Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] PC extrêmement lent sauf en mode sans échec

Jojo_Kermit
 Partager

Messages recommandés

Jojo_Kermit Junior Member

Jojo_Kermit

Posté(e)
Posté(e)

Salut,

 

Le pc portable de ma fille qui est un dell vostro est devenu quasiment inutilisable car très très lent. Il semble que Norton ait cherché à s'installer sans son accord et que son antivirus Avast se soit temporairement neutralisé.

 

Je soupçonne une infection, le disque dur reste en lecture infinie.

Seul le mode sans échec permet de travailler.

 

Si vous pouvez m'aider merci.

Je dispose d'autres PC pour correspondre avec vous.

A+

Joel

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Lancez cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Décompresser le fichier ZHPDiag.fix sur le bureau

puis double-cliquer sur le fichier ZHPDiag.exe pour installer l'outil

Sur le bureau ,il y aura 3 icôneszhp0710.png

 

Sous XP, double clic sur ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

ZHPDiag.jpg

Clic sur la Loupe pour lancer le scan

En cas de blocage sur O80, cliquez sur le tournevis pour le décocher

Postez en le rapport ZhpDiag.txt qui apparait sur le bureau

Comment poster les rapports

Vous copiez/collez tout ou partie des rapports dans un ou plusieurs messages.

Autre solution:

Aller sur le site :Ci-Jointicne2cjoint.png

Appuyez sur Parcourir et chercher les rapports sur le disque,

Ensuite appuyez sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

Jojo_Kermit Junior Member

Jojo_Kermit

Posté(e)
  • Auteur
Posté(e)

Bonsoir

voilà j'ai lancé l'application en mode sans echec car je n'arrive pas à prendre la main autrement étant donné que le disque semble travailler en permanence.

 

voici le résultat (illisible pour moi!). A bientôt

 

Rapport de ZHPDiag v1.27.1845 par Nicolas Coolman, Update du 28/03/2011

Run by Pauline at 28/03/2011 23:37:44

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.7600.16385

MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut)

GCIE: Google Chrome v9.0.597.84

 

---\\ System Information

Windows 7 Business Edition, 32-bit (Build 7600)

Processor: x86 Family 6 Model 37 Stepping 5, GenuineIntel

Operating System: 32 Bits

Boot mode: Sans échec (Fail-safe boot)

Total RAM: 2742 MB (85% free)

System Restore: Activé (Enable)

System drive C: has 130 GB (70%) free of 186 GB

 

---\\ Logged in mode

Computer Name: PAULINE-PC

User Name: Pauline

All Users Names: Pauline, HomeGroupUser$, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Users\Pauline\AppData\Roaming

%LocalAppData%=C:\Users\Pauline\AppData\Local

%StartMenu%=C:\Users\Pauline\AppData\Roaming\Microsoft\Windows\Start Menu

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 130 Go of 186 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 97 Go of 98 Go)

F:\ Floppy drive, Flash card reader, USB Key (Free 5 Go of 7 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.21/10/2010 13:22:38.) -- C:\Windows\Explorer.exe [2614272]

[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

[MD5.A7360A3B20B38F1D6A09402FB6E9E2C3] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.04/11/2010 06:52:17.) -- C:\Windows\System32\wininet.dll [978944]

[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/10/2010 13:22:38.) -- C:\Windows\System32\Winlogon.exe [285696]

[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\System32\drivers\atapi.sys [21584]

[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.14/07/2009 02:20:44.) -- C:\Windows\System32\drivers\ntfs.sys [1210432]

 

 

 

---\\ Processus lancés

[MD5.F5B5540FB7949907D2C5F406AD63A9AA] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [641536]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

M3 - MFPP: Plugins - [Pauline] -- C:\Users\Pauline\AppData\Roaming\Mozilla\Firefox\Profiles\0zhzi839.default\searchplugins\conduit.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Pauline] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 3.0.40624.0.) -- c:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Users\Pauline\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll

P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks - Pando Web Plugin.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

M0 - MFSP: prefs.js [Pauline - 0zhzi839.default] GOOGLE

M2 - MFEP: prefs.js [Pauline - 0zhzi839.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.8.1 (.Michel Gutierrez.)

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G0 - GCSP: Preference [user Data\Default] Google

G2 - GCE: Preference [user Data\Default] [hehijbfgiekmjfkfjpbkbammjbdenadd] IE Tab v.1.4.30.4 (Activé)

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} . (.Trend Micro Inc. - Trend Micro NSC IE Plug-In.) -- c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll

O2 - BHO: DigitalPersona Fingerprint Software Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} . (.DigitalPersona, Inc. - DigitalPersona OTS Feedback.) -- C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corp. - Microsoft Search Helper Extention.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [sysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [QuickSet] . (.Dell Inc. - QuickSet.) -- C:\Program Files\Dell\QuickSet\QuickSet.exe

O4 - HKLM\..\Run: [FreeFallProtection] . (.Pas de propriétaire - FF_Protection MFC Application.) -- C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe

O4 - HKLM\..\Run: [igfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll

O4 - HKLM\..\Run: [broadcom Wireless Manager UI] . (.Dell Inc. - DW WLAN Card Wireless Network Tray Applet.) -- C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe

O4 - HKLM\..\Run: [Dell Webcam Central] . (.Creative Technology Ltd - WebcamDell2.exe.) -- C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe

O4 - HKLM\..\Run: [DpAgent] . (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files\DigitalPersona\Bin\dpagent.exe

O4 - HKLM\..\Run: [OfficeScanNT Monitor] . (.Trend Micro Inc. - Trend Micro Client/Server Security Agent Mo.) -- c:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe

O4 - HKLM\..\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- c:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe

O4 - HKLM\..\Run: [PDVD9LanguageShortcut] . (.CyberLink Corp. - PowerDVD Language Application.) -- c:\Program Files\CyberLink\PowerDVD9\Language\Language.exe

O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe

O4 - HKLM\..\Run: [DBRMTray] . (.Microsoft - DbrmTrayicon.) -- C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\RunOnce: [DBRMTray] . (.Microsoft - TrayApp.) -- C:\Dell\DBRM\Reminder\TrayApp.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Pauline\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKCU\..\Run: [steam] . (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Pauline\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\..\Run: [steam] . (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk . (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office\OSA9.EXE

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Pauline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Pauline\Desktop\Aide et support - Raccourci.lnk - Clé orpheline

O4 - Global Startup: C:\Users\Pauline\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\Pauline\AppData\Local\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\Pauline\Desktop\iexplore - Raccourci.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Pauline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Pauline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{2229C5AA-13E9-4705-B070-A2B4242086D6}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{2229C5AA-13E9-4705-B070-A2B4242086D6}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} . (.Trend Micro Inc. - Trend Micro NSC IE Plug-In.) -- c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe

O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe

O23 - Service: (avast! Mail Scanner) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (avast! Web Scanner) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

O23 - Service: C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DpHost) . (.DigitalPersona, Inc. - DigitalPersona Local Host.) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe

O23 - Service: (InstallFilterService) . (...) - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe

O23 - Service: (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: (ntrtscan) . (.Trend Micro Inc. - Trend Micro Common Client Real-time Scan Se.) - c:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe

O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 189.9.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: (SeaPort) . (.Microsoft Corp. - Microsoft SeaPort Search Enhancement Broker.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

O23 - Service: (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe

O23 - Service: (Steam Client Service) . (.Valve Corporation - Steam Client Service (buildbot_winslave01_s.) - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: (stllssvr) . (.MicroVision Development, Inc. - SureThing Labelflash Disc Printer Service M.) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

O23 - Service: (svcGenericHost) . (.Trend Micro Inc. - Generic Hosted Agent Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe

O23 - Service: (tmlisten) . (.Trend Micro Inc. - Trend Micro Common Client Communication Ser.) - c:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe

O23 - Service: (TmPfw) . (.Trend Micro Inc. - Trend Micro Personal Firewall Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe

O23 - Service: (TmProxy) . (.Trend Micro Inc. - Trend Micro Proxy Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

O23 - Service: (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: (vcsFPService) . (.Validity Sensors, Inc. - VFS101 VCS API Library.) - C:\Windows\system32\vcsFPService.exe

O23 - Service: (wltrysvc) . (.Dell Inc. - DW WLAN Card Wireless Network Service.) - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2532116922-221707453-1303149430-1001Core.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2532116922-221707453-1303149430-1001UA.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SymInstallStub.job

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys

O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: Trend Micro NDIS 6.0 Filter Driver (tmlwf) . (.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fr.) - C:\Windows\System32\DRIVERS\tmlwf.sys

O41 - Driver: (tmtdi) . (.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) - C:\Windows\System32\DRIVERS\tmtdi.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys

O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Accelerometer - (.STMicroelectronics.) [HKLM] -- {87434D51-51DB-4109-B68F-A829ECDCF380}

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}

O42 - Logiciel: Advanced Audio FX Engine - (.Creative Technology Ltd.) [HKLM] -- Advanced Audio FX Engine

O42 - Logiciel: AoA Audio Extractor - (.AoAMedia.com.) [HKLM] -- {D1725D54-279A-40C5-A70D-23C1785DB920}_is1

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: Call of Duty: Black Ops - (.Treyarch.) [HKLM] -- Steam App 42700

O42 - Logiciel: Call of Duty: Black Ops - Multiplayer - (.Treyarch.) [HKLM] -- Steam App 42710

O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}

O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}

O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}

O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: DW WLAN Card Utility - (.Dell Inc..) [HKLM] -- DW WLAN Card Utility

O42 - Logiciel: Dell Backup and Recovery Manager - (.Dell Inc..) [HKLM] -- {4688EB75-28E2-4731-9BCB-55E624F7CD45}

O42 - Logiciel: Dell Edoc Viewer - (.Dell Inc.) [HKLM] -- {3138EAD3-700B-4A10-B617-B3F8096EE30D}

O42 - Logiciel: Dell Touchpad - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: Dell Webcam Central - (.Creative Technology Ltd.) [HKLM] -- Dell Webcam Central

O42 - Logiciel: DigitalPersona Personal 4.01 - (.DigitalPersona, Inc..) [HKLM] -- {3D8AE086-030F-4EF4-B705-63F8130B043E}

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}

O42 - Logiciel: Intel® Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}

O42 - Logiciel: Java 6 Update 23 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}

O42 - Logiciel: K-Lite Codec Pack 6.5.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1

O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM] -- {918A9082-6287-4D25-9002-5E5D5E4971CB}

O42 - Logiciel: Live! Cam Avatar Creator - (.Creative Technology Ltd.) [HKLM] -- {65D0C510-D7B6-4438-9FC8-E6B91115AB0D}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office 2000 SR-1 Professional - (.Microsoft Corporation.) [HKLM] -- {0001040C-78E1-11D2-B60F-006097C998E7}

O42 - Logiciel: Microsoft Office 2010 - (.Microsoft Corporation.) [HKLM] -- {95140000-0070-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13)

O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: Pando Media Booster - (.Pando Networks Inc..) [HKLM] -- {980A182F-E0A2-4A40-94C1-AE0C1235902E}

O42 - Logiciel: QuickSet32 - (.Dell Inc..) [HKLM] -- {C4972073-2BFE-475D-8441-564EA97DA161}

O42 - Logiciel: Railroad Tycoon II - (.Pas de propriétaire.) [HKLM] -- Railroad Tycoon II

O42 - Logiciel: Roxio Creator Audio - (.Roxio.) [HKLM] -- {73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}

O42 - Logiciel: Roxio Creator Copy - (.Roxio.) [HKLM] -- {B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}

O42 - Logiciel: Roxio Creator DE 10.3 - (.Roxio.) [HKLM] -- {09760D42-E223-42AD-8C3E-55B47D0DDAC3}

O42 - Logiciel: Roxio Creator DE 10.3 - (.Roxio.) [HKLM] -- {ED439A64-F018-4DD4-8BA5-328D85AB09AB}

O42 - Logiciel: Roxio Creator Data - (.Roxio.) [HKLM] -- {08E81ABD-79F7-49C2-881F-FD6CB0975693}

O42 - Logiciel: Roxio Creator Tools - (.Roxio.) [HKLM] -- {1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}

O42 - Logiciel: Roxio Express Labeler 3 - (.Roxio.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}

O42 - Logiciel: Roxio Update Manager - (.Roxio.) [HKLM] -- {30465B6C-B53F-49A1-9EBA-A3F187AD502E}

O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}

O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) [HKLM] -- SystemRequirementsLab

O42 - Logiciel: Trend Micro Client/Server Security Agent - (.Trend Micro.) [HKLM] -- {BED0B8A2-2986-49F8-90D6-FA008D37A3D2}

O42 - Logiciel: Validity Sensors DDK - (.Validity Sensors, Inc..) [HKLM] -- {9FCB6355-689E-4141-9714-3EEC2AE10292}

O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}

O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}

O42 - Logiciel: avast! Internet Security - (.Alwil Software.) [HKLM] -- avast5

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ALWIL Software]

[HKCU\Software\Adobe]

[HKCU\Software\AoAAudioExtractor]

[HKCU\Software\AppDataLow\Software\Adobe]

[HKCU\Software\AppDataLow\Software\DigitalPersona]

[HKCU\Software\AppDataLow\Software\Macromedia]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Broadcom]

[HKCU\Software\Bugsplat]

[HKCU\Software\CDDB]

[HKCU\Software\ClassesB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Creative Tech]

[HKCU\Software\Creative]

[HKCU\Software\CyberLink]

[HKCU\Software\DigitalPersona]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Haali]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\MONOGRAM]

[HKCU\Software\Macromedia]

[HKCU\Software\Macrovision]

[HKCU\Software\MediaInfo]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\Novell]

[HKCU\Software\ODBC]

[HKCU\Software\Pando Networks]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Roxio]

[HKCU\Software\STMicroelectronics]

[HKCU\Software\Sonic]

[HKCU\Software\Synaptics]

[HKCU\Software\Valve]

[HKCU\Software\Widcomm]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\madFlac]

[HKLM\Software\ALWIL Software]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Activision]

[HKLM\Software\Adobe]

[HKLM\Software\AppDataLow]

[HKLM\Software\BcmSetup]

[HKLM\Software\Broadcom]

[HKLM\Software\BrowserChoice]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Codec Tweak Tool]

[HKLM\Software\Creative Tech]

[HKLM\Software\Creative]

[HKLM\Software\CyberLink]

[HKLM\Software\Dell Computer Corporation]

[HKLM\Software\Dell]

[HKLM\Software\DigitalPersona]

[HKLM\Software\FreeFallProtection]

[HKLM\Software\GNU]

[HKLM\Software\Google]

[HKLM\Software\HaaliMkx]

[HKLM\Software\IDT]

[HKLM\Software\InstalledOptions]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\KLCodecPack]

[HKLM\Software\Lake]

[HKLM\Software\Macromedia]

[HKLM\Software\MicroVision]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\ODBC]

[HKLM\Software\Pando Networks]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\PopTop Software]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Riot Games]

[HKLM\Software\Roxio]

[HKLM\Software\STMicroelectronics]

[HKLM\Software\Sonic]

[HKLM\Software\Symantec]

[HKLM\Software\Synaptics]

[HKLM\Software\Trendmicro]

[HKLM\Software\Validity]

[HKLM\Software\Valve]

[HKLM\Software\Widcomm]

[HKLM\Software\Windows]

[HKLM\Software\mozilla.org]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 08/01/2011 - 17:47:42 - [113684709] ----D- C:\Program Files\Adobe

O43 - CFD: 22/12/2010 - 13:39:28 - [170581441] ----D- C:\Program Files\Alwil Software

O43 - CFD: 31/12/2010 - 19:04:50 - [20613536] ----D- C:\Program Files\AoA Audio Extractor

O43 - CFD: 17/01/2011 - 13:20:06 - [6933] ----D- C:\Program Files\Bing Bar Installer

O43 - CFD: 22/12/2010 - 17:53:58 - [3501304] ----D- C:\Program Files\CCleaner

O43 - CFD: 21/10/2010 - 11:41:42 - [2681921] ----D- C:\Program Files\Cisco

O43 - CFD: 15/01/2011 - 20:07:44 - [443718672] ----D- C:\Program Files\Common Files

O43 - CFD: 21/10/2010 - 11:49:34 - [14954414] ----D- C:\Program Files\Creative

O43 - CFD: 21/10/2010 - 11:48:50 - [114688] ----D- C:\Program Files\Creative Live! Cam

O43 - CFD: 21/10/2010 - 11:54:54 - [143688606] ----D- C:\Program Files\CyberLink

O43 - CFD: 21/10/2010 - 11:40:58 - [153653205] ----D- C:\Program Files\Dell

O43 - CFD: 21/10/2010 - 11:33:54 - [70181656] ----D- C:\Program Files\Dell Inc

O43 - CFD: 21/10/2010 - 11:49:28 - [264797136] ----D- C:\Program Files\Dell Webcam

O43 - CFD: 21/10/2010 - 11:51:28 - [55356939] ----D- C:\Program Files\DigitalPersona

O43 - CFD: 14/07/2009 - 11:01:44 - [83226132] ----D- C:\Program Files\DVD Maker

O43 - CFD: 22/12/2010 - 12:55:34 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 21/10/2010 - 04:29:50 - [23676546] ----D- C:\Program Files\IDT

O43 - CFD: 27/12/2010 - 20:25:08 - [37492958] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 21/10/2010 - 11:36:14 - [12749359] ----D- C:\Program Files\Intel

O43 - CFD: 22/12/2010 - 13:11:18 - [4497433] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 22/12/2010 - 19:51:48 - [90771847] ----D- C:\Program Files\Java

O43 - CFD: 25/12/2010 - 19:25:50 - [48294428] ----D- C:\Program Files\K-Lite Codec Pack

O43 - CFD: 21/10/2010 - 11:46:12 - [854520] ----D- C:\Program Files\Microsoft

O43 - CFD: 24/12/2010 - 16:18:58 - [130427137] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 21/10/2010 - 11:48:22 - [15457915] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 21/10/2010 - 11:47:12 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 21/10/2010 - 11:48:04 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 24/12/2010 - 11:08:58 - [15715] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 31/12/2010 - 18:55:04 - [29952103] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 22/12/2010 - 13:08:46 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 16/01/2011 - 18:35:40 - [1194536] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 27/12/2010 - 19:29:48 - [7476086] ----D- C:\Program Files\Pando Networks

O43 - CFD: 08/01/2011 - 13:19:46 - [136849704] ----D- C:\Program Files\Railroad Tycoon II

O43 - CFD: 14/07/2009 - 06:52:32 - [38597377] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 21/10/2010 - 11:43:12 - [18671639] ----D- C:\Program Files\Roxio

O43 - CFD: 28/03/2011 - 23:31:42 - [8442403740] ----D- C:\Program Files\Steam

O43 - CFD: 21/10/2010 - 11:36:40 - [2748830] ----D- C:\Program Files\STMicroelectronics

O43 - CFD: 21/10/2010 - 14:24:04 - [31527123] ----D- C:\Program Files\Synaptics

O43 - CFD: 16/01/2011 - 18:39:00 - [1117297] ----D- C:\Program Files\SystemRequirementsLab

O43 - CFD: 21/10/2010 - 11:53:02 - [223026290] ----D- C:\Program Files\Trend Micro

O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 21/10/2010 - 11:38:14 - [15604191] ----D- C:\Program Files\Validity Sensors

O43 - CFD: 21/10/2010 - 11:39:18 - [86627166] ----D- C:\Program Files\WIDCOMM

O43 - CFD: 14/07/2009 - 10:39:40 - [3049984] ----D- C:\Program Files\Windows Defender

O43 - CFD: 14/07/2009 - 11:01:42 - [7013496] ----D- C:\Program Files\Windows Journal

O43 - CFD: 21/10/2010 - 11:48:18 - [150952574] ----D- C:\Program Files\Windows Live

O43 - CFD: 21/10/2010 - 11:45:54 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 22/12/2010 - 13:11:18 - [6180864] ----D- C:\Program Files\Windows Mail

O43 - CFD: 22/12/2010 - 13:11:16 - [6607787] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 22/12/2010 - 12:55:34 - [12197556] ----D- C:\Program Files\Windows NT

O43 - CFD: 14/07/2009 - 10:39:40 - [4417800] ----D- C:\Program Files\Windows Photo Viewer

O43 - CFD: 14/07/2009 - 06:52:34 - [189440] ----D- C:\Program Files\Windows Portable Devices

O43 - CFD: 14/07/2009 - 10:39:40 - [6831353] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 28/03/2011 - 23:37:50 - [3636812] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 08/01/2011 - 17:47:44 - [3515373] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 21/10/2010 - 11:54:54 - [120104] ----D- C:\Program Files\Common Files\CyberLink

O43 - CFD: 24/12/2010 - 16:22:10 - [86016] ----D- C:\Program Files\Common Files\Designer

O43 - CFD: 21/10/2010 - 11:48:38 - [3719101] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 22/12/2010 - 19:52:12 - [1243079] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 24/12/2010 - 17:08:36 - [80058546] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 21/10/2010 - 11:36:16 - [166332] ----D- C:\Program Files\Common Files\postureAgent

O43 - CFD: 21/10/2010 - 11:43:12 - [4779808] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 21/10/2010 - 11:49:28 - [4221400] ----D- C:\Program Files\Common Files\Reallusion

O43 - CFD: 21/10/2010 - 11:42:58 - [34404047] ----D- C:\Program Files\Common Files\Roxio Shared

O43 - CFD: 14/07/2009 - 04:37:06 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 21/10/2010 - 11:43:00 - [1088248] ----D- C:\Program Files\Common Files\Sonic Shared

O43 - CFD: 14/07/2009 - 04:37:06 - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 15/01/2011 - 22:41:54 - [407336] ----D- C:\Program Files\Common Files\Steam

O43 - CFD: 21/10/2010 - 11:43:12 - [733792] ----D- C:\Program Files\Common Files\SureThing Shared

O43 - CFD: 24/12/2010 - 16:21:48 - [21121345] ----D- C:\Program Files\Common Files\System

O43 - CFD: 21/10/2010 - 11:43:20 - [246947660] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 08/01/2011 - 17:49:22 - [136910585] ----D- C:\ProgramData\Adobe

O43 - CFD: 22/12/2010 - 13:39:28 - [43702819] ----D- C:\ProgramData\Alwil Software

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 22/12/2010 - 12:55:34 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 25/12/2010 - 18:53:52 - [2173813] ----D- C:\ProgramData\Creative

O43 - CFD: 21/10/2010 - 11:36:12 - [64] ----D- C:\ProgramData\Dell

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 21/10/2010 - 11:51:04 - [27188736] ----D- C:\ProgramData\Downloaded Installations

O43 - CFD: 22/12/2010 - 12:55:34 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 21/10/2010 - 11:42:50 - [226] ----D- C:\ProgramData\InstallShield

O43 - CFD: 21/10/2010 - 11:51:28 - [2556410] ----D- C:\ProgramData\Macrovision

O43 - CFD: 22/12/2010 - 12:55:34 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 22/12/2010 - 15:32:42 - [1324496972] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 22/12/2010 - 12:55:34 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 07/02/2011 - 18:08:30 - [2640] ----D- C:\ProgramData\Norton

O43 - CFD: 07/02/2011 - 18:05:28 - [137516] ----D- C:\ProgramData\NortonInstaller

O43 - CFD: 22/12/2010 - 13:13:34 - [245445] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 27/12/2010 - 19:30:24 - [438] ----D- C:\ProgramData\PMB Files

O43 - CFD: 19/01/2011 - 13:34:20 - [0] ----D- C:\ProgramData\Roxio

O43 - CFD: 21/10/2010 - 11:43:00 - [627] ----D- C:\ProgramData\Sonic

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 21/10/2010 - 11:35:20 - [154] ----D- C:\ProgramData\Sun

O43 - CFD: 07/02/2011 - 18:08:30 - [155] ----D- C:\ProgramData\Symantec

O43 - CFD: 31/01/2011 - 13:54:56 - [53319] ---AD- C:\ProgramData\Temp

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 21/10/2010 - 11:43:12 - [13757796] ----D- C:\ProgramData\Uninstall

O43 - CFD: 08/01/2011 - 17:48:22 - [2804445] ----D- C:\Users\Pauline\AppData\Roaming\Adobe

O43 - CFD: 22/12/2010 - 15:15:14 - [374] ----D- C:\Users\Pauline\AppData\Roaming\Creative

O43 - CFD: 22/12/2010 - 12:55:22 - [24] ----D- C:\Users\Pauline\AppData\Roaming\DigitalPersona

O43 - CFD: 22/12/2010 - 12:56:14 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Identities

O43 - CFD: 27/12/2010 - 23:38:34 - [0] ----D- C:\Users\Pauline\AppData\Roaming\LolClient

O43 - CFD: 22/12/2010 - 13:17:16 - [1604] ----D- C:\Users\Pauline\AppData\Roaming\Macromedia

O43 - CFD: 22/12/2010 - 12:56:22 - [256] ----D- C:\Users\Pauline\AppData\Roaming\Macrovision

O43 - CFD: 14/07/2009 - 11:00:42 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Media Center Programs

O43 - CFD: 07/02/2011 - 21:44:40 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Media Player Classic

O43 - CFD: 04/02/2011 - 14:40:40 - [3017845] -S--D- C:\Users\Pauline\AppData\Roaming\Microsoft

O43 - CFD: 24/12/2010 - 16:18:58 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Microsoft Web Folders

O43 - CFD: 31/12/2010 - 18:55:20 - [4333196] ----D- C:\Users\Pauline\AppData\Roaming\Mozilla

O43 - CFD: 25/12/2010 - 18:53:52 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Reallusion

O43 - CFD: 19/01/2011 - 13:34:20 - [640] ----D- C:\Users\Pauline\AppData\Roaming\Roxio

O43 - CFD: 16/01/2011 - 18:38:36 - [1163264] ----D- C:\Users\Pauline\AppData\Roaming\SystemRequirementsLab

O43 - CFD: 21/02/2011 - 18:50:42 - [0] ----D- C:\Users\Pauline\AppData\Roaming\TP

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.4BAFBE939C07C5DA8A1D9A6A24B9E443] - 28/03/2011 - 22:35:28 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1579264]

O44 - LFC:[MD5.D3EE9D5F8DCEB5EA1F90AC20E5033E73] - 28/03/2011 - 22:35:28 ---A- . (...) -- C:\Windows\System32\perfc009.dat [109672]

O44 - LFC:[MD5.C768547D67C7DDD912D8C85E42D897B0] - 28/03/2011 - 22:35:28 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [134030]

O44 - LFC:[MD5.4876559628629AD2572B319D445A0527] - 28/03/2011 - 22:35:28 ---A- . (...) -- C:\Windows\System32\perfh009.dat [626804]

O44 - LFC:[MD5.5A70EF2D93216E430B2F6ECFC16ED0F6] - 28/03/2011 - 22:35:28 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [715236]

O44 - LFC:[MD5.B9BAAE3C543355B3CC4D0ADD137E2DCC] - 28/03/2011 - 22:34:20 ---A- . (...) -- C:\Windows\ntbtlog.txt [302766]

O44 - LFC:[MD5.F5BE3AF02146EE0C07F270B36D5F7B56] - 28/03/2011 - 22:33:42 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.828599406CC43E2B9CEC3EA83DC31718] - 28/03/2011 - 22:31:46 ---A- . (...) -- C:\tmuninst.ini [32]

O44 - LFC:[MD5.0D3D161D2364A7830CE231103365233F] - 28/03/2011 - 22:27:47 ---A- . (...) -- C:\Windows\System32\log.txt [0]

O44 - LFC:[MD5.90CD678C7F3DE1E1752AF9325F6463E8] - 28/03/2011 - 22:27:26 ---A- . (...) -- C:\Windows\setupact.log [650]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/03/2011 - 22:07:56 ---A- . (...) -- C:\Windows\setuperr.log [0]

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{c6fb935a-dcba-11df-99e5-806e6f6e6963}\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- D:\_AUTORUN\AUTORUN.exe (.not file.)

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll

O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll

O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm

O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm

O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.3C189400C996A4301C3F1BD93C9C1A17] - 03/12/2009 - 04:24:38 ---A- . (.ST Microelectronics - Accelerometer Port I/O.) -- C:\Windows\system32\drivers\Acceler.sys [41648]

O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422976]

O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]

O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]

O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14400]

O58 - SDL:[MD5.2101A86C25C154F8314B24EF49D7FBC2] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [79952]

O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]

O58 - SDL:[MD5.B81C2B5616F6420A9941EA093A92B150] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [23616]

O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]

O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]

O58 - SDL:[MD5.A0D86B8AC93EF95620420C7A24AC5344] - 07/09/2010 - 16:47:07 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]

O58 - SDL:[MD5.25ACE55B10046E9E6E9B148FA7ABD3B7] - 07/09/2010 - 16:54:16 ---A- . (.AVAST Software - avast! Filtering TDI driver.) -- C:\Windows\system32\drivers\aswFW.sys [99792]

O58 - SDL:[MD5.BD9119468C32B7ECD1E0544D3F286A73] - 07/09/2010 - 16:47:30 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [50768]

O58 - SDL:[MD5.7B948E3657BEA62E437BC46CA6EF6012] - 07/09/2010 - 16:24:46 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\Windows\system32\drivers\aswNdis.sys [12112]

O58 - SDL:[MD5.125FEBCB61D33B358AFC20866B8A9842] - 07/09/2010 - 16:53:35 ---A- . (.AVAST Software - avast! Filtering NDIS driver.) -- C:\Windows\system32\drivers\aswNdis2.sys [190416]

O58 - SDL:[MD5.69823954BBD461A73D69774928C9737E] - 07/09/2010 - 16:47:46 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23376]

O58 - SDL:[MD5.81F10376AF5F0F466F03CB2C5321B7ED] - 07/09/2010 - 16:53:58 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\system32\drivers\aswSnx.sys [340048]

O58 - SDL:[MD5.7ECC2776638B04553F9A85BD684C3ABF] - 07/09/2010 - 16:52:03 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [165584]

O58 - SDL:[MD5.095ED820A926AA8189180B305E1BCFC9] - 07/09/2010 - 16:52:25 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [46672]

O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 14/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]

O58 - SDL:[MD5.94F2DC372163D520D7B1DAD78AE40B5E] - 21/10/2010 - 10:40:40 ---A- . (.Broadcom Corporation - Broadcom iLine10 PCI Network Adapter Proxy Protocol Driver.) -- C:\Windows\system32\drivers\bcm42rly.sys [18424]

O58 - SDL:[MD5.F689C5965CEFAD780A2948546703BD5D] - 05/05/2010 - 17:28:38 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\system32\drivers\BCMWL6.SYS [2707448]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 14/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.7E826BE3B3558208D5C9B00034E51BE5] - 03/10/2009 - 03:24:12 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\system32\drivers\btwaudio.sys [86056]

O58 - SDL:[MD5.AF9148C3E844131AC954CB53FF43D971] - 29/08/2009 - 00:15:16 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\system32\drivers\btwavdt.sys [108072]

O58 - SDL:[MD5.AAFD7CB76BA61FBB08E302DA208C974A] - 07/04/2009 - 20:32:50 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\system32\drivers\btwl2cap.sys [29472]

O58 - SDL:[MD5.480B3D195854B2E55299CDDDDC50BCF9] - 29/08/2009 - 00:15:12 ---A- . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\system32\drivers\btwrchid.sys [18472]

O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]

O58 - SDL:[MD5.C716C877A528FAE6D352A7430AE0A4A4] - 17/10/2007 - 08:00:00 ---A- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdr4_xp.sys [9072]

O58 - SDL:[MD5.17CD01A8B4D0A1E6CBF4BB07CD57043C] - 17/10/2007 - 08:00:00 ---A- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdralw2k.sys [9200]

O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]

O58 - SDL:[MD5.0F538DF1673E5216F3BAACB6911D9D0F] - 28/05/2009 - 16:48:20 ---A- . (.Creative Technology Ltd. - Advanced Audio FX Driver.) -- C:\Windows\system32\drivers\CtAudDrv.sys [134144]

O58 - SDL:[MD5.9A6CA307151505730DBFC91D97F01C7E] - 15/06/2009 - 19:05:16 ---A- . (.Creative Technology Ltd. - Video Class Upper Filter Driver.) -- C:\Windows\system32\drivers\CtClsFlt.sys [143968]

O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70720]

O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]

O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]

O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 14/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]

O58 - SDL:[MD5.A88485DC6A7136C10D9A6C7E38FDFE3C] - 17/09/2009 - 18:54:14 ---A- . (.Intel Corporation - Intel® Management Engine Interface.) -- C:\Windows\system32\drivers\HECI.sys [41088]

O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]

O58 - SDL:[MD5.26541A068572F650A2FA490726FE81BE] - 04/03/2010 - 16:33:26 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\system32\drivers\iaStor.sys [435736]

O58 - SDL:[MD5.934AF4D7C5F457B9F0743F4299B77B67] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332352]

O58 - SDL:[MD5.59FA038451070172E47D0CD347F32BC4] - 22/04/2010 - 05:40:02 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd32.sys [8746496]

O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]

O58 - SDL:[MD5.2DB41BA61D5E44D0667CF126D35DCF34] - 27/10/2009 - 02:39:04 ---A- . (.Intel Corporation - Intel® Turbo Boost Technology Driver.) -- C:\Windows\system32\drivers\Impcd.sys [125696]

O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]

O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]

O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]

O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]

O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]

O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [235584]

O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]

O58 - SDL:[MD5.C5F0202A00227AECB69E722C52385FFC] - 21/10/2010 - 10:40:41 ---A- . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\system32\drivers\npf.sys [50704]

O58 - SDL:[MD5.79E97CDAE5449A59A4798FC5B006C58F] - 29/01/2010 - 00:55:04 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers\nvhda32v.sys [68200]

O58 - SDL:[MD5.9800EEE1F3474E4BD416FC813DC1827B] - 08/05/2010 - 02:52:16 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 189.90.) -- C:\Windows\system32\drivers\nvlddmkm.sys [9936616]

O58 - SDL:[MD5.3F3D04B1D08D43C16EA7963954EC768D] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117312]

O58 - SDL:[MD5.C99F251A5DE63C6F129CF71933ACED0F] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [142416]

O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383488]

O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106064]

O58 - SDL:[MD5.80B66A4181F782884A815E69D0AFA743] - 05/03/2010 - 03:42:58 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\system32\drivers\Rt86win7.sys [277536]

O58 - SDL:[MD5.31D45ECA63884FF5F7AECC50F7D1BAE0] - 10/08/2009 - 17:06:08 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\system32\drivers\RtsUStor.sys [171520]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [40016]

O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [77888]

O58 - SDL:[MD5.972F577308B006070DE8D09573DBAE53] - 27/11/2009 - 19:38:18 ---A- . (.ST Microelectronics - Disk Filter Driver for Accelerometer.) -- C:\Windows\system32\drivers\stdflt.sys [16176]

O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [21072]

O58 - SDL:[MD5.06CBB271F42EF70FB6EF372C491BA9AA] - 07/04/2010 - 10:35:04 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\system32\drivers\stwrt.sys [423936]

O58 - SDL:[MD5.CF196A45FD61118C95585489FAD5B2AA] - 08/01/2010 - 02:46:20 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [232624]

O58 - SDL:[MD5.949EF0DF929A71D6CC77494DFCB1DDEB] - 06/07/2009 - 20:11:12 ---A- . (.Trend Micro Inc. - TrendMicro Common Module.) -- C:\Windows\system32\drivers\tmcomm.sys [158224]

O58 - SDL:[MD5.4E87D02E56E9B1AF831C5D521597D629] - 16/07/2009 - 23:38:04 ---A- . (.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fre).) -- C:\Windows\system32\drivers\tmlwf.sys [146448]

O58 - SDL:[MD5.44C262C1B2412DED35078B6166D2ACC2] - 16/07/2009 - 23:37:40 ---A- . (.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) -- C:\Windows\system32\drivers\tmtdi.sys [89872]

O58 - SDL:[MD5.D9882FD91B7C4C35ACAA8498D1F3CD68] - 16/07/2009 - 23:38:14 ---A- . (.Trend Micro Inc. - Trend Micro WFP callout Driver (i386-fre).) -- C:\Windows\system32\drivers\tmwfp.sys [283152]

O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [16976]

O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [141904]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13/07/2009 - 22:40:44 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13/07/2009 - 22:40:40 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13/07/2009 - 22:40:23 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13/07/2009 - 22:40:31 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13/07/2009 - 22:40:35 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13/07/2009 - 22:40:39 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13/07/2009 - 22:40:27 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13/07/2009 - 22:40:11 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13/07/2009 - 22:40:15 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13/07/2009 - 22:40:17 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13/07/2009 - 22:40:19 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13/07/2009 - 22:40:13 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(...) - LEGACY_ASWFSBLK

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFW.sys - (.not file.) - avast! TDI Firewall driver (aswFW) .(...) - LEGACY_ASWFW

O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWNDIS2.sys - (.not file.) - avast! Firewall Core Firewall Service (aswNdis2) .(...) - LEGACY_ASWNDIS2

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(...) - LEGACY_ASWRDR

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSNX.sys - (.not file.) - aswSnx (aswSnx) .(...) - LEGACY_ASWSNX

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - aswSP (aswSP) .(...) - LEGACY_ASWSP

O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(...) - LEGACY_ASWTDI

O64 - Services: CurCS - C:\Windows\System32\drivers\BCM42RLY.sys - BCM42RLY (BCM42RLY) .(.Broadcom Corporation - Broadcom iLine10 PCI Network Adapter Pr.) - LEGACY_BCM42RLY

O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP

O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL

O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV

O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmcomm.sys - tmcomm (tmcomm) .(.Trend Micro Inc. - TrendMicro Common Module.) - LEGACY_TMCOMM

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\TmXPFlt.sys - Trend Micro Filter (TmFilter) .(.Trend Micro Inc. - Post Filter For XP.) - LEGACY_TMFILTER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmlwf.sys - Trend Micro NDIS 6.0 Filter Driver (tmlwf) .(.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fr.) - LEGACY_TMLWF

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\TmPreFlt.sys - Trend Micro PreFilter (TmPreFilter) .(.Trend Micro Inc. - Pre-Filter For XP.) - LEGACY_TMPREFILTER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmtdi.sys - Trend Micro TDI Driver (tmtdi) .(.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) - LEGACY_TMTDI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmwfp.sys - Trend Micro WFP Callout Driver (tmwfp) .(.Trend Micro Inc. - Trend Micro WFP callout Driver (i386-fre).) - LEGACY_TMWFP

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\VSApiNt.sys - Trend Micro VSAPI NT (VSApiNt) .(.Trend Micro Inc. - VsapiNT.) - LEGACY_VSAPINT

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Pauline\AppData\Local\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: C:\Users\Pauline\AppData\Roaming\Mozilla\Firefox\Profiles\0zhzi839.default\searchplugins\conduit.xml

O69 - SBI: prefs.js [Pauline - 0zhzi839.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2866295&SearchSource=

O69 - SBI: SearchScopes [HKCU] {67815A47-FA5C-45F8-B7B8-B98BC098B420} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {92FD1B35-F895-4850-9089-C3D63F4D9B77} - (Google) - Google

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe

O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe

O87 - FAEL: "{AB9CA920-344A-4F18-8536-617E148BD06B}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O87 - FAEL: "{4755C623-F20D-4BB1-8131-5E43EE4A5826}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{54B54C47-3BA8-4AA7-8D9C-E52575B16407}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema Main Program.) -- c:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe

O87 - FAEL: "{7EF9D1B2-C905-4501-9AFA-D0AC22026EA8}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD 9.5.) -- c:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe

O87 - FAEL: "{18843622-5FD3-43A4-B87F-7D4200BA39EE}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "{EF31918C-7EEF-451D-A02C-D290C655545D}" | In - Domain - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{269EBD16-9B9A-4CED-9C33-A65B90BA8B8C}" | In - Domain - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{7D2B8106-131E-46C5-834B-2724CEC21669}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{FF98003A-28D5-45CF-9811-8C3A3F72F885}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{5F8EEDDF-D9C7-405A-B423-D759AF34DBD5}" | In - None - P17 - TRUE | .(.Pas de propriétaire - Pando Media Booster.) -- C:\Program Files\Pando Networks\Media Booster\PMB.exe

O87 - FAEL: "{A694499A-71FC-4DF4-A02D-094F43D2F1E5}" | In - Private - P6 - TRUE | .(.Adobe Systems Inc. - Adobe AIR Debug Launcher.) -- C:\Riot Games\League of Legends\air\LolClient.exe

O87 - FAEL: "{6F2BD568-6BD8-46D1-98C4-91ACC7754D90}" | In - Private - P17 - TRUE | .(.Adobe Systems Inc. - Adobe AIR Debug Launcher.) -- C:\Riot Games\League of Legends\air\LolClient.exe

O87 - FAEL: "{AF1D9840-EDBB-47FD-88EE-DBA753B11BE2}" | In - Private - P6 - TRUE | .(.Pas de propriétaire - League of Legends Client.) -- C:\Riot Games\League of Legends\game\League of Legends.exe

O87 - FAEL: "{440755F9-3C03-4042-82CF-AC9B46386896}" | In - Private - P17 - TRUE | .(.Pas de propriétaire - League of Legends Client.) -- C:\Riot Games\League of Legends\game\League of Legends.exe

O87 - FAEL: "TCP Query User{8DBEFACE-8F70-4F63-BBBD-A2472BC97571}C:\riot games\league of legends\lol.launcher.exe" | In - Private - P6 - TRUE | .(.Solid State Networks.) -- C:\riot games\league of legends\lol.launcher.exe

O87 - FAEL: "UDP Query User{881200B5-BF4B-4269-ABCE-8DAFCF694181}C:\riot games\league of legends\lol.launcher.exe" | In - Private - P17 - TRUE | .(.Solid State Networks.) -- C:\riot games\league of legends\lol.launcher.exe

O87 - FAEL: "{57E9F607-8DFC-4A56-A53F-6ECE8831452B}" | In - Private - P6 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files\Steam\Steam.exe

O87 - FAEL: "{9F7B4C59-1B49-4E85-BCC0-01ED1B7E6362}" | In - Private - P17 - TRUE | .(.Valve Corporation - Steam.) -- C:\Program Files\Steam\Steam.exe

O87 - FAEL: "{8FC2CD4D-1849-4870-A186-3E09B0D267D7}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

O87 - FAEL: "{353CC5E6-84EE-480B-87BC-EB1BC5F7A118}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

O87 - FAEL: "{05246FB0-CD3A-432D-982D-490200C33458}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

O87 - FAEL: "{C85CD48A-54D9-45F7-8BF9-EB4FD7C21611}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Auto 03/03/2009 81920 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe

SS - | Auto 07/09/2010 40384 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SS - | Auto 07/09/2010 119200 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe

SS - | Demand 07/09/2010 40384 | (avast! Mail Scanner) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SS - | Demand 07/09/2010 40384 | (avast! Web Scanner) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

SS - | Auto 20/10/2009 595232 | (btwdins) . (.Broadcom Corporation..) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

SS - | Auto 13/05/2009 322624 | C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe

SS - | Auto 30/11/2009 60928 | (InstallFilterService) . (...) - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe

SS - | Auto 04/11/2009 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

SS - | Auto 22/06/2010 1323912 | (ntrtscan) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe

SS - | Auto 07/05/2010 219752 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SS - | Auto 07/04/2010 229458 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe

SS - | Demand 15/01/2011 407336 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe

SS - | Demand 16/01/2009 74392 | (stllssvr) . (.MicroVision Development, Inc..) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

SS - | Auto 05/07/2010 45056 | (svcGenericHost) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe

SS - | Auto 22/06/2010 1358160 | (tmlisten) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe

SS - | Demand 16/07/2009 497008 | (TmPfw) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe

SS - | Demand 16/07/2009 689416 | (TmProxy) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

SS - | Auto 04/11/2009 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

SS - | Auto 03/06/2010 1664304 | (vcsFPService) . (.Validity Sensors, Inc..) - C:\Windows\system32\vcsFPService.exe

SS - | Auto 21/10/2010 40960 | (wltrysvc) . (.Dell Inc..) - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.exe

SS - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by Pauline at 28/03/2011 23:38:22

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys stdflt.sys ACPI.sys halmacpi.dll iaStor.sys

C:\Windows\system32\DRIVERS\stdflt.sys ST Microelectronics Disk Filter Driver for Accelerometer

C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Rapid Storage Technology driver

1 ntkrnlpa!IofCallDriver[0x82491458] -> \Device\Harddisk0\DR0[0x863E42F0]

3 CLASSPNP[0x8A3C559E] -> ntkrnlpa!IofCallDriver[0x82491458] -> [0x863E4B20]

5 stdflt[0x8A5CC274] -> ntkrnlpa!IofCallDriver[0x82491458] -> [0x858345F8]

7 ACPI[0x89CAD3B2] -> ntkrnlpa!IofCallDriver[0x82491458] -> \Device\Ide\IAAStorageDevice-1[0x85841028]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Pauline at 28/03/2011 23:38:24

Use the desktop link 'MBRCheck' to have full report

Dump file Name : C:\PhysicalDisk0_MBR.bin

 

 

 

End of the scan (938 lines in 00mn 39s)(0)

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Avast et Trend Micro sont tous deux actifs.

Il faut en choisir un seul.

 

Ce programme, gratuit, est censé supprimer les applications antivirus et antispyware.

Applications supportées

 

Release 2.0 for Windows 2000, 2003, XP (32 / 64 bit), Vista (32 / 64 bit), 2008, Windows 7 (32 / 64 bit)

 

TéléchargerAppremover

 

ou si vous préférez:

 

Désinstaller Avast

 

Trend Micro

Désactiver Trend-micro-internet-security sous Seven

 

 

Pour désinstaller la version 2009, vous devez utiliser le logiciel « Trend Micro Support Diagnostic Toolkit » présent dans le menu « Tous les programmes » de votre ordinateur.

Cliquez ensuite sur « Trend Micro Internet Security » et suivez les procédures pour désinstaller le produit.

Vous pouvez également obtenir les programmes disponibles en 32 et 64 bits.

Pour la version 32 bits, téléchargez-le sur le lien : http://solutionfile.trendmicro.com/solutionfile/TIS/TISTOOL/SupportTool_32-bit.exe et sur http://solutionfile.trendmicro.com/solutionfile/TIS/TISTOOL/SupportTool_64-bit.exe pour la version 64 bits.

 

Pour nettoyer Conduit:

Téléchargez AD-Remover sur le bureau

101207110859995521.jpg

 

Déconnectez-vous et fermez toutes les applications en cours

Cliquer sur "Ad-R.exe" pour lancer l'installation et laisser les paramètres par défaut .

Une fenêtre s'affichera Vous prévenant des risques de l'utilisation de ce logiciel

Cliquez sur "OUI"

Double cliquer sur l'icône Ad-remover sur le bureau

fyjor7.jpg

Au menu principal choisir l'optionScanner et Validez

 

Patientez pendant le travail de l'outil.

Poster le rapport qui apparait à la fin .

Il est sauvegardé aussi sous C:\Ad-report.log

 

Ensuite

 

Relancer Ad- remover , choisir l'option Nettoyer

 

Il y aura 2 rapports à poster après :Scanner et Nettoyer

 

Pour désinstaller AD-Remover, lancez avec l'option D puis supprimer l'icône du bureau.

Jojo_Kermit Junior Member

Jojo_Kermit

Posté(e)
  • Auteur
Posté(e)

Bonsoir

 

j'ai passé beaucoup de temps sur ce satané PC aujourd'hui et voilà ou j'en suis.

 

Difficile de desinstaller Trend micro et j'ai dû le faire manuellement via la base de registre en suivant le mo de Trend.

Ad Remov a fonctionné.

Mais au final toujours un pc inexploitable et même le mode sans echec avait du mal à se lancer.

 

J'ai donc opté pour la solution radical avec retour configuration usine comme cela existe chez Dell.

 

Mais surprise, malgré la disparition de tous les logiciels comme Avast ou autres ajoutés depuis l'origine, le PC rame toujours le voyant du DD constamment allumé et pire encore il commence à le faire en mode sans echec.

 

J'ai l'impression que le DD est en train de lâcher non ?

Jojo_Kermit Junior Member

Jojo_Kermit

Posté(e)
  • Auteur
Posté(e)

Bonsoir

 

Toujours en mode sans echec je vous envoie ci-dessous une nouvelle analyse faite avec ZHPdiag après avoir remis la configuration usine.

 

Rapport de ZHPDiag v1.27.1845 par Nicolas Coolman, Update du 28/03/2011

Run by Pauline at 29/03/2011 23:10:54

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.7600.16385 (Defaut)

 

---\\ System Information

Windows 7 Business Edition, 32-bit (Build 7600)

Processor: x86 Family 6 Model 37 Stepping 5, GenuineIntel

Operating System: 32 Bits

Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)

Total RAM: 2742 MB (86% free)

System Restore: Activé (Enable)

System drive C: has 171 GB (92%) free of 186 GB

 

---\\ Logged in mode

Computer Name: PAULINE-PC

User Name: Pauline

All Users Names: Pauline, HomeGroupUser$, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Users\Pauline\AppData\Roaming

%LocalAppData%=C:\Users\Pauline\AppData\Local

%StartMenu%=C:\Users\Pauline\AppData\Roaming\Microsoft\Windows\Start Menu

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 171 Go of 186 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 97 Go of 98 Go)

F:\ Floppy drive, Flash card reader, USB Key (Free 5 Go of 7 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.21/10/2010 13:22:38.) -- C:\Windows\Explorer.exe [2614272]

[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

[MD5.ABE73A2F762A74B6AD2C9BE636915595] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/10/2010 13:22:38.) -- C:\Windows\System32\wininet.dll [977920]

[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/10/2010 13:22:38.) -- C:\Windows\System32\Winlogon.exe [285696]

[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\System32\drivers\atapi.sys [21584]

[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.14/07/2009 02:20:44.) -- C:\Windows\System32\drivers\ntfs.sys [1210432]

 

 

 

---\\ Processus lancés

[MD5.F5B5540FB7949907D2C5F406AD63A9AA] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [641536]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 3.0.40624.0.) -- c:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} . (.Trend Micro Inc. - Trend Micro NSC IE Plug-In.) -- c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll

O2 - BHO: DigitalPersona Fingerprint Software Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} . (.DigitalPersona, Inc. - DigitalPersona OTS Feedback.) -- C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corp. - Microsoft Search Helper Extention.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [sysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [QuickSet] . (.Dell Inc. - QuickSet.) -- C:\Program Files\Dell\QuickSet\QuickSet.exe

O4 - HKLM\..\Run: [FreeFallProtection] . (.Pas de propriétaire - FF_Protection MFC Application.) -- C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe

O4 - HKLM\..\Run: [igfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll

O4 - HKLM\..\Run: [broadcom Wireless Manager UI] . (.Dell Inc. - DW WLAN Card Wireless Network Tray Applet.) -- C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [Dell Webcam Central] . (.Creative Technology Ltd - WebcamDell2.exe.) -- C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe

O4 - HKLM\..\Run: [DpAgent] . (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files\DigitalPersona\Bin\dpagent.exe

O4 - HKLM\..\Run: [OfficeScanNT Monitor] . (.Trend Micro Inc. - Trend Micro Client/Server Security Agent Mo.) -- c:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe

O4 - HKLM\..\Run: [RemoteControl9] . (.CyberLink Corp. - PowerDVD RC Service.) -- c:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe

O4 - HKLM\..\Run: [PDVD9LanguageShortcut] . (.CyberLink Corp. - PowerDVD Language Application.) -- c:\Program Files\CyberLink\PowerDVD9\Language\Language.exe

O4 - HKLM\..\Run: [DBRMTray] . (.Microsoft - DbrmTrayicon.) -- C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe

O4 - HKLM\..\RunOnce: [DBRMTray] . (.Microsoft - TrayApp.) -- C:\Dell\DBRM\Reminder\TrayApp.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\RunOnce: [Application Restart #0] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe

O4 - HKUS\S-1-5-21-2532116922-221707453-1303149430-1001\..\RunOnce: [Application Restart #0] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk . (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Pauline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (.Pas de propriétaire - Pas de description.) -- c:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{2229C5AA-13E9-4705-B070-A2B4242086D6}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{2229C5AA-13E9-4705-B070-A2B4242086D6}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{2229C5AA-13E9-4705-B070-A2B4242086D6}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{3102441A-29F9-4007-A0D1-05AC7E9BCC85}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} . (.Trend Micro Inc. - Trend Micro NSC IE Plug-In.) -- c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe

O23 - Service: (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

O23 - Service: C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DpHost) . (.DigitalPersona, Inc. - DigitalPersona Local Host.) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe

O23 - Service: (InstallFilterService) . (...) - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe

O23 - Service: (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: (ntrtscan) . (.Trend Micro Inc. - Trend Micro Common Client Real-time Scan Se.) - c:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe

O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 189.9.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: (SeaPort) . (.Microsoft Corp. - Microsoft SeaPort Search Enhancement Broker.) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

O23 - Service: (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe

O23 - Service: (stllssvr) . (.MicroVision Development, Inc. - SureThing Labelflash Disc Printer Service M.) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

O23 - Service: (svcGenericHost) . (.Trend Micro Inc. - Generic Hosted Agent Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe

O23 - Service: (TMBMServer) . (.Trend Micro Inc. - Manages the Trend Micro unauthorized change.) - c:\Program Files\Trend Micro\BM\TMBMSRV.exe

O23 - Service: (tmlisten) . (.Trend Micro Inc. - Trend Micro Common Client Communication Ser.) - c:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe

O23 - Service: (TmPfw) . (.Trend Micro Inc. - Trend Micro Personal Firewall Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe

O23 - Service: (TmProxy) . (.Trend Micro Inc. - Trend Micro Proxy Service.) - c:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

O23 - Service: (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: (vcsFPService) . (.Validity Sensors, Inc. - VFS101 VCS API Library.) - C:\Windows\system32\vcsFPService.exe

O23 - Service: (wltrysvc) . (.Dell Inc. - DW WLAN Card Wireless Network Service.) - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys

O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: Trend Micro NDIS 6.0 Filter Driver (tmlwf) . (.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fr.) - C:\Windows\System32\DRIVERS\tmlwf.sys

O41 - Driver: (tmtdi) . (.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) - C:\Windows\System32\DRIVERS\tmtdi.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys

O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Accelerometer - (.STMicroelectronics.) [HKLM] -- {87434D51-51DB-4109-B68F-A829ECDCF380}

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 9.1.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A91000000001}

O42 - Logiciel: Advanced Audio FX Engine - (.Creative Technology Ltd.) [HKLM] -- Advanced Audio FX Engine

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}

O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}

O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}

O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: CyberLink PowerDVD 9.5 - (.CyberLink Corp..) [HKLM] -- {A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}

O42 - Logiciel: DW WLAN Card Utility - (.Dell Inc..) [HKLM] -- DW WLAN Card Utility

O42 - Logiciel: Dell Backup and Recovery Manager - (.Dell Inc..) [HKLM] -- {4688EB75-28E2-4731-9BCB-55E624F7CD45}

O42 - Logiciel: Dell Edoc Viewer - (.Dell Inc.) [HKLM] -- {3138EAD3-700B-4A10-B617-B3F8096EE30D}

O42 - Logiciel: Dell Touchpad - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: Dell Webcam Central - (.Creative Technology Ltd.) [HKLM] -- Dell Webcam Central

O42 - Logiciel: DigitalPersona Personal 4.01 - (.DigitalPersona, Inc..) [HKLM] -- {3D8AE086-030F-4EF4-B705-63F8130B043E}

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}

O42 - Logiciel: Intel® Management Engine Components - (.Intel Corporation.) [HKLM] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}

O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}

O42 - Logiciel: Live! Cam Avatar Creator - (.Creative Technology Ltd.) [HKLM] -- {65D0C510-D7B6-4438-9FC8-E6B91115AB0D}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office 2010 - (.Microsoft Corporation.) [HKLM] -- {95140000-0070-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: QuickSet32 - (.Dell Inc..) [HKLM] -- {C4972073-2BFE-475D-8441-564EA97DA161}

O42 - Logiciel: Roxio Creator Audio - (.Roxio.) [HKLM] -- {73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}

O42 - Logiciel: Roxio Creator Copy - (.Roxio.) [HKLM] -- {B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}

O42 - Logiciel: Roxio Creator DE 10.3 - (.Roxio.) [HKLM] -- {09760D42-E223-42AD-8C3E-55B47D0DDAC3}

O42 - Logiciel: Roxio Creator DE 10.3 - (.Roxio.) [HKLM] -- {ED439A64-F018-4DD4-8BA5-328D85AB09AB}

O42 - Logiciel: Roxio Creator Data - (.Roxio.) [HKLM] -- {08E81ABD-79F7-49C2-881F-FD6CB0975693}

O42 - Logiciel: Roxio Creator Tools - (.Roxio.) [HKLM] -- {1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}

O42 - Logiciel: Roxio Express Labeler 3 - (.Roxio.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}

O42 - Logiciel: Roxio Update Manager - (.Roxio.) [HKLM] -- {30465B6C-B53F-49A1-9EBA-A3F187AD502E}

O42 - Logiciel: Trend Micro Client/Server Security Agent - (.Trend Micro.) [HKLM] -- {BED0B8A2-2986-49F8-90D6-FA008D37A3D2}

O42 - Logiciel: Validity Sensors DDK - (.Validity Sensors, Inc..) [HKLM] -- {9FCB6355-689E-4141-9714-3EEC2AE10292}

O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}

O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\AppDataLow\SOFTWARE]

[HKCU\Software\AppDataLow\Software\DigitalPersona]

[HKCU\Software\AppDataLow]

[HKCU\Software\Broadcom]

[HKCU\Software\Classes]

[HKCU\Software\Creative Tech]

[HKCU\Software\CyberLink]

[HKCU\Software\DigitalPersona]

[HKCU\Software\InstallShield]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\Macrovision]

[HKCU\Software\Mozilla]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Policies]

[HKCU\Software\STMicroelectronics]

[HKCU\Software\Synaptics]

[HKCU\Software\Widcomm]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\BcmSetup]

[HKLM\Software\Broadcom]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Creative Tech]

[HKLM\Software\Creative]

[HKLM\Software\CyberLink]

[HKLM\Software\Dell Computer Corporation]

[HKLM\Software\Dell]

[HKLM\Software\DigitalPersona]

[HKLM\Software\FreeFallProtection]

[HKLM\Software\IDT]

[HKLM\Software\InstalledOptions]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\Lake]

[HKLM\Software\Macromedia]

[HKLM\Software\MicroVision]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\ODBC]

[HKLM\Software\Policies]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Roxio]

[HKLM\Software\STMicroelectronics]

[HKLM\Software\Sonic]

[HKLM\Software\Synaptics]

[HKLM\Software\Trendmicro]

[HKLM\Software\Validity]

[HKLM\Software\Widcomm]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 21/10/2010 - 11:42:06 - [238350647] ----D- C:\Program Files\Adobe

O43 - CFD: 21/10/2010 - 11:41:42 - [2681921] ----D- C:\Program Files\Cisco

O43 - CFD: 21/10/2010 - 11:54:54 - [405487766] ----D- C:\Program Files\Common Files

O43 - CFD: 21/10/2010 - 11:49:34 - [14954414] ----D- C:\Program Files\Creative

O43 - CFD: 21/10/2010 - 11:48:50 - [114688] ----D- C:\Program Files\Creative Live! Cam

O43 - CFD: 21/10/2010 - 11:54:54 - [143688606] ----D- C:\Program Files\CyberLink

O43 - CFD: 21/10/2010 - 11:40:58 - [153653205] ----D- C:\Program Files\Dell

O43 - CFD: 21/10/2010 - 11:33:54 - [70181656] ----D- C:\Program Files\Dell Inc

O43 - CFD: 21/10/2010 - 11:49:28 - [264797136] ----D- C:\Program Files\Dell Webcam

O43 - CFD: 21/10/2010 - 11:51:28 - [55357074] ----D- C:\Program Files\DigitalPersona

O43 - CFD: 14/07/2009 - 11:01:44 - [83226132] ----D- C:\Program Files\DVD Maker

O43 - CFD: 29/03/2011 - 18:24:02 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 21/10/2010 - 04:29:50 - [23676546] ----D- C:\Program Files\IDT

O43 - CFD: 21/10/2010 - 11:54:54 - [27832738] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 21/10/2010 - 11:36:14 - [12749359] ----D- C:\Program Files\Intel

O43 - CFD: 21/10/2010 - 14:23:12 - [4531233] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 21/10/2010 - 11:34:54 - [90561094] ----D- C:\Program Files\Java

O43 - CFD: 21/10/2010 - 11:46:12 - [854520] ----D- C:\Program Files\Microsoft

O43 - CFD: 21/10/2010 - 11:52:52 - [6423243] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 21/10/2010 - 11:48:22 - [15457915] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 21/10/2010 - 11:47:12 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 21/10/2010 - 11:48:04 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 21/10/2010 - 11:39:56 - [1194536] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 14/07/2009 - 06:52:32 - [38593281] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 21/10/2010 - 11:43:12 - [18671639] ----D- C:\Program Files\Roxio

O43 - CFD: 21/10/2010 - 11:36:40 - [2748830] ----D- C:\Program Files\STMicroelectronics

O43 - CFD: 21/10/2010 - 14:24:04 - [31527123] ----D- C:\Program Files\Synaptics

O43 - CFD: 29/03/2011 - 20:21:22 - [247884050] ----D- C:\Program Files\Trend Micro

O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 21/10/2010 - 11:38:14 - [15604191] ----D- C:\Program Files\Validity Sensors

O43 - CFD: 21/10/2010 - 11:39:18 - [86627166] ----D- C:\Program Files\WIDCOMM

O43 - CFD: 14/07/2009 - 10:39:40 - [3049984] ----D- C:\Program Files\Windows Defender

O43 - CFD: 14/07/2009 - 11:01:42 - [7013496] ----D- C:\Program Files\Windows Journal

O43 - CFD: 21/10/2010 - 11:48:18 - [150952574] ----D- C:\Program Files\Windows Live

O43 - CFD: 21/10/2010 - 11:45:54 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 21/10/2010 - 14:23:12 - [6180864] ----D- C:\Program Files\Windows Mail

O43 - CFD: 21/10/2010 - 14:23:12 - [6607787] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 29/03/2011 - 18:24:06 - [12194484] ----D- C:\Program Files\Windows NT

O43 - CFD: 14/07/2009 - 10:39:40 - [4417800] ----D- C:\Program Files\Windows Photo Viewer

O43 - CFD: 14/07/2009 - 06:52:34 - [189440] ----D- C:\Program Files\Windows Portable Devices

O43 - CFD: 14/07/2009 - 10:39:40 - [6831353] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 29/03/2011 - 23:10:58 - [3636812] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 21/10/2010 - 11:42:10 - [4600350] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 21/10/2010 - 11:54:54 - [120104] ----D- C:\Program Files\Common Files\CyberLink

O43 - CFD: 21/10/2010 - 11:48:38 - [3719101] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 21/10/2010 - 11:35:20 - [1231815] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 21/10/2010 - 11:45:58 - [52266365] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 21/10/2010 - 11:36:16 - [166332] ----D- C:\Program Files\Common Files\postureAgent

O43 - CFD: 21/10/2010 - 11:43:12 - [4779808] ----D- C:\Program Files\Common Files\PX Storage Engine

O43 - CFD: 21/10/2010 - 11:49:28 - [4221400] ----D- C:\Program Files\Common Files\Reallusion

O43 - CFD: 21/10/2010 - 11:42:58 - [34404047] ----D- C:\Program Files\Common Files\Roxio Shared

O43 - CFD: 14/07/2009 - 04:37:06 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 21/10/2010 - 11:43:00 - [1088248] ----D- C:\Program Files\Common Files\Sonic Shared

O43 - CFD: 14/07/2009 - 04:37:06 - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 21/10/2010 - 11:43:12 - [733792] ----D- C:\Program Files\Common Files\SureThing Shared

O43 - CFD: 14/07/2009 - 10:39:40 - [10102259] ----D- C:\Program Files\Common Files\System

O43 - CFD: 21/10/2010 - 11:43:20 - [246947660] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 21/10/2010 - 11:42:20 - [763] ----D- C:\ProgramData\Adobe

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 29/03/2011 - 18:24:02 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 21/10/2010 - 11:36:12 - [64] ----D- C:\ProgramData\Dell

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 21/10/2010 - 11:51:04 - [27188736] ----D- C:\ProgramData\Downloaded Installations

O43 - CFD: 29/03/2011 - 18:24:02 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 21/10/2010 - 11:42:50 - [226] ----D- C:\ProgramData\InstallShield

O43 - CFD: 21/10/2010 - 11:51:28 - [2556630] ----D- C:\ProgramData\Macrovision

O43 - CFD: 29/03/2011 - 18:24:02 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 29/03/2011 - 18:18:44 - [1273247364] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 29/03/2011 - 18:24:02 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 29/03/2011 - 20:11:28 - [245445] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 21/10/2010 - 11:43:00 - [627] ----D- C:\ProgramData\Sonic

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 21/10/2010 - 11:35:20 - [119] ----D- C:\ProgramData\Sun

O43 - CFD: 21/10/2010 - 11:54:06 - [53319] ----D- C:\ProgramData\Temp

O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 21/10/2010 - 11:43:12 - [13757796] ----D- C:\ProgramData\Uninstall

O43 - CFD: 29/03/2011 - 20:11:30 - [24] ----D- C:\Users\Pauline\AppData\Roaming\DigitalPersona

O43 - CFD: 29/03/2011 - 19:53:56 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Identities

O43 - CFD: 29/03/2011 - 20:12:30 - [256] ----D- C:\Users\Pauline\AppData\Roaming\Macrovision

O43 - CFD: 14/07/2009 - 11:00:42 - [0] ----D- C:\Users\Pauline\AppData\Roaming\Media Center Programs

O43 - CFD: 29/03/2011 - 22:44:04 - [663420] -S--D- C:\Users\Pauline\AppData\Roaming\Microsoft

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.0BDB091143889F9133041072B863F1DD] - 29/03/2011 - 23:57:31 ---A- . (...) -- C:\Windows\System32\license.rtf [55857]

O44 - LFC:[MD5.23CA7E747A3A5E26AEFDA1AD11349988] - 29/03/2011 - 22:10:34 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [126462]

O44 - LFC:[MD5.DCAF7845463FF31161992C62BEC24853] - 29/03/2011 - 22:10:34 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [691666]

O44 - LFC:[MD5.61135473AD6A7D31FA209800E1D1D453] - 29/03/2011 - 22:09:32 ---A- . (...) -- C:\Windows\ntbtlog.txt [525662]

O44 - LFC:[MD5.7E09E40B69B3A38A4419854A218E67AA] - 29/03/2011 - 22:08:37 ---A- . (...) -- C:\Windows\WindowsUpdate.log [202377]

O44 - LFC:[MD5.C770C58124BC61721E5E9598C774D04A] - 29/03/2011 - 21:34:38 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.659C0F7A1F9A2AA3C59FDC99ECCE64E4] - 29/03/2011 - 19:50:57 ---A- . (...) -- C:\tmuninst.ini [31]

O44 - LFC:[MD5.0D3D161D2364A7830CE231103365233F] - 29/03/2011 - 19:49:30 ---A- . (...) -- C:\Windows\System32\log.txt [0]

O44 - LFC:[MD5.66B0EB61F79D062B51D942EC3F90F17E] - 29/03/2011 - 19:49:06 ---A- . (...) -- C:\Windows\setupact.log [23295]

O44 - LFC:[MD5.49A920522D7162AE473A75F18911A9BD] - 29/03/2011 - 19:42:43 ---A- . (...) -- C:\Windows\System32\perfc009.dat [107050]

O44 - LFC:[MD5.09DC66BD3E793F14246B593F4412372E] - 29/03/2011 - 19:41:38 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1554126]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/03/2011 - 19:41:11 ---A- . (...) -- C:\Windows\System32\perfh009.dat [0]

O44 - LFC:[MD5.B880E3CE02940691C0842DC91A646274] - 29/03/2011 - 19:36:20 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [14032]

O44 - LFC:[MD5.B880E3CE02940691C0842DC91A646274] - 29/03/2011 - 19:36:10 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [14032]

O44 - LFC:[MD5.163964B8E4F2CBC55BBE773330DA9FD1] - 29/03/2011 - 19:27:29 ---A- . (...) -- C:\Windows\DPINST.LOG [18394]

O44 - LFC:[MD5.C64161E61570C0DD3E05ED1979A09602] - 29/03/2011 - 19:08:54 ---A- . (...) -- C:\Windows\PFRO.log [12138]

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.3C189400C996A4301C3F1BD93C9C1A17] - 03/12/2009 - 04:24:38 ---A- . (.ST Microelectronics - Accelerometer Port I/O.) -- C:\Windows\system32\drivers\Acceler.sys [41648]

O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422976]

O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]

O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]

O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14400]

O58 - SDL:[MD5.2101A86C25C154F8314B24EF49D7FBC2] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [79952]

O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]

O58 - SDL:[MD5.B81C2B5616F6420A9941EA093A92B150] - 14/07/2009 - 02:26:15 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [23616]

O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]

O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]

O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 14/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]

O58 - SDL:[MD5.94F2DC372163D520D7B1DAD78AE40B5E] - 21/10/2010 - 10:40:40 ---A- . (.Broadcom Corporation - Broadcom iLine10 PCI Network Adapter Proxy Protocol Driver.) -- C:\Windows\system32\drivers\bcm42rly.sys [18424]

O58 - SDL:[MD5.F689C5965CEFAD780A2948546703BD5D] - 05/05/2010 - 17:28:38 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\system32\drivers\BCMWL6.SYS [2707448]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 14/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.7E826BE3B3558208D5C9B00034E51BE5] - 03/10/2009 - 03:24:12 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\system32\drivers\btwaudio.sys [86056]

O58 - SDL:[MD5.AF9148C3E844131AC954CB53FF43D971] - 29/08/2009 - 00:15:16 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\system32\drivers\btwavdt.sys [108072]

O58 - SDL:[MD5.AAFD7CB76BA61FBB08E302DA208C974A] - 07/04/2009 - 20:32:50 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\system32\drivers\btwl2cap.sys [29472]

O58 - SDL:[MD5.480B3D195854B2E55299CDDDDC50BCF9] - 29/08/2009 - 00:15:12 ---A- . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\system32\drivers\btwrchid.sys [18472]

O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]

O58 - SDL:[MD5.C716C877A528FAE6D352A7430AE0A4A4] - 17/10/2007 - 08:00:00 ---A- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdr4_xp.sys [9072]

O58 - SDL:[MD5.17CD01A8B4D0A1E6CBF4BB07CD57043C] - 17/10/2007 - 08:00:00 ---A- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\Windows\system32\drivers\cdralw2k.sys [9200]

O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]

O58 - SDL:[MD5.0F538DF1673E5216F3BAACB6911D9D0F] - 28/05/2009 - 16:48:20 ---A- . (.Creative Technology Ltd. - Advanced Audio FX Driver.) -- C:\Windows\system32\drivers\CtAudDrv.sys [134144]

O58 - SDL:[MD5.9A6CA307151505730DBFC91D97F01C7E] - 15/06/2009 - 19:05:16 ---A- . (.Creative Technology Ltd. - Video Class Upper Filter Driver.) -- C:\Windows\system32\drivers\CtClsFlt.sys [143968]

O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70720]

O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]

O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]

O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 14/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]

O58 - SDL:[MD5.A88485DC6A7136C10D9A6C7E38FDFE3C] - 17/09/2009 - 18:54:14 ---A- . (.Intel Corporation - Intel® Management Engine Interface.) -- C:\Windows\system32\drivers\HECI.sys [41088]

O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]

O58 - SDL:[MD5.26541A068572F650A2FA490726FE81BE] - 04/03/2010 - 16:33:26 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x86.) -- C:\Windows\system32\drivers\iaStor.sys [435736]

O58 - SDL:[MD5.934AF4D7C5F457B9F0743F4299B77B67] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332352]

O58 - SDL:[MD5.59FA038451070172E47D0CD347F32BC4] - 22/04/2010 - 05:40:02 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd32.sys [8746496]

O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]

O58 - SDL:[MD5.2DB41BA61D5E44D0667CF126D35DCF34] - 27/10/2009 - 02:39:04 ---A- . (.Intel Corporation - Intel® Turbo Boost Technology Driver.) -- C:\Windows\system32\drivers\Impcd.sys [125696]

O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]

O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]

O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]

O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]

O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]

O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [235584]

O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]

O58 - SDL:[MD5.C5F0202A00227AECB69E722C52385FFC] - 21/10/2010 - 10:40:41 ---A- . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\system32\drivers\npf.sys [50704]

O58 - SDL:[MD5.79E97CDAE5449A59A4798FC5B006C58F] - 29/01/2010 - 00:55:04 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers\nvhda32v.sys [68200]

O58 - SDL:[MD5.9800EEE1F3474E4BD416FC813DC1827B] - 08/05/2010 - 02:52:16 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 189.90.) -- C:\Windows\system32\drivers\nvlddmkm.sys [9936616]

O58 - SDL:[MD5.3F3D04B1D08D43C16EA7963954EC768D] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117312]

O58 - SDL:[MD5.C99F251A5DE63C6F129CF71933ACED0F] - 14/07/2009 - 02:20:44 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [142416]

O58 - SDL:[MD5.40FEDD328F98245AD201CF5F9F311724] - 09/07/2009 - 11:00:00 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\Windows\system32\drivers\pxhelp20.sys [45200]

O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383488]

O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106064]

O58 - SDL:[MD5.80B66A4181F782884A815E69D0AFA743] - 05/03/2010 - 03:42:58 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\system32\drivers\Rt86win7.sys [277536]

O58 - SDL:[MD5.31D45ECA63884FF5F7AECC50F7D1BAE0] - 10/08/2009 - 17:06:08 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\system32\drivers\RtsUStor.sys [171520]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [40016]

O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [77888]

O58 - SDL:[MD5.972F577308B006070DE8D09573DBAE53] - 27/11/2009 - 19:38:18 ---A- . (.ST Microelectronics - Disk Filter Driver for Accelerometer.) -- C:\Windows\system32\drivers\stdflt.sys [16176]

O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [21072]

O58 - SDL:[MD5.06CBB271F42EF70FB6EF372C491BA9AA] - 07/04/2010 - 10:35:04 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\system32\drivers\stwrt.sys [423936]

O58 - SDL:[MD5.CF196A45FD61118C95585489FAD5B2AA] - 08/01/2010 - 02:46:20 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [232624]

O58 - SDL:[MD5.582F43830DAA5D9AAD7AA514843D8905] - 06/07/2009 - 20:11:50 ---A- . (.Trend Micro Inc. - TrendMicro Activity Monitor Module.) -- C:\Windows\system32\drivers\tmactmon.sys [59920]

O58 - SDL:[MD5.949EF0DF929A71D6CC77494DFCB1DDEB] - 06/07/2009 - 20:11:12 ---A- . (.Trend Micro Inc. - TrendMicro Common Module.) -- C:\Windows\system32\drivers\tmcomm.sys [158224]

O58 - SDL:[MD5.9D38AC83D56F9B5274A65D2666DA9779] - 06/07/2009 - 20:11:46 ---A- . (.Trend Micro Inc. - TrendMicro Event Management Module.) -- C:\Windows\system32\drivers\tmevtmgr.sys [50704]

O58 - SDL:[MD5.4E87D02E56E9B1AF831C5D521597D629] - 16/07/2009 - 23:38:04 ---A- . (.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fre).) -- C:\Windows\system32\drivers\tmlwf.sys [146448]

O58 - SDL:[MD5.44C262C1B2412DED35078B6166D2ACC2] - 16/07/2009 - 23:37:40 ---A- . (.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) -- C:\Windows\system32\drivers\tmtdi.sys [89872]

O58 - SDL:[MD5.D9882FD91B7C4C35ACAA8498D1F3CD68] - 16/07/2009 - 23:38:14 ---A- . (.Trend Micro Inc. - Trend Micro WFP callout Driver (i386-fre).) -- C:\Windows\system32\drivers\tmwfp.sys [283152]

O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [16976]

O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [141904]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13/07/2009 - 22:40:44 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13/07/2009 - 22:40:40 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13/07/2009 - 22:40:23 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13/07/2009 - 22:40:31 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13/07/2009 - 22:40:35 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13/07/2009 - 22:40:39 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13/07/2009 - 22:40:27 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13/07/2009 - 22:40:11 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13/07/2009 - 22:40:15 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13/07/2009 - 22:40:17 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13/07/2009 - 22:40:19 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13/07/2009 - 22:40:13 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - C:\Windows\System32\drivers\BCM42RLY.sys - BCM42RLY (BCM42RLY) .(.Broadcom Corporation - Broadcom iLine10 PCI Network Adapter Pr.) - LEGACY_BCM42RLY

O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(...) - LEGACY_BEEP

O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(...) - LEGACY_FASTFAT

O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(...) - LEGACY_FS_REC

O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(...) - LEGACY_MSFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(...) - LEGACY_NDPROXY

O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(...) - LEGACY_NPFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(...) - LEGACY_NTFS

O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(...) - LEGACY_NULL

O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(...) - LEGACY_SECDRV

O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(...) - LEGACY_SPLDR

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmactmon.sys - tmactmon (tmactmon) .(.Trend Micro Inc. - TrendMicro Activity Monitor Module.) - LEGACY_TMACTMON

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmcomm.sys - tmcomm (tmcomm) .(.Trend Micro Inc. - TrendMicro Common Module.) - LEGACY_TMCOMM

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmevtmgr.sys - tmevtmgr (tmevtmgr) .(.Trend Micro Inc. - TrendMicro Event Management Module.) - LEGACY_TMEVTMGR

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\TmXPFlt.sys - Trend Micro Filter (TmFilter) .(.Trend Micro Inc. - Post Filter For XP.) - LEGACY_TMFILTER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmlwf.sys - Trend Micro NDIS 6.0 Filter Driver (tmlwf) .(.Trend Micro Inc. - Trend Micro NDIS 6.0 Filter Driver (i386-fr.) - LEGACY_TMLWF

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\TmPreFlt.sys - Trend Micro PreFilter (TmPreFilter) .(.Trend Micro Inc. - Pre-Filter For XP.) - LEGACY_TMPREFILTER

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmtdi.sys - Trend Micro TDI Driver (tmtdi) .(.Trend Micro Inc. - Trend Micro TDI Driver (i386-fre).) - LEGACY_TMTDI

O64 - Services: CurCS - C:\Windows\System32\DRIVERS\tmwfp.sys - Trend Micro WFP Callout Driver (tmwfp) .(.Trend Micro Inc. - Trend Micro WFP callout Driver (i386-fre).) - LEGACY_TMWFP

O64 - Services: CurCS - c:\Program Files\Trend Micro\Client Server Security Agent\VSApiNt.sys - Trend Micro VSAPI NT (VSApiNt) .(.Trend Micro Inc. - VsapiNT.) - LEGACY_VSAPINT

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.)

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Local Security Authority Process.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - None - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "SPPSVC-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe

O87 - FAEL: "SPPSVC-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Service de la plateforme de protection logicielle Microsoft.) -- C:\Windows\system32\sppsvc.exe

O87 - FAEL: "{AB9CA920-344A-4F18-8536-617E148BD06B}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O87 - FAEL: "{4755C623-F20D-4BB1-8131-5E43EE4A5826}" | In - None - P6 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{54B54C47-3BA8-4AA7-8D9C-E52575B16407}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerDVD Cinema Main Program.) -- c:\Program Files\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe

O87 - FAEL: "{7EF9D1B2-C905-4501-9AFA-D0AC22026EA8}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD 9.5.) -- c:\Program Files\CyberLink\PowerDVD9\PowerDVD9.exe

O87 - FAEL: "{E021AA49-D74F-4267-BD28-F976970A12DF}" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Auto 03/03/2009 81920 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe

SS - | Auto 20/10/2009 595232 | (btwdins) . (.Broadcom Corporation..) - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

SS - | Auto 13/05/2009 322624 | C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe

SS - | Auto 30/11/2009 60928 | (InstallFilterService) . (...) - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe

SS - | Auto 04/11/2009 268824 | (LMS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

SS - | Auto 22/06/2010 1323912 | (ntrtscan) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe

SS - | Auto 07/05/2010 219752 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SS - | Auto 07/04/2010 229458 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe

SS - | Demand 16/01/2009 74392 | (stllssvr) . (.MicroVision Development, Inc..) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

SS - | Auto 05/07/2010 45056 | (svcGenericHost) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe

SS - | Demand 01/12/2009 345352 | (TMBMServer) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\BM\TMBMSRV.exe

SS - | Auto 22/06/2010 1358160 | (tmlisten) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe

SS - | Demand 16/07/2009 497008 | (TmPfw) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe

SS - | Demand 16/07/2009 689416 | (TmProxy) . (.Trend Micro Inc..) - c:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

SS - | Auto 04/11/2009 2320920 | (UNS) . (.Intel Corporation.) - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

SS - | Auto 03/06/2010 1664304 | (vcsFPService) . (.Validity Sensors, Inc..) - C:\Windows\system32\vcsFPService.exe

SS - | Auto 21/10/2010 40960 | (wltrysvc) . (.Dell Inc..) - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.exe

SS - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover

Run by Pauline at 29/03/2011 23:11:08

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys stdflt.sys ACPI.sys halmacpi.dll iaStor.sys

C:\Windows\system32\DRIVERS\stdflt.sys ST Microelectronics Disk Filter Driver for Accelerometer

C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Rapid Storage Technology driver

1 ntkrnlpa!IofCallDriver[0x82250458] -> \Device\Harddisk0\DR0[0x86012AC8]

3 CLASSPNP[0x8A32359E] -> ntkrnlpa!IofCallDriver[0x82250458] -> [0x860114E8]

5 stdflt[0x8A28D274] -> ntkrnlpa!IofCallDriver[0x82250458] -> [0x854589A8]

7 ACPI[0x89A1C3B2] -> ntkrnlpa!IofCallDriver[0x82250458] -> \Device\Ide\IAAStorageDevice-1[0x8543A028]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Pauline at 29/03/2011 23:11:10

Use the desktop link 'MBRCheck' to have full report

Dump file Name : C:\PhysicalDisk0_MBR.bin

 

 

 

End of the scan (740 lines in 00mn 15s)(0)

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

Votre rapport montre une machine propre.

Pas d'infection .

C'est probablement un problème matériel, pilote ou logiciel incompatible.

 

Voyez s'il y a des icônes jaunes :

Sous Windows 7:

Cliquez sur Système et sécurité

Recherchez l'icône Système et cliquez sur le menu Système

Dans le menu de gauche, cliquez sur Gestionnaire de périphériques

Jojo_Kermit Junior Member

Jojo_Kermit

Posté(e)
  • Auteur
Posté(e)

Bonjour

 

je viens d'effectuer un diagnostic via le boot dell et le résultat m'indique bien un problème de disque dur.

 

Il est garanti ( acheté pour Noël ) mais je ne pensais pas avoir de problème avec cette marque.

Cependant ce ne sont pas eux qui ont fabriqué le HDD qui est un Seagate momentus 7200.4 320 Gb.

 

Pour info le message diagnostic a le numéro 2000 146

 

la réparation windows me dit que le volume système est endommagé mais ne répare rien.

 

Je vais donc m'adresser à Rueducommerce en espérant qu'ils sont efficace.

 

Merci pour votre collaboration.

pear Devil Member !

pear

Posté(e)
Posté(e)

Bien souvent CHKDSK /R suffit à récupérer un fichier qui empêche le démarrage (réparation du registre).

CHKDSK arrive souvent à récupérer un fichier, c'est par exemple souvent la solution simple à un problème de démarrage causé par la ruche SYSTEM (SYSTEM32\CONFIG\SYSTEM manquant ou endommagé).

 

Pour vérifier le disque C, utiliser la commande fsutil dirty query C:

Démarrer->Exécuter->cmd /k fsutil dirty query c:

 

Si la réponse est le volume C: n'est pas intègre.

on doit vérifier et réparer le volume.

 

Vous pouvez en faire un diagnostic plus approfondi avec les outils du fabricant:

Diagnostics pour Disques Durs

Au paragraphe"outils de Diagnostics pour Disques Durs"

 

 

 

Il y a 3 manières de vérifier le disque :

Voici dans l'ordre, de + en + efficace

1)Poste de Travail->Votre disque système->Propriétés ->Outils->Vérifier maintenant

 

2)Démarrer->EXécuter->Chkdsk /f/r

sous Vista, et 7

Démarrer->Tous les Programmes->Accessoires.

Clic droit sur Invite de commande

et cliquez Exécuter en tant qu'administrateur.

 

3) en console de récupération:

Chkdsk /p/r

 

Dans les cas 2 et 3, il y a un espace après le k.

 

Windows vous dira qu'il ne peut executer cette commande car le disque est en "application"

et il vous proposera d'effectuer chkdsk au prochain redémarrage,

tapez O pour accepter, puis valider. et redémarrez le pc

La fonction chkdsk s'exécutera alors automatiquement.

 

Vous verrez le résultat dans une fenêtre noire:

chkdsk7su.jpg

 

ou là:

 

Panneau de configuration-> Outils d'administration->Observateur d'événements

dans la colonne Source chercher le dernier Winlogon et double-cliquer dessus:

winlogon5im.jpg

Pour Vista ->Pour Vista, c'est dans Wininit

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...