Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

PC infecté

jude18

Par jude18
dans Analyses et éradication malwares

 Partager

Messages recommandés

jude18 Power Member

jude18

Posté(e)
Posté(e)

Bonjour en essayant de telecharger un logiciele pour mon iphone , j'ai installé une cochonnerie , et depuis beaucoup de sites internet ne fonctionnent plus et l'ordinateur rame , après un essai de désinfection avec ZHP Diag , ZHP Help Process et ZHP fix , il y a toujours des traces que je peux pas enlever .

 

j'ai également utiulisé Malwarebytes anti malware , qui m'a supprimé certaine cochonnerie mais j'ai toujours des problèmes.

 

Je vous laisse mon scan ZHP diag en esperant une aide de votre part , merci...

 

 

Rapport de ZHPDiag v1.27.2347 par Nicolas Coolman, Update du 24/06/2011

Run by Julien at 20/07/2011 09:00:51

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox 5.0 v

GCIE: Google Chrome v12.0.742.122 (Defaut)

 

---\\ System Information

Windows XP Professional Service Pack 3 (Build 2600)

Processor: x86 Family 6 Model 15 Stepping 6, GenuineIntel

Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 2046 MB (57% free)

System Restore: Désactivé (Disabled)

System drive C: has 13 GB (26%) free of 50 GB

 

---\\ Logged in mode

Computer Name: NOM-F002A4FFBF1

User Name: Julien

All Users Names: SUPPORT_cbf0f968, SUPPORT_388945a0, LogMeInRemoteUser, Julien, JUJU, HelpAssistant, ASPNET, Administrateur,

Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

%AppData%=C:\Documents and Settings\Julien\Application Data

%LocalAppData%=C:\Documents and Settings\Julien\Local Settings\Application Data

%StartMenu%=C:\Documents and Settings\Julien\Menu Démarrer

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 13 Go of 50 Go)

D:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 67 Go)

F:\ CD-ROM drive (Not Inserted)

G:\ Hard drive, Flash drive, Thumb drive (Free 8 Go of 24 Go)

I:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.42F5E14E33D79C236680468B1E4999F4] - (.Microsoft Corporation - Internet Extensions for Win32.) (.25/04/2011 17:06:11.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 3/25

~ Mes musiques (My Musics) : 6/117

~ Mes Favoris (My Favorites) : 2/16

~ Mes Documents (My Documents) : 33/784

~ Mon Bureau (My Desktop) : 9/196

~ Menu demarrer (Programs) : 5/33

~ Dossier utilisateur (AppData) : 18/6105

 

 

 

---\\ Processus lancés

[MD5.6055E612CA4D1D773A6DC42EA1F014E8] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.5.) -- C:\WINDOWS\system32\nvsvc32.exe [172100]

[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360]

[MD5.62F7FD637CE42ADDA3748E1B6E8780D2] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480]

[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664]

[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [349472]

[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]

[MD5.95B725BEB4A465C5851D629CBE1FE132] - (...) -- C:\Program Files\Dokan\DokanLibrary\mounter.exe [22016]

[MD5.5D1347AA5AE6E2F77D7F4F8372D95AC9] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568]

[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424]

[MD5.1DBBF9BE473F6CA2F2F4182FCCF563DC] - (.Hauppauge Computer Works - Hauppauge TV Server.) -- C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.EXE [602624]

[MD5.126A16F569122AE00AD3D12EF831D651] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- c:\Program Files\Java\jre6\bin\jqs.exe [153376]

[MD5.C6A4FA0BEED6E4198DDD8B8EE136CF80] - (.LogMeIn, Inc. - LMIGuardianSvc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [374152]

[MD5.6295A19E8A6486FF8A13A1B2F4E461E0] - (.LogMeIn, Inc. - LogMeIn Maintenance Service.) -- C:\Program Files\LogMeIn\x86\RaMaint.exe [136584]

[MD5.432618FA75B61059D2C57D6A7E55147A] - (.LogMeIn, Inc. - LogMeIn.) -- C:\Program Files\LogMeIn\x86\LogMeIn.exe [390528]

[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [322120]

[MD5.18B5B644BD83C4F0DF886664AACB241C] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734]

[MD5.7CF36C93F3D14D31AB50AF20C4CCA608] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe [372831]

[MD5.1D5425783D92F34C63075FA0C4E2C3D5] - (.Sony Corporation - VAIO Event Service (Service Module).) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [176128]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472]

[MD5.BFC8931821EEAB762A84A8F7DD9EA8CD] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe [184413]

[MD5.26187C6CE31B7730521936DE2B6F293D] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe [118784]

[MD5.9C69E6A25F5500501B14AF43311F8D8B] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe [64512]

[MD5.AD2FEAE5DA83BC4B80299FF68F9E6C45] - (.Primax Electronics Ltd. - Mouse Suite 98 Daemon.) -- C:\WINDOWS\system32\ICO.EXE [45056]

[MD5.93EEFBC237ADFC406F52EE56D97F784B] - (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe [32768]

[MD5.53DD7F282907634C269F54810ED0740C] - (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [176128]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792]

[MD5.1C3A0ABC807DE79F667EE5C0B9C01D0B] - (.Sony Corporation - SPM Module.) -- C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [217088]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]

[MD5.53D96678FB89F056D5285101481297D9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160]

[MD5.95D2D473B44D5245F87FCDD6646A89F7] - (.Yuna Software - Messenger Plus! 5.) -- C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe [800768]

[MD5.234051C0D242A6F4A79AE5212C1323D4] - (.LogMeIn, Inc. - LogMeIn Desktop Application.) -- C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048]

[MD5.0AA31DE4E40861EAF259D194A58D4317] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\Apoint\Apntex.exe [45056]

[MD5.DAEFB050AC8FEE4F1097FCF7CB97220E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\WINDOWS\eHome\ehmsas.exe [46592]

[MD5.B84A28B3984185EDA8867541AF14CDDB] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820520]

[MD5.9205217294F9F1A182D371D666B66B58] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZebHelpProcess\ZHPDiag.exe [661504]

[MD5.63E7F094ABC247748F4CF6CAC16711E7] - (.Glarysoft Ltd - Glary Utilities.) -- C:\Program Files\Glary Utilities\Integrator.exe [500024]

[MD5.73708319A8673E43670A1A334B2D96AC] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1012792]

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\Julien\Application Data\Mozilla\Firefox\Profiles\6j42v6nf.default\prefs.js

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

M3 - MFPP: Plugins - [Julien] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo.xml

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- c:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Update\1.3.21.57\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Update\1.3.21.57\npGoogleUpdate3.dll

M2 - MFEP: prefs.js [Julien - 6j42v6nf.default\engine@conduit.com] [] Conduit Engine v3.2.5.2 (.Conduit Ltd..)

M2 - MFEP: prefs.js [Julien - 6j42v6nf.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)

M2 - MFEP: prefs.js [Julien - 6j42v6nf.default\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] [] Messenger Plus FR Community Toolbar v3.5.0.12 (.Conduit Ltd..)

M2 - MFEP: prefs.js [Julien - 6j42v6nf.default\{97A78363-B868-4B48-AC91-A783A31215AF}] [] FaceSmooch v1.0.2 (..)

M2 - MFEP: prefs.js [Julien - 6j42v6nf.default\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] [] DVDVideoSoft Menu v1.0.2 (.Copyright © 2010 DVDVideoSoft.)

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G0 - GCSP: Preference [user Data\Default] http://search.conduit.com

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-vaio.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-1002157844-932473975-2733897562-1006\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-vaio.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google

R1 - HKUS\S-1-5-21-1002157844-932473975-2733897562-1006\Software\Microsoft\Internet Explorer\Main,Search Page = Google

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)) -- C:\WINDOWS\system32\ieframe.dll

R3 - URLSearchHook: FroggyBoss Class - {539F76FD-084E-4858-86D5-62F02F54AE86} . (.TODO: <???????? ????????> - TODO: <???????? ?????>.) (1.0.0.1) -- C:\Program Files\Minibar\Froggy.dll

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

 

 

 

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} Clé orpheline

O2 - BHO: IE BHO Utility - {5AB7104A-B71F-49AD-9154-F7F8806AE848} . (.Surf Canyon Incorporated - Fast Search for Internet Explorer.) -- C:\Program Files\Surf Canyon\surfcanyon.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: MrFroggy - {856E12B5-22D7-4E22-9ACA-EA9A008DD65B} . (.TODO: <???????? ????????> - TODO: <???????? ?????>.) -- C:\Program Files\Minibar\Froggy.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Minibar BHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} . (.KangoExtensions - Kango.) -- C:\Program Files\Minibar\Kango.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- c:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- c:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

 

 

 

---\\ ---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint\Apoint.exe

O4 - HKLM\..\Run: [ehTray] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\WINDOWS\ehome\ehtray.exe

O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] . (.Primax Electronics Ltd. - Mouse Suite 98 Daemon.) -- C:\Windows\System32\ICO.exe

O4 - HKLM\..\Run: [iSBMgr.exe] . (.Sony Corporation - Pas de description.) -- C:\Program Files\Sony\ISB Utility\ISBMgr.exe

O4 - HKLM\..\Run: [switcher.exe] . (.Sony Corporation - Wireless Switch Setting Utility.) -- C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll

O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll

O4 - HKLM\..\Run: [sonyPowerCfg] . (.Sony Corporation - SPM Module.) -- C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O4 - HKLM\..\Run: [PlusService] . (.Yuna Software - Messenger Plus! 5.) -- C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe

O4 - HKLM\..\Run: [LogMeIn GUI] . (.LogMeIn, Inc. - LogMeIn Desktop Application.) -- C:\Program Files\LogMeIn\x86\LogMeInSystray.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [8DDYX0ZBPZ] . (.Sun Microsystems, Inc. - MicroX0 setup c.) -- C:\WINDOWS\TEMP\Mph.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [8DDYX0ZBPZ] . (.Sun Microsystems, Inc. - MicroX0 setup c.) -- C:\WINDOWS\TEMP\Mph.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1002157844-932473975-2733897562-1006\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKUS\S-1-5-21-1002157844-932473975-2733897562-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

 

 

 

---\\ ---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\Julien\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Julien\Menu Démarrer\Programmes\Badoo Desktop.lnk . (.Badoo.) -- C:\Documents and Settings\All Users\Application Data\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe

O4 - Global Startup: C:\Documents And Settings\Julien\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Julien\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.exe

O8 - Extra context menu item: Free YouTube to MP3 Converter . (...) -- C:\Documents and Settings\Julien\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~4\OFFICE11\REFBARH.ICO

O9 - Extra button: Recherche - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} . (...) -- C:\Program Files\Minibar\icons\icon16.ico

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Program Files\Minibar\icons\icon16.ico

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

 

 

 

---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)

O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.club-vaio.com/fr/

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1282472937812

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1282481926843

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CS1\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CS3\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpNameServer = 192.168.1.254

O17 - HKLM\System\CCS\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpDomain = lan

O17 - HKLM\System\CS1\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpDomain = lan

O17 - HKLM\System\CS3\Services\Tcpip\..\{9C87B6EB-C703-440E-983E-1BF08B38F004}: DhcpDomain = lan

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: LMIinit . (.LogMeIn, Inc. - LogMeIn Remote Control Helper.) -- C:\Windows\System32\LMIinit.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

O20 - Winlogon Notify: VESWinlogon . (.Sony Corporation - VAIO Event Service (Winlogon Notification M.) -- C:\Windows\System32\VESWinlogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: DokanMounter (DokanMounter) . (...) - C:\Program Files\Dokan\DokanLibrary\mounter.exe

O23 - Service: HauppaugeTVServer (HauppaugeTVServer) . (.Hauppauge Computer Works - Hauppauge TV Server.) - C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - c:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LMIGuardianSvc (LMIGuardianSvc) . (.LogMeIn, Inc. - LMIGuardianSvc.) - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe

O23 - Service: LogMeIn Maintenance Service (LMIMaint) . (.LogMeIn, Inc. - LogMeIn Maintenance Service.) - C:\Program Files\LogMeIn\x86\RaMaint.exe

O23 - Service: LogMeIn (LogMeIn) . (.LogMeIn, Inc. - LogMeIn.) - C:\Program Files\LogMeIn\x86\LogMeIn.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.5.) - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

O23 - Service: VAIO Event Service (VAIO Event Service) . (.Sony Corporation - VAIO Event Service (Service Module).) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PlayMovie\000.fcl

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006Core.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006UA.job

[MD5.187E0D2AB859AD03393DDD731076BE81] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

[MD5.A20E95E94743C7DAA5483FEFB05B02A8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006Core] (.Google Inc..) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006UA] (.Google Inc..) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys

O41 - Driver: (DMICall) . (.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\DMICall.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys

O41 - Driver: (Tosrfcom) . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) - C:\WINDOWS\System32\Drivers\tosrfcom.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1

O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1

O42 - Logiciel: Adobe Common File Installer - (.Adobe System Incorporated.) [HKLM] -- {8EDBA74D-0686-4C99-BFDD-F894678E5102}

O42 - Logiciel: Adobe Reader X (10.1.0) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B3575D00-27EF-49C2-B9E0-14B3D954E992}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {C23CD6DA-1958-43A5-ADD0-59396572E02E}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Badoo Desktop - (.Badoo.) [HKLM] -- {F160E118-2FA1-4294-8632-B3E87547D075}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: Client Windows Rights Management avec Service Pack 2 - (.Microsoft.) [HKLM] -- {A5325565-D104-4A87-9301-B45AD0AFC697}

O42 - Logiciel: Dokan Library 0.5.3 - (.Pas de propriétaire.) [HKLM] -- DokanLibrary

O42 - Logiciel: FaceSmooch Smileys - (.Pas de propriétaire.) [HKLM] -- FaceSmooch Smileys

O42 - Logiciel: Fast Search by Surf Canyon - (.Surf Canyon.) [HKLM] -- Surf Canyon

O42 - Logiciel: Free YouTube to MP3 Converter version 3.9.37.426 - (.DVDVideoSoft Limited..) [HKLM] -- Free YouTube to MP3 Converter_is1

O42 - Logiciel: Glary Utilities Pro 2.34.0.1190 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome

O42 - Logiciel: HDAUDIO SoftV92 Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030003

O42 - Logiciel: Hauppauge MCE XP/Vista Software Encoder (2.0.28104) - (.Hauppauge Computer Works, Inc..) [HKLM] -- Hauppauge MCE2005 Software Encoder

O42 - Logiciel: Hauppauge WinTV 7 - (.Hauppauge Computer Works.) [HKLM] -- Hauppauge WinTV 7

O42 - Logiciel: Hauppauge WinTV Infrared Remote - (.Hauppauge Computer Works, Inc..) [HKLM] -- Hauppauge WinTV Infrared Remote

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: IZArc 4.1.2 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Intel® PRO Network Connections Drivers - (.Pas de propriétaire.) [HKLM] -- PROSet

O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150060}

O42 - Logiciel: Java 6 Update 21 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216021FF}

O42 - Logiciel: KC Softwares SUMo - (.KC Softwares.) [HKLM] -- KC Softwares SUMo_is1

O42 - Logiciel: LAN Setting Utility - (.Pas de propriétaire.) [HKLM] -- {5958CAC6-373E-402F-84FE-0A699AA920B9}

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: LogMeIn - (.LogMeIn, Inc..) [HKLM] -- {4475560E-9418-4908-A158-472D873AE139}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {96EB95A2-5245-4EA2-B6EA-B8BA2FBF64C4}

O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.1.1800 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Messenger Plus! 5 - (.Yuna Software.) [HKLM] -- Messenger Plus!

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}

O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E}

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)

O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {CF097717-F174-4144-954A-FBC4BF301036}

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: Package de base Microsoft de service de chiffrement pour cartes à puce - (.Microsoft Corporation.) [HKLM] -- KB909520

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva

O42 - Logiciel: SP2 de compatibilité descendante du client Windows Rights Management - (.Microsoft.) [HKLM] -- {EC905264-BCFE-423B-9C42-C3A106266790}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Setting Utility Series - (.Pas de propriétaire.) [HKLM] -- {59452470-A902-477F-9338-9B88101681BD}

O42 - Logiciel: SigmaTel Audio - (.SigmaTel.) [HKLM] -- {A462213D-EED4-42C2-9A60-7BDD4D4B0B17}

O42 - Logiciel: Sony MP4 Shared Library - (.Sony Corporation.) [HKLM] -- {01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}

O42 - Logiciel: Sony USB Mouse - (.Pas de propriétaire.) [HKLM] -- MouseSuite98

O42 - Logiciel: Sony Utilities DLL - (.Pas de propriétaire.) [HKLM] -- {EF3D45BB-2260-4008-88EA-492E7744A9DF}

O42 - Logiciel: Sony Video Shared Library - (.Sony Corporation.) [HKLM] -- {BE56FEF0-1A0F-4719-B3AD-34B5087AFA6D}

O42 - Logiciel: Speccy - (.Piriform.) [HKLM] -- Speccy

O42 - Logiciel: System Requirements Lab for Intel - (.Husdawg, LLC.) [HKLM] -- {F7FC9307-374E-4017-8E9D-DE1154780480}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: VAIO Camera Utility - (.Pas de propriétaire.) [HKLM] -- {1417F599-1DBD-4499-9375-B2813E9F890C}

O42 - Logiciel: VAIO Control Center - (.Pas de propriétaire.) [HKLM] -- {FC37C108-821D-4EDE-8F40-D5B497586805}

O42 - Logiciel: VAIO Event Service - (.Sony Corporation.) [HKLM] -- {F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}

O42 - Logiciel: VAIO Hardware Diagnostics - (.Pas de propriétaire.) [HKLM] -- {A947C2B3-7445-42C4-9063-EE704CACCB22}

O42 - Logiciel: VAIO Power Management - (.Pas de propriétaire.) [HKLM] -- {9E319E96-ED8E-4B01-9775-C521A1869A25}

O42 - Logiciel: VLC media player 1.1.3 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM] -- 8461-7759-5462-8226

O42 - Logiciel: WinSCP 4.2.9 - (.Martin Prikryl.) [HKLM] -- winscp3_is1

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- WGA

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: Wireless LAN Starter - (.Pas de propriétaire.) [HKLM] -- {61D6E4FB-1A62-4EB1-BE56-929B00C155CF}

O42 - Logiciel: Wireless Switch Setting Utility - (.Pas de propriétaire.) [HKLM] -- {2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}

O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP

O42 - Logiciel: ZebHelpProcess 2.49 - (.Nicolas Coolman.) [HKLM] -- Zeb Help Process_is1

O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

O42 - Logiciel: iPhone Folders - (.Redart.) [HKLM] -- {53DA6CFE-7CDE-4F72-9E23-39AAC686DE17}

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7E6066E6-8B5B-4100-B0FA-1D9E9B663CBA}

O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ASProtect]

[HKCU\Software\AVS4YOU]

[HKCU\Software\Adobe]

[HKCU\Software\Ahead]

[HKCU\Software\Alps]

[HKCU\Software\AlterGeo]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Avira]

[HKCU\Software\Azureus]

[HKCU\Software\BAE]

[HKCU\Software\Badoo]

[HKCU\Software\Bobyte]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\CyberLink]

[HKCU\Software\DT Soft]

[HKCU\Software\DVDVideoSoft]

[HKCU\Software\GlarySoft]

[HKCU\Software\Google]

[HKCU\Software\HS]

[HKCU\Software\IM Providers]

[HKCU\Software\IZSoftware]

[HKCU\Software\Intel]

[HKCU\Software\InterVideo]

[HKCU\Software\JavaSoft]

[HKCU\Software\KC Softwares]

[HKCU\Software\Lake]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\LogMeIn]

[HKCU\Software\Macromedia]

[HKCU\Software\Macroplant]

[HKCU\Software\MainConcept (HCW)]

[HKCU\Software\MainConcept]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Martin Prikryl]

[HKCU\Software\Minibar]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\PDFCreator]

[HKCU\Software\Pegasys Inc.]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Raptr]

[HKCU\Software\Softonic]

[HKCU\Software\SolidDocuments]

[HKCU\Software\Sony Corporation]

[HKCU\Software\SuperSoftwarePackage]

[HKCU\Software\Surf Canyon]

[HKCU\Software\Sysinternals]

[HKCU\Software\System Requirements Lab]

[HKCU\Software\Techlogg.com ToneShop]

[HKCU\Software\Trolltech]

[HKCU\Software\VFPlugin]

[HKCU\Software\Valve]

[HKCU\Software\Virtual Plastic Surgery Software - VPSS]

[HKCU\Software\Winamp]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yuna Software]

[HKCU\Software\cybelsoft]

[HKCU\Software\eMule]

[HKCU\Software\ej-technologies]

[HKCU\Software\geissplugin]

[HKCU\Software\i-FunBox.com]

[HKLM\Software\A-Patch]

[HKLM\Software\ACE Compression Software]

[HKLM\Software\ASIO]

[HKLM\Software\AVS4YOU]

[HKLM\Software\Adobe]

[HKLM\Software\Ahead]

[HKLM\Software\Alps]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Avidemux 2.5]

[HKLM\Software\Avira]

[HKLM\Software\Azureus]

[HKLM\Software\Borland]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CXT]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Conduit]

[HKLM\Software\CyberLink]

[HKLM\Software\DT Soft]

[HKLM\Software\DVDVideoSoft]

[HKLM\Software\GEAR Software]

[HKLM\Software\Gemplus]

[HKLM\Software\GlarySoft]

[HKLM\Software\Google]

[HKLM\Software\Hauppauge]

[HKLM\Software\IZSoftware]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Lake]

[HKLM\Software\Licenses]

[HKLM\Software\LogMeIn, Inc.]

[HKLM\Software\LogMeIn]

[HKLM\Software\MDC]

[HKLM\Software\Macromedia]

[HKLM\Software\MainConceptMCE]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Martin Prikryl]

[HKLM\Software\Minibar]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\Nero]

[HKLM\Software\ODBC]

[HKLM\Software\PDFCreator]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Primax]

[HKLM\Software\Program Groups]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Reminder]

[HKLM\Software\Schlumberger]

[HKLM\Software\SigmaTel]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\Symantec]

[HKLM\Software\TOSHIBA]

[HKLM\Software\TrendMicro]

[HKLM\Software\Uniblue]

[HKLM\Software\VideoLAN]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Yuna Software]

[HKLM\Software\ZSMC]

[HKLM\Software\cybelsoft]

[HKLM\Software\ej-technologies]

[HKLM\Software\magnet]

[HKLM\Software\mozilla.org]

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 27/06/2011 - 12:44:36 - [204493166] ----D- C:\Program Files\Adobe

O43 - CFD: 27/07/2006 - 12:56:38 - [2860289] ----D- C:\Program Files\Apoint

O43 - CFD: 22/08/2010 - 16:22:48 - [2306366] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 13/11/2010 - 14:18:30 - [41484986] ----D- C:\Program Files\Avidemux 2.5

O43 - CFD: 23/08/2010 - 09:36:44 - [129179904] ----D- C:\Program Files\Avira

O43 - CFD: 12/07/2011 - 23:19:20 - [32273209] ----D- C:\Program Files\AVS4YOU

O43 - CFD: 28/04/2011 - 09:39:16 - [620971] ----D- C:\Program Files\Bonjour

O43 - CFD: 02/04/2011 - 03:26:26 - [1182222] ----D- C:\Program Files\Call of Duty Black ops

O43 - CFD: 29/08/2010 - 05:03:38 - [8458029] ----D- C:\Program Files\CamStudio

O43 - CFD: 29/06/2011 - 11:22:30 - [4034628] ----D- C:\Program Files\CCleaner

O43 - CFD: 27/07/2006 - 11:00:44 - [0] ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 22/06/2011 - 10:36:00 - [577536] ----D- C:\Program Files\CONEXANT

O43 - CFD: 22/08/2010 - 16:52:42 - [226492299] ----D- C:\Program Files\CyberLink

O43 - CFD: 25/10/2010 - 10:38:56 - [10308220] ----D- C:\Program Files\DAEMON Tools Lite

O43 - CFD: 19/06/2011 - 16:47:36 - [4299160] ----D- C:\Program Files\Defraggler

O43 - CFD: 27/10/2010 - 23:28:16 - [213948] ----D- C:\Program Files\Dokan

O43 - CFD: 20/06/2011 - 19:57:34 - [4352247] ----D- C:\Program Files\DVDVideoSoft

O43 - CFD: 30/08/2010 - 11:20:00 - [535037376] ----D- C:\Program Files\eMule

O43 - CFD: 19/07/2011 - 10:32:52 - [83477] ----D- C:\Program Files\FaceSmooch Smileys

O43 - CFD: 21/06/2011 - 13:05:12 - [861512440] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 30/09/2010 - 13:57:46 - [1729585] ----D- C:\Program Files\GDS

O43 - CFD: 29/06/2011 - 10:37:00 - [19542968] ----D- C:\Program Files\Glary Utilities

O43 - CFD: 27/07/2006 - 17:32:28 - [1186816] ----D- C:\Program Files\Google

O43 - CFD: 27/07/2006 - 17:32:26 - [94250] ----D- C:\Program Files\Google BAE

O43 - CFD: 29/04/2011 - 04:38:00 - [128020] ----D- C:\Program Files\HostsMan

O43 - CFD: 28/11/2010 - 15:15:02 - [57425691] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 22/08/2010 - 15:32:48 - [12522156] ----D- C:\Program Files\Intel

O43 - CFD: 16/06/2011 - 10:36:40 - [5997160] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 21/09/2010 - 12:07:56 - [7888319] ----D- C:\Program Files\iPhone Folders

O43 - CFD: 20/06/2011 - 19:58:08 - [1856627] ----D- C:\Program Files\iPod

O43 - CFD: 20/06/2011 - 19:58:58 - [128336394] ----D- C:\Program Files\iTunes

O43 - CFD: 22/08/2010 - 16:48:04 - [14315935] ----D- C:\Program Files\IZArc

O43 - CFD: 22/08/2010 - 15:16:34 - [154073075] ----D- C:\Program Files\Java

O43 - CFD: 29/06/2011 - 23:42:44 - [2888632] ----D- C:\Program Files\KC Softwares

O43 - CFD: 19/06/2011 - 12:38:40 - [0] ----D- C:\Program Files\Konvertor

O43 - CFD: 19/07/2011 - 09:38:50 - [43290065] ----D- C:\Program Files\LogMeIn

O43 - CFD: 20/09/2010 - 09:47:20 - [5253635] ----D- C:\Program Files\ma-config.com

O43 - CFD: 19/07/2011 - 10:32:34 - [6983953] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 06/07/2011 - 10:22:50 - [334] ----D- C:\Program Files\MediaMonkey

O43 - CFD: 22/08/2010 - 13:34:02 - [2152579] ----D- C:\Program Files\Messenger

O43 - CFD: 22/08/2010 - 15:01:48 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 22/08/2010 - 15:44:42 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 27/07/2006 - 11:05:18 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 13/07/2011 - 21:58:26 - [412430804] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 18/06/2011 - 11:30:18 - [38411899] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 15/10/2010 - 21:35:12 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 28/11/2010 - 16:52:48 - [4368271] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 28/11/2010 - 15:56:00 - [331107] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 29/06/2011 - 23:59:30 - [767400] ----D- C:\Program Files\Minibar

O43 - CFD: 22/08/2010 - 13:51:28 - [10949041] ----D- C:\Program Files\Movie Maker

O43 - CFD: 30/06/2011 - 01:47:54 - [35610526] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 24/11/2010 - 15:02:42 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 30/12/2010 - 01:17:22 - [39944647] ----D- C:\Program Files\MSECache

O43 - CFD: 27/07/2006 - 10:59:24 - [19278399] ----D- C:\Program Files\MSN

O43 - CFD: 27/07/2006 - 10:59:36 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 22/08/2010 - 13:44:44 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 02/09/2010 - 11:01:24 - [406548830] ----D- C:\Program Files\Nero

O43 - CFD: 22/08/2010 - 13:04:10 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 29/04/2011 - 04:46:58 - [0] ----D- C:\Program Files\NirSoft

O43 - CFD: 22/08/2010 - 16:08:50 - [0] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 27/07/2006 - 11:00:24 - [1804] ----D- C:\Program Files\Online Services

O43 - CFD: 15/12/2010 - 01:48:32 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 22/11/2010 - 12:02:58 - [25470285] ----D- C:\Program Files\PDFCreator

O43 - CFD: 24/11/2010 - 10:01:34 - [38604] ----D- C:\Program Files\Phone Disk

O43 - CFD: 06/04/2011 - 10:44:24 - [76414128] ----D- C:\Program Files\QuickTime

O43 - CFD: 21/08/2010 - 23:44:08 - [13926] ----D- C:\Program Files\Raccourcis de programmes

O43 - CFD: 23/08/2010 - 10:45:02 - [564224] ----D- C:\Program Files\Raptr

O43 - CFD: 22/08/2010 - 11:23:06 - [3071873] ----D- C:\Program Files\Recuva

O43 - CFD: 22/08/2010 - 14:25:32 - [37949185] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 27/07/2006 - 11:02:38 - [1025] ----D- C:\Program Files\Services en ligne

O43 - CFD: 27/07/2006 - 14:18:56 - [11878209] ----D- C:\Program Files\SigmaTel

O43 - CFD: 28/11/2010 - 16:46:48 - [248224208] ----D- C:\Program Files\Sony

O43 - CFD: 21/06/2011 - 13:48:26 - [4557848] ----D- C:\Program Files\Speccy

O43 - CFD: 29/06/2011 - 23:59:18 - [320506] ----D- C:\Program Files\Surf Canyon

O43 - CFD: 22/08/2010 - 15:18:04 - [718080] ----D- C:\Program Files\SystemRequirementsLab

O43 - CFD: 23/05/2011 - 12:17:08 - [11463311] ----D- C:\Program Files\Techlogg.com ToneShop

O43 - CFD: 27/07/2006 - 11:11:30 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 25/08/2010 - 10:05:58 - [78656283] ----D- C:\Program Files\VideoLAN

O43 - CFD: 11/02/2011 - 09:50:00 - [23227888] ----D- C:\Program Files\Vuze

O43 - CFD: 22/08/2010 - 15:01:42 - [62608005] ----D- C:\Program Files\Windows Live

O43 - CFD: 22/08/2010 - 15:01:30 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 22/08/2010 - 14:22:28 - [3581070] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 22/08/2010 - 14:22:26 - [9600055] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 22/08/2010 - 13:04:04 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 27/07/2006 - 11:00:06 - [41055406] ----D- C:\Program Files\Windows Plus

O43 - CFD: 27/07/2006 - 11:02:44 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 29/09/2010 - 14:27:36 - [9068466] ----D- C:\Program Files\WinSCP

O43 - CFD: 22/08/2010 - 16:29:12 - [20008861] ----D- C:\Program Files\WinTV

O43 - CFD: 27/07/2006 - 11:05:18 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 30/03/2011 - 11:35:56 - [19285708] ----D- C:\Program Files\Yuna Software

O43 - CFD: 20/07/2011 - 09:02:04 - [105173080] ----D- C:\Program Files\ZebHelpProcess

O43 - CFD: 19/07/2011 - 12:03:20 - [6598356] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 19/07/2011 - 11:08:46 - [8638568] ----D- C:\Program Files\ZHPFix

O43 - CFD: 27/06/2011 - 12:45:16 - [141922438] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 02/09/2010 - 11:03:04 - [119140374] ----D- C:\Program Files\Fichiers Communs\Ahead

O43 - CFD: 20/06/2011 - 19:58:02 - [104469335] ----D- C:\Program Files\Fichiers Communs\Apple

O43 - CFD: 12/07/2011 - 23:19:16 - [54234666] ----D- C:\Program Files\Fichiers Communs\AVSMedia

O43 - CFD: 19/06/2011 - 19:22:30 - [7675823] ----D- C:\Program Files\Fichiers Communs\Borland Shared

O43 - CFD: 28/11/2010 - 15:57:04 - [86016] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 29/06/2011 - 12:39:06 - [18179698] ----D- C:\Program Files\Fichiers Communs\DVDVideoSoft

O43 - CFD: 27/07/2006 - 17:31:36 - [7507502] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 27/07/2006 - 17:19:56 - [31783938] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 28/11/2010 - 20:45:26 - [312995962] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 27/07/2006 - 11:02:18 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 27/07/2006 - 12:54:40 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 27/07/2006 - 11:02:18 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 27/07/2006 - 17:21:38 - [3799520] ----D- C:\Program Files\Fichiers Communs\Sony Shared

O43 - CFD: 27/07/2006 - 12:54:38 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 22/08/2010 - 13:12:40 - [436312] ----D- C:\Program Files\Fichiers Communs\Symantec Shared

O43 - CFD: 28/11/2010 - 15:56:26 - [21070161] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 22/08/2010 - 13:47:14 - [34131200] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 19/07/2011 - 10:55:38 - [686863] ----D- C:\Documents and Settings\Julien\Application Data\Adobe

O43 - CFD: 12/09/2010 - 16:26:34 - [0] ----D- C:\Documents and Settings\Julien\Application Data\AdobeUM

O43 - CFD: 02/04/2011 - 02:46:22 - [218595] ----D- C:\Documents and Settings\Julien\Application Data\Ahead

O43 - CFD: 22/11/2010 - 17:36:54 - [4895098019] ----D- C:\Documents and Settings\Julien\Application Data\Apple Computer

O43 - CFD: 13/11/2010 - 14:18:54 - [30506] ----D- C:\Documents and Settings\Julien\Application Data\avidemux

O43 - CFD: 17/12/2010 - 05:11:12 - [0] ----D- C:\Documents and Settings\Julien\Application Data\Avira

O43 - CFD: 28/09/2010 - 10:23:06 - [162883] ----D- C:\Documents and Settings\Julien\Application Data\AVS4YOU

O43 - CFD: 19/07/2011 - 11:48:06 - [6377348] ----D- C:\Documents and Settings\Julien\Application Data\Azureus

O43 - CFD: 22/08/2010 - 16:56:36 - [0] ----D- C:\Documents and Settings\Julien\Application Data\CyberLink

O43 - CFD: 22/06/2011 - 21:51:10 - [0] ----D- C:\Documents and Settings\Julien\Application Data\DAEMON Tools Lite

O43 - CFD: 19/05/2011 - 15:03:30 - [267] ----D- C:\Documents and Settings\Julien\Application Data\DVDVideoSoftIEHelpers

O43 - CFD: 29/06/2011 - 10:44:40 - [0] ----D- C:\Documents and Settings\Julien\Application Data\GlarySoft

O43 - CFD: 27/07/2006 - 17:32:28 - [0] ----D- C:\Documents and Settings\Julien\Application Data\Google

O43 - CFD: 27/07/2006 - 11:05:02 - [0] ----D- C:\Documents and Settings\Julien\Application Data\Identities

O43 - CFD: 22/08/2010 - 15:21:58 - [0] ----D- C:\Documents and Settings\Julien\Application Data\InstallShield

O43 - CFD: 29/06/2011 - 23:44:24 - [53236] ----D- C:\Documents and Settings\Julien\Application Data\KC Softwares

O43 - CFD: 22/08/2010 - 13:04:36 - [2840690] ----D- C:\Documents and Settings\Julien\Application Data\Macromedia

O43 - CFD: 23/08/2010 - 10:36:40 - [1697927] ----D- C:\Documents and Settings\Julien\Application Data\Malwarebytes

O43 - CFD: 15/06/2011 - 18:22:20 - [11477688] -S--D- C:\Documents and Settings\Julien\Application Data\Microsoft

O43 - CFD: 12/07/2011 - 00:40:24 - [1464] ----D- C:\Documents and Settings\Julien\Application Data\Minibar

O43 - CFD: 14/03/2011 - 23:41:08 - [17370648] ----D- C:\Documents and Settings\Julien\Application Data\Mozilla

O43 - CFD: 22/08/2010 - 16:54:44 - [122980407] ----D- C:\Documents and Settings\Julien\Application Data\PowerCinema

O43 - CFD: 23/08/2010 - 10:45:04 - [17682] ----D- C:\Documents and Settings\Julien\Application Data\Raptr

O43 - CFD: 28/11/2010 - 14:15:44 - [21316] ----D- C:\Documents and Settings\Julien\Application Data\SolidDocuments

O43 - CFD: 27/07/2006 - 17:21:34 - [0] ----D- C:\Documents and Settings\Julien\Application Data\Sony Corporation

O43 - CFD: 22/08/2010 - 15:15:32 - [8510811] ----D- C:\Documents and Settings\Julien\Application Data\Sun

O43 - CFD: 22/08/2010 - 15:17:58 - [381952] ----D- C:\Documents and Settings\Julien\Application Data\SystemRequirementsLab

O43 - CFD: 22/08/2010 - 16:48:12 - [1126] ----D- C:\Documents and Settings\Julien\Application Data\Uniblue

O43 - CFD: 12/07/2011 - 23:30:12 - [1196705] ----D- C:\Documents and Settings\Julien\Application Data\vlc

O43 - CFD: 10/11/2010 - 02:00:08 - [12536] ----D- C:\Documents and Settings\Julien\Application Data\WindSolutions

O43 - CFD: 21/11/2010 - 14:48:30 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Activision

O43 - CFD: 05/09/2010 - 11:42:20 - [15346337] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Adobe

O43 - CFD: 02/09/2010 - 11:12:54 - [3976707] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Ahead

O43 - CFD: 10/06/2011 - 15:02:34 - [0] --H-D- C:\Documents and Settings\Julien\Local Settings\Application Data\AlterGeo

O43 - CFD: 22/08/2010 - 16:22:48 - [26921472] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Apple

O43 - CFD: 23/08/2010 - 17:30:24 - [33146627] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Apple Computer

O43 - CFD: 02/09/2010 - 11:04:52 - [10755] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 22/06/2011 - 13:05:56 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Conduit

O43 - CFD: 22/08/2010 - 13:17:54 - [395898606] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Google

O43 - CFD: 22/08/2010 - 12:34:08 - [798814884] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Identities

O43 - CFD: 26/08/2010 - 12:43:06 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\LogMeIn

O43 - CFD: 02/09/2010 - 01:15:30 - [816] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Macroplant

O43 - CFD: 27/10/2010 - 23:29:08 - [820] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Macroplant,_LLC

O43 - CFD: 06/07/2011 - 10:22:46 - [1839104] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\MediaMonkey

O43 - CFD: 01/12/2010 - 13:22:38 - [157091528] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Microsoft

O43 - CFD: 15/10/2010 - 21:29:18 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Microsoft Help

O43 - CFD: 29/06/2011 - 23:59:38 - [906746] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Minibar

O43 - CFD: 14/09/2010 - 02:41:42 - [47509771] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Mozilla

O43 - CFD: 23/08/2010 - 09:25:48 - [6816] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\PlayMovie

O43 - CFD: 22/08/2010 - 16:58:08 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Powercinema

O43 - CFD: 14/11/2010 - 16:12:00 - [29] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\RcIncidents

O43 - CFD: 27/04/2011 - 19:35:04 - [0] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\Temp

O43 - CFD: 22/11/2010 - 19:04:06 - [21965] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\TVEnhance

O43 - CFD: 27/07/2006 - 17:19:52 - [12181504] ----D- C:\Documents and Settings\Julien\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150060}

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.D0EE1200FEFFFFFF57494E444F577E31] - 20/07/2011 - 08:01:55 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1595037]

O44 - LFC:[MD5.D0EE1200FEFFFFFF4D4F44454D4C7E31] - 20/07/2011 - 08:01:22 ---A- . (...) -- C:\WINDOWS\ModemLog_HDAUDIO SoftV92 Data Fax Modem with SmartCP.txt [4126]

O44 - LFC:[MD5.B101A2111B7291D5EAA2EBC11476925D] - 20/07/2011 - 07:58:52 ---A- . (...) -- C:\WINDOWS\System32\NvApps.xml [254461]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/07/2011 - 07:57:59 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.D0EE1200FEFFFFFF000000000CF21200] - 20/07/2011 - 07:57:23 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.D0EE1200FEFFFFFF000000000CF21200] - 20/07/2011 - 07:57:23 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 20/07/2011 - 07:56:58 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.D0EE1200FEFFFFFF000000000CF21200] - 20/07/2011 - 02:58:51 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32584]

O44 - LFC:[MD5.DD260210FC2F3B7FDDCF6BE7EED6F812] - 19/07/2011 - 23:48:42 ---A- . (...) -- C:\WINDOWS\System32\d3d9caps.dat [664]

O44 - LFC:[MD5.326F0768CF4BF7A71895CF5CD3E1D1BC] - 19/07/2011 - 20:59:39 --HA- . (...) -- C:\ntuser.dat.LOG [1024]

O44 - LFC:[MD5.116935C6C81C6AE10D5A21E32DCA913A] - 19/07/2011 - 20:52:33 ---A- . (...) -- C:\WINDOWS\System32\hs_err_pid1188.log [13154]

O44 - LFC:[MD5.70C703FE1946766FD22BFC66E9C2E9F1] - 19/07/2011 - 11:19:26 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [192136]

O44 - LFC:[MD5.3F4DFDCFB26921E28C138C752A7B970A] - 19/07/2011 - 11:06:46 ---A- . (...) -- C:\PDOXUSRS.NET [13030]

O44 - LFC:[MD5.58F6F3523E50A2158A060CB175CA22E7] - 19/07/2011 - 11:03:20 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.383842C021FC8C9F972F2841BC0743EC] - 18/07/2011 - 19:26:55 ---A- . (.LogMeIn, Inc. - LogMeIn Rfs Client Network Provider.) -- C:\WINDOWS\System32\LMIRfsClientNP.dll [83360]

O44 - LFC:[MD5.4A97045AFCA4A7373C951ED2D7AECF16] - 18/07/2011 - 19:26:50 ---A- . (.LogMeIn, Inc. - LogMeIn Remote Control Helper.) -- C:\WINDOWS\System32\LMIinit.dll [87424]

O44 - LFC:[MD5.5D3AA86F4D9AB5D4A50E6DAABB05C0BB] - 18/07/2011 - 19:26:50 ---A- . (.LogMeIn, Inc. - RemotelyAnywhere Printer Port Monitor.) -- C:\WINDOWS\System32\LMIport.dll [29568]

O44 - LFC:[MD5.F8C7E4BD35083E3B08551E2CB98178A8] - 17/07/2011 - 19:25:40 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [1158]

O44 - LFC:[MD5.012AACFA41D33BB7E6414D9FBF7248EE] - 16/07/2011 - 18:22:09 ---A- . (...) -- C:\WINDOWS\setupapi.log [40101]

O44 - LFC:[MD5.7091EFAB1F1CB1FC739287801C979086] - 16/07/2011 - 17:55:32 ---A- . (...) -- C:\WINDOWS\setupact.log [150]

O44 - LFC:[MD5.038C9B0B65E69DBB5EC0383FEDD90967] - 13/07/2011 - 21:10:21 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT [306808]

O44 - LFC:[MD5.E598AA3C37531B49B4593628236EB5FB] - 13/07/2011 - 21:02:07 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [860]

O44 - LFC:[MD5.3787DEF3495B2D15391303E039B7C168] - 13/07/2011 - 21:02:07 ---A- . (...) -- C:\WINDOWS\ehOCGen.log [676]

O44 - LFC:[MD5.D1F5BDD22E9C89E4FED43605543D8B05] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [12366]

O44 - LFC:[MD5.11BCB0C475C8499DC5251372C9E45B4F] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\KB2507938.log [18430]

O44 - LFC:[MD5.3176648AA983F680545B920E5B597F15] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\comsetup.log [4077]

O44 - LFC:[MD5.3323D5F7D583C37F3D0770486BA034A5] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\iis6.log [13269]

O44 - LFC:[MD5.37C02E83EC902B7D4F0715CA91E68B0D] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]

O44 - LFC:[MD5.99971954B9696B61EB71D6D33E4A5371] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\msgsocm.log [618]

O44 - LFC:[MD5.BCE1F93E67A66F30DECA934DB39AF240] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\netfxocm.log [2166]

O44 - LFC:[MD5.37AF3F22A4AD7725830056C84A8FC93D] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [2466]

O44 - LFC:[MD5.2B449ADE943ADF0EB4887B541BCE5BF5] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\ocgen.log [5912]

O44 - LFC:[MD5.BB1DB6C3DCE2CB996D7D1A86E495C391] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\ocmsn.log [684]

O44 - LFC:[MD5.AF391F7C7EF475334ECAA1BCA27CE37B] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\plusoc.log [1378]

O44 - LFC:[MD5.5EC1C83EB6F859A36F1E7693CCA4B5F2] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\tabletoc.log [622]

O44 - LFC:[MD5.7CA9CFEEDEF8924160E6D559A1EF6E58] - 13/07/2011 - 21:02:06 ---A- . (...) -- C:\WINDOWS\tsoc.log [5642]

O44 - LFC:[MD5.9E9D93690DD578A874D14CE36F41A837] - 13/07/2011 - 21:02:04 ---A- . (...) -- C:\WINDOWS\msmqinst.log [3756]

O44 - LFC:[MD5.06241E60040A753A51B27A832958F1EB] - 13/07/2011 - 21:02:01 ---A- . (...) -- C:\WINDOWS\updspapi.log [594]

O44 - LFC:[MD5.E88B9E6B9660FE413532C9DE43ADBD40] - 13/07/2011 - 20:57:12 ---A- . (...) -- C:\WINDOWS\KB2555917.log [17852]

O44 - LFC:[MD5.1792F84431F7CBD0EB17936C519291C0] - 13/07/2011 - 20:57:12 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/07/2011 - 20:57:04 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]

O44 - LFC:[MD5.DCC78B14C94A442C60981A7095B4A730] - 13/07/2011 - 09:15:38 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69]

O44 - LFC:[MD5.EDD5584E0025D6EAB2E1838D5485D26A] - 12/07/2011 - 22:18:18 ---A- . (...) -- C:\WINDOWS\wmsetup.log [2027]

O44 - LFC:[MD5.ECA00EED9AB95489007B0EF84C7149DE] - 06/07/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [22712]

O44 - LFC:[MD5.B18225739ED9CAA83BA2DF966E9F43E8] - 06/07/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [41272]

O44 - LFC:[MD5.14C9E39DFF257E5957FF56023A0656F2] - 29/06/2011 - 10:38:25 ---A- . (...) -- C:\ntuser.dat [262144]

 

 

 

---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)

O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Adobe\Photoshop Elements 4.0\AdobePhotoshopElementsMediaServer.exe" [Disabled] .(...) -- C:\Program Files\Adobe\Photoshop Elements 4.0\AdobePhotoshopElementsMediaServer.exe (.not file.)

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Raptr\raptr.exe" [Enabled] .(...) -- C:\Program Files\Raptr\raptr.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Raptr\raptr_im.exe" [Enabled] .(...) -- C:\Program Files\Raptr\raptr_im.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\WinTV\WinTV7\WinTV7.exe" [Enabled] .(.Hauppauge Computer Works, Inc. - WinTV7.) -- C:\Program Files\WinTV\WinTV7\WinTV7.exe

O47 - AAKE:Key Export SP - "C:\Program Files\CyberLink\TV Enhance\TVEnhance.exe" [Enabled] .(.CyberLink Corp. - CyberLink TV Enhance Main Program.) -- C:\Program Files\CyberLink\TV Enhance\TVEnhance.exe

O47 - AAKE:Key Export SP - "C:\Program Files\CyberLink\TV Enhance\TVEService.exe" [Enabled] .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\TV Enhance\TVEService.exe

O47 - AAKE:Key Export SP - "C:\Program Files\eMule\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- C:\Program Files\eMule\emule.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaw.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\javaw.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\javaws.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Web Start Launcher.) -- C:\Program Files\Java\jre6\bin\javaws.exe

O47 - AAKE:Key Export SP - "C:\Documents and Settings\Julien\Local Settings\Temp\jdic_0_9_5\IeEmbed.exe" [Enabled] .(...) -- C:\Documents and Settings\Julien\Local Settings\Temp\jdic_0_9_5\IeEmbed.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\launch4j-tmp\crazyloader.exe" [Enabled] .(.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\launch4j-tmp\crazyloader.exe

O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(.CybelSoft - Service de détection matériel.) -- C:\Program Files\ma-config.com\maconfservice.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Vuze\Azureus.exe" [Enabled] .(.Vuze Inc. - Pas de description.) -- C:\Program Files\Vuze\Azureus.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe" [Enabled] .(.Microsoft Corporation - Microsoft Help and Support Center.) -- C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\CyberLink\TV Enhance\TVEnhance.exe" [Enabled] .(.CyberLink Corp. - CyberLink TV Enhance Main Program.) -- C:\Program Files\CyberLink\TV Enhance\TVEnhance.exe

O47 - AAKE:Key Export DP - "C:\Program Files\CyberLink\TV Enhance\TVEService.exe" [Enabled] .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\TV Enhance\TVEService.exe

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\System32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\System32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\System32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\System32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\System32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\System32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\System32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\System32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\System32\Drivers\vgasave.sys (.not file.)

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\System32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"VIDC.dvsd"="C:\PROGRA~1\FICHIE~1\SONYSH~1\VideoLib\sonydv.dll" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"msacm.l3codecp"="" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\WINDOWS\System32\l3codecp.acm

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe

O53 - SMSR:HKLM\...\startupreg\AppleSyncNotifier [Key] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleSyncNotifier.exe

O53 - SMSR:HKLM\...\startupreg\Badoo Desktop [Key] . (.Badoo - Badoo Desktop.) -- C:\Documents and Settings\All Users\Application Data\Badoo\Badoo desktop\1.5.3.949\Badoo.desktop.exe

O53 - SMSR:HKLM\...\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

O53 - SMSR:HKLM\...\startupreg\CLMLServer [Key] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe

O53 - SMSR:HKLM\...\startupreg\FlashPlayerUpdate [Key] . (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\WINDOWS\system32\Macromed\Flash\FlashUtil10q_ActiveX.exe

O53 - SMSR:HKLM\...\startupreg\Google Update [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O53 - SMSR:HKLM\...\startupreg\PCMAgent [Key] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe

O53 - SMSR:HKLM\...\startupreg\PlayMovie [Key] . (.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\CyberLink\PlayMovie\PMVService.exe

O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O53 - SMSR:HKLM\...\startupreg\RECOVMSG [Key] . (.Sony Corporation - VAIO Recovery Utility.) -- C:\Program Files\Sony\VAIO Recovery Utility\VARU.exe

O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

O53 - SMSR:HKLM\...\startupreg\TVEService [Key] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\TV Enhance\TVEService.exe

O53 - SMSR:HKLM\...\startupreg\VAIO Update 2 [Key] . (...) -- C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe (.not file.)

O53 - SMSR:HKLM\...\startupreg\VAIOCameraUtility [Key] . (.Sony Corporation - VAIO Camera Utility Server.) -- C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles

O55 - MWPS:[HKLM\...\Policies\System] - "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.B21FCBC58CB13BAC70F74B5AC5DA7409] - 22/11/2004 - 05:31:10 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\WINDOWS\system32\drivers\Apfiltr.sys [108767]

O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 11:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]

O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 17/12/2010 - 04:12:57 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]

O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 17/06/2010 - 15:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]

O58 - SDL:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 01/04/2011 - 09:07:27 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [137656]

O58 - SDL:[MD5.BF79E659C506674C0497CC9C61F1A165] - 28/04/2006 - 11:00:00 ---A- . (.Sonic Solutions - CDR4 CD and DVD Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\drivers\cdr4_xp.sys [2432]

O58 - SDL:[MD5.2C41CD49D82D5FD85C72D57B6CA25471] - 28/04/2006 - 11:00:00 ---A- . (.Sonic Solutions - CDRAL Place Holder Driver (see PxHelp).) -- C:\WINDOWS\system32\drivers\cdralw2k.sys [2560]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 10/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 10/08/2004 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.526192BF7696F72E29777BF4A180513A] - 05/12/2000 - 15:18:02 ---A- . (.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) -- C:\WINDOWS\system32\drivers\DMICall.sys [3952]

O58 - SDL:[MD5.BF94ACF77E2C7458D91D0BEF8718EECE] - 05/07/2010 - 13:39:30 ---A- . (.Windows ® Win 7 DDK provider - Dokan Filesystem Driver.) -- C:\WINDOWS\system32\drivers\dokan.sys [84608]

O58 - SDL:[MD5.D57A8FC800B501AC05B10D00F66D127A] - 13/06/2005 - 05:58:04 ---A- . (.Intel Corporation - Intel® PRO/100 Adapter NDIS 5.1 driver.) -- C:\WINDOWS\system32\drivers\e100b325.sys [162816]

O58 - SDL:[MD5.389CF2CDED384BE477C3B3F15747D495] - 06/07/2005 - 05:33:26 ---A- . (.Intel Corporation - Intel® PRO/1000 Adapter NDIS 5.1 deserialized driver.) -- C:\WINDOWS\system32\drivers\e1e5132.sys [176128]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.F454484E633CEF3045C38BDA5479A5F7] - 03/06/2009 - 15:38:00 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV HVR-900H-Stick.) -- C:\WINDOWS\system32\drivers\hcw66xxx.sys [673664]

O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys [144384]

O58 - SDL:[MD5.9131EDE087AF04A7D80F7EBADC164254] - 12/08/2004 - 16:45:52 ---A- . (.Windows ® Server 2003 DDK provider - High Definition Audio Function Driver v1.0.) -- C:\WINDOWS\system32\drivers\Hdaudio.sys [113664]

O58 - SDL:[MD5.ACC46DDA7FECE95A253AE88CEA172E12] - 18/10/2005 - 08:52:34 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys [202112]

O58 - SDL:[MD5.C1D5CBD8AA0D674DA1BA1BB189696396] - 18/10/2005 - 08:52:30 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys [721280]

O58 - SDL:[MD5.C9F4E7DA78A02623ABF78A4A34CE79B1] - 18/10/2005 - 08:53:24 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys [998656]

O58 - SDL:[MD5.552B6B3B889020B8A2D5525068A494B4] - 03/07/2007 - 18:10:10 ---A- . (.Ahead Software AG - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys [11304]

O58 - SDL:[MD5.1BE72919F1B489FB8C06AE7CEF45C659] - 03/07/2007 - 18:10:12 ---A- . (.Ahead Software AG - Nero Image Server.) -- C:\WINDOWS\system32\drivers\imagesrv.sys [132904]

O58 - SDL:[MD5.4477689E2D8AE6B78BA34C9AF4CC1ED1] - 27/01/2010 - 11:21:36 ---A- . (.LogMeIn, Inc. - LogMeIn Mirror Miniport Driver.) -- C:\WINDOWS\system32\drivers\lmimirr.sys [10144]

O58 - SDL:[MD5.3FAA563DDF853320F90259D455A01D79] - 27/01/2010 - 11:22:02 ---A- . (.LogMeIn, Inc. - LogMeIn Rfs Drivemap Driver.) -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys [47640]

O58 - SDL:[MD5.ECA00EED9AB95489007B0EF84C7149DE] - 06/07/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [22712]

O58 - SDL:[MD5.B18225739ED9CAA83BA2DF966E9F43E8] - 06/07/2011 - 18:52:42 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [41272]

O58 - SDL:[MD5.E246A32C445056996074A397DA56E815] - 05/10/2005 - 08:57:08 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys [12544]

O58 - SDL:[MD5.3BDC90D9B12B685944F2B0896AF5413C] - 31/05/2010 - 10:58:36 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\system32\drivers\NETw5x32.sys [6608512]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 10/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.788F35282F1DDE15C80D74871B247C47] - 22/08/2010 - 14:58:09 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 191.56.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [7658464]

O58 - SDL:[MD5.59B3101F20056104C011E0C68AEBB840] - 28/06/2002 - 17:21:40 ---A- . (.Primax Electronics Ltd. - Mouse Suite Driver (For Windows 2000 and Whistler Only).) -- C:\WINDOWS\system32\drivers\PELMOUSE.SYS [17251]

O58 - SDL:[MD5.F1CE775AF376FAF3FFEFB4FF8CBDFBF3] - 24/07/2001 - 09:34:34 ---A- . (.Primax Electronics Ltd. - USB Mouse Low Filter Driver(Win2000 only).) -- C:\WINDOWS\system32\drivers\PELUSBlf.SYS [7520]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 10/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.183EF96BCC2EC3D5294CB2C2C0ECBCD1] - 26/10/2005 - 21:12:48 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys [20640]

O58 - SDL:[MD5.B953369C5EF43615F1BFA9CEA69FC9AA] - 18/05/2010 - 15:54:50 ---A- . (.LogMeIn, Inc. - RemotelyAnywhereDpmsSecure Device Driver.) -- C:\WINDOWS\system32\drivers\radpms.sys [13408]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 10/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 10/08/2004 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.716A724A447C559F122EA140D636FA48] - 21/09/2005 - 01:04:56 ---A- . (.Silicon Image, Inc. - Serial ATA miniport driver.) -- C:\WINDOWS\system32\drivers\SI3132.sys [67456]

O58 - SDL:[MD5.62FD549ACF2943F89612A8777295FA57] - 20/09/2005 - 07:18:20 ---A- . (.Silicon Image, Inc. - Filter driver for Silicon Image SATALink controllers..) -- C:\WINDOWS\system32\drivers\SiRemFil.sys [5248]

O58 - SDL:[MD5.72CF151FB410E544904DBC7D7F29B796] - 01/11/2004 - 04:21:32 ---A- . (.Silicon Image, Inc. - Windows Accelerator Driver.) -- C:\WINDOWS\system32\drivers\SiWinAcc.sys [10368]

O58 - SDL:[MD5.C483FC0ADD8B074286600B9620EF2C16] - 06/03/2006 - 10:39:00 ---A- . (.Sony Corporation - Sony Image Filter Driver.) -- C:\WINDOWS\system32\drivers\SonyImgF.sys [30080]

O58 - SDL:[MD5.BE6038E0A7D2E2FE69107E41A0265831] - 09/11/2000 - 11:15:08 ---A- . (.Sony Corporation - Sony Notebook Control driver.) -- C:\WINDOWS\system32\drivers\SonyNC.sys [48896]

O58 - SDL:[MD5.D0EE1200FEFFFFFF00000000A0F11200] - 02/09/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [691696]

O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 17/06/2010 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.784B73BD9D1C0FBA6CA96E8976F4B0E6] - 26/05/2006 - 23:59:12 ---A- . (.SigmaTel, Inc. - NDRC.) -- C:\WINDOWS\system32\drivers\sthda.sys [1177032]

O58 - SDL:[MD5.26587CE8E6C6F16B8B4E7E2C16FA00BF] - 21/02/2006 - 10:32:32 ---A- . (.Texas Instruments - ti21sony.sys.) -- C:\WINDOWS\system32\drivers\ti21sony.sys [226304]

O58 - SDL:[MD5.78E9819E076B909541BD4A37F8F0668B] - 07/04/2003 - 20:52:00 ---A- . (.TOSHIBA Corporation - TOSHIBA SD Bluetooth Card #2 Driver.) -- C:\WINDOWS\system32\drivers\tosbtsd2.sys [21120]

O58 - SDL:[MD5.142B91503C45C1A05A355414E13A51D1] - 30/08/2004 - 15:27:30 ---A- . (.TOSHIBA Corporation - SD Bluetooth Transport Driver.) -- C:\WINDOWS\system32\drivers\tosdbt.sys [48640]

O58 - SDL:[MD5.E362D54FD394999C4178936396664E57] - 11/07/2005 - 17:58:56 ---A- . (.TOSHIBA Corporation. - Toshiba Bluetooth HID mini port driver.) -- C:\WINDOWS\system32\drivers\toshidpt.sys [3712]

O58 - SDL:[MD5.D626E0AF9232D8799D3A449530F3C220] - 24/11/2005 - 12:37:36 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth Port Emulation Driver.) -- C:\WINDOWS\system32\drivers\tosporte.sys [47104]

O58 - SDL:[MD5.0EC5206059D97A8DC785BE73FB457EC7] - 02/02/2006 - 22:16:08 ---A- . (.TOSHIBA CORPORATION - Bluetooth RF Bus Driver.) -- C:\WINDOWS\system32\drivers\tosrfbd.sys [108928]

O58 - SDL:[MD5.33498B8F0B2CA549C2B7FFC1B3C0F1BC] - 14/12/2005 - 16:07:24 ---A- . (.TOSHIBA Corporation - Bluetooth RFBNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys [37632]

O58 - SDL:[MD5.5BA1CA3B3CDDB1DDC67DF473F05D1EC2] - 01/08/2005 - 15:45:08 ---A- . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\system32\drivers\tosrfcom.sys [64896]

O58 - SDL:[MD5.CC069342EE0EAE55B32A0AE99CF6185C] - 09/09/2005 - 13:47:10 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\system32\drivers\tosrfec.sys [9344]

O58 - SDL:[MD5.5DBF390AAB62DD0D4D43A9278614E001] - 08/02/2006 - 16:33:34 ---A- . (.TOSHIBA Corporation. - Bluetooth HID Driver from TOSHIBA.) -- C:\WINDOWS\system32\drivers\tosrfhid.sys [62848]

O58 - SDL:[MD5.AE5B75C86574A1BD0A093A9159F829F9] - 07/02/2002 - 15:24:20 ---A- . (.TOSHIBA Corporation. - Bluetooth LAN Emulation Driver.) -- C:\WINDOWS\system32\drivers\tosrflan.sys [25420]

O58 - SDL:[MD5.C52FD27B9ADF3A1F22CB90E6BCF9B0CB] - 06/01/2005 - 12:42:42 ---A- . (.TOSHIBA Corporation. - Bluetooth BNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfnds.sys [18612]

O58 - SDL:[MD5.87031831486F7ED4EAFEF27125BB56C8] - 01/08/2002 - 20:53:22 ---A- . (.TOSHIBA Corporation - Bluetooth TOSHIBA PC-Card Driver.) -- C:\WINDOWS\system32\drivers\tosrfpcc.sys [160672]

O58 - SDL:[MD5.0D86D15CAFF2B3203C785D604EC7C942] - 11/11/2005 - 14:09:52 ---A- . (.TOSHIBA Corporation - Bluetooth Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\tosrfsnd.sys [52864]

O58 - SDL:[MD5.C582B7716F0BE7E65505365F4F941587] - 31/01/2006 - 17:35:28 ---A- . (.TOSHIBA CORPORATION - Bluetooth USB Miniport Driver.) -- C:\WINDOWS\system32\drivers\tosrfusb.sys [39808]

O58 - SDL:[MD5.306E19413EADB0CA8842D5381A0354FC] - 01/07/2003 - 11:52:30 ---A- . (.TOSHIBA Corporation - Toshiba SD-IO Transport Driver.) -- C:\WINDOWS\system32\drivers\tostrans.sys [16320]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 10/08/2004 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.83CAFCB53201BBAC04D822F32438E244] - 10/05/2011 - 07:06:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys [42496]

O58 - SDL:[MD5.C7F4158EA3915F4194AEE233FF8D4728] - 29/12/2005 - 10:42:00 ---A- . (.Vimicro Corporation - VM321 Video Driver.) -- C:\WINDOWS\system32\drivers\usbvm321.sys [234496]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 10/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 27/04/2011 - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur(AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE

O64 - Services: CurCS - 01/04/2011 - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard(AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE

O64 - Services: CurCS - 17/06/2010 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO

O64 - Services: CurCS - 17/12/2010 - C:\WINDOWS\System32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 01/04/2011 - C:\WINDOWS\System32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB

O64 - Services: CurCS - ??/??/???? - C:\DOCUME~1\Julien\LOCALS~1\Temp\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME

O64 - Services: CurCS - 18/12/2009 - C:\Program Files\systemRequirementsLab\cpudrv.sys - cpudrv (cpudrv) .(...) - LEGACY_CPUDRV

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/12/2000 - C:\WINDOWS\System32\DRIVERS\DMICall.sys - Sony DMI Call service(DMICall) .(.Sony Corporation - Windows 2000 DMI Call Kernel Driver.) - LEGACY_DMICALL

O64 - Services: CurCS - 10/08/2004 - C:\WINDOWS\System32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 05/07/2010 - C:\WINDOWS\system32\drivers\dokan.sys - Dokan(Dokan) .(.Windows ® Win 7 DDK provider - Dokan Filesystem Driver.) - LEGACY_DOKAN

O64 - Services: CurCS - 05/07/2010 - C:\Program Files\Dokan\DokanLibrary\mounter.exe - DokanMounter (DokanMounter) .(...) - LEGACY_DOKANMOUNTER

O64 - Services: CurCS - 30/08/2010 - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2(driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2

O64 - Services: CurCS - 29/03/2010 - C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.exe - HauppaugeTVServer(HauppaugeTVServer) .(.Hauppauge Computer Works - Hauppauge TV Server.) - LEGACY_HAUPPAUGETVSERVER

O64 - Services: CurCS - 22/08/2010 - c:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - 18/07/2011 - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe - LMIGuardianSvc(LMIGuardianSvc) .(.LogMeIn, Inc. - LMIGuardianSvc.) - LEGACY_LMIGUARDIANSVC

O64 - Services: CurCS - 27/01/2010 - C:\Program Files\LogMeIn\x86\RaInfo.sys - LogMeIn Kernel Information Provider(LMIInfo) .(.LogMeIn, Inc. - RemotelyAnywhere Kernel Information Provide.) - LEGACY_LMIINFO

O64 - Services: CurCS - 18/07/2011 - C:\Program Files\LogMeIn\x86\RaMaint.exe - LogMeIn Maintenance Service(LMIMaint) .(.LogMeIn, Inc. - LogMeIn Maintenance Service.) - LEGACY_LMIMAINT

O64 - Services: CurCS - 27/01/2010 - C:\WINDOWS\system32\drivers\LMIRfsDriver.sys - LogMeIn Remote File System Driver(LMIRfsDriver) .(.LogMeIn, Inc. - LogMeIn Rfs Drivemap Driver.) - LEGACY_LMIRFSDRIVER

O64 - Services: CurCS - 16/12/2010 - C:\Program Files\LogMeIn\x86\LogMeIn.exe - LogMeIn(LogMeIn) .(.LogMeIn, Inc. - LogMeIn.) - LEGACY_LOGMEIN

O64 - Services: CurCS - 12/09/2010 - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service(maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE

O64 - Services: CurCS - 06/07/2011 - C:\WINDOWS\system32\drivers\mbamswissarmy.sys - No object(No service) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSWISSARMY

O64 - Services: CurCS - 27/06/2007 - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe - NMIndexingService(NMIndexingService) .(.Nero AG - Nero Home.) - LEGACY_NMINDEXINGSERVICE

O64 - Services: CurCS - 01/10/2009 - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service(NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.5.) - LEGACY_NVSVC

O64 - Services: CurCS - 28/11/2008 - C:\Program Files\CyberLink\Shared files\RichVideo.exe - Cyberlink RichVideo Service(CRVS)(RichVideo) .(.Pas de propriétaire - RichVideo Module.) - LEGACY_RICHVIDEO

O64 - Services: CurCS - ??/??/???? - C:\WINDOWS\System32\DRIVERS\s24trans.sys (.not file.) - Transport RLAN (s24trans) .(...) - LEGACY_S24TRANS

O64 - Services: CurCS - 21/09/2005 - C:\WINDOWS\System32\DRIVERS\SI3132.sys - SiI-3132 SATALink Controller(SI3132) .(.Silicon Image, Inc. - Serial ATA miniport driver.) - LEGACY_SI3132

O64 - Services: CurCS - 01/11/2004 - C:\WINDOWS\System32\DRIVERS\SiWinAcc.sys - SATALink driver accelerator(SiFilter) .(.Silicon Image, Inc. - Windows Accelerator Driver.) - LEGACY_SIFILTER

O64 - Services: CurCS - 19/07/2011 - C:\WINDOWS\System32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD

O64 - Services: CurCS - 17/06/2010 - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 28/11/2008 - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe - TVEnhance Background Capture Service (TBCS)(TVECapSvc) .(.Pas de propriétaire - CLCapSvc Module.) - LEGACY_TVECAPSVC

O64 - Services: CurCS - 28/11/2008 - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe - TVEnhance Task Scheduler (TTS))(TVESched) .(.Pas de propriétaire - CLSched Module.) - LEGACY_TVESCHED

O64 - Services: CurCS - 16/05/2008 - C:\Program Files\CyberLink\PlayMovie\000.fcl - {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) .(.Cyberlink Corp. - FCL Driver.) - LEGACY_{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {10B4E706-0FB5-43BE-88B2-C3CC5CCFECC8} - (Surf Canyon) - Surf Canyon Search

O69 - SBI: SearchScopes [HKCU] {92406CCC-8429-456A-B9DD-86BD03BD0DD6} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {FE12CA2B-51D7-4CCA-B8DB-D1AAFC8BBBDC} - (Yahoo! Search) - Yahoo! Search - Recherche Web

O69 - SBI: SearchScopes [HKUS\.DEFAULT] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - Bing

O69 - SBI: SearchScopes [HKUS\S-1-5-18] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - Bing

 

 

 

---\\ Internet Feature Controls (O81)

O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe

O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8538 - (24/06/2011)

Clés trouvées (Keys found) : 4

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 6

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit

[HKLM\Software\Classes\Toolbar.ct2504091] =>Adware.Agent

[HKLM\Software\Classes\Toolbar.CT2905330] =>Toolbar.Agent

[HKLM\Software\Conduit] =>Toolbar.Conduit

C:\Documents and Settings\Julien\Application Data\Adobe\plugs =>Trojan.FakeAlert

C:\Documents and Settings\Julien\Application Data\Adobe\shed =>Trojan.FakeAlert

C:\Documents and Settings\Julien\Local Settings\Application Data\Conduit =>Toolbar.Conduit

C:\Documents and Settings\Julien\Application Data\Mozilla\Firefox\Profiles\6j42v6nf.default\Conduit =>Toolbar.Conduit

C:\Documents and Settings\Julien\Application Data\Mozilla\Firefox\Profiles\6j42v6nf.default\ConduitEngine =>Toolbar.Conduit

C:\Documents and Settings\Julien\Application Data\Mozilla\Firefox\Profiles\6j42v6nf.default\Extensions\engine@conduit.com =>Toolbar.Conduit

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 27/04/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 01/04/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 18/02/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 06/04/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SR - | Auto 05/07/2010 22016 | (DokanMounter) . (...) - C:\Program Files\Dokan\DokanLibrary\mounter.exe

SR - | Auto 29/03/2010 602624 | (HauppaugeTVServer) . (.Hauppauge Computer Works.) - C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.exe

SR - | Demand 07/06/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 22/08/2010 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - c:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 18/07/2011 374152 | (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe

SR - | Auto 18/07/2011 136584 | (LMIMaint) . (.LogMeIn, Inc..) - C:\Program Files\LogMeIn\x86\RaMaint.exe

SR - | Auto 16/12/2010 390528 | (LogMeIn) . (.LogMeIn, Inc..) - C:\Program Files\LogMeIn\x86\LogMeIn.exe

SS - | Demand 12/09/2010 251248 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe

SS - | Demand 29/06/2007 800040 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

SS - | Demand 27/06/2007 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

SR - | Auto 01/10/2009 172100 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

SR - | Auto 28/11/2008 241734 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared files\RichVideo.exe

SR - | Auto 28/11/2008 372831 | (TVECapSvc) . (...) - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

SR - | Auto 28/11/2008 184413 | (TVESched) . (...) - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

SR - | Auto 13/04/2006 176128 | (VAIO Event Service) . (.Sony Corporation.) - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

SR - | Auto 16/05/2008 61424 | ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp..) - C:\Program Files\CyberLink\PlayMovie\000.fcl

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Julien at 20/07/2011 09:04:40

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89CD14D0]<<

1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89DA0AB8]

3 CLASSPNP[0xBA108FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000089[0x89D3A030]

5 ACPI[0xB9E73620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x89E48398]

\Driver\atapi[0x89D22758] -> IRP_MJ_CREATE -> 0x89CD14D0

error: Read Un périphérique attaché au système ne fonctionne pas correctement.

kernel: MBR read successfully

detected disk devices:

detected hooks:

\Driver\atapi DriverStartIo -> 0x89CD131B

user & kernel MBR OK

Warning: possible TDL3 rootkit infection !

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Julien at 20/07/2011 09:04:42

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

 

 

 

---\\ Liste des émulateurs de CD/DVD (Hook du MBR)

O58 - SDL:[MD5.D0EE1200FEFFFFFF00000000A0F11200] - 02/09/2010 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [691696]

 

 

 

End of the scan (1261 lines in 03mn 51s)(0)

pear Devil Member !

pear

Posté(e)
Posté(e)

Bonjour,

 

 

Combofix est un logiciel très puissant qui ne doit pas être utilisé sans une aide compétente sous peine de risquer des dommages irréversibles.

Veuillez noter que ce logiciel est régulièrement mis à jour et que la version téléchargée sera obsolète dans quelques jours.

 

Télécharger combofix.exe de Subs

et sauvegardez le sur le bureau

 

 

 

La console de Récupération

Tout d'abord, Combofix vérifie si la Console de récupération est installée et vous propose de le faire dans le cas contraire.

Certaines infections comme braviax empêcheront son installation.

La Console de récupération Windows vous permettra de démarrer dans un mode spécial de récupération (réparation).

Elle peut être nécessaire si votre ordinateur rencontre un problème après une tentative de nettoyage

C'est une procédure simple, qui ne vous prendra que peu de temps et pourra peut-être un jour vous sauver la mise.

Certaines infections (Rootkit en Mbr)ne peuvent être traitées qu'en utilisant la Console de Récupération,

D'importantes procédures que Combofix est susceptible de lancer ne fonctionneront qu'à la condition que la console de récupération(Sous Xp) soit installée

C'est pourquoi il vous est vivement conseillé d' installer d'abord la Console de Récupération sur le pc .

 

Les utilisateurs de Windows Vista,Seven peuvent utiliser leur CD Windows pour démarrer en mode Vista Recovery Environment (Win RE)

Cela permettra de réparer le système au cas ou le pc ne redémarrerait plus suite à la désinfection.

Après avoir cliqué sur le lien correspondant à votre version de Windows, vous serez dirigé sur une page:

cliquez sur le bouton Télécharger afin de récupérer le package d'installation sur leBureau:

Ne modifiez pas le nom du fichier

Windows XP Service Pack 2 (SP2) > Microsoft Windows XP Professionnel SP2

Faites un glisser/déposer de ce fichier sur le fichier ComboFix.exe

animation2ko5.gif

 

Suivre les indications à l'écran pour lancer ComboFix et lorsqu'on le demande, accepter le Contrat de Licence d'Utilisateur Final pour installer la Console de Récupération Microsoft.

Après installation,vous devriez voir ce message:

The Recovery Console was successfully installed. puis un rapport nommé CF_RC.txt va s'afficher:

 

Fermez ou désactivez tous les programmes Antivirus, Antispyware, Pare-feu actifs car ils pourraient perturber le fonctionnement de cet outil

Pour cela:

Démarrer->Exécuter->Msconfig->Démarrage : décochez les protections Antivirus, Antispyware,Teatimer

 

Cela est absolument nécessaire au succès de la procédure.

Bien évidemment, vous les rétablirez ensuite.

 

Vous avez téléchargé Combofix.

Double cliquer sur combofix.exe pour le lancer.

Ne pas fermer la fenêtre qui vient de s'ouvrir , le bureau serait vide et cela pourrait entraîner un plantage du programme!

Pour lancer le scan

Connecter tous les disques amovibles (disque dur externe, clé USB…).

Taper sur la touche 1 pour démarrer le scan.

Si pour une raison quelconque, combofix ne se lançait pas,

Sous Vista, désactivez l'UAC

Démarrez en mode sans échec, choisissez le compte Administrateur, lancez Combofix

Si vous avez un message de Combofix disant que votre antivirus est actif alors que vous l'avez désactivé, recommencez la procédure en mode sans échec

Lorsque ComboFix tourne, ne touchez plus du tout à votre ordinateur, vous risqueriez de planter le programme.

 

Le scan pourrait prendre un certain temps, il y a 50 procédures successives:

Patientez au moins 30 minutes pendant l'analyse.

Si le programme gèle (+ de 30 minutes), fermez le en cliquant le "X" au haut à droite de la fenêtre.

A la fin,,un rapport sera généré : postez en le contenu dans un prochain message.

Si le rapport est trop long, postez le en deux fois.

Il se trouve à c:\combofix.txt

jude18 Power Member

jude18

Posté(e)
  • Auteur
Posté(e)

Bonjour et merci de prendre du temps pour moi , voici le rapport :

 

 

ComboFix 11-07-20.02 - Julien 20/07/2011 11:30:04.1.2 - x86

Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1077 [GMT 2:00]

Lancé depuis: c:\documents and settings\Julien\Bureau\ComboFix.exe

AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

.

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\documents and settings\Administrateur\Application Data\Microsoft\Internet Explorer\Desktop.htt

c:\documents and settings\JUJU\Application Data\Microsoft\Internet Explorer\Desktop.htt

c:\documents and settings\Julien\Application Data\Adobe\plugs

c:\documents and settings\Julien\Application Data\Adobe\shed

c:\documents and settings\Julien\Application Data\Microsoft\Internet Explorer\Desktop.htt

c:\documents and settings\Julien\iThmbConv.exe

c:\documents and settings\LogMeInRemoteUser\Application Data\Microsoft\Internet Explorer\Desktop.htt

c:\windows\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\Desktop.htt

.

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_SSHNAS

.

.

((((((((((((((((((((((((((((( Fichiers créés du 2011-06-20 au 2011-07-20 ))))))))))))))))))))))))))))))))))))

.

.

2011-07-20 07:42 . 2011-07-20 07:42 -------- d-----w- c:\documents and settings\JUJU\Local Settings\Application Data\Mozilla

2011-07-20 07:41 . 2011-07-20 07:41 -------- d-----w- c:\documents and settings\JUJU\Local Settings\Application Data\LogMeIn

2011-07-19 19:49 . 2011-07-19 19:49 -------- d-sh--w- c:\documents and settings\NetworkService\IECompatCache

2011-07-19 19:45 . 2011-07-19 19:45 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Temp

2011-07-19 19:45 . 2011-07-19 19:45 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Adobe

2011-07-19 13:41 . 2011-07-19 13:41 -------- d-sh--w- c:\documents and settings\NetworkService\PrivacIE

2011-07-19 13:41 . 2011-07-19 13:41 -------- d-----w- c:\documents and settings\NetworkService\Application Data\Minibar

2011-07-19 10:59 . 2011-07-19 13:40 -------- d-----r- c:\documents and settings\NetworkService\Favoris

2011-07-19 09:32 . 2011-07-19 09:32 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Powercinema

2011-07-19 09:32 . 2011-07-19 09:46 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\TVEnhance

2011-07-19 09:32 . 2011-07-19 09:32 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\PlayMovie

2011-07-19 09:31 . 2011-07-19 09:32 -------- d-----w- c:\documents and settings\Administrateur\Application Data\CyberLink

2011-07-19 09:31 . 2011-07-19 09:32 -------- d-----w- c:\documents and settings\Administrateur\Application Data\PowerCinema

2011-07-19 09:24 . 2011-07-19 09:24 -------- d-sh--w- c:\documents and settings\Administrateur\IETldCache

2011-06-29 23:47 . 2011-06-16 04:38 142296 ----a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll

2011-06-29 23:47 . 2011-06-16 04:38 89048 ----a-w- c:\program files\Mozilla Firefox\libEGL.dll

2011-06-29 23:47 . 2011-06-16 04:38 781272 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll

2011-06-29 23:47 . 2011-06-16 04:38 465880 ----a-w- c:\program files\Mozilla Firefox\libGLESv2.dll

2011-06-29 23:47 . 2011-06-16 04:38 1850328 ----a-w- c:\program files\Mozilla Firefox\mozjs.dll

2011-06-29 23:47 . 2011-06-16 04:38 15832 ----a-w- c:\program files\Mozilla Firefox\mozalloc.dll

2011-06-29 23:47 . 2010-01-01 08:00 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll

2011-06-29 23:47 . 2010-01-01 08:00 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll

2011-06-29 21:59 . 2011-06-29 21:59 -------- d-----w- c:\program files\Surf Canyon

2011-06-29 21:44 . 2011-06-29 21:44 -------- d-----w- c:\documents and settings\Julien\Application Data\KC Softwares

2011-06-29 21:42 . 2011-06-29 21:42 -------- d-----w- c:\program files\KC Softwares

2011-06-29 08:44 . 2011-06-29 08:44 -------- d-----w- c:\documents and settings\Julien\Application Data\GlarySoft

2011-06-29 08:34 . 2011-06-29 08:36 -------- d-----w- c:\program files\Glary Utilities

2011-06-25 09:36 . 2011-07-20 07:05 -------- d-----w- c:\program files\ZHPDiag

2011-06-22 11:28 . 2011-06-22 11:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!

2011-06-22 08:35 . 2011-06-22 08:35 -------- d-----w- c:\program files\CONEXANT

2011-06-21 11:48 . 2011-06-21 11:48 -------- d-----w- c:\program files\Speccy

2011-06-20 17:58 . 2011-06-20 17:58 -------- d-----w- c:\program files\iPod

.

.

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-07-18 18:26 . 2010-08-26 10:42 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll

2011-07-18 18:26 . 2010-08-26 10:42 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll

2011-07-18 18:26 . 2010-08-26 10:42 29568 ----a-w- c:\windows\system32\LMIport.dll

2011-07-18 18:26 . 2010-08-26 10:42 87424 ----a-w- c:\windows\system32\LMIinit.dll

2011-07-06 17:52 . 2010-08-23 08:36 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-07-06 17:52 . 2010-08-23 08:36 22712 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-06-18 09:33 . 2010-08-26 10:42 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak

2011-06-18 09:33 . 2010-08-26 10:42 87424 ----a-w- c:\windows\system32\LMIinit.dll.000.bak

2011-06-06 11:35 . 2006-07-27 01:46 1859072 ----a-w- c:\windows\system32\win32k.sys

2011-05-19 13:00 . 2011-05-19 13:00 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-05-10 06:06 . 2010-08-22 14:22 4517664 ----a-w- c:\windows\system32\usbaaplrc.dll

2011-05-10 06:06 . 2010-08-22 14:22 42496 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2011-05-04 15:10 . 2011-05-04 15:10 82432 ----a-w- c:\documents and settings\Julien\Application Data\Microsoft\MSXML2\msxml4r.dll

2011-05-04 15:10 . 2011-05-04 15:10 44544 ----a-w- c:\documents and settings\Julien\Application Data\Microsoft\MSXML2\msxml4a.dll

2011-05-04 15:10 . 2011-05-04 15:10 1275392 ----a-w- c:\documents and settings\Julien\Application Data\Microsoft\MSXML2\msxml4.dll

2011-05-02 15:31 . 2006-07-27 09:02 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-04-29 17:25 . 2006-07-27 01:46 151552 ----a-w- c:\windows\system32\schannel.dll

2011-04-29 16:19 . 2006-07-27 01:46 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2011-04-26 11:07 . 2006-07-27 01:47 293888 ----a-w- c:\windows\system32\winsrv.dll

2011-04-26 11:07 . 2006-07-27 01:46 33280 ----a-w- c:\windows\system32\csrsrv.dll

2011-04-25 16:06 . 2006-07-27 01:46 916480 ----a-w- c:\windows\system32\wininet.dll

2011-04-25 16:06 . 2006-07-27 01:46 43520 ----a-w- c:\windows\system32\licmgr10.dll

2011-04-25 16:06 . 2006-07-27 01:46 1469440 ------w- c:\windows\system32\inetcpl.cpl

2011-04-25 12:01 . 2006-07-27 01:46 385024 ----a-w- c:\windows\system32\html.iec

2011-04-21 13:37 . 2006-07-27 01:46 105472 ----a-w- c:\windows\system32\drivers\mup.sys

2011-06-16 04:38 . 2011-06-29 23:47 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-12-07 3872080]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Apoint"="c:\program files\Apoint\Apoint.exe" [2004-11-17 118784]

"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]

"Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 45056]

"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]

"Switcher.exe"="c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe" [2006-02-14 176128]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-10-01 13901824]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-10-01 86016]

"SonyPowerCfg"="c:\program files\Sony\VAIO Power Management\SPMgr.exe" [2006-06-27 217088]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-06-07 421160]

"PlusService"="c:\program files\Yuna Software\Messenger Plus!\PlusService.exe" [2011-05-26 800768]

"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-01-27 63048]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]

2011-07-18 18:26 87424 ----a-w- c:\windows\system32\LMIinit.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]

2006-03-09 12:51 73728 ----a-w- c:\windows\system32\VESWinlogon.dll

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\AutoStart IR.lnk

backup=c:\windows\pss\AutoStart IR.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinTV Recording Status..lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\WinTV Recording Status..lnk

backup=c:\windows\pss\WinTV Recording Status..lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Julien^Menu Démarrer^Programmes^Démarrage^Vuze.lnk]

path=c:\documents and settings\Julien\Menu Démarrer\Programmes\Démarrage\Vuze.lnk

backup=c:\windows\pss\Vuze.lnkStartup

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Phone Disk

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Raptr

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2011-06-06 10:55 937920 ----a-w- c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2011-06-06 10:55 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

2011-04-20 10:48 58656 ----a-w- c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleSyncNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]

2010-08-17 12:38 281768 ----a-w- c:\program files\Avira\AntiVir Desktop\avgnt.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Badoo Desktop]

2011-06-07 16:55 1017344 ----a-w- c:\documents and settings\All Users\Application Data\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

2007-06-27 17:03 152872 ----a-w- c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]

2008-10-21 13:02 196608 ------w- c:\program files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate]

2011-05-19 13:00 240288 ----a-w- c:\windows\system32\Macromed\Flash\FlashUtil10q_ActiveX.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

2010-08-22 11:15 136176 ----atw- c:\documents and settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2011-06-07 15:51 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMAgent]

2008-10-21 13:02 143360 ------w- c:\program files\CyberLink\PowerCinema\PCMAgent.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]

2008-09-24 09:34 172032 ------w- c:\program files\CyberLink\PlayMovie\PMVService.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2010-11-29 15:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RECOVMSG]

2005-09-15 10:49 61440 ----a-w- c:\program files\Sony\VAIO Recovery Utility\VARU.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2010-05-14 09:44 248552 ----a-w- c:\program files\Fichiers communs\Java\Java Update\jusched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVEService]

2008-11-28 00:05 180224 ------w- c:\program files\CyberLink\TV Enhance\TVEService.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIOCameraUtility]

2005-12-27 11:58 69632 ----a-w- c:\program files\Sony\VAIO Camera Utility\VCUServe.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\WinTV\\WinTV7\\WinTV7.exe"=

"c:\\Program Files\\CyberLink\\TV Enhance\\TVEnhance.exe"=

"c:\\Program Files\\CyberLink\\TV Enhance\\TVEService.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaws.exe"=

"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\crazyloader.exe"=

"c:\\Program Files\\Vuze\\Azureus.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"5985:TCP"= 5985:TCP:*:Disabled:Gestion à distance de Windows

.

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [02/09/2010 11:06 691696]

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\CyberLink\PlayMovie\000.fcl [22/08/2010 16:50 61424]

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [23/08/2010 09:36 136360]

R2 Dokan;Dokan;c:\windows\system32\drivers\dokan.sys [05/07/2010 14:39 84608]

R2 DokanMounter;DokanMounter;c:\program files\Dokan\DokanLibrary\mounter.exe [05/07/2010 14:39 22016]

R2 HauppaugeTVServer;HauppaugeTVServer;c:\progra~1\WinTV\TVServer\HAUPPA~1.EXE [22/08/2010 16:27 602624]

R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [15/07/2011 15:17 374152]

R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [27/01/2010 12:22 12856]

R2 TVECapSvc;TVEnhance Background Capture Service (TBCS);c:\program files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe [22/08/2010 16:51 372831]

R2 TVESched;TVEnhance Task Scheduler (TTS));c:\program files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe [22/08/2010 16:51 184413]

R3 hcw66xxx;WinTV HVR-900H;c:\windows\system32\drivers\hcw66xxx.sys [22/08/2010 15:59 673664]

R3 radpms;Driver for RADPMS Device;c:\windows\system32\drivers\radpms.sys [18/05/2010 16:54 13408]

R3 SonyImgF;Sony Image Conversion Filter Driver;c:\windows\system32\drivers\SonyImgF.sys [27/07/2006 03:47 30080]

R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [27/07/2006 03:47 226304]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16 130384]

S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18/12/2009 10:58 11336]

S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [12/09/2010 15:30 251248]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [23/08/2010 10:36 41272]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [27/07/2006 03:46 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16 753504]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

WINRM REG_MULTI_SZ WINRM

.

Contenu du dossier 'Tâches planifiées'

.

2011-07-18 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

.

2011-07-20 c:\windows\Tasks\GlaryInitialize.job

- c:\program files\Glary Utilities\initialize.exe [2011-06-29 06:25]

.

2011-07-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006Core.job

- c:\documents and settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-08-22 11:15]

.

2011-07-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1002157844-932473975-2733897562-1006UA.job

- c:\documents and settings\Julien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-08-22 11:15]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.club-vaio.com/fr/

uInternet Settings,ProxyOverride = *.local

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

IE: Free YouTube to MP3 Converter - c:\documents and settings\Julien\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

TCP: DhcpNameServer = 192.168.1.254

FF - ProfilePath - c:\documents and settings\Julien\Application Data\Mozilla\Firefox\Profiles\6j42v6nf.default\

FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=302398&p=

.

- - - - ORPHELINS SUPPRIMES - - - -

.

MSConfigStartUp-VAIO Update 2 - c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-07-20 11:49

Windows 5.1.2600 Service Pack 3 NTFS

.

Recherche de processus cachés ...

.

Recherche d'éléments en démarrage automatique cachés ...

.

Recherche de fichiers cachés ...

.

Scan terminé avec succès

Fichiers cachés: 0

.

**************************************************************************

.

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Windows 5.1.2600 Disk: FUJITSU_MHV2160BT rev.00000014 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e

.

device: opened successfully

user: MBR read successfully

error: Read Un périphérique attaché au système ne fonctionne pas correctement.

kernel: MBR read successfully

detected disk devices:

detected hooks:

\Driver\atapi DriverStartIo -> 0x89D4F31B

user & kernel MBR OK

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]

"ImagePath"="\??\c:\program files\CyberLink\PlayMovie\000.fcl"

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,65,ad,95,00,2d,b1,f3,48,87,ea,03,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,65,ad,95,00,2d,b1,f3,48,87,ea,03,\

.

[HKEY_LOCAL_MACHINE\software\Classes\.*I61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*P7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*FAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*MAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*RAD*PWP*PSRAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*RAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PBM*P7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*WBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*XBM*WPG*WMXCF*XBM*WPXPM*XCF*XBXWD*XPM*XCYUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*DCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*DCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*ICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PCD*PBM*P7PCT*PCD*PBPCX*PCT*PCPDB*PCX*PCPDD*PDB*PCPGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PCT*PCD*PBPCX*PCT*PCPDB*PCX*PCPDD*PDB*PCPGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PCX*PCT*PCPDB*PCX*PCPDD*PDB*PCPGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*SCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*XCF*XBM*WPXPM*XCF*XBXWD*XPM*XCYUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PDB*PCX*PCPDD*PDB*PCPGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PDD*PDB*PCPGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*VDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*JFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*SFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PGM*PDD*PDPIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*RGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*SGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*TGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*DIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*GIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*MIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PIX*PGM*PDPM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*TIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*TIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*VID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*VIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*BMP*AVS*ARCUR*BMP*AVCUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*EMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*WMF*WBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*MNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PNG*PM]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PNM*PNG*PMPPM*PNM*PNPSD*PPM*PNPWP*PSD*PPRAD*PWP*PSRAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*FPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*JPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*JPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*JPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PPM*PNM*PNPSD*PPM*PNPWP*PSD*PPRAD*PWP*PSRAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*WPG*WMF*WBXBM*WPG*WMXCF*XBM*WPXPM*XCF*XBXWD*XPM*XCYUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*XPM*XCF*XBXWD*XPM*XCYUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*ARF*2BP*Y*ART*ARF*2BAVS*ART*ARBMP*AVS*ARCUR*BMP*AVCUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*ART*ARF*2BAVS*ART*ARBMP*AVS*ARCUR*BMP*AVCUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PSD*PPM*PNPWP*PSD*PPRAD*PWP*PSRAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*FTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*MTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*CUR*BMP*AVCUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*CUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*SUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*YUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*AVS*ART*ARBMP*AVS*ARCUR*BMP*AVCUT*CUR*BMDCM*CUT*CUDCX*DCM*CUDIB*DCX*DCEMF*DIB*DCEXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*MVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*PWP*PSD*PPRAD*PWP*PSRAS*RAD*PWRGB*RAS*RASCT*RGB*RASFW*SCT*RGSGI*SFW*SCSUN*SGI*SFTGA*SUN*SGTIF*TGA*SUTIM*TIF*TGVDA*TIM*TIVID*VDA*TIVIF*VID*VDWBMP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*XWD*XPM*XCYUV*XWD*XP]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Classes\.*EXF*EMF*DIFAX*EXF*EMFPX*FAX*EXFTS*FPX*FAGIF*FTS*FPI61*GIF*FTICO*I61*GIJFF*ICO*I6JP2*JFF*ICJPC*JP2*JFJPG*JPC*JPJPS*JPG*JPMAT*JPS*JPMIF*MAT*JPMNG*MIF*MAMTV*MNG*MIMVG*MTV*MNP7]

@Class="REG_SZ"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]

"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

--------------------- DLLs chargées dans les processus actifs ---------------------

.

- - - - - - - > 'winlogon.exe'(800)

c:\windows\system32\LMIinit.dll

c:\windows\system32\VESWinlogon.dll

c:\windows\system32\LMIRfsClientNP.dll

.

- - - - - - - > 'explorer.exe'(3648)

c:\windows\system32\eappprxy.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\program files\WinSCP\DragExt.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

c:\windows\system32\LMIRfsClientNP.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\nvsvc32.exe

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Avira\AntiVir Desktop\avshadow.exe

c:\windows\eHome\ehRecvr.exe

c:\windows\eHome\ehSched.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\LogMeIn\x86\RaMaint.exe

c:\program files\LogMeIn\x86\LogMeIn.exe

c:\progra~1\WinTV\TVServer\CAPTUR~4.EXE

c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

c:\program files\CyberLink\Shared files\RichVideo.exe

c:\program files\Sony\VAIO Event Service\VESMgr.exe

c:\windows\ehome\mcrdsvc.exe

c:\windows\system32\dllhost.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\ICO.EXE

c:\windows\system32\RUNDLL32.EXE

c:\program files\Apoint\Apntex.exe

c:\program files\iPod\bin\iPodService.exe

c:\windows\eHome\ehmsas.exe

.

**************************************************************************

.

Heure de fin: 2011-07-20 11:58:51 - La machine a redémarré

ComboFix-quarantined-files.txt 2011-07-20 09:58

.

Avant-CF: 15 604 977 664 octets libres

Après-CF: 15 939 067 904 octets libres

.

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect

.

- - End Of File - - 2E878E9C24B708206C1449517196CB73

pear Devil Member !

pear

Posté(e)
Posté(e)

Télécharger ESET Online Scanner sur le Bureau en cliquant sur ce logo:

hh3lp9.jpg

Double-cliquer sur le fichier esetsmartinstaller_enu.exe pour installer le scanner.

Attention: Sous Windows VISTA, cliquer droit sur esetsmartinstaller_enu.exe puis sélectionner "exécuter en tant qu'administrateur"

Accepter la licence en cochant la case "YES, i accept the terms of use", puis cliquer sur le bouton "Start"

Une fois le scanner installé, configurez-le en décochant la case "Remove found threats" et en cochant la case "Scan archives"

 

Lancer la recherche antivirale en cliquant sur le bouton "Start": l'outil se met à jour et lance le scan: une barre de progression indique où en est la recherche

Quand le scan est terminé, si des virus ont été détectés, cliquez sur la ligne "List of found threats" pour voir lesfichiers infectés.

Ouvrez le fichier log:C:\Program Files\ESET Online Scanner\log.txt

et copiez-collez son contenu dans la prochaine réponse

 

jude18 Power Member

jude18

Posté(e)
  • Auteur
Posté(e)

Bonjour Pear , merci pour votre réponse . J'ai fait le scan et voici le Log :

 

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6528

# api_version=3.0.2

# EOSSerial=13fd6cb22855854294a6d40245ad57f6

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-07-21 05:50:05

# local_time=2011-07-21 07:50:05 (+0100, Paris, Madrid (heure d'été))

# country="France"

# lang=1033

# osver=5.1.2600 NT Service Pack 3

# compatibility_mode=512 16777215 100 0 0 0 0 0

# compatibility_mode=1792 16777175 100 0 28644384 28644384 0 0

# compatibility_mode=8192 67108863 100 0 338 338 0 0

# scanned=175360

# found=8

# cleaned=0

# scan_time=34059

C:\Documents and Settings\Julien\Mes documents\CyberLink.PowerCinema.v6.0.2221.Multilingual.Incl.Keymaker-CORE.7z probably a variant of Win32/Agent.EYYMVHV trojan (unable to clean) 00000000000000000000000000000000 I

C:\Documents and Settings\Julien\Mes documents\Vuze Downloads\Nero Ultra Edition v9.4.13.2d fr\Nero-9.4.13.2d_trial.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I

C:\Program Files\ZHPFix\Quarantine\OpenCandy.DIR\OpenCandy_3D16ED7B533F4010BFD693C91B172732\registrybooster(8).exe a variant of Win32/RegistryBooster application (unable to clean) 00000000000000000000000000000000 I

E:\RECUP\Dossier inconnu\[006841].zip probably a variant of Win32/TrojanDownloader.Zlob.JPQNREP trojan (unable to clean) 00000000000000000000000000000000 I

J:\steph\nero\Nero.7.Premium.v7.10.1.0.FR.Incl-Keygen.rar multiple threats (unable to clean) 00000000000000000000000000000000 I

J:\steph\nero\Nero.7.Premium.v7.10.1.0.FR.Incl-Keygen\nero_nero_7.10.1.0_francais_10297.7z Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I

J:\steph\nero\Nero.7.Premium.v7.10.1.0.FR.Incl-Keygen\nero_nero_7.10.1.0_francais_10297.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I

J:\steph\nero\Nero.7.Premium.v7.10.1.0.FR.Incl-Keygen\nero_nero_7.10.1.0_francais_10297\Toolbar.exe Win32/Toolbar.AskSBar application (unable to clean) 00000000000000000000000000000000 I

  • Tonton a modifié le titre en PC infecté

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...