 - 20:12:49 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-19C3D96E.pf

O45 - LFCP:[MD5.B8100F4FDC0C225F84CD8A2D0605D0AD] - 27/01/2011 - 20:13:55 ---A- - C:\WINDOWS\Prefetch\XNVIEW.EXE-18AD42DD.pf

O45 - LFCP:[MD5.8BF5DEA7DAE87FC10D9AAC20354723C3] - 27/01/2011 - 20:14:11 ---A- - C:\WINDOWS\Prefetch\PHOTOFILTRE.EXE-00101112.pf

O45 - LFCP:[MD5.1D1E492BEB3D99DA1FD5F62939DCB222] - 28/01/2011 - 09:34:44 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.F18B5938920EBC94FBC67DB012DAFD3B] - 28/01/2011 - 09:34:59 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf

O45 - LFCP:[MD5.3998438193945BFF15CA77A3AAF82B47] - 28/01/2011 - 09:35:17 ---A- - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf

O45 - LFCP:[MD5.B39E223D02BCE35BC37C8535741667A2] - 28/01/2011 - 09:35:44 ---A- - C:\WINDOWS\Prefetch\SUA.EXE-1D0192FB.pf

O45 - LFCP:[MD5.813EAFDF647F5225EFC38565688C9E46] - 28/01/2011 - 09:37:10 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf

O45 - LFCP:[MD5.7525354811D2ED9E7AE1CC8A1374180A] - 28/01/2011 - 09:42:06 ---A- - C:\WINDOWS\Prefetch\AVAST.SETUP-01FBC16A.pf

O45 - LFCP:[MD5.0028FAB2A82E0EF5B31D30BA2CE9B4E2] - 28/01/2011 - 09:46:38 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3BA0187D.pf

O45 - LFCP:[MD5.60767D192F7CBDBAB1622B9F43DE38F8] - 28/01/2011 - 09:47:00 ---A- - C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf

O45 - LFCP:[MD5.6CBCAD4EA977203186E249F70C9D91A7] - 28/01/2011 - 09:47:17 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-38379543.pf

O45 - LFCP:[MD5.F7F79D048E1D65782FBA77905CF220A5] - 28/01/2011 - 09:49:05 ---A- - C:\WINDOWS\Prefetch\OTL.EXE-22076BE9.pf

O45 - LFCP:[MD5.08A15639CC2119704955E246B559BF4A] - 28/01/2011 - 09:49:18 ---A- - C:\WINDOWS\Prefetch\IISRESET.EXE-21AD4665.pf

O45 - LFCP:[MD5.D9240081FC894AD73EEE1D95BAA6000E] - 28/01/2011 - 09:49:24 ---A- - C:\WINDOWS\Prefetch\IISRSTAS.EXE-002B9FFB.pf

O45 - LFCP:[MD5.DF13283A0515794AC83EB76B3D5EF1C1] - 28/01/2011 - 09:50:16 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf

O45 - LFCP:[MD5.80F4C2BE8DF6D3E11094713C83E2AE67] - 28/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.6CE962DE7A99C9E323998C93E04122B8] - 28/01/2011 - 09:53:40 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.BCB94A1B01DF9F1E6166D07C8E405DA4] - 28/01/2011 - 09:54:15 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf

O45 - LFCP:[MD5.2996C2DB848C305103CAE6E94899B979] - 28/01/2011 - 09:54:17 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf

O45 - LFCP:[MD5.04B068BE7B9FA2AB4ADEBD3995572AFB] - 28/01/2011 - 09:58:40 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf

O45 - LFCP:[MD5.E2C1D33C21A60CA0285AD5934C3902F6] - 28/01/2011 - 10:00:04 ---A- - C:\WINDOWS\Prefetch\AVASTUI.EXE-1CBCA997.pf

O45 - LFCP:[MD5.5AB7E5F456A298292857DACF0A04D69D] - 28/01/2011 - 10:00:05 ---A- - C:\WINDOWS\Prefetch\DSLMON.EXE-1476FDB3.pf

O45 - LFCP:[MD5.98E8C6B771D924CF74EA67521FE458D9] - 28/01/2011 - 10:00:05 ---A- - C:\WINDOWS\Prefetch\PSI_TRAY.EXE-0734975D.pf

O45 - LFCP:[MD5.DC81D9B29C9BFE04122A3BEF82A66880] - 28/01/2011 - 10:00:19 ---A- - C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf

O45 - LFCP:[MD5.DE87D9E805275EA0E9C42A1FA209FAF7] - 28/01/2011 - 10:00:21 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-13DA0E71.pf

O45 - LFCP:[MD5.3CE35D68A07AD928E6338D08A1ECD32B] - 28/01/2011 - 10:00:21 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-1831A4F3.pf

O45 - LFCP:[MD5.413F41C84126C4C515B53A116FAA196A] - 28/01/2011 - 10:00:43 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:[MD5.5942AC9667AE1B8070BF457957F4FF10] - 28/01/2011 - 10:01:18 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:[MD5.29057ADB71C858DF14A4CE787578F82B] - 28/01/2011 - 10:01:18 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-0CBF6A11.pf

 

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

 

 

---\\ Export de clé d'application autorisée (ECAA) (O47)

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" [Disabled] .(.Hewlett-Packard Co. - Embedded Web Server Link application.) -- C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" [Disabled] .(.Hewlett-Packard Co. - HP AiO Fax Manager.) -- C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" [Disabled] .(.Hewlett-Packard Co. - HP OfficeJet SendFax Interface.) -- C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Disabled] .(.Hewlett-Packard Co. - HP All-in-One Launcher Utility.) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Disabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Network Device Rediscovery Service.) -- C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" [Disabled] .(.Pas de propriétaire - hpqscnvw.) -- C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" [Disabled] .(.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" [Disabled] .(.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" [Disabled] .(.Hewlett-Packard Co. - HP Fax Setup Wizard.) -- C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) --

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

 

 

---\\ Déni du service (Local Security Authority) (LSA) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\System32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

 

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

 

 

---\\ ShareTools MSconfig StartupReg (SMSR) (O53)

O53 - SMSR:HKLM\...\startupreg\SpybotSD TeaTimer [Key] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

 

 

---\\ Microsoft Control Security Providers (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

 

 

---\\ Microsoft Windows Policies System (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

 

 

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=67108863

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=323

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

 

 

---\\ Liste des Drivers Système (SDL) (O58)

O58 - SDL:[MD5.479C9835B91147BE1A92CB76FAD9C6DE] - 13/01/2011 - 09:37:11 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\drivers\aavmker4.sys [29392]

O58 - SDL:[MD5.2B3B8C0A2C979DD77BA6DC9376074854] - 02/03/2004 - 07:26:58 ---A- . (.Analog Deivces - USB Firmware loader.) -- C:\WINDOWS\system32\drivers\adildr.sys [50007]

O58 - SDL:[MD5.D478C566318803A7063B120F026DC0B7] - 02/03/2004 - 07:24:16 ---A- . (.Analog Devices Inc. - ADSL USB Driver.) -- C:\WINDOWS\system32\drivers\adiusbaw.sys [127065]

O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 09:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.701D741F60983B0319560523294E5D5B] - 13/01/2011 - 09:39:50 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows NT/2000.) -- C:\WINDOWS\system32\drivers\aswmon.sys [94544]

O58 - SDL:[MD5.A1C52B822B7B8A5C2162D38F579F97B7] - 13/01/2011 - 09:40:04 ---A- . (.AVAST Software - avast! File System Filter Driver for Windows XP.) -- C:\WINDOWS\system32\drivers\aswmon2.sys [100176]

O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 09:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\system32\drivers\aswRdr.sys [23632]

O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 09:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\system32\drivers\aswSP.sys [294608]

O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 09:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\WINDOWS\system32\drivers\aswTdi.sys [47440]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.D24DFD16A1E2A76034DF5AA18125C35D] - 01/09/2010 - 09:30:58 ---A- . (.Secunia - Secunia PSI Driver.) -- C:\WINDOWS\system32\drivers\psi_mf.sys [15544]

O58 - SDL:[MD5.D6EFAF429FD30C5DF613D220E344CCE7] - 12/05/2008 - 23:06:44 ---A- . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\system32\drivers\wdcsam.sys [11520]

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.js [0]

O61 - LFC:Last File Created 25/01/2011 - 11:46:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js [10]

O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMDocs.sav [36]

O61 - LFC:Last File Created 25/01/2011 - 11:46:05 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\TMGrpPrm.sav [54]

O61 - LFC:Last File Created 25/01/2011 - 11:48:49 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Adobe\Acrobat\10.0\ReaderMessages [10240]

O61 - LFC:Last File Created 25/01/2011 - 12:33:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-25.json [876507]

O61 - LFC:Last File Created 25/01/2011 - 14:27:15 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 25/01/2011 - 18:04:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.11 [32456]

O61 - LFC:Last File Created 25/01/2011 - 19:58:07 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt [4554]

O61 - LFC:Last File Created 25/01/2011 - 19:58:09 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswBoot.log [2932]

O61 - LFC:Last File Created 25/01/2011 - 19:59:26 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2SM-Global.reg [205]

O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies [0]

O61 - LFC:Last File Created 25/01/2011 - 21:11:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Google\Chrome\User Data\Default\History [0]

O61 - LFC:Last File Created 25/01/2011 - 22:31:26 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Ignominie.pdf [228733]

O61 - LFC:Last File Created 25/01/2011 - 22:58:24 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\SecurityCheck.exe [879047]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk [784]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Désinstaller Malwarebytes' Anti-Malware.lnk [820]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [796]

O61 - LFC:Last File Created 25/01/2011 - 23:00:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [796]

O61 - LFC:Last File Created 25/07/2002 - 22:07:36 ----- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\Modem Sagem Adsl\SAGEM F@st 800 v3.0.4\tools\ikernel.ex_ [346602]

O61 - LFC:Last File Created 26/01/2011 - 09:26:01 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS2-Docteur LANGERON.reg [85]

O61 - LFC:Last File Created 26/01/2011 - 09:26:03 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS2-Global.reg [86]

O61 - LFC:Last File Created 26/01/2011 - 09:47:09 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat.bak [10752]

O61 - LFC:Last File Created 26/01/2011 - 09:48:12 R--A- C:\Documents And Settings\Docteur LANGERON\Bureau\ComboFix.exe [4160433]

O61 - LFC:Last File Created 26/01/2011 - 09:52:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\U3\432021143DD00D0F\lplog.txt [496]

O61 - LFC:Last File Created 26/01/2011 - 09:53:15 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGCP-Global.reg [114]

O61 - LFC:Last File Created 26/01/2011 - 09:53:16 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGNTCVWL-Global.reg [347]

O61 - LFC:Last File Created 26/01/2011 - 09:53:20 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDCMD-Docteur LANGERON.reg [0]

O61 - LFC:Last File Created 26/01/2011 - 09:55:13 --HA- C:\Documents And Settings\Default User\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 [36753]

O61 - LFC:Last File Created 26/01/2011 - 10:13:41 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 [114]

O61 - LFC:Last File Created 26/01/2011 - 10:14:41 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js.BAK [29242]

O61 - LFC:Last File Created 26/01/2011 - 12:33:47 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws.ori [1944]

O61 - LFC:Last File Created 26/01/2011 - 12:51:49 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\AshWebSv.ws [0]

O61 - LFC:Last File Created 26/01/2011 - 12:52:37 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2b-Docteur LANGERON.reg [379]

O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUIESH-Docteur LANGERON.reg [132]

O61 - LFC:Last File Created 26/01/2011 - 12:52:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUNTCVW-Docteur LANGERON.reg [235]

O61 - LFC:Last File Created 26/01/2011 - 12:52:39 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegDRegT-Global.reg [133]

O61 - LFC:Last File Created 26/01/2011 - 13:20:20 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan rapide.txt [51551]

O61 - LFC:Last File Created 26/01/2011 - 13:44:29 ---A- C:\Documents And Settings\Docteur LANGERON\Bureau\OTL.exe [602624]

O61 - LFC:Last File Created 26/01/2011 - 13:49:14 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-26.json [876507]

O61 - LFC:Last File Created 26/01/2011 - 16:05:59 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBTB1-Docteur LANGERON.reg [4041]

O61 - LFC:Last File Created 26/01/2011 - 16:25:54 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [7524]

O61 - LFC:Last File Created 26/01/2011 - 16:26:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.log [1955]

O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.cache [92]

O61 - LFC:Last File Created 26/01/2011 - 16:26:06 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.ini [87]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\compreg.dat [147965]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\extensions.rdf [850]

O61 - LFC:Last File Created 26/01/2011 - 16:26:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\xpti.dat [102368]

O61 - LFC:Last File Created 26/01/2011 - 16:57:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Windows\Themes\Custom.theme [5385]

O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\CurrScanSet.cfg [44]

O61 - LFC:Last File Created 26/01/2011 - 17:33:46 ---A- C:\Documents And Settings\Docteur LANGERON\SecurityScans\Config\mru.cfg [1510]

O61 - LFC:Last File Created 26/01/2011 - 17:39:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012620110127\index.dat [49152]

O61 - LFC:Last File Created 26/01/2011 - 17:39:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS5-Docteur LANGERON.reg [320]

O61 - LFC:Last File Created 26/01/2011 - 17:46:27 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk [1757]

O61 - LFC:Last File Created 26/01/2011 - 18:08:44 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1caaaf1c0948ba2-78a1309b.dat [4344]

O61 - LFC:Last File Created 26/01/2011 - 18:15:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m44.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:26:44 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\VB11.pip [144]

O61 - LFC:Last File Created 26/01/2011 - 18:29:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Modèle mercredi décembre janvier février.lnk [484]

O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Bibliothèque.lnk [775]

O61 - LFC:Last File Created 26/01/2011 - 18:29:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\EUROTOOL.lnk [890]

O61 - LFC:Last File Created 26/01/2011 - 18:29:53 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours du mercredi CVS.lnk [360]

O61 - LFC:Last File Created 26/01/2011 - 18:30:11 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m12.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Parcours du mercredi.lnk [287]

O61 - LFC:Last File Created 26/01/2011 - 18:34:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\m45.lnk [355]

O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Disque amovible (I).lnk [179]

O61 - LFC:Last File Created 26/01/2011 - 18:37:29 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\Relevé des parcours CVS.lnk [324]

O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Publis11.pip [1672]

O61 - LFC:Last File Created 26/01/2011 - 18:41:28 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Publisher\pubcmd.dat [2361]

O61 - LFC:Last File Created 26/01/2011 - 18:42:25 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Excel\Excel11.xlb [19277]

O61 - LFC:Last File Created 26/01/2011 - 18:42:26 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Excel11.pip [1628]

O61 - LFC:Last File Created 26/01/2011 - 18:48:00 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUS1-Docteur LANGERON.reg [81]

O61 - LFC:Last File Created 26/01/2011 - 18:50:23 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegUBP2a-Docteur LANGERON.reg [226]

O61 - LFC:Last File Created 26/01/2011 - 18:50:28 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2a-Global.reg [227]

O61 - LFC:Last File Created 26/01/2011 - 18:50:35 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP2b-Global.reg [332]

O61 - LFC:Last File Created 26/01/2011 - 18:50:49 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGBP3-Global.reg [157]

O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\RegGS1-Global.reg [608]

O61 - LFC:Last File Created 26/01/2011 - 18:51:48 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2\Timestamps.ini [4850]

O61 - LFC:Last File Created 26/01/2011 - 18:54:04 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Overview.ini [0]

O61 - LFC:Last File Created 26/01/2011 - 18:57:40 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:57:49 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 26/01/2011 - 18:58:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\permissions.sqlite [2853888]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Configuration.ini [3849]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0]

O61 - LFC:Last File Created 26/01/2011 - 18:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Immunization.ini [1240]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\La_messe.lnk [813]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\temp.lnk [698]

O61 - LFC:Last File Created 26/01/2011 - 19:02:34 --H-- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\Récent\index.dat [2987]

O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Office\PowerP11.pip [1860]

O61 - LFC:Last File Created 26/01/2011 - 19:03:56 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\PowerPoint\PPT11.pcb [2196]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\config.dat [778]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\local.dat [94]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78]

O61 - LFC:Last File Created 26/01/2011 - 19:25:57 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6094433]

O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18]

O61 - LFC:Last File Created 26/01/2011 - 19:57:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216]

O61 - LFC:Last File Created 26/01/2011 - 20:54:21 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [44156]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Finances Personnelles~.feed-ms [380928]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\La Vie Financière~.feed-ms [385024]

O61 - LFC:Last File Created 27/01/2011 - 09:20:46 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\Les Echos - recommandations, conseils et analyses~.feed-ms [352256]

O61 - LFC:Last File Created 27/01/2011 - 10:21:34 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Assistant Configuration du réseau.lnk [1640]

O61 - LFC:Last File Created 27/01/2011 - 10:30:26 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 10:30:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Internet Explorer\UserData\4I7I3CKP\oXMLStoreUnit[1].xml [56]

O61 - LFC:Last File Created 27/01/2011 - 10:33:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\HP\ScLogs\SolutionCenter.htm [45960]

O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]

O61 - LFC:Last File Created 27/01/2011 - 11:10:37 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]

O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569]

O61 - LFC:Last File Created 27/01/2011 - 11:12:17 -S-A- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142]

O61 - LFC:Last File Created 27/01/2011 - 11:54:02 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Patrimoine\Revenu Garantie - Coupons - Abodance Babeth 2011.pdf [104986]

O61 - LFC:Last File Created 27/01/2011 - 12:08:42 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\blocklist.xml [4694]

O61 - LFC:Last File Created 27/01/2011 - 12:23:19 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments envoyés.dbx [129892976]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte d'envoi.dbx [191188]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Boîte de réception.dbx [8269040]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Folders.dbx [74720]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Langeron Eric.dbx [294950128]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Offline.dbx [9656]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Pop3uidl.dbx [9404]

O61 - LFC:Last File Created 27/01/2011 - 12:23:33 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Identities\{F4EA507F-E443-4674-A229-ACB80413FE25}\Microsoft\Outlook Express\Éléments supprimés.dbx [191188]

O61 - LFC:Last File Created 27/01/2011 - 13:00:02 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\Scan des médias amovibles.txt [10979]

O61 - LFC:Last File Created 27/01/2011 - 13:21:52 ---A- C:\Documents And Settings\Docteur LANGERON\Mes documents\Téléchargements\HiJackThis.msi [1402880]

O61 - LFC:Last File Created 27/01/2011 - 14:05:39 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [5120]

O61 - LFC:Last File Created 27/01/2011 - 15:13:37 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\bookmarkbackups\bookmarks-2011-01-27.json [876507]

O61 - LFC:Last File Created 27/01/2011 - 15:14:30 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 15:18:59 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Démarrage\Secunia PSI Tray.lnk [549]

O61 - LFC:Last File Created 27/01/2011 - 15:25:31 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Crash Reports\InstallTime20101203075014 [10]

O61 - LFC:Last File Created 27/01/2011 - 15:30:17 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\downloads.sqlite [10240]

O61 - LFC:Last File Created 27/01/2011 - 16:04:38 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\tabiconcache.dat [7426]

O61 - LFC:Last File Created 27/01/2011 - 16:45:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [8192]

O61 - LFC:Last File Created 27/01/2011 - 16:45:29 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds\L'analyse d'Erik Izraelewicz - Blogs - Les Echos~.feed-ms [73728]

O61 - LFC:Last File Created 27/01/2011 - 18:20:23 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\MSHist012011012720110128\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 19:42:07 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 27/01/2011 - 19:42:20 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{C2504D22-2A26-11E0-A734-4D6564696130}.dat [3584]

O61 - LFC:Last File Created 27/01/2011 - 19:42:20 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{2A17F307-2A45-11E0-A735-4D6564696130}.dat [6144]

O61 - LFC:Last File Created 27/01/2011 - 20:02:02 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\webappsstore.sqlite [3072]

O61 - LFC:Last File Created 27/01/2011 - 20:02:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cert8.db [196608]

O61 - LFC:Last File Created 27/01/2011 - 20:02:03 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\key3.db [16384]

O61 - LFC:Last File Created 27/01/2011 - 20:02:04 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\localstore.rdf [35275]

O61 - LFC:Last File Created 27/01/2011 - 20:15:07 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\PhotoFiltre\PhotoFiltre.ini [4320]

O61 - LFC:Last File Created 27/01/2011 - 20:18:04 -SHA- C:\Documents And Settings\Docteur LANGERON\Recent\Desktop.ini [150]

O61 - LFC:Last File Created 27/01/2011 - 20:18:15 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1ca9c53f8705d14-c441f5fd.dat [186864]

O61 - LFC:Last File Created 27/01/2011 - 20:18:18 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\URL.db [2806784]

O61 - LFC:Last File Created 28/01/2011 - 09:35:40 ----- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\prefs.js [28648]

O61 - LFC:Last File Created 28/01/2011 - 09:36:38 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\pluginreg.dat [10206]

O61 - LFC:Last File Created 28/01/2011 - 09:37:22 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\formhistory.sqlite [4096]

O61 - LFC:Last File Created 28/01/2011 - 09:38:12 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\urlclassifierkey3.txt [154]

O61 - LFC:Last File Created 28/01/2011 - 09:40:08 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite [1155072]

O61 - LFC:Last File Created 28/01/2011 - 09:40:08 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\places.sqlite-journal [0]

O61 - LFC:Last File Created 28/01/2011 - 09:41:41 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Setup.log [886566]

O61 - LFC:Last File Created 28/01/2011 - 09:48:52 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\sessionstore.js [59751]

O61 - LFC:Last File Created 28/01/2011 - 09:49:18 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite [7168]

O61 - LFC:Last File Created 28/01/2011 - 09:49:18 ---A- C:\Documents And Settings\Docteur LANGERON\Application Data\Mozilla\Firefox\Profiles\ttgedl75.default\cookies.sqlite-journal [3608]

O61 - LFC:Last File Created 28/01/2011 - 09:49:39 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\selfdef.log [103658]

O61 - LFC:Last File Created 28/01/2011 - 09:50:09 -SH-- C:\Documents And Settings\Docteur LANGERON\ntuser.ini [184]

O61 - LFC:Last File Created 28/01/2011 - 09:50:22 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\db1c91e8e6fac7132-14549e04.dat [5558856]

O61 - LFC:Last File Created 28/01/2011 - 09:50:25 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\Log.db [111616]

O61 - LFC:Last File Created 28/01/2011 - 09:52:09 -SHA- C:\Documents And Settings\LocalService\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 28/01/2011 - 09:52:09 -SHA- C:\Documents And Settings\NetworkService\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 28/01/2011 - 09:52:10 -SHA- C:\Documents And Settings\Docteur LANGERON\Application Data\Microsoft\Credentials\S-1-5-21-790525478-2052111302-682003330-1003\Credentials [940]

O61 - LFC:Last File Created 28/01/2011 - 09:52:10 -SHA- C:\Documents And Settings\Docteur LANGERON\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 28/01/2011 - 09:52:15 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Chest.log [40767]

O61 - LFC:Last File Created 28/01/2011 - 09:52:15 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:30 -SH-- C:\Documents And Settings\Docteur LANGERON\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 28/01/2011 - 09:52:31 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 28/01/2011 - 09:52:33 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:34 ---A- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini [145]

O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\3EO36JST\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\RO6QIOE5\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\YAG8EQV7\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:34 -SH-- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\YILYEUEU\desktop.ini [67]

O61 - LFC:Last File Created 28/01/2011 - 09:52:37 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 28/01/2011 - 09:52:37 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 28/01/2011 - 09:52:37 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [16384]

O61 - LFC:Last File Created 28/01/2011 - 09:54:39 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5375]

O61 - LFC:Last File Created 28/01/2011 - 09:54:39 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232]

O61 - LFC:Last File Created 28/01/2011 - 09:58:36 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\usntr.log [2631642]

O61 - LFC:Last File Created 28/01/2011 - 09:59:57 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\avast5.ini [16412]

O61 - LFC:Last File Created 28/01/2011 - 10:00:11 ---A- C:\Documents And Settings\Docteur LANGERON\Local Settings\Application Data\GDIPFONTCACHEV1.DAT [66680]

O61 - LFC:Last File Created 28/01/2011 - 10:00:18 --HA- C:\Documents And Settings\Docteur LANGERON\Local Settings\Historique\History.IE5\index.dat [196608]

O61 - LFC:Last File Created 28/01/2011 - 10:00:18 -SHA- C:\Documents And Settings\Docteur LANGERON\Cookies\index.dat [32768]

O61 - LFC:Last File Created 28/01/2011 - 10:00:18 -SHA- C:\Documents And Settings\Docteur LANGERON\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 28/01/2011 - 10:00:37 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\aswAr.log [161736]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\BehaviorShield.ini [169]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\EmailShield.ini [1269]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\FileSystemShield.ini [967]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\IMShield.ini [717]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\NetworkShield.ini [29]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\P2PShield.ini [843]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\WebShield.ini [632]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\log\Mail.log [1336999]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt [119730]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\EmailShield.txt [88196]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\FileSystemShield.txt [88792]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\IMShield.txt [88196]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\NetworkShield.txt [88196]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\P2PShield.txt [88196]

O61 - LFC:Last File Created 28/01/2011 - 10:00:54 ---A- C:\Documents And Settings\All Users\Application Data\Alwil Software\Avast5\report\WebShield.txt [89230]

 

 

---\\ Alternate Data Stream File (ADS) (O62)

O62 - ADS:Alternate Data Stream File - C:\WINDOWS\System32\SpoonUninstall.exe:Zone.Identifier

 

 

---\\ Liste des outils de nettoyage (LATC) (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: OTL - (.OldTimer.)

 

 

---\\ Liste des services Legacy (LALS) (O64)

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\AAVMKER4.sys - (.not file.) - avast! Asynchronous Virus Monitor (Aavmker4) .(.Pas de propriétaire - Pas de description.) - LEGACY_AAVMKER4

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\afd.sys - Environnement de prise en charge de réseau AFD (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD

O64 - Services: CurCS - C:\WINDOWS\System32\alg.exe - Service de la passerelle de la couche Application (ALG) .(.Microsoft Corporation - Application Layer Gateway Service.) - LEGACY_ALG

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestion d'applications (AppMgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_APPMGMT

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\arp1394.sys - Protocole client ARP 1394 (Arp1394) .(.Microsoft Corporation - IP/1394 Arp Client.) - LEGACY_ARP1394

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASPI32.sys - Aspi32 (Aspi32) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASPI32

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWMON2.sys - (.not file.) - avast! Standard Shield Support (aswMon2) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMON2

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\WINDOWS\System32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.Pas de propriétaire - Pas de description.) - LEGACY_ATI_HOTKEY_POLLER

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Audio Windows (AudioSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_AUDIOSRV

O64 - Services: CurCS - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe - avast! Antivirus (avast! Antivirus) .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\BEEP.sys - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de transfert intelligent en arrière-plan (BITS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_BITS

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\BrPar.sys - BrPar (BrPar) .(.Brother Industries Ltd. - Brother Parallel class Driver version 1.01.) - LEGACY_BRPAR

O64 - Services: CurCS - C:\DOCUME~1\DOCTEU~1\LOCALS~1\Temp\catchme.sys (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\CDFS.sys - cdfs (cdfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_CDFS

O64 - Services: CurCS - C:\WINDOWS\system32\cisvc.exe - Service d'indexation (cisvc) .(.Microsoft Corporation - Content Index service.) - LEGACY_CISVC

O64 - Services: CurCS - C:\WINDOWS\system32\clipsrv.exe - Gestionnaire de l'Album (ClipSrv) .(.Microsoft Corporation - Windows NT DDE Server.) - LEGACY_CLIPSRV

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - .NET Runtime Optimization Service v2.0.50727_X86 (clr_optimization_v2.0.50727_32) .(.Microsoft Corporation - .NET Runtime Optimization Service.) - LEGACY_CLR_OPTIMIZATION_V2.0.50727_32

O64 - Services: CurCS - (.not file.) - (.not file.) - Application système COM+ (COMSysApp) .(.Pas de propriétaire - Pas de description.) - LEGACY_COMSYSAPP

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Services de cryptographie (CryptSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_CRYPTSVC

O64 - Services: CurCS - (.not file.) - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DHCP (Dhcp) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DHCP

O64 - Services: CurCS - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique (dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - C:\Windows\System32\drivers\dmboot.sys - dmboot (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\DMLOAD.sys - dmload (dmload) .(.Pas de propriétaire - Pas de description.) - LEGACY_DMLOAD

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Gestionnaire de disque logique (dmserver) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DMSERVER

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client DNS (Dnscache) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_DNSCACHE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Service de rapport d'erreurs (ERSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_ERSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Système d'événements de COM+ (EventSystem) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_EVENTSYSTEM

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FASTFAT.sys - fastfat (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_FASTUSERSWITCHINGCOMPATIBILITY

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FIPS.sys - Fips (Fips) .(.Pas de propriétaire - Pas de description.) - LEGACY_FIPS

O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Microsoft Filesystem Filter Manager.) - LEGACY_FLTMGR

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe - Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) .(.Microsoft Corporation - PresentationFontCache.exe.) - LEGACY_FONTCACHE3.0.0.0

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msgpc.sys - Classificateur de paquets générique (Gpc) .(.Microsoft Corporation - MS General Packet Classifier.) - LEGACY_GPC

O64 - Services: CurCS - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate1c9dba399512e1a) (gupdate1c9dba399512e1a) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1C9DBA399512E1A

O64 - Services: CurCS - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Updater Service (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Aide et support (helpsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HELPSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - hpqcxs08 (hpqcxs08) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQCXS08

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service HP CUE DeviceDiscovery (hpqddsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HPQDDSVC

O64 - Services: CurCS - C:\Windows\System32\Drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Protocol Stack.) - LEGACY_HTTP

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - HTTP SSL (HTTPFilter) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_HTTPFILTER

O64 - Services: CurCS - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe - InstallDriver Table Manager (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe - Windows CardSpace (idsvc) .(.Microsoft Corporation - Windows CardSpace.) - LEGACY_IDSVC

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Administration IIS (IISADMIN) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_IISADMIN

O64 - Services: CurCS - C:\WINDOWS\system32\imapi.exe - Service COM de gravage de CD IMAPI (ImapiService) .(.Microsoft Corporation - API Image Mastering.) - LEGACY_IMAPISERVICE

O64 - Services: CurCS - C:\Windows\System32\drivers\ip6fw.sys - Pilote du pare-feu Windows IPv6 (ip6fw) .(.Microsoft Corporation - IPv6 Windows Firewall Driver.) - LEGACY_IP6FW

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipnat.sys - Traducteur d'adresses réseau IP (IpNat) .(.Microsoft Corporation - IP Network Address Translator.) - LEGACY_IPNAT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Écouteur RIP (Iprip) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_IPRIP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ipsec.sys - Pilote IPSEC (IPSec) .(.Microsoft Corporation - IPSec Driver.) - LEGACY_IPSEC

O64 - Services: CurCS - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter (JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\KSECDD.sys - ksecdd (ksecdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_KSECDD

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Assistance TCP/IP NetBIOS (LmHosts) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_LMHOSTS

O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MNMDD.sys - mnmdd (mnmdd) .(.Pas de propriétaire - Pas de description.) - LEGACY_MNMDD

O64 - Services: CurCS - C:\WINDOWS\System32\mnmsrvc.exe - Partage de Bureau à distance NetMeeting (mnmsrvc) .(.Microsoft Corporation - Partage de Bureau à distance NetMeeting.) - LEGACY_MNMSRVC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MOUNTMGR.sys - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\mqac.sys - Message Queuing access control (MQAC) .(.Microsoft Corporation - Windows NT MQ Access Control Device Driver.) - LEGACY_MQAC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxdav.sys - Redirecteur client WebDav (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV

O64 - Services: CurCS - C:\WINDOWS\System32\msdtc.exe - Distributed Transaction Coordinator (MSDTC) .(.Microsoft Corporation - MS DTC console program.) - LEGACY_MSDTC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication FTP (MSFTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_MSFTPSVC

O64 - Services: CurCS - C:\WINDOWS\system32\msiexec.exe - Windows Installer (MSIServer) .(.Microsoft Corporation - Windows® installer.) - LEGACY_MSISERVER

O64 - Services: CurCS - C:\WINDOWS\system32\mqsvc.exe - Message Queuing (MSMQ) .(.Microsoft Corporation - Message Queuing Service.) - LEGACY_MSMQ

O64 - Services: CurCS - C:\WINDOWS\system32\mqtgsvc.exe - Message Queuing Triggers (MSMQTriggers) .(.Microsoft Corporation - Windows NT MSMQ Trigger Service.) - LEGACY_MSMQTRIGGERS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\MUP.sys - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDIS.sys - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndistapi.sys - Pilote TAPI NDIS d'accès distant (NdisTapi) .(.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) - LEGACY_NDISTAPI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS mode utilisateur E/S Protocole (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O Driver.) - LEGACY_NDISUIO

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NetBIOS sur TCP/IP (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexions réseau (Netman) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NETMAN

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Net Driver HPZ12 (Net Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NET_DRIVER_HPZ12

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - NLA (Network Location Awareness) (Nla) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NLA

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - getPlus® Helper 3004 (nosGetPlusHelper) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NOSGETPLUSHELPER

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NTFS.sys - ntfs (ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Stockage amovible (NtmsSvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_NTMSSVC

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL

O64 - Services: CurCS - C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.exe - Office Source Engine (ose) .(.Microsoft Corporation - Office Source Engine.) - LEGACY_OSE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARTMGR.sys - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\PARVDM.sys - ParVdm (ParVdm) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARVDM

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pml Driver HPZ12 (Pml Driver HPZ12) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_PML_DRIVER_HPZ12

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Services IPSEC (PolicyAgent) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_POLICYAGENT

O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(.Pas de propriétaire - Pas de description.) - LEGACY_PROCEXP113

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Emplacement protégé (ProtectedStorage) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_PROTECTEDSTORAGE

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psi_mf.sys - PSI (PSI) .(.Secunia - Secunia PSI Driver.) - LEGACY_PSI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Pilote de connexion automatique d'accès distant (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexion automatique d'accès distant (RasAuto) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASAUTO

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Gestionnaire de connexions d'accès distant (RasMan) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_RASMAN

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD

O64 - Services: CurCS - C:\WINDOWS\system32\sessmgr.exe - Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) - LEGACY_RDSESSMGR

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Accès à distance au Registre (RemoteRegistry) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_REMOTEREGISTRY

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\RMCast.sys - Reliable Multicast Protocol driver (RMCAST) .(.Microsoft Corporation - Reliable Multicast Transport.) - LEGACY_RMCAST

O64 - Services: CurCS - (.not file.) - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS

O64 - Services: CurCS - C:\WINDOWS\system32\rsvp.exe - QoS RSVP (RSVP) .(.Microsoft Corporation - Microsoft RSVP.) - LEGACY_RSVP

O64 - Services: CurCS - C:\WINDOWS\system32\lsass.exe - Gestionnaire de comptes de sécurité (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS

O64 - Services: CurCS - C:\WINDOWS\System32\SCardSvr.exe - Carte à puce (SCardSvr) .(.Microsoft Corporation - Serveur de gestion de ressources des cartes.) - LEGACY_SCARDSVR

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Planificateur de tâches (Schedule) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SCHEDULE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Connexion secondaire (seclogon) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SECLOGON

O64 - Services: CurCS - C:\Program Files\Secunia\PSI\PSIA.exe - Secunia PSI Agent (Secunia PSI Agent) .(.Secunia - Secunia PSI Agent.) - LEGACY_SECUNIA_PSI_AGENT

O64 - Services: CurCS - C:\Program Files\Secunia\PSI\sua.exe - Secunia Update Agent (Secunia Update Agent) .(.Secunia - Secunia Update Agent.) - LEGACY_SECUNIA_UPDATE_AGENT

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Notification d'événement système (SENS) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Pare-feu de connexion Internet (ICF) / Partage de connexion Internet (ICS) (SharedAccess) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHAREDACCESS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Détection matériel noyau (ShellHWDetection) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SHELLHWDETECTION

O64 - Services: CurCS - C:\WINDOWS\System32\tcpsvcs.exe - Services TCP/IP simplifiés (SimpTcp) .(.Microsoft Corporation - TCP/IP Services Application.) - LEGACY_SIMPTCP

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Simple Mail Transfer Protocol (SMTP) (SMTPSVC) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_SMTPSVC

O64 - Services: CurCS - C:\WINDOWS\System32\snmp.exe - Service SNMP (SNMP) .(.Microsoft Corporation - Service SNMP.) - LEGACY_SNMP

O64 - Services: CurCS - C:\WINDOWS\System32\snmptrap.exe - Service d'interruption SNMP (SNMPTRAP) .(.Microsoft Corporation - SNMP Trap Service.) - LEGACY_SNMPTRAP

O64 - Services: CurCS - C:\WINDOWS\system32\spoolsv.exe - Spouleur d'impression (Spooler) .(.Microsoft Corporation - Spooler SubSystem App.) - LEGACY_SPOOLER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\sr.sys - Pilote de filtre de restauration système (sr) .(.Microsoft Corporation - Pilote de filtre de système de fichiers pou.) - LEGACY_SR

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de restauration système (srservice) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SRSERVICE

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Service de découvertes SSDP (SSDPSRV) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SSDPSRV

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Acquisition d'image Windows (WIA) (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC

O64 - Services: CurCS - C:\WINDOWS\system32\smlogsvc.exe - Journaux et alertes de performance (SysmonLog) .(.Microsoft Corporation - Service des alertes et des journaux de perf.) - LEGACY_SYSMONLOG

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Téléphonie (TapiSrv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TAPISRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tcpip.sys - Pilote du protocole TCP/IP (Tcpip) .(.Microsoft Corporation - TCP/IP Protocol Driver.) - LEGACY_TCPIP

O64 - Services: CurCS - (.not file.) - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Thèmes (Themes) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_THEMES

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Client de suivi de lien distribué (TrkWks) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKWKS

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\UDFS.sys - Udfs (Udfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_UDFS

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Hôte de périphérique universel Plug-and-Play (upnphost) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_UPNPHOST

O64 - Services: CurCS - C:\WINDOWS\System32\ups.exe - Onduleur (UPS) .(.Microsoft Corporation - UPS Service.) - LEGACY_UPS

O64 - Services: CurCS - C:\WINDOWS\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE

O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\VOLSNAP.sys - VolSnap (VolSnap) .(.Pas de propriétaire - Pas de description.) - LEGACY_VOLSNAP

O64 - Services: CurCS - C:\WINDOWS\System32\vssvc.exe - Cliché instantané de volume (VSS) .(.Microsoft Corporation - Service de cliché instantané de volumes Mic.) - LEGACY_VSS

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Horloge Windows (W32Time) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_W32TIME

O64 - Services: CurCS - C:\WINDOWS\system32\inetsrv\inetinfo.exe - Publication World Wide Web (w3svc) .(.Microsoft Corporation - Services Internet (IIS).) - LEGACY_W3SVC

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Pilote ARP IP d'accès distant (Wanarp) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARP

O64 - Services: CurCS - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe - WD Drive Manager Service (WDBtnMgrSvc.exe) .(.WDC - WD Drive Manager Service.) - LEGACY_WDBTNMGRSVC.EXE

O64 - Services: CurCS - C:\Windows\System32\Drivers\wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF Dynamic.) - LEGACY_WDF01000

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - WebClient (WebClient) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WEBCLIENT

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Infrastructure de gestion Windows (winmgmt) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WINMGMT

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Portable Media Serial Number Service (WmdmPmSN) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WMDMPMSN

O64 - Services: CurCS - C:\WINDOWS\system32\wbem\wmiapsrv.exe - Carte de performance WMI (WmiApSrv) .(.Microsoft Corporation - Service de la carte de performance WMI.) - LEGACY_WMIAPSRV

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Centre de sécurité (wscsvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WSCSVC

O64 - Services: CurCS - C:\WINDOWS\system32\svchost.exe - Mises à jour automatiques (wuauserv) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WUAUSERV

O64 - Services: CurCS - C:\WINDOWS\System32\svchost.exe - Configuration automatique sans fil (WZCSVC) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_WZCSVC

 

 

---\\ Liste des fichiers non signés (LUF) (O65)

O65 - LUF:09/01/2004 (.Pas de propriétaire - ActiveSkin Module.) (4, 2, 7, 3) - c:\windows\system32\actskin4.ocx

O65 - LUF:13/06/1998 (.Pas de propriétaire - Gif89 Module.) (1, 0, 0, 1) - c:\windows\system32\GIF89.DLL

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHS

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.CHT

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DE

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.DEU

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ES

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ESP

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.exe

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FR

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.FRA

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.IT

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.ITA

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JP

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.JPN

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.59) - c:\windows\system32\PSDrvCheck.KO

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.KOR

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NL

O65 - LUF:10/03/2004 (.Pas de propriétaire - .) (1.0.0.63) - c:\windows\system32\PSDrvCheck.NLD

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

 

 

---\\ Start Menu Internet (SMI) (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

---\\ Search Browser Infection (SBI) (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - Bing

O69 - SBI: SearchScopes [HKCU] {543AE12E-0651-4B4B-A098-7C124535ECEE} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.co

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Auto 19/12/2002 147456 | (Ati HotKey Poller) . (.Pas de propriétaire.) - C:\WINDOWS\System32\Ati2evxx.exe

SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SS - | Auto 17/02/2009 133104 | (gupdate1c9dba399512e1a) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 22/12/2009 136120 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 14/11/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

SR - | Auto 14/10/2010 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 10/01/2011 993848 | (Secunia PSI Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\PSIA.exe

SR - | Auto 10/01/2011 399416 | (Secunia Update Agent) . (.Secunia.) - C:\Program Files\Secunia\PSI\sua.exe

SR - | Auto 26/06/2009 102400 | (WDBtnMgrSvc.exe) . (.WDC.) - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by Docteur LANGERON at 28/01/2011 10:11:51

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys

1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F49AB8]

3 CLASSPNP[0xF87A5FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000005b[0x82F7CE98]

5 ACPI[0xF86EB620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-4[0x82F84D98]

kernel: MBR read successfully

user & kernel MBR OK

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Docteur LANGERON at 28/01/2011 10:11:51

Use the desktop link 'MBRCheck' to have full report

 

 

 

 

End of the scan (1215 lines in 10mn 44s)(0)

[lance_yien]

Merci de votre aide, le fonctionnement de mon ordinateur est beaucoup plus fluide

Après le nouveau passage de OTL, ZHPDiag ne semble plus trouver d'infection (voir liste jointe)

Tant mieux!

 

- Aucun problème pour réinstaller l'extension de Firefox : Web Developer.

- Spybot - Search & Destroy est un antispyware très populaire (mais on peut en installer un autre). La seule chose c'est d'en avoir un seul actif. Il détecte, intercepte et peut supprimer certains malwares.

Quant à SpywareBlaster, un antispyware aussi, il ne détecte pas et ne supprime pas, il immunise le système contre l'installations de certains items indésirable. Il est compatible avec les autres programmes et n'engendre pas de conflit avec d'autres antispywares (à ma connaissance aujourd'hui).

Malwarebytes' Anti-Malware a la version gratuite utilisée comme un scanner pour des analyses occasionnelles et peut être désinstallée après examen. Par contre sa version payante peut être installée comme protection en temps réel comme Spybot.

On peut trouver plus de détails sur le Web pour chaque programme.

 

A signaler que la toolbar ask.com s'était installée insidieusement au cours de la dernière mise à jour de pdfcreator sur Sourceforge ...

 

Il faut faire attention à tout lors de l'installation de n'importe quel programme. Ces "Additifs" sont à la mode parce qu'ils rapportent de la monnaie.

Pour désinstaller proprement Ask.com utiliser cet utilitaire

 

>>> Pare-feu: Un pare-feu est le 1er rempart contre les intrusions mais celui qui est inclus dans Windows XP ne contrôle pas le flux sortant d'Internet d'où l'utilité d'en installer un autre.

Choisir un parmi ceux-ci (gratuits): Online Armor Firewall, Sunbelt Personal Firewall, Outpost Firewall FREE.

 

Bonne chance!