Pb divers PC!!! [RESOLU]

[maykiki]

Salut a tous,

 

Depuis qq temps mon pc s emballe et s eteint tout seul. Ca avait commence pdt le montage de photos avec windows media maker. Trop gros fichier je me disais pour mon pc!

 

Mais ca continue et ca s empire meme. Je l ai meme ouvert au cas ou il chaufferait mais pas de poussiere et ce portable est toujours pose sur un ventilateur!

 

Maintenant, au demarragen plus lg que d habitude, j ai apres le logo windows un ecran noir qui persiste. Parfois le bureau se lane parfois non et je dois faire simplement CTRL + ALT + SUPP, lancer le gestionnaire des taches et la le bureau se lance.

 

Souvent mais applications se figent "ne repond pas", des fois elles se ferment toutes seules.

 

Dans outlook, j ai un message bloque en boite d envoi impossible a supprimer meme en essayant executer/outlook /safe

 

j ai plein de petites choses comme ca qui me menent a penser que je dois avoir qqchose qui ne va pas et il est vrai que j ai telecharge differentes choses dernierement pour ces fameux montages photos!

 

J avais aussi des toolbars d apparu que j ai supprimees!

 

Voila le rapport hijackthis, si une bonne ame pouvait y jeter un coup d oeil!

 

merci

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:36:48, on 03/07/2011

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.19088)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\PLFSetI.exe

C:\Program Files\Launch Manager\LManager.exe

C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\HP\HP Software Update\hpwuschd2.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Freecorder\FLVSrvc.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\PdaNet for iPhone\PdaNetPC.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Users\Mayke\AppData\Local\Temp\RtkBtMnt.exe

C:\Windows\system32\igfxext.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

C:\Windows\system32\wuauclt.exe

C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Mayke\Downloads\HiJackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1010&m=aspire_5735

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Babylon Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O1 - Hosts: ::1 localhost

O1 - Hosts: 74.208.10.249 gs.apple.com

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll

O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [bkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe

O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [iSW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files\Freecorder\FLVSrvc.exe" /run

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Startup: PdaNet Desktop.lnk = C:\Program Files\PdaNet for iPhone\PdaNetPC.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe

O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

 

--

End of file - 11896 bytes

Modifié le 18 juillet 2011 par maykiki

[maykiki]

Quelqu un pour m aider?!

[bernard53]

Bonjour

Fait ceci s.t.p

 

 

Téléchargez MyHosts sur votre bureau .

 

Pour le lancer, faites un double-clic sur l'icône de MyHosts qui se trouve sur votre bureau.

 

Le rapport " MyHosts.txt " s'ouvre quelques secondes après, copiez son contenu et postez-le sur le forum où vous vous faites aider.

 

Si par erreur vous avez fermé le rapport " MyHosts.txt " avant de le copier, vous pouvez le retrouver à la racine de votre disque système ( par exemple C:\MyHosts.txt ) .

 

 

IMPORTANT :

MyHosts doit être lancé sur une session ayant des droits "administrateur", toute exécution sur un compte "limité" entraînera l'apparition d'une fenêtre DOS vous demandant de le relancer à partir d'un compte administrateur.

 

 

Puis

 

 

Installe Malewarebytes' Antimalware,

 

Malwarebytes : Malwarebytes Anti-Malware is a free download that removes viruses and malware from your computer

 

Prends bien la version FREE

*** Met-le à jour puis choisi, Exécuter un examen complet

 

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

 

Poste le rapport final.

 

Et pour contrôle :

Télécharges << ZHPDiag>> (de Nicolas Coolman)

 

dezzipes le fichier sur ton bureau...

Fais un clic-droit sur l'icône ZHPDiag .exe et choisis "exécuter en tant qu'administrateur".

 

 

L'installation va créer raccourcis (ZHPDiag et ZHPFix et MBRchek) sur ton bureau

 

 

 

A la fin de l'installation ZHPDiag va se lancer....

 

Cliques sur l'icône "Options" (image du tournevis) et coches toutes les options.

Cliques sur "Lancer le diagnostique" (image de la loupe) et patiente...

 

A la fin du scan cliques sur l'icône "sauvegarder le fichier sous" (image de la disquette bleu) et enregistre le rapport sur ton bureau.

 

Mets le rapport ici car il prend bien de la place.

Cliquez ici.

ou la

Cijoint.fr - Service gratuit de dépôt de fichiers

[maykiki]

Merci de me répondre!

 

J avais deja efface qq trucs et passe MBAM qui avait trouve 1 erreur mise en quarantaine.

 

Voila deja le premier rapport:

 

** Rapport MyHosts.txt **

 

MyHosts V.1.0.0.2 de jeanmimigab

 

Merci à la team MH, W-T ,C_XX, Laddy et à Batch_man pour leurs aides

 

Résultat de l'opération:restauration du fichier hosts réussi...

 

** Fin du rapport **

[maykiki]

Voila le nouveau rapport MBAM qui ne trouve rien.

Je mets à la suite le rapport d hier qui a trouve un element!

 

Malwarebytes' Anti-Malware 1.51.0.1200

www.malwarebytes.org

 

Version de la base de données: 7021

 

Windows 6.0.6001 Service Pack 1

Internet Explorer 8.0.6001.19088

 

04/07/2011 22:42:03

mbam-log-2011-07-04 (22-42-03).txt

 

Type d'examen: Examen complet (C:\|D:\|)

Elément(s) analysé(s): 284522

Temps écoulé: 1 heure(s), 8 minute(s), 33 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

 

 

 

 

 

 

 

 

 

 

Malwarebytes' Anti-Malware 1.51.0.1200

www.malwarebytes.org

 

Version de la base de données: 7013

 

Windows 6.0.6001 Service Pack 1

Internet Explorer 8.0.6001.19088

 

03/07/2011 23:38:07

mbam-log-2011-07-03 (23-38-07).txt

 

Type d'examen: Examen éclair

Elément(s) analysé(s): 110706

Temps écoulé: 1 minute(s), 24 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (PUM.Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

[maykiki]

Et voila le dernier rapport!

 

Rapport de ZHPDiag v1.27.2364 par Nicolas Coolman, Update du 04/07/2011

Run by Mayke at 04/07/2011 22:55:34

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.19088

MFIE: Mozilla Firefox 5.0 v (Defaut)

 

---\\ System Information

Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)

Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3000 MB (56% free)

System Restore: Activé (Enable)

System drive C: has 17 GB (24%) free of 70 GB

 

---\\ Logged in mode

Computer Name: PC-DE-MAYKE

User Name: Mayke

All Users Names: Mayke, Administrateur,

Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ %AppData%=C:\Users\Mayke\AppData\Roaming\

~ %Desktop%=C:\Users\Mayke\Desktop\

~ %Favorites%=C:\Users\Mayke\Favorites\

~ %LocalAppData%=C:\Users\Mayke\AppData\Local\

~ %StartMenu%=C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 17 Go of 70 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 48 Go of 70 Go)

E:\ CD-ROM drive (Not Inserted)

F:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Explorateur Windows.) (.19/10/2010 - 07:29:41.) -- C:\Windows\Explorer.exe [2927104]

[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\system32\Wininit.exe [96768]

[MD5.DE4685DE5130039FA63DA66C0F72F787] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.16/06/2011 - 07:08:58.) -- C:\Windows\system32\wininet.dll [916480]

[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/01/2008 - 03:24:49.) -- C:\Windows\system32\Winlogon.exe [314880]

[MD5.0D83C87A801A3DFCD1BF73893FE7518C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.21/01/2008 - 08:24:56.) -- C:\Windows\system32\drivers\atapi.sys [21560]

[MD5.B4EFFE29EB4F15538FD8A9681108492D] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\drivers\ntfs.sys [1081912]

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 1/3

~ Mes musiques (My Musics) : 3/129

~ Mes Videos (My Videos) : 1/10

~ Mes Favoris (My Favorites) : 7/26

~ Mon Bureau (My Desktop) : 4/253

~ Menu demarrer (Programs) : 7/41

 

 

 

---\\ Processus lancés

[MD5.B9AA850CDA55097EB13E03698C8F5828] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [266776]

[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184]

[MD5.5C080C61235C74568C2978FC7E602AE0] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896]

[MD5.86171114D84AFBD3DFCE930E320C1BBF] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6183456]

[MD5.2AC7F8B8BF0D5D327A3A2A00453222C4] - (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe [200704]

[MD5.2B8EDA2A4D0358A4DC52039676A2D5E5] - (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\Program Files\Launch Manager\LManager.exe [809480]

[MD5.A9E634BBEDC2B41162767ED7F7DD9646] - (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe [526896]

[MD5.A580E4309E636A93B89E89712FF0959D] - (.Acer Inc. - Acer ePower Management - DMC.) -- C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [409600]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]

[MD5.0D2F62C6E2E9BD508F7BF2E6C8BA176D] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1043968]

[MD5.1029B84ECBE4B95ACB8491A3FE63D70F] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [136216]

[MD5.3CD5BBDA19A1AB4EBA359E0A14FDF0F0] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [171032]

[MD5.3142195521FEE436088EE8A5748DE1B1] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [170520]

[MD5.F06CA6475B7A538DB9DC3F7B896B97E4] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449584]

[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [97680]

[MD5.87558C6D3B8BE9F4724502E6DD1591CF] - (...) -- C:\Program Files\PdaNet for iPhone\PdaNetPC.exe [215568]

[MD5.F2F3617C63B87AA2DE139DC9E37420B5] - (.Intel Corporation - igfxext Module.) -- C:\Windows\system32\igfxext.exe [179224]

[MD5.B2994EC6452DBD04E57828EEFEDFB93C] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Mayke\AppData\Local\Temp\RtkBtMnt.exe [204800]

[MD5.D641DB524C3D9A1AB72F94BDC6FF27D7] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472]

[MD5.F96EBC5A624349D81DCC7600A3C5DC43] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120]

[MD5.4FC85445130425BAA9F0C48113EDFEC4] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\prefs.js

M3 - MFPP: Plugins - [Mayke] -- C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\searchplugins\conduit.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Mayke] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16291.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nosltd.com/getPlus+®,version=1.6.2.91] - (.NOS Microsystems Ltd. - getplusplusadobe16291.) -- C:\Program Files\NOS\bin\np_gp.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

M0 - MFSP: prefs.js [Mayke - raz6ubhh.default] Google

M2 - MFEP: prefs.js [Mayke - raz6ubhh.default\engine@conduit.com] [] Conduit Engine v3.3.3.2 (.Conduit Ltd..)

M2 - MFEP: prefs.js [Mayke - raz6ubhh.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)

M2 - MFEP: prefs.js [Mayke - raz6ubhh.default\{3e0e7d2a-070f-4a47-b019-91fe5385ba79}] [] AddThis v3.1.1 (.AddThis.)

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Users\Mayke\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com

R0 - HKUS\S-1-5-21-3072727286-2981826037-1783307074-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Babylon Search

R1 - HKUS\S-1-5-21-3072727286-2981826037-1783307074-1000\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} . (...) -- (.not file.)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.Egis Incorporated. - Acer eDataSecurity Management Explorer Tool.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe

O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe

O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] . (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe

O4 - HKLM\..\Run: [ePower_DMC] . (.Acer Inc. - Acer ePower Management - DMC.) -- C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe

O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Incorporated - WR_PopUp.) -- C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [igfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 - Capture d'écran et lancement.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk . (...) -- C:\Program Files\PdaNet for iPhone\PdaNetPC.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\Mayke\Desktop\jv16 PowerTools 2011.lnk . (.Macecraft Software.) -- C:\Program Files\jv16 PowerTools 2011\jv16PT.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\jv16 PowerTools 2011.lnk . (.Macecraft Software.) -- C:\Program Files\jv16 PowerTools 2011\jv16PT.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Users\Mayke\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico (.not file.)

O9 - Extra button: Skype Plug-In - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{78C06080-D7C7-4FBA-9CFE-8AC34E178AE0}: DhcpNameServer = 212.27.40.241 212.27.40.240

O17 - HKLM\System\CS1\Services\Tcpip\..\{78C06080-D7C7-4FBA-9CFE-8AC34E178AE0}: DhcpNameServer = 212.27.40.241 212.27.40.240

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.Agere Systems - Agere Soft Modem Call Progress Service.) - C:\Windows\system32\agrsmsvc.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

O23 - Service: eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated - Acer eDataSecurity Management Service.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: MobilityService (MobilityService) . (.Pas de propriétaire - app.) - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: C:\Program Files\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files\Nero\Update\NASvc.exe

O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\Windows\System32\ZoneLabs\vsmon.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.8536F3768E1BFD2F8441C732EFE2DE2E] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.0EA8C1256AA9F68287CD8F06EB527238] [APT] [{8E59B718-424B-4749-A713-25612669871F}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Vsdatant) . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - C:\Windows\System32\DRIVERS\vsdatant.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}

O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}

O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8 - (.SuYin.) [HKLM] -- {A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}

O42 - Logiciel: Acer Empowering Technology - (.Acer Incorporated.) [HKLM] -- {8F1B6239-FEA0-450A-A950-B05276CE177C}

O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM] -- GridVista

O42 - Logiciel: Acer Mobility Center Plug-In - (.Acer Inc..) [HKLM] -- {11316260-6666-467B-AC34-183FCB5D4335}

O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer eDataSecurity Management - (.Egis Inc..) [HKLM] -- {A5633652-3795-4829-BB0B-644F0279E279}

O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F}

O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}

O42 - Logiciel: Acer eSettings Management - (.Acer Incorporated.) [HKLM] -- {13D85C14-2B85-419F-AC41-C7F21E68B25D}

O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites

O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader X (10.1.0) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}

O42 - Logiciel: Agere Systems HDA Modem - (.Agere Systems.) [HKLM] -- Agere Systems Soft Modem

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {CACAEB5F-174D-4C7C-AC56-A33289A807CA}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}

O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}

O42 - Logiciel: CleanUp! - (.Pas de propriétaire.) [HKLM] -- CleanUp!

O42 - Logiciel: FileZilla Client 3.3.5.1 - (.Pas de propriétaire.) [HKLM] -- FileZilla Client

O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM] -- FormatFactory

O42 - Logiciel: FoxTab AVI Converter - (.Pas de propriétaire.) [HKCU] -- FoxTab AVI Converter

O42 - Logiciel: Freecorder - (.Applian Technologies Inc..) [HKLM] -- Freecorder4.1

O42 - Logiciel: Garmin USB Drivers - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}

O42 - Logiciel: Garmin WebUpdater - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {E394CC6D-9F54-41CC-9415-6FFF07885881}

O42 - Logiciel: Glary Utilities 2.29.0.1032 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: HP Deskjet 3050 J610 series Aide - (.Hewlett Packard.) [HKLM] -- {F7632A9B-661E-4FD9-B1A4-3B86BC99847F}

O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {787D1A33-A97B-4245-87C0-7174609A540C}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: ImgBurn 2.3.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- {75ADEFA2-D4FF-4B37-9E93-4306E6AC176B}_is1

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Intel® Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI

O42 - Logiciel: Java 6 Update 24 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}

O42 - Logiciel: K-Lite Codec Pack 6.5.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1

O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM] -- LManager

O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 3050 J610 series - (.Hewlett-Packard Co..) [HKLM] -- {5E6A397B-DCEA-4B02-95A7-22383979E206}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {81E95872-8357-4363-A764-8F98B28340C5}

O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- Marvell Miniport Driver

O42 - Logiciel: MediaCoder 0.6.0 - (.Stanley Huang.) [HKLM] -- MediaCoder

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)

O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}

O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}

O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM] -- {943CFD7D-5336-47AF-9418-E02473A5A517}

O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM] -- {555868C6-49FB-484F-BB43-8980651A1B00}

O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}

O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM] -- {FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}

O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}

O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}

O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}

O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}

O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PC Inspector smart recovery - (.Pas de propriétaire.) [HKLM] -- {C9A87D86-FDFD-418B-BF96-EF09320973B3}

O42 - Logiciel: PdaNet Desktop for iPhone 1.54 - (.June Fabrics Technology Inc.) [HKLM] -- PdaNet_is1

O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKCU] -- PhotoFiltre

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}

O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {DC24971E-1946-445D-8A82-CE685433FA7D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{AD0DE453-0804-4495-9C91-33D0F9AA5463}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD907315-705A-4475-A1A0-2A1245803E4D}

O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD907315-705A-4475-A1A0-2A1245803E4D}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0173254-F442-4D04-9154-43FA157B83D0}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A0173254-F442-4D04-9154-43FA157B83D0}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}

O42 - Logiciel: Skype™ 5.3 - (.Skype Technologies S.A..) [HKLM] -- {5335DADB-34BA-4AE8-A519-648D78498846}

O42 - Logiciel: SpywareBlaster 4.4 - (.Javacool Software LLC.) [HKLM] -- SpywareBlaster_is1

O42 - Logiciel: Sweet Home 3D version 2.6 - (.eTeks.) [HKLM] -- Sweet Home 3D_is1

O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2536413) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{95DF5260-331D-4FFD-A2D5-C64164751945}

O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: WBFS Manager 2.5 - (.WBFS.) [HKLM] -- {A5B5B6D8-DE44-44A3-90C4-8C07A1E0FAD4}

O42 - Logiciel: WBFS Manager 3.0 - (.AlexDP.) [HKLM] -- WBFS Manager 3.0

O42 - Logiciel: WinSCP 4.2.9 - (.Martin Prikryl.) [HKLM] -- winscp3_is1

O42 - Logiciel: Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) - (.Garmin.) [HKLM] -- 49CF605F02C7954F4E139D18828DE298CD59217C

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {0840B4D6-7DD1-4187-8523-E6FC0007EFB7}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {353FE16B-30FE-469A-BF55-B978F4218003}

O42 - Logiciel: jv16 PowerTools 1.3 - (.Pas de propriétaire.) [HKLM] -- jv16 PowerTools_is1

O42 - Logiciel: jv16 PowerTools 2011 - (.Macecraft Software.) [HKLM] -- jv16 PowerTools 2011

O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKCU] -- uTorrent

O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\AC3Filter]

[HKCU\Software\Acer]

[HKCU\Software\Adobe]

[HKCU\Software\AppDataLow\ISWVolatile]

[HKCU\Software\AppDataLow\Software\Conduit]

[HKCU\Software\AppDataLow\Software\Google]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Monitored]

[HKCU\Software\AppDataLow\Software\settings]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\ApplianTechnologies]

[HKCU\Software\Ask&Record]

[HKCU\Software\Avira]

[HKCU\Software\BitTorrent]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Conduit]

[HKCU\Software\CyberLink]

[HKCU\Software\DVDVideoSoft]

[HKCU\Software\EasyBits]

[HKCU\Software\FreeTime]

[HKCU\Software\Freecorder]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\Garmin]

[HKCU\Software\GlarySoft]

[HKCU\Software\Google]

[HKCU\Software\HP]

[HKCU\Software\Haali]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\HookNetwork]

[HKCU\Software\IM Providers]

[HKCU\Software\ImgBurn]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\MONOGRAM]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Martin Prikryl]

[HKCU\Software\MediaInfo]

[HKCU\Software\Mozilla]

[HKCU\Software\Nero]

[HKCU\Software\Netscape]

[HKCU\Software\NewTech Infosystems]

[HKCU\Software\ODBC]

[HKCU\Software\PdaNetIPhone]

[HKCU\Software\Policies]

[HKCU\Software\RatioMaster.NET]

[HKCU\Software\Realtek]

[HKCU\Software\SimonTatham]

[HKCU\Software\Skype]

[HKCU\Software\Sonix]

[HKCU\Software\Synaptics]

[HKCU\Software\TeamViewer]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\VirtualDub.org]

[HKCU\Software\Visan]

[HKCU\Software\WinRAR]

[HKCU\Software\Wistron]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Zone Labs]

[HKCU\Software\Zugo]

[HKCU\Software\cybelsoft]

[HKCU\Software\ej-technologies]

[HKCU\Software\madFlac]

[HKCU\Software\stevengould.org]

[HKLM\Software\Acer]

[HKLM\Software\Adobe]

[HKLM\Software\Agere]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Applian Technologies]

[HKLM\Software\AviSynth]

[HKLM\Software\Avira]

[HKLM\Software\CXT]

[HKLM\Software\CheckPoint]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Codec Tweak Tool]

[HKLM\Software\Conduit]

[HKLM\Software\Conexant]

[HKLM\Software\CyberLink]

[HKLM\Software\FileZilla 3]

[HKLM\Software\Freecorder]

[HKLM\Software\GEAR Software]

[HKLM\Software\GNU]

[HKLM\Software\Garmin]

[HKLM\Software\Google]

[HKLM\Software\HP]

[HKLM\Software\HaaliMkx]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\InstalledOptions]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\KLCodecPack]

[HKLM\Software\Licenses]

[HKLM\Software\LightScribe]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Martin Prikryl]

[HKLM\Software\Marvell]

[HKLM\Software\McAfee.com]

[HKLM\Software\McAfee]

[HKLM\Software\MimarSinan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\Nero]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\ODBC]

[HKLM\Software\OemSetup]

[HKLM\Software\Policies]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek USB 2.0 Card Reader]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Skype]

[HKLM\Software\Sonic]

[HKLM\Software\SpywareBlaster]

[HKLM\Software\Synaptics]

[HKLM\Software\TeamViewer]

[HKLM\Software\Trad-FR]

[HKLM\Software\TrendMicro]

[HKLM\Software\VideoLAN]

[HKLM\Software\WOW6432Node]

[HKLM\Software\WinRAR]

[HKLM\Software\Wistron]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Zone Labs]

[HKLM\Software\cybelsoft]

[HKLM\Software\instinno]

[HKLM\Software\mcafeeupdater]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

[HKLM\Software\nSplitter]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 19/10/2010 - 01:15:28 - [3094515] ----D- C:\Program Files\7-Zip

O43 - CFD: 19/10/2010 - 00:11:34 - [148439429] ----D- C:\Program Files\Acer

O43 - CFD: 19/10/2010 - 00:08:38 - [1372369] ----D- C:\Program Files\Acer Inc

O43 - CFD: 08/05/2008 - 08:02:56 - [0] ----D- C:\Program Files\Acer Incorporated

O43 - CFD: 08/05/2008 - 08:15:14 - [12683094] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

O43 - CFD: 18/06/2011 - 11:39:04 - [164206100] ----D- C:\Program Files\Adobe

O43 - CFD: 19/10/2010 - 15:04:34 - [2306366] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 19/12/2010 - 02:02:50 - [5365305] ----D- C:\Program Files\ArtOfIllusion

O43 - CFD: 19/10/2010 - 00:30:00 - [123472087] ----D- C:\Program Files\Avira

O43 - CFD: 06/01/2011 - 02:05:30 - [144857] ----D- C:\Program Files\AviSynth 2.5

O43 - CFD: 21/04/2011 - 00:21:20 - [621129] ----D- C:\Program Files\Bonjour

O43 - CFD: 03/07/2011 - 23:39:44 - [0] ----D- C:\Program Files\CheckPoint

O43 - CFD: 14/03/2011 - 00:34:12 - [571183] ----D- C:\Program Files\CleanUp!

O43 - CFD: 23/06/2011 - 23:46:00 - [705646916] ----D- C:\Program Files\Common Files

O43 - CFD: 19/10/2010 - 01:27:26 - [521312] ----D- C:\Program Files\Conduit

O43 - CFD: 19/06/2011 - 17:59:24 - [1232740] ----D- C:\Program Files\Convar

O43 - CFD: 19/10/2010 - 00:58:24 - [0] ----D- C:\Program Files\Cyberlink

O43 - CFD: 28/12/2010 - 23:27:18 - [5514190] ----D- C:\Program Files\DAEMON Tools Lite

O43 - CFD: 21/06/2011 - 08:25:22 - [304608] ----D- C:\Program Files\DIFX

O43 - CFD: 18/10/2010 - 23:48:28 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 08/02/2011 - 17:23:14 - [16451399] ----D- C:\Program Files\FileZilla FTP Client

O43 - CFD: 24/06/2011 - 00:28:34 - [14719600] ----D- C:\Program Files\FoxTabAVIConverter

O43 - CFD: 11/05/2011 - 22:00:40 - [11863795] ----D- C:\Program Files\Freecorder

O43 - CFD: 27/02/2011 - 00:42:40 - [118070272] ----D- C:\Program Files\FreeTime

O43 - CFD: 21/06/2011 - 08:26:56 - [16475956] ----D- C:\Program Files\Garmin

O43 - CFD: 21/04/2011 - 13:04:04 - [18553508] ----D- C:\Program Files\Glary Utilities

O43 - CFD: 27/05/2011 - 20:58:08 - [39616790] ----D- C:\Program Files\Google

O43 - CFD: 16/03/2011 - 16:51:10 - [46912634] ----D- C:\Program Files\HP

O43 - CFD: 31/01/2011 - 21:14:00 - [2268056] ----D- C:\Program Files\ImgBurn

O43 - CFD: 19/06/2011 - 17:59:24 - [87385880] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 30/04/2008 - 09:21:36 - [51569] ----D- C:\Program Files\Intel

O43 - CFD: 17/06/2011 - 13:39:06 - [5881276] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 21/04/2011 - 15:00:24 - [1856627] ----D- C:\Program Files\iPod

O43 - CFD: 21/04/2011 - 15:01:42 - [128196056] ----D- C:\Program Files\iTunes

O43 - CFD: 18/03/2011 - 11:37:46 - [89315919] ----D- C:\Program Files\Java

O43 - CFD: 14/03/2011 - 00:45:20 - [2759359] ----D- C:\Program Files\jv16 PowerTools

O43 - CFD: 03/07/2011 - 22:47:40 - [5458048905] ----D- C:\Program Files\jv16 PowerTools 2011

O43 - CFD: 24/10/2010 - 21:13:38 - [46774473] ----D- C:\Program Files\K-Lite Codec Pack

O43 - CFD: 19/10/2010 - 00:00:34 - [2390037] ----D- C:\Program Files\Launch Manager

O43 - CFD: 31/01/2011 - 20:34:20 - [5644596] ----D- C:\Program Files\ma-config.com

O43 - CFD: 03/07/2011 - 23:35:20 - [7565365] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 30/04/2008 - 09:24:00 - [2308232] ----D- C:\Program Files\Marvell

O43 - CFD: 06/01/2011 - 19:55:48 - [38688739] ----D- C:\Program Files\MediaCoder

O43 - CFD: 28/06/2011 - 00:28:38 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 02/11/2006 - 14:37:36 - [92807095] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 28/12/2010 - 23:36:14 - [647041948] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 17/06/2011 - 00:53:12 - [38411899] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 28/12/2010 - 23:36:50 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 28/12/2010 - 23:33:14 - [1387249] ----D- C:\Program Files\Microsoft Visual Studio 8

O43 - CFD: 03/01/2011 - 20:24:22 - [151741826] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 19/01/2011 - 00:21:40 - [8167779] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 20/10/2010 - 14:21:04 - [99168366] ----D- C:\Program Files\Movie Maker

O43 - CFD: 27/06/2011 - 20:54:50 - [39282230] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 28/12/2010 - 23:37:08 - [26521] ----D- C:\Program Files\MSBuild

O43 - CFD: 19/10/2010 - 21:00:36 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/06/2011 - 23:48:00 - [3991480] ----D- C:\Program Files\Nero

O43 - CFD: 08/05/2008 - 08:27:58 - [220066573] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 19/10/2010 - 14:06:28 - [494512] ----D- C:\Program Files\NOS

O43 - CFD: 03/05/2011 - 01:51:44 - [1300469] ----D- C:\Program Files\PdaNet for iPhone

O43 - CFD: 07/11/2010 - 22:01:24 - [3699431] ----D- C:\Program Files\PhotoFiltre

O43 - CFD: 31/12/2010 - 21:41:46 - [76322555] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/11/2010 - 00:53:36 - [703857] ----D- C:\Program Files\Ratiomaster

O43 - CFD: 15/02/2011 - 00:30:18 - [37992780] ----D- C:\Program Files\Realtek

O43 - CFD: 02/11/2006 - 14:37:36 - [38686465] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 31/12/2010 - 08:48:46 - [209715200] ----D- C:\Program Files\Shabestar.net

O43 - CFD: 03/07/2011 - 23:15:16 - [19052315] R---D- C:\Program Files\Skype

O43 - CFD: 19/10/2010 - 01:12:16 - [5584757] ----D- C:\Program Files\SpywareBlaster

O43 - CFD: 19/12/2010 - 00:25:10 - [101836734] ----D- C:\Program Files\Sweet Home 3D

O43 - CFD: 30/04/2008 - 09:25:08 - [15083609] ----D- C:\Program Files\Synaptics

O43 - CFD: 03/07/2011 - 23:17:36 - [0] ----D- C:\Program Files\TeamViewer

O43 - CFD: 02/11/2006 - 15:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 29/11/2010 - 23:36:18 - [328568] ----D- C:\Program Files\uTorrent

O43 - CFD: 27/11/2010 - 21:58:18 - [80529230] ----D- C:\Program Files\VideoLAN

O43 - CFD: 03/07/2011 - 23:17:02 - [0] ----D- C:\Program Files\VITSOFT

O43 - CFD: 09/06/2011 - 23:10:50 - [5359012] ----D- C:\Program Files\WBFS

O43 - CFD: 08/05/2008 - 19:02:28 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 08/05/2008 - 19:02:26 - [2760704] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 08/05/2008 - 19:02:26 - [4492240] ----D- C:\Program Files\Windows Defender

O43 - CFD: 08/05/2008 - 19:02:26 - [7084664] ----D- C:\Program Files\Windows Journal

O43 - CFD: 03/11/2010 - 02:30:34 - [45806173] ----D- C:\Program Files\Windows Live

O43 - CFD: 03/11/2010 - 02:30:20 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 17/06/2011 - 00:50:42 - [9116344] ----D- C:\Program Files\Windows Mail

O43 - CFD: 20/10/2010 - 14:21:10 - [4499178] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 18/10/2010 - 23:48:28 - [7945486] ----D- C:\Program Files\Windows NT

O43 - CFD: 08/05/2008 - 19:02:26 - [13464738] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 08/05/2008 - 19:02:28 - [6511530] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 30/12/2010 - 10:10:02 - [3525705] ----D- C:\Program Files\WinRAR

O43 - CFD: 31/12/2010 - 23:35:10 - [9025647] ----D- C:\Program Files\WinSCP

O43 - CFD: 04/07/2011 - 22:55:40 - [3924227] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 19/10/2010 - 00:37:50 - [19519198] ----D- C:\Program Files\Zone Labs

O43 - CFD: 18/06/2011 - 11:39:18 - [3606170] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 21/04/2011 - 15:00:20 - [92238436] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 08/05/2008 - 08:12:24 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 03/07/2011 - 23:09:18 - [10417223] ----D- C:\Program Files\Common Files\DVDVideoSoft

O43 - CFD: 08/05/2008 - 08:30:34 - [4770822] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 18/03/2011 - 11:38:24 - [1247175] ----D- C:\Program Files\Common Files\Java

O43 - CFD: 08/05/2008 - 08:27:40 - [7178034] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 16/03/2011 - 16:52:24 - [448579866] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 08/05/2008 - 08:26:26 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 23/06/2011 - 23:46:26 - [8652924] ----D- C:\Program Files\Common Files\Nero

O43 - CFD: 02/11/2006 - 13:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 27/05/2011 - 20:48:06 - [2254216] ----D- C:\Program Files\Common Files\Skype

O43 - CFD: 02/11/2006 - 13:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 29/12/2010 - 20:28:38 - [42750982] ----D- C:\Program Files\Common Files\System

O43 - CFD: 03/11/2010 - 02:27:24 - [33047055] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 18/06/2011 - 11:39:08 - [479] ----D- C:\ProgramData\Adobe

O43 - CFD: 25/10/2010 - 18:46:44 - [84429552] ----D- C:\ProgramData\Apple

O43 - CFD: 19/10/2010 - 15:06:10 - [770226400] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 19/10/2010 - 00:30:00 - [50583599] ----D- C:\ProgramData\Avira

O43 - CFD: 18/10/2010 - 23:48:28 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 19/10/2010 - 00:37:50 - [4212] ----D- C:\ProgramData\CheckPoint

O43 - CFD: 19/10/2010 - 01:00:04 - [0] ----D- C:\ProgramData\CyberLink

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 19/10/2010 - 00:08:22 - [420] ----D- C:\ProgramData\eSobi

O43 - CFD: 18/10/2010 - 23:48:28 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 08/05/2008 - 08:16:02 - [0] ----D- C:\ProgramData\FloodLightGames

O43 - CFD: 19/10/2010 - 00:22:50 - [539219] ----D- C:\ProgramData\Google

O43 - CFD: 16/03/2011 - 16:43:28 - [59545621] ----D- C:\ProgramData\HP

O43 - CFD: 23/06/2011 - 23:48:48 - [390] ----D- C:\ProgramData\LightScribe

O43 - CFD: 31/01/2011 - 20:34:06 - [1224266] ----D- C:\ProgramData\ma-config.com

O43 - CFD: 03/07/2011 - 23:35:18 - [6935071] ----D- C:\ProgramData\Malwarebytes

O43 - CFD: 19/10/2010 - 14:06:40 - [41316] ----D- C:\ProgramData\McAfee

O43 - CFD: 18/10/2010 - 23:48:28 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 28/06/2011 - 00:28:38 - [153573821] ----D- C:\ProgramData\Microsoft

O43 - CFD: 17/06/2011 - 00:59:48 - [64822] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 18/10/2010 - 23:48:28 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 23/06/2011 - 23:48:02 - [2541584] ----D- C:\ProgramData\Nero

O43 - CFD: 30/11/2010 - 19:12:36 - [318654] ----D- C:\ProgramData\NOS

O43 - CFD: 31/01/2011 - 20:14:16 - [0] ----D- C:\ProgramData\NtiDvdCopy

O43 - CFD: 19/10/2010 - 00:40:30 - [36] ----D- C:\ProgramData\SiteAdvisor

O43 - CFD: 27/05/2011 - 20:48:02 - [23206924] ----D- C:\ProgramData\Skype

O43 - CFD: 27/05/2011 - 20:50:52 - [2304993] ----D- C:\ProgramData\Skype Extras

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 28/11/2010 - 16:23:26 - [189] ----D- C:\ProgramData\Sun

O43 - CFD: 19/10/2010 - 01:11:24 - [0] ----D- C:\ProgramData\TEMP

O43 - CFD: 02/11/2006 - 15:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 16/03/2011 - 21:41:58 - [0] ----D- C:\ProgramData\Visan

O43 - CFD: 27/01/2011 - 13:53:24 - [49972] ----D- C:\ProgramData\WindSolutions

O43 - CFD: 08/05/2008 - 08:15:16 - [6904816] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

O43 - CFD: 19/10/2010 - 15:06:58 - [541235] ----D- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

O43 - CFD: 04/01/2011 - 17:48:10 - [3274] ----D- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}

O43 - CFD: 08/05/2008 - 08:25:58 - [16083] ----D- C:\Users\Mayke\AppData\Roaming\Acer GameZone Console

O43 - CFD: 30/11/2010 - 19:22:00 - [4162234] ----D- C:\Users\Mayke\AppData\Roaming\Adobe

O43 - CFD: 25/10/2010 - 18:47:02 - [3115562835] ----D- C:\Users\Mayke\AppData\Roaming\Apple Computer

O43 - CFD: 11/05/2011 - 23:57:24 - [1202] ----D- C:\Users\Mayke\AppData\Roaming\Audacity

O43 - CFD: 19/10/2010 - 00:40:26 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Avira

O43 - CFD: 19/10/2010 - 00:48:12 - [18596] ----D- C:\Users\Mayke\AppData\Roaming\CheckPoint

O43 - CFD: 27/01/2011 - 14:11:20 - [22019] ----D- C:\Users\Mayke\AppData\Roaming\CopyTrans

O43 - CFD: 28/12/2010 - 23:24:18 - [533] ----D- C:\Users\Mayke\AppData\Roaming\DAEMON Tools

O43 - CFD: 19/12/2010 - 02:10:56 - [0] ----D- C:\Users\Mayke\AppData\Roaming\eTeks

O43 - CFD: 07/03/2011 - 01:00:06 - [15563] ----D- C:\Users\Mayke\AppData\Roaming\FileZilla

O43 - CFD: 27/02/2011 - 00:17:24 - [52310] ----D- C:\Users\Mayke\AppData\Roaming\FreeFLVConverter

O43 - CFD: 03/07/2011 - 23:33:36 - [45999] ----D- C:\Users\Mayke\AppData\Roaming\GlarySoft

O43 - CFD: 19/10/2010 - 00:23:22 - [1680] ----D- C:\Users\Mayke\AppData\Roaming\Google

O43 - CFD: 16/03/2011 - 16:51:06 - [0] ----D- C:\Users\Mayke\AppData\Roaming\HpUpdate

O43 - CFD: 18/10/2010 - 23:53:32 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Identities

O43 - CFD: 31/01/2011 - 21:57:42 - [9822] ----D- C:\Users\Mayke\AppData\Roaming\ImgBurn

O43 - CFD: 18/10/2010 - 23:59:56 - [0] ----D- C:\Users\Mayke\AppData\Roaming\InstallShield

O43 - CFD: 18/10/2010 - 23:54:02 - [60555] ----D- C:\Users\Mayke\AppData\Roaming\Macromedia

O43 - CFD: 03/07/2011 - 23:35:28 - [4536] ----D- C:\Users\Mayke\AppData\Roaming\Malwarebytes

O43 - CFD: 02/11/2006 - 14:37:36 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Media Center Programs

O43 - CFD: 06/06/2011 - 21:38:06 - [2212215] -S--D- C:\Users\Mayke\AppData\Roaming\Microsoft

O43 - CFD: 19/10/2010 - 00:24:32 - [18329004] ----D- C:\Users\Mayke\AppData\Roaming\Mozilla

O43 - CFD: 23/06/2011 - 23:48:46 - [43302] ----D- C:\Users\Mayke\AppData\Roaming\Nero

O43 - CFD: 07/11/2010 - 22:06:52 - [350] ----D- C:\Users\Mayke\AppData\Roaming\PhotoFiltre

O43 - CFD: 03/07/2011 - 23:15:22 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Skype

O43 - CFD: 28/05/2011 - 22:16:10 - [47408] ----D- C:\Users\Mayke\AppData\Roaming\skypePM

O43 - CFD: 03/07/2011 - 23:05:34 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Smart PC Solutions

O43 - CFD: 03/07/2011 - 23:17:36 - [0] ----D- C:\Users\Mayke\AppData\Roaming\TeamViewer

O43 - CFD: 06/06/2011 - 21:38:04 - [8704] ----D- C:\Users\Mayke\AppData\Roaming\Template

O43 - CFD: 19/06/2011 - 20:31:58 - [16918] ----D- C:\Users\Mayke\AppData\Roaming\uTorrent

O43 - CFD: 16/03/2011 - 21:41:58 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Visan

O43 - CFD: 06/01/2011 - 03:02:38 - [1461244] ----D- C:\Users\Mayke\AppData\Roaming\vlc

O43 - CFD: 27/01/2011 - 22:48:58 - [9004] ----D- C:\Users\Mayke\AppData\Roaming\WindSolutions

O43 - CFD: 30/12/2010 - 10:10:14 - [0] ----D- C:\Users\Mayke\AppData\Roaming\WinRAR

O43 - CFD: 27/01/2011 - 22:39:32 - [0] ----D- C:\Users\Mayke\AppData\Roaming\Xilisoft

O43 - CFD: 19/10/2010 - 22:41:14 - [51378815] ----D- C:\Users\Mayke\AppData\Local\Adobe

O43 - CFD: 19/10/2010 - 15:04:36 - [30074368] ----D- C:\Users\Mayke\AppData\Local\Apple

O43 - CFD: 27/02/2011 - 00:49:18 - [73271509] ----D- C:\Users\Mayke\AppData\Local\Apple Computer

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Application Data

O43 - CFD: 19/10/2010 - 00:02:04 - [52929024] ----D- C:\Users\Mayke\AppData\Local\Downloaded Installations

O43 - CFD: 03/07/2011 - 22:48:12 - [521794515] ----D- C:\Users\Mayke\AppData\Local\FLVService

O43 - CFD: 27/05/2011 - 20:59:06 - [58239926] ----D- C:\Users\Mayke\AppData\Local\Google

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Historique

O43 - CFD: 16/03/2011 - 21:45:42 - [60422] ----D- C:\Users\Mayke\AppData\Local\HP

O43 - CFD: 11/05/2011 - 16:34:50 - [270] ----D- C:\Users\Mayke\AppData\Local\MediaGet2

O43 - CFD: 28/06/2011 - 00:28:38 - [1658860777] ----D- C:\Users\Mayke\AppData\Local\Microsoft

O43 - CFD: 28/12/2010 - 23:32:38 - [0] ----D- C:\Users\Mayke\AppData\Local\Microsoft Help

O43 - CFD: 19/10/2010 - 00:24:24 - [80192785] ----D- C:\Users\Mayke\AppData\Local\Mozilla

O43 - CFD: 11/05/2011 - 16:35:08 - [0] ----D- C:\Users\Mayke\AppData\Local\PackageAware

O43 - CFD: 04/07/2011 - 22:54:56 - [313697818] ----D- C:\Users\Mayke\AppData\Local\Temp

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Temporary Internet Files

O43 - CFD: 19/10/2010 - 01:01:28 - [14894] ----D- C:\Users\Mayke\AppData\Local\VirtualStore

O43 - CFD: 09/06/2011 - 23:11:56 - [4364] ----D- C:\Users\Mayke\AppData\Local\WBFSManager

O43 - CFD: 19/10/2010 - 22:41:14 - [51378815] ----D- C:\Users\Mayke\AppData\Local\Adobe

O43 - CFD: 19/10/2010 - 15:04:36 - [30074368] ----D- C:\Users\Mayke\AppData\Local\Apple

O43 - CFD: 27/02/2011 - 00:49:18 - [73271509] ----D- C:\Users\Mayke\AppData\Local\Apple Computer

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Application Data

O43 - CFD: 19/10/2010 - 00:02:04 - [52929024] ----D- C:\Users\Mayke\AppData\Local\Downloaded Installations

O43 - CFD: 03/07/2011 - 22:48:12 - [521794515] ----D- C:\Users\Mayke\AppData\Local\FLVService

O43 - CFD: 27/05/2011 - 20:59:06 - [58239926] ----D- C:\Users\Mayke\AppData\Local\Google

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Historique

O43 - CFD: 16/03/2011 - 21:45:42 - [60422] ----D- C:\Users\Mayke\AppData\Local\HP

O43 - CFD: 11/05/2011 - 16:34:50 - [270] ----D- C:\Users\Mayke\AppData\Local\MediaGet2

O43 - CFD: 28/06/2011 - 00:28:38 - [1658860777] ----D- C:\Users\Mayke\AppData\Local\Microsoft

O43 - CFD: 28/12/2010 - 23:32:38 - [0] ----D- C:\Users\Mayke\AppData\Local\Microsoft Help

O43 - CFD: 19/10/2010 - 00:24:24 - [80192785] ----D- C:\Users\Mayke\AppData\Local\Mozilla

O43 - CFD: 11/05/2011 - 16:35:08 - [0] ----D- C:\Users\Mayke\AppData\Local\PackageAware

O43 - CFD: 04/07/2011 - 22:54:56 - [313697818] ----D- C:\Users\Mayke\AppData\Local\Temp

O43 - CFD: 18/10/2010 - 23:51:36 - [0] -SH-D- C:\Users\Mayke\AppData\Local\Temporary Internet Files

O43 - CFD: 19/10/2010 - 01:01:28 - [14894] ----D- C:\Users\Mayke\AppData\Local\VirtualStore

O43 - CFD: 09/06/2011 - 23:11:56 - [4364] ----D- C:\Users\Mayke\AppData\Local\WBFSManager

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.9D8C480FE14F1D588E5FFAE246AF40A8] - 04/07/2011 - 20:30:44 ---A- . (...) -- C:\MyHosts.txt [230]

O44 - LFC:[MD5.DCEE1200FEFFFFFF57494E444F577E31] - 04/07/2011 - 15:58:18 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1605217]

O44 - LFC:[MD5.DCEE1200FEFFFFFF4C4F47434F4E7E31] - 04/07/2011 - 15:55:16 ---A- . (...) -- C:\Windows\System32\LogConfigTemp.xml [0]

O44 - LFC:[MD5.DCEE1200FEFFFFFF00000000F8F11200] - 04/07/2011 - 15:53:30 ---A- . (...) -- C:\Windows\System32\agent.log [147]

O44 - LFC:[MD5.1004617B97C66A339539FBB06A4FBEF0] - 04/07/2011 - 15:53:18 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.7721D760B096942AADA78BC2951F88E4] - 04/07/2011 - 15:53:14 ---A- . (...) -- C:\Windows\PFRO.log [2205710]

O44 - LFC:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 03/07/2011 - 22:35:19 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [39984]

O44 - LFC:[MD5.3D2C13377763EEAC0CA6FB46F57217ED] - 03/07/2011 - 22:35:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [22712]

O44 - LFC:[MD5.F8EDC0F44BF504FE83251DC1C70F26E4] - 03/07/2011 - 21:32:35 -SHA- . (...) -- C:\Windows\System5537 Data.Repository [22]

O44 - LFC:[MD5.95CD43F44FCB6C7919D1731010C06C26] - 03/07/2011 - 19:34:53 ---A- . (...) -- C:\Windows\IE9_main.log [4223]

O44 - LFC:[MD5.00636B4F2CA6A3EADB633039210C8AA2] - 01/07/2011 - 20:43:05 ---A- . (...) -- C:\Windows\System32\perfc009.dat [104914]

O44 - LFC:[MD5.B583581A9ED6067A21F592CB2D8CFB2C] - 01/07/2011 - 20:43:05 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [127504]

O44 - LFC:[MD5.5E074A6B23E14F9B11F09EBC7836909D] - 01/07/2011 - 20:43:05 ---A- . (...) -- C:\Windows\System32\perfh009.dat [598900]

O44 - LFC:[MD5.965303923CDE810D32E036F8CCD022D8] - 01/07/2011 - 20:43:05 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [681798]

O44 - LFC:[MD5.E93BC262718AF53D060F49776AD5B645] - 01/07/2011 - 20:43:04 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1527530]

O44 - LFC:[MD5.83EEB82E9ED7098EBC0C083C6BFD3116] - 19/06/2011 - 23:35:22 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [404640]

O44 - LFC:[MD5.D6483E33D9C5D40FE1D9D057AD7A4159] - 19/06/2011 - 16:59:22 ---A- . (.Dart Communications - PowerTCP© HTTP Control.) -- C:\Windows\System32\DartWeb.dll [118784]

O44 - LFC:[MD5.7E400D392EB35965251C2EA2450F91DF] - 19/06/2011 - 16:59:22 ---A- . (.Dart Communications - PowerTCP© Winsock Controls.) -- C:\Windows\System32\DartSock.dll [217088]

O44 - LFC:[MD5.FB00273CF7CE639C136853F3FC04B10C] - 19/06/2011 - 16:59:22 ---A- . (.Pas de propriétaire - Gif89 Module.) -- C:\Windows\System32\Gif89.dll [44544]

O44 - LFC:[MD5.668ECDD7CC364DAAB4D1C7E0BC33BB78] - 06/06/2011 - 20:35:48 ---A- . (...) -- C:\Windows\setupact.log [148786]

O44 - LFC:[MD5.F26B3593589CED64F36B60E38FCE47E4] - 12/04/2002 - 12:19:34 ---A- . (...) -- C:\Windows\System32\DartWeb.oca [28672]

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.52BA13039C24B3F8368B1682E0380CEC] - 01/07/2011 - 18:10:09 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf

O45 - LFCP:[MD5.9CB097E178C835B057976439FD3A7DED] - 01/07/2011 - 20:28:17 ---A- - C:\Windows\Prefetch\OUTLOOK.EXE-183FA0F0.pf

O45 - LFCP:[MD5.02219FD0276E5C624989AA4A43086ABD] - 01/07/2011 - 22:04:32 ---A- - C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf

O45 - LFCP:[MD5.08A51D6FA7F8F02C82BBF89736394A97] - 01/07/2011 - 22:04:32 ---A- - C:\Windows\Prefetch\DFRGNTFS.EXE-7E4077FE.pf

O45 - LFCP:[MD5.DC85CF41E44DD87B0AFB83F015E27AC9] - 01/07/2011 - 22:33:14 ---A- - C:\Windows\Prefetch\WINWORD.EXE-C91725A1.pf

O45 - LFCP:[MD5.48A229113D57D049ABD3CFC686F19190] - 02/05/2011 - 18:10:10 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf

O45 - LFCP:[MD5.ACD34F09544A5E84C3A4B253FC353BA3] - 02/05/2011 - 18:10:10 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf

O45 - LFCP:[MD5.E92C0EFBEE7B82FAD462D3BC8253A033] - 02/07/2011 - 10:32:37 ---A- - C:\Windows\Prefetch\HIDCHK.EXE-353BD79D.pf

O45 - LFCP:[MD5.8E57745E5C27973CCED15830B9900E8D] - 02/07/2011 - 17:00:00 ---A- - C:\Windows\Prefetch\WSQMCONS.EXE-118B52B7.pf

O45 - LFCP:[MD5.F9982D57015C1EFFD3687F77EE2B5E4D] - 02/07/2011 - 18:37:10 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf

O45 - LFCP:[MD5.D1E4898042FF68E88563042C829E9BD9] - 02/07/2011 - 18:37:10 ---A- - C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf

O45 - LFCP:[MD5.C9663AD22DA7F4B89B2FF2B1F799B0E4] - 02/07/2011 - 18:37:10 ---A- - C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf

O45 - LFCP:[MD5.F94534D29306DFBB001F2DB0900C570C] - 02/07/2011 - 18:38:13 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-74B3ADF6.pf

O45 - LFCP:[MD5.112613AC043C6CD9006371B57AEB3A7F] - 02/07/2011 - 18:40:20 ---A- - C:\Windows\Prefetch\IGFXSRVC.EXE-96A493A4.pf

O45 - LFCP:[MD5.23AFCB7F3F97DF5022534ACC0509F726] - 02/07/2011 - 18:40:20 ---A- - C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-2F4708C9.pf

O45 - LFCP:[MD5.EFE8284020D413C0BEE66BE7E45E5F63] - 02/07/2011 - 18:54:52 ---A- - C:\Windows\Prefetch\MPCMDRUN.EXE-F401FBB4.pf

O45 - LFCP:[MD5.FBCD7B2EFB1641D7C1AB511FFFC0ACBC] - 02/07/2011 - 18:57:21 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf

O45 - LFCP:[MD5.FC750EBDE12B7B007EFD7B0749C1D0B1] - 02/07/2011 - 18:57:30 ---A- - C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf

O45 - LFCP:[MD5.9300762A972EA5BA2BC800660D89C39A] - 02/07/2011 - 20:30:26 ---A- - C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

O45 - LFCP:[MD5.75E1AE7AE01944F1E61BC1E310E49C23] - 02/07/2011 - 20:30:53 ---A- - C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf

O45 - LFCP:[MD5.BFF111287335737BFED5D7BCB0896932] - 02/07/2011 - 21:55:38 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf

O45 - LFCP:[MD5.1B4FBB9D81EE96A81B010A359A571351] - 02/07/2011 - 22:20:22 ---A- - C:\Windows\Prefetch\SYNTPENH.EXE-E6DC1353.pf

O45 - LFCP:[MD5.128644931A6668DC0844305FEAD60F8A] - 02/07/2011 - 22:21:56 ---A- - C:\Windows\Prefetch\GOOGLEUPDATERSERVICE.EXE-09540BCD.pf

O45 - LFCP:[MD5.89CDE120597E5FAB218A8C5793DE1784] - 02/07/2011 - 22:25:24 ---A- - C:\Windows\Prefetch\JAUCHECK.EXE-7E60136B.pf

O45 - LFCP:[MD5.6C78964CCCCD8F83DE9434262E9C0E96] - 02/07/2011 - 22:25:30 ---A- - C:\Windows\Prefetch\JAVAW.EXE-91B81925.pf

O45 - LFCP:[MD5.11744E4D5F59DAEE5B4F472E19CA87C3] - 02/07/2011 - 22:25:30 ---A- - C:\Windows\Prefetch\JAVAWS.EXE-5FA6EB7C.pf

O45 - LFCP:[MD5.F59ABC0BCE93D02B60DFBB61EF05CB54] - 02/07/2011 - 23:36:37 ---A- - C:\Windows\Prefetch\POQEXEC.EXE-F7DA341E.pf

O45 - LFCP:[MD5.2E0D7F4FA1FA9C61DC25F6E56F37080A] - 03/07/2011 - 10:32:26 ---A- - C:\Windows\Prefetch\COMPILEMOF.EXE-B5FEBDEB.pf

O45 - LFCP:[MD5.FCEC91D92E92C4995FA199B2C46D5EA1] - 03/07/2011 - 14:39:54 ---A- - C:\Windows\Prefetch\SWEETHOME3D.EXE-18BC1CBE.pf

O45 - LFCP:[MD5.B7AB656FB80FDC7232C7940ECE3529BB] - 03/07/2011 - 14:40:07 ---A- - C:\Windows\Prefetch\SWEETHOME3D.EXE-4A2E45EC.pf

O45 - LFCP:[MD5.11F07126E3A079A287F8DC2B8CB6EEA8] - 03/07/2011 - 15:57:21 ---A- - C:\Windows\Prefetch\MBAMSERVICE.EXE-447DC311.pf

O45 - LFCP:[MD5.1F02B9788C5E0BB9C55C3FC5FD5EF533] - 03/07/2011 - 18:41:28 ---A- - C:\Windows\Prefetch\BKUPTRAY.EXE-5F69D960.pf

O45 - LFCP:[MD5.520AE1C9D66B731CA5C7B8CF7283AD83] - 03/07/2011 - 19:34:47 ---A- - C:\Windows\Prefetch\IE9-WINDOWSVISTA-X86-ENU.EXE-4A61D725.pf

O45 - LFCP:[MD5.8249838487412663109EF50EBC12C33F] - 03/07/2011 - 19:36:04 ---A- - C:\Windows\Prefetch\HIJACKTHIS.EXE-B4E5C839.pf

O45 - LFCP:[MD5.B7B55A4E068E2E37DC540C36818C74F8] - 03/07/2011 - 19:47:11 ---A- - C:\Windows\Prefetch\AVCENTER.EXE-C4AEDCEC.pf

O45 - LFCP:[MD5.AE8DEC3E4082DD415DCD6D13756C1492] - 03/07/2011 - 19:48:59 ---A- - C:\Windows\Prefetch\AVSCAN.EXE-E289CD20.pf

O45 - LFCP:[MD5.972763BF7A2805A1A4A77BA2A32850D5] - 03/07/2011 - 20:32:22 ---A- - C:\Windows\Prefetch\MBAM.EXE-305FF92C.pf

O45 - LFCP:[MD5.29322BB4E3ED56088EEC153E0475CF52] - 03/07/2011 - 21:09:34 ---A- - C:\Windows\Prefetch\ADOBEARM.EXE-719325FF.pf

O45 - LFCP:[MD5.95CEEAC1E3A62BAB9809AD3D3D1C57DA] - 03/07/2011 - 21:23:39 ---A- - C:\Windows\Prefetch\VIT REGISTRY FIX PROFESSIONAL-331C55BC.pf

O45 - LFCP:[MD5.95D68010D482B169967D626AA797DDB2] - 03/07/2011 - 21:24:13 ---A- - C:\Windows\Prefetch\VIT REGISTRY FIX.EXE-DB345703.pf

O45 - LFCP:[MD5.54F4AEF463E7C05035329C5E0F7F7540] - 03/07/2011 - 21:31:38 ---A- - C:\Windows\Prefetch\CLEANREGISTRY.EXE-64236A2B.pf

O45 - LFCP:[MD5.5C3D9D31D7999DBC9A839B2AB04FAAD8] - 03/07/2011 - 21:31:38 ---A- - C:\Windows\Prefetch\CLEANREGISTRY.TMP-ABD5EFDD.pf

O45 - LFCP:[MD5.47EAB83019A5A2481D3BC8EF2161DE95] - 03/07/2011 - 21:31:50 ---A- - C:\Windows\Prefetch\CLEANMYREGISTRY.EXE-6C0C7A90.pf

O45 - LFCP:[MD5.99B4FA368CEBA2663B97AB0030D07B8D] - 03/07/2011 - 21:32:01 ---A- - C:\Windows\Prefetch\REGEDIT.EXE-90FEEA06.pf

O45 - LFCP:[MD5.B0ED7364AD7ED9C2618085923930AE75] - 03/07/2011 - 21:32:26 ---A- - C:\Windows\Prefetch\JV16PT_SETUP_HB.EXE-9007A323.pf

O45 - LFCP:[MD5.2D68E89550B9D767465E58AFE2DCC8CD] - 03/07/2011 - 21:32:27 ---A- - C:\Windows\Prefetch\IRSETUP.EXE-7936E622.pf

O45 - LFCP:[MD5.1184D69C3C6FBAFB8A182B566E275FDC] - 03/07/2011 - 21:34:18 ---A- - C:\Windows\Prefetch\JV16PT.EXE-FB92995A.pf

O45 - LFCP:[MD5.440AC50035C78DEE60094F269E08FB36] - 03/07/2011 - 21:44:15 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf

O45 - LFCP:[MD5.D77B3731A659FABCB8F256D379115B2D] - 03/07/2011 - 21:55:10 ---A- - C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf

O45 - LFCP:[MD5.D6C5ADF6A270CAF32C19C362D01EAAD9] - 03/07/2011 - 22:02:20 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-7F10F9B7.pf

O45 - LFCP:[MD5.8453E9E337B334AA335129451526ADFF] - 03/07/2011 - 22:02:24 ---A- - C:\Windows\Prefetch\_UNINSTALL5476-F9663C98.pf

O45 - LFCP:[MD5.510F17CE3D149F9EBFE8FF3556741104] - 03/07/2011 - 22:02:31 ---A- - C:\Windows\Prefetch\GRPCONV.EXE-B823222B.pf

O45 - LFCP:[MD5.EA5A3E0837FECB7D92F76FDA8EC36A26] - 03/07/2011 - 22:02:31 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-71E747D2.pf

O45 - LFCP:[MD5.A20C9C6DC896B711F7F0EABA0FD6AB1D] - 03/07/2011 - 22:02:31 ---A- - C:\Windows\Prefetch\RUNONCE.EXE-D0649312.pf

O45 - LFCP:[MD5.325A8D2D6DA19877F3F450A9C6689B12] - 03/07/2011 - 22:03:12 ---A- - C:\Windows\Prefetch\UNINS000.EXE-69AE0AC1.pf

O45 - LFCP:[MD5.506C2662DFCFB8E753EBCBEB084F2D96] - 03/07/2011 - 22:03:48 ---A- - C:\Windows\Prefetch\UNINS000.EXE-0AC87E9F.pf

O45 - LFCP:[MD5.EE67A8FAA2F90E3E7AA0ED4AFA29582E] - 03/07/2011 - 22:05:37 ---A- - C:\Windows\Prefetch\UNINS000.EXE-860A6A5D.pf

O45 - LFCP:[MD5.722C5BAF13070B929FC75070B8EA4E96] - 03/07/2011 - 22:06:14 ---A- - C:\Windows\Prefetch\UNINS000.EXE-3B863BD1.pf

O45 - LFCP:[MD5.3974F46B2FAEA77F013906B226A11152] - 03/07/2011 - 22:06:15 ---A- - C:\Windows\Prefetch\_IU14D2O.TMP-19E28D32.pf

O45 - LFCP:[MD5.09446F88DC72F305D44512134DE3F3CA] - 03/07/2011 - 22:06:49 ---A- - C:\Windows\Prefetch\TUBEFINDER.EXE-9FB05A98.pf

O45 - LFCP:[MD5.49F7CBCE79FFCC5CC04531B46E6EC329] - 03/07/2011 - 22:06:54 ---A- - C:\Windows\Prefetch\UNINS000.EXE-27EB75AA.pf

O45 - LFCP:[MD5.CB07F141374BE69980EDF9A967B162E4] - 03/07/2011 - 22:06:54 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-068CD2AD.pf

O45 - LFCP:[MD5.2267977D3A4DC95FABD89D121D3BC616] - 03/07/2011 - 22:10:11 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-C15F7291.pf

O45 - LFCP:[MD5.A2B74F43013ECCC634C47E21F60C8386] - 03/07/2011 - 22:10:37 ---A- - C:\Windows\Prefetch\ACRORD32.EXE-91E1AAD6.pf

O45 - LFCP:[MD5.9A6ABD1E890CAF3008F4F738B534E65B] - 03/07/2011 - 22:16:07 ---A- - C:\Windows\Prefetch\CLEAN_TOOL.EXE-804B89B8.pf

O45 - LFCP:[MD5.6F4E73D29260D109E722A69A9548D0DD] - 03/07/2011 - 22:16:07 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-C417AA4E.pf

O45 - LFCP:[MD5.ABC6AEB87CA7672A8A99917D713B5DB7] - 03/07/2011 - 22:16:13 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-444CCB35.pf

O45 - LFCP:[MD5.07862F0B0E8DA8B2C000FB528A0A1ABE] - 03/07/2011 - 22:16:15 ---A- - C:\Windows\Prefetch\UNWISE.EXE-E57B5260.pf

O45 - LFCP:[MD5.C90CAA492D71D420B764BCDD22A192C0] - 03/07/2011 - 22:16:16 ---A- - C:\Windows\Prefetch\GLB1A2B.EXE-E2A74BCB.pf

O45 - LFCP:[MD5.D85BA52858512F74DC1CB501F0F03A5B] - 03/07/2011 - 22:16:50 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-F72EB15E.pf

O45 - LFCP:[MD5.34B64083DE9C6024807BE090C09DFB5C] - 03/07/2011 - 22:17:25 ---A- - C:\Windows\Prefetch\UNINSTALL.EXE-9E8795C5.pf

O45 - LFCP:[MD5.E77A2367BCD6BF0D93DE8E3E73306A62] - 03/07/2011 - 22:17:32 ---A- - C:\Windows\Prefetch\NS25A0.TMP-6B1FF760.pf

O45 - LFCP:[MD5.C401721EEAFA2E02C218B237F46A3F79] - 03/07/2011 - 22:17:32 ---A- - C:\Windows\Prefetch\TEAMVIEWER_SERVICE.EXE-D5001318.pf

O45 - LFCP:[MD5.51EA60E0F767FD7AF898F627A63B6B34] - 03/07/2011 - 22:17:33 ---A- - C:\Windows\Prefetch\NS26E8.TMP-1C971FB1.pf

O45 - LFCP:[MD5.E5CF46E468F4506BB87041C7FE09AF7E] - 03/07/2011 - 22:17:35 ---A- - C:\Windows\Prefetch\AU_.EXE-090FBEE8.pf

O45 - LFCP:[MD5.97168695D30BFE2110A2220A94A14FDE] - 03/07/2011 - 22:29:09 ---A- - C:\Windows\Prefetch\INTEGRATOR.EXE-84638148.pf

O45 - LFCP:[MD5.7BA78322AE16FE73D17BEA02BC643E56] - 03/07/2011 - 22:34:28 ---A- - C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf

O45 - LFCP:[MD5.8B5D67B9BC3E1D487AAA55C6CF76CD77] - 03/07/2011 - 22:35:08 ---A- - C:\Windows\Prefetch\MALWAREBYTES-ANTI-MALWARE_MAL-2189C69F.pf

O45 - LFCP:[MD5.26DFEBA07D8C4C1EC80BD009646783BD] - 03/07/2011 - 22:35:08 ---A- - C:\Windows\Prefetch\MALWAREBYTES-ANTI-MALWARE_MAL-35160261.pf

O45 - LFCP:[MD5.B2A061F3B1186A14B166BDB1646CE84F] - 03/07/2011 - 22:35:14 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf

O45 - LFCP:[MD5.7158EAA4307C338D724E40C3D5B60AEF] - 03/07/2011 - 22:36:09 ---A- - C:\Windows\Prefetch\MBAMGUI.EXE-4FE652ED.pf

O45 - LFCP:[MD5.97EEA2DA980831FF1ECE6418F26C2825] - 03/07/2011 - 22:42:09 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf

O45 - LFCP:[MD5.A980534ECDFCA7E830FCE434D0F6FD51] - 03/07/2011 - 22:42:58 ---A- - C:\Windows\Prefetch\EDSDTS.EXE-B5D9A1D2.pf

O45 - LFCP:[MD5.EB963EC76C4EE73815CDED9FC1C9BBD8] - 04/07/2011 - 08:43:17 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEB4451148.EXE-F2DB6508.pf

O45 - LFCP:[MD5.2712576696838C05C2748F5D0E3A6D53] - 04/07/2011 - 10:24:43 ---A- - C:\Windows\Prefetch\PDANETPC.EXE-AEEA6E17.pf

O45 - LFCP:[MD5.E34176F697DD999C560A8F4C5F7A10EC] - 04/07/2011 - 10:25:07 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf

O45 - LFCP:[MD5.02AB31F068261FC3AEB43B3EAD972942] - 04/07/2011 - 10:25:07 ---A- - C:\Windows\Prefetch\WPDSHEXTAUTOPLAY.EXE-BD31DDCE.pf

O45 - LFCP:[MD5.E05E953E4A36E895E3925EA3AF64BD53] - 04/07/2011 - 10:25:10 ---A- - C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf

O45 - LFCP:[MD5.6AE6E41CE38689AA1D1BD7E6A5B0EADD] - 04/07/2011 - 10:25:16 ---A- - C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf

O45 - LFCP:[MD5.DB590E99D59430B5DAEF818CDB5C24E2] - 04/07/2011 - 18:31:28 ---A- - C:\Windows\Prefetch\SOFTWAREUPDATE.EXE-631B74E4.pf

O45 - LFCP:[MD5.E5680280C8FDCB239466C9BECBF6839C] - 04/07/2011 - 18:31:32 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-7ED62AA2.pf

O45 - LFCP:[MD5.C323B6AD8F20A542AC13D7B7334AC776] - 04/07/2011 - 18:33:48 ---A- - C:\Windows\Prefetch\ITUNES.EXE-2A42B776.pf

O45 - LFCP:[MD5.257ECA7BC4FEA263AA768FBA9D77200A] - 04/07/2011 - 18:33:54 ---A- - C:\Windows\Prefetch\APPLEMOBILEDEVICEHELPER.EXE-96A367D7.pf

O45 - LFCP:[MD5.C8363F432E06990737E8183D7E5E2E98] - 04/07/2011 - 18:33:54 ---A- - C:\Windows\Prefetch\DISTNOTED.EXE-BFFB20F1.pf

O45 - LFCP:[MD5.75E7DDCBC1AB1AD9AC9BD8A90BC08E63] - 04/07/2011 - 20:30:44 ---A- - C:\Windows\Prefetch\NET.EXE-DF44F913.pf

O45 - LFCP:[MD5.EAE6372A65366D31642EC19B86B9847C] - 04/07/2011 - 20:30:44 ---A- - C:\Windows\Prefetch\NET1.EXE-849DA590.pf

O45 - LFCP:[MD5.B41FE2D1C1EC8E50C8DD2B2DF9C731E7] - 04/07/2011 - 21:29:58 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A6251510.pf

O45 - LFCP:[MD5.E2A0C1D10386D7B6FAFA56C54246AA4E] - 05/11/2010 - 21:47:34 ---A- - C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf

O45 - LFCP:[MD5.92F02B5B865EBE68FDFA286EA6CA7461] - 05/11/2010 - 21:47:45 ---A- - C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-7226D1F8.pf

O45 - LFCP:[MD5.C6D00C32270BB6D6C8D621116259E477] - 06/11/2010 - 15:55:40 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf

O45 - LFCP:[MD5.95BE4668BA9CAD4F781790392928D277] - 07/06/2011 - 19:43:00 ---A- - C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-99650113.pf

O45 - LFCP:[MD5.A041DC18CBD5D17309E1EB8F3AF8071E] - 16/03/2011 - 15:55:42 ---A- - C:\Windows\Prefetch\HPNETWORKCOMMUNICATOR.EXE-8654C260.pf

O45 - LFCP:[MD5.AC38399C9C768D01C2A0CA1F3E99EF95] - 18/06/2011 - 18:37:55 ---A- - C:\Windows\Prefetch\READER_SL.EXE-E503013B.pf

O45 - LFCP:[MD5.F938B59444B6991D574B977BD63FDE50] - 18/06/2011 - 20:30:16 ---A- - C:\Windows\Prefetch\MSASCUI.EXE-07E0123F.pf

O45 - LFCP:[MD5.FC9E930AC15D2F30B603F58CC38FE6A8] - 18/10/2010 - 10:29:37 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin

O45 - LFCP:[MD5.5B5B6189391DDFEA47B36F2A879CB584] - 18/10/2010 - 12:25:20 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf

O45 - LFCP:[MD5.00DEBFE3D0047D0BCDFBC137C56CDF27] - 18/10/2010 - 15:55:42 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf

O45 - LFCP:[MD5.159173D94655102E04053A24EF7D3EF5] - 18/10/2010 - 15:57:30 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf

O45 - LFCP:[MD5.CD75CEF8F1E8C3CFAD32B5E474A4B771] - 18/10/2010 - 18:31:35 ---A- - C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf

O45 - LFCP:[MD5.24E861ABDFB0B9BF4756183B1B4301CE] - 18/10/2010 - 20:54:15 ---A- - C:\Windows\Prefetch\AgRobust.db

O45 - LFCP:[MD5.D845C3714C817DBFE45CCE115C0496BF] - 18/10/2010 - 20:54:27 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db

O45 - LFCP:[MD5.733435A2619BC70C877602F396011719] - 18/10/2010 - 20:54:29 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db

O45 - LFCP:[MD5.BEEFCC2863D6BFDB928BFAE42DE135AB] - 18/10/2010 - 20:54:35 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db

O45 - LFCP:[MD5.138763DFE975BC9A26232D419B2D62A5] - 18/10/2010 - 21:08:40 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf

O45 - LFCP:[MD5.61D52F6FA4FA6B4D252A0028DA1A7C2D] - 18/10/2010 - 21:47:47 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf

O45 - LFCP:[MD5.9C397DFEA85B68655337779D7D053FAD] - 18/10/2010 - 21:47:47 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf

O45 - LFCP:[MD5.5045426B17A39B6DE1A8CF04F39F6C90] - 18/10/2010 - 21:55:16 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf

O45 - LFCP:[MD5.F40348BD0C2EB5B7CD1FCDEBB742D754] - 19/01/2011 - 15:57:09 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf

O45 - LFCP:[MD5.F03C851D3564BF5A79DF0C59211EEB8E] - 19/10/2010 - 15:55:31 ---A- - C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf

O45 - LFCP:[MD5.0502D29F6785C1EB6E2A964159C0F37D] - 19/10/2010 - 15:58:27 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf

O45 - LFCP:[MD5.9324D8CE10F3EE558132E9AF66156F0D] - 19/10/2010 - 16:06:27 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf

O45 - LFCP:[MD5.5C2921FD98A5D76268424331434B447A] - 19/10/2010 - 18:00:33 ---A- - C:\Windows\Prefetch\Layout.ini

O45 - LFCP:[MD5.B76BFC4CBCBC43087FB3A6B554EE34A9] - 19/10/2010 - 18:31:29 ---A- - C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf

O45 - LFCP:[MD5.4773E27401974E318E8FBAF9EC8DE506] - 19/10/2010 - 18:58:29 ---A- - C:\Windows\Prefetch\ISWUPDE.EXE-FDB9B923.pf

O45 - LFCP:[MD5.51D8A3425B21ACCA879DCF92451FA15B] - 19/10/2010 - 21:35:16 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3072727286-2981826037-1783307074-1000.db

O45 - LFCP:[MD5.8F1CFFAE2712AC9D9B317124CFD90704] - 19/10/2010 - 21:35:16 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3072727286-2981826037-1783307074-1000.db

O45 - LFCP:[MD5.B8291D3F0DCE183F22D758A152D83EE0] - 19/10/2010 - 21:43:00 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf

O45 - LFCP:[MD5.FF76E931B1D1296908244701FDDE5BF6] - 19/10/2010 - 21:47:52 ---A- - C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf

O45 - LFCP:[MD5.4858D7BAE1D8DFC5118DE86CD8EB83AD] - 20/10/2010 - 15:48:31 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx

O45 - LFCP:[MD5.A449D50CE054242998E10CBFA005F225] - 20/10/2010 - 15:49:31 ---A- - C:\Windows\Prefetch\AgCx_SC1.db

O45 - LFCP:[MD5.60E5F0A310EC533DDED60D66BD362AFC] - 21/06/2011 - 15:55:16 ---A- - C:\Windows\Prefetch\UNSECAPP.EXE-A02905A6.pf

O45 - LFCP:[MD5.F4DDA0DF55B6857C4EABA9980B3E6F5C] - 21/06/2011 - 15:55:30 ---A- - C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf

O45 - LFCP:[MD5.CC25BD19585358CC2DD49BF20FCF17BF] - 22/06/2011 - 15:55:38 ---A- - C:\Windows\Prefetch\IGFXEXT.EXE-D5F523DB.pf

O45 - LFCP:[MD5.C49148109F682134E436ABE7A8D2B79F] - 22/06/2011 - 19:47:37 ---A- - C:\Windows\Prefetch\UPDATE.EXE-026DCA13.pf

O45 - LFCP:[MD5.561F83DA81AF7B3D18F094603CA7CD78] - 22/06/2011 - 19:47:47 ---A- - C:\Windows\Prefetch\AVNOTIFY.EXE-FEC2FEC4.pf

O45 - LFCP:[MD5.C52CE5DC0C58D77515EE44036F568C8C] - 23/10/2010 - 18:54:55 ---A- - C:\Windows\Prefetch\AgCx_SC2.db

O45 - LFCP:[MD5.D43D36A7782001C3A16095832234C573] - 23/12/2010 - 22:16:00 ---A- - C:\Windows\Prefetch\FORCEFIELD.EXE-3271118F.pf

O45 - LFCP:[MD5.BD70C5A228D24D57A5E7DCC4B43E066B] - 29/03/2011 - 15:56:29 ---A- - C:\Windows\Prefetch\SYNTPHELPER.EXE-0A20AAC4.pf

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\System32\Drivers\volmgrx.sys

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{04e0f2a4-12c9-11e0-b08c-001d72d944ef}\AutoRun\command. (...) -- F:\SETUP.exe (.not file.)

O51 - MPSK:{cda81c7b-3dc6-11e0-a70d-001d72d944ef}\AutoRun\command. (...) -- G:\APPInst.exe (.not file.)

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"vidc.i420"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- C:\Windows\System32\i420vfw.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll

O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm

O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm

O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\Windows\System32\ff_vfw.dll

O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\Windows\System32\ff_vfw.dll

O52 - TDSD: \drivers.desc\"l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\AdobeARM.exe [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

O53 - SMSR:HKLM\...\startupreg\BkupTray.exe [Key] . (.Pas de propriétaire - NTI Backup Now 5 Tray Module.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe

O53 - SMSR:HKLM\...\startupreg\CheckUpdate.exe [Key] . (...) -- C:\Program Files\Xvid\CheckUpdate.exe (.not file.)

O53 - SMSR:HKLM\...\startupreg\FLVSrvc.exe [Key] . (.Applian Technologies, Inc. - FLV Service for Freecorder.) -- C:\Program Files\Freecorder\FLVSrvc.exe

O53 - SMSR:HKLM\...\startupreg\GoogleToolbarNotifier.exe [Key] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O53 - SMSR:HKLM\...\startupreg\HPWuSchd2.exe [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O53 - SMSR:HKLM\...\startupreg\iTunesHelper.exe [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O53 - SMSR:HKLM\...\startupreg\jusched.exe [Key] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe

O53 - SMSR:HKLM\...\startupreg\QTTask.exe [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMHelp"=0

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422968]

O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [300600]

O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [101432]

O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [149560]

O58 - SDL:[MD5.38325C6AA8EAE011897D61CE48EC6435] - 19/10/2010 - 00:13:38 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\Windows\system32\drivers\AGRSM.sys [1202560]

O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [79416]

O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [79928]

O58 - SDL:[MD5.600EFE56F37ADBD65A0FB076B50D1B8D] - 19/10/2010 - 20:07:44 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys [909824]

O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 19/10/2010 - 19:40:32 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [61960]

O58 - SDL:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 19/10/2010 - 21:01:17 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [137656]

O58 - SDL:[MD5.502F1C30BD50B32D00CE4DCAECC3D3C7] - 21/01/2008 - 03:23:20 ---A- . (.Broadcom Corporation - Pilote NDIS6.0 Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [179712]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.73BAF270D24FE726B9CD7F80BB17A23D] - 19/10/2010 - 06:29:36 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\system32\drivers\DKbFltr.sys [21264]

O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [118784]

O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [342584]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 21/04/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.9CFCD5DF1CEE66681AB2DF079A8FF3CA] - 17/04/2009 - 19:48:14 ---A- . (.GARMIN Corp. - Generic WDM Support Driver.) -- C:\Windows\system32\drivers\grmngen.sys [18304]

O58 - SDL:[MD5.6003BC70F1A8307262BD3C941BDA0B7E] - 17/04/2009 - 19:48:14 ---A- . (.GARMIN Corp. - grmnusb.sys.) -- C:\Windows\system32\drivers\grmnusb.sys [9344]

O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [40504]

O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [235064]

O58 - SDL:[MD5.8266AE06DF974E5BA047B3E9E9E70B3F] - 25/08/2010 - 19:31:30 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd32.sys [9024512]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.C6E5276C00EBDEB096BB5EF4B797D1B6] - 08/05/2008 - 09:48:24 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15.sys [15392]

O58 - SDL:[MD5.8C7FA71CB1EBCD3EDE8958D27B1BF0B4] - 08/05/2008 - 09:48:24 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15_64.sys [17952]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [96312]

O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89656]

O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96312]

O58 - SDL:[MD5.3D2C13377763EEAC0CA6FB46F57217ED] - 03/07/2011 - 08:11:20 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22712]

O58 - SDL:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 03/07/2011 - 08:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [39984]

O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [31288]

O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [386616]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.6D8D2E5652FC2442C810C5D8BE784148] - 21/01/2008 - 03:23:23 ---A- . (.National Semiconductor Corporation - NSC Fast Infrared Driver..) -- C:\Windows\system32\drivers\nscirda.sys [30720]

O58 - SDL:[MD5.2757D2BA59AEE155209E24942AB127C9] - 08/05/2008 - 02:52:06 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [14848]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [102968]

O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [45112]

O58 - SDL:[MD5.DA19E3401F39C10DF193BE029C7E7BBA] - 11/02/2011 - 14:32:14 ---A- . (.June Fabrics Technology - PdaNet Driver.) -- C:\Windows\system32\drivers\pnetmdm.sys [9472]

O58 - SDL:[MD5.1DCBB35090CC4B2BD3D661E6089523C6] - 19/10/2010 - 16:05:42 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [18992]

O58 - SDL:[MD5.E26E46D619469964AC3609620F443867] - 19/10/2010 - 16:05:42 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16944]

O58 - SDL:[MD5.3E1D134AF2806867D06047C4CC33CC65] - 19/10/2010 - 16:05:44 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\PSDVdisk.sys [60464]

O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1122360]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.23EBCEE9AAA4D6C88728791FAB462456] - 18/10/2010 - 02:10:08 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [2152344]

O58 - SDL:[MD5.9EA88492B1DAB90DCE43A6F2C0E133BD] - 18/10/2010 - 12:33:38 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for Vista.) -- C:\Windows\system32\drivers\RTSTOR.sys [61440]

O58 - SDL:[MD5.247B0A8164069CD4FE6F3094C581B13B] - 15/02/2011 - 16:11:08 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\system32\drivers\RtsUStor.sys [197224]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [74808]

O58 - SDL:[MD5.DCEE1200FEFFFFFF000000008CF11200] - 28/12/2010 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys [717296]

O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 19/10/2010 - 14:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.4C9BB4B3B9EAC26211484C30B914C6DC] - 19/10/2010 - 19:08:42 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [199472]

O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 19/10/2010 - 15:29:24 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort.sys [14544]

O58 - SDL:[MD5.F763E070843EE2803DE1395002B42938] - 08/05/2008 - 02:51:50 ---A- . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\system32\drivers\UBHelper.sys [13824]

O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [238648]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.D4FB6ECC60A428564BA8768B0E23C0FC] - 21/04/2011 - 15:36:58 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys [41984]

O58 - SDL:[MD5.6BE75CFCE25E42E79C0757C60D88FECB] - 19/10/2010 - 15:30:46 ---A- . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) -- C:\Windows\system32\drivers\vsdatant.sys [457304]

O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [130616]

O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [200704]

O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 21/01/2008 - 03:23:23 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [654336]

O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [987648]

O58 - SDL:[MD5.3E1C915C6291AB5D1CFCA680E1BD6BAD] - 30/04/2008 - 10:55:00 ---A- . (.Marvell - Miniport Driver for Marvell Yukon Ethernet Controller..) -- C:\Windows\system32\drivers\yk60x86.sys [299008]

O58 - SDL:[MD5.40AC8590CC9006DBB99FFCB37879D4C6] - 19/10/2010 - 15:29:24 ---A- . (.Zeal SoftStudio - zntport.) -- C:\Windows\system32\drivers\zntport.sys [6080]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 01/07/2011 - 22:41:22 ---A- C:\Users\Mayke\AppData\Local\FLVService\Petit itinéraire pour visiter Florence en 3 jours - Le blog de Le Tout Moi.bin [456404]

O61 - LFC:Last File Created 02/07/2011 - 18:38:11 ---A- C:\Users\Mayke\AppData\Local\Temp\bitrock_installer_3692.log [165]

O61 - LFC:Last File Created 02/07/2011 - 18:38:14 ---A- C:\Users\Mayke\AppData\Local\Temp\~DF7797.tmp [98304]

O61 - LFC:Last File Created 02/07/2011 - 18:39:34 ---A- C:\Users\Mayke\AppData\Local\Temp\347008.od [134]

O61 - LFC:Last File Created 02/07/2011 - 18:39:34 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR4B80.tmp.cvr [0]

O61 - LFC:Last File Created 02/07/2011 - 19:56:50 ---A- C:\Users\Mayke\AppData\Local\Temp\4983873.od [134]

O61 - LFC:Last File Created 02/07/2011 - 19:56:50 ---A- C:\Users\Mayke\AppData\Local\Temp\CVRC31.tmp.cvr [0]

O61 - LFC:Last File Created 02/07/2011 - 22:21:15 ---A- C:\Users\Mayke\AppData\Local\Temp\bitrock_installer_2128.log [165]

O61 - LFC:Last File Created 02/07/2011 - 22:21:22 ---A- C:\Users\Mayke\AppData\Local\Temp\~DFEC6F.tmp [98304]

O61 - LFC:Last File Created 02/07/2011 - 22:56:17 ---A- C:\Users\Mayke\AppData\Local\Temp\2328112.od [134]

O61 - LFC:Last File Created 02/07/2011 - 22:56:17 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR8620.tmp.cvr [0]

O61 - LFC:Last File Created 02/07/2011 - 23:33:08 ---A- C:\Users\Mayke\AppData\Local\Temp\11139344.od [134]

O61 - LFC:Last File Created 02/07/2011 - 23:33:08 ---A- C:\Users\Mayke\AppData\Local\Temp\CVRF910.tmp.cvr [0]

O61 - LFC:Last File Created 02/07/2011 - 23:34:32 ---A- C:\Users\Mayke\AppData\Local\Temp\11223679.od [134]

O61 - LFC:Last File Created 02/07/2011 - 23:34:32 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR426F.tmp.cvr [0]

O61 - LFC:Last File Created 03/07/2011 - 16:36:00 ---A- C:\Users\Mayke\AppData\Local\Temp\BR1AD3.tmp [16384]

O61 - LFC:Last File Created 03/07/2011 - 18:42:21 ---A- C:\Users\Mayke\AppData\Local\Temp\bitrock_installer_3048.log [165]

O61 - LFC:Last File Created 03/07/2011 - 18:42:26 ---A- C:\Users\Mayke\AppData\Local\Temp\~DF5FCE.tmp [98304]

O61 - LFC:Last File Created 03/07/2011 - 18:42:28 ---A- C:\Users\Mayke\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\sites [0]

O61 - LFC:Last File Created 03/07/2011 - 19:30:21 ---A- C:\Users\Mayke\AppData\Local\Temp\3084779.od [134]

O61 - LFC:Last File Created 03/07/2011 - 19:30:21 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR11EB.tmp.cvr [0]

O61 - LFC:Last File Created 03/07/2011 - 20:33:11 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\build.conf [261]

O61 - LFC:Last File Created 03/07/2011 - 20:33:11 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6930185]

O61 - LFC:Last File Created 03/07/2011 - 20:40:08 ---A- C:\Users\Mayke\AppData\Local\FLVService\Classical music and opera - classical concerts in Florence (Firenze) and Siena.bin [8023175]

O61 - LFC:Last File Created 03/07/2011 - 20:55:09 ---A- C:\Users\Mayke\AppData\Local\Temp\open284762506936660486.sweethome3d [4471162]

O61 - LFC:Last File Created 03/07/2011 - 20:57:22 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\local.conf [439]

O61 - LFC:Last File Created 03/07/2011 - 21:32:35 -SHA- C:\Users\Mayke\AppData\Roaming\Sys2662.Config.Repository.bin [22]

O61 - LFC:Last File Created 03/07/2011 - 21:51:45 ---A- C:\Users\Mayke\AppData\Local\FLVService\Peindre les murs et les plafonds - Fiche pratique.bin [1990196]

O61 - LFC:Last File Created 03/07/2011 - 22:02:33 ---A- C:\Users\Mayke\AppData\Local\Temp\bitrock_installer.log [4453]

O61 - LFC:Last File Created 03/07/2011 - 22:10:18 ---A- C:\Users\Mayke\AppData\Local\Temp\CFG84DC.tmp [123]

O61 - LFC:Last File Created 03/07/2011 - 22:18:52 ---A- C:\Users\Mayke\AppData\Local\Temp\jv16PT_2011\exe.ico [1150]

O61 - LFC:Last File Created 03/07/2011 - 22:28:59 ---A- C:\Users\Mayke\Downloads\malwarebytes-anti-malware_malwarebytes_anti-malware_1.51.0.1200_francais_215092.exe [9435312]

O61 - LFC:Last File Created 03/07/2011 - 22:29:07 ---A- C:\Users\Mayke\AppData\Local\Temp\~gu-ver.dat [590]

O61 - LFC:Last File Created 03/07/2011 - 22:33:35 ---A- C:\Users\Mayke\AppData\Roaming\GlarySoft\Glary Utilities\Backups\40727,9816552083 [45055]

O61 - LFC:Last File Created 03/07/2011 - 22:33:39 ---A- C:\Users\Mayke\AppData\Roaming\GlarySoft\Glary Utilities\Backups\40727,9817081944 [864]

O61 - LFC:Last File Created 03/07/2011 - 22:33:39 ---A- C:\Users\Mayke\AppData\Roaming\GlarySoft\Glary Utilities\Backups\index.ini [80]

O61 - LFC:Last File Created 03/07/2011 - 22:35:29 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\config.conf [2399]

O61 - LFC:Last File Created 03/07/2011 - 22:35:29 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\custom.conf [5]

O61 - LFC:Last File Created 03/07/2011 - 22:35:29 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\news.conf [248]

O61 - LFC:Last File Created 03/07/2011 - 22:35:43 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\ignore.dat [0]

O61 - LFC:Last File Created 03/07/2011 - 22:38:05 ---A- C:\Users\Mayke\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP5.52299 [162]

O61 - LFC:Last File Created 03/07/2011 - 22:38:07 ---A- C:\Users\Mayke\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-03 (23-38-07).txt [1189]

O61 - LFC:Last File Created 03/07/2011 - 22:42:14 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Logs\protection-log-2011-07-03.txt [460]

O61 - LFC:Last File Created 03/07/2011 - 22:43:32 ---A- C:\Users\Mayke\AppData\Local\Temp\~DFBD0.tmp [98304]

O61 - LFC:Last File Created 03/07/2011 - 22:44:40 ---A- C:\Users\Mayke\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-03 (23-44-40).txt [1054]

O61 - LFC:Last File Created 03/07/2011 - 22:49:20 ---A- C:\Users\Mayke\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-03 (23-49-20).txt [1053]

O61 - LFC:Last File Created 04/07/2011 - 08:27:55 ---A- C:\Users\Mayke\AppData\Local\Temp\~DFA0EE.tmp [98304]

O61 - LFC:Last File Created 04/07/2011 - 10:33:31 ---A- C:\Users\Mayke\AppData\Local\Temp\~DF564A.tmp [98304]

O61 - LFC:Last File Created 04/07/2011 - 10:50:32 ---A- C:\Users\Mayke\AppData\Local\Temp\IswTmp\Logs\FFApi.swl.old [1052]

O61 - LFC:Last File Created 04/07/2011 - 14:40:02 ----- C:\Users\Mayke\AppData\Local\Temp\open3457030561786269177.sweethome3d [4471203]

O61 - LFC:Last File Created 04/07/2011 - 15:56:19 ---A- C:\Users\Mayke\AppData\Local\Temp\~DF89BA.tmp [98304]

O61 - LFC:Last File Created 04/07/2011 - 16:03:36 ---A- C:\Users\All Users\Nero\Agent\History.xml [200]

O61 - LFC:Last File Created 04/07/2011 - 16:11:00 ---A- C:\Users\Mayke\AppData\Local\Temp\IswTmp\Logs\FFApi.swl [1052]

O61 - LFC:Last File Created 04/07/2011 - 18:29:21 ---A- C:\Users\Mayke\AppData\Local\Temp\9396080.od [134]

O61 - LFC:Last File Created 04/07/2011 - 18:29:21 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR5F61.tmp.cvr [0]

O61 - LFC:Last File Created 04/07/2011 - 18:31:39 ---A- C:\Users\Mayke\Music\iTunes\iTunes Library.itl [162449]

O61 - LFC:Last File Created 04/07/2011 - 18:31:39 ---A- C:\Users\Mayke\Music\iTunes\iTunes Music Library.xml [936950]

O61 - LFC:Last File Created 04/07/2011 - 18:33:44 ---A- C:\Users\Mayke\AppData\Roaming\Apple Computer\Logs\asl.165558_04Jul11.log [12698]

O61 - LFC:Last File Created 04/07/2011 - 18:39:03 ---A- C:\Users\Mayke\AppData\Roaming\Apple Computer\iTunes\Cookies\Cookies.plist [3163]

O61 - LFC:Last File Created 04/07/2011 - 18:39:09 ---A- C:\Users\Mayke\AppData\Local\Apple Computer\iTunes\iTunesPrefs.xml [817049]

O61 - LFC:Last File Created 04/07/2011 - 18:39:09 ---A- C:\Users\Mayke\AppData\Roaming\Apple Computer\iTunes\iTunesPrefs.xml [208783]

O61 - LFC:Last File Created 04/07/2011 - 18:39:41 ---A- C:\Users\Mayke\AppData\Local\Temp\10015544.od [134]

O61 - LFC:Last File Created 04/07/2011 - 18:39:41 ---A- C:\Users\Mayke\AppData\Local\Temp\CVRD338.tmp.cvr [0]

O61 - LFC:Last File Created 04/07/2011 - 18:57:41 ---A- C:\Users\Mayke\AppData\Local\Temp\11095883.od [134]

O61 - LFC:Last File Created 04/07/2011 - 18:57:41 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR4F4B.tmp.cvr [0]

O61 - LFC:Last File Created 04/07/2011 - 20:28:07 ---A- C:\Users\Mayke\AppData\Local\Temp\16522128.od [134]

O61 - LFC:Last File Created 04/07/2011 - 20:28:07 ---A- C:\Users\Mayke\AppData\Local\Temp\CVR1B90.tmp.cvr [0]

O61 - LFC:Last File Created 04/07/2011 - 20:30:43 ---A- C:\Users\Mayke\AppData\Local\Temp\7C55.tmp\hosts [905]

O61 - LFC:Last File Created 04/07/2011 - 20:33:17 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\Logs\protection-log-2011-07-04.txt [1074]

O61 - LFC:Last File Created 04/07/2011 - 21:42:03 ---A- C:\Users\Mayke\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-04 (22-42-03).txt [1078]

O61 - LFC:Last File Created 04/07/2011 - 21:44:44 ---A- C:\Users\Mayke\Downloads\ZHPDiag2.zip [2501413]

O61 - LFC:Last File Created 07/06/2011 - 22:15:59 ---A- C:\Users\Mayke\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\.version [9]

O61 - LFC:Last File Created 08/01/2011 - 20:30:21 ---A- C:\Users\Mayke\AppData\Roaming\Microsoft\Outlook\Outlook.xml [3605]

O61 - LFC:Last File Created 08/01/2011 - 20:30:21 ---A- C:\Users\Mayke\AppData\Roaming\Microsoft\Outlook\outcmd.dat [1686]

O61 - LFC:Last File Created 09/01/2011 - 23:36:00 ---A- C:\Users\Mayke\AppData\Roaming\Microsoft\Outlook\Outlook.NK2 [44310]

O61 - LFC:Last File Created 09/11/2010 - 23:36:06 ---A- C:\Users\Mayke\AppData\Roaming\Microsoft\Office\Word12.pip [1696]

O61 - LFC:Last File Created 14/03/2011 - 18:46:25 ---A- C:\Users\Mayke\AppData\Local\Temp\jusched.log [137419]

O61 - LFC:Last File Created 14/03/2011 - 21:09:34 ---A- C:\Users\Mayke\AppData\Local\Temp\AdobeARM.log [206659]

O61 - LFC:Last File Created 14/03/2011 - 21:31:08 ---A- C:\Users\Mayke\AppData\Local\Temp\Mayke.bmp [31832]

O61 - LFC:Last File Created 15/03/2011 - 20:23:03 -SHA- C:\Users\Mayke\AppData\Local\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 15/03/2011 - 20:23:03 -SHA- C:\Users\Mayke\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [262144]

O61 - LFC:Last File Created 15/03/2011 - 20:23:03 -SHA- C:\Users\Mayke\AppData\Local\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 18/03/2011 - 22:25:24 ---A- C:\Users\Mayke\AppData\Local\Temp\AUCHECK_PARSER.txt [1367]

O61 - LFC:Last File Created 19/10/2010 - 18:33:13 ---A- C:\Users\Mayke\AppData\Local\Apple Computer\iTunes\Cache.db [66358272]

O61 - LFC:Last File Created 19/10/2010 - 22:49:36 --HA- C:\Users\Mayke\AppData\Local\IconCache.db [3114394]

O61 - LFC:Last File Created 20/03/2011 - 22:25:24 ---A- C:\Users\Mayke\AppData\Local\Temp\AUCHECK_CORE.txt [4832]

O61 - LFC:Last File Created 21/04/2011 - 18:33:42 ---A- C:\Users\Mayke\Music\iTunes\iTunes Library Extras.itdb [12288]

O61 - LFC:Last File Created 21/04/2011 - 18:39:07 --HA- C:\Users\Mayke\Music\iTunes\sentinel [8]

O61 - LFC:Last File Created 23/06/2011 - 16:03:36 ---A- C:\Users\All Users\Nero\Agent\Repository\State.md5 [32]

O61 - LFC:Last File Created 23/06/2011 - 16:03:36 ---A- C:\Users\All Users\Nero\Agent\Repository\State.xml [181]

O61 - LFC:Last File Created 24/06/2011 - 16:03:36 ---A- C:\Users\All Users\Nero\Agent\Agent.cfg [84]

O61 - LFC:Last File Created 24/06/2011 - 16:03:36 ---A- C:\Users\All Users\Nero\Agent\History.md5 [32]

O61 - LFC:Last File Created 26/11/2010 - 18:41:30 ---A- C:\Users\Mayke\AppData\Local\FLVService\lib\FLVSrvLib.dll [18432]

O61 - LFC:Last File Created 30/11/2010 - 20:23:10 ---A- C:\Users\Mayke\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl [35534]

O61 - LFC:Last File Created 30/11/2010 - 20:23:11 ---A- C:\Users\Mayke\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl [898]

O61 - LFC:Last File Created 30/11/2010 - 20:24:41 ---A- C:\Users\Mayke\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.js [0]

O61 - LFC:Last File Created 30/11/2010 - 20:24:41 ---A- C:\Users\Mayke\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts\glob.settings.js [10]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 15/12/2010 - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 03/04/2011 - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB

O64 - Services: CurCS - 30/08/2010 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2(driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - 21/03/2008 - C:\Windows\system32\drivers\int15.sys - int15(int15) .(.Acer, Inc. - int15.) - LEGACY_INT15

O64 - Services: CurCS - 29/05/2011 - C:\Windows\system32\drivers\mbam.sys - MBAMProtector(MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR

O64 - Services: CurCS - 14/05/2008 - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter(PSDFilter) .(.Egis Incorporated - Acer eDataSecurity Management PSD Filter Dr.) - LEGACY_PSDFILTER

O64 - Services: CurCS - 14/05/2008 - C:\Windows\System32\DRIVERS\PSDNServ.sys - PSDNServ(PSDNServ) .(.Egis Incorporated - Acer eDataSecurity Management PSD Named Pip.) - LEGACY_PSDNSERV

O64 - Services: CurCS - 14/05/2008 - C:\Windows\System32\DRIVERS\PSDVdisk.sys - PSDVdisk(psdvdisk) .(.Egis Incorporated - Acer eDataSecurity Management PSD Virtual D.) - LEGACY_PSDVDISK

O64 - Services: CurCS - 28/12/2010 - C:\Windows\System32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD

O64 - Services: CurCS - 17/06/2010 - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 15/05/2010 - C:\Windows\System32\DRIVERS\vsdatant.sys - Zone Alarm Firewall Driver(Vsdatant) .(.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - LEGACY_VSDATANT

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:13/06/1998 (.Pas de propriétaire - Gif89 Module.) (1, 0, 0, 1) - c:\windows\system32\Gif89.dll

 

 

 

---\\ Observateur d'évènement d'application (O66)

O66 - EventLog: ID=482 (ESENT) - (...) -- C:\ProgramData\Microsoft\Search\Data

O66 - EventLog: ID=8193 (System Restore) - (...) -- C:\Users\Mayke\AppData\Local\Temp\NeroInstallFiles

O66 - EventLog: ID=4118 (Avira AntiVir) - (...) -- C:\Users\Mayke\AppData\Roaming\Apple Computer\MobileSync\Backup

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (...) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\searchplugins\conduit.xml

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?'>http://search.conduit.com/ResultsExt.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.ct2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - Babylon Search

O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - ( ) - http://search.conduit.com

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.B2994EC6452DBD04E57828EEFEDFB93C] [sPRF] (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Mayke\AppData\Local\Temp\RtkBtMnt.exe [204800]

[MD5.E7D4603CB71AA5CDE15A009AE2A34D04] [sPRF] (...) -- C:\Users\Mayke\Desktop\MyHosts.exe [124416]

[MD5.12782199A66E126FDA49A6E3DB4D70EB] [sPRF] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Mayke\Desktop\ZHPDiag2.exe [2536154]

[MD5.F8EDC0F44BF504FE83251DC1C70F26E4] [sPRF] (...) -- C:\Users\Mayke\AppData\Roaming\Sys2662.Config.Repository.bin [22]

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe

O87 - FAEL: "NetPres-Out-TCP" | Out - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-WSD-In-UDP" | In - Domain - P17 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-Out-TCP-NoScope" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "NetPres-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Connect to a Network Projector.) -- C:\Windows\system32\netproj.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe

O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe

O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Réplication DFS.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Réplication DFS.) -- C:\Windows\system32\dfsr.exe

O87 - FAEL: "{7B7DEEEB-D07C-4D91-9E38-F857C78E87AD}" | In - Public - P6 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

O87 - FAEL: "{85FDDE5B-8CBC-4798-B06D-8EC8E0C59F70}" | In - Public - P17 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

O87 - FAEL: "{700982FC-837F-4B5A-9A78-2CBD0B8EB989}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

O87 - FAEL: "{1EC0BE30-C5C4-4D30-8DDA-FDFEE6BEFF0F}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

O87 - FAEL: "{89DA007C-73BF-4DD5-92F4-A6479FA63BA8}" | In - Public - P6 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

O87 - FAEL: "{54955791-5D79-4470-BEFE-6EECB7BB4EF4}" | In - Public - P17 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

O87 - FAEL: "{E0025EC9-154E-4225-AD81-E6274D2A9539}" |In - None - P17 - TRUE | .(...) -- c:\Program Files\Cyberlink\PowerDirector\PDR.exe (.not file.)

O87 - FAEL: "{8D5C8FEA-A4CE-4660-BBC8-6E84288DA6AA}" | In - Public - P6 - TRUE | .(.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Windows\System32\ZoneLabs\vsmon.exe

O87 - FAEL: "{BB5B9FA2-85ED-418A-A5E8-7B0DFB83DF08}" | In - Public - P17 - TRUE | .(.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Windows\System32\ZoneLabs\vsmon.exe

O87 - FAEL: "{FB626392-0AF6-46A8-9368-AC0FAC430C39}" | In - Public - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "{6B9788F2-1F16-42F8-AC08-F02A212988D7}" | In - Public - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "TCP Query User{A49E5666-2416-45B8-9B62-7704985B881D}C:\program files\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe

O87 - FAEL: "UDP Query User{01270738-7AA8-41AD-B0A2-B5C85BD7CC99}C:\program files\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe

O87 - FAEL: "{EB7B4C71-4688-42A5-8508-BF658E0D02B4}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O87 - FAEL: "{D81E879F-DEED-48DD-9FED-37BD262F6B4D}" | In - None - P17 - TRUE | .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O87 - FAEL: "{D336220F-1115-4E91-8C63-9106A6946AB5}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "{8780F6D0-A5E1-4ADB-9AF3-FD5F1406E881}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "{F21299E0-A1A0-443E-80F1-535047C87059}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "{4906CC15-3688-4C55-9FFB-0DA2633FAEEF}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe

O87 - FAEL: "{F38DC242-050D-47FD-98B4-24F264BE2626}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (.not file.)

O87 - FAEL: "{C1A04BA2-F60D-49CA-AA3F-BA899967C5E7}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe (.not file.)

O87 - FAEL: "{EE921C9F-88B8-4AB7-B8CA-AE2EFDCABAC8}" | In - Private - P6 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{828C4C21-96EE-4772-8649-8CF59F153966}" | In - Private - P17 - TRUE | .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O87 - FAEL: "{09B57BA5-2FE6-419A-8888-A162392E8156}" | In - Private - P6 - TRUE | .(.Hewlett-Packard Co. - DeviceSetup.exe.) -- C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe

O87 - FAEL: "{2A7A8D6A-EF77-4A56-AE12-792B5B85BE90}" | In - Private - P17 - TRUE | .(.Hewlett-Packard Co. - DeviceSetup.exe.) -- C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe

O87 - FAEL: "{B631570A-EEAE-48F6-8FFC-4824B96B7AD4}" | In - Private - P6 - TRUE | .(.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe

O87 - FAEL: "{A869EA34-6739-4B33-B59F-2898EE7A6476}" | In - Private - P17 - TRUE | .(.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe

O87 - FAEL: "{0E1C3C96-3E90-49C2-9E3C-1D8ED3CB9947}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{E0747242-5DA0-4259-82AA-EEE4FEE6F0A7}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{9C61AC0D-4EDD-48E3-8A7B-5E4F9BE62633}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{0085408A-6A6C-405C-8992-22C9AAED1089}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O87 - FAEL: "{48DAC28D-5FB8-4AF5-94DB-9DEAD9AB4675}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Mayke\Downloads\AviConverterSetup.exe (.not file.)

O87 - FAEL: "{6E4FC0F3-1C21-454B-9BAE-E88272F63667}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Mayke\Downloads\AviConverterSetup.exe (.not file.)

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8461 - (04/07/2011)

Clés trouvées (Keys found) : 11

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 8

Fichiers trouvés (Files found) : 1

 

[HKLM\Software\Classes\Toolbar.CT2611275] =>Toolbar.Agent

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}] =>Toolbar.Babylon

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}] =>Toolbar.Babylon

[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}] =>Toolbar.Babylon

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] =>Spyware.BHO

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit

[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit

[HKCU\Software\Ask&Record] =>Toolbar.Agent

[HKCU\Software\Conduit] =>Toolbar.Conduit

[HKCU\Software\AppDataLow\Software\Conduit] =>Toolbar.Conduit

[HKLM\Software\Conduit] =>Toolbar.Conduit

C:\Program Files\Conduit =>Toolbar.Conduit

C:\Users\Mayke\AppData\Local\MediaGet2 =>PUP.MediaGet

C:\Users\Mayke\AppData\LocalLow\BabylonToolbar =>Toolbar.Babylon

C:\Users\Mayke\AppData\LocalLow\Conduit =>Toolbar.Conduit

C:\Users\Mayke\AppData\Local\MediaGet2 =>PUP.MediaGet

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\Conduit =>Toolbar.Conduit

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\ConduitEngine =>Toolbar.Conduit

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\Extensions\engine@conduit.com =>Toolbar.Conduit

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\SearchPlugins\conduit.xml =>Toolbar.Conduit

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 18/06/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

SR - | Auto 19/10/2010 13312 | (AgereModemAudio) . (.Agere Systems.) - C:\Windows\system32\agrsmsvc.exe

SR - | Auto 19/10/2010 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 19/10/2010 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 21/04/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 21/04/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SR - | Auto 08/05/2008 16384 | (BUNAgentSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

SR - | Auto 19/10/2010 500784 | (eDataSecurity Service) . (.Egis Incorporated.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

SR - | Auto 08/05/2008 24576 | (ETService) . (...) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe

SS - | Auto 19/10/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 19/10/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 19/10/2010 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SR - | Demand 21/04/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 08/05/2008 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SS - | Demand 31/01/2011 310640 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SR - | Auto 03/07/2011 366640 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

SR - | Auto 19/10/2010 110592 | (MobilityService) . (...) - C:\Acer\Mobility Center\MobilityService.exe

SS - | Auto 23/06/2011 584488 | C:\Program Files\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe

SR - | Auto 08/05/2008 50424 | (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

SR - | Auto 08/05/2008 131072 | (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

SR - | Auto 19/10/2010 2435592 | (vsmon) . (.Check Point Software Technologies LTD.) - C:\Windows\System32\ZoneLabs\vsmon.exe

SR - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Mayke at 04/07/2011 23:05:46

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x858AB1F8]<<

1 ntkrnlpa!IofCallDriver[0x82504FEF] -> \Device\Harddisk0\DR0[0x860F1AC8]

3 CLASSPNP[0x8AB9F745] -> ntkrnlpa!IofCallDriver[0x82504FEF] -> \Device\Ide\IdeDeviceP0T0L0-0[0x85937BA0]

\Driver\atapi[0x85928850] -> IRP_MJ_CREATE -> 0x858AB1F8

kernel: MBR read successfully

detected disk devices:

detected hooks:

\Driver\atapi -> 0x858ab1f8

user & kernel MBR OK

Warning: possible MBR rootkit infection !

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Mayke at 04/07/2011 23:05:48

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

 

 

 

---\\ Liste des émulateurs de CD/DVD (Hook du MBR)

O58 - SDL:[MD5.DCEE1200FEFFFFFF000000008CF11200] - 28/12/2010 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys [717296]

 

 

 

End of the scan (1602 lines in 10mn 13s)(0)

[bernard53]

ok fait ceci et dis moi après comment va ton pc.

 

 

 

* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

 

M3 - MFPP: Plugins - [Mayke] -- C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\searchplugins\conduit.xml

M2 - MFEP: prefs.js [Mayke - raz6ubhh.default\engine@conduit.com] [] Conduit Engine v3.3.3.2 (.Conduit Ltd..)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

R0 - HKUS\S-1-5-21-3072727286-2981826037-1783307074-1000\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Babylon Search

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} . (...) -- (.not file.)

[HKCU\Software\AppDataLow\Software\Conduit]

[HKCU\Software\Ask&Record]

[HKCU\Software\Conduit]

[HKCU\Software\Zugo]

O43 - CFD: 19/10/2010 - 01:27:26 - [521312] ----D- C:\Program Files\Conduit

O43 - CFD: 11/05/2011 - 16:34:50 - [270] ----D- C:\Users\Mayke\AppData\Local\MediaGet2

O43 - CFD: 11/05/2011 - 16:34:50 - [270] ----D- C:\Users\Mayke\AppData\Local\MediaGet2

O69 - SBI: C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\searchplugins\conduit.xml

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?'>http://search.conduit.com/ResultsExt.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("CT2611275.ct2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

O69 - SBI: prefs.js [Mayke - raz6ubhh.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933

O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - Babylon Search

O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - ( ) - http://search.conduit.com

[HKLM\Software\Classes\Toolbar.CT2611275]

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}]

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}]

[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}]

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]

[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]

[HKCU\Software\Ask&Record]

[HKCU\Software\Conduit]

[HKCU\Software\AppDataLow\Software\Conduit]

[HKLM\Software\Conduit]

C:\Program Files\Conduit

C:\Users\Mayke\AppData\Local\MediaGet2

C:\Users\Mayke\AppData\LocalLow\BabylonToolbar

C:\Users\Mayke\AppData\LocalLow\Conduit

C:\Users\Mayke\AppData\Local\MediaGet2

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\Conduit

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\ConduitEngine

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\Extensions\engine@conduit.com

C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\SearchPlugins\conduit.xml

 

FirewallRaz

EmptyFlash

Emptytemp

 

 

Puis Lance ZHPFix depuis le raccourci du bureau.

 

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)

- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

- Clique sur le bouton « GO » pour lancer le nettoyage,

- Copie/colle la totalité du rapport dans ta prochaine réponse

 

-> laisse travailler l'outil et ne touche à rien ...

 

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

 

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

 

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !

[maykiki]

Super sympa de ta part bernard53!!! )

 

alors je viens de suivre tes consignes. La seule chose que je puisse dire pour le moment c que mon firefox a changé! Voila en tout cas le rapport et je te fais part des problemes si problemes persistants d ici peu!

 

Rapport de ZHPFix 1.12.3335 par Nicolas Coolman, Update du 04/07/2011

Fichier d'export Registre : C:\ZHPExportRegistry-06-07-2011-00-27-56.txt

Run by Mayke at 06/07/2011 00:27:56

Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)

Web site : ZHPFix Fix de rapport

 

========== Clé(s) du Registre ==========

SUPPRIME Key: CLSID BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670}

SUPPRIME Key: CLSID BHO: {5C255C8A-E604-49b4-9D64-90988571CECB}

SUPPRIME Key: HKCU\Software\AppDataLow\Software\Conduit

SUPPRIME Key: HKCU\Software\Ask&Record

SUPPRIME Key: HKCU\Software\Conduit

SUPPRIME Key: HKCU\Software\Zugo

SUPPRIME Key: SearchScopes :{1F096B29-E9DA-4D64-8D63-936BE7762CC5}

SUPPRIME Key: SearchScopes :{afdbddaa-5d3f-42ee-b79c-185a7020515b}

SUPPRIME Key: HKLM\Software\Classes\Toolbar.CT2611275

ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}

ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

ABSENT Key: HKCU\Software\Ask&Record

ABSENT Key: HKCU\Software\Conduit

ABSENT Key: HKCU\Software\AppDataLow\Software\Conduit

SUPPRIME Key: HKLM\Software\Conduit

 

========== Valeur(s) du Registre ==========

SUPPRIME Toolbar: {0BF43445-2F28-4351-9252-17FE6E806AA0}

ABSENT Valeur Standard Profile: FirewallRaz :

ABSENT Valeur Domain Profile: FirewallRaz :

SUPPRIME FirewallRaz (None) : {E0025EC9-154E-4225-AD81-E6274D2A9539}

SUPPRIME FirewallRaz (None) : {F1787AFA-A50D-408A-B6F9-E2286BB02F56}

SUPPRIME FirewallRaz (Private) : {F38DC242-050D-47FD-98B4-24F264BE2626}

SUPPRIME FirewallRaz (Private) : {C1A04BA2-F60D-49CA-AA3F-BA899967C5E7}

SUPPRIME FirewallRaz (Private) : {48DAC28D-5FB8-4AF5-94DB-9DEAD9AB4675}

SUPPRIME FirewallRaz (Private) : {6E4FC0F3-1C21-454B-9BAE-E88272F63667}

 

========== Elément(s) de donnée du Registre ==========

SUPPRIME R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page

SUPPRIME R0 - HKUS\S-1-5-21-3072727286-2981826037-1783307074-1000\Software\Microsoft\Internet Explorer\Main,Start Page

SUPPRIME R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant

 

========== Préférences navigateur ==========

SUPPRIME Mozilla Pref: user_pref("CT1060933.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?'>http://search.conduit.com/ResultsExt.aspx?

SUPPRIME Mozilla Pref: user_pref("CT2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

SUPPRIME Mozilla Pref: user_pref("CT2611275.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?

SUPPRIME Mozilla Pref: user_pref("CT2611275.ct2611275.SearchEngine", "Search||http://search.conduit.com/Results.aspx?

SUPPRIME Mozilla Pref: user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Users\Mayke\AppData\Roaming\Mozilla\Firefox\Profiles\raz6ubhh.default\extensions\engine@conduit.com

SUPPRIME Folder*: C:\Program Files\Conduit

SUPPRIME Folder: C:\Users\Mayke\AppData\Local\MediaGet2

ABSENT C:\Users\Mayke\AppData\Local\MediaGet2

SUPPRIME Folder: c:\users\mayke\appdata\locallow\babylontoolbar

SUPPRIME Folder: c:\users\mayke\appdata\locallow\conduit

SUPPRIME Folder: c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\conduit

SUPPRIME Folder: c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\conduitengine

SUPPRIME Flash Cookies: 289

SUPPRIME Temporaires Windows: : 108

 

========== Fichier(s) ==========

SUPPRIME c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\searchplugins\conduit.xml

ABSENT File: c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\searchplugins\conduit.xml

ABSENT Folder/File: c:\program files\conduit

ABSENT Folder/File: c:\users\mayke\appdata\local\mediaget2

ABSENT Folder/File: c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\extensions\engine@conduit.com

ABSENT Folder/File: c:\users\mayke\appdata\roaming\mozilla\firefox\profiles\raz6ubhh.default\searchplugins\conduit.xml

SUPPRIME Flash Cookies: 122

SUPPRIME Temporaires Windows: : 392

 

 

========== Récapitulatif ==========

18 : Clé(s) du Registre

9 : Valeur(s) du Registre

3 : Elément(s) de donnée du Registre

10 : Dossier(s)

8 : Fichier(s)

5 : Préférences navigateur

 

 

========== Chemin du fichier rapport ==========

C:\Program Files\ZHPDiag\ZHPFixReport.txt

 

 

 

End of the scan in 01mn 20s

[bernard53]

ok donne moi des nouvelles

[maykiki]

Salut bernard53!

 

Alors y a du mieux en effet mais toujours certaines choses, rien a voir avec une eventuelle infection ca tombe!

 

Le pc rame bcp moins, il s eteint meme tres vite

 

Les deux seules choses que j ai remarquees en fait sont:

 

1/ a l allumage du pc, apres le logo windows, tout devient noir et il faut un bon moment pour que le bureau apparaisse sauf avec CTRL + ALT + SUPPR.

 

2/ Ma configuration de firefox a ete completement modifie apres le dernier nettoyage mais je pense que c est normal non?!

 

Etais je infecte au fait?