Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

CPU à plus de 100% et yoyotte.

merci pour votre aide
 Partager

Messages recommandés

pear Devil Member !

pear

Posté(e)
Posté(e)

Ad_R avait donc bien fait son travail.:super:

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

Exécuter avec droits d'administrateur.

Sous Vista , désactiver l'Uac

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant de mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

mbam.jpg

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Et un fichier Mbam.log apparaitra

 

 

 

Nettoyage

Relancez Mbam(Malewares'Bytes)

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

 

 

ensuite nouveau Zhpdiag, svp.

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Version de la base de données: 6151

 

Windows 6.0.6000

Internet Explorer 7.0.6000.16982

 

24/03/2011 16:14:26

mbam-log-2011-03-24 (16-14-26).txt

 

Type d'examen: Examen complet (C:\|D:\|E:\|L:\|)

Elément(s) analysé(s): 365182

Temps écoulé: 2 heure(s), 36 minute(s), 1 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 2

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

c:\Windows\System32\repair-pro.exe (Rogue.ErrorRepairProfessional) -> Quarantined and deleted successfully.

l:\system volume information\_restore{1209f1c0-2de9-47db-a59c-f06bdb114164}\RP31\A0012545.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.

 

 

 

 

 

Ad_R avait donc bien fait son travail.:super:

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

Exécuter avec droits d'administrateur.

Sous Vista , désactiver l'Uac

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant de mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

mbam.jpg

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Et un fichier Mbam.log apparaitra

 

 

 

Nettoyage

Relancez Mbam(Malewares'Bytes)

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

 

 

ensuite nouveau Zhpdiag, svp.

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Bonsoir,

Voici ce qui ressort du scan

Bien à vous et merci encore :roll:

 

 

Rapport de ZHPDiag v1.27.1832 par Nicolas Coolman, Update du 24/03/2011

Run by jamel at 24/03/2011 16:58:47

Web site : ZHPDiag Outil de diagnostic

Contact : nicolascoolman@yahoo.fr

 

 

---\\ Web Browser

MSIE: Internet Explorer v7.0.6000.16982 (Defaut)

GCIE: Google Chrome v10.0.648.151

GCIE: Google Chrome Frame v10.0.648.151

 

---\\ System Information

Windows Vista Home Premium Edition, 32-bit (Build 6000)

Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1022 MB (35% free)

System Restore: Activé (Enable)

System drive C: has 32 GB (28%) free of 112 GB

 

---\\ Logged in mode

Computer Name: PC-DE-JAMEL

User Name: jamel

All Users Names: jamel, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Users\jamel\AppData\Roaming

%LocalAppData%=C:\Users\jamel\AppData\Local

%StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 112 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go)

E:\ CD-ROM drive (Not Inserted)

F:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 7 Go)

G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

L:\ Hard drive, Flash drive, Thumb drive (Free 74 Go of 233 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520]

[MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744]

[MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512]

[MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224]

[MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048]

[MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360]

 

 

 

---\\ Processus lancés

[MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]

[MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320]

[MD5.E2724029D3648C2EB226D16678727FA9] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256]

[MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704]

[MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440]

[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]

[MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]

[MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632]

[MD5.88C44CA9A052AEAEC0C91A57CE5AB41A] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304]

[MD5.FF7F14FDA901090E337488A1900E3660] - (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe [151040]

[MD5.3BD9A5E2020F84253C21B554AE8E01AB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [641536]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé)

G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé)

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} Clé orpheline

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll

O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe

O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline

O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKCU\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\jamel\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe

O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe

O4 - Global Startup: C:\Users\jamel\Desktop\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe

O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.)

O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: (CLTNetCnService) - Clé orpheline

O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe

O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe

[MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700}

O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee

O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}

O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75}

O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75}

O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35}

O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}

O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36}

O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643}

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8}

O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA}

O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com

O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0}

O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series

O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual

O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner

O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D}

O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}

O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47}

O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799}

O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293}

O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9

O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047}

O42 - Logiciel: Google Toolbar for Firefox - (.Google Inc..) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}

O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide

O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}

O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin

O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E}

O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3

O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F}

O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}

O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E}

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}

O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar

O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}

O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005

O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}

O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD}

O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4}

O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE}

O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}

O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7}

O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57}

O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C}

O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403}

O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}

O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1}

O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder

O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}

O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}

O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision

O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo

O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp

O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D}

O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0

O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF}

O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series

O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}

O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E}

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}

O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player

O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1

O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}

O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ABBYY]

[HKCU\Software\ACD Systems]

[HKCU\Software\ALWIL Software]

[HKCU\Software\Acer]

[HKCU\Software\Ad-Remover]

[HKCU\Software\Adobe]

[HKCU\Software\Alibaba]

[HKCU\Software\AppDataLow\Google]

[HKCU\Software\AppDataLow\Software\DivXNetworks]

[HKCU\Software\AppDataLow\Software\DivX]

[HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Softonic_France]

[HKCU\Software\AppDataLow\Software\Yahoo]

[HKCU\Software\AppDataLow\Software\settings]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Bugsplat]

[HKCU\Software\CDDB]

[HKCU\Software\Camfrog]

[HKCU\Software\CanonBJ]

[HKCU\Software\Catbytes Software]

[HKCU\Software\Classes.crx]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Crystal Decisions]

[HKCU\Software\CyberLink]

[HKCU\Software\Cygnus Solutions]

[HKCU\Software\Digimarc]

[HKCU\Software\DivXNetworks]

[HKCU\Software\DivX]

[HKCU\Software\EPSON]

[HKCU\Software\GNU]

[HKCU\Software\GRETECH]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Génération 5]

[HKCU\Software\Hofmann]

[HKCU\Software\IM Providers]

[HKCU\Software\JavaSoft]

[HKCU\Software\Leadertech]

[HKCU\Software\LogiShrd]

[HKCU\Software\Logitech]

[HKCU\Software\MEGAUPLOADER]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MegauploadToolbar]

[HKCU\Software\Megaupload]

[HKCU\Software\MimarSinan]

[HKCU\Software\Mindscape]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\MyHeritage.com]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\Opera Software]

[HKCU\Software\Orange]

[HKCU\Software\Piriform]

[HKCU\Software\PoivY]

[HKCU\Software\Policies]

[HKCU\Software\RealNetworks]

[HKCU\Software\Realtek]

[HKCU\Software\SSPrint]

[HKCU\Software\STOIK Imagic 30]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Stoik]

[HKCU\Software\SubSystems]

[HKCU\Software\SupportSoft]

[HKCU\Software\Symantec]

[HKCU\Software\Sysinternals]

[HKCU\Software\The Complete Genealogy Reporter]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VoipCheapCom]

[HKCU\Software\Wget]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yahoo]

[HKCU\Software\cybelsoft]

[HKCU\Software\eBay]

[HKCU\Software\eMule]

[HKCU\Software\keyhole.com]

[HKLM\Software\ABBYY]

[HKLM\Software\ACD Systems]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\ALWIL Software]

[HKLM\Software\Acer Inc.]

[HKLM\Software\Acer]

[HKLM\Software\Adobe]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Compedia]

[HKLM\Software\Crystal Decisions]

[HKLM\Software\CyberLink]

[HKLM\Software\DivXNetworks]

[HKLM\Software\DivX]

[HKLM\Software\EPSON]

[HKLM\Software\EpsonNet]

[HKLM\Software\GEAR Software]

[HKLM\Software\GNU]

[HKLM\Software\GRETECH]

[HKLM\Software\Google]

[HKLM\Software\Hulabee]

[HKLM\Software\Imikimi]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Khronos]

[HKLM\Software\Kutoka]

[HKLM\Software\LiberTV]

[HKLM\Software\LightScribe]

[HKLM\Software\LogiShrd]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Megaupload Limited]

[HKLM\Software\Megaupload]

[HKLM\Software\Micro Application]

[HKLM\Software\MimarSinan]

[HKLM\Software\Mindscape]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\MyHeritage.com]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\Nullsoft]

[HKLM\Software\ODBC]

[HKLM\Software\Policies]

[HKLM\Software\RealNetworks]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\SEC]

[HKLM\Software\SEIKO EPSON CORPORATION]

[HKLM\Software\SPanel]

[HKLM\Software\SRS Labs]

[HKLM\Software\SSPrint]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\SamsungMaster]

[HKLM\Software\Samsung]

[HKLM\Software\Secure]

[HKLM\Software\Skype]

[HKLM\Software\Softonic_France]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\SupportSoft]

[HKLM\Software\Swearware]

[HKLM\Software\Symantec]

[HKLM\Software\The Learning Company]

[HKLM\Software\TrendMicro]

[HKLM\Software\VideoLAN]

[HKLM\Software\WinRAR]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\Yahoo]

[HKLM\Software\ZSMC]

[HKLM\Software\cybelsoft]

[HKLM\Software\eZee]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint

O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems

O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc

O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone

O43 - CFD: 21/03/2011 - 10:36:58 - [92062695] ----D- C:\Program Files\Ad-Remover

O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe

O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba

O43 - CFD: 4/06/2010 - 20:22:10 - [144361794] ----D- C:\Program Files\Alwil Software

O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom

O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour

O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog

O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha

O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner

O43 - CFD: 9/03/2011 - 18:52:14 - [848944467] ----D- C:\Program Files\Common Files

O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia

O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink

O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX

O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay

O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule

O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson

O43 - CFD: 9/03/2011 - 19:01:02 - [168424485] ----D- C:\Program Files\Epson Software

O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet

O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi

O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 22/03/2011 - 0:17:14 - [895677548] ----D- C:\Program Files\Google

O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6

O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH

O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann

O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee

O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi

O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod

O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes

O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java

O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech

O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com

O43 - CFD: 24/03/2011 - 13:16:48 - [4921783] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP

O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload

O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar

O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application

O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 30/12/2010 - 17:23:26 - [272588467] ----D- C:\Program Files\Microsoft SQL Server

O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape

O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker

O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN

O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage

O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru

O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1

O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack

O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com

O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real

O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek

O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari

O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung

O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype

O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France

O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro

O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN

O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom

O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp

O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender

O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal

O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live

O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail

O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT

O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR

O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo!

O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY

O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR

O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects

O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared

O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON

O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 8/01/2010 - 21:21:08 - [39202830] ----D- C:\Program Files\Common Files\logishrd

O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems

O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real

O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype

O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft

O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System

O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared

O43 - CFD: 9/03/2011 - 18:52:14 - [1859874] ----D- C:\ProgramData\ABBYY

O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe

O43 - CFD: 4/06/2010 - 20:14:22 - [13505506] ----D- C:\ProgramData\Alwil Software

O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple

O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay

O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier

O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON

O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 25/03/2010 - 9:27:00 - [6937500] ----D- C:\ProgramData\Google

O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee

O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield

O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd

O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com

O43 - CFD: 23/09/2009 - 0:38:36 - [6463665] ----D- C:\ProgramData\Malwarebytes

O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 16/03/2011 - 8:27:56 - [500634187] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage

O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS

O43 - CFD: 24/03/2011 - 16:21:32 - [2053053] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation

O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real

O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe

O43 - CFD: 28/01/2010 - 16:16:22 - [27167901] ----D- C:\ProgramData\Skype

O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun

O43 - CFD: 23/09/2009 - 0:01:20 - [6233781] ----D- C:\ProgramData\SupportSoft

O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec

O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL

O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip

O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems

O43 - CFD: 5/01/2011 - 12:48:02 - [17303688] ----D- C:\Users\jamel\AppData\Roaming\Adobe

O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM

O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer

O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog

O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX

O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss

O43 - CFD: 20/03/2011 - 0:56:42 - [7831] ----D- C:\Users\jamel\AppData\Roaming\Epson

O43 - CFD: 25/03/2010 - 9:27:48 - [890] ----D- C:\Users\jamel\AppData\Roaming\Google

O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0

O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee

O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities

O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield

O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech

O43 - CFD: 22/09/2009 - 22:41:04 - [160369] ----D- C:\Users\jamel\AppData\Roaming\Macromedia

O43 - CFD: 23/09/2009 - 0:38:48 - [1368933] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes

O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs

O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar

O43 - CFD: 16/03/2011 - 9:13:32 - [3420854] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft

O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage

O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera

O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip

O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre

O43 - CFD: 24/03/2011 - 11:01:00 - [486674] ----D- C:\Users\jamel\AppData\Roaming\PoivY

O43 - CFD: 18/01/2011 - 16:22:42 - [2366867] ----D- C:\Users\jamel\AppData\Roaming\Real

O43 - CFD: 24/03/2011 - 16:18:58 - [19883543] ----D- C:\Users\jamel\AppData\Roaming\Skype

O43 - CFD: 24/03/2011 - 16:02:52 - [122504] ----D- C:\Users\jamel\AppData\Roaming\skypePM

O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB

O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc

O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom

O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409]

O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24]

O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560]

O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920]

O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672]

O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368]

O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928]

O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160]

O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736]

O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976]

O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312]

O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272]

O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656]

O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960]

O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096]

O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0]

O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734]

O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144]

O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165]

O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920]

O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756]

O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872]

O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392]

O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504]

O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488]

O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696]

O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392]

O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306]

O44 - LFC:[MD5.38EF1200D8DC457600FCFD7F0CF01200] - 24/03/2011 - 16:57:57 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1476893]

O44 - LFC:[MD5.AE04CF777F1F4FCFE5C424F6C2A78D1D] - 24/03/2011 - 16:55:40 ---A- . (...) -- C:\Ad-Report-SCAN[3].txt [4684]

O44 - LFC:[MD5.D286B44E536D4F528365E07DEBF89202] - 24/03/2011 - 16:20:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.38A40AB1E59516AFFCAB8BC3C84C9BD5] - 24/03/2011 - 16:20:45 ---A- . (...) -- C:\Windows\PFRO.log [139538]

O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 24/03/2011 - 13:16:44 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]

O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 24/03/2011 - 13:16:41 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]

O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796]

O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428]

O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068]

O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652]

O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302]

O44 - LFC:[MD5.32FCF71EDF4AA4149EA017C17E0632E5] - 21/03/2011 - 13:33:37 ---A- . (...) -- C:\Ad-Report-SCAN[2].txt [4620]

O44 - LFC:[MD5.CD0BCCC2FE477777BE1415F863706C02] - 21/03/2011 - 11:19:03 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [4600]

O44 - LFC:[MD5.51C1BDEFF408C562DDD78FF17DB188F8] - 21/03/2011 - 11:16:48 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [4487]

O44 - LFC:[MD5.F982B58FC2CC7F2B4DADFC0ACEA13270] - 16/03/2011 - 22:44:49 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0]

O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965]

O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098]

O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847]

O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572]

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]

O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]

O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]

O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]

O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]

O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]

O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]

O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280]

O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632]

O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608]

O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]

O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]

O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]

O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]

O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]

O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512]

O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656]

O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]

O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]

O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264]

O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]

O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]

O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184]

O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592]

O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504]

O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]

O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]

O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover

O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: RSIT - (.random/random.)

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER

O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS

O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS

O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK

O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC

O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP

O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL

O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL

O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO

O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR

O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP

O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15

O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD

O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO

O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR

O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR

O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV

O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20

O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS

O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV

O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP

O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT

O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS

O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY

O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM

O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH

O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113

O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER

O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV

O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD

O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB

O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET

O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP

O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS

O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE

O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX

O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6

O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} - (Enter Search Term...) - blinkx Search

O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe

O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe

O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe

O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe

O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex

O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 21754 - (24/03/2011)

 

[HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Trojan.HumourCanine

[HKLM\Software\Classes\CLSID\{1cd6b362-8731-47b4-9e4f-d51377629c07}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Adware.BHO

[HKLM\Software\Classes\CLSID\{b5db4f86-dc85-48d1-bdb4-661e1ae5c625}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{bcc5376b-a466-439b-886d-3e10dc1b56a5}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{c9e52dae-9726-42f2-a0a5-db62fa3aa63e}] =>PUP.Eorezo

[HKLM\Software\Classes\toolband.easyhidebtn] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.easyhidebtn.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.localizer] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.localizer.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighter] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighter.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighterstatistics] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighterstatistics.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.skypeiehelper] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.skypeiehelper.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.snameproxy] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.snameproxy.1] =>Toolbar.Agent

[HKLM\Software\Classes\TypeLib\{937936af-28ca-4973-b8ae-f250406149a2}] =>Adware.BHO

[HKLM\Software\sec] =>Rogue.Multiple

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 22/03/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe

SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by jamel at 24/03/2011 17:02:32

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys partmgr.sys volmgr.sys ecache.sys volsnap.sys Ntfs.sys

1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851AD418]

3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848F0350]

5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x83F688B8]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by jamel at 24/03/2011 17:02:34

Use the desktop link 'MBRCheck' to have full report

Dump file Name : C:\PhysicalDisk0_MBR.bin

 

 

 

End of the scan (1308 lines in 03mn 47s)(0)

merci pour votre aide Junior Member

merci pour votre aide

Posté(e)
  • Auteur
Posté(e)

Bonsoir,

Voici ce qui ressort du scan

Bien à vous et merci encore :roll:

 

 

Rapport de ZHPDiag v1.27.1832 par Nicolas Coolman, Update du 24/03/2011

Run by jamel at 24/03/2011 16:58:47

Web site : ZHPDiag Outil de diagnostic

Contact : nicolascoolman@yahoo.fr

 

 

---\\ Web Browser

MSIE: Internet Explorer v7.0.6000.16982 (Defaut)

GCIE: Google Chrome v10.0.648.151

GCIE: Google Chrome Frame v10.0.648.151

 

---\\ System Information

Windows Vista Home Premium Edition, 32-bit (Build 6000)

Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1022 MB (35% free)

System Restore: Activé (Enable)

System drive C: has 32 GB (28%) free of 112 GB

 

---\\ Logged in mode

Computer Name: PC-DE-JAMEL

User Name: jamel

All Users Names: jamel, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Users\jamel\AppData\Roaming

%LocalAppData%=C:\Users\jamel\AppData\Local

%StartMenu%=C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 32 Go of 112 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 105 Go of 111 Go)

E:\ CD-ROM drive (Not Inserted)

F:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 7 Go)

G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

L:\ Hard drive, Flash drive, Thumb drive (Free 74 Go of 233 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2010 18:36:32.) -- C:\Windows\Explorer.exe [2923520]

[MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744]

[MD5.C7A318E74FEF945EBFF855C1513CD96C] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/12/2010 19:35:16.) -- C:\Windows\System32\wininet.dll [832512]

[MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224]

[MD5.4F4FCB8B6EA06784FB6D475B7EC7300F] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2/11/2006 10:49:36.) -- C:\Windows\System32\drivers\atapi.sys [19048]

[MD5.3F379380A4A2637F559444E338CF1B51] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2/11/2006 10:51:47.) -- C:\Windows\System32\drivers\ntfs.sys [1056360]

 

 

 

---\\ Processus lancés

[MD5.7B878518590E826F1F3A5B1D61D405F8] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3396624]

[MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320]

[MD5.E2724029D3648C2EB226D16678727FA9] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256]

[MD5.1E46DE368077036247A1B000A6CCDE9B] - (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe [9275704]

[MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440]

[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]

[MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]

[MD5.C071905121F6DE5F399550FC70138FEC] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634632]

[MD5.88C44CA9A052AEAEC0C91A57CE5AB41A] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [304304]

[MD5.FF7F14FDA901090E337488A1900E3660] - (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe [151040]

[MD5.3BD9A5E2020F84253C21B554AE8E01AB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Users\jamel\Desktop\ZHPDiag\ZHPDiag.exe [641536]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@divx.com/DivX OVS Helper,version=1.0.0] - (.DivX, LLC. - DivX OVS Helper Plug-in.) -- C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll

P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.732] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.732] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.732] - (.RealNetworks, Inc. - 6.0.12.732.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] Yahoo! Search - Web Search

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G2 - GCE: Preference [user Data\Default] [fnjbmmemklcjgepojigaapkoodmkgbae] DivX HiQ v.2.1.0.900 (Activé)

G2 - GCE: Preference [user Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.1 (Activé)

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} Clé orpheline

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll

O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} . (.MEGAUPLOAD - MegaUpload Toolbar.) -- C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe

O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe

O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline

O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKCU\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [VoipCheapCom] . (.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\voipcheapcom.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [EPSON SX420W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCE.exe

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\jamel\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe

O4 - Global Startup: C:\Users\jamel\Desktop\MyHeritage Family Tree Builder.lnk . (.MyHeritage.) -- C:\Program Files\MyHeritage\Bin\MyHeritage.exe

O4 - Global Startup: C:\Users\jamel\Desktop\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe

O4 - Global Startup: C:\Users\jamel\Desktop\Skype.lnk . (...) -- C:\Windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{AFAC914D-9E83-4A89-8ABE-427521C82CCF}\SafariIco.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk . (.eBay Inc..) -- C:\Program Files\eBay\Turbo Lister2\tl.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PoivY.lnk . (.PoivY.) -- C:\Program Files\PoivY.com\PoivY\PoivY.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} . (.not file.) - (.not file.)

O9 - Extra button: Skype add-on for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico

O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{90B5514A-6464-43C8-B65B-CDB5579EECC7}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files\Google\Chrome Frame\Application\10.0.648.151\npchrome_frame.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: (CLTNetCnService) - Clé orpheline

O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: (gupdate1ca3cfbd4ab600c) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: (maconfservice) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.5.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: (sprtsvc_belgacom) . (.SupportSoft, Inc. - SupportSoft Agent Service.) - C:\Program Files\Belgacom\bin\sprtsvc.exe

O23 - Service: (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: (SupportSoft RemoteAssist) . (.SupportSoft, Inc. - ssrc Module.) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeLogonTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.B7EE47B4D960BF55BDD7EC1812373872] [APT] [RealUpgradeScheduledTaskS-1-5-21-36507394-1560046576-463853896-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.E62C2677834D1109C30BF639BDEC8CD2] [APT] [{04C5CDA8-F990-4CCB-B896-53C9EFA78DF2}] (.Pas de propriétaire.) -- C:\Windows\System32\GkSui20.exe

[MD5.BF9EAB227D409CE1E75C23BB10CF5DBC] [APT] [{3A02ECA5-A359-4300-998C-4D142A2C04DC}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- ABBYY FineReader 9.0 Sprint

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM] -- {F9000000-0018-0000-0000-074957833700}

O42 - Logiciel: ACDSee - (.Pas de propriétaire.) [HKLM] -- ACDSee

O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}

O42 - Logiciel: Acer Picture Slide DVD - (.Pas de propriétaire.) [HKLM] -- {41581EF5-45A7-11DA-9D78-000129760D75}

O42 - Logiciel: Acer Plug and Record - (.Pas de propriétaire.) [HKLM] -- {F6EFFB76-4A07-11DA-9D78-000129760D75}

O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35}

O42 - Logiciel: Acer Zone Main Page - (.CyberLink Corp..) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}

O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36}

O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643}

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 7.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Belgacom Genius - (.SupportSoft.) [HKLM] -- {FDE9FC7A-BF6D-4347-850D-05A16E6FEE17}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8}

O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CRSetupX86 - (.Default Company Name.) [HKLM] -- {35209B21-DD2D-49C2-A37A-D19B55F02AEA}

O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM] -- DivX Setup.divx.com

O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0}

O42 - Logiciel: Désinstaller l'imprimante EPSON SX420W Series - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX420W Series

O42 - Logiciel: EPSON SX420W Series Manuel - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Manual

O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner

O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {39F58DDB-B2B8-4B86-AF20-4706A80EB30D}

O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}

O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM] -- {03B8AA32-F23C-4178-B8E6-09ECD07EAA47}

O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799}

O42 - Logiciel: EpsonNet Setup 3.2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {C9D8A041-2963-4B31-8FFC-1500F3DB9293}

O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQL9

O42 - Logiciel: GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892) - (.Microsoft Corporation.) [HKLM] -- KB970892_SQLTools9

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google SketchUp 7 - (.Google, Inc..) [HKLM] -- {5AD045DF-11AA-473D-B4AA-2A4F0E213047}

O42 - Logiciel: Google Toolbar for Firefox - (.Google Inc..) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Chrome Frame - (.Google Inc..) [HKLM] -- Google Chrome Frame

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}

O42 - Logiciel: Guide réseau pour EPSON SX420W Series - (.Pas de propriétaire.) [HKLM] -- EPSON SX420W Series Network Guide

O42 - Logiciel: Hofmann 7.0 - (.Hofmann.) [HKLM] -- {29C3A4FD-5F61-4138-AB90-AB36360BBC1A}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Imikimi Plugin - (.Pas de propriétaire.) [HKLM] -- Imikimi Plugin

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}

O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: L'atelier créatif de Lapin Malin - (.Pas de propriétaire.) [HKLM] -- L'atelier créatif de Lapin Malin

O42 - Logiciel: Lapin Malin Initiation à l'anglais Maternelle - (.Pas de propriétaire.) [HKLM] -- {FECF47C9-E521-420B-8186-70441FE7D69E}

O42 - Logiciel: Lapin Malin Maternelle 3 - (.Pas de propriétaire.) [HKLM] -- Lapin Malin Maternelle 3

O42 - Logiciel: Les formes et les couleurs - (.Pas de propriétaire.) [HKLM] -- {97866725-0588-4C6C-8FDC-0FC5E8FAF27F}

O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}

O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {0810B8B7-7539-41D3-983E-6127FCF1CC9E}

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}

O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar

O42 - Logiciel: Micro Application - Atlas 3D du Corps humain - (.Pas de propriétaire.) [HKLM] -- human3d

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office XP Professional avec FrontPage - (.Microsoft Corporation.) [HKLM] -- {9028040C-6000-11D3-8CFE-0050048383C9}

O42 - Logiciel: Microsoft SQL Server 2005 - (.Microsoft Corporation.) [HKLM] -- Microsoft SQL Server 2005

O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (EZEENEXTGEN) - (.Microsoft Corporation.) [HKLM] -- {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}

O42 - Logiciel: Microsoft SQL Server 2005 Tools Express Edition - (.Microsoft Corporation.) [HKLM] -- {2750B389-A2D2-4953-99CA-27C1F2A8E6FD}

O42 - Logiciel: Microsoft SQL Server Native Client - (.Microsoft Corporation.) [HKLM] -- {BD68F46D-8A82-4664-8E68-F87C55BDEFD4}

O42 - Logiciel: Microsoft SQL Server Setup Support Files (English) - (.Microsoft Corporation.) [HKLM] -- {53F5C3EE-05ED-4830-994B-50B2F0D50FCE}

O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM] -- {56B4002F-671C-49F4-984C-C760FE3806B5}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {D7BF3B76-EEF9-4868-9B2B-42ABF60B279A}

O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7}

O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57}

O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C}

O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403}

O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}

O42 - Logiciel: Montpellier Business Plan Classic - (.Montpellier Business Plan Classic.) [HKLM] -- {EDA1C1F7-F27E-4B20-B9BC-39964452DBB1}

O42 - Logiciel: MyHeritage Family Tree Builder - (.MyHeritage.com.) [HKLM] -- Family Tree Builder

O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}

O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}

O42 - Logiciel: NVIDIA Pilote 3D Vision 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision

O42 - Logiciel: NVIDIA Pilote graphique 266.58 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo

O42 - Logiciel: Nimo Codecs Pack v5.0 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- NimoCorp

O42 - Logiciel: Ollo et la Tomate Géante - (.Hulabee Entertainment.) [HKLM] -- Ollo et la Tomate Géante

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: PoivY - (.Finarea S.A. Switzerland.) [HKLM] -- PoivY_is1

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {3D9892BB-A751-4E48-ADC8-E4289956CE1D}

O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0

O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Safari - (.Apple Inc..) [HKLM] -- {AFAC914D-9E83-4A89-8ABE-427521C82CCF}

O42 - Logiciel: Samsung CLP-300 Series - (.Samsung Electronics CO.,LTD.) [HKLM] -- Samsung CLP-300 Series

O42 - Logiciel: Samsung Master - (.Samsung.) [HKLM] -- {AEC0CEBC-0FC7-4716-8222-1C4A742719B1}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Skype web features - (.Skype Technologies S.A..) [HKLM] -- {541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}

O42 - Logiciel: Skype™ 4.1 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Turbo Lister 2 - (. eBay Inc..) [HKLM] -- {8927E07C-97F7-4A54-88FB-D976F50DD46E}

O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}

O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player

O42 - Logiciel: VoipCheapCom - (.Finarea S.A. Switzerland.) [HKLM] -- VoipCheapCom_is1

O42 - Logiciel: WinRAR 4.00 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}

O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM] -- eMule Plus_is1

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ABBYY]

[HKCU\Software\ACD Systems]

[HKCU\Software\ALWIL Software]

[HKCU\Software\Acer]

[HKCU\Software\Ad-Remover]

[HKCU\Software\Adobe]

[HKCU\Software\Alibaba]

[HKCU\Software\AppDataLow\Google]

[HKCU\Software\AppDataLow\Software\DivXNetworks]

[HKCU\Software\AppDataLow\Software\DivX]

[HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Softonic_France]

[HKCU\Software\AppDataLow\Software\Yahoo]

[HKCU\Software\AppDataLow\Software\settings]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Bugsplat]

[HKCU\Software\CDDB]

[HKCU\Software\Camfrog]

[HKCU\Software\CanonBJ]

[HKCU\Software\Catbytes Software]

[HKCU\Software\Classes.crx]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Crystal Decisions]

[HKCU\Software\CyberLink]

[HKCU\Software\Cygnus Solutions]

[HKCU\Software\Digimarc]

[HKCU\Software\DivXNetworks]

[HKCU\Software\DivX]

[HKCU\Software\EPSON]

[HKCU\Software\GNU]

[HKCU\Software\GRETECH]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Génération 5]

[HKCU\Software\Hofmann]

[HKCU\Software\IM Providers]

[HKCU\Software\JavaSoft]

[HKCU\Software\Leadertech]

[HKCU\Software\LogiShrd]

[HKCU\Software\Logitech]

[HKCU\Software\MEGAUPLOADER]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MegauploadToolbar]

[HKCU\Software\Megaupload]

[HKCU\Software\MimarSinan]

[HKCU\Software\Mindscape]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\MyHeritage.com]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\Opera Software]

[HKCU\Software\Orange]

[HKCU\Software\Piriform]

[HKCU\Software\PoivY]

[HKCU\Software\Policies]

[HKCU\Software\RealNetworks]

[HKCU\Software\Realtek]

[HKCU\Software\SSPrint]

[HKCU\Software\STOIK Imagic 30]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Stoik]

[HKCU\Software\SubSystems]

[HKCU\Software\SupportSoft]

[HKCU\Software\Symantec]

[HKCU\Software\Sysinternals]

[HKCU\Software\The Complete Genealogy Reporter]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VoipCheapCom]

[HKCU\Software\Wget]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yahoo]

[HKCU\Software\cybelsoft]

[HKCU\Software\eBay]

[HKCU\Software\eMule]

[HKCU\Software\keyhole.com]

[HKLM\Software\ABBYY]

[HKLM\Software\ACD Systems]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\ALWIL Software]

[HKLM\Software\Acer Inc.]

[HKLM\Software\Acer]

[HKLM\Software\Adobe]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Compedia]

[HKLM\Software\Crystal Decisions]

[HKLM\Software\CyberLink]

[HKLM\Software\DivXNetworks]

[HKLM\Software\DivX]

[HKLM\Software\EPSON]

[HKLM\Software\EpsonNet]

[HKLM\Software\GEAR Software]

[HKLM\Software\GNU]

[HKLM\Software\GRETECH]

[HKLM\Software\Google]

[HKLM\Software\Hulabee]

[HKLM\Software\Imikimi]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Khronos]

[HKLM\Software\Kutoka]

[HKLM\Software\LiberTV]

[HKLM\Software\LightScribe]

[HKLM\Software\LogiShrd]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Megaupload Limited]

[HKLM\Software\Megaupload]

[HKLM\Software\Micro Application]

[HKLM\Software\MimarSinan]

[HKLM\Software\Mindscape]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\MyHeritage.com]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\Nullsoft]

[HKLM\Software\ODBC]

[HKLM\Software\Policies]

[HKLM\Software\RealNetworks]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\SEC]

[HKLM\Software\SEIKO EPSON CORPORATION]

[HKLM\Software\SPanel]

[HKLM\Software\SRS Labs]

[HKLM\Software\SSPrint]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\SamsungMaster]

[HKLM\Software\Samsung]

[HKLM\Software\Secure]

[HKLM\Software\Skype]

[HKLM\Software\Softonic_France]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\SupportSoft]

[HKLM\Software\Swearware]

[HKLM\Software\Symantec]

[HKLM\Software\The Learning Company]

[HKLM\Software\TrendMicro]

[HKLM\Software\VideoLAN]

[HKLM\Software\WinRAR]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\Yahoo]

[HKLM\Software\ZSMC]

[HKLM\Software\cybelsoft]

[HKLM\Software\eZee]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 9/03/2011 - 22:08:46 - [181167419] ----D- C:\Program Files\ABBYY FineReader 9.0 Sprint

O43 - CFD: 24/11/2009 - 23:02:20 - [8882409] ----D- C:\Program Files\ACD Systems

O43 - CFD: 22/09/2009 - 22:42:52 - [360448] ----D- C:\Program Files\Acer Inc

O43 - CFD: 18/04/2007 - 20:56:24 - [131393933] ----D- C:\Program Files\Acer Zone

O43 - CFD: 21/03/2011 - 10:36:58 - [92062695] ----D- C:\Program Files\Ad-Remover

O43 - CFD: 24/01/2011 - 14:34:30 - [74251747] ----D- C:\Program Files\Adobe

O43 - CFD: 22/10/2009 - 18:40:02 - [4370847] ----D- C:\Program Files\Alibaba

O43 - CFD: 4/06/2010 - 20:22:10 - [144361794] ----D- C:\Program Files\Alwil Software

O43 - CFD: 23/09/2009 - 0:18:10 - [2221118] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 23/09/2009 - 0:01:30 - [17925403] ----D- C:\Program Files\Belgacom

O43 - CFD: 27/06/2010 - 10:54:08 - [599949] ----D- C:\Program Files\Bonjour

O43 - CFD: 10/07/2010 - 20:02:22 - [0] ----D- C:\Program Files\Camfrog

O43 - CFD: 8/11/2009 - 8:40:14 - [14387013] ----D- C:\Program Files\CapAlpha

O43 - CFD: 26/09/2009 - 13:01:04 - [2686948] ----D- C:\Program Files\CCleaner

O43 - CFD: 9/03/2011 - 18:52:14 - [848944467] ----D- C:\Program Files\Common Files

O43 - CFD: 19/02/2010 - 13:37:36 - [332643] ----D- C:\Program Files\Compedia

O43 - CFD: 18/04/2007 - 20:55:50 - [4321792] ----D- C:\Program Files\CyberLink

O43 - CFD: 24/01/2011 - 14:32:14 - [82352529] ----D- C:\Program Files\DivX

O43 - CFD: 22/09/2009 - 22:56:30 - [92049991] ----D- C:\Program Files\eBay

O43 - CFD: 1/12/2009 - 20:48:22 - [18216196] ----D- C:\Program Files\eMule

O43 - CFD: 9/03/2011 - 18:58:30 - [17180894] ----D- C:\Program Files\epson

O43 - CFD: 9/03/2011 - 19:01:02 - [168424485] ----D- C:\Program Files\Epson Software

O43 - CFD: 9/03/2011 - 18:50:36 - [33177046] ----D- C:\Program Files\EpsonNet

O43 - CFD: 10/07/2010 - 20:01:34 - [0] ----D- C:\Program Files\eSobi

O43 - CFD: 17/03/2010 - 0:50:38 - [682777] ----D- C:\Program Files\eZee

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 22/03/2011 - 0:17:14 - [895677548] ----D- C:\Program Files\Google

O43 - CFD: 22/09/2009 - 22:57:44 - [97958452] ----D- C:\Program Files\Google SketchUp 6

O43 - CFD: 29/03/2010 - 14:44:58 - [0] ----D- C:\Program Files\GRETECH

O43 - CFD: 24/11/2009 - 22:48:06 - [196916353] ----D- C:\Program Files\Hofmann

O43 - CFD: 9/10/2010 - 9:44:32 - [144831972] ----D- C:\Program Files\Hulabee

O43 - CFD: 21/02/2010 - 12:16:36 - [3372334] ----D- C:\Program Files\Imikimi

O43 - CFD: 9/03/2011 - 19:01:00 - [55982488] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 12/12/2010 - 23:47:42 - [3251342] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 27/06/2010 - 11:02:14 - [1566659] ----D- C:\Program Files\iPod

O43 - CFD: 27/06/2010 - 11:03:04 - [126934801] ----D- C:\Program Files\iTunes

O43 - CFD: 13/06/2010 - 18:18:14 - [88678839] ----D- C:\Program Files\Java

O43 - CFD: 8/01/2010 - 21:21:38 - [83260870] ----D- C:\Program Files\Logitech

O43 - CFD: 16/03/2011 - 7:49:16 - [5657562] ----D- C:\Program Files\ma-config.com

O43 - CFD: 24/03/2011 - 13:16:48 - [4921783] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 22/09/2009 - 22:58:18 - [18856573] ----D- C:\Program Files\MBP

O43 - CFD: 23/09/2009 - 0:23:26 - [7309138] ----D- C:\Program Files\Megaupload

O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar

O43 - CFD: 28/02/2010 - 9:32:00 - [10821611] ----D- C:\Program Files\Micro Application

O43 - CFD: 9/01/2010 - 16:34:06 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 12/12/2010 - 18:43:52 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 2/11/2006 - 13:37:36 - [92804023] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 22/09/2009 - 22:58:58 - [157093346] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 30/12/2010 - 17:23:26 - [272588467] ----D- C:\Program Files\Microsoft SQL Server

O43 - CFD: 12/12/2010 - 17:38:44 - [150650442] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 17/03/2010 - 0:52:56 - [1042289] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 7/10/2010 - 16:41:22 - [682285922] ----D- C:\Program Files\Mindscape

O43 - CFD: 12/12/2010 - 23:47:32 - [99153006] ----D- C:\Program Files\Movie Maker

O43 - CFD: 18/12/2009 - 21:23:38 - [0] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 2/11/2006 - 13:37:36 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 2/11/2006 - 13:37:36 - [3272760] ----D- C:\Program Files\MSN

O43 - CFD: 12/12/2010 - 16:57:32 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/01/2011 - 4:47:38 - [58254289] ----D- C:\Program Files\MyHeritage

O43 - CFD: 24/11/2009 - 19:14:48 - [0] ----D- C:\Program Files\MyPlayCity.ru

O43 - CFD: 16/03/2011 - 11:06:42 - [0] ----D- C:\Program Files\Navilog1

O43 - CFD: 24/01/2011 - 14:25:56 - [41491409] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 9/01/2010 - 16:11:52 - [832021] ----D- C:\Program Files\NimoCodec Pack

O43 - CFD: 16/03/2011 - 8:02:02 - [323291136] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 21/02/2010 - 11:38:50 - [3688680] ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 22/09/2009 - 23:00:34 - [26348518] ----D- C:\Program Files\PoivY.com

O43 - CFD: 27/06/2010 - 10:58:28 - [76388512] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/03/2010 - 21:06:46 - [82973891] ----D- C:\Program Files\Real

O43 - CFD: 18/04/2007 - 20:23:08 - [12703843] ----D- C:\Program Files\Realtek

O43 - CFD: 2/11/2006 - 13:37:36 - [37755649] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 27/06/2010 - 10:51:56 - [42155440] ----D- C:\Program Files\Safari

O43 - CFD: 24/11/2009 - 23:21:56 - [507551875] ----D- C:\Program Files\Samsung

O43 - CFD: 28/01/2010 - 16:16:46 - [37555845] R---D- C:\Program Files\Skype

O43 - CFD: 24/01/2011 - 14:15:44 - [4136771] ----D- C:\Program Files\Softonic_France

O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 16/03/2011 - 11:49:08 - [801672] ----D- C:\Program Files\trend micro

O43 - CFD: 2/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 29/03/2010 - 14:38:20 - [78593361] ----D- C:\Program Files\VideoLAN

O43 - CFD: 31/12/2010 - 16:07:28 - [15330706] ----D- C:\Program Files\VoipCheapCom

O43 - CFD: 24/01/2011 - 14:28:48 - [0] ----D- C:\Program Files\Winamp

O43 - CFD: 2/11/2006 - 13:42:34 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 2/11/2006 - 13:42:34 - [2761216] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 2/11/2006 - 13:42:34 - [4453808] ----D- C:\Program Files\Windows Defender

O43 - CFD: 2/11/2006 - 13:42:34 - [7078008] ----D- C:\Program Files\Windows Journal

O43 - CFD: 9/01/2010 - 16:34:00 - [45938529] ----D- C:\Program Files\Windows Live

O43 - CFD: 9/01/2010 - 16:33:34 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 12/12/2010 - 23:47:40 - [9073256] ----D- C:\Program Files\Windows Mail

O43 - CFD: 30/12/2010 - 18:07:44 - [4492391] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 22/09/2009 - 22:37:36 - [7940176] ----D- C:\Program Files\Windows NT

O43 - CFD: 2/11/2006 - 13:42:34 - [13463714] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 30/12/2010 - 18:07:44 - [6503190] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 16/03/2011 - 8:27:38 - [4146065] ----D- C:\Program Files\WinRAR

O43 - CFD: 22/09/2009 - 22:40:04 - [224296] ----D- C:\Program Files\Yahoo!

O43 - CFD: 9/03/2011 - 18:52:14 - [8098844] ----D- C:\Program Files\Common Files\ABBYY

O43 - CFD: 5/01/2011 - 14:55:08 - [92832907] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 5/01/2011 - 12:25:34 - [30826314] ----D- C:\Program Files\Common Files\Adobe AIR

O43 - CFD: 27/06/2010 - 11:02:08 - [101249055] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 17/03/2010 - 0:44:26 - [74970525] ----D- C:\Program Files\Common Files\Business Objects

O43 - CFD: 18/04/2007 - 20:31:40 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 14/01/2011 - 23:36:00 - [29547609] ----D- C:\Program Files\Common Files\DivX Shared

O43 - CFD: 9/03/2011 - 18:50:08 - [1962641] ----D- C:\Program Files\Common Files\EPSON

O43 - CFD: 22/09/2009 - 22:42:48 - [7108545] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 13/06/2010 - 18:19:58 - [1231815] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 18/04/2007 - 20:48:22 - [7146110] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 8/01/2010 - 21:21:08 - [39202830] ----D- C:\Program Files\Common Files\logishrd

O43 - CFD: 12/12/2010 - 17:57:42 - [306489034] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 18/04/2007 - 20:47:56 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 24/01/2011 - 14:25:54 - [2125824] ----D- C:\Program Files\Common Files\NewTech Infosystems

O43 - CFD: 14/01/2011 - 23:34:02 - [4800816] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 30/03/2010 - 21:07:02 - [21487918] ----D- C:\Program Files\Common Files\Real

O43 - CFD: 2/11/2006 - 12:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 28/01/2010 - 16:16:28 - [1959208] ----D- C:\Program Files\Common Files\Skype

O43 - CFD: 2/11/2006 - 12:18:34 - [41100711] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 22/09/2009 - 23:40:24 - [14350307] ----D- C:\Program Files\Common Files\SupportSoft

O43 - CFD: 2/10/2009 - 8:35:04 - [459012] ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD: 12/12/2010 - 23:47:40 - [18680386] ----D- C:\Program Files\Common Files\System

O43 - CFD: 9/01/2010 - 16:30:28 - [33159522] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 30/03/2010 - 21:06:34 - [352256] ----D- C:\Program Files\Common Files\xing shared

O43 - CFD: 9/03/2011 - 18:52:14 - [1859874] ----D- C:\ProgramData\ABBYY

O43 - CFD: 5/01/2011 - 14:54:50 - [18718310] ----D- C:\ProgramData\Adobe

O43 - CFD: 4/06/2010 - 20:14:22 - [13505506] ----D- C:\ProgramData\Alwil Software

O43 - CFD: 23/09/2009 - 0:16:54 - [116067840] ----D- C:\ProgramData\Apple

O43 - CFD: 27/06/2010 - 11:01:58 - [120446360] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 19/01/2010 - 10:23:14 - [156836] --H-D- C:\ProgramData\CanonBJ

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 24/01/2011 - 14:32:20 - [5060166] ----D- C:\ProgramData\DivX

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 23/10/2009 - 2:29:42 - [499594641] ----D- C:\ProgramData\eBay

O43 - CFD: 8/10/2009 - 10:09:46 - [1716189] ----D- C:\ProgramData\EmailNotifier

O43 - CFD: 9/03/2011 - 18:47:44 - [9482657] ----D- C:\ProgramData\EPSON

O43 - CFD: 18/04/2007 - 20:57:36 - [420] ----D- C:\ProgramData\eSobi

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 25/03/2010 - 9:27:00 - [6937500] ----D- C:\ProgramData\Google

O43 - CFD: 9/10/2010 - 9:45:34 - [312] ----D- C:\ProgramData\Hulabee

O43 - CFD: 22/09/2009 - 22:42:58 - [184] ----D- C:\ProgramData\InstallShield

O43 - CFD: 11/01/2010 - 6:34:12 - [12948624] ----D- C:\ProgramData\LogiShrd

O43 - CFD: 16/03/2011 - 7:49:06 - [1251107] ----D- C:\ProgramData\ma-config.com

O43 - CFD: 23/09/2009 - 0:38:36 - [6463665] ----D- C:\ProgramData\Malwarebytes

O43 - CFD: 8/10/2009 - 15:34:12 - [1062261] ----D- C:\ProgramData\Megaupload

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 16/03/2011 - 8:27:56 - [500634187] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 2/10/2009 - 8:26:50 - [57028] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 22/09/2009 - 22:37:36 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 23/01/2011 - 13:02:12 - [102376] ----D- C:\ProgramData\MyHeritage

O43 - CFD: 8/01/2010 - 21:11:30 - [0] ----D- C:\ProgramData\NOS

O43 - CFD: 24/03/2011 - 16:21:32 - [2053053] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 16/03/2011 - 7:58:38 - [564433] ----D- C:\ProgramData\NVIDIA Corporation

O43 - CFD: 18/01/2011 - 16:22:50 - [974831] ----D- C:\ProgramData\Real

O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe

O43 - CFD: 28/01/2010 - 16:16:22 - [27167901] ----D- C:\ProgramData\Skype

O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 2/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 13/06/2010 - 18:20:02 - [119] ----D- C:\ProgramData\Sun

O43 - CFD: 23/09/2009 - 0:01:20 - [6233781] ----D- C:\ProgramData\SupportSoft

O43 - CFD: 2/10/2009 - 8:33:52 - [2362] ----D- C:\ProgramData\Symantec

O43 - CFD: 2/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 9/03/2011 - 19:01:58 - [3498] ----D- C:\ProgramData\UDL

O43 - CFD: 16/03/2011 - 9:28:36 - [0] ----D- C:\ProgramData\WinZip

O43 - CFD: 24/11/2009 - 23:03:02 - [219799] ----D- C:\Users\jamel\AppData\Roaming\ACD Systems

O43 - CFD: 5/01/2011 - 12:48:02 - [17303688] ----D- C:\Users\jamel\AppData\Roaming\Adobe

O43 - CFD: 7/10/2009 - 9:52:52 - [0] ----D- C:\Users\jamel\AppData\Roaming\AdobeUM

O43 - CFD: 18/11/2010 - 14:43:08 - [500649] ----D- C:\Users\jamel\AppData\Roaming\Apple Computer

O43 - CFD: 1/11/2009 - 13:42:00 - [2186] ----D- C:\Users\jamel\AppData\Roaming\Camfrog

O43 - CFD: 9/12/2010 - 0:01:18 - [187677389] ----D- C:\Users\jamel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O43 - CFD: 15/01/2011 - 0:18:56 - [198712] ----D- C:\Users\jamel\AppData\Roaming\DivX

O43 - CFD: 18/01/2011 - 16:24:20 - [199] ----D- C:\Users\jamel\AppData\Roaming\dvdcss

O43 - CFD: 20/03/2011 - 0:56:42 - [7831] ----D- C:\Users\jamel\AppData\Roaming\Epson

O43 - CFD: 25/03/2010 - 9:27:48 - [890] ----D- C:\Users\jamel\AppData\Roaming\Google

O43 - CFD: 21/02/2010 - 13:39:32 - [169] ----D- C:\Users\jamel\AppData\Roaming\gtk-2.0

O43 - CFD: 9/10/2010 - 9:45:44 - [13030] ----D- C:\Users\jamel\AppData\Roaming\Hulabee

O43 - CFD: 22/09/2009 - 22:40:14 - [0] ----D- C:\Users\jamel\AppData\Roaming\Identities

O43 - CFD: 23/09/2009 - 0:21:40 - [0] ----D- C:\Users\jamel\AppData\Roaming\InstallShield

O43 - CFD: 8/01/2010 - 21:21:22 - [353] ----D- C:\Users\jamel\AppData\Roaming\Leadertech

O43 - CFD: 22/09/2009 - 22:41:04 - [160369] ----D- C:\Users\jamel\AppData\Roaming\Macromedia

O43 - CFD: 23/09/2009 - 0:38:48 - [1368933] ----D- C:\Users\jamel\AppData\Roaming\Malwarebytes

O43 - CFD: 2/11/2006 - 13:37:36 - [0] ----D- C:\Users\jamel\AppData\Roaming\Media Center Programs

O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar

O43 - CFD: 16/03/2011 - 9:13:32 - [3420854] -S--D- C:\Users\jamel\AppData\Roaming\Microsoft

O43 - CFD: 23/01/2011 - 4:48:54 - [177836419] ----D- C:\Users\jamel\AppData\Roaming\MyHeritage

O43 - CFD: 26/09/2009 - 18:51:52 - [66780] ----D- C:\Users\jamel\AppData\Roaming\Opera

O43 - CFD: 23/10/2010 - 15:46:56 - [4741] ----D- C:\Users\jamel\AppData\Roaming\PeaZip

O43 - CFD: 21/02/2010 - 13:48:48 - [315] ----D- C:\Users\jamel\AppData\Roaming\PhotoFiltre

O43 - CFD: 24/03/2011 - 11:01:00 - [486674] ----D- C:\Users\jamel\AppData\Roaming\PoivY

O43 - CFD: 18/01/2011 - 16:22:42 - [2366867] ----D- C:\Users\jamel\AppData\Roaming\Real

O43 - CFD: 24/03/2011 - 16:18:58 - [19883543] ----D- C:\Users\jamel\AppData\Roaming\Skype

O43 - CFD: 24/03/2011 - 16:02:52 - [122504] ----D- C:\Users\jamel\AppData\Roaming\skypePM

O43 - CFD: 23/01/2011 - 4:47:42 - [0] ----D- C:\Users\jamel\AppData\Roaming\The Complete Genealogy Reporter - FTB

O43 - CFD: 14/03/2011 - 17:53:42 - [476111] ----D- C:\Users\jamel\AppData\Roaming\vlc

O43 - CFD: 31/12/2009 - 21:15:40 - [9493] ----D- C:\Users\jamel\AppData\Roaming\VoipCheapCom

O43 - CFD: 16/03/2011 - 8:23:52 - [12] ----D- C:\Users\jamel\AppData\Roaming\WinRAR

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.DBE115AF04CEE6C9FE0ED16E15781758] - 1/03/2011 - 16:40:12 ---A- . (...) -- C:\Windows\System32\tmpBCDCE.FOT [1409]

O44 - LFC:[MD5.0CFA676C2F4531FE461D83AD36D541CF] - 1/03/2011 - 16:41:24 ---A- . (...) -- C:\Windows\AM_D8.PRF [24]

O44 - LFC:[MD5.366A2EA447373EFB12367C0052DDA3CA] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Compiler, Version 266.58.) -- C:\Windows\System32\nvcompiler.dll [13011560]

O44 - LFC:[MD5.573582617805B054167E41A094D950BF] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvBridge.kmd [10920]

O44 - LFC:[MD5.2653A6D88657A787AECAC91F617EFC41] - 16/03/2011 - 7:56:42 ---A- . (.NVIDIA Corporation - NVIDIA NVAPI Library, Version 266.58.) -- C:\Windows\System32\nvapi.dll [1965672]

O44 - LFC:[MD5.5D36D2505C7A4E72C08119B663E265B0] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 266.58.) -- C:\Windows\System32\nvcuvenc.dll [2251368]

O44 - LFC:[MD5.0C00908DCA4AF819363661822551A2F4] - 16/03/2011 - 7:56:45 ---A- . (.NVIDIA Corporation - NVIDIA Compatible CUDA Driver, Version 266..) -- C:\Windows\System32\nvcuda.dll [4941928]

O44 - LFC:[MD5.AD999C41C640C1A1C0EBC9D28EF99AFA] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\Windows\System32\nvdispco322090.dll [941160]

O44 - LFC:[MD5.1D1B9770844C8C9D16A7DF920BB5C3DC] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\Windows\System32\nvgenco322040.dll [837736]

O44 - LFC:[MD5.ACDD621A8F2125FBA12FFAFF71C829EB] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 266.5.) -- C:\Windows\System32\nvcuvid.dll [2895976]

O44 - LFC:[MD5.C1E5776BEBD37AA3972EA928108680E1] - 16/03/2011 - 7:56:46 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Vista WDDM D3D Driver, Ve.) -- C:\Windows\System32\nvd3dum.dll [10078312]

O44 - LFC:[MD5.465B0A4783BFCE47094703B281BC1B23] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\System32\nvoglv32.dll [15047272]

O44 - LFC:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 16/03/2011 - 7:56:47 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10467656]

O44 - LFC:[MD5.C27B101CE759EADB667A7AD765CB8A25] - 16/03/2011 - 7:56:48 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\Windows\System32\OpenCL.dll [57960]

O44 - LFC:[MD5.D8C110C1C311BA02303338BDC460158A] - 16/03/2011 - 7:56:48 ---A- . (.NVIDIA Corporation - NVIDIA Compatible D3D10 Driver, Version 266.) -- C:\Windows\System32\nvwgf2um.dll [5653096]

O44 - LFC:[MD5.933222B19FF3E7EA5F65517EA1F7D57E] - 16/03/2011 - 8:16:47 ---A- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf [3]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:09 --HA- . (...) -- C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 8:17:14 --HA- . (...) -- C:\Windows\System32\drivers\Msft_Kernel_dc3d_01009.Wdf [0]

O44 - LFC:[MD5.1B1C78FCCDA006E4FEBECE6998DAC357] - 16/03/2011 - 8:24:46 ---A- . (...) -- C:\Windows\setupact.log [4734]

O44 - LFC:[MD5.25BD4B23BB811853DABA648CE0F7CCA4] - 16/03/2011 - 9:21:24 ---A- . (...) -- C:\prefs.js [144]

O44 - LFC:[MD5.C310E8BB8BCF5745287C013002DDFEA1] - 24/08/2006 - 9:49:34 ---A- . (...) -- C:\Windows\System32\cramv120.exe [540165]

O44 - LFC:[MD5.E62C2677834D1109C30BF639BDEC8CD2] - 4/06/2006 - 17:33:34 ---A- . (...) -- C:\Windows\System32\GkSui20.EXE [81920]

O44 - LFC:[MD5.D8183B48E4383A49F4CA57BA7D8E18B5] - 8/01/2011 - 4:27:00 ---A- . (...) -- C:\Windows\System32\nvinfo.pb [4756]

O44 - LFC:[MD5.6B0AB7A6B700D128FD66153C3FBCA75F] - 9/03/2011 - 18:44:51 ---A- . (.SEIKO EPSON CORP. - EPSON Scanner device co-installer.) -- C:\Windows\System32\escdev.dll [15872]

O44 - LFC:[MD5.51F7E818BF3482F8E7E53F1CE531F164] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - EPSON Scan Device Application Utility.) -- C:\Windows\System32\esdevapp.exe [128392]

O44 - LFC:[MD5.45DE9A41A49F57682BE8DC0EB9DB734C] - 9/03/2011 - 18:44:51 ---A- . (.Seiko Epson Corporation - Epson WIA Module.) -- C:\Windows\System32\esw2ud.dll [341504]

O44 - LFC:[MD5.B6BB59BC2FDE1646632A24076BA91AEC] - 9/03/2011 - 18:46:21 ---A- . (.SEIKO EPSON CORPORATION - ECBTEGB x86.) -- C:\Windows\System32\E_FD4BGCE.DLL [63488]

O44 - LFC:[MD5.F4F3EAE16AE6FD93E1F22DF295E2A7FC] - 9/03/2011 - 18:46:25 ---A- . (.SEIKO EPSON CORPORATION - EPSON Bi-directional Monitor x86.) -- C:\Windows\System32\E_FLBGCE.DLL [93696]

O44 - LFC:[MD5.A622A7F07406723EC2A34D8E2788A5EA] - 9/03/2011 - 18:46:30 ---A- . (.SEIKO EPSON CORP. - E_DCINST.) -- C:\Windows\System32\E_DCINST.DLL [8192]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\enppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:34 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enpres.dll [251392]

O44 - LFC:[MD5.B17DC579EB3948462E8E35F26FB2D32B] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppmon.dll [474892]

O44 - LFC:[MD5.C3193F47101B8198A2798F478A2EFA41] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Port Monitor DLL.) -- C:\Windows\System32\ensppui.dll [457611]

O44 - LFC:[MD5.550BA8EAED86480D8C66B7A2E09AD4A9] - 9/03/2011 - 18:50:35 ---A- . (.SEIKO EPSON CORPORATION - EpsonNet Print Resource DLL.) -- C:\Windows\System32\enspres.dll [251392]

O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 9/03/2011 - 19:00:37 ---A- . (...) -- C:\Windows\setup.iss [306]

O44 - LFC:[MD5.38EF1200D8DC457600FCFD7F0CF01200] - 24/03/2011 - 16:57:57 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1476893]

O44 - LFC:[MD5.AE04CF777F1F4FCFE5C424F6C2A78D1D] - 24/03/2011 - 16:55:40 ---A- . (...) -- C:\Ad-Report-SCAN[3].txt [4684]

O44 - LFC:[MD5.D286B44E536D4F528365E07DEBF89202] - 24/03/2011 - 16:20:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.38A40AB1E59516AFFCAB8BC3C84C9BD5] - 24/03/2011 - 16:20:45 ---A- . (...) -- C:\Windows\PFRO.log [139538]

O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 24/03/2011 - 13:16:44 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]

O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 24/03/2011 - 13:16:41 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]

O44 - LFC:[MD5.07BB1B455F0FA52F86856D08F3196242] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1643796]

O44 - LFC:[MD5.FBA514ABCE9B28B0F00ABCA381A4F720] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121428]

O44 - LFC:[MD5.3F24FD5692827624515719FB9A294B09] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [135068]

O44 - LFC:[MD5.0BEE12947D3E7726CBBBFD11323D7D23] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656652]

O44 - LFC:[MD5.7F86305A77D5DEA8BAB7BC3AB32FEFB3] - 24/03/2011 - 13:05:06 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [737302]

O44 - LFC:[MD5.32FCF71EDF4AA4149EA017C17E0632E5] - 21/03/2011 - 13:33:37 ---A- . (...) -- C:\Ad-Report-SCAN[2].txt [4620]

O44 - LFC:[MD5.CD0BCCC2FE477777BE1415F863706C02] - 21/03/2011 - 11:19:03 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [4600]

O44 - LFC:[MD5.51C1BDEFF408C562DDD78FF17DB188F8] - 21/03/2011 - 11:16:48 ---A- . (...) -- C:\Ad-Report-SCAN[1].txt [4487]

O44 - LFC:[MD5.F982B58FC2CC7F2B4DADFC0ACEA13270] - 16/03/2011 - 22:44:49 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.E1ED4FF9B4CAA8B3B2678A2AD87E8248] - 16/03/2011 - 18:21:54 --HA- . (...) -- C:\Windows\System32\ezsidmv.dat [56]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/03/2011 - 12:25:22 ---A- . (...) -- C:\Windows\EEventManager.INI [0]

O44 - LFC:[MD5.2161269FDFD11707ADA192E25F45A9E2] - 16/03/2011 - 11:07:14 ---A- . (...) -- C:\cleannavi.txt [965]

O44 - LFC:[MD5.848E773FF1337EF44668EB1686C6CFA9] - 16/03/2011 - 11:02:05 ---A- . (...) -- C:\Windows\ntbtlog.txt [60098]

O44 - LFC:[MD5.3A177C4973AE6999AF4A5765ADC7D32D] - 16/03/2011 - 11:01:34 ---A- . (...) -- C:\Windows\MEMORY.DMP [165816847]

O44 - LFC:[MD5.1A94F9500EA873C06A71BB5C8043196D] - 25/02/2011 - 17:15:25 ---A- . (...) -- C:\Windows\hegames.ini [572]

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\Windows\System32\lvcodec2.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \Drivers32\"msacm.l3codec"="L3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"DivXa32.acm"="DivX V4.2 WMA Audio Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

O52 - TDSD: \drivers.desc\"L3codecp.acm"="Fraunhofer MP3 codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\L3codecp.acm

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 2/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]

O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 2/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]

O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 2/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]

O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 2/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]

O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 2/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]

O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 2/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]

O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 2/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]

O58 - SDL:[MD5.CBA53C5E29AE0A0CE76F9A2BE3A40D9E] - 13/01/2011 - 9:37:09 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.317F85FB68A3BE507E9CCEDE5E6D9EE0] - 13/01/2011 - 9:37:19 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [51280]

O58 - SDL:[MD5.B6E8C5874377A42756C282FAC2E20836] - 13/01/2011 - 9:37:30 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23632]

O58 - SDL:[MD5.B93A553C9B0F14263C8F016A44C3258C] - 13/01/2011 - 9:41:16 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [294608]

O58 - SDL:[MD5.1408421505257846EB336FEEEF33352D] - 13/01/2011 - 9:40:16 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [47440]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2/11/2006 - 9:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2/11/2006 - 9:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 2/11/2006 - 9:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2/11/2006 - 9:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2/11/2006 - 9:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 2/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 2/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 2/11/2006 - 8:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]

O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 2/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 2/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]

O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 2/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 2/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 2/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 2/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 2/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]

O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]

O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 2/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]

O58 - SDL:[MD5.DD184D9ADFE2A8A21741DBDFE9E22F5C] - 30/04/2009 - 22:55:58 ---A- . (.Logitech Inc. - Logitech Webcam Software Driver.) -- C:\Windows\system32\drivers\LV302V32.SYS [2687512]

O58 - SDL:[MD5.1A7DB7A00A4B0D8DA24CD691A4547291] - 7/10/2009 - 1:46:36 ---A- . (...) -- C:\Windows\system32\drivers\LVPr2Mon.sys [25752]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 2/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 2/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 2/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 18/04/2007 - 20:47:26 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 2/11/2006 - 8:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.73A70F1D89C942EEDD99A3F10459B051] - 8/01/2011 - 4:27:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 266.58.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10467656]

O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 2/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]

O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 2/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]

O58 - SDL:[MD5.C2821F33B846A52FDC25FF554ACF11F2] - 6/02/2007 - 23:04:48 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264]

O58 - SDL:[MD5.28D3A91FE7791B970E6B15C88F98DFBD] - 6/02/2007 - 23:04:54 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]

O58 - SDL:[MD5.3A66F69459052DE13EF8A0F77D728A73] - 6/02/2007 - 23:04:50 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]

O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 2/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 2/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.AEF2FA29204056B81BC4CBF30260DEE1] - 14/02/2007 - 7:11:26 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1740904]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2/11/2006 - 7:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.DF1AF7F5F1EC7800B3AC398ACC06C754] - 24/01/2007 - 10:08:06 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\Windows\system32\drivers\SISAGPX.SYS [56184]

O58 - SDL:[MD5.F3C4C6C4DAF2212AC905475ED0F0FB1B] - 22/01/2007 - 9:09:08 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [46592]

O58 - SDL:[MD5.8321967AC1F217B8BEA4B468D191B83A] - 16/02/2007 - 6:13:06 ---A- . (.Silicon Integrated Systems Corporation - SiS VGA Kernal Mode Vista Driver.) -- C:\Windows\system32\drivers\SISGRKMD.sys [432504]

O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 2/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]

O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 2/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 2/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 2/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 2/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 2/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 2/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 2/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 2/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]

O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 2/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2/11/2006 - 8:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2/11/2006 - 8:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2/11/2006 - 8:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2/11/2006 - 8:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2/11/2006 - 8:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2/11/2006 - 8:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2/11/2006 - 8:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2/11/2006 - 8:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2/11/2006 - 8:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2/11/2006 - 8:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2/11/2006 - 8:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2/11/2006 - 8:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2/11/2006 - 8:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2/11/2006 - 8:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover

O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: RSIT - (.random/random.)

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - avast! Self Protection (aswSP) .(...) - LEGACY_ASWSP

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER

O64 - Services: CurCS - C:\ComboFix\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS

O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS

O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK

O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC

O64 - Services: CurCS - C:\Windows\system32\Drivers\DgiVecp.sys - DgiVecp (DgiVecp) .(.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) - LEGACY_DGIVECP

O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL

O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL

O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO

O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR

O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP

O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15

O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD

O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO

O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - (.not file.) - mbr (mbr) .(...) - LEGACY_MBR

O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR

O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV

O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20

O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS

O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - Pilote de classe ISA/EISA (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV

O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP

O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT

O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS

O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY

O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM

O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH

O64 - Services: CurCS - (.not file.) - PROCEXP113 (PROCEXP113) .(...) - LEGACY_PROCEXP113

O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER

O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV

O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD

O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\SISAGPX.sys - SiS AGP Filter (SISAGP) .(.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) - LEGACY_SISAGP

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB

O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET

O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT) .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP

O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG

O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\uagp35.sys - Filtre AGP version 3.5 Microsoft (uagp35) .(.Microsoft Corporation - Filtre MS AGPv3.5.) - LEGACY_UAGP35

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS

O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE

O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX

O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6

O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.com> <ComFile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.js> <JSFile>[HKCU\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {303739CD-9780-468C-B32F-2E5F96932E49} - (Yahoo! Search) - Yahoo! Search - Web Search

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {72A1A00B-12D8-4488-6D15-C5A40642CA} - (Enter Search Term...) - blinkx Search

O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "{10CF8975-3348-4535-8A94-4F28A8CA4EFD}" | In - None - P6 - TRUE | .(.CyberLink Corp. - CyberLink MCE Deluxe Suite.) -- C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe

O87 - FAEL: "{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}" | In - None - P6 - TRUE | .(.Cyberlink - PictureSlideDVD Worker.) -- C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe

O87 - FAEL: "{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}" | In - None - P6 - TRUE | .(.Cyberlink - Plug n Record.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe

O87 - FAEL: "{2BA32163-A3D0-40C4-8405-E935A60E1B57}" | In - None - P6 - TRUE | .(.Pas de propriétaire - DVAX2Process MFC Application.) -- C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe

O87 - FAEL: "TCP Query User{AE3CF6EF-1B38-45EF-84B0-5A9A66D2D61A}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P6 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "UDP Query User{89DB43AF-6D6C-4BA7-ACDD-368C631DC9FC}J:\programme\poivy.com\poivy\poivy.exe" |In - Public - P17 - TRUE | .(...) -- J:\programme\poivy.com\poivy\poivy.exe (.not file.)

O87 - FAEL: "TCP Query User{A46757D0-5227-4B68-B427-9F56DA141F0C}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "UDP Query User{18FC5DDA-F9AB-483A-BC1D-843E1167B27E}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.)

O87 - FAEL: "TCP Query User{DEDB8A7C-A4BD-45AF-8574-7C0F67E2E068}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{9253FA28-56E2-40E8-94BE-0788CA71651E}C:\program files\poivy.com\poivy\poivy.exe" | In - Public - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "TCP Query User{CCD68639-9B13-486A-9EC5-21EB20F02427}C:\program files\emule\emule.exe" | In - Public - P6 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "UDP Query User{46CD389D-36D2-45B9-9BBE-28E3306C769E}C:\program files\emule\emule.exe" | In - Public - P17 - TRUE | .(.http://emuleplus.info - eMule Plus.) -- C:\program files\emule\emule.exe

O87 - FAEL: "TCP Query User{391B7B02-23DE-432B-AAB5-A89CCF5F6A51}C:\program files\internet explorer\iexplore.exe" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "UDP Query User{9D171F3A-2BCB-480D-A33A-3305934DD25E}C:\program files\internet explorer\iexplore.exe" | In - Public - P17 - TRUE | .(.Microsoft Corporation - Internet Explorer.) -- C:\program files\internet explorer\iexplore.exe

O87 - FAEL: "{9C6B4CB7-02EE-4967-BD3C-C6302D4A65D8}" | In - Public - P6 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{E43A1948-4EA6-413E-AA8D-0FC6CA22B806}" | In - Public - P17 - TRUE | .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O87 - FAEL: "{FA6807A4-B36A-475C-B00D-832521AF8000}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{AF290B4F-3157-40C5-B51D-32F6199F3C60}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{AA501133-72D0-44E9-810A-D6BED49C16C7}" | In - Public - P6 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{2AB097E2-8B4C-45D1-B2F8-E5184BC46FC0}" | In - Public - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{948ECF4E-8AB9-4D31-AEB0-41EF5E5C6F0C}" | In - Public - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "{CA338606-3032-4E3D-822E-ABC3A4FB5AEF}" | In - Public - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\Program Files\VoipCheapCom\VoipCheapCom.exe

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "{936B2556-C28C-454C-AFC8-0F5FB93E93A5}" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "{2A95D638-2072-4887-835D-5EA46279F2D7}" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION - EpsonNet Setup.) -- C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe

O87 - FAEL: "TCP Query User{3DC2D2C7-92F7-4FD8-9CCF-6A2EF39DF916}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{F26D54D7-3CEA-46D6-B663-F2E7FED7B3A5}C:\program files\epson software\event manager\eeventmanager.exe" | In - Public - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "{3F3D226C-6E28-41A6-B627-09110653F0A0}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "TCP Query User{6F4B055A-A6B6-4198-9C06-52AB4B12EB15}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P6 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "UDP Query User{CE1C69D6-3DFF-471A-9A9C-9CEDB57BD7C1}C:\program files\poivy.com\poivy\poivy.exe" | In - Private - P17 - TRUE | .(.PoivY - Client to make VoIP calls..) -- C:\program files\poivy.com\poivy\poivy.exe

O87 - FAEL: "TCP Query User{E44E89C6-5939-4064-B70B-AF744DFBC7B0}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P6 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "UDP Query User{E361D8FE-905D-40EC-BBBA-CD4BB5B98464}C:\program files\voipcheapcom\voipcheapcom.exe" | In - Private - P17 - TRUE | .(.VoipCheapCom - Client to make VoIP calls..) -- C:\program files\voipcheapcom\voipcheapcom.exe

O87 - FAEL: "TCP Query User{307752ED-6771-4A97-9011-A5F9741CCB48}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.exe

O87 - FAEL: "UDP Query User{E640BB6C-5C6C-4F81-A787-6C89B18C6215}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\program files\epson software\event manager\eeventmanager.ex

O87 - FAEL: "{9D836672-19C6-49FC-99C0-298FB5D74E3A}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{D06CEEA6-0E51-4911-8AC1-460B087176A2}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "TCP Query User{2E2EA09D-824A-4518-B033-E72F9C26B7B4}C:\program files\java\jre6\bin\java.exe" | In - Private - P6 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "UDP Query User{392D9E9A-C02E-41CF-B49F-9912BDBE7F33}C:\program files\java\jre6\bin\java.exe" | In - Private - P17 - TRUE | .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\program files\java\jre6\bin\java.exe

O87 - FAEL: "{522DB7A7-6FD2-4A71-BE65-7B54D2DF4828}" | In - Private - P6 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O87 - FAEL: "{B8057D3E-2BBD-4D55-B1F5-C89B922E68A6}" | In - Private - P17 - TRUE | .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 21754 - (24/03/2011)

 

[HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Trojan.HumourCanine

[HKLM\Software\Classes\CLSID\{1cd6b362-8731-47b4-9e4f-d51377629c07}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Adware.BHO

[HKLM\Software\Classes\CLSID\{b5db4f86-dc85-48d1-bdb4-661e1ae5c625}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{bcc5376b-a466-439b-886d-3e10dc1b56a5}] =>PUP.Eorezo

[HKLM\Software\Classes\CLSID\{c9e52dae-9726-42f2-a0a5-db62fa3aa63e}] =>PUP.Eorezo

[HKLM\Software\Classes\toolband.easyhidebtn] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.easyhidebtn.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.localizer] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.localizer.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighter] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighter.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighterstatistics] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.namehighlighterstatistics.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.skypeiehelper] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.skypeiehelper.1] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.snameproxy] =>Toolbar.Agent

[HKLM\Software\Classes\toolband.snameproxy.1] =>Toolbar.Agent

[HKLM\Software\Classes\TypeLib\{937936af-28ca-4973-b8ae-f250406149a2}] =>Adware.BHO

[HKLM\Software\sec] =>Rogue.Multiple

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 14/05/2009 759048 | ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

SR - | Auto 29/12/2006 28672 | (AcerMemUsageCheckService) . (...) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

SR - | Auto 10/06/2010 144176 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 13/01/2011 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SR - | Auto 18/05/2010 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Auto 18/05/2010 0 | (CLTNetCnService) . (...) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 6/02/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

SR - | Auto 31/01/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

SS - | Auto 24/09/2009 133104 | (gupdate1ca3cfbd4ab600c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 22/03/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 15/06/2010 540472 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 14/12/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SR - | Auto 7/10/2009 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

SS - | Demand 10/03/2011 311744 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SR - | Auto 7/01/2011 608872 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

SR - | Auto 29/05/2008 202016 | (sprtsvc_belgacom) . (.SupportSoft, Inc..) - C:\Program Files\Belgacom\bin\sprtsvc.exe

SR - | Auto 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

SS - | Auto 29/05/2008 382320 | (SupportSoft RemoteAssist) . (.SupportSoft, Inc..) - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

SR - | Auto 2/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by jamel at 24/03/2011 17:02:32

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys partmgr.sys volmgr.sys ecache.sys volsnap.sys Ntfs.sys

1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x851AD418]

3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x848F0350]

5 acpi[0x8067332A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP1T0L0-1[0x83F688B8]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by jamel at 24/03/2011 17:02:34

Use the desktop link 'MBRCheck' to have full report

Dump file Name : C:\PhysicalDisk0_MBR.bin

 

 

 

End of the scan (1308 lines in 03mn 47s)(0)

pear Devil Member !

pear

Posté(e)
Posté(e) (modifié)

Spybot, totalement obsolète va être désinstallé.Vous garderez Mbam pour le remplacer.

Auparavant, vous devez faire ceci, avant de lancer Zhpfix:

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Sous Vista, exécuter avec privilèges Administrateur

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Effacer le contenu du dossier Snapshots(le contenu de snapshots, pas le fichier snapshots) , sous XP :

C:\Documents and Settings\All Users\Application Data\Spybot - Search &Destroy\Snapshots

Et sous Vista :

C:\ProgramData\Spybot - Search & Destroy\Snapshots

 

 

Sélectionner(Ctrl A et Ctrl C) toutes les lignes en vert ci dessous(et seulement elles)

[HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}]

[HKLM\Software\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}]

[HKLM\Software\Classes\TypeLib\{937936af-28ca-4973-b8ae-f250406149a2}]

[HKLM\Software\Classes\toolband.easyhidebtn]

[HKLM\Software\Classes\toolband.easyhidebtn.1]

[HKLM\Software\Classes\toolband.localizer]

[HKLM\Software\Classes\toolband.localizer.1]

[HKLM\Software\Classes\toolband.namehighlighter]

[HKLM\Software\Classes\toolband.namehighlighter.1]

[HKLM\Software\Classes\toolband.namehighlighterstatistics]

[HKLM\Software\Classes\toolband.namehighlighterstatistics.1]

[HKLM\Software\Classes\toolband.skypeiehelper]

[HKLM\Software\Classes\toolband.skypeiehelper.1]

[HKLM\Software\Classes\toolband.snameproxy]

[HKLM\Software\Classes\toolband.snameproxy.1]

[HKCU\Software\AppDataLow\Software\MEGAUPLOADTOOLBAR]

[HKCU\Software\MegauploadToolbar]

R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} Clé orpheline

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\Softonic_France\tbSoft.dll

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} Clé orpheline

O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll

O4 - HKLM\..\Run: [RAM_DEFRAG] Clé orpheline

O4 - HKCU\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - HKUS\S-1-5-21-36507394-1560046576-463853896-1000\..\Run: [blinkx_toolbar] C:\Program Files\blinkx Remote Toolbar\the_blinkx_toolbar.exe (.not file.)

O4 - Global Startup: C:\Users\jamel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

O23 - Service: (CLTNetCnService) - Clé orpheline

O23 - Service: (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O42 - Logiciel: Megaupload Toolbar - (.Pas de propriétaire.) [HKLM] -- MegauploadToolbar

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar

O43 - CFD: 8/10/2009 - 10:09:44 - [2123275] ----D- C:\Program Files\MegauploadToolbar

O43 - CFD: 16/03/2011 - 10:25:54 - [54794523] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 9/12/2010 - 3:56:38 - [5122] ----D- C:\ProgramData\regid.1986-12.com.adobe

O43 - CFD: 16/03/2011 - 10:30:06 - [101730] ----D- C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 8/10/2009 - 10:09:44 - [157054] ----D- C:\Users\jamel\AppData\Roaming\MegauploadToolbar

O64 - Services: CurCS - (.not file.) - kwtyraob (kwtyraob) .(...) - LEGACY_KWTYRAOB

O87 - FAEL: "TCP Query User{81284311-B1F0-4E83-AB07-415D34A739E5}C:\program files\libertv\libertv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "UDP Query User{E0682C19-AE7C-4723-A535-F6D97721D270}C:\program files\libertv\libertv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\libertv\libertv.exe (.not file.)

O87 - FAEL: "TCP Query User{2EB164DC-8D11-4E72-93A4-8482A9D0C0CC}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

O87 - FAEL: "UDP Query User{68918811-5C78-4FCE-A444-40D343AA9C34}C:\program files\alibaba\trademanager\multimedia\aliviewer.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\alibaba\trademanager\multimedia\aliviewer.exe (.not file.)

SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O87 - FAEL: "{7EB81EDD-CFA3-4CC7-9961-77DBBF918F9D}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{405954F5-A737-400D-B963-330D8756B7BF}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

 

ZHPF3.jpg

Collez (Ctrl V) les lignes vertes dans le cadre 1

Cliquez ensuite sur- PanelHelper.jpg

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

Cliquer sur "Tous" puis sur "Nettoyer" 2.

Acceptez de Redémarrer pour achever le nettoyage.

Un rapport apparait:

Capture1Rapport.JPG

Copier-coller le rapport de suppression dans la prochaine réponse.

Si le rapport n'apparait pas, Cliquer sur ce bouton:PanelBDR.jpg

 

 

Et après cela,dites nous si vos problèmes persistent, svp.

Modifié par pear

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...