[Resolu] Ordinateur infecté

[grem]

Encore merci

 

hop la !

 

Rapport de ZHPDiag v1.27.2406 par Nicolas Coolman, Update du 12/07/2011

Run by Saskia at 14/07/2011 01:59:06

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox v (Defaut)

GCIE: Google Chrome v12.0.742.112

 

---\\ System Information

Windows XP Professional Service Pack 3 (Build 2600)

~ Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel

~ Operating System: 32 Bits

~ Boot mode: ~ Normal (Normal boot)

Total RAM: 1022 MB (52% free)

~ System Restore: Activé (Enable)

System drive C: has 22 GB (28%) free of 75 GB

 

---\\ Logged in mode

~ Computer Name: JÉRÉMY

~ User Name: Saskia

~ All Users Names: SUPPORT_388945a0, Saskia, HelpAssistant, Guest, ASPNET, Administrator,

~ Unselected Option: None

~ Logged in as Administrator

 

---\\ Environnement Variables

~ %AppData%=C:\Documents and Settings\Saskia\Application Data\

~ %Desktop%=C:\Documents and Settings\Saskia\Desktop\

~ %Favorites%=C:\Documents and Settings\Saskia\Favorites\

~ %LocalAppData%=C:\Documents and Settings\Saskia\Local Settings\Application Data\

~ %StartMenu%=C:\Documents and Settings\Saskia\Start Menu\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 22 Go of 75 Go)

D:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.2BB75B7F548D82A099125D0C5971DE7D] - (.Microsoft Corporation - Windows Explorer.) (.14/07/2011 - 12:38:24.) -- C:\WINDOWS\Explorer.exe [1033728]

[MD5.037B1E7798960E0420003D05BB577EE6] - (....) (.14/07/2011 - 13:00:00.) -- C:\WINDOWS\system32\rundll32.exe [33280]

[MD5.CC951C2212A200475A587A440E0AA804] - (.Microsoft Corporation - Internet Extensions for Win32.) (.14/07/2011 - 17:11:12.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.D1BAC55BC35A0CA735AEA19F609F2B22] - (.Microsoft Corporation - Windows NT Logon Application.) (.14/07/2011 - 14:33:54.) -- C:\WINDOWS\system32\Winlogon.exe [507904]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/07/2011 - 23:10:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.A0857C97770034FD2AF17DC4014B5ABD] - (.Microsoft Corporation - NT File System Driver.) (.14/07/2011 - 14:45:52.) -- C:\WINDOWS\system32\drivers\ntfs.sys [576384]

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 2/23

~ Mes musiques (My Musics) : 36/2636

~ Mes Favoris (My Favorites) : 2/11

~ Mes Documents (My Documents) : 170/9878

~ Mon Bureau (My Desktop) : 9/1501

~ Menu demarrer (Programs) : 4/30

 

 

 

---\\ Processus lancés

[MD5.127E07D34B44438442A0E81AE7F093C0] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [425984]

[MD5.5AE75738B957C2064566007487D973B6] - (.Intel Corporation - EvtEng Module.) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [86016]

[MD5.215DEEE103618F102263C8ECF4B8413E] - (.Intel Corporation - Event Monitor - Supports driver extensions.) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [360521]

[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360]

[MD5.2F73148CFD930B641D860710931FE8C7] - (.Intel Corporation - ZeroCfgSvc MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe [389120]

[MD5.1CF3866E09FFE13CF280D4DDFA9F7DCF] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480]

[MD5.018857EAD9A077A56AEDFC0E5EF7A24A] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664]

[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]

[MD5.F832F1505AD8B83474BD9A5B1B985E01] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376]

[MD5.05D21AD56EA309597864393D3D4A14F7] - (.WIDCOMM, Inc. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [163840]

[MD5.1834C96FB1F9280BCF6DDFA6DE8338BF] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]

[MD5.F57524C6764E96FC29AC64394282EB36] - (.Intel Corporation - Ownership protocol service.) -- C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe [98304]

[MD5.A7EEBA958CFCCADBD4F47C3CDB51C714] - (.Intel Corporation - RegSrvc Module.) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [139264]

[MD5.037B1E7798960E0420003D05BB577EE6] - (...) -- C:\WINDOWS\system32\rundll32.exe [33280]

[MD5.3665BA88B993554DB062FF96542D85FF] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394]

[MD5.55582F239914C8EFCCF89BD632639542] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218]

[MD5.00EE4D43383C6162744C18626FEA96F9] - (.INPROCOMM - Wireless LAN Configuration Utility.) -- C:\Program Files\acer\Wireless\Utility\WlanUtil.exe [417792]

[MD5.0E237B85A4FF082CAECFBF4804A29F3C] - (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [385024]

[MD5.1AFE29C82ED39A48FEC9E747B356C87C] - (.Intel Corporation - Ease Of Use Wizard Application.) -- C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe [356352]

[MD5.F7364F9AF03F4F01856804C28B459FEB] - (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [344064]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]

[MD5.BAD6BEA0DE1F69C82BDB74378CE0C20A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288]

[MD5.2DFCB2393528446AEB9FB861A8FC39AB] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160]

[MD5.3E930C641079443D4DE036167A69CAA2] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232]

[MD5.70B6D0C45256B688B7DBC10E922FB402] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [26192168]

[MD5.97CF3EC1582005C2D354B708F0960B63] - (.WIDCOMM, Inc. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [565309]

[MD5.0CA8C2E721617AA2F923A8151C96FB33] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820008]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472]

[MD5.0A9BA6AF531AFE7FA5E4FB973852D863] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120]

[MD5.00365B3515C30F66CDB938F6729F3D0C] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [656896]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\prefs.js

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [saskia] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.CambridgeSoft Corp. - ChemDraw Pro Plugin 8.0.) -- C:\Program Files\Mozilla Firefox\Plugins\npcdp32.dll

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.1".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - SciFinder Application Plugin for Mozilla.) -- C:\Program Files\Mozilla Firefox\Plugins\npSfAppM.dll

P2 - FPN:Firefox Plugin Navigator . (.CNN - NPTURNMED.) -- C:\Program Files\Mozilla Firefox\Plugins\NPTURNMED.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Documents and Settings\Saskia\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

G0 - GCSP: Preference [user Data\Default][HomePage] Google

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKUS\S-1-5-21-1343024091-57989841-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: SciFinder Scholar Bar - {4e16a8fb-0521-46d1-aa2c-d0fc7abf6af9} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] bthprops.cpl

O4 - HKLM\..\Run: [KTPWare] . (.ELANTECH Devices Corp. - KTP Ware TSR Enhancements.) -- C:\Program Files\Elantech\ktp.exe

O4 - HKLM\..\Run: [synTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [acerWireless] . (.INPROCOMM - Wireless LAN Configuration Utility.) -- C:\Program Files\acer\Wireless\Utility\WlanUtil.exe

O4 - HKLM\..\Run: [intelWireless] . (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe

O4 - HKLM\..\Run: [EOUApp] . (.Intel Corporation - Ease Of Use Wizard Application.) -- C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe

O4 - HKLM\..\Run: [ATIPTA] . (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe

O4 - HKLM\..\Run: [switchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O4 - HKLM\..\Run: [tvncontrol] . (.GlavSoft LLC. - TightVNC Server for Windows.) -- C:\Program Files\TightVNC\tvnserver.exe

O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1343024091-57989841-1177238915-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1343024091-57989841-1177238915-1003\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - HKUS\S-1-5-21-1343024091-57989841-1177238915-1003\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe After Effects CS3.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe After Effects CS3\Support Files\AfterFX.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS3.lnk . (.Adobe Systems, Inc..) -- C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Device Central CS3.lnk . (.Adobe Systems.) -- C:\Program Files\Adobe\Adobe Device Central CS3\DeviceCentral.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit 2.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit 2\ExtendScript Toolkit 2.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop CS3.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop Lightroom 2.4.lnk . (.Adobe Systems.) -- C:\Program Files\Adobe\Adobe Photoshop Lightroom 2.4\lightroom.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Premiere Pro CS3.lnk . (...) -- C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 6.0.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-000000000001}\SC_Reader_PM.ico (.not file.)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Stock Photos CS3.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Adobe Stock Photos CS3\Adobe Stock Photos CS3.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe (.not file.)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\PC Inspector smart recovery.lnk . (.Convar Deutschland GmbH.) -- C:\Program Files\Convar\SmartRecovery\SMR.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Yahoo! Mail.lnk . (...) -- C:\WINDOWS\system32\RUNDLL32.EXE

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\eBay Sidebar pour Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\JDownloader.lnk . (.AppWork UG (haftungsbeschränkt).) -- C:\Program Files\JDownloader\JDownloader.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\Microsoft Office Word 2007.lnk . (...) -- C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\Pixia 4.3a FR.lnk . (...) -- C:\Program Files\Pixia 4.3a FR\pixia.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\Shortcut to EndNote.lnk . (.Thomson ResearchSoft.) -- C:\Program Files\EndNote 9\EndNote.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\Shortcut to ZHPFix.lnk . (.Nicolas Coolman.) -- C:\Program Files\ZHPDiag\ZHPFix.exe

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\TeXnicCenter.lnk . (.TeXnicCenter.org (www.TeXnicCenter.org).) -- C:\Program Files\TeXnicCenter\TEXCNTR.EXE

O4 - Global Startup: C:\Documents And Settings\Saskia\Desktop\XnView.lnk . (.XnView, http://www.xnview.com.) -- C:\Program Files\XnView\xnview.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe

O8 - Extra context menu item: Send To &Bluetooth . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico

O9 - Extra button: Skype add-on for Internet Explorer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Client Service for NetWare Provider and Authentication Package DLL.) -- C:\WINDOWS\system32\nwprovau.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{19A8B5E0-A772-4CEA-B80A-AF76F33DB28D}: DhcpNameServer = 89.2.0.1 89.2.0.2

O17 - HKLM\System\CS1\Services\Tcpip\..\{19A8B5E0-A772-4CEA-B80A-AF76F33DB28D}: DhcpNameServer = 89.2.0.1 89.2.0.2

O17 - HKLM\System\CS2\Services\Tcpip\..\{19A8B5E0-A772-4CEA-B80A-AF76F33DB28D}: DhcpNameServer = 89.2.0.1 89.2.0.2

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2

 

 

 

---\\ Protocole additionnel et piratage de protocole (O18)

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} . (.WIDCOMM, Inc. - BTXPPanel Module.) -- C:\WINDOWS\system32\btxppanel.dll

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\Windows\System32\Ati2evxx.dll

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\Windows\System32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: IntelWireless . (.Intel Corporation - LogonNotify DLL.) -- C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\Windows\System32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) . (.WIDCOMM, Inc. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: EvtEng (EvtEng) . (.Intel Corporation - EvtEng Module.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Service Google Update (gupdate1cb095d934d6ec8) (gupdate1cb095d934d6ec8) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: OwnershipProtocol (OwnershipProtocol) . (.Intel Corporation - Ownership protocol service.) - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe

O23 - Service: RegSrvc (RegSrvc) . (.Intel Corporation - RegSrvc Module.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) . (.Intel Corporation - Event Monitor - Supports driver extensions.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: TightVNC Server (tvnserver) . (.GlavSoft LLC. - TightVNC Server for Windows.) - C:\Program Files\TightVNC\tvnserver.exe

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Desktop Component 0: My Current Home Page - file:About:Home

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

[MD5.187E0D2AB859AD03393DDD731076BE81] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - HID Mouse Filter Driver.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\WINDOWS\System32\DRIVERS\redbook.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software

O42 - Logiciel: ATI Control Panel - (.Pas de propriétaire.) [HKLM] -- {0BEDBD4E-2D34-47B5-9973-57E62B29307C}

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}

O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Photoshop CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {15FEDA5F-141C-4127-8D7E-B962D1742728}

O42 - Logiciel: Adobe Reader 9.4.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}

O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM] -- Akamai

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {308B6AEA-DE50-4666-996D-0FA461719D6B}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {2A981294-F14C-4F0F-9627-D793270922F8}

O42 - Logiciel: Broadcom 440x 10/100 Integrated Controller - (.Broadcom.) [HKLM] -- InstallShield_{52504CE6-E909-4113-B232-4AFEC6543A61}

O42 - Logiciel: Broadcom Gigabit Integrated Controller - (.Nom de votre société.) [HKLM] -- {B7F54262-AB66-44B3-88BF-9FC69941B643}

O42 - Logiciel: ChemOffice Ultra 2004 - (.CambridgeSoft Corporation.) [HKLM] -- {5A33744D-33F5-451A-9CB0-2FE49EE3809C}

O42 - Logiciel: Conexant AC-Link Audio - (.Pas de propriétaire.) [HKLM] -- Conexant PCI Audio

O42 - Logiciel: EndNote 9 Volume License Edition - (.Thomson ResearchSoft.) [HKLM] -- {53C020C2-8C1A-11D9-8BDE-F66BAD1E3F3A}

O42 - Logiciel: FreeCompressor - (.Secure Digital Services.) [HKLM] -- {1EF93620-4B15-4DB4-B0EA-889E2F187081}

O42 - Logiciel: GPL Ghostscript 8.61 - (.Pas de propriétaire.) [HKLM] -- GPL Ghostscript 8.61

O42 - Logiciel: GPL Ghostscript Fonts - (.Pas de propriétaire.) [HKLM] -- GPL Ghostscript Fonts

O42 - Logiciel: GSview 4.9 - (.Pas de propriétaire.) [HKLM] -- GSview 4.9

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows XP (KB2158563) - (.Microsoft Corporation.) [HKLM] -- KB2158563

O42 - Logiciel: Hotfix for Windows XP (KB2443685) - (.Microsoft Corporation.) [HKLM] -- KB2443685

O42 - Logiciel: Hotfix for Windows XP (KB942766-v6) - (.Microsoft Corporation.) [HKLM] -- KB942766-v6

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: Hotfix for Windows XP (KB981793) - (.Microsoft Corporation.) [HKLM] -- KB981793

O42 - Logiciel: ISI ResearchSoft - Export Helper - (.Pas de propriétaire.) [HKLM] -- ISI ResearchSoft - Export Helper

O42 - Logiciel: Intel® PROSet/Wireless Software - (.Intel Corporation.) [HKLM] -- ProInst

O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader

O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}

O42 - Logiciel: KTP Ware PS/2-WDM 5.0.1.8 - (.Pas de propriétaire.) [HKLM] -- Elantech

O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST

O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- MSXML 4.0 SP2 (KB941833)

O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: MiKTeX 2.8 - (.MiKTeX.org.) [HKLM] -- MiKTeX 2.8

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- Microsoft Silverlight

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}

O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C}

O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7}

O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57}

O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C}

O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403}

O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}

O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18)

O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}

O42 - Logiciel: OriginPro 8G - (.OriginLab Corporation.) [HKLM] -- {A912021A-FEDD-4DA3-8DB4-245EBDA84778}

O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392}

O42 - Logiciel: Pixia 4.3a FR - (.Pas de propriétaire.) [HKCU] -- Pixia 4.3a FR

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {E7004147-2CCA-431C-AA05-2AB166B9785D}

O42 - Logiciel: SciFinder Scholar 2007 - (.Pas de propriétaire.) [HKLM] -- {12377A05-0062-47F9-9CB9-AAAF8C22D645}

O42 - Logiciel: SciFinder Scholar Toolbar - (.Pas de propriétaire.) [HKLM] -- {455F9ACD-4967-446B-9174-8C87EA895F2A}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD907315-705A-4475-A1A0-2A1245803E4D}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0173254-F442-4D04-9154-43FA157B83D0}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2183461) - (.Microsoft Corporation.) [HKLM] -- KB2183461-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2360131) - (.Microsoft Corporation.) [HKLM] -- KB2360131-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2482017) - (.Microsoft Corporation.) [HKLM] -- KB2482017-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2510531) - (.Microsoft Corporation.) [HKLM] -- KB2510531-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2530548) - (.Microsoft Corporation.) [HKLM] -- KB2530548-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB2544521) - (.Microsoft Corporation.) [HKLM] -- KB2544521-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB971961) - (.Microsoft Corporation.) [HKLM] -- KB971961-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB981332) - (.Microsoft Corporation.) [HKLM] -- KB981332-IE8

O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB982381) - (.Microsoft Corporation.) [HKLM] -- KB982381-IE8

O42 - Logiciel: Security Update for Windows Media Player (KB2378111) - (.Microsoft Corporation.) [HKLM] -- KB2378111_WM9

O42 - Logiciel: Security Update for Windows Media Player (KB952069) - (.Microsoft Corporation.) [HKLM] -- KB952069_WM9

O42 - Logiciel: Security Update for Windows Media Player (KB954155) - (.Microsoft Corporation.) [HKLM] -- KB954155_WM9

O42 - Logiciel: Security Update for Windows Media Player (KB968816) - (.Microsoft Corporation.) [HKLM] -- KB968816_WM9

O42 - Logiciel: Security Update for Windows Media Player (KB973540) - (.Microsoft Corporation.) [HKLM] -- KB973540_WM9

O42 - Logiciel: Security Update for Windows Media Player (KB975558) - (.Microsoft Corporation.) [HKLM] -- KB975558_WM8

O42 - Logiciel: Security Update for Windows Media Player (KB978695) - (.Microsoft Corporation.) [HKLM] -- KB978695_WM9

O42 - Logiciel: Security Update for Windows Media Player 11 (KB954154) - (.Microsoft Corporation.) [HKLM] -- KB954154_WM11

O42 - Logiciel: Security Update for Windows XP (KB2079403) - (.Microsoft Corporation.) [HKLM] -- KB2079403

O42 - Logiciel: Security Update for Windows XP (KB2115168) - (.Microsoft Corporation.) [HKLM] -- KB2115168

O42 - Logiciel: Security Update for Windows XP (KB2121546) - (.Microsoft Corporation.) [HKLM] -- KB2121546

O42 - Logiciel: Security Update for Windows XP (KB2160329) - (.Microsoft Corporation.) [HKLM] -- KB2160329

O42 - Logiciel: Security Update for Windows XP (KB2229593) - (.Microsoft Corporation.) [HKLM] -- KB2229593

O42 - Logiciel: Security Update for Windows XP (KB2259922) - (.Microsoft Corporation.) [HKLM] -- KB2259922

O42 - Logiciel: Security Update for Windows XP (KB2279986) - (.Microsoft Corporation.) [HKLM] -- KB2279986

O42 - Logiciel: Security Update for Windows XP (KB2286198) - (.Microsoft Corporation.) [HKLM] -- KB2286198

O42 - Logiciel: Security Update for Windows XP (KB2296011) - (.Microsoft Corporation.) [HKLM] -- KB2296011

O42 - Logiciel: Security Update for Windows XP (KB2296199) - (.Microsoft Corporation.) [HKLM] -- KB2296199

O42 - Logiciel: Security Update for Windows XP (KB2347290) - (.Microsoft Corporation.) [HKLM] -- KB2347290

O42 - Logiciel: Security Update for Windows XP (KB2360937) - (.Microsoft Corporation.) [HKLM] -- KB2360937

O42 - Logiciel: Security Update for Windows XP (KB2387149) - (.Microsoft Corporation.) [HKLM] -- KB2387149

O42 - Logiciel: Security Update for Windows XP (KB2393802) - (.Microsoft Corporation.) [HKLM] -- KB2393802

O42 - Logiciel: Security Update for Windows XP (KB2412687) - (.Microsoft Corporation.) [HKLM] -- KB2412687

O42 - Logiciel: Security Update for Windows XP (KB2419632) - (.Microsoft Corporation.) [HKLM] -- KB2419632

O42 - Logiciel: Security Update for Windows XP (KB2423089) - (.Microsoft Corporation.) [HKLM] -- KB2423089

O42 - Logiciel: Security Update for Windows XP (KB2436673) - (.Microsoft Corporation.) [HKLM] -- KB2436673

O42 - Logiciel: Security Update for Windows XP (KB2440591) - (.Microsoft Corporation.) [HKLM] -- KB2440591

O42 - Logiciel: Security Update for Windows XP (KB2443105) - (.Microsoft Corporation.) [HKLM] -- KB2443105

O42 - Logiciel: Security Update for Windows XP (KB2476490) - (.Microsoft Corporation.) [HKLM] -- KB2476490

O42 - Logiciel: Security Update for Windows XP (KB2476687) - (.Microsoft Corporation.) [HKLM] -- KB2476687

O42 - Logiciel: Security Update for Windows XP (KB2478960) - (.Microsoft Corporation.) [HKLM] -- KB2478960

O42 - Logiciel: Security Update for Windows XP (KB2478971) - (.Microsoft Corporation.) [HKLM] -- KB2478971

O42 - Logiciel: Security Update for Windows XP (KB2479628) - (.Microsoft Corporation.) [HKLM] -- KB2479628

O42 - Logiciel: Security Update for Windows XP (KB2479943) - (.Microsoft Corporation.) [HKLM] -- KB2479943

O42 - Logiciel: Security Update for Windows XP (KB2481109) - (.Microsoft Corporation.) [HKLM] -- KB2481109

O42 - Logiciel: Security Update for Windows XP (KB2483185) - (.Microsoft Corporation.) [HKLM] -- KB2483185

O42 - Logiciel: Security Update for Windows XP (KB2485376) - (.Microsoft Corporation.) [HKLM] -- KB2485376

O42 - Logiciel: Security Update for Windows XP (KB2485663) - (.Microsoft Corporation.) [HKLM] -- KB2485663

O42 - Logiciel: Security Update for Windows XP (KB2503665) - (.Microsoft Corporation.) [HKLM] -- KB2503665

O42 - Logiciel: Security Update for Windows XP (KB2506212) - (.Microsoft Corporation.) [HKLM] -- KB2506212

O42 - Logiciel: Security Update for Windows XP (KB2506223) - (.Microsoft Corporation.) [HKLM] -- KB2506223

O42 - Logiciel: Security Update for Windows XP (KB2507618) - (.Microsoft Corporation.) [HKLM] -- KB2507618

O42 - Logiciel: Security Update for Windows XP (KB2508272) - (.Microsoft Corporation.) [HKLM] -- KB2508272

O42 - Logiciel: Security Update for Windows XP (KB2508429) - (.Microsoft Corporation.) [HKLM] -- KB2508429

O42 - Logiciel: Security Update for Windows XP (KB2509553) - (.Microsoft Corporation.) [HKLM] -- KB2509553

O42 - Logiciel: Security Update for Windows XP (KB2524375) - (.Microsoft Corporation.) [HKLM] -- KB2524375

O42 - Logiciel: Security Update for Windows XP (KB2535512) - (.Microsoft Corporation.) [HKLM] -- KB2535512

O42 - Logiciel: Security Update for Windows XP (KB2536276) - (.Microsoft Corporation.) [HKLM] -- KB2536276

O42 - Logiciel: Security Update for Windows XP (KB2544893) - (.Microsoft Corporation.) [HKLM] -- KB2544893

O42 - Logiciel: Security Update for Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM] -- KB923561

O42 - Logiciel: Security Update for Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM] -- KB952004

O42 - Logiciel: Security Update for Windows XP (KB954459) - (.Microsoft Corporation.) [HKLM] -- KB954459

O42 - Logiciel: Security Update for Windows XP (KB955069) - (.Microsoft Corporation.) [HKLM] -- KB955069

O42 - Logiciel: Security Update for Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM] -- KB956572

O42 - Logiciel: Security Update for Windows XP (KB956744) - (.Microsoft Corporation.) [HKLM] -- KB956744

O42 - Logiciel: Security Update for Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM] -- KB956802

O42 - Logiciel: Security Update for Windows XP (KB956803) - (.Microsoft Corporation.) [HKLM] -- KB956803

O42 - Logiciel: Security Update for Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM] -- KB956844

O42 - Logiciel: Security Update for Windows XP (KB958644) - (.Microsoft Corporation.) [HKLM] -- KB958644

O42 - Logiciel: Security Update for Windows XP (KB958869) - (.Microsoft Corporation.) [HKLM] -- KB958869

O42 - Logiciel: Security Update for Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM] -- KB959426

O42 - Logiciel: Security Update for Windows XP (KB960225) - (.Microsoft Corporation.) [HKLM] -- KB960225

O42 - Logiciel: Security Update for Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM] -- KB960803

O42 - Logiciel: Security Update for Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM] -- KB960859

O42 - Logiciel: Security Update for Windows XP (KB961501) - (.Microsoft Corporation.) [HKLM] -- KB961501

O42 - Logiciel: Security Update for Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM] -- KB969059

O42 - Logiciel: Security Update for Windows XP (KB969947) - (.Microsoft Corporation.) [HKLM] -- KB969947

O42 - Logiciel: Security Update for Windows XP (KB970238) - (.Microsoft Corporation.) [HKLM] -- KB970238

O42 - Logiciel: Security Update for Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM] -- KB970430

O42 - Logiciel: Security Update for Windows XP (KB971468) - (.Microsoft Corporation.) [HKLM] -- KB971468

O42 - Logiciel: Security Update for Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM] -- KB971657

O42 - Logiciel: Security Update for Windows XP (KB971961) - (.Microsoft Corporation.) [HKLM] -- KB971961

O42 - Logiciel: Security Update for Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM] -- KB972270

O42 - Logiciel: Security Update for Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM] -- KB973507

O42 - Logiciel: Security Update for Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM] -- KB973869

O42 - Logiciel: Security Update for Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM] -- KB973904

O42 - Logiciel: Security Update for Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM] -- KB974112

O42 - Logiciel: Security Update for Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM] -- KB974318

O42 - Logiciel: Security Update for Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM] -- KB974392

O42 - Logiciel: Security Update for Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM] -- KB974571

O42 - Logiciel: Security Update for Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM] -- KB975025

O42 - Logiciel: Security Update for Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM] -- KB975467

O42 - Logiciel: Security Update for Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM] -- KB975560

O42 - Logiciel: Security Update for Windows XP (KB975561) - (.Microsoft Corporation.) [HKLM] -- KB975561

O42 - Logiciel: Security Update for Windows XP (KB975562) - (.Microsoft Corporation.) [HKLM] -- KB975562

O42 - Logiciel: Security Update for Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM] -- KB975713

O42 - Logiciel: Security Update for Windows XP (KB977816) - (.Microsoft Corporation.) [HKLM] -- KB977816

O42 - Logiciel: Security Update for Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM] -- KB977914

O42 - Logiciel: Security Update for Windows XP (KB978037) - (.Microsoft Corporation.) [HKLM] -- KB978037

O42 - Logiciel: Security Update for Windows XP (KB978262) - (.Microsoft Corporation.) [HKLM] -- KB978262

O42 - Logiciel: Security Update for Windows XP (KB978338) - (.Microsoft Corporation.) [HKLM] -- KB978338

O42 - Logiciel: Security Update for Windows XP (KB978542) - (.Microsoft Corporation.) [HKLM] -- KB978542

O42 - Logiciel: Security Update for Windows XP (KB978601) - (.Microsoft Corporation.) [HKLM] -- KB978601

O42 - Logiciel: Security Update for Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM] -- KB978706

O42 - Logiciel: Security Update for Windows XP (KB979309) - (.Microsoft Corporation.) [HKLM] -- KB979309

O42 - Logiciel: Security Update for Windows XP (KB979482) - (.Microsoft Corporation.) [HKLM] -- KB979482

O42 - Logiciel: Security Update for Windows XP (KB979559) - (.Microsoft Corporation.) [HKLM] -- KB979559

O42 - Logiciel: Security Update for Windows XP (KB979683) - (.Microsoft Corporation.) [HKLM] -- KB979683

O42 - Logiciel: Security Update for Windows XP (KB979687) - (.Microsoft Corporation.) [HKLM] -- KB979687

O42 - Logiciel: Security Update for Windows XP (KB980195) - (.Microsoft Corporation.) [HKLM] -- KB980195

O42 - Logiciel: Security Update for Windows XP (KB980218) - (.Microsoft Corporation.) [HKLM] -- KB980218

O42 - Logiciel: Security Update for Windows XP (KB980232) - (.Microsoft Corporation.) [HKLM] -- KB980232

O42 - Logiciel: Security Update for Windows XP (KB980436) - (.Microsoft Corporation.) [HKLM] -- KB980436

O42 - Logiciel: Security Update for Windows XP (KB981322) - (.Microsoft Corporation.) [HKLM] -- KB981322

O42 - Logiciel: Security Update for Windows XP (KB981349) - (.Microsoft Corporation.) [HKLM] -- KB981349

O42 - Logiciel: Security Update for Windows XP (KB981852) - (.Microsoft Corporation.) [HKLM] -- KB981852

O42 - Logiciel: Security Update for Windows XP (KB981957) - (.Microsoft Corporation.) [HKLM] -- KB981957

O42 - Logiciel: Security Update for Windows XP (KB981997) - (.Microsoft Corporation.) [HKLM] -- KB981997

O42 - Logiciel: Security Update for Windows XP (KB982132) - (.Microsoft Corporation.) [HKLM] -- KB982132

O42 - Logiciel: Security Update for Windows XP (KB982214) - (.Microsoft Corporation.) [HKLM] -- KB982214

O42 - Logiciel: Security Update for Windows XP (KB982665) - (.Microsoft Corporation.) [HKLM] -- KB982665

O42 - Logiciel: Security Update for Windows XP (KB982802) - (.Microsoft Corporation.) [HKLM] -- KB982802

O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A}

O42 - Logiciel: Skype™ 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_00661025

O42 - Logiciel: Synaptics Pointing Device Driver - (.Pas de propriétaire.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: TeXnicCenter Version 1 Beta 7.01 (Greengrass) - (.TeXnicCenter.org.) [HKLM] -- TeXnicCenter_is1

O42 - Logiciel: Texas Instruments PCIxx21/x515 drivers. - (.Texas Instruments Inc..) [HKLM] -- InstallShield_{E7A744FD-E1B8-4FF6-ADC1-EA4C32181457}

O42 - Logiciel: TightVNC 2.0.3 - (.GlavSoft LLC..) [HKLM] -- TightVNC

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2536413) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{95DF5260-331D-4FFD-A2D5-C64164751945}

O42 - Logiciel: Update for Windows Internet Explorer 7 (KB980182) - (.Microsoft Corporation.) [HKLM] -- KB980182-IE7

O42 - Logiciel: Update for Windows Internet Explorer 8 (KB976662) - (.Microsoft Corporation.) [HKLM] -- KB976662-IE8

O42 - Logiciel: Update for Windows Internet Explorer 8 (KB980182) - (.Microsoft Corporation.) [HKLM] -- KB980182-IE8

O42 - Logiciel: Update for Windows Internet Explorer 8 (KB982632) - (.Microsoft Corporation.) [HKLM] -- KB982632-IE8

O42 - Logiciel: Update for Windows XP (KB2141007) - (.Microsoft Corporation.) [HKLM] -- KB2141007

O42 - Logiciel: Update for Windows XP (KB2345886) - (.Microsoft Corporation.) [HKLM] -- KB2345886

O42 - Logiciel: Update for Windows XP (KB2467659) - (.Microsoft Corporation.) [HKLM] -- KB2467659

O42 - Logiciel: Update for Windows XP (KB2541763) - (.Microsoft Corporation.) [HKLM] -- KB2541763

O42 - Logiciel: Update for Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM] -- KB955759

O42 - Logiciel: Update for Windows XP (KB961503) - (.Microsoft Corporation.) [HKLM] -- KB961503

O42 - Logiciel: Update for Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM] -- KB968389

O42 - Logiciel: Update for Windows XP (KB971029) - (.Microsoft Corporation.) [HKLM] -- KB971029

O42 - Logiciel: Update for Windows XP (KB971737) - (.Microsoft Corporation.) [HKLM] -- KB971737

O42 - Logiciel: Update for Windows XP (KB973687) - (.Microsoft Corporation.) [HKLM] -- KB973687

O42 - Logiciel: Update for Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM] -- KB973815

O42 - Logiciel: WIDCOMM Bluetooth Software - (. .) [HKLM] -- {90535871-81B9-4D99-8A13-A7EE97F2D7FE}

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Rights Management Client Backwards Compatibility SP2 - (.Microsoft.) [HKLM] -- Windows Rights Management Client Backwards

O42 - Logiciel: Windows Rights Management Client Backwards Compatibility SP2 - (.Microsoft.) [HKLM] -- {EC905264-BCFE-423B-9C42-C3A106266790}

O42 - Logiciel: Windows Rights Management Client with Service Pack 2 - (.Microsoft.) [HKLM] -- Windows Rights Management Client

O42 - Logiciel: Windows Rights Management Client with Service Pack 2 - (.Microsoft.) [HKLM] -- {BDCF27CA-BFC4-4F49-8D24-A925C9505AB8}

O42 - Logiciel: XnView 1.97.6 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1

O42 - Logiciel: acer Wireless LAN - (.Pas de propriétaire.) [HKLM] -- {4820DD99-52D1-42BB-927E-B6B6DF231AF5}

O42 - Logiciel: foobar2000 v1.1.1 - (.Peter Pawlowski.) [HKLM] -- foobar2000

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {FAE36873-1941-4076-A9A5-48812B5EA0B7}

O42 - Logiciel: mCore - (.Intel Corporation.) [HKLM] -- {6DE14BE4-6F04-4935-8ABD-A0A19FE2E55A}

O42 - Logiciel: mDrWiFi - (.Intel Corporation.) [HKLM] -- {F6090A17-0967-4A8A-B3C3-422A1B514D49}

O42 - Logiciel: mDriver - (.Intel.) [HKLM] -- {28DA872A-0848-48CF-B749-19A198157A2A}

O42 - Logiciel: mEoU.msi - (.Intel Corporation.) [HKLM] -- {B502B428-3386-40A9-98DB-079AAB72E64F}

O42 - Logiciel: mHelp - (.Intel.) [HKLM] -- {8C6BB412-D3A8-4AAE-A01B-35B681789D68}

O42 - Logiciel: mIWA - (.Intel Corporation.) [HKLM] -- {3E9D596A-61D4-4239-BD19-2DB984D2A16F}

O42 - Logiciel: mIWCA - (.Intel Corporation.) [HKLM] -- {6FFFE74E-3FBD-4E2E-97F9-5E9A2A077626}

O42 - Logiciel: mLogView - (.Intel Corporation.) [HKLM] -- {0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}

O42 - Logiciel: mMHouse - (.Intel Corporation.) [HKLM] -- {F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}

O42 - Logiciel: mPfMgr - (.Intel Corporation.) [HKLM] -- {8B928BA1-EDEC-4227-A2DA-DD83026C36F5}

O42 - Logiciel: mPfWiz - (.Intel Corporation.) [HKLM] -- {90B0D222-8C21-4B35-9262-53B042F18AF9}

O42 - Logiciel: mProSafe - (.Intel.) [HKLM] -- {23FB368F-1399-4EAC-817C-4B83ECBE3D83}

O42 - Logiciel: mWlsSafe - (.Intel.) [HKLM] -- {FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}

O42 - Logiciel: mXML - (.Intel Corporation.) [HKLM] -- {9CC89556-3578-48DD-8408-04E66EBEF401}

O42 - Logiciel: mZConfig - (.Intel Corporation.) [HKLM] -- {94658027-9F16-4509-BBD7-A59FE57C3023}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\Adobe]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Avira]

[HKCU\Software\CambridgeSoft]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\GPL Ghostscript]

[HKCU\Software\Google]

[HKCU\Software\ISI ResearchSoft]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MestRe]

[HKCU\Software\MiKTeX.org]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\ORL]

[HKCU\Software\OpenOffice.org]

[HKCU\Software\OriginLab]

[HKCU\Software\Policies]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Synaptics]

[HKCU\Software\Sysinternals]

[HKCU\Software\TUG]

[HKCU\Software\TightVNC]

[HKCU\Software\ToolsCenter]

[HKCU\Software\Widcomm]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\foobar2000]

[HKCU\Software\i-FunBox.com]

[HKLM\Software\ATI Technologies Inc.]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Avira]

[HKLM\Software\Broadcom]

[HKLM\Software\BrowserChoice]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CXT]

[HKLM\Software\CambridgeSoft]

[HKLM\Software\Chemical Abstract Services]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Conexant]

[HKLM\Software\GEAR Software]

[HKLM\Software\GPL Ghostscript]

[HKLM\Software\Gemplus]

[HKLM\Software\Ghostgum]

[HKLM\Software\Google]

[HKLM\Software\INTEL]

[HKLM\Software\InstallShield]

[HKLM\Software\InstalledOptions]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\MDC]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\MiKTeX.org]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\ODBC]

[HKLM\Software\OpenOffice.org]

[HKLM\Software\OriginLab Corporation]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secure]

[HKLM\Software\Skype]

[HKLM\Software\Sun Microsystems]

[HKLM\Software\Synaptics]

[HKLM\Software\ToolsCenter]

[HKLM\Software\TrendMicro]

[HKLM\Software\UIU]

[HKLM\Software\Widcomm]

[HKLM\Software\WinRAR]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Windows]

[HKLM\Software\Wise Solutions]

[HKLM\Software\X-AVCSD]

[HKLM\Software\XnView]

[HKLM\Software\acer]

[HKLM\Software\mozilla.org]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 18/06/2010 - 14:25:06 - [1180464] ----D- C:\Program Files\Accelrys

O43 - CFD: 27/07/2008 - 04:21:06 - [186161] ----D- C:\Program Files\Accords

O43 - CFD: 01/06/2010 - 21:23:54 - [1010743] ----D- C:\Program Files\acer

O43 - CFD: 30/03/2005 - 23:57:08 - [376040] ----D- C:\Program Files\Acer Inc

O43 - CFD: 11/06/2010 - 14:24:44 - [2530211528] ----D- C:\Program Files\Adobe

O43 - CFD: 24/07/2008 - 20:22:40 - [224016] ----D- C:\Program Files\ALO Power Audio Converter

O43 - CFD: 04/12/2010 - 18:28:50 - [2306366] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 13/12/2008 - 16:46:22 - [158116417] ----D- C:\Program Files\Arcade

O43 - CFD: 01/06/2010 - 22:13:58 - [16571708] ----D- C:\Program Files\ATI Technologies

O43 - CFD: 16/06/2008 - 22:21:50 - [694727678] ----D- C:\Program Files\Autodesk

O43 - CFD: 02/06/2010 - 11:08:50 - [360448] ----D- C:\Program Files\AUTORUN

O43 - CFD: 01/06/2009 - 17:06:52 - [178882397] ----D- C:\Program Files\Avira

O43 - CFD: 20/05/2008 - 23:31:12 - [2655233] ----D- C:\Program Files\AviSynth 2.5

O43 - CFD: 04/12/2010 - 18:27:40 - [623412] ----D- C:\Program Files\Bonjour

O43 - CFD: 01/06/2010 - 21:16:08 - [608109] ----D- C:\Program Files\Broadcom

O43 - CFD: 12/06/2008 - 19:59:00 - [2571] ----D- C:\Program Files\BulletProof FTP Server v2.3

O43 - CFD: 02/06/2010 - 13:06:14 - [79089849] ----D- C:\Program Files\CambridgeSoft

O43 - CFD: 10/06/2009 - 20:31:08 - [367166097] ----D- C:\Program Files\Canon

O43 - CFD: 17/05/2008 - 17:56:02 - [1326810] ----D- C:\Program Files\CCleaner

O43 - CFD: 02/06/2010 - 11:08:50 - [626000] ----D- C:\Program Files\CCTL

O43 - CFD: 04/12/2010 - 18:27:00 - [760245820] ----D- C:\Program Files\Common Files

O43 - CFD: 30/03/2005 - 23:35:36 - [0] ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 01/06/2010 - 21:47:36 - [536576] ----D- C:\Program Files\CONEXANT

O43 - CFD: 03/12/2009 - 00:14:42 - [1232740] ----D- C:\Program Files\Convar

O43 - CFD: 31/03/2005 - 00:01:06 - [106063286] ----D- C:\Program Files\CyberLink

O43 - CFD: 22/05/2008 - 20:38:02 - [5514190] ----D- C:\Program Files\DAEMON Tools Lite

O43 - CFD: 02/06/2010 - 00:00:06 - [0] ----D- C:\Program Files\DAEMON Tools Pro

O43 - CFD: 11/12/2008 - 22:23:24 - [1316232] ----D- C:\Program Files\DIFX

O43 - CFD: 11/01/2009 - 18:10:22 - [782996] ----D- C:\Program Files\EGoGameS

O43 - CFD: 01/06/2010 - 21:16:40 - [2071841] ----D- C:\Program Files\Elantech

O43 - CFD: 02/06/2010 - 11:30:26 - [66806902] ----D- C:\Program Files\ENDNOTE

O43 - CFD: 12/08/2010 - 15:06:10 - [61455413] ----D- C:\Program Files\EndNote 9

O43 - CFD: 16/02/2009 - 23:55:48 - [1094876] ----D- C:\Program Files\eXchange POP3 6.0

O43 - CFD: 02/06/2010 - 11:08:46 - [14577066] ----D- C:\Program Files\EXTRAS

O43 - CFD: 28/05/2009 - 23:16:44 - [1513065379] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 13/06/2008 - 08:13:46 - [11921038] ----D- C:\Program Files\FileZilla FTP Client

O43 - CFD: 05/12/2010 - 23:13:48 - [7917593] ----D- C:\Program Files\foobar2000

O43 - CFD: 30/11/2008 - 14:24:56 - [5581957] ----D- C:\Program Files\Free iPod Video Converter

O43 - CFD: 02/06/2010 - 13:26:34 - [3566016] ----D- C:\Program Files\Ghostgum

O43 - CFD: 02/06/2010 - 14:25:18 - [82663544] ----D- C:\Program Files\ghostscript-8.71

O43 - CFD: 11/06/2010 - 15:20:14 - [328432409] ----D- C:\Program Files\Google

O43 - CFD: 02/06/2010 - 14:39:12 - [31907692] ----D- C:\Program Files\gs

O43 - CFD: 21/11/2008 - 00:02:22 - [20571346] ----D- C:\Program Files\Guitar Pro 5

O43 - CFD: 29/06/2009 - 20:23:08 - [4640312] ----D- C:\Program Files\HHD Software

O43 - CFD: 14/04/2009 - 20:37:38 - [126003219] ----D- C:\Program Files\HomePlayer

O43 - CFD: 09/01/2009 - 08:42:40 - [7002465] ----D- C:\Program Files\iGnuteel

O43 - CFD: 02/06/2010 - 10:10:54 - [62418143] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 30/03/2005 - 23:45:34 - [20388681] ----D- C:\Program Files\Intel

O43 - CFD: 16/06/2011 - 01:57:22 - [6093456] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 09/09/2009 - 22:14:30 - [1856115] ----D- C:\Program Files\iPod

O43 - CFD: 04/12/2010 - 18:40:58 - [146530583] ----D- C:\Program Files\iTunes

O43 - CFD: 04/04/2009 - 10:04:16 - [410496923] ----D- C:\Program Files\Java

O43 - CFD: 04/12/2010 - 19:04:40 - [55363353] ----D- C:\Program Files\JDownloader

O43 - CFD: 01/06/2010 - 22:33:42 - [16254752] ----D- C:\Program Files\JRE

O43 - CFD: 15/05/2008 - 22:39:44 - [1141069] ----D- C:\Program Files\Launch Manager

O43 - CFD: 27/09/2008 - 14:33:36 - [16501848] ----D- C:\Program Files\Logitech

O43 - CFD: 13/07/2011 - 00:31:16 - [7981388] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 17/05/2008 - 12:57:40 - [33830499] ----D- C:\Program Files\Memeo

O43 - CFD: 01/06/2010 - 20:18:42 - [2140717] ----D- C:\Program Files\Messenger

O43 - CFD: 27/08/2008 - 23:09:04 - [12715564] ----D- C:\Program Files\Messenger Plus! Live

O43 - CFD: 20/12/2008 - 14:39:26 - [706627] ----D- C:\Program Files\Microsoft

O43 - CFD: 30/03/2005 - 23:38:22 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 27/05/2008 - 21:01:38 - [1067850181] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 20/12/2008 - 14:39:16 - [1562204] ----D- C:\Program Files\Microsoft Office Outlook Connector

O43 - CFD: 17/06/2011 - 12:47:30 - [39437763] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 20/12/2008 - 14:36:44 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 27/05/2008 - 21:01:14 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 27/05/2008 - 20:57:16 - [2578288] ----D- C:\Program Files\Microsoft Visual Studio 8

O43 - CFD: 06/06/2010 - 17:01:36 - [3726168] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 27/05/2008 - 20:59:54 - [8152064] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 24/07/2008 - 20:12:32 - [307200] ----D- C:\Program Files\MIKSOFT

O43 - CFD: 02/06/2010 - 12:48:32 - [315266947] ----D- C:\Program Files\MiKTeX 2.8

O43 - CFD: 13/08/2010 - 23:46:24 - [11072357] ----D- C:\Program Files\Movie Maker

O43 - CFD: 16/06/2004 - 01:30:36 - [41093360] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 25/06/2008 - 07:19:30 - [307423] ----D- C:\Program Files\mp3DirectCut

O43 - CFD: 24/08/2009 - 23:09:08 - [26521] ----D- C:\Program Files\MSBuild

O43 - CFD: 02/06/2010 - 11:08:50 - [27348712] ----D- C:\Program Files\MSI

O43 - CFD: 01/06/2010 - 20:52:10 - [26550732] ----D- C:\Program Files\MSN

O43 - CFD: 30/03/2005 - 23:34:42 - [8742663] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 16/05/2008 - 21:38:40 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 16/05/2008 - 21:08:26 - [2940967212] ----D- C:\Program Files\NetDrive

O43 - CFD: 01/06/2010 - 20:24:34 - [3258723] ----D- C:\Program Files\NetMeeting

O43 - CFD: 31/03/2005 - 00:06:26 - [60246470] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 03/07/2008 - 07:58:00 - [1284380] ----D- C:\Program Files\No-IP

O43 - CFD: 11/12/2008 - 22:23:44 - [58240787] ----D- C:\Program Files\Nokia

O43 - CFD: 02/06/2010 - 11:29:36 - [0] ----D- C:\Program Files\Nouveau dossier

O43 - CFD: 10/01/2009 - 12:06:58 - [17732485] ----D- C:\Program Files\NutsAboutNets

O43 - CFD: 30/03/2005 - 23:34:54 - [4525] ----D- C:\Program Files\Online Services

O43 - CFD: 01/06/2010 - 22:33:36 - [536323283] ----D- C:\Program Files\OpenOffice.org 3

O43 - CFD: 02/06/2010 - 10:10:22 - [327339511] ----D- C:\Program Files\OriginLab

O43 - CFD: 01/01/2011 - 15:41:40 - [4322949] ----D- C:\Program Files\Outlook Express

O43 - CFD: 13/08/2008 - 18:57:18 - [7101074] ----D- C:\Program Files\PanoramaStudio

O43 - CFD: 11/12/2008 - 22:23:10 - [11169565] ----D- C:\Program Files\PC Connectivity Solution

O43 - CFD: 23/07/2009 - 21:58:08 - [21529044] ----D- C:\Program Files\PDFCreator

O43 - CFD: 28/07/2009 - 22:40:00 - [4074023] ----D- C:\Program Files\Photomatix

O43 - CFD: 28/07/2009 - 22:50:58 - [8658827] ----D- C:\Program Files\PhotomatixPro3

O43 - CFD: 18/08/2008 - 17:10:48 - [36249376] ----D- C:\Program Files\Picasa2

O43 - CFD: 10/06/2010 - 17:45:12 - [17113807] ----D- C:\Program Files\Pixia 4.3a FR

O43 - CFD: 22/05/2008 - 20:40:50 - [2349211] ----D- C:\Program Files\PowerISO

O43 - CFD: 28/05/2009 - 23:18:58 - [14467279] ----D- C:\Program Files\PPMate

O43 - CFD: 04/12/2010 - 18:32:20 - [76337719] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/11/2008 - 13:59:44 - [28429672] ----D- C:\Program Files\Red Kawa

O43 - CFD: 24/08/2009 - 23:08:52 - [36400897] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 17/05/2008 - 18:06:02 - [1146670] ----D- C:\Program Files\RegCleaner

O43 - CFD: 16/05/2008 - 20:27:20 - [11615273] ----D- C:\Program Files\RocketDock

O43 - CFD: 29/08/2009 - 09:44:28 - [71647682] ----D- C:\Program Files\Safari

O43 - CFD: 30/03/2005 - 23:36:34 - [933] ----D- C:\Program Files\Services en ligne

O43 - CFD: 27/05/2009 - 20:39:14 - [27801384] ----D- C:\Program Files\Simplify Media

O43 - CFD: 17/05/2009 - 19:09:10 - [349393] ----D- C:\Program Files\Skyhook Wireless

O43 - CFD: 11/06/2010 - 13:59:34 - [38378187] R---D- C:\Program Files\Skype

O43 - CFD: 04/09/2009 - 13:04:16 - [24694112] ----D- C:\Program Files\Sun

O43 - CFD: 30/03/2005 - 23:54:54 - [26685929] ----D- C:\Program Files\Synaptics

O43 - CFD: 02/06/2010 - 10:36:50 - [14447903] ----D- C:\Program Files\TeXnicCenter

O43 - CFD: 16/06/2004 - 00:13:36 - [1462434] ----D- C:\Program Files\TightVNC

O43 - CFD: 13/07/2011 - 04:58:50 - [786155] ----D- C:\Program Files\Trend Micro

O43 - CFD: 07/06/2009 - 00:11:04 - [12832995] ----D- C:\Program Files\TVUPlayer

O43 - CFD: 30/03/2005 - 23:44:12 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 19/05/2008 - 20:32:26 - [33338768] ----D- C:\Program Files\VideoLAN

O43 - CFD: 17/05/2008 - 12:54:24 - [326648218] ----D- C:\Program Files\Western Digital

O43 - CFD: 16/05/2008 - 07:40:14 - [858084] ----D- C:\Program Files\Western Digital Technologies

O43 - CFD: 01/06/2010 - 21:09:00 - [3587127] ----D- C:\Program Files\WIDCOMM

O43 - CFD: 17/05/2009 - 13:10:16 - [138650897] ----D- C:\Program Files\Windows Live

O43 - CFD: 20/12/2008 - 14:34:10 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 01/06/2010 - 20:25:44 - [3595692] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 01/06/2010 - 20:25:36 - [8246039] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 01/06/2010 - 20:16:20 - [4701439] ----D- C:\Program Files\Windows NT

O43 - CFD: 30/03/2005 - 23:36:40 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 15/05/2008 - 22:37:12 - [176128] ----D- C:\Program Files\WinPCap

O43 - CFD: 01/06/2010 - 23:03:32 - [4823177] ----D- C:\Program Files\WinRAR

O43 - CFD: 06/10/2008 - 20:30:40 - [16773066] ----D- C:\Program Files\WinZip

O43 - CFD: 28/06/2008 - 01:52:34 - [102430] ----D- C:\Program Files\WMV9_VCM

O43 - CFD: 30/03/2005 - 23:38:22 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 11/06/2010 - 14:14:36 - [37484016] ----D- C:\Program Files\XnView

O43 - CFD: 20/08/2008 - 19:35:22 - [27668963] ----D- C:\Program Files\Yahoo!

O43 - CFD: 14/07/2011 - 01:59:52 - [3929439] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 17/10/2010 - 20:09:32 - [324413147] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 11/06/2010 - 14:19:40 - [32159844] ----D- C:\Program Files\Common Files\Adobe AIR

O43 - CFD: 13/07/2011 - 20:46:36 - [13795202] ----D- C:\Program Files\Common Files\Akamai

O43 - CFD: 04/12/2010 - 18:37:48 - [94762864] ----D- C:\Program Files\Common Files\Apple

O43 - CFD: 02/06/2010 - 00:07:30 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 01/06/2010 - 21:16:28 - [7376978] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 16/06/2011 - 02:07:54 - [215561645] ----D- C:\Program Files\Common Files\Microsoft Shared

O43 - CFD: 01/06/2010 - 20:24:12 - [284160] ----D- C:\Program Files\Common Files\MSSoap

O43 - CFD: 01/06/2010 - 21:58:32 - [0] ----D- C:\Program Files\Common Files\ODBC

O43 - CFD: 12/06/2010 - 10:33:22 - [611970] ----D- C:\Program Files\Common Files\Risxtd

O43 - CFD: 01/06/2010 - 20:24:32 - [8106] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 11/06/2010 - 13:59:16 - [2135336] ----D- C:\Program Files\Common Files\Skype

O43 - CFD: 01/06/2010 - 21:58:26 - [3787229] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 06/06/2010 - 16:58:18 - [41439659] ----D- C:\Program Files\Common Files\System

O43 - CFD: 02/06/2010 - 11:30:52 - [23816704] ----D- C:\Program Files\Common Files\Wise Installation Wizard

O43 - CFD: 07/09/2010 - 14:38:06 - [5372166] ----D- C:\Documents and Settings\Saskia\Application Data\Adobe

O43 - CFD: 05/12/2010 - 22:52:18 - [721083] ----D- C:\Documents and Settings\Saskia\Application Data\Apple Computer

O43 - CFD: 01/10/2010 - 11:16:32 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\Avira

O43 - CFD: 01/06/2010 - 23:52:02 - [1277] ----D- C:\Documents and Settings\Saskia\Application Data\DAEMON Tools Pro

O43 - CFD: 12/06/2010 - 11:30:18 - [233896] ----D- C:\Documents and Settings\Saskia\Application Data\EndNote

O43 - CFD: 16/06/2004 - 01:15:16 - [863291] ----D- C:\Documents and Settings\Saskia\Application Data\foobar2000

O43 - CFD: 19/06/2011 - 23:26:24 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\Google

O43 - CFD: 10/06/2010 - 17:23:42 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\Help

O43 - CFD: 01/06/2010 - 20:39:26 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\Identities

O43 - CFD: 02/06/2010 - 10:08:34 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\InstallShield

O43 - CFD: 01/06/2010 - 21:45:40 - [1062] ----D- C:\Documents and Settings\Saskia\Application Data\Intel

O43 - CFD: 01/06/2010 - 23:27:46 - [1283] ----D- C:\Documents and Settings\Saskia\Application Data\Macromedia

O43 - CFD: 16/06/2004 - 00:21:28 - [11468] ----D- C:\Documents and Settings\Saskia\Application Data\Malwarebytes

O43 - CFD: 18/11/2010 - 01:28:38 - [3271525] -S--D- C:\Documents and Settings\Saskia\Application Data\Microsoft

O43 - CFD: 02/06/2010 - 13:57:14 - [9580027] ----D- C:\Documents and Settings\Saskia\Application Data\MiKTeX

O43 - CFD: 01/06/2010 - 22:10:22 - [13860858] ----D- C:\Documents and Settings\Saskia\Application Data\Mozilla

O43 - CFD: 01/06/2010 - 22:47:38 - [8926380] ----D- C:\Documents and Settings\Saskia\Application Data\OpenOffice.org

O43 - CFD: 10/06/2010 - 17:40:08 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\Pixia

O43 - CFD: 13/07/2011 - 20:48:12 - [2314946] ----D- C:\Documents and Settings\Saskia\Application Data\Skype

O43 - CFD: 11/06/2010 - 16:05:14 - [242640] ----D- C:\Documents and Settings\Saskia\Application Data\skypePM

O43 - CFD: 01/06/2010 - 22:31:00 - [25098714] ----D- C:\Documents and Settings\Saskia\Application Data\Sun

O43 - CFD: 16/06/2004 - 00:18:32 - [0] ----D- C:\Documents and Settings\Saskia\Application Data\TightVNC

O43 - CFD: 04/12/2010 - 19:44:54 - [9480] ----D- C:\Documents and Settings\Saskia\Application Data\WindSolutions

O43 - CFD: 01/06/2010 - 23:34:18 - [12] ----D- C:\Documents and Settings\Saskia\Application Data\WinRAR

O43 - CFD: 27/12/2010 - 22:38:24 - [662687] ----D- C:\Documents and Settings\Saskia\Application Data\XnView

O43 - CFD: 17/10/2010 - 20:08:38 - [14372616] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Adobe

O43 - CFD: 04/12/2010 - 18:29:00 - [0] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Apple

O43 - CFD: 04/12/2010 - 18:42:02 - [3237120] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Apple Computer

O43 - CFD: 25/06/2010 - 10:56:56 - [5120] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 19/06/2011 - 23:26:24 - [134746638] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Google

O43 - CFD: 10/06/2010 - 17:23:42 - [0] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Help

O43 - CFD: 30/09/2010 - 11:14:52 - [6116220] -S--D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Microsoft

O43 - CFD: 02/06/2010 - 00:00:28 - [0] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Microsoft Help

O43 - CFD: 02/06/2010 - 13:14:42 - [11878215] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\MiKTeX

O43 - CFD: 01/06/2010 - 22:10:22 - [41673460] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Mozilla

O43 - CFD: 19/06/2011 - 23:25:28 - [0] ----D- C:\Documents and Settings\Saskia\Local Settings\Application Data\Temp

O43 - CFD: 01/06/2010 - 20:29:08 - [15040] R---D- C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Accessories

O43 - CFD: 01/06/2010 - 21:55:12 - [84] R---D- C:\WINDOWS\system32\Config\systemprofile\Start Menu\Programs\Startup

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.10EF1200FEFFFFFF57494E444F577E31] - 13/07/2011 - 19:49:56 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1844742]

O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 13/07/2011 - 19:46:54 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 13/07/2011 - 19:46:46 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/07/2011 - 19:46:13 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 13/07/2011 - 19:46:00 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.10EF1200FEFFFFFF000000002CF21200] - 13/07/2011 - 04:47:57 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32474]

O44 - LFC:[MD5.56BDA6D0894D93648782604AF9A48C45] - 13/07/2011 - 03:58:54 ---A- . (...) -- C:\DelFixSuppr.txt [1967]

O44 - LFC:[MD5.ED64610D1D9CAB7E6A298E613C894509] - 13/07/2011 - 03:58:18 ---A- . (...) -- C:\DelFixSearch.txt [1921]

O44 - LFC:[MD5.89C28B188065BEBA3ADC4F2EE4BD7F96] - 12/07/2011 - 23:31:29 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [2228]

O44 - LFC:[MD5.9769D57A4F47231B7E48836721B5C7B7] - 11/07/2011 - 03:16:01 -SHA- . (...) -- C:\Thumbs.db [5632]

O44 - LFC:[MD5.4172931C25B1276D04EF6592662C1C5D] - 11/07/2011 - 03:15:57 -SHA- . (...) -- C:\WINDOWS\Thumbs.db [7680]

O44 - LFC:[MD5.9674DC5A0696CAC9C1889AB7583F76EB] - 18/06/2011 - 20:55:29 ---A- . (...) -- C:\WINDOWS\System32\PerfStringBackup.INI [506194]

O44 - LFC:[MD5.66105A9E46C0EADD21D513B4E5652E28] - 18/06/2011 - 20:55:29 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat [72566]

O44 - LFC:[MD5.5177A6DF33077EFF91DEE2968D5BA16A] - 18/06/2011 - 20:55:29 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat [444690]

O44 - LFC:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 17/06/2011 - 11:51:13 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [137656]

O44 - LFC:[MD5.196DB70C7C937D4737067A1C3CDABD4B] - 17/06/2011 - 11:48:08 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT [3589016]

O44 - LFC:[MD5.EDB29DE9FD538805F98F375CF961FDE3] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\KB2479943.log [147040]

O44 - LFC:[MD5.5B4513A8E9D30FC08A2DFE9A6E38CEE4] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\comsetup.log [310665]

O44 - LFC:[MD5.964180D6A9640C16F370F77AD61B303D] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\iis6.log [991087]

O44 - LFC:[MD5.B0312C13616C571CC01EB04F3D1842E7] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]

O44 - LFC:[MD5.9A2181BDD780C9936DB39B1180C279CF] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [188099]

O44 - LFC:[MD5.49627FFCDBC1FD8E090FEC13781C0994] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\ocmsn.log [49449]

O44 - LFC:[MD5.FE0283229F3082EAA733CCA9B47DAB88] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\tabletoc.log [45414]

O44 - LFC:[MD5.1536344A2F7D4D65EDFC9D7A6233AA82] - 16/06/2011 - 01:12:19 ---A- . (...) -- C:\WINDOWS\tsoc.log [411409]

O44 - LFC:[MD5.4020D8692472F78E216351CDC03E97FB] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [889521]

O44 - LFC:[MD5.CE83D0AE0A754481E4C0343242964CEF] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [61837]

O44 - LFC:[MD5.D72585AB8B78D6D55CFF5CA735B435F3] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\msgsocm.log [44749]

O44 - LFC:[MD5.722C0F720670B119C2FA636A1E629139] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\msmqinst.log [276116]

O44 - LFC:[MD5.2AC9741E4BC796AE9E7EF29CE1D279EE] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\netfxocm.log [156576]

O44 - LFC:[MD5.60E33B79E3A1CCF00E2EA1FFC2CABB03] - 16/06/2011 - 01:12:18 ---A- . (...) -- C:\WINDOWS\ocgen.log [470102]

O44 - LFC:[MD5.ABB4CAAD906E82B3B39FDDE42792879F] - 16/06/2011 - 01:07:41 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]

O44 - LFC:[MD5.0179F4F5A329F5CA48EEB7447988920B] - 16/06/2011 - 01:07:40 ---A- . (...) -- C:\WINDOWS\KB2481109.log [148659]

O44 - LFC:[MD5.E35DBF8BA0E7FD0DD83176354F482CEE] - 16/06/2011 - 01:07:27 ---A- . (...) -- C:\WINDOWS\KB2485663.log [148751]

O44 - LFC:[MD5.44A3AD116C241DFDF75F18BF431C1911] - 16/06/2011 - 01:05:56 ---A- . (...) -- C:\WINDOWS\KB2476490.log [37889]

O44 - LFC:[MD5.C2D638933ABD42AFAC66086DD2EC4C31] - 16/06/2011 - 01:05:49 ---A- . (...) -- C:\WINDOWS\KB2506223.log [51510]

O44 - LFC:[MD5.6F2EA7AF7649ECEE5AC8F9C151F1575F] - 16/06/2011 - 01:05:36 ---A- . (...) -- C:\WINDOWS\KB2503665.log [50956]

O44 - LFC:[MD5.B40C6FA76AA4AFC025FC384584ECD362] - 16/06/2011 - 01:05:29 ---A- . (...) -- C:\WINDOWS\KB2524375.log [37023]

O44 - LFC:[MD5.533FD1A96FD23380387407C39C3D83D9] - 16/06/2011 - 01:04:10 ---A- . (...) -- C:\WINDOWS\KB2535512.log [50788]

O44 - LFC:[MD5.6752D17B8A027145F0D69810C2CE9366] - 16/06/2011 - 01:03:18 ---A- . (...) -- C:\WINDOWS\KB2412687.log [34828]

O44 - LFC:[MD5.A1E9003ED212B3F5C2A195E8014DD811] - 16/06/2011 - 00:58:43 ---A- . (...) -- C:\WINDOWS\KB2508272.log [36938]

O44 - LFC:[MD5.C8655A8A7CA98AB89B202000C63F7183] - 16/06/2011 - 00:58:35 ---A- . (...) -- C:\WINDOWS\KB2536276.log [50872]

O44 - LFC:[MD5.E3DC64DB1DD46ED4A01D8397B45E4960] - 16/06/2011 - 00:57:52 ---A- . (...) -- C:\WINDOWS\KB2507618.log [51126]

O44 - LFC:[MD5.C30FBF8CF4F1E62283CD81B207CD268D] - 16/06/2011 - 00:57:50 ---A- . (...) -- C:\WINDOWS\updspapi.log [86058]

O44 - LFC:[MD5.DE32E1AF20FF35F18E2F1AF07DA52BE7] - 16/06/2011 - 00:57:42 ---A- . (...) -- C:\WINDOWS\KB2530548-IE8.log [45358]

O44 - LFC:[MD5.206FC9206A5FBD6913F3A21457E80B82] - 16/06/2011 - 00:56:39 ---A- . (...) -- C:\WINDOWS\KB2508429.log [37484]

O44 - LFC:[MD5.8C7D8E7A2C14DB818582C007C9273D63] - 16/06/2011 - 00:56:26 ---A- . (...) -- C:\WINDOWS\KB971029.log [36865]

O44 - LFC:[MD5.C7885A05B4E604C8B12F1112AC38D023] - 16/06/2011 - 00:56:05 ---A- . (...) -- C:\WINDOWS\KB2506212.log [36519]

O44 - LFC:[MD5.B8D7AC4DAE614CFB6BBA8AC3080CC5CF] - 16/06/2011 - 00:51:09 ---A- . (...) -- C:\WINDOWS\KB2544893.log [48404]

O44 - LFC:[MD5.14DD40869D1A95EDD1C26B53AC049DF1] - 16/06/2011 - 00:51:01 ---A- . (...) -- C:\WINDOWS\KB2509553.log [49177]

O44 - LFC:[MD5.340F0B78397C89477E1043D8F20B4E8B] - 16/06/2011 - 00:50:52 ---A- . (...) -- C:\WINDOWS\KB2510531-IE8.log [34404]

O44 - LFC:[MD5.CD129EB387DE0459ECD4541AC4D12554] - 16/06/2011 - 00:50:44 ---A- . (...) -- C:\WINDOWS\KB2541763.log [85634]

O44 - LFC:[MD5.ED6AAC568B33934B6FB8037F245D2921] - 16/06/2011 - 00:50:36 ---A- . (...) -- C:\WINDOWS\KB2544521-IE8.log [34138]

O44 - LFC:[MD5.D142D1AC4D8A18115056E4A68899D7FC] - 16/06/2011 - 00:01:56 ---A- . (...) -- C:\WINDOWS\KB2478971.log [46454]

O44 - LFC:[MD5.59180168C3D1ED59A76CC2BA776EAF52] - 16/06/2011 - 00:01:46 ---A- . (...) -- C:\WINDOWS\KB2485376.log [45769]

O44 - LFC:[MD5.5E9474AF7E5E71E9AC5F31A803DDCE21] - 16/06/2011 - 00:01:38 ---A- . (...) -- C:\WINDOWS\KB2479628.log [45204]

O44 - LFC:[MD5.7A78F5C74DEE74B2F84AA6E24B35A0BA] - 16/06/2011 - 00:01:30 ---A- . (...) -- C:\WINDOWS\KB2483185.log [45283]

O44 - LFC:[MD5.766FCDC53D82285648E18DD5404CA8C0] - 15/06/2011 - 23:43:58 ---A- . (...) -- C:\WINDOWS\KB2482017-IE8.log [35420]

O44 - LFC:[MD5.71251062F604D380F3F6CAF73BBE14E4] - 15/06/2011 - 23:42:02 ---A- . (...) -- C:\WINDOWS\KB2476687.log [27635]

O44 - LFC:[MD5.B61D785B61B2D64CA57A55B9C4774DC6] - 15/06/2011 - 23:41:42 ---A- . (...) -- C:\WINDOWS\KB2419632.log [40570]

O44 - LFC:[MD5.84921B2AAFA1A1509CC6784680ECF9A7] - 15/06/2011 - 23:37:47 ---A- . (...) -- C:\WINDOWS\KB2478960.log [33593]

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.A6F5148A75D6308A51C51FFBE7EEE703] - 13/07/2011 - 04:02:05 ---A- - C:\WINDOWS\Prefetch\AVNOTIFY.EXE-05ED5FD8.pf

O45 - LFCP:[MD5.AD28876FD748EC43E90AA30BDA6615D0] - 13/07/2011 - 04:03:23 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2577D203.pf

O45 - LFCP:[MD5.C65DCCED4ADDE914AED98A7C98CD3E15] - 13/07/2011 - 19:48:13 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf

O45 - LFCP:[MD5.7677C9CC8ADD59F180AC6E47E9DB09C8] - 13/07/2011 - 19:48:13 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.5AB5CFE89769E90A1A0021635ED62B7C] - 13/07/2011 - 19:48:19 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.FE218424EEB4C60446EA3AE1A88B0CC6] - 13/07/2011 - 19:48:23 ---A- - C:\WINDOWS\Prefetch\IPODSERVICE.EXE-3192DE38.pf

O45 - LFCP:[MD5.CE9E2C72E5C3A14D431757177893F70C] - 13/07/2011 - 19:48:28 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf

O45 - LFCP:[MD5.CF17C7AD55971E5BC4839E211FE2B4D6] - 13/07/2011 - 19:48:48 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.95863916D3D61D458888468F3FED18EB] - 13/07/2011 - 19:50:23 ---A- - C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf

O45 - LFCP:[MD5.E023F533BCFC50F6B048698E8E7C4DB2] - 13/07/2011 - 19:50:35 ---A- - C:\WINDOWS\Prefetch\AVSCAN.EXE-07FC469C.pf

O45 - LFCP:[MD5.920A2EA88E8DB45FC4E82D24D8696DE1] - 13/07/2011 - 19:50:57 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-5353C76C.pf

O45 - LFCP:[MD5.5D32D051DC6D98F38408A2B9B6BD12C2] - 13/07/2011 - 19:50:57 ---A- - C:\WINDOWS\Prefetch\MSDTC.EXE-0E6E4AF7.pf

O45 - LFCP:[MD5.8518E9743F0DE66F4E717F763B545D77] - 13/07/2011 - 20:58:05 ---A- - C:\WINDOWS\Prefetch\GEPLUGIN.EXE-039CFE10.pf

O45 - LFCP:[MD5.54A43289E23CAD9DF4A910C320D35CB9] - 13/07/2011 - 21:09:05 ---A- - C:\WINDOWS\Prefetch\ACRORD32.EXE-3A1F13AE.pf

O45 - LFCP:[MD5.70DDCB84185686741363516A48805B3A] - 13/07/2011 - 21:09:19 ---A- - C:\WINDOWS\Prefetch\ADOBEARM.EXE-2D1B11BF.pf

O45 - LFCP:[MD5.3F445BCADA3E3A7F96ACC519E29D693E] - 13/07/2011 - 21:23:27 ---A- - C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf

O45 - LFCP:[MD5.35BA0278A73D127DE824433BFB166090] - 13/07/2011 - 21:37:13 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.71D2EDD379AA5AA85CC11178BD83C638] - 13/07/2011 - 21:37:24 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf

O45 - LFCP:[MD5.C91FDD41594B059C6BB0C654E87326F8] - 13/07/2011 - 21:37:28 ---A- - C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf

O45 - LFCP:[MD5.4F38AB0286194CE00906F240B478DBD2] - 13/07/2011 - 21:46:10 ---A- - C:\WINDOWS\Prefetch\GUARDGUI.EXE-00ECD849.pf

O45 - LFCP:[MD5.B0E3B3279DFBF12F5827F43252891832] - 13/07/2011 - 22:30:24 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-41F93445.pf

O45 - LFCP:[MD5.0CDB50A944B42E8DB3FB9DE436BFFF10] - 13/07/2011 - 22:30:32 ---A- - C:\WINDOWS\Prefetch\VSSVC.EXE-0F74375A.pf

O45 - LFCP:[MD5.38D211FCEC32ECB3CCF929F93CB9115F] - 13/07/2011 - 22:32:59 ---A- - C:\WINDOWS\Prefetch\RSMSINK.EXE-032F2BAB.pf

O45 - LFCP:[MD5.6BFE50CE22EB5AF528297515FA29B48B] - 14/07/2011 - 00:27:58 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf

O45 - LFCP:[MD5.ACA6B21DDCFCC6DC5A1BBC39A12E39D4] - 14/07/2011 - 00:44:02 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf

O45 - LFCP:[MD5.0358C0D9BBA691DC9426164FD99FD5C3] - 14/07/2011 - 00:55:44 ---A- - C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf

O45 - LFCP:[MD5.B00FF1B5073FC027FAA47725248A73CD] - 14/07/2011 - 00:56:02 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.32D01AD5F2C747872B574C4ACAF53426] - 14/07/2011 - 00:56:16 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-0A3988F8.pf

O45 - LFCP:[MD5.6CC937FF073935DF46F6A484C22D488C] - 14/07/2011 - 00:56:17 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-28734809.pf

O45 - LFCP:[MD5.21CE2803BDF74A03380BE2DC341020F7] - 14/07/2011 - 00:57:09 ---A- - C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf

O45 - LFCP:[MD5.C27452F9D89E0D5F8CEDA30E417821FA] - 14/07/2011 - 00:57:37 ---A- - C:\WINDOWS\Prefetch\ZHPFIX.EXE-3A07CBCA.pf

O45 - LFCP:[MD5.66F5372A417DE703DD8BE20CF116C872] - 14/07/2011 - 00:57:54 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf

O45 - LFCP:[MD5.BBAAAC6088D89C3F62D0F66DFDBABE08] - 14/07/2011 - 00:57:56 ---A- - C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-24AE4A36.pf

O45 - LFCP:[MD5.FA12F7943A3DF04CE21B6127A816E637] - 14/07/2011 - 00:58:14 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf

O45 - LFCP:[MD5.02F543408A6F7BA9981C63CAB23108A3] - 14/07/2011 - 00:58:29 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf

O45 - LFCP:[MD5.DF89C603F38C2F706B4823A79729D5F9] - 14/07/2011 - 00:59:02 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:[MD5.967D4BCC6F1ECEDDC990646BE1ADD3AC] - 14/07/2011 - 00:59:51 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:[MD5.4C2A95B04EE764FC5C981DAB633EAEB6] - 14/07/2011 - 00:59:51 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-0CBF6A11.pf

 

 

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft® Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\javaw.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Earth\plugin\geplugin.exe" [Enabled] .(.Google - Google Earth.) -- C:\Program Files\Google\Google Earth\plugin\geplugin.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnserver.exe" [Enabled] .(.GlavSoft LLC. - TightVNC Server for Windows.) -- C:\Program Files\TightVNC\tvnserver.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\vncviewer.exe" [Enabled] .(.TightVNC Group - vncviewer.) -- C:\Program Files\TightVNC\vncviewer.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft® Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\System32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - System Restore Filesystem Filter Driver.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech Audio Codec for MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.F498FD605C08404B20A48954C722FF74] - 14/07/2011 - 20:45:05 ---A- . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\system32\drivers\AegisP.sys [17119]

O58 - SDL:[MD5.375EAC7DA270DA658501EE766F960201] - 14/07/2011 - 15:06:42 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [874496]

O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 14/07/2011 - 14:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]

O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 14/07/2011 - 01:26:13 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]

O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 14/07/2011 - 14:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]

O58 - SDL:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 14/07/2011 - 11:51:13 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [137656]

O58 - SDL:[MD5.48BF91CFFBCDD12A710207F2A08FEC4D] - 14/07/2011 - 15:38:32 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver..) -- C:\WINDOWS\system32\drivers\b57xp32.sys [132352]

O58 - SDL:[MD5.3292260A6AE8F328C7EF698B6EBD56E2] - 14/07/2011 - 11:15:08 ---A- . (.Broadcom Corporation - USB Driver for Bluetooth Adapter.) -- C:\WINDOWS\system32\drivers\bcbthub.sys [148794]

O58 - SDL:[MD5.0A5D4300A8EA29F67ABBBABB58DD5456] - 14/07/2011 - 14:04:04 ---A- . (.WIDCOMM, Inc. - Bluetooth Audio Device.) -- C:\WINDOWS\system32\drivers\btaudio.sys [16896]

O58 - SDL:[MD5.7249EF21D6F70D971BDA3ED0AF16D340] - 14/07/2011 - 13:57:46 ---A- . (.WIDCOMM, Inc. - Bluetooth Protocol Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btkrnl.sys [1240938]

O58 - SDL:[MD5.6D9D146B116B0C3F09A9AB9F6F805093] - 14/07/2011 - 13:50:32 ---A- . (.WIDCOMM, Inc. - Bluetooth BTPORT Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btport.sys [30235]

O58 - SDL:[MD5.3E98D2550A6222CD6D278425FBB21C3E] - 14/07/2011 - 14:02:06 ---A- . (.WIDCOMM, Inc. - Bluetooth Serial Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btserial.sys [23239]

O58 - SDL:[MD5.48B9AD7437FF5BFB8F13CAB03179FE72] - 14/07/2011 - 14:01:46 ---A- . (.WIDCOMM, Inc. - Bluetooth Serial Driver for Windows 2000.) -- C:\WINDOWS\system32\drivers\btslbcsp.sys [222844]

O58 - SDL:[MD5.F5418F5B86BF9610AF445F7884087F9E] - 14/07/2011 - 13:50:46 ---A- . (.WIDCOMM, Inc. - Bluetooth LAN Access Server Driver.) -- C:\WINDOWS\system32\drivers\btwdndis.sys [147864]

O58 - SDL:[MD5.BAA90D983F77759FC70C65A1CE3D3566] - 14/07/2011 - 13:29:00 ---A- . (.Conexant Systems Inc. - Conexant WDM AC97 Audio Driver.) -- C:\WINDOWS\system32\drivers\camcaud.sys [34048]

O58 - SDL:[MD5.90D9C324DF48BB8E3024E79F5C181784] - 14/07/2011 - 13:31:00 ---A- . (.Conexant Systems Inc. - Conexant AmcHal Driver.) -- C:\WINDOWS\system32\drivers\camchal.sys [276480]

O58 - SDL:[MD5.B562592B7F5759C99E179CA467ECFB4C] - 14/07/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM Main Driver.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 14/07/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 14/07/2011 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 14/07/2011 - 13:00:00 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys [144384]

O58 - SDL:[MD5.FAC3B0A7EC158C4582D23EDA4C5A56E9] - 14/07/2011 - 14:00:00 ---A- . (.Conexant Systems, Inc. - HSFHWICH WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWICH.sys [200064]

O58 - SDL:[MD5.2E84A40836B2A8DC523CB530C7262AC3] - 14/07/2011 - 13:58:00 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys [684800]

O58 - SDL:[MD5.E5ADD2AFECBF514F5CCA730EDFDFB49E] - 14/07/2011 - 13:58:00 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DP.sys [1041536]

O58 - SDL:[MD5.EADCBD84F788D887E73D8C7691B2C508] - 14/07/2011 - 16:23:42 ---A- . (.Inprocomm, Inc. - NT 5 (NDIS 5.1/5.0) x86 Driver.) -- C:\WINDOWS\system32\drivers\i2220ntx.sys [140288]

O58 - SDL:[MD5.872D090CA5C306F62D1982BCE6302376] - 14/07/2011 - 07:44:04 ---A- . (.Intel Corporation - Intel Wireless Connection Agent.) -- C:\WINDOWS\system32\drivers\iwca.sys [234496]

O58 - SDL:[MD5.78D93059DE425C9A248E1850ED80F822] - 14/07/2011 - 18:04:44 ---A- . (.ELANTECH Devices Corp. - KTP Ware Filter Driver.) -- C:\WINDOWS\system32\drivers\Ktp.sys [27392]

O58 - SDL:[MD5.3D2C13377763EEAC0CA6FB46F57217ED] - 14/07/2011 - 08:11:20 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [22712]

O58 - SDL:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 14/07/2011 - 08:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [39984]

O58 - SDL:[MD5.3C318B9CD391371BED62126581EE9961] - 14/07/2011 - 10:04:00 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys [13059]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.2ADC0CA9945C65284B3D19BC18765974] - 14/07/2011 - 01:24:38 ---A- . (.National Semiconductor Corporation - NSC Fast Infrared Driver..) -- C:\WINDOWS\system32\drivers\nscirda.sys [28672]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 14/07/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 14/07/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.85A26A3BB748DFD3170CDBF45B0DD7FD] - 14/07/2011 - 10:20:04 ---A- . (.Intel Corporation - Intel WLAN Packet Driver.) -- C:\WINDOWS\system32\drivers\s24trans.sys [11354]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 14/07/2011 - 13:00:00 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.10EF1200FEFFFFFF00000000C0F11200] - 01/06/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [685816]

O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 14/07/2011 - 14:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.EB363DDFBE8B6D51003CCAB29D93D744] - 14/07/2011 - 13:33:46 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [185824]

O58 - SDL:[MD5.467FF7FB078DCEC24C3F4DB602190E3D] - 14/07/2011 - 12:40:00 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\WINDOWS\system32\drivers\tifm21.sys [146304]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 14/07/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.5C2BDC152BBAB34F36473DEAF7713F22] - 14/07/2011 - 15:44:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys [41984]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 14/07/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.C89DA341FCC883A3D79DC11727484FC2] - 14/07/2011 - 17:48:10 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\WINDOWS\system32\drivers\w29n51.sys [3222784]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4768]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.4FE09F868CE65B334B42862C372C69CC] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [33840]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 14/07/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.2F9806B52CB3748B1E49222744B28E3C] - 14/07/2011 - 11:52:22 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\PCANDIS5.SYS [17134]

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 13/07/2011 - 00:58:52 -SHA- C:\Documents And Settings\Saskia\Cookies\index.dat [147456]

O61 - LFC:Last File Created 13/07/2011 - 00:58:52 -SHA- C:\Documents And Settings\Saskia\Local Settings\History\History.IE5\index.dat [720896]

O61 - LFC:Last File Created 13/07/2011 - 01:21:24 -SH-- C:\Documents And Settings\Saskia\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 13/07/2011 - 01:22:56 ---A- C:\Documents And Settings\Saskia\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-13 (02-22-56).txt [1045]

O61 - LFC:Last File Created 13/07/2011 - 02:08:26 ---A- C:\Documents And Settings\Saskia\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-13 (03-08-26).txt [1063]

O61 - LFC:Last File Created 13/07/2011 - 02:18:25 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]

O61 - LFC:Last File Created 13/07/2011 - 02:18:25 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]

O61 - LFC:Last File Created 13/07/2011 - 02:19:17 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F [533]

O61 - LFC:Last File Created 13/07/2011 - 02:19:17 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F [100]

O61 - LFC:Last File Created 13/07/2011 - 02:19:19 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 [19536]

O61 - LFC:Last File Created 13/07/2011 - 02:19:19 -S-A- C:\Documents And Settings\Saskia\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 [124]

O61 - LFC:Last File Created 13/07/2011 - 02:32:59 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2011-07-11-03-31-42.log [16832]

O61 - LFC:Last File Created 13/07/2011 - 02:32:59 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\1205b635.avl [1628]

O61 - LFC:Last File Created 13/07/2011 - 02:44:25 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Apple Computer\QuickTime\downloads\06\12\6ce29bc7-3bae8eba-c102c4e8-382f132b.qtch [1393]

O61 - LFC:Last File Created 13/07/2011 - 02:44:27 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Apple Computer\QuickTime\QuickTime.qtp [9407]

O61 - LFC:Last File Created 13/07/2011 - 02:48:49 -SHA- C:\Documents And Settings\Saskia\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 02:48:51 ---A- C:\Documents And Settings\Saskia\Cookies\saskia@fr.msn[1].txt [269]

O61 - LFC:Last File Created 13/07/2011 - 02:48:51 ---A- C:\Documents And Settings\Saskia\Cookies\saskia@msn[2].txt [650]

O61 - LFC:Last File Created 13/07/2011 - 02:48:51 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{EC61CF60-BF33-11D8-9A94-0012F02CDB69}.dat [4608]

O61 - LFC:Last File Created 13/07/2011 - 02:48:51 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{E9836E6A-AB5F-11E0-9A95-0012F02CDB69}.dat [4608]

O61 - LFC:Last File Created 13/07/2011 - 02:57:08 -SH-- C:\Documents And Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\desktop.ini [67]

O61 - LFC:Last File Created 13/07/2011 - 03:04:47 -SHA- C:\Documents And Settings\Saskia\Local Settings\History\History.IE5\MSHist012011070420110711\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 03:04:47 -SHA- C:\Documents And Settings\Saskia\Local Settings\History\History.IE5\MSHist012011071120110712\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 03:04:47 -SHA- C:\Documents And Settings\Saskia\Local Settings\History\History.IE5\MSHist012011071220110713\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 03:07:45 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\link.txt [115]

O61 - LFC:Last File Created 13/07/2011 - 03:07:45 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe [9435312]

O61 - LFC:Last File Created 13/07/2011 - 03:07:45 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\news.txt [78]

O61 - LFC:Last File Created 13/07/2011 - 03:07:59 ---A- C:\Documents And Settings\All Users.WINDOWS\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk [800]

O61 - LFC:Last File Created 13/07/2011 - 03:07:59 ---A- C:\Documents And Settings\All Users.WINDOWS\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk [800]

O61 - LFC:Last File Created 13/07/2011 - 03:07:59 ---A- C:\Documents And Settings\All Users.WINDOWS\Start Menu\Programs\Malwarebytes' Anti-Malware\Uninstall Malwarebytes' Anti-Malware.lnk [824]

O61 - LFC:Last File Created 13/07/2011 - 03:08:36 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\config.conf [2399]

O61 - LFC:Last File Created 13/07/2011 - 03:08:36 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\custom.conf [5]

O61 - LFC:Last File Created 13/07/2011 - 03:08:36 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\news.conf [248]

O61 - LFC:Last File Created 13/07/2011 - 03:08:48 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\build.conf [261]

O61 - LFC:Last File Created 13/07/2011 - 03:08:48 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [6983235]

O61 - LFC:Last File Created 13/07/2011 - 03:31:02 ---A- C:\Documents And Settings\Saskia\Recent\IMG_0075.lnk [848]

O61 - LFC:Last File Created 13/07/2011 - 03:31:04 ---A- C:\Documents And Settings\Saskia\Recent\scoot.lnk [641]

O61 - LFC:Last File Created 13/07/2011 - 03:31:15 ---A- C:\Documents And Settings\Saskia\Application Data\Microsoft\Office\OIS12.pip [432]

O61 - LFC:Last File Created 13/07/2011 - 03:33:21 ---A- C:\Documents And Settings\Saskia\Recent\IMG_0152.lnk [1071]

O61 - LFC:Last File Created 13/07/2011 - 03:33:22 ---A- C:\Documents And Settings\Saskia\Recent\X8.lnk [826]

O61 - LFC:Last File Created 13/07/2011 - 03:33:44 ---A- C:\Documents And Settings\Saskia\Application Data\Microsoft\OIS\Toolbars.dat [723]

O61 - LFC:Last File Created 13/07/2011 - 03:33:44 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Microsoft\OIS\OIScatalog.cag [614]

O61 - LFC:Last File Created 13/07/2011 - 03:34:00 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [26624]

O61 - LFC:Last File Created 13/07/2011 - 03:47:04 ---A- C:\Documents And Settings\Saskia\Recent\Lob des lernens.lnk [586]

O61 - LFC:Last File Created 13/07/2011 - 03:48:12 ---A- C:\Documents And Settings\Saskia\Application Data\Microsoft\Office\Recent\Lob des lernens.LNK [517]

O61 - LFC:Last File Created 13/07/2011 - 03:48:12 ---A- C:\Documents And Settings\Saskia\Application Data\Microsoft\Office\Recent\My Documents.LNK [362]

O61 - LFC:Last File Created 13/07/2011 - 03:48:12 ---A- C:\Documents And Settings\Saskia\Recent\Lob des lernens (2).lnk [591]

O61 - LFC:Last File Created 13/07/2011 - 03:48:13 --H-- C:\Documents And Settings\Saskia\Application Data\Microsoft\Office\Recent\index.dat [1597]

O61 - LFC:Last File Created 13/07/2011 - 03:48:22 ---A- C:\Documents And Settings\Saskia\Application Data\Microsoft\Office\Word12.pip [1828]

O61 - LFC:Last File Created 13/07/2011 - 03:51:51 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\OfflineCache\index.sqlite [10240]

O61 - LFC:Last File Created 13/07/2011 - 04:02:50 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2011-07-13-05-01-59.log [36414]

O61 - LFC:Last File Created 13/07/2011 - 04:02:50 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\c799ec8e.avl [2488]

O61 - LFC:Last File Created 13/07/2011 - 04:03:22 -SHA- C:\Documents And Settings\LocalService.NT AUTHORITY\Cookies\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 04:03:22 -SHA- C:\Documents And Settings\LocalService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 04:03:23 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\IDX\master.idx [56]

O61 - LFC:Last File Created 13/07/2011 - 04:03:24 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2011-07-13-05-03-22.log [3856]

O61 - LFC:Last File Created 13/07/2011 - 04:03:24 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\ca299dce.avl [1540]

O61 - LFC:Last File Created 13/07/2011 - 04:17:26 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\bookmarkbackups\bookmarks-2011-07-11.json [5290]

O61 - LFC:Last File Created 13/07/2011 - 04:18:01 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\#SharedObjects\MCK47U77\mail.google.com\wakeup.sol [37]

O61 - LFC:Last File Created 13/07/2011 - 04:18:01 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com\settings.sol [85]

O61 - LFC:Last File Created 13/07/2011 - 04:47:02 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\1662b971.avl [1732]

O61 - LFC:Last File Created 13/07/2011 - 04:47:03 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20110713-050405-64671C1F.LOG [24472]

O61 - LFC:Last File Created 13/07/2011 - 04:47:50 -SH-- C:\Documents And Settings\Saskia\ntuser.ini [178]

O61 - LFC:Last File Created 13/07/2011 - 19:46:07 -SHA- C:\Documents And Settings\NetworkService.NT AUTHORITY\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 13/07/2011 - 19:46:11 -SHA- C:\Documents And Settings\LocalService.NT AUTHORITY\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 13/07/2011 - 19:46:21 -SHA- C:\Documents And Settings\Saskia\Local Settings\desktop.ini [62]

O61 - LFC:Last File Created 13/07/2011 - 19:46:38 -SHA- C:\Documents And Settings\Saskia\Local Settings\History\History.IE5\MSHist012011071320110714\index.dat [32768]

O61 - LFC:Last File Created 13/07/2011 - 19:47:14 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Adobe\AAMUpdater\1.0\aamu.log [43561]

O61 - LFC:Last File Created 13/07/2011 - 19:47:30 ---A- C:\Documents And Settings\Saskia\Application Data\Adobe\CS5ServiceManager\logs\CS5ServiceManager_native.log [3]

O61 - LFC:Last File Created 13/07/2011 - 19:48:10 ---A- C:\Documents And Settings\Saskia\Application Data\Skype\shared_dynco\dc.db [1183744]

O61 - LFC:Last File Created 13/07/2011 - 19:48:10 ---A- C:\Documents And Settings\Saskia\Application Data\Skype\shared_dynco\dc.db-journal [472472]

O61 - LFC:Last File Created 13/07/2011 - 19:48:11 ---A- C:\Documents And Settings\Saskia\Application Data\Skype\shared.xml [43806]

O61 - LFC:Last File Created 13/07/2011 - 19:48:18 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\#SharedObjects\MCK47U77\skype.com\#ui\preferences.sol [215]

O61 - LFC:Last File Created 13/07/2011 - 19:48:46 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\AdobeARM.log [909]

O61 - LFC:Last File Created 13/07/2011 - 19:49:52 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat [4232]

O61 - LFC:Last File Created 13/07/2011 - 19:49:52 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat [6316]

O61 - LFC:Last File Created 13/07/2011 - 19:53:52 -SHA- C:\Documents And Settings\Saskia\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 13/07/2011 - 20:09:31 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol [89]

O61 - LFC:Last File Created 13/07/2011 - 20:11:08 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol [81]

O61 - LFC:Last File Created 13/07/2011 - 20:13:17 R--A- C:\Documents And Settings\Saskia\Local Settings\Temp\Une journée avec le 17 55 web.pdf [368941]

O61 - LFC:Last File Created 13/07/2011 - 20:58:05 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\geColladaModelCacheLock [0]

O61 - LFC:Last File Created 13/07/2011 - 20:58:05 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\geIconCacheLock [0]

O61 - LFC:Last File Created 13/07/2011 - 20:58:09 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_city_capital_star.png [1404]

O61 - LFC:Last File Created 13/07/2011 - 20:58:10 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_city_major.png [393]

O61 - LFC:Last File Created 13/07/2011 - 20:58:10 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_yellow.png [748]

O61 - LFC:Last File Created 13/07/2011 - 20:58:10 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_yellow_5.png [681]

O61 - LFC:Last File Created 13/07/2011 - 20:58:35 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_red.png [739]

O61 - LFC:Last File Created 13/07/2011 - 20:58:35 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_red_5.png [664]

O61 - LFC:Last File Created 13/07/2011 - 20:58:38 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_oct_green.png [1846]

O61 - LFC:Last File Created 13/07/2011 - 20:58:38 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_blue.png [685]

O61 - LFC:Last File Created 13/07/2011 - 20:58:38 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_blue_5.png [622]

O61 - LFC:Last File Created 13/07/2011 - 20:58:38 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_blue_6.png [340]

O61 - LFC:Last File Created 13/07/2011 - 20:58:38 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_green.png [789]

O61 - LFC:Last File Created 13/07/2011 - 20:58:42 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_green_5.png [378]

O61 - LFC:Last File Created 13/07/2011 - 20:59:12 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_rect_yellow_6.png [331]

O61 - LFC:Last File Created 13/07/2011 - 21:06:28 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\dbCache1.dat [134252032]

O61 - LFC:Last File Created 13/07/2011 - 21:06:28 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\dbCache1.dat.index [79712]

O61 - LFC:Last File Created 13/07/2011 - 21:06:28 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Google\GoogleEarth\dbroot_cache [60519]

O61 - LFC:Last File Created 13/07/2011 - 21:07:55 ---A- C:\Documents And Settings\Saskia\Application Data\Adobe\Acrobat\9.0\SharedDataEvents [3072]

O61 - LFC:Last File Created 13/07/2011 - 21:08:41 ---A- C:\Documents And Settings\Saskia\Recent\Conforama_Open140711.lnk [562]

O61 - LFC:Last File Created 13/07/2011 - 21:09:18 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\ArmUI.ini [148526]

O61 - LFC:Last File Created 13/07/2011 - 21:09:19 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\AdobeARM_NotLocked.log [740]

O61 - LFC:Last File Created 13/07/2011 - 21:36:26 ---A- C:\Documents And Settings\Saskia\Cookies\saskia@notifier.avira[3].txt [360]

O61 - LFC:Last File Created 13/07/2011 - 21:37:08 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\Upd-2011-07-12-22-35-29.log [37408]

O61 - LFC:Last File Created 13/07/2011 - 21:37:08 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\88436965.avl [2500]

O61 - LFC:Last File Created 13/07/2011 - 21:37:54 ---A- C:\Documents And Settings\Saskia\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-07-12 (22-37-54).txt [1229]

O61 - LFC:Last File Created 13/07/2011 - 21:40:19 ---A- C:\Documents And Settings\Saskia\Recent\ZHPDiag (2).lnk [512]

O61 - LFC:Last File Created 13/07/2011 - 21:40:19 ---A- C:\Documents And Settings\Saskia\Recent\ZHPFixReport.lnk [697]

O61 - LFC:Last File Created 13/07/2011 - 23:28:45 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\bookmarkbackups\bookmarks-2011-07-13.json [5290]

O61 - LFC:Last File Created 13/07/2011 - 23:50:01 -SHA- C:\Documents And Settings\NetworkService.NT AUTHORITY\Cookies\index.dat [16384]

O61 - LFC:Last File Created 13/07/2011 - 23:50:01 -SHA- C:\Documents And Settings\NetworkService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 14/07/2011 - 00:27:13 ---A- C:\Documents And Settings\Saskia\Application Data\Intel\Wireless\Settings\Settings.ini [522]

O61 - LFC:Last File Created 14/07/2011 - 00:27:19 ---A- C:\Documents And Settings\Saskia\Application Data\Intel\Wireless\WLANProfiles\Profiles.enc [270]

O61 - LFC:Last File Created 14/07/2011 - 00:27:19 ---A- C:\Documents And Settings\Saskia\Application Data\Intel\Wireless\WLANProfiles\Profiles.enc.bak [270]

O61 - LFC:Last File Created 14/07/2011 - 00:27:30 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\sched.log [124050]

O61 - LFC:Last File Created 14/07/2011 - 00:27:40 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\INFECTED\44e58e93.qua [250274]

O61 - LFC:Last File Created 14/07/2011 - 00:27:40 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\REPORTS\2535c6ed.avl [1782]

O61 - LFC:Last File Created 14/07/2011 - 00:27:44 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\AVSCAN-20110713-205034-3F40086B.LOG [25320]

O61 - LFC:Last File Created 14/07/2011 - 00:29:31 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\JOBS\updjob.avj [1530]

O61 - LFC:Last File Created 14/07/2011 - 00:31:00 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\#SharedObjects\MCK47U77\cdn.springboard.gorillanation.com\mediaplayer\master\mediaplayer.swf\springboard_analytics.sol [63]

O61 - LFC:Last File Created 14/07/2011 - 00:31:00 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.springboard.gorillanation.com\settings.sol [103]

O61 - LFC:Last File Created 14/07/2011 - 00:31:00 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [549]

O61 - LFC:Last File Created 14/07/2011 - 00:37:43 ---A- C:\Documents And Settings\Saskia\Application Data\Macromedia\Flash Player\#SharedObjects\MCK47U77\cdn.springboard.gorillanation.com\mediaplayer\master\mediaplayer.swf\undefined.sol [61]

O61 - LFC:Last File Created 14/07/2011 - 00:49:45 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\formhistory.sqlite [32768]

O61 - LFC:Last File Created 14/07/2011 - 00:53:48 ---A- C:\Documents And Settings\Saskia\Local Settings\Temp\plugtmp\plugin-display [8741]

O61 - LFC:Last File Created 14/07/2011 - 00:55:38 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\downloads.sqlite [180224]

O61 - LFC:Last File Created 14/07/2011 - 00:57:16 ---A- C:\Documents And Settings\All Users.WINDOWS\Start Menu\Programs\ZHP\ZHPDiag.lnk [489]

O61 - LFC:Last File Created 14/07/2011 - 00:57:58 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\pluginreg.dat [12473]

O61 - LFC:Last File Created 14/07/2011 - 00:58:03 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\LOGFILES\avguard.log [650372]

O61 - LFC:Last File Created 14/07/2011 - 00:58:04 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\urlclassifierkey3.txt [154]

O61 - LFC:Last File Created 14/07/2011 - 00:58:06 ---A- C:\Documents And Settings\All Users.WINDOWS\Application Data\Avira\AntiVir Desktop\EVENTDB\avevtdb.dbe [24576]

O61 - LFC:Last File Created 14/07/2011 - 00:58:06 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\eBay Inc\ebay-companion.sqlite [20480]

O61 - LFC:Last File Created 14/07/2011 - 00:58:07 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\0652F256d01 [119303]

O61 - LFC:Last File Created 14/07/2011 - 00:58:07 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\DB9CAF24d01 [37200]

O61 - LFC:Last File Created 14/07/2011 - 00:58:07 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\F3782808d01 [40164]

O61 - LFC:Last File Created 14/07/2011 - 00:58:08 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\CA48276Dd01 [30680]

O61 - LFC:Last File Created 14/07/2011 - 00:58:11 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\2A5B56D1d01 [38196]

O61 - LFC:Last File Created 14/07/2011 - 00:58:19 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\AB4BB57Bd01 [44617]

O61 - LFC:Last File Created 14/07/2011 - 00:58:21 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\436C4FD8d01 [31744]

O61 - LFC:Last File Created 14/07/2011 - 00:58:29 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\XPC.mfl [2283856]

O61 - LFC:Last File Created 14/07/2011 - 00:58:58 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\XUL.mfl [1291538]

O61 - LFC:Last File Created 14/07/2011 - 00:59:00 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\prefs.js [6316]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\bookmarkbackups\bookmarks-2011-07-14.json [5290]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\cert8.db [196608]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\key3.db [16384]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\places.sqlite [10309632]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\places.sqlite-journal [0]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\_CACHE_001_ [170477]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\_CACHE_002_ [70930]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\_CACHE_003_ [85074]

O61 - LFC:Last File Created 14/07/2011 - 00:59:01 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\urlclassifier3.sqlite [37285888]

O61 - LFC:Last File Created 14/07/2011 - 00:59:02 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\cookies.sqlite [557056]

O61 - LFC:Last File Created 14/07/2011 - 00:59:02 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\localstore.rdf [7758]

O61 - LFC:Last File Created 14/07/2011 - 00:59:02 ---A- C:\Documents And Settings\Saskia\Local Settings\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\Cache\_CACHE_MAP_ [8468]

O61 - LFC:Last File Created 14/07/2011 - 22:03:09 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\blocklist.xml [10573]

O61 - LFC:Last File Created 14/07/2011 - 22:03:13 ---A- C:\Documents And Settings\Saskia\Application Data\Mozilla\Firefox\Profiles\dt3siihq.default\extensions.rdf [10704]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: FindyKill - (.El Desaparecido.)

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] ${searchCLSID} [DefaultScope] - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - Bing

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.2D1F44FE1C9667037A9EFFC2A169AA9A] [sPRF][13/07/2011] (...) -- C:\Documents and Settings\Saskia\Desktop\delfix.exe [375020]

[MD5.139CA7EE65280F3AE220520E8DD5F75E] [sPRF][09/11/2005] (.MESTRELAB - MestReC Application.) -- C:\Documents and Settings\Saskia\Desktop\MestReC.exe [5902336]

[MD5.2E0B5C7437AB198A1AA2810BAA4E682B] [sPRF][04/12/2010] (...) -- C:\Documents and Settings\Saskia\Desktop\SoftonicFR_JDownloader_09579.exe [30456832]

[MD5.E39A78D2C0DB2A60C5622AA686EABA82] [sPRF][14/07/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Saskia\Desktop\ZHPDiag2.exe [2538576]

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 14/07/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 14/07/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 14/07/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 14/07/2011 425984 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe

SR - | Auto 14/07/2011 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SR - | Auto 14/07/2011 163840 | (btwdins) . (.WIDCOMM, Inc..) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

SS - | Demand 14/07/2011 224768 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SR - | Auto 14/07/2011 86016 | (EvtEng) . (.Intel Corporation.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

SS - | Auto 14/07/2011 133104 | (gupdate1cb095d934d6ec8) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SR - | Demand 14/07/2011 820008 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 14/07/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 14/07/2011 98304 | (OwnershipProtocol) . (.Intel Corporation.) - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe

SR - | Auto 14/07/2011 139264 | (RegSrvc) . (.Intel Corporation.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

SR - | Auto 14/07/2011 360521 | (S24EventMonitor) . (.Intel Corporation.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

SS - | Demand 14/07/2011 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

SS - | Auto 14/07/2011 826896 | (tvnserver) . (.GlavSoft LLC..) - C:\Program Files\TightVNC\tvnserver.exe

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Saskia at 14/07/2011 02:13:22

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x869858AC]<<

C:\WINDOWS\system32\drivers\sptd.sys

1 ntkrnlpa!IofCallDriver[0x804EE130] -> \Device\Harddisk0\DR0[0x8693DAB8]

3 CLASSPNP[0xF7546FD7] -> ntkrnlpa!IofCallDriver[0x804EE130] -> \Device\00000084[0x869CEF18]

5 ACPI[0xF72BB620] -> ntkrnlpa!IofCallDriver[0x804EE130] -> \Device\Ide\IdeDeviceP0T0L0-4[0x868F4D98]

kernel: MBR read successfully

user & kernel MBR OK

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Saskia at 14/07/2011 02:13:24

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

 

 

 

---\\ Liste des émulateurs de CD/DVD (Hook du MBR)

O58 - SDL:[MD5.10EF1200FEFFFFFF00000000C0F11200] - 01/06/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [685816]

 

 

 

End of the scan (1491 lines in 14mn 17s)(0)

[tomtom95]

RE

 

• Ferme toutes les applications ouvertes
  
• Désactive tes défenses (anti-virus,anti-spyware)
  
• Double-clique sur ZHPFix
   
  
  Un raccourci installé par ZHPDiag sur le Bureau
   
  Sélectionne et surligne correctement avec la souris et "Clique droit > "Copier" ou "Ctrl+C"
  ces lignes ci dessous :

  O42 - Logiciel: FreeCompressor - (.Secure Digital Services.) [HKLM] -- {1EF93620-4B15-4DB4-B0EA-889E2F187081}
  O63 - Logiciel: FindyKill - (.El Desaparecido.)
  [MD5.2D1F44FE1C9667037A9EFFC2A169AA9A] [sPRF][13/07/2011] (...) -- C:\Documents and Settings\Saskia\Desktop\delfix.exe [375020]
  [MD5.139CA7EE65280F3AE220520E8DD5F75E] [sPRF][09/11/2005] (.MESTRELAB - MestReC Application.) -- C:\Documents and Settings\Saskia\Desktop\MestReC.exe [5902336]
  [MD5.2E0B5C7437AB198A1AA2810BAA4E682B] [sPRF][04/12/2010] (...) -- C:\Documents and Settings\Saskia\Desktop\SoftonicFR_JDownloader_09579.exe [30456832]
   
  EmptyTemp
  EmptyFlash
  

• Clique successivement sur l'icône H (pour effacer le rapport qui s'est affiché) puis sur l'icône de la "malette cachée par la feuille" .
   
  
• Vérifie que toutes les lignes que je t'ai demandé de copier sont dans la fenêtre.
  
• Et seulement ces lignes
  
• Puis clique sur le bouton [OK]
  
• A ce moment apparaîtra au début de chaque ligne
  une petite case vide. [ ]
  
• Ensuite clique sur Tous puis sur Nettoyer
  
• Valide par Oui la désinstallation des programmes si demandé
  
• Laisse l'outil travailler. Si un redémarrage est demandé accepte et redémarre le PC
  
• Le rapport ZHPFixReport.txt s'affiche. Copie-colle le contenu de ce rapport dans ta réponse.
   
  Le rapport ZHPFixReport.txt est enregistré sous C:\Program files\ZHPFix\ZHPFixReport.txt

 

Supprime les reste d'infection dans la quarantaine d'antivir.

Clique droit sur l'icone d'antivir dans la barre des tâches.

Clique sur démarrer antivir

A gauche sur la page ""Administration" >> quarantaine >> puis sur supprimer les objets.

 

• IMPORTANT Tu va supprimer tes anciennes points sauvegarde du pc :
   
  il est nécessaire de désactiver puis réactiver la restauration système pour la purger car les points de restauration peuvent être infectés.
  
• Cliquez sur le bouton Démarrer faîtes un clique droit sur "poste de travail" puis cliquez sur "Propriétés" :
  
• Cliquez ensuite sur "Onglet Restauration systéme" :
  
• cochez la case du ou des disque(s) pour lesquels vous souhaitez désactiver la restauration du système :
   
  
• Pour réactiver la restauration système
  il suffit de décocher à nouveau les cases mais cela ne récupérera pas les anciens points de restauration du système.

 

Mettre a jour Mozilla Firefox (3.6.18) >>version 5.0.1

http://www.mozilla.com/fr/firefox/

Pour sécurisé ,installe le module Adblock plus ,et No script,

 

Tu as pas fait la mise a jour de java (Java 6 Update 20) >> Java 6 Update 26

 

A+

[grem]

J'ai fait tout comme tu m'as dit

firefox et a jour avec les extensions

java est à jour aussi

 

et voila le rapport :

 

 

Rapport de ZHPFix 1.12.3338 par Nicolas Coolman, Update du 12/07/2011

Fichier d'export Registre :

Run by Saskia at 14/07/2011 06:17:54

Windows XP Professional Service Pack 3 (Build 2600)

Web site : ZHPFix Fix de rapport

 

========== Logiciel(s) ==========

SUPPRIME O63 - Logiciel: FindyKill - (.El Desaparecido.)

 

========== Processus mémoire ==========

SUPPRIME Memory Process: C:\Documents and Settings\Saskia\Desktop\delfix.exe

SUPPRIME Memory Process: C:\Documents and Settings\Saskia\Desktop\MestReC.exe

SUPPRIME Memory Process: C:\Documents and Settings\Saskia\Desktop\SoftonicFR_JDownloader_09579.exe

 

========== Clé(s) du Registre ==========

SUPPRIME Partiel Software Key: {1EF93620-4B15-4DB4-B0EA-889E2F187081}

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\FindyKill

SUPPRIME Temporaires Windows: : 7

SUPPRIME Flash Cookies: 20

 

========== Fichier(s) ==========

SUPPRIME c:\findykill.txt

SUPPRIME Temporaires Windows: : 15

SUPPRIME Flash Cookies: 8

 

 

========== Récapitulatif ==========

3 : Processus mémoire

1 : Clé(s) du Registre

3 : Dossier(s)

3 : Fichier(s)

1 : Logiciel(s)

 

 

========== Chemin du fichier rapport ==========

C:\Program Files\ZHPDiag\ZHPFixReport.txt

 

 

 

End of the scan in 00mn 10s

Modifié le 14 juillet 2011 par grem

[tomtom95]

super

 

Si tout est ok

Je te dit a bientôt sur les forums de zeb

 

Cordialement tomtom

[tomtom95]

Oupss marque ton sujet comme résolu stp

[grem]

Oupss marque ton sujet comme résolu stp

 

 

Super !!!!

Merci à toi pour ton aide. Vous faites un super boulot.

 

Grem