Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

CPU à plus de 100% et yoyotte.

merci pour votre aide
 Partager

Messages recommandés

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
Posté(e)

Bonjour,

dès que j'éssaie de charger une page web mon cpu s'affolle et mon ordi rame.

De plus même après avoir fait plusieurs recherche pour trouver des virus rien y change...

J'ai aussi lancé spybot, je ne sais plus quoi faire???

Si vous avez des idées, je vous en serais très reconnaissant.

Merci bien à tous

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Lancez cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Décompresser le fichier ZHPDiag.fix sur le bureau

puis double-cliquer sur le fichier ZHPDiag.exe pour installer l'outil

Sur le bureau ,il y aura 3 icôneszhp0710.png

 

Sous XP, double clic sur ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

ZHPDiag.jpg

Clic sur la Loupe pour lancer le scan

En cas de blocage sur O80, cliquez sur le tournevis pour le décocher

Postez en le rapport ZhpDiag.txt qui apparait sur le bureau

Comment poster les rapports

Vous copiez/collez tout ou partie des rapports dans un ou plusieurs messages.

Autre solution:

Aller sur le site :Ci-Jointicne2cjoint.png

Appuyez sur Parcourir et chercher les rapports sur le disque,

Ensuite appuyez sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Rapport de ZHPDiag v1.27.17041 par Nicolas Coolman, Update du 16/03/2011

Run by jamel at 16/03/2011 22:41:20

Web site : ZHPDiag Outil de diagnostic

Contact : nicolascoolman@yahoo.fr

 

 

---\\ Web Browser

MSIE: Internet Explorer v7.0.6000.16982 (Defaut)

GCIE: Google Chrome v10.0.648.133

GCIE: Google Chrome Frame v10.0.648.133

 

---\\ System Information

Windows Vista Home Premium Edition, 32-bit (Build 6000)

Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1022 MB (30% free)

System Restore: Activé (Enable)

System drive C: has 33 GB (29%) free of 112 GB

 

---\\ Logged in mode

Computer Name: PC-DE-JAMEL

User Name: jamel

All Users Names: jamel, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Users\jamel\AppData\Roaming

%LocalAppData%=C:\Users\jamel\AppData\Local

%StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 33 Go of 112 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go)

E:\ CD-ROM drive (Not Inserted)

G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520]

[MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744]

[MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512]

[MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224]

[MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048]

[MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360]

 

 

 

---\\ Processus lancés

[MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]

[MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320]

[MD5.C9C19BF75D9E1BB66F9564DDC14F9862] - (.Pinball Corporation. - ClickPotato Search assistant.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSA.exe [742192]

[MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704]

[MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440]

[MD5.12A6D5E1800AF41423B755E638E84B24] - (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe [196608]

[MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]

[MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [25623336]

[MD5.89CF33E9040E3CC39F097238D3D97032] - (.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe [78008]

[MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632]

[MD5.AE82B3B6A33DC23019B604DA5920D726] - (.Skype Technologies S.A. - SkypeNames.) -- C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe [238888]

[MD5.C464CE70A57DA04861A29015814E0DD1] - (...) -- C:\Program Files\WinRAR\WinRAR.exe [1093120]

[MD5.431A6893FB3333B810820BF4D9703AA6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [639488]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé)

G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé)

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! France

R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Bing

R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = yahoo! search

R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = Yahoo! Search - Web Search

R1 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

R3 - URLSearchHook: the blinkx toolbar - {F08555B0-9CC3-11D2-AA8E-000000000567} . (.Pas de propriétaire - SearchHook Module.) (1, 0, 0, 1) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_shook.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: The blinkx Toolbar - {0069B690-7A2B-41C5-98CA-9F535B4C8532} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_bho.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll

O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.134\npchrome_frame.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll

O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O3 - Toolbar: The blinkx Toolbar - {E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe

O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (.not file.)

O4 - HKLM\..\Run: [ClickPotatoLiteSA] . (.Pinball Corporation. - ClickPotato Search assistant.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSA.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKCU\..\Run: [blinkx_toolbar] . (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] . (...) -- C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\jamel\Desktop\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe

O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe

O4 - Global Startup: C:\Users\jamel\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VoipCheapCom.lnk . (.VoipCheapCom.) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.)

O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico

O9 - Extra button: Skype add-on for Internet Explorer - {B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} . (.Pinball Corporation - ClickPotato.) -- C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSABHO.dll

O9 - Extra button: Skype add-on for Internet Explorer - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll

O9 - Extra button: Spybot - Search & Destroy Configuration - {EB620C54-E229-4942-87CE-E717109FC8C6} . (.SmartShopper Networks - Pas de description.) -- C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.134\npchrome_frame.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: (CLTNetCnService) - Clé orpheline

O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe

O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe

[MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700}

O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee

O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}

O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75}

O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75}

O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35}

O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}

O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36}

O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643}

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8}

O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA}

O42 - Logiciel: ClickPotato - (.Pinball Corporation..) [HKLM] -- ClickPotatoLiteSA

O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine

O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com

O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0}

O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series

O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual

O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner

O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D}

O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}

O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47}

O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799}

O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293}

O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9

O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}

O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide

O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}

O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin

O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E}

O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3

O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F}

O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}

O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E}

O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}

O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar

O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}

O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005

O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}

O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD}

O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4}

O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE}

O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}

O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7}

O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57}

O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C}

O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403}

O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}

O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1}

O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder

O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}

O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}

O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision

O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo

O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp

O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D}

O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0

O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF}

O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series

O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: ShopperReports - (.ShopperReports.) [HKLM] -- ShoppingReport2

O42 - Logiciel: ShopperReports - (.SmartShopper.) [HKLM] -- ShopperReportsSA

O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}

O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E}

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}

O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player

O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1

O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}

O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

O42 - Logiciel: blinkx Remote Toolbar - (.blinkx.) [HKLM] -- blinkx Remote Toolbar

O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ABBYY]

[HKCU\Software\ACD Systems]

[HKCU\Software\ALWIL Software]

[HKCU\Software\Acer]

[HKCU\Software\Adobe]

[HKCU\Software\Alibaba]

[HKCU\Software\AppDataLow\Google]

[HKCU\Software\AppDataLow\Software\Conduit]

[HKCU\Software\AppDataLow\Software\DivXNetworks]

[HKCU\Software\AppDataLow\Software\DivX]

[HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\PriceGong]

[HKCU\Software\AppDataLow\Software\ShoppingReport2]

[HKCU\Software\AppDataLow\Software\Softonic_France]

[HKCU\Software\AppDataLow\Software\Yahoo]

[HKCU\Software\AppDataLow\Software\conduitEngine]

[HKCU\Software\AppDataLow\Software\settings]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow\Toolbar]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Bugsplat]

[HKCU\Software\CDDB]

[HKCU\Software\Camfrog]

[HKCU\Software\CanonBJ]

[HKCU\Software\Catbytes Software]

[HKCU\Software\Classes.crx]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Crystal Decisions]

[HKCU\Software\CyberLink]

[HKCU\Software\Cygnus Solutions]

[HKCU\Software\Digimarc]

[HKCU\Software\DivXNetworks]

[HKCU\Software\DivX]

[HKCU\Software\EPSON]

[HKCU\Software\GNU]

[HKCU\Software\GRETECH]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Génération 5]

[HKCU\Software\Hofmann]

[HKCU\Software\IM Providers]

[HKCU\Software\JavaSoft]

[HKCU\Software\Leadertech]

[HKCU\Software\LogiShrd]

[HKCU\Software\Logitech]

[HKCU\Software\MEGAUPLOADER]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MegauploadToolbar]

[HKCU\Software\Megaupload]

[HKCU\Software\MimarSinan]

[HKCU\Software\Mindscape]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\MyHeritage.com]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\Opera Software]

[HKCU\Software\Orange]

[HKCU\Software\Piriform]

[HKCU\Software\PoivY]

[HKCU\Software\Policies]

[HKCU\Software\RealNetworks]

[HKCU\Software\Realtek]

[HKCU\Software\SSPrint]

[HKCU\Software\STOIK Imagic 30]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\ShopperReports3]

[HKCU\Software\ShoppingReport2]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Stoik]

[HKCU\Software\SubSystems]

[HKCU\Software\SupportSoft]

[HKCU\Software\Symantec]

[HKCU\Software\Sysinternals]

[HKCU\Software\The Complete Genealogy Reporter]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VoipCheapCom]

[HKCU\Software\Wget]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yahoo]

[HKCU\Software\blinkx_toolbar]

[HKCU\Software\clickpotatolitesa]

[HKCU\Software\cybelsoft]

[HKCU\Software\eBay]

[HKCU\Software\eMule]

[HKCU\Software\keyhole.com]

[HKLM\Software\ABBYY]

[HKLM\Software\ACD Systems]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\ALWIL Software]

[HKLM\Software\Acer Inc.]

[HKLM\Software\Acer]

[HKLM\Software\Adobe]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\ClickPotatoLite]

[HKLM\Software\Clients]

[HKLM\Software\Compedia]

[HKLM\Software\Conduit]

[HKLM\Software\Crystal Decisions]

[HKLM\Software\CyberLink]

[HKLM\Software\DivXNetworks]

[HKLM\Software\DivX]

[HKLM\Software\EPSON]

[HKLM\Software\EpsonNet]

[HKLM\Software\GEAR Software]

[HKLM\Software\GNU]

[HKLM\Software\GRETECH]

[HKLM\Software\Google]

[HKLM\Software\Hulabee]

[HKLM\Software\Imikimi]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Khronos]

[HKLM\Software\Kutoka]

[HKLM\Software\LiberTV]

[HKLM\Software\LightScribe]

[HKLM\Software\LogiShrd]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Megaupload Limited]

[HKLM\Software\Megaupload]

[HKLM\Software\Micro Application]

[HKLM\Software\MimarSinan]

[HKLM\Software\Mindscape]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\MyHeritage.com]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\Nullsoft]

[HKLM\Software\ODBC]

[HKLM\Software\Policies]

[HKLM\Software\RealNetworks]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\SEC]

[HKLM\Software\SEIKO EPSON CORPORATION]

[HKLM\Software\SPanel]

[HKLM\Software\SRS Labs]

[HKLM\Software\SSPrint]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\SamsungMaster]

[HKLM\Software\Samsung]

[HKLM\Software\Secure]

[HKLM\Software\ShopperReports3]

[HKLM\Software\Skype]

[HKLM\Software\Softonic_France]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\SupportSoft]

[HKLM\Software\Swearware]

[HKLM\Software\Symantec]

[HKLM\Software\The Learning Company]

[HKLM\Software\TrendMicro]

[HKLM\Software\VideoLAN]

[HKLM\Software\WinRAR]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\Yahoo]

[HKLM\Software\ZSMC]

[HKLM\Software\blinkx_toolbar]

[HKLM\Software\cybelsoft]

[HKLM\Software\eZee]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint

O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems

O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc

O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone

O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe

O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba

O43 - CFD: 4/06/2010 - 20:22:10 - [146186903] ----D- C:\Program Files\Alwil Software

O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom

O43 - CFD: 16/03/2011 - 9:21:26 - [854378] ----D- C:\Program Files\blinkx Remote Toolbar

O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour

O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog

O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha

O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner

O43 - CFD: 2/02/2011 - 17:47:54 - [1746277] ----D- C:\Program Files\ClickPotatoLite

O43 - CFD: 9/03/2011 - 18:52:14 - [848931073] ----D- C:\Program Files\Common Files

O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia

O43 - CFD: 24/01/2011 - 14:15:44 - [532064] ----D- C:\Program Files\Conduit

O43 - CFD: 24/01/2011 - 14:15:12 - [3989046] ----D- C:\Program Files\ConduitEngine

O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink

O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX

O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay

O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule

O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson

O43 - CFD: 9/03/2011 - 19:01:02 - [168424452] ----D- C:\Program Files\Epson Software

O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet

O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi

O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 24/01/2011 - 19:04:06 - [882389582] ----D- C:\Program Files\Google

O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6

O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH

O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann

O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee

O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi

O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod

O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes

O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java

O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech

O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com

O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP

O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload

O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar

O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application

O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 30/12/2010 - 17:23:26 - [272330479] ----D- C:\Program Files\Microsoft SQL Server

O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape

O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker

O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN

O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage

O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru

O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1

O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack

O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com

O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real

O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek

O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari

O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung

O43 - CFD: 16/03/2011 - 9:20:10 - [2365572] ----D- C:\Program Files\ShopperReports3

O43 - CFD: 2/02/2011 - 17:47:48 - [1232400] ----D- C:\Program Files\ShoppingReport2

O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype

O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France

O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro

O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN

O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom

O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp

O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender

O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal

O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live

O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail

O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT

O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR

O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo!

O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY

O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR

O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects

O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared

O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON

O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 8/01/2010 - 21:21:08 - [39189436] ----D- C:\Program Files\Common Files\logishrd

O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems

O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real

O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype

O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft

O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System

O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared

O43 - CFD: 2/02/2011 - 17:47:56 - [0] ----D- C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

O43 - CFD: 9/03/2011 - 18:52:14 - [1853718] ----D- C:\ProgramData\ABBYY

O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe

O43 - CFD: 4/06/2010 - 20:14:22 - [9625763] ----D- C:\ProgramData\Alwil Software

O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple

O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ

O43 - CFD: 16/03/2011 - 14:16:08 - [9352155] ----D- C:\ProgramData\ClickPotatoLiteSA

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay

O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier

O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON

O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 25/03/2010 - 9:27:00 - [2759149] ----D- C:\ProgramData\Google

O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee

O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield

O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd

O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com

O43 - CFD: 23/09/2009 - 0:38:36 - [262] ----D- C:\ProgramData\Malwarebytes

O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 16/03/2011 - 8:27:56 - [504451712] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage

O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS

O43 - CFD: 16/03/2011 - 13:29:32 - [2053053] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation

O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real

O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe

O43 - CFD: 28/01/2010 - 16:16:22 - [27167677] ----D- C:\ProgramData\Skype

O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun

O43 - CFD: 23/09/2009 - 0:01:20 - [6155933] ----D- C:\ProgramData\SupportSoft

O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec

O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL

O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip

O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems

O43 - CFD: 5/01/2011 - 12:48:02 - [16729124] ----D- C:\Users\jamel\AppData\Roaming\Adobe

O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM

O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer

O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog

O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O43 - CFD: 2/02/2011 - 17:47:54 - [0] ----D- C:\Users\jamel\AppData\Roaming\ClickPotatoLite

O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX

O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss

O43 - CFD: 10/03/2011 - 7:42:28 - [6817] ----D- C:\Users\jamel\AppData\Roaming\Epson

O43 - CFD: 25/03/2010 - 9:27:48 - [396] ----D- C:\Users\jamel\AppData\Roaming\Google

O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0

O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee

O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities

O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield

O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech

O43 - CFD: 22/09/2009 - 22:41:04 - [150113] ----D- C:\Users\jamel\AppData\Roaming\Macromedia

O43 - CFD: 23/09/2009 - 0:38:48 - [26981] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes

O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs

O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar

O43 - CFD: 16/03/2011 - 9:13:32 - [4844654] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft

O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage

O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera

O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip

O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre

O43 - CFD: 12/03/2011 - 13:39:06 - [489822] ----D- C:\Users\jamel\AppData\Roaming\PoivY

O43 - CFD: 18/01/2011 - 16:22:42 - [2301671] ----D- C:\Users\jamel\AppData\Roaming\Real

O43 - CFD: 16/03/2011 - 9:20:10 - [0] ----D- C:\Users\jamel\AppData\Roaming\ShopperReports3

O43 - CFD: 16/03/2011 - 22:24:24 - [20014319] ----D- C:\Users\jamel\AppData\Roaming\Skype

O43 - CFD: 16/03/2011 - 18:21:54 - [175160] ----D- C:\Users\jamel\AppData\Roaming\skypePM

O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB

O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc

O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom

O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409]

O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24]

O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560]

O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920]

O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672]

O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368]

O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928]

O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160]

O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736]

O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976]

O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312]

O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272]

O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656]

O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960]

O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096]

O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0]

O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734]

O44 - LFC:[MD5.476F8C1F5219A260F72E8D76E9FEAFEC] - 16/03/2011 - 8:46:46 ---A- . (.www.error-repair-pro.com - Error Repair Professional Setup.) -- C:\Windows\System32\repair-pro.exe [1315717]

O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 16/03/2011 - 9:10:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796]

O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 16/03/2011 - 9:10:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428]

O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068]

O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652]

O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 16/03/2011 - 9:10:07 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302]

O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144]

O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165]

O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920]

O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756]

O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872]

O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392]

O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504]

O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488]

O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696]

O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392]

O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306]

O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56]

O44 - LFC:[MD5.48EF1200D8DCC47600FCFD7F1CF01200] - 16/03/2011 - 16:15:06 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1248908]

O44 - LFC:[MD5.EA3AEC1B61D656D96F547AB6A0B8CB28] - 16/03/2011 - 13:28:57 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0]

O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965]

O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098]

O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847]

O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572]

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]

O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]

O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]

O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]

O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]

O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]

O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]

O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280]

O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632]

O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608]

O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]

O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]

O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]

O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]

O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]

O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512]

O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752]

O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656]

O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]

O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]

O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264]

O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]

O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]

O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184]

O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592]

O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504]

O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]

O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]

O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: RSIT - (.random/random.)

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER

O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS

O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS

O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK

O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC

O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP

O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL

O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL

O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO

O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR

O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP

O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15

O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD

O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO

O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR

O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR

O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV

O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20

O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS

O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV

O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP

O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT

O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS

O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY

O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM

O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH

O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113

O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER

O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV

O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD

O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB

O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET

O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP

O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS

O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE

O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX

O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6

O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - Babylon Search

O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} [DefaultScope] - (Enter Search Term...) - blinkx Search

O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.80793BE6A12267569F95546203211E7A] [sPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\jamel\AppData\Local\Temp\ABBYY.Sprint.Registrator.log [5366]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF] (.Macrovision Corporation - Setup.exe.) -- C:\Users\jamel\AppData\Local\Temp\_is7F50.exe [460248]

[MD5.A205551E7BA8580D2C0FF896A4D79FA9] [sPRF] (.Macrovision Corporation - Setup.exe.) -- C:\Users\jamel\AppData\Local\Temp\_is897A.exe [460248]

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "MCX-Prov-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - MCX2 Provisioning library.) -- C:\Windows\ehome\mcx2prov.exe

O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe

O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe

O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe

O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe

O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex

O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe

SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by jamel at 16/03/2011 22:44:49

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys

1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851A8330]

3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848E9960]

5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x848EBBB0]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by jamel at 16/03/2011 22:44:51

Use the desktop link 'MBRCheck' to have full report

Dump file Name : C:\PhysicalDisk0_MBR.bin

 

 

 

End of the scan (1306 lines in 03mn 30s)(0)

 

 

 

Je vous remercie pour votre aide et j'espère que tout rentrera d'ici peut dans l'ordre.

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Téléchargez AD-Remover sur le bureau

101207110859995521.jpg

 

Déconnectez-vous et fermez toutes les applications en cours

Cliquer sur "Ad-R.exe" pour lancer l'installation et laisser les paramètres par défaut .

Une fenêtre s'affichera Vous prévenant des risques de l'utilisation de ce logiciel

Cliquez sur "OUI"

Double cliquer sur l'icône Ad-remover sur le bureau

fyjor7.jpg

Au menu principal choisir l'optionScanner et Validez

 

Patientez pendant le travail de l'outil.

Poster le rapport qui apparait à la fin .

Il est sauvegardé aussi sous C:\Ad-report.log

 

Ensuite

 

Relancer Ad- remover , choisir l'option Nettoyer

 

Il y aura 2 rapports à poster après :Scanner et Nettoyer

 

Pour désinstaller AD-Remover, lancez avec l'option D puis supprimer l'icône du bureau.

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Bonjour voiçi le rapport,

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 01/03/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF

 

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 03:39:11 le 18/03/2011, Mode normal

 

Microsoft® Windows Vista™ Édition Familiale Premium (X86)

jamel@PC-DE-JAMEL (Acer Aspire M1600)

 

============== RECHERCHE ==============

 

 

Dossier trouvé: C:\Users\jamel\AppData\LocalLow\Conduit

Dossier trouvé: C:\Program Files\Conduit

Dossier trouvé: C:\Users\jamel\AppData\LocalLow\ConduitEngine

Dossier trouvé: C:\Program Files\ConduitEngine

Dossier trouvé: C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

Dossier trouvé: C:\Program Files\blinkx Remote Toolbar

Dossier trouvé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato

Dossier trouvé: C:\Users\jamel\AppData\Roaming\ClickPotatoLite

Dossier trouvé: C:\Program Files\ClickPotatoLite

Dossier trouvé: C:\ProgramData\ClickPotatoLiteSA

Dossier trouvé: C:\Users\jamel\AppData\LocalLow\PriceGong

Dossier trouvé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports

Dossier trouvé: C:\Users\jamel\AppData\Roaming\ShopperReports3

Dossier trouvé: C:\Program Files\ShopperReports3

Dossier trouvé: C:\Users\jamel\AppData\LocalLow\ShoppingReport2

Dossier trouvé: C:\Program Files\ShoppingReport2

 

Clé trouvée: HKLM\Software\Classes\CLSID\{0069B690-7A2B-41C5-98CA-9F535B4C8532}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0069B690-7A2B-41C5-98CA-9F535B4C8532}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0069B690-7A2B-41C5-98CA-9F535B4C8532}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0069B690-7A2B-41C5-98CA-9F535B4C8532}

Clé trouvée: HKLM\Software\Classes\CLSID\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC}

Clé trouvée: HKLM\Software\Classes\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{258C9770-1713-4021-8D7E-1F184A2BD754}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{258C9770-1713-4021-8D7E-1F184A2BD754}

Clé trouvée: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}

Clé trouvée: HKLM\Software\Classes\CLSID\{3E2DFD6A-4E20-4D4C-AA8B-E1F9DBEF3C80}

Clé trouvée: HKLM\Software\Classes\CLSID\{710FEBCB-DE3E-44C6-88D7-4D760446C73B}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{710FEBCB-DE3E-44C6-88D7-4D760446C73B}

Clé trouvée: HKLM\Software\Classes\CLSID\{714E0876-FCEE-49CE-A429-B9AD8AEFCB56}

Clé trouvée: HKLM\Software\Classes\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C}

Clé trouvée: HKLM\Software\Classes\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29}

Clé trouvée: HKLM\Software\Classes\CLSID\{8B38D5D0-5B0F-4A39-965E-AEC5B7682945}

Clé trouvée: HKLM\Software\Classes\CLSID\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5}

Clé trouvée: HKLM\Software\Classes\CLSID\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}

Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}

Clé trouvée: HKLM\Software\Classes\CLSID\{C5067F59-9D0D-11D2-AA90-000000000567}

Clé trouvée: HKLM\Software\Classes\CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D}

Clé trouvée: HKLM\Software\Classes\CLSID\{CFC16189-8A92-4a29-A940-60248385F426}

Clé trouvée: HKLM\Software\Classes\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26}

Clé trouvée: HKLM\Software\Classes\CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB}

Clé trouvée: HKLM\Software\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D}

Clé trouvée: HKLM\Software\Classes\CLSID\{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6}

Clé trouvée: HKLM\Software\Classes\CLSID\{F08555B0-9CC3-11D2-AA8E-000000000567}

Clé trouvée: HKLM\Software\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}

Clé trouvée: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}

Clé trouvée: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393}

Clé trouvée: HKLM\Software\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}

Clé trouvée: HKLM\Software\Classes\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}

Clé trouvée: HKLM\Software\Classes\Interface\{38493F7F-2922-4C6C-9A9A-8DA2C940D0EE}

Clé trouvée: HKLM\Software\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4}

Clé trouvée: HKLM\Software\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}

Clé trouvée: HKLM\Software\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}

Clé trouvée: HKLM\Software\Classes\Interface\{855DEB19-A43C-4A35-909D-0E62A98C8FDA}

Clé trouvée: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}

Clé trouvée: HKLM\Software\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}

Clé trouvée: HKLM\Software\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}

Clé trouvée: HKLM\Software\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}

Clé trouvée: HKLM\Software\Classes\Interface\{F08555AF-9CC3-11D2-AA8E-000000000567}

Clé trouvée: HKLM\Software\Classes\TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9}

Clé trouvée: HKLM\Software\Classes\TypeLib\{3277CD27-4001-4EF8-9D96-C6CA745AC2F9}

Clé trouvée: HKLM\Software\Classes\TypeLib\{814BAA91-DC22-4350-87D6-0C86E93F7F08}

Clé trouvée: HKLM\Software\Classes\TypeLib\{87CB4A6A-DD84-454C-A93E-75BA129135D2}

Clé trouvée: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}

Clé trouvée: HKLM\Software\Classes\TypeLib\{C55CA95C-324B-451C-B2D2-6E895AA75FEC}

Clé trouvée: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}

Clé trouvée: HKLM\Software\Classes\TypeLib\{F08555A1-9CC3-11D2-AA8E-000000000567}

Clé trouvée: HKLM\Software\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}

Clé trouvée: HKLM\Software\Classes\BBar.BBarBand

Clé trouvée: HKLM\Software\Classes\BBar.BBarBand.1

Clé trouvée: HKLM\Software\Classes\BlinkxToolbar_BHO.BlinkxToolbarBHO

Clé trouvée: HKLM\Software\Classes\BlinkxToolbar_BHO.BlinkxToolbarBHO.1

Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAx.Info

Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAx.Info.1

Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles

Clé trouvée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles.1

Clé trouvée: HKLM\Software\Classes\Conduit.Engine

Clé trouvée: HKLM\Software\Classes\MenuButtonIE.ButtonIE

Clé trouvée: HKLM\Software\Classes\MenuButtonIE.ButtonIE.1

Clé trouvée: HKLM\Software\Classes\SearchHook.SrchHook

Clé trouvée: HKLM\Software\Classes\SearchHook.SrchHook.1

Clé trouvée: HKLM\Software\Classes\SearchHook.URLSearchHook

Clé trouvée: HKLM\Software\Classes\SearchHook.URLSearchHook.1

Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDic

Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDic.1

Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDisp

Clé trouvée: HKLM\Software\Classes\ShopperReports.CntntDisp.1

Clé trouvée: HKLM\Software\Classes\ShopperReports.Stock

Clé trouvée: HKLM\Software\Classes\ShopperReports.Stock.1

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbAx

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbAx.1

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbInfoBand

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.HbInfoBand.1

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButton

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButton.1

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButtonA

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.IEButtonA.1

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.RprtCtrl

Clé trouvée: HKLM\Software\Classes\ShoppingReport2.RprtCtrl.1

Clé trouvée: HKLM\Software\Classes\Toolbar.CT2542115

Clé trouvée: HKLM\Software\Classes\AppID\BRNstIE.DLL

Clé trouvée: HKLM\Software\Classes\AppID\MenuButtonIE.DLL

Clé trouvée: HKLM\Software\blinkx_toolbar

Clé trouvée: HKLM\Software\ClickPotatoLite

Clé trouvée: HKLM\Software\Conduit

Clé trouvée: HKLM\Software\conduitEngine

Clé trouvée: HKLM\Software\ShopperReports3

Clé trouvée: HKLM\Software\ShoppingReport2

Clé trouvée: HKCU\Software\blinkx_toolbar

Clé trouvée: HKCU\Software\ClickPotatoLiteSA

Clé trouvée: HKCU\Software\ShopperReports3

Clé trouvée: HKCU\Software\ShoppingReport2

Clé trouvée: HKCU\Software\AppDataLow\Toolbar

Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit

Clé trouvée: HKCU\Software\AppDataLow\Software\conduitEngine

Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong

Clé trouvée: HKCU\Software\AppDataLow\Software\ShoppingReport2

Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{813C71B5-19A1-4DBD-82A0-2E51448E3814}

Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\blinkx Remote Toolbar

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ClickpotatoliteSA

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6}

Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE}

Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}

Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}

 

Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|ShopperReports 3.0.517.0

Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E8790776BD765F573FAA90

Valeur trouvée: HKLM\Software\Mozilla\Firefox\Extensions|clickpotatolite@clickpotatolite.com

Valeur trouvée: HKLM\Software\Mozilla\Firefox\Extensions|Shopperreports@shopperreports.com

Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ClickPotatoLiteSA

Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6}

Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D}

Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}

 

 

============== SCAN ADDITIONNEL ==============

 

**** Internet Explorer Version [7.0.6000.16982] ****

 

HKCU_Main|SearchMigratedDefaultURL - hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU_Main|Start Page - hxxp://google.be/

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Start Page - hxxp://fr.fr.acer.yahoo.com

HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} - "the blinkx toolbar" (C:\Program Files\blinkx Remote Toolbar\the_blinkx_shook.dll)

HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

HKCU_SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - "Search the web (Babylon)" (hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch)

HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...)

HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\ConduitEngine.dll)

HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKLM_Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\ConduitEngine.dll)

HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

HKLM_Toolbar|{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6} (C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.dll)

HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x)

HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?)

HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)

HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x)

HKLM_ElevationPolicy\{813C71B5-19A1-4DBD-82A0-2E51448E3814} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (?)

HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?)

HKLM_ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} - C:\Program Files\ClickPotatoLite\bin\10.0.659.0\Weather.exe (x)

HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.)

HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)

HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?)

HKLM_Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} - "ClickPotato" (C:\Program Files\ClickPotatoLite\bin\10.0.659.0\ClickPotatoLiteSABHO.dll,201)

HKLM_Extensions\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} - "ShopperReports - Compare product prices" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll,203)

HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)

HKLM_Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} - "ShopperReports - Compare travel rates" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll,201)

BHO\{0069B690-7A2B-41C5-98CA-9F535B4C8532} - "The blinkx Toolbar" (C:\Program Files\blinkx Remote Toolbar\the_blinkx_bho.dll)

BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll)

BHO\{258C9770-1713-4021-8D7E-1F184A2BD754} - "ShoppingReport2" (C:\Program Files\ShoppingReport2\Bin\2.7.32\ShoppingReport.dll)

BHO\{30F9B915-B755-4826-820B-08FBA6BD249D} - "Conduit Engine" (C:\Program Files\ConduitEngine\ConduitEngine.dll)

BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll)

BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll)

BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

 

C:\Ad-Report-SCAN[1].txt - 18/03/2011 03:41:11 (17855 Octet(s))

 

Fin à: 03:42:03, 18/03/2011

 

============== E.O.F ==============

 

je vais à présent passer à l'étape du nettoyage,

Merci

pear Devil Member !

pear

Posté(e)
Posté(e) (modifié)

Pour moi, c'est du jamais vu!

 

Essayez de lancer Ad_remover avec droits Admin.

 

Normalement, après le scan, vous cliquez "quitter" puis sur le raccourci "Ad_R" sur le bureau puis "Nettoyer"

Modifié par pear
merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Pour moi, c'est du jamais vu!

 

Essayez de lancer Ad_remover avec droits Admin.

 

Normalement, après le scan, vous cliquez "quitter" puis sur le raccourci "Ad_R" sur le bureau puis "Nettoyer"

Voila je refait tout du début

j'ai désinstaller tout

je le réinstaleraisce soir

merci encore

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Bonjourà tous,

Voila les résultats

Jéai fait 1 scan

puis 1 nétoyage et un re-scan.

et voiçi ce qu'il en ressort

 

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 01/03/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF

 

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 10:36:58 le 21/03/2011, Mode normal

 

Microsoft® Windows Vista™ Édition Familiale Premium (X86)

jamel@PC-DE-JAMEL (Acer Aspire M1600)

 

============== RECHERCHE ==============

 

 

 

 

 

============== SCAN ADDITIONNEL ==============

 

**** Internet Explorer Version [7.0.6000.16982] ****

 

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896

HKCU_Main|Start Page - hxxp://google.be/

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm

HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Start Page - hxxp://fr.msn.com/

HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} (x)

HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...)

HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x)

HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?)

HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)

HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x)

HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?)

HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.)

HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)

HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?)

HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)

BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll)

BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll)

BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll)

BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

 

C:\Ad-Report-SCAN[1].txt - 21/03/2011 11:15:22 (4349 Octet(s))

 

Fin à: 11:16:48, 21/03/2011

 

============== E.O.F ==============

 

 

Et pour le 2 èmme :roll:

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 01/03/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF

 

C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 13:32:28 le 21/03/2011, Mode normal

 

Microsoft® Windows Vista™ Édition Familiale Premium (X86)

jamel@PC-DE-JAMEL (Acer Aspire M1600)

 

============== RECHERCHE ==============

 

 

 

 

 

============== SCAN ADDITIONNEL ==============

 

**** Internet Explorer Version [7.0.6000.16982] ****

 

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896

HKCU_Main|Start Page - hxxp://fr.msn.com/

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm

HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Start Page - hxxp://fr.msn.com/

HKCU_URLSearchHooks|{F08555B0-9CC3-11D2-AA8E-000000000567} (x)

HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

HKCU_SearchScopes\{72A1A00B-12D8-4488-6D15-C5A40642CA} - "Enter Search Term..." (hxxp://toolbar.blinkx.com/search?query={searchTerms}&refer=toolbar_ie7&domainid=...)

HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKCU_Toolbar\WebBrowser|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKLM_Toolbar|{A057A204-BACC-4D26-C39E-35F1D2A32EC8} (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll)

HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

HKCU_ElevationPolicy\{F06CA265-E93F-41B1-8DC0-8316BD6D491F} - C:\Program Files\DivX\DivX Plus Web Player\dwpBroker.exe (x)

HKLM_ElevationPolicy\{0C5365B7-358F-402d-A440-F1270AEF1175} - C:\ProgramData\EmailNotifier\EmailNotifier.exe (?)

HKLM_ElevationPolicy\{2ed6129f-f1b6-4708-a0fa-863836515ada} - C:\Program Files\Common Files\Supportsoft\bin\sprthelper.exe (SupportSoft, Inc.)

HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x)

HKLM_ElevationPolicy\{9EC8A041-8BD6-4f3e-9FA5-F25893A6E04F} - C:\ProgramData\Megaupload\Megauper.exe (?)

HKLM_ElevationPolicy\{D802E3EF-2513-4661-972E-BAD737EFBA88} - C:\Program Files\DivX\DivX OVS Helper\OVSHelperBroker.exe (DivX, LLC.)

HKLM_ElevationPolicy\{E6D65E6A-6CD0-40CF-9066-3C0C4C6484E0} - C:\Program Files\Belgacom\agent\bin\bcont_nm.exe (SupportSoft, Inc.)

HKLM_Extensions\{5067A26B-1337-4436-8AFE-EE169C2DA79F} - "?" (?)

HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)

BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll)

BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll)

BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)

BHO\{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - "Megaupload Toolbar" (C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL)

BHO\{bf00e119-21a3-4fd1-b178-3b8537e75c92} - "IeMonitorBho Class" (C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll)

BHO\{ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - "ChromeFrame BHO" (C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 17 Fichier(s)

 

C:\Ad-Report-CLEAN[1].txt - 21/03/2011 11:17:35 (4600 Octet(s))

C:\Ad-Report-SCAN[1].txt - 21/03/2011 11:15:22 (4487 Octet(s))

C:\Ad-Report-SCAN[2].txt - 21/03/2011 13:32:39 (4482 Octet(s))

 

Fin à: 13:33:37, 21/03/2011

 

============== E.O.F ==============

 

 

 

 

Voila que faire à présent?

Merci encore :bigglasses:

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...