(Résolu) Suspucion infections

[ffrodon]

Bonjour,

C'est le PC d'un voisin de 70 ans et oui.

Y aurait il une âme charitable pour jeter un œil a ce rapport ZHP. Désolé pour la longueur, le site cijoint est en dérangement.

 

Par avance merci

 

Rapport de ZHPDiag v1.28.132 par Nicolas Coolman, Update du 08/08/2011

Run by papa at 08/08/2011 17:37:58

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v7.0.5730.11

MFIE: Mozilla Firefox 5.0.1 v (Defaut)

 

---\\ Windows Product Information

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Adventage : KO

 

---\\ System Information

~ Processor: x86 Family 6 Model 10 Stepping 0, AuthenticAMD

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 511 MB (46% free)

System Restore: Activé (Enable)

System drive C: has 199 GB (87%) free of 227 GB

 

---\\ Logged in mode

~ Computer Name: HUBERT

~ User Name: papa

~ All Users Names: SUPPORT_388945a0, papa, HelpAssistant, ASPNET, Administrateur,

~ Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\papa\Application Data\

~ %Desktop% : C:\Documents and Settings\papa\Bureau\

~ %Favorites% : C:\Documents and Settings\papa\Favoris\

~ %LocalAppData% : C:\Documents and Settings\papa\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\papa\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 199 Go of 227 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 6 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.08/08/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.08/08/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.A81784C32A222384C0E3E2ECC1B587AB] - (.Microsoft Corporation - Internet Extensions for Win32.) (.08/08/2011 - 16:45:07.) -- C:\WINDOWS\system32\wininet.dll [832512]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.08/08/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.08/08/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.08/08/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 0/0

~ Mes musiques (My Musics) : 2/16

~ Mes Videos (My Videos) : 2/58

~ Mes Favoris (My Favorites) : 1/56

~ Mes Documents (My Documents) : 30/755

~ Mon Bureau (My Desktop) : 2/9

~ Menu demarrer (Programs) : 5/37

~ Scan Hidden Files in 00mn 03s

 

 

 

---\\ Processus lancés

[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe [955392]

[MD5.BB1DA35335D88DB1CE1FEE8BD35F2248] - (.America Online, Inc. - AOL Connectivity Service.) -- C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe [1123440]

[MD5.43DC4FC662DF064535E30B17C8B5AB00] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424]

[MD5.0326B36B8331569F25DB4A06412261F9] - (.Pas de propriétaire - CLCapSvc Module.) -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [176220]

[MD5.F905E8799D4EBF0597DFEEE659ECBA36] - (.Pas de propriétaire - CLSched Module.) -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe [110682]

[MD5.2BB11CD367D49098D57A8638ADB5BCF6] - (.Cyberlink - NT CLMLServer.) -- C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [24576]

[MD5.0B591A91E838A1C6D11920491C42199E] - (.Cyberlink - Cyberlink MediaLibrary NT Service.) -- C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe [737379]

[MD5.69202C049779AE09470370F163363F13] - (...) -- c:\APPS\HIDSERVICE\HIDSERVICE.exe [49152]

[MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]

[MD5.A6A7AD767BF5141665F5C675F671B3E1] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe [185632]

[MD5.687217654134680371EF23FAFC5EC96D] - (.Pas de propriétaire - User-Level Modem Service.) -- C:\WINDOWS\system32\slserv.exe [45056]

[MD5.1CF3866E09FFE13CF280D4DDFA9F7DCF] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480]

[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]

[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]

[MD5.B5B4E81AADFDF95345186A023A99D2E6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [664576]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\papa\Local Settings\Application Data\Mozilla\Firefox\Profiles\4v776y1c.default\prefs.js

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [papa] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.4.0.233.) -- C:\Program Files\Mozilla Firefox\Plugins\npdivx32.dll

P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin8.dll

P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16290.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 1.4.0.233.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll

P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nosltd.com/getPlus+®,version=1.6.2.90] - (.NOS Microsystems Ltd. - getplusplusadobe16290.) -- C:\Program Files\NOS\bin\np_gp.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.11.1864] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.2.1924] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.857] - (.RealNetworks, Inc. - 6.0.12.857.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@viewpoint.com/VMP] - (.Pas de propriétaire - MetaStream 3 Plugin r4.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

P2 - FPN: [HKCU] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

~ Scan Firefox Browser in 00mn 01s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = alot.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-1386842626-2494137850-942225157-1006\Software\Microsoft\Internet Explorer\Main,Start Page = alot.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Bing

R1 - HKUS\S-1-5-21-1386842626-2494137850-942225157-1006\Software\Microsoft\Internet Explorer\Main,Search Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.17098 (vista_gdr.110420-1745)) -- C:\WINDOWS\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} . (.SFR - Aide à la navigation SFR.) -- C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [superCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1386842626-2494137850-942225157-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1386842626-2494137850-942225157-1006\..\Run: [superCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files\SuperCopier2\SuperCopier2.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Total Uninstall 5.lnk . (.Gavrila Martau.) -- C:\Program Files\Total Uninstall 5\Tu.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\papa\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\papa\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\papa\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~3\Office12\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} . (...) -- C:\Program Files\Real\RealPlayer\eb_act.ico

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Program Files\Real\RealPlayer\eb_act.ico

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS\system32\nwprovau.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash5r42.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{982B20C9-24D5-48A8-990D-D920053A0FE4}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{982B20C9-24D5-48A8-990D-D920053A0FE4}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{982B20C9-24D5-48A8-990D-D920053A0FE4}: DhcpNameServer = 192.168.1.1 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: AOL Connectivity Service (AOL ACS) . (.America Online, Inc. - AOL Connectivity Service.) - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: ATI Smart (ATI Smart) . (.Pas de propriétaire - ATI Smart.) - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) . (.Pas de propriétaire - CLSched Module.) - c:\APPS\Powercinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service (CyberLink Media Library Service) . (.Cyberlink - NT CLMLServer.) - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) . (...) - c:\APPS\HIDSERVICE\HIDSERVICE.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) . (.Protexis Inc. - PsiService PsiService.) - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HDReg.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 1.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 3.job

~ Scan Scheduled Task in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (AmdK7) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\amdk7.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MpKsl03705add) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6874AA97-2087-4DE9-9CA2-135D864BDD30}\MpKsl03705add.sys (.not file.)

O41 - Driver: (MpKsl109867bf) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{65AC4D9A-C13D-40A4-A218-F05C464BDF94}\MpKsl109867bf.sys (.not file.)

O41 - Driver: (MpKsl14a44097) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{947B9E26-C127-4A39-8C87-4B682B1FE37D}\MpKsl14a44097.sys (.not file.)

O41 - Driver: (MpKsl2437e915) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6257EF68-931B-4475-ACA6-70D94A140D8F}\MpKsl2437e915.sys (.not file.)

O41 - Driver: (MpKsl2d3ba0f8) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{77B2F9C9-021A-43DE-B575-5B61B59E6360}\MpKsl2d3ba0f8.sys (.not file.)

O41 - Driver: (MpKsl2e6fafaa) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{015BF7E0-39C0-4A59-BCAC-0EF4CFF45FA9}\MpKsl2e6fafaa.sys (.not file.)

O41 - Driver: (MpKsl3fff02ce) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FB4DA21A-E436-414E-8A4A-124ADF18A7C2}\MpKsl3fff02ce.sys (.not file.)

O41 - Driver: (MpKsl403d2c69) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{53691499-D256-4BE7-A71D-08EB41454C8A}\MpKsl403d2c69.sys (.not file.)

O41 - Driver: (MpKsl40dd7aa8) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EF036217-4708-4FD1-AB4D-A749D1741E83}\MpKsl40dd7aa8.sys (.not file.)

O41 - Driver: (MpKsl4a346b13) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKsl4a346b13.sys (.not file.)

O41 - Driver: (MpKsl58d6e915) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{77B2F9C9-021A-43DE-B575-5B61B59E6360}\MpKsl58d6e915.sys (.not file.)

O41 - Driver: (MpKsl84c44929) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FDBF8B81-C653-417B-9A87-7E94635ADB87}\MpKsl84c44929.sys (.not file.)

O41 - Driver: (MpKsl887109c2) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EA0C386F-A471-4F89-9233-4F40794B813D}\MpKsl887109c2.sys (.not file.)

O41 - Driver: (MpKsl8e37c0e8) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{947B9E26-C127-4A39-8C87-4B682B1FE37D}\MpKsl8e37c0e8.sys (.not file.)

O41 - Driver: (MpKsla32ef35b) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3029CA04-7A8B-43BB-9688-F293D9BD742D}\MpKsla32ef35b.sys (.not file.)

O41 - Driver: (MpKslae6cfbc7) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FDBF8B81-C653-417B-9A87-7E94635ADB87}\MpKslae6cfbc7.sys (.not file.)

O41 - Driver: (MpKslb48716bf) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{176E0042-9CE8-4ABC-BE6A-0F72E170E648}\MpKslb48716bf.sys (.not file.)

O41 - Driver: (MpKslc4691f9b) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{76703201-2630-49E1-8B14-D0DF14A9748D}\MpKslc4691f9b.sys (.not file.)

O41 - Driver: (MpKsle079a3da) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKsle079a3da.sys (.not file.)

O41 - Driver: (MpKsle109ddce) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{B6BDC2FE-A2DD-45DF-A80F-62B41B607536}\MpKsle109ddce.sys (.not file.)

O41 - Driver: (MpKslfa406b43) . (. - .) - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKslfa406b43.sys (.not file.)

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (Processor) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\processr.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

~ Scan Drivers in 00mn 01s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: Adobe Acrobat Reader 3.01 - (.Pas de propriétaire.) [HKLM] -- Adobe Acrobat Reader 3.01

O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: Aztech CNR2900 V.90 Modem - (.Pas de propriétaire.) [HKLM] -- SLAMRMO

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: Digital Camera Driver - (.Pas de propriétaire.) [HKLM] -- Digital Camera Driver

O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}

O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}

O42 - Logiciel: DivX Player - (.Pas de propriétaire.) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}

O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29}

O42 - Logiciel: Dream Vacation Solitaire FREE - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117164797}

O42 - Logiciel: Dual Mode Digital Camera Z - (.DSC.) [HKLM] -- {3C516E56-0B4B-4BDE-88A2-035B4D170A26}

O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}

O42 - Logiciel: EPSON Copy Utility 3 - (.Pas de propriétaire.) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}

O42 - Logiciel: EPSON Easy Photo Print - (.Pas de propriétaire.) [HKLM] -- {5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}

O42 - Logiciel: EPSON Image Clip Palette - (.Pas de propriétaire.) [HKLM] -- {314F6D08-A8B7-11D8-8446-0050BA1D384D}

O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities

O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner

O42 - Logiciel: EPSON Scan Assistant - (.Pas de propriétaire.) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}

O42 - Logiciel: EPSON Web-To-Page - (.Pas de propriétaire.) [HKLM] -- {7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}

O42 - Logiciel: ESDX4800_4200 Guide util. - (.Pas de propriétaire.) [HKLM] -- ESDX4800_4200 Guide util.

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs

O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Mozilla Firefox 5.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0.1 (x86 fr)

O42 - Logiciel: MyDefrag v4.3.1 - (.J.C. Kessels.) [HKLM] -- MyDefrag v4.3.1_is1

O42 - Logiciel: PIF DESIGNER - (.Pas de propriétaire.) [HKLM] -- {B90450DF-E781-46FD-B1F1-0C86DA40E443}

O42 - Logiciel: Packard Bell Toolbar 1.0 - (.NEC CI.) [HKLM] -- Dynamic Toolbar_is1

O42 - Logiciel: Picture Package Music Transfer - (.Sony Corporation.) [HKLM] -- {CE2121C6-C94D-4A73-8EA4-6943F33EE335}

O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD907315-705A-4475-A1A0-2A1245803E4D}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0173254-F442-4D04-9154-43FA157B83D0}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Sony Picture Utility - (.Sony Corporation.) [HKLM] -- {D5068583-D569-468B-9755-5FBF5848F46F}

O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.) [HKLM] -- SuperCopier2

O42 - Logiciel: Total Uninstall 5.8.0 - (.Gavrila Martau.) [HKLM] -- Total Uninstall 5_is1

O42 - Logiciel: Ulead Photo Explorer 8.0 SE Basic - (.Ulead Systems, Inc..) [HKLM] -- {D271DAE0-8D68-4C97-8356-A126D48A1D8C}

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2553975) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{59D8F1FE-7B08-4F0E-840C-D1BF93D22A6C}

O42 - Logiciel: Utilitaires Sierra - (.Pas de propriétaire.) [HKLM] -- Utilitaires Sierra

O42 - Logiciel: VideoLAN VLC media player 0.8.6i - (.VideoLAN Team.) [HKLM] -- VLC media player

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130

O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC

O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7

O42 - Logiciel: Windows Media Encoder 9 Series - (.Pas de propriétaire.) [HKLM] -- Windows Media Encoder 9

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\ALWIL Software]

[HKCU\Software\Adobe]

[HKCU\Software\America Online]

[HKCU\Software\AppDataLow\Software\IncrediMail_MediaBar_2]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Applications]

[HKCU\Software\Avira]

[HKCU\Software\Babylon]

[HKCU\Software\CDDB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Cyberlink]

[HKCU\Software\DivXNetworks]

[HKCU\Software\Dynamic Toolbar]

[HKCU\Software\EPSON]

[HKCU\Software\GNU]

[HKCU\Software\GibbHill]

[HKCU\Software\Google]

[HKCU\Software\HookNetwork]

[HKCU\Software\IM Providers]

[HKCU\Software\IM]

[HKCU\Software\IncrediMail]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lake]

[HKCU\Software\Leadertech]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\MGS]

[HKCU\Software\Macromedia]

[HKCU\Software\Magentic]

[HKCU\Software\MainConcept (Sonic)]

[HKCU\Software\MainConcept]

[HKCU\Software\MicroGaming]

[HKCU\Software\MicroVision]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\MyDefrag]

[HKCU\Software\Netscape]

[HKCU\Software\Neuf]

[HKCU\Software\Newsoft Folder Selector]

[HKCU\Software\Northcode Inc]

[HKCU\Software\Novell]

[HKCU\Software\ODBC]

[HKCU\Software\Oberon Media]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\RealNetworks]

[HKCU\Software\SEIKO EPSON]

[HKCU\Software\SFX TEAM]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Sonic]

[HKCU\Software\Sony Corporation]

[HKCU\Software\TeamViewer]

[HKCU\Software\Trymedia Systems]

[HKCU\Software\ULead]

[HKCU\Software\Ulead Systems]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\Windows Live]

[HKCU\Software\Winsudate]

[HKCU\Software\YahooPartnerToolbar]

[HKLM\Software\ALWIL Software]

[HKLM\Software\ATI Technologies Inc.]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Apple]

[HKLM\Software\Avira]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CA501A]

[HKLM\Software\CA505A]

[HKLM\Software\Claritas UK Ltd]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Conduit]

[HKLM\Software\CyberLink]

[HKLM\Software\DSC]

[HKLM\Software\DivXNetworks]

[HKLM\Software\EPSON]

[HKLM\Software\FotoNation]

[HKLM\Software\GEAR Software]

[HKLM\Software\GTek]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaRa]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Kodak]

[HKLM\Software\Lake]

[HKLM\Software\Licenses]

[HKLM\Software\MDMOptions]

[HKLM\Software\Macromedia]

[HKLM\Software\Magentic]

[HKLM\Software\MetaStream]

[HKLM\Software\MicroVision]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NEC Computers International]

[HKLM\Software\NOS]

[HKLM\Software\Neuf]

[HKLM\Software\NewSoft]

[HKLM\Software\Nikon]

[HKLM\Software\Novell]

[HKLM\Software\ODBC]

[HKLM\Software\OVTUsbCamera]

[HKLM\Software\Oberon Media]

[HKLM\Software\OmniVision]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RealNetworks]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\S3R521]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secure]

[HKLM\Software\Sierra OnLine]

[HKLM\Software\Skype]

[HKLM\Software\SmartLink]

[HKLM\Software\Sonic]

[HKLM\Software\Sony Corporation]

[HKLM\Software\Storm]

[HKLM\Software\SymDebug]

[HKLM\Software\SymNRT]

[HKLM\Software\Symantec]

[HKLM\Software\TeamViewer]

[HKLM\Software\Ulead Systems]

[HKLM\Software\Via4in1Driver]

[HKLM\Software\VideoLAN]

[HKLM\Software\Viewpoint]

[HKLM\Software\WholeSecurity]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Windows]

[HKLM\Software\Winsudate]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\mozilla.org]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 20/07/2011 - 20:51:36 - [350093536] ----D- C:\Program Files\Adobe

O43 - CFD: 10/03/2006 - 10:35:04 - [63566860] ----D- C:\Program Files\AOL 9.0

O43 - CFD: 26/04/2005 - 18:11:22 - [2187024] ----D- C:\Program Files\AOL Compagnon

O43 - CFD: 16/09/2008 - 15:08:14 - [231] ----D- C:\Program Files\AOL Games

O43 - CFD: 28/12/2009 - 15:35:22 - [2190208] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 08/08/2011 - 17:23:30 - [143621283] ----D- C:\Program Files\Avira

O43 - CFD: 08/08/2011 - 17:13:30 - [4068448] ----D- C:\Program Files\CCleaner

O43 - CFD: 16/08/2004 - 18:05:16 - [0] ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 26/04/2005 - 18:16:40 - [12584838] ----D- C:\Program Files\CyberLink

O43 - CFD: 27/11/2006 - 20:05:12 - [172865] ----D- C:\Program Files\Digital Camera

O43 - CFD: 03/08/2008 - 10:14:18 - [55073541] ----D- C:\Program Files\DivX

O43 - CFD: 26/04/2005 - 18:16:26 - [4618703] ----D- C:\Program Files\Dynamic Toolbar

O43 - CFD: 15/03/2006 - 19:00:02 - [158150209] ----D- C:\Program Files\epson

O43 - CFD: 20/07/2011 - 21:08:00 - [1164382424] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 21/08/2010 - 14:22:48 - [1094624] ----D- C:\Program Files\Google

O43 - CFD: 15/11/2009 - 20:23:34 - [718750] ----D- C:\Program Files\ImageServer

O43 - CFD: 20/07/2011 - 22:07:36 - [90032286] ----D- C:\Program Files\Incredijeux

O43 - CFD: 21/07/2011 - 14:08:42 - [64595091] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 17/06/2011 - 19:58:36 - [4487753] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 19/01/2010 - 19:38:20 - [1485871] ----D- C:\Program Files\iPod

O43 - CFD: 19/01/2010 - 19:38:20 - [92785452] ----D- C:\Program Files\iTunes

O43 - CFD: 02/11/2010 - 18:24:30 - [89372345] ----D- C:\Program Files\Java

O43 - CFD: 26/04/2005 - 18:11:22 - [711772] ----D- C:\Program Files\Learn2.com

O43 - CFD: 13/09/2008 - 15:06:56 - [2152579] ----D- C:\Program Files\Messenger

O43 - CFD: 09/04/2009 - 09:57:52 - [1544075] ----D- C:\Program Files\Microsoft

O43 - CFD: 24/11/2007 - 23:21:58 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 28/12/2009 - 15:57:54 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 20/07/2011 - 21:53:36 - [796628203] ----D- C:\Program Files\microsoft office

O43 - CFD: 25/11/2009 - 19:38:26 - [1559148] ----D- C:\Program Files\Microsoft Office Outlook Connector

O43 - CFD: 17/06/2011 - 20:00:16 - [38411899] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 24/03/2007 - 22:03:40 - [123285] ----D- C:\Program Files\Microsoft Sites publics français

O43 - CFD: 26/12/2007 - 18:04:34 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 09/04/2009 - 09:52:06 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 27/12/2009 - 12:36:34 - [6002385] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 02/11/2010 - 18:08:16 - [1387249] ----D- C:\Program Files\Microsoft Visual Studio 8

O43 - CFD: 02/11/2010 - 23:20:24 - [163363946] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 02/11/2010 - 18:28:26 - [8152064] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 21/08/2010 - 15:13:42 - [10374874] ----D- C:\Program Files\Movie Maker

O43 - CFD: 21/07/2011 - 00:42:22 - [39186583] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 02/11/2010 - 18:31:20 - [26521] ----D- C:\Program Files\MSBuild

O43 - CFD: 16/08/2004 - 18:03:08 - [19278399] ----D- C:\Program Files\MSN

O43 - CFD: 16/08/2004 - 18:03:38 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 27/12/2006 - 13:09:52 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 28/12/2009 - 15:37:12 - [7074116] ----D- C:\Program Files\MultiScreen

O43 - CFD: 21/07/2011 - 15:06:36 - [5543626] ----D- C:\Program Files\MyDefrag v4.3.1

O43 - CFD: 13/09/2008 - 15:01:34 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 27/12/2006 - 11:58:06 - [14873034] ----D- C:\Program Files\Neuf

O43 - CFD: 02/11/2010 - 18:07:30 - [494512] ----D- C:\Program Files\NOS

O43 - CFD: 21/08/2010 - 14:38:32 - [32374] ----D- C:\Program Files\Oberon Media

O43 - CFD: 16/08/2004 - 18:03:54 - [1711] ----D- C:\Program Files\Online Services

O43 - CFD: 20/12/2010 - 19:10:08 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 15/11/2009 - 20:39:36 - [61197710] ----D- C:\Program Files\PhotoDeluxe HE 3.0

O43 - CFD: 08/08/2011 - 16:54:42 - [516809] ----D- C:\Program Files\PhotoMail Maker

O43 - CFD: 22/05/2009 - 21:40:34 - [77342476] ----D- C:\Program Files\QuickTime

O43 - CFD: 26/04/2005 - 18:11:04 - [37677777] ----D- C:\Program Files\Real

O43 - CFD: 22/08/2009 - 09:59:14 - [36400897] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 16/08/2004 - 18:07:34 - [932] ----D- C:\Program Files\Services en ligne

O43 - CFD: 09/02/2007 - 16:53:24 - [3452061] ----D- C:\Program Files\Sierra On-Line

O43 - CFD: 26/04/2005 - 18:21:24 - [101920993] ----D- C:\Program Files\Sonic

O43 - CFD: 03/04/2009 - 10:41:24 - [113247301] ----D- C:\Program Files\Sony

O43 - CFD: 21/08/2010 - 14:50:30 - [7792913] ----D- C:\Program Files\SpinPalace

O43 - CFD: 20/07/2011 - 14:42:40 - [1226139] ----D- C:\Program Files\SuperCopier2

O43 - CFD: 20/07/2011 - 21:32:44 - [10539705] ----D- C:\Program Files\Total Uninstall 5

O43 - CFD: 27/11/2006 - 20:02:00 - [38696097] ----D- C:\Program Files\Ulead Systems

O43 - CFD: 16/08/2004 - 18:19:06 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 03/08/2008 - 10:05:34 - [33538437] ----D- C:\Program Files\VideoLAN

O43 - CFD: 26/04/2005 - 18:11:20 - [8103828] ----D- C:\Program Files\Viewpoint

O43 - CFD: 02/02/2011 - 10:53:38 - [141896478] ----D- C:\Program Files\Windows Live

O43 - CFD: 09/04/2009 - 09:49:24 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 09/04/2009 - 09:52:22 - [7201560] ----D- C:\Program Files\Windows Live Toolbar

O43 - CFD: 22/01/2011 - 18:33:44 - [14346481] ----D- C:\Program Files\Windows Media Components

O43 - CFD: 13/01/2007 - 10:04:52 - [3581070] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 13/09/2008 - 15:01:30 - [8273626] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 13/09/2008 - 15:01:30 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 22/01/2011 - 18:35:42 - [62025] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 16/08/2004 - 18:07:42 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 12/03/2010 - 14:59:46 - [0] ----D- C:\Program Files\Winsudate

O43 - CFD: 28/12/2009 - 15:34:58 - [40590] ----D- C:\Program Files\WinZip

O43 - CFD: 16/08/2004 - 18:11:16 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 03/08/2008 - 10:16:50 - [171018] ----D- C:\Program Files\XviD

O43 - CFD: 08/08/2011 - 17:38:06 - [4005139] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 20/07/2011 - 21:06:40 - [0] ----D- C:\Program Files\Zylom Games

O43 - CFD: 20/07/2011 - 20:51:30 - [7160580] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 26/04/2005 - 18:11:22 - [14525082] ----D- C:\Program Files\Fichiers Communs\AOL

O43 - CFD: 26/04/2005 - 18:11:20 - [7834824] ----D- C:\Program Files\Fichiers Communs\aolshare

O43 - CFD: 28/12/2009 - 15:36:50 - [51324587] ----D- C:\Program Files\Fichiers Communs\Apple

O43 - CFD: 22/01/2011 - 18:41:12 - [129561857] ----D- C:\Program Files\Fichiers Communs\Corel

O43 - CFD: 02/11/2010 - 18:59:32 - [92976] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 03/04/2009 - 09:43:30 - [32391] ----D- C:\Program Files\Fichiers Communs\Digi506

O43 - CFD: 07/03/2006 - 18:00:38 - [9044380] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 13/03/2011 - 10:52:30 - [98140438] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 02/11/2010 - 23:21:22 - [248431531] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 16/08/2004 - 18:06:36 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 21/07/2011 - 14:08:24 - [0] ----D- C:\Program Files\Fichiers Communs\NewSoft

O43 - CFD: 26/04/2005 - 18:11:12 - [2392177] ----D- C:\Program Files\Fichiers Communs\Nullsoft

O43 - CFD: 28/12/2009 - 15:36:54 - [475240] ----D- C:\Program Files\Fichiers Communs\Oberon Media

O43 - CFD: 16/08/2004 - 17:57:00 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 22/01/2011 - 18:42:32 - [1653312] ----D- C:\Program Files\Fichiers Communs\Protexis

O43 - CFD: 26/04/2005 - 18:17:30 - [18361872] ----D- C:\Program Files\Fichiers Communs\Real

O43 - CFD: 16/08/2004 - 18:06:40 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 26/04/2005 - 18:21:22 - [7854592] ----D- C:\Program Files\Fichiers Communs\Sonic Shared

O43 - CFD: 16/08/2004 - 17:56:56 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 15/08/2008 - 18:42:48 - [6252711] ----D- C:\Program Files\Fichiers Communs\SureThing Shared

O43 - CFD: 05/04/2009 - 21:31:42 - [0] ----D- C:\Program Files\Fichiers Communs\SWF Studio

O43 - CFD: 26/01/2008 - 14:53:20 - [2658976] ----D- C:\Program Files\Fichiers Communs\Symantec Shared

O43 - CFD: 13/09/2008 - 15:01:28 - [49666043] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 22/01/2011 - 18:35:42 - [56181469] ----D- C:\Program Files\Fichiers Communs\Ulead Systems

O43 - CFD: 09/04/2009 - 09:44:36 - [406145234] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 22/12/2007 - 22:24:48 - [42160401] -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller

O43 - CFD: 26/04/2005 - 18:17:30 - [352256] ----D- C:\Program Files\Fichiers Communs\xing shared

O43 - CFD: 22/01/2011 - 19:59:32 - [0] -SH-D- C:\Documents and Settings\papa\Application Data\.#

O43 - CFD: 25/09/2007 - 21:50:38 - [3355921] ----D- C:\Documents and Settings\papa\Application Data\Adobe

O43 - CFD: 15/04/2006 - 11:42:40 - [0] ----D- C:\Documents and Settings\papa\Application Data\AdobeUM

O43 - CFD: 30/09/2008 - 21:08:10 - [1545185] ----D- C:\Documents and Settings\papa\Application Data\Apple Computer

O43 - CFD: 22/01/2011 - 18:56:28 - [15525460] ----D- C:\Documents and Settings\papa\Application Data\Corel

O43 - CFD: 11/04/2009 - 12:00:10 - [0] ----D- C:\Documents and Settings\papa\Application Data\CyberLink

O43 - CFD: 20/04/2009 - 15:45:36 - [13368] ----D- C:\Documents and Settings\papa\Application Data\DivX

O43 - CFD: 21/11/2007 - 15:15:38 - [540] ----D- C:\Documents and Settings\papa\Application Data\EPSON

O43 - CFD: 28/01/2007 - 19:32:18 - [0] ----D- C:\Documents and Settings\papa\Application Data\Google

O43 - CFD: 14/05/2009 - 09:47:20 - [282] ----D- C:\Documents and Settings\papa\Application Data\Help

O43 - CFD: 04/01/2010 - 12:53:18 - [21614] ----D- C:\Documents and Settings\papa\Application Data\Icones

O43 - CFD: 16/08/2004 - 18:19:22 - [0] ----D- C:\Documents and Settings\papa\Application Data\Identities

O43 - CFD: 03/04/2009 - 09:43:12 - [0] ----D- C:\Documents and Settings\papa\Application Data\InstallShield

O43 - CFD: 11/03/2006 - 22:00:38 - [2138] ----D- C:\Documents and Settings\papa\Application Data\Leadertech

O43 - CFD: 12/03/2006 - 12:29:24 - [576] ----D- C:\Documents and Settings\papa\Application Data\Macromedia

O43 - CFD: 31/03/2011 - 14:15:52 - [28339630] -S--D- C:\Documents and Settings\papa\Application Data\Microsoft

O43 - CFD: 04/03/2006 - 10:57:54 - [0] ----D- C:\Documents and Settings\papa\Application Data\Microsoft Web Folders

O43 - CFD: 21/08/2010 - 15:01:54 - [13719903] ----D- C:\Documents and Settings\papa\Application Data\Mozilla

O43 - CFD: 26/04/2005 - 18:17:36 - [639355] ----D- C:\Documents and Settings\papa\Application Data\Real

O43 - CFD: 11/03/2006 - 22:03:00 - [0] ----D- C:\Documents and Settings\papa\Application Data\Sonic

O43 - CFD: 03/04/2009 - 10:46:46 - [1817493] ----D- C:\Documents and Settings\papa\Application Data\Sony Corporation

O43 - CFD: 26/04/2005 - 18:04:48 - [8547377] ----D- C:\Documents and Settings\papa\Application Data\Sun

O43 - CFD: 12/05/2006 - 22:15:06 - [575] ----D- C:\Documents and Settings\papa\Application Data\Symantec

O43 - CFD: 08/01/2010 - 22:05:26 - [110496] ----D- C:\Documents and Settings\papa\Application Data\TeamViewer

O43 - CFD: 02/06/2011 - 10:31:26 - [8704] ----D- C:\Documents and Settings\papa\Application Data\Template

O43 - CFD: 22/01/2011 - 18:54:30 - [422344120] ----D- C:\Documents and Settings\papa\Application Data\Ulead Systems

O43 - CFD: 18/06/2008 - 09:41:44 - [31644] ----D- C:\Documents and Settings\papa\Application Data\Viewpoint

O43 - CFD: 03/08/2008 - 10:07:38 - [371393] ----D- C:\Documents and Settings\papa\Application Data\vlc

O43 - CFD: 20/07/2011 - 20:51:16 - [830274] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Adobe

O43 - CFD: 03/08/2008 - 10:08:12 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Apple

O43 - CFD: 30/09/2008 - 21:08:10 - [667377] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Apple Computer

O43 - CFD: 19/06/2010 - 17:01:00 - [20491] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 20/07/2011 - 20:59:14 - [101230] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Conduit

O43 - CFD: 21/08/2010 - 14:22:48 - [70622] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Google

O43 - CFD: 04/05/2006 - 09:37:54 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Help

O43 - CFD: 13/02/2007 - 20:56:30 - [232960] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Identities

O43 - CFD: 21/07/2011 - 14:04:58 - [10022451906] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\IM

O43 - CFD: 19/06/2010 - 16:56:16 - [546992971] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Microsoft

O43 - CFD: 02/11/2010 - 18:05:00 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Microsoft Help

O43 - CFD: 12/08/2008 - 22:12:16 - [26350] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\MicroVision Applications

O43 - CFD: 25/06/2007 - 11:11:30 - [55233334] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Mozilla

O43 - CFD: 21/07/2011 - 14:08:00 - [126682] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\NewSoft

O43 - CFD: 22/12/2007 - 22:20:52 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\PCHealth

O43 - CFD: 18/07/2011 - 22:53:44 - [48006] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\PowerCinema

O43 - CFD: 30/12/2010 - 15:46:38 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\Temp

O43 - CFD: 26/04/2005 - 18:04:36 - [10449920] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142050}

O43 - CFD: 13/04/2009 - 14:17:30 - [0] ----D- C:\Documents and Settings\papa\Local Settings\Application Data\ÿ

~ Scan Program Folder in 01mn 08s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.A36EE93698802CD899F98BFD553D8185] - 08/08/2011 - 16:23:30 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]

O44 - LFC:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 08/08/2011 - 16:23:29 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]

O44 - LFC:[MD5.5B44C214F9CD9F590BE9125347610380] - 08/08/2011 - 16:23:28 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]

O44 - LFC:[MD5.E42E8E30FED81CAB2320E1BAE87C8FC0] - 08/08/2011 - 16:17:39 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1174902]

O44 - LFC:[MD5.2E53584F0976E1245F9D50C8121DBCD5] - 08/08/2011 - 16:16:22 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [1158]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 08/08/2011 - 16:16:14 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.9AF7AC67E558D9BDF4C8E974033009E0] - 08/08/2011 - 16:16:09 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.E8D1E299AE4DD086928F3006FB064891] - 08/08/2011 - 16:16:08 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 08/08/2011 - 16:15:46 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.A42D84A65EA187F00B88646AFD9482EC] - 08/08/2011 - 16:14:58 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [31910]

O44 - LFC:[MD5.E185BDA84E5F03F4E1D8DCA30E209277] - 08/08/2011 - 16:04:54 ---A- . (...) -- C:\WINDOWS\epplauncher.mif [1912]

O44 - LFC:[MD5.D206BDE03BEB6D8F140E397A56C0BA83] - 21/07/2011 - 13:13:51 ---A- . (.J.C. Kessels - MyDefrag Script Interpreter.) -- C:\WINDOWS\system32\MyDefragScreenSaver_v4.3.1.exe [1061888]

O44 - LFC:[MD5.986EA740F39697DA8B985E9E15F1B732] - 21/07/2011 - 13:13:51 ---A- . (.J.C. Kessels - MyDefrag Script Interpreter.) -- C:\WINDOWS\system32\MyDefragScreenSaver_v4.3.1.scr [475648]

O44 - LFC:[MD5.D1F18B55A7437FEC58E9E0E364836BAD] - 21/07/2011 - 12:52:14 ---A- . (...) -- C:\JavaRa.log [23671]

O44 - LFC:[MD5.AFCF879A9AB1A8DE3C8F281DA65485C3] - 20/07/2011 - 23:23:18 RSHA- . (...) -- C:\BOOT.INI [296]

O44 - LFC:[MD5.9C8AE8F253F1AB7942C7B8CEE306CC97] - 20/07/2011 - 23:23:17 ---A- . (...) -- C:\WINDOWS\system.ini [243]

O44 - LFC:[MD5.AF96FAB89E5197C1EB47342CBA054D6F] - 20/07/2011 - 23:23:17 ---A- . (...) -- C:\WINDOWS\win.ini [1493]

O44 - LFC:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 20/07/2011 - 10:33:06 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [137656]

O44 - LFC:[MD5.47B879406246FFDCED59E18D331A0E7D] - 20/07/2011 - 10:33:06 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]

O44 - LFC:[MD5.3FBC17ECAE69B85DC629540275B6CDEF] - 19/07/2011 - 16:49:54 ---A- . (...) -- C:\WINDOWS\EPISMF00.SWB [16574]

O44 - LFC:[MD5.751E87C5877BFFE91210FE26AA995D45] - 19/07/2011 - 06:36:10 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [549000]

~ Scan Files in 01mn 57s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "C:\Program Files\AOL 9.0\aol.exe" [Disabled] .(.America Online, Inc. - AOL.) -- C:\Program Files\AOL 9.0\aol.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\Network Diagnostic\xpnetdiag.exe" [Disabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\APPS\Inventime\my.exe" [Disabled] .(.Inventime - my.exe, built by Bravo Zulu Inc's, JToExe.) -- C:\APPS\Inventime\my.exe

O47 - AAKE:Key Export SP - "C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe" [Disabled] .(...) -- C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe" [Disabled] .(...) -- C:\Program Files\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Documents and Settings\papa\Local Settings\Temporary Internet Files\Content.IE5\BEVU22WA\incredimail_install[1].exe" [Enabled] .(...) -- C:\Documents and Settings\papa\Local Settings\Temporary Internet Files\Content.IE5\BEV

O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\ImApp.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\ImApp.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\IncMail.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\IncMail.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\ImpCnt.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\ImpCnt.exe (.not file.)

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Documents and Settings\papa\temp\TeamViewer\Version4\TeamViewer.exe" [Enabled] .(.TeamViewer GmbH.) -- C:\Documents and Settings\papa\temp\TeamViewer\Version4\TeamViewer.exe

O47 - AAKE:Key Export SP - "C:\Documents and Settings\papa\temp\TeamViewer\Version5\TeamViewer.exe" [Enabled] .(.TeamViewer GmbH - TeamViewer.) -- C:\Documents and Settings\papa\temp\TeamViewer\Version5\TeamViewer.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "C:\Program Files\microsoft office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\microsoft office\Office12\OUTLOOK.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

O47 - AAKE:Key Export SP - "C:\Documents and Settings\papa\Local Settings\Application Data\IM\Runtime\IncrediMail_Install.exe" [Enabled] .(..) -- C:\Documents and Settings\papa\Local Settings\Application Data\IM\Runtime\IncrediMail_Install.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

~ Scan Keys in 00mn 01s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{edcb2726-4628-11de-bbf6-00038a000015}\AutoRun\command. (...) -- F:\WDSetup.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="C:\DOCUME~1\papa\MESDOC~1\MESIMA~1\MrPhoto\ir50_32.dll" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll

O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \Drivers32\"msacm.ulmp3acm"="c:\Program Files\Fichiers communs\Ulead Systems\MPEG\ulmp3acm.acm" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"msacm.dvacm"="c:\Program Files\Fichiers communs\Ulead Systems\Vio\Dvacm.acm" . (...) -- (.not file.)

O52 - TDSD: \Drivers32\"msacm.MPEGacm"="c:\Program Files\Fichiers communs\Ulead Systems\MPEG\MPEGacm.acm" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"qtwmci32.dll"="[MCI] QuickTime for Windows" . (.Apple Computer, Inc. - Pas de description.) -- C:\WINDOWS\system32\qtwmci32.dll

O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.3 Codec" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"C:\DOCUME~1\papa\MESDOC~1\MESIMA~1\MrPhoto\ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"c:\Program Files\Fichiers communs\Ulead Systems\MPEG\ulmp3acm.acm"="Ulead ACM MP3 Codec" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O53 - SMSR:HKLM\...\startupreg\Adobe Photo Downloader [Key] . (...) -- C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe (.not file.)

O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O53 - SMSR:HKLM\...\startupreg\CorelGadget [Key] . (.Corel - Corel Digital Studio GadgetEB.) -- c:\Program Files\Fichiers communs\Ulead Systems\Gadget\GadgetEB.dll

O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O53 - SMSR:HKLM\...\startupreg\PHIME2002ASync [Key] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe

O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe

O53 - SMSR:HKLM\...\startupreg\Standby [Key] . (.Corel - Standby service.) -- c:\Program Files\Fichiers communs\Corel\Standby\Standby.exe

O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

~ Scan SMSR Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoCDBurning"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.BA88534A3CEB6161E7432438B9EA4F54] - 08/08/2011 - 10:08:52 ---A- . (.Sensaura - Sensaura WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS [400384]

O58 - SDL:[MD5.A886A879D2D05D942C3565C4D451EC23] - 08/08/2011 - 22:24:10 ---A- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS [622172]

O58 - SDL:[MD5.1140AB9938809700B46BB88E46D72A96] - 08/08/2011 - 20:51:56 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\WINDOWS\system32\drivers\aliide.sys [5248]

O58 - SDL:[MD5.95B4FB835E28AA1336CEEB07FD5B9398] - 08/08/2011 - 19:36:39 ---A- . (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) -- C:\WINDOWS\system32\drivers\amdagp.sys [43008]

O58 - SDL:[MD5.62D318E9A0C8FC9B780008E724283707] - 08/08/2011 - 20:52:00 ---A- . (.Advanced System Products, Inc. - AdvanSys SCSI Controller Driver.) -- C:\WINDOWS\system32\drivers\asc.sys [26496]

O58 - SDL:[MD5.5D8DE112AA0254B907861E9E9C31D597] - 08/08/2011 - 20:51:58 ---A- . (.Advanced System Products, Inc. - AdvanSys Ultra-Wide PCI SCSI Driver.) -- C:\WINDOWS\system32\drivers\asc3550.sys [14848]

O58 - SDL:[MD5.D880831279ED91F9A4190A2DB9539EA9] - 08/08/2011 - 17:11:05 ---A- . (.Windows ® 2000 DDK provider - TR Manager.) -- C:\WINDOWS\system32\drivers\asctrm.sys [8552]

O58 - SDL:[MD5.49C75E63B8B23B0E534447BA25CE2E76] - 08/08/2011 - 21:14:46 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [786944]

O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 08/08/2011 - 14:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]

O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 08/08/2011 - 10:33:06 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]

O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 08/08/2011 - 14:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]

O58 - SDL:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 08/08/2011 - 10:33:06 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [137656]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 08/08/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.E3726AD522D0BDAE090671048C991AB3] - 08/08/2011 - 16:04:44 ---A- . (.CMD Technology, Inc. - Pilote de bus PCI IDE CMD.) -- C:\WINDOWS\system32\drivers\cmdide.sys [6656]

O58 - SDL:[MD5.7A0B457EEFEF8CBAA0CC44C8819113BD] - 08/08/2011 - 11:41:16 ---A- . (.FotoNation Ltd. - USB Driver for Digital Camera.) -- C:\WINDOWS\system32\drivers\CoachUsb.sys [46944]

O58 - SDL:[MD5.614CA0BFA09861E42AD8D14B83540758] - 08/08/2011 - 16:31:14 ---A- . (.Accapella Ltd. - Video Capture Minidriver for Digital Camera.) -- C:\WINDOWS\system32\drivers\CoachVc.sys [44256]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 08/08/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.E550E7418984B65A78299D248F0A7F36] - 08/08/2011 - 20:52:16 ---A- . (.Mylex Corporation - Mylex Disk Array Controller Driver.) -- C:\WINDOWS\system32\drivers\dac2w2k.sys [179584]

O58 - SDL:[MD5.B7186B33B6CF3A23841015531E6E7D68] - 08/08/2011 - 17:41:08 ---A- . (.VIA Technologies, Inc. - NDIS 5.0 miniport driver.) -- C:\WINDOWS\system32\drivers\fetnd5b.sys [41984]

O58 - SDL:[MD5.F2F431D1573EE632975C524418655B84] - 08/08/2011 - 15:32:48 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [23400]

O58 - SDL:[MD5.B573984F1AE1A0C6C158B73A30285A2D] - 08/08/2011 - 17:42:48 ---A- . (...) -- C:\WINDOWS\system32\drivers\MPIXVID.SYS [104593]

O58 - SDL:[MD5.3F4BB95E5A44F3BE34824E8E7CAF0737] - 08/08/2011 - 20:52:12 ---A- . (.American Megatrends Inc. - MegaRAID RAID Controller Driver for Windows Whistler 32.) -- C:\WINDOWS\system32\drivers\mraid35x.sys [17280]

O58 - SDL:[MD5.33F438BD66F2877BBB5567E49208A346] - 08/08/2011 - 15:08:18 ---A- . (.Pas de propriétaire - mtlmnt5 driver.) -- C:\WINDOWS\system32\drivers\mtlmnt5.sys [210128]

O58 - SDL:[MD5.4D98402AE75097E362CC8ED94079D94C] - 08/08/2011 - 16:33:46 ---A- . (.Pas de propriétaire - Data pump driver.) -- C:\WINDOWS\system32\drivers\mtlstrm.sys [1293192]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 08/08/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.6AF0557BBFFDDE15B985F2C1B82D43E0] - 08/08/2011 - 16:25:56 ---A- . (.Pas de propriétaire - NtMtlFax driver.) -- C:\WINDOWS\system32\drivers\ntmtlfax.sys [162136]

O58 - SDL:[MD5.C5739BE3A8EECDF951955A38E1741F45] - 08/08/2011 - 12:00:00 ---A- . (.OmniVision Technologies, Inc. - Stream Class Mini Driver.) -- C:\WINDOWS\system32\drivers\omcamvid.sys [167816]

O58 - SDL:[MD5.24573BE178D6459D541DF7643100D251] - 08/08/2011 - 12:00:00 ---A- . (.OmniVision Technologies, Inc - USB Camera Driver.) -- C:\WINDOWS\system32\drivers\ovtcamd.sys [24438]

O58 - SDL:[MD5.07C02C892E8E1A72D6BF35004F0E9C5E] - 08/08/2011 - 02:13:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\WINDOWS\system32\drivers\PCASp50.sys [20096]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 08/08/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.0A63FB54039EB5662433CABA3B26DBA7] - 08/08/2011 - 20:52:20 ---A- . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\system32\drivers\ql1080.sys [40320]

O58 - SDL:[MD5.156ED0EF20C15114CA097A34A30D8A01] - 08/08/2011 - 20:52:20 ---A- . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\system32\drivers\ql12160.sys [45312]

O58 - SDL:[MD5.907F0AEEA6BC451011611E732BD31FCF] - 08/08/2011 - 20:52:18 ---A- . (.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) -- C:\WINDOWS\system32\drivers\ql1280.sys [49024]

O58 - SDL:[MD5.E9AAA0092D74A9D371659C4C38882E12] - 08/08/2011 - 21:41:40 ---A- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\drivers\RecAgent.sys [13776]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 08/08/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 08/08/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 08/08/2011 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.6B33D0EBD30DB32E27D1D78FE946A754] - 08/08/2011 - 19:36:39 ---A- . (.Silicon Integrated Systems Corporation - SiS NT AGP Filter.) -- C:\WINDOWS\system32\drivers\sisagp.sys [40960]

O58 - SDL:[MD5.769D8F1C7BBDB5C0C1EB157575DAD0BA] - 08/08/2011 - 15:11:56 ---A- . (.Pas de propriétaire - slntamr driver.) -- C:\WINDOWS\system32\drivers\slntamr.sys [516616]

O58 - SDL:[MD5.EDD0BCB2B8548A95B2633C249BFAEEC7] - 08/08/2011 - 15:12:46 ---A- . (.Pas de propriétaire - HAL driver.) -- C:\WINDOWS\system32\drivers\slnthal.sys [85520]

O58 - SDL:[MD5.3B4A3B282F62FE5D75127D22B26909ED] - 08/08/2011 - 00:19:32 ---A- . (.Vireo Software - Description string for SlWdmSup driver.) -- C:\WINDOWS\system32\drivers\slwdmsup.sys [39348]

O58 - SDL:[MD5.83C0F71F86D3BDAF915685F3D568B20E] - 08/08/2011 - 21:07:44 ---A- . (.Adaptec, Inc. - Adaptec AIC-6x60 series SCSI miniport.) -- C:\WINDOWS\system32\drivers\sparrow.sys [19072]

O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 08/08/2011 - 14:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.1FF3217614018630D0A6758630FC698C] - 08/08/2011 - 21:07:34 ---A- . (.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) -- C:\WINDOWS\system32\drivers\symc810.sys [16256]

O58 - SDL:[MD5.070E001D95CF725186EF8B20335F933C] - 08/08/2011 - 21:07:36 ---A- . (.LSI Logic - Symbios 8XX SCSI Miniport Driver.) -- C:\WINDOWS\system32\drivers\symc8xx.sys [32640]

O58 - SDL:[MD5.80AC1C4ABBE2DF3B738BF15517A51F2C] - 08/08/2011 - 21:07:40 ---A- . (.LSI Logic - Symbios Hi-Perf SCSI Miniport Driver.) -- C:\WINDOWS\system32\drivers\sym_hi.sys [28384]

O58 - SDL:[MD5.BF4FAB949A382A8E105F46EBB4937058] - 08/08/2011 - 21:07:42 ---A- . (.LSI Logic - Symbios Ultra3 SCSI Miniport Driver.) -- C:\WINDOWS\system32\drivers\sym_u3.sys [30688]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 08/08/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.1B698A51CD528D8DA4FFAED66DFC51B9] - 08/08/2011 - 20:52:22 ---A- . (.Promise Technology, Inc. - Gestionnaire de miniport ULTRA66 de Promise.) -- C:\WINDOWS\system32\drivers\ultra.sys [36736]

O58 - SDL:[MD5.E4FD8C4BC5F9A44F5D8EC9991F98F5D1] - 08/08/2011 - 10:16:58 ---A- . (.Atmel Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\system32\drivers\USBCamAT.sys [25575]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 08/08/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.0E3E3FAE3A0A58B8D936A8E841A17D16] - 08/08/2011 - 03:41:00 ---A- . (.VIA Technologies, Inc. - VIA NT AGP Filter.) -- C:\WINDOWS\system32\drivers\VIAAGP1.SYS [26880]

O58 - SDL:[MD5.0A716C08CB13C3A8F4F51E882DBF7416] - 08/08/2011 - 15:13:04 ---A- . (.America Online, Inc. - Wan Miniport (ATW).) -- C:\WINDOWS\system32\drivers\wanatw4.sys [33588]

O58 - SDL:[MD5.C3D8C3EF38CF75A4AEA0549D4D5049D5] - 08/08/2011 - 01:26:02 ---A- . (.Pas de propriétaire - winddx driver.) -- C:\WINDOWS\system32\drivers\winddx.sys [14976]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 08/08/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\aliide.sys - AliIde(AliIde) .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE

O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\amdagp.sys - Pilote de filtre du bus AMD AGP(amdagp) .(.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) - LEGACY_AMDAGP

O64 - Services: CurCS - 21/04/2011 - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur(AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE

O64 - Services: CurCS - 20/07/2011 - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard(AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\asc.sys - asc(asc) .(.Advanced System Products, Inc. - AdvanSys SCSI Controller Driver.) - LEGACY_ASC

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\asc3550.sys - asc3550(asc3550) .(.Advanced System Products, Inc. - AdvanSys Ultra-Wide PCI SCSI Driver.) - LEGACY_ASC3550

O64 - Services: CurCS - 17/06/2010 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO

O64 - Services: CurCS - 20/07/2011 - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 20/07/2011 - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB

O64 - Services: CurCS - 28/01/2005 - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe - CyberLink Background Capture Service (CBCS)(CLCapSvc) .(.Pas de propriétaire - CLCapSvc Module.) - LEGACY_CLCAPSVC

O64 - Services: CurCS - 28/01/2005 - c:\APPS\Powercinema\Kernel\TV\CLSched.exe - CyberLink Task Scheduler (CTS)(CLSched) .(.Pas de propriétaire - CLSched Module.) - LEGACY_CLSCHED

O64 - Services: CurCS - 23/08/2001 - C:\WINDOWS\system32\DRIVERS\cmdide.sys - CmdIde(CmdIde) .(.CMD Technology, Inc. - Pilote de bus PCI IDE CMD.) - LEGACY_CMDIDE

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\dac2w2k.sys - dac2w2k(dac2w2k) .(.Mylex Corporation - Mylex Disk Array Controller Driver.) - LEGACY_DAC2W2K

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - ??/??/???? - C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(...) - LEGACY_ERASERUTILREBOOTDRV

O64 - Services: CurCS - 07/01/2005 - c:\APPS\HIDSERVICE\HIDSERVICE.exe - Generic Service for HID Keyboard Input Collections (GenericHidService) .(...) - LEGACY_GENERICHIDSERVICE

O64 - Services: CurCS - 13/03/2011 - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6874AA97-2087-4DE9-9CA2-135D864BDD30}\MpKsl03705add.sys (.not file.) - MpKsl03705add (MpKsl03705add) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{65AC4D9A-C13D-40A4-A218-F05C464BDF94}\MpKsl109867bf.sys (.not file.) - MpKsl109867bf (MpKsl109867bf) .(...) - L

O64 - Services: CurCS - ??/??/???? - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{947B9E26-C127-4A39-8C87-4B682B1FE37D}\MpKsl14a44097.sys (.not file.) - MpKsl14a44097 (MpKsl14a44097) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6257EF68-931B-4475-ACA6-70D94A140D8F}\MpKsl2437e915.sys (.not file.) - MpKsl2437e915 (MpKsl2437e915) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{77B2F9C9-021A-43DE-B575-5B61B59E6360}\MpKsl2d3ba0f8.sys (.not file.) - MpKsl2d3ba0f8 (MpKsl2d3ba0f8) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{015BF7E0-39C0-4A59-BCAC-0EF4CFF45FA9}\MpKsl2e6fafaa.sys (.not file.) - MpKsl2e6fafaa (MpKsl2e6fafaa) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FB4DA21A-E436-414E-8A4A-124ADF18A7C2}\MpKsl3fff02ce.sys (.not file.) - MpKsl3fff02ce (MpKsl3fff02ce) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{53691499-D256-4BE7-A71D-08EB41454C8A}\MpKsl403d2c69.sys (.not file.) - MpKsl403d2c69 (MpKsl403d2c69) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EF036217-4708-4FD1-AB4D-A749D1741E83}\MpKsl40dd7aa8.sys (.not file.) - MpKsl40dd7aa8 (MpKsl40dd7aa8) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKsl4a346b13.sys (.not file.) - MpKsl4a346b13 (MpKsl4a346b13) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{77B2F9C9-021A-43DE-B575-5B61B59E6360}\MpKsl58d6e915.sys (.not file.) - MpKsl58d6e915 (MpKsl58d6e915) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FDBF8B81-C653-417B-9A87-7E94635ADB87}\MpKsl84c44929.sys (.not file.) - MpKsl84c44929 (MpKsl84c44929) .(...) - L

O64 - Services: CurCS - ??/??/???? - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{EA0C386F-A471-4F89-9233-4F40794B813D}\MpKsl887109c2.sys (.not file.) - MpKsl887109c2 (MpKsl887109c2) .(...) - L

O64 - Services: CurCS - ??/??/???? - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{947B9E26-C127-4A39-8C87-4B682B1FE37D}\MpKsl8e37c0e8.sys (.not file.) - MpKsl8e37c0e8 (MpKsl8e37c0e8) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3029CA04-7A8B-43BB-9688-F293D9BD742D}\MpKsla32ef35b.sys (.not file.) - MpKsla32ef35b (MpKsla32ef35b) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FDBF8B81-C653-417B-9A87-7E94635ADB87}\MpKslae6cfbc7.sys (.not file.) - MpKslae6cfbc7 (MpKslae6cfbc7) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{176E0042-9CE8-4ABC-BE6A-0F72E170E648}\MpKslb48716bf.sys (.not file.) - MpKslb48716bf (MpKslb48716bf) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{76703201-2630-49E1-8B14-D0DF14A9748D}\MpKslc4691f9b.sys (.not file.) - MpKslc4691f9b (MpKslc4691f9b) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKsle079a3da.sys (.not file.) - MpKsle079a3da (MpKsle079a3da) .(...) - L

O64 - Services: CurCS - ??/??/???? - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{B6BDC2FE-A2DD-45DF-A80F-62B41B607536}\MpKsle109ddce.sys (.not file.) - MpKsle109ddce (MpKsle109ddce) .(...) - L

O64 - Services: CurCS - ??/??/???? - c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F5B8051D-AA0F-4342-9077-3C7B880727F2}\MpKslfa406b43.sys (.not file.) - MpKslfa406b43 (MpKslfa406b43) .(...) - L

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\mraid35x.sys - mraid35x(mraid35x) .(.American Megatrends Inc. - MegaRAID RAID Controller Driver for Windows.) - LEGACY_MRAID35X

O64 - Services: CurCS - 16/02/2003 - C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys - Mtlstrm(Mtlstrm) .(.Pas de propriétaire - Data pump driver.) - LEGACY_MTLSTRM

O64 - Services: CurCS - 24/07/2007 - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe - Protexis Licensing V2(PSI_SVC_2) .(.Protexis Inc. - PsiService PsiService.) - LEGACY_PSI_SVC_2

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql1080.sys - ql1080(ql1080) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL1080

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql12160.sys - ql12160(ql12160) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL12160

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ql1280.sys - ql1280(ql1280) .(.QLogic Corporation - Miniport Driver for QLogic ISP PCI Adapters.) - LEGACY_QL1280

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\DRIVERS\RecAgent.sys - RecAgent(RecAgent) .(.Smart Link - Pas de description.) - LEGACY_RECAGENT

O64 - Services: CurCS - 16/02/2003 - C:\WINDOWS\system32\DRIVERS\Slnthal.sys - SlNtHal(SlNtHal) .(.Pas de propriétaire - HAL driver.) - LEGACY_SLNTHAL

O64 - Services: CurCS - 17/01/2003 - C:\WINDOWS\system32\slserv.exe - SmartLinkService(SLService) .(.Pas de propriétaire - User-Level Modem Service.) - LEGACY_SLSERVICE

O64 - Services: CurCS - 17/01/2003 - C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys - SlWdmSup(SlWdmSup) .(.Vireo Software - Description string for SlWdmSup driver.) - LEGACY_SLWDMSUP

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sparrow.sys - Sparrow(Sparrow) .(.Adaptec, Inc. - Adaptec AIC-6x60 series SCSI miniport.) - LEGACY_SPARROW

O64 - Services: CurCS - 17/06/2010 - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - No object(No service) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\symc810.sys - symc810(symc810) .(.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) - LEGACY_SYMC810

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\symc8xx.sys - symc8xx(symc8xx) .(.LSI Logic - Symbios 8XX SCSI Miniport Driver.) - LEGACY_SYMC8XX

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sym_hi.sys - sym_hi(sym_hi) .(.LSI Logic - Symbios Hi-Perf SCSI Miniport Driver.) - LEGACY_SYM_HI

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\sym_u3.sys - sym_u3(sym_u3) .(.LSI Logic - Symbios Ultra3 SCSI Miniport Driver.) - LEGACY_SYM_U3

O64 - Services: CurCS - 17/08/2001 - C:\WINDOWS\system32\DRIVERS\ultra.sys - ultra(ultra) .(.Promise Technology, Inc. - Gestionnaire de miniport ULTRA66 de Promise.) - LEGACY_ULTRA

~ Scan Services in 00mn 03s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <aol.exe> <>[HKLM\..\Shell\open\Command] (.America Online, Inc. - AOL.) -- C:\PROGRA~1\AOL9~1.0\aol.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] Google - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - (ALOT Recherche) - ALOT Search Powered by Google

O69 - SBI: SearchScopes [HKCU] {7a14ea26-cbb6-4fd1-b802-49415c8e9ee6} - (Wibeez) - Wibeez : butinez sur la toile avec notre moteur de recherche français

O69 - SBI: SearchScopes [HKCU] {8B63A8D6-BBED-4341-8867-790E5F524C96} - (MyStart Search) - http://mystart.incredigames.com

O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {CD10120B-C165-4f8d-8C74-639629E238FF} - (MyStart Rechercher) - http://mystart.magentic.com

O69 - SBI: SearchScopes [HKCU] {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [DefaultScope] - (MyStart Search) - http://mystart.incredimail.com

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll [24576]

[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe [196608]

[MD5.FE9176A1C2B4A81AFDE6EDD74A6A1DEE] [sPRF][27/10/2009] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1956816]

[MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll [172032]

~ Scan Files in 00mn 00s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8606 - (08/08/2011)

Clés trouvées (Keys found) : 21

Valeurs trouvées (Values found) : 1

Dossiers trouvés (Folders found) : 7

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\MozillaPlugins\@viewpoint.com/VMP] =>Adware.MetaStream

[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit

[HKLM\Software\Classes\axmetastream.metastreamctl] =>Adware.MetaStream

[HKLM\Software\Classes\axmetastream.metastreamctl.1] =>Adware.MetaStream

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary] =>Adware.MetaStream

[HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1] =>Adware.MetaStream

[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit

[HKLM\Software\Classes\pbfrv2.pbfrv2] =>Adware.2020search

[HKLM\Software\Classes\Toolbar.CT2724386] =>Toolbar.Agent

[HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream

[HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d}] =>Adware.2020search

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}] =>Adware.CometSystems

[HKLM\Software\Classes\Interface\{6e4c89cf-3061-4ee4-b22a-b7a8aaea5cb3}] =>Adware.Bandoo

[HKLM\Software\Conduit] =>Toolbar.Conduit

[HKLM\Software\MetaStream] =>Adware.MetaStream

[HKCU\Software\Trymedia Systems] =>Adware.Trymedia

[HKLM\Software\Viewpoint] =>Adware.MetaStream

[HKCU\Software\Winsudate] =>Adware.Gibmedia

[HKLM\Software\Winsudate] =>Adware.Gibmedia

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer] =>Adware.MetaStream

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d} =>Adware.2020search

C:\Program Files\dynamic toolbar =>Adware.2020search

C:\Program Files\Viewpoint =>Adware.MetaStream

C:\Program Files\Winsudate =>Adware.Gibmedia

C:\Documents and Settings\papa\Application Data\Viewpoint =>Adware.MetaStream

C:\Documents and Settings\papa\Local Settings\Application Data\Conduit =>Toolbar.Conduit

~ Scan Additionnel in 00mn 07s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : livebox.home

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 209.85.148.103, 209.85.148.99, 209.85.148.104, 209.85.148.106

209.85.148.105, 209.85.148.147

Aliases: www.google.fr, www.google.com

~ Scan DNS in 00mn 02s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 08/08/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 08/08/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SR - | Auto 08/08/2011 1123440 | (AOL ACS) . (.America Online, Inc..) - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

SR - | Auto 08/08/2011 132424 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

SS - | Auto 08/08/2011 516096 | (ATI Smart) . (...) - C:\WINDOWS\system32\ati2sgag.exe

SR - | Auto 08/08/2011 176220 | (CLCapSvc) . (...) - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe

SR - | Auto 08/08/2011 110682 | (CLSched) . (...) - c:\APPS\Powercinema\Kernel\TV\CLSched.exe

SR - | Auto 08/08/2011 24576 | (CyberLink Media Library Service) . (.Cyberlink.) - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

SS - | Demand 08/08/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SR - | Auto 08/08/2011 49152 | (GenericHidService) . (...) - c:\APPS\HIDSERVICE\HIDSERVICE.exe

SS - | Demand 08/08/2011 656168 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 08/08/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 08/08/2011 185632 | (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe

SR - | Auto 08/08/2011 45056 | (SLService) . (...) - C:\WINDOWS\system32\slserv.exe

SS - | Demand 08/08/2011 1252232 | (Symantec Core LC) . (...) - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

~ Scan Services in 00mn 03s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by papa at 08/08/2011 17:41:41

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys PCIIDEX.SYS

1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82F7CAB8]

3 CLASSPNP[0xF85B6FD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\0000009a[0x82FD49E8]

5 ACPI[0xF84AC620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x82F15940]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 05s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by papa at 08/08/2011 17:41:43

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 07s

 

 

 

End of the scan (1306 lines in 03mn 45s)(0)

Modifié le 9 août 2011 par ffrodon

[pear]

Bonsoir,

 

Télécharger Rogue Killer par Tigzy sur le bureau

Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur

Si le programme bloque, cliquez droit sur le lien ci-dessus->Enregistrer sous..

Dans la fenêtre qui s'ouvre renommez Roguekiller ->Winlogon.exe

Quittez tous tes programmes en cours et lancez le

Quand on vous le demande, tapez 1 et valider

Un rapport (RKreport.txt) apparait sur le bureau

montrant les processus infectieux

Copier/Coller le contenu dans la réponse

 

 

Relancez Rogue Killer

Nettoyage du registre Passer en Mode 2

 

Téléchargez AD-Remover sur le bureau

 

Déconnectez-vous et fermez toutes les applications en cours

Cliquer sur "Ad-R.exe" pour lancer l'installation et laisser les paramètres par défaut .

Une fenêtre s'affichera Vous prévenant des risques de l'utilisation de ce logiciel

Cliquez sur "OUI"

Double cliquer sur l'icône Ad-remover sur le bureau

Au menu principal choisir l'optionScanner et Validez

 

Patientez pendant le travail de l'outil.

Poster le rapport qui apparait à la fin .

Il est sauvegardé aussi sous C:\Ad-report.log

 

Ensuite

 

Relancer Ad- remover , choisir l'option Nettoyer

 

Il y aura 2 rapports à poster après :Scanner et Nettoyer

 

Une fois la désinfrction terminée, mais pas avant:

désinstaller AD-Remover, lancez avec l'option D puis supprimer l'icône du bureau.

 

 

 

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

Exécuter avec droits d'administrateur.

Sous Vista , désactiver l'Uac

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant de mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Et un fichier Mbam.log apparaitra

 

 

 

Nettoyage

Relancez Mbam(Malewares'Bytes)

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

[ffrodon]

Bonjour Pear,

Merci de me consacrer un peu de temps a nouveau. Le rapport rogueKiller :

 

RogueKiller V5.3.1 [06/08/2011] par Tigzy

contact sur Forum Sciences / Forum Informatique - Sur la Toile (SLT)

mail: tigzyRK<at>gmail<dot>com

Remontees: [RogueKiller] Remontées (1/31)

 

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version

Demarrage : Mode normal

Utilisateur: papa [Droits d'admin]

Mode: Recherche -- Date : 08/08/2011 18:52:55

 

Processus malicieux: 0

 

Entrees de registre: 1

[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

 

Fichier HOSTS:

127.0.0.1 localhost

 

 

Termine : << RKreport[1].txt >>

RKreport[1].txt

[pear]

Relancez en option 2 et faites l'ensemble des procédures.

[ffrodon]

Scan

 

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 12/04/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: http://www.teamxscript.org

 

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 18:58:20 le 08/08/2011, Mode normal

 

Microsoft Windows XP Édition familiale Service Pack 3 (X86)

papa@HUBERT ( )

 

============== RECHERCHE ==============

 

 

Fichier trouvé: C:\WINDOWS\system32\ConduitEngine.tmp

Dossier trouvé: C:\Documents and Settings\papa\Local Settings\Application Data\Conduit

Dossier trouvé: C:\Program Files\Dynamic Toolbar

Dossier trouvé: C:\Documents and Settings\papa\Application Data\Viewpoint

Dossier trouvé: C:\Documents and Settings\All Users\Application Data\Viewpoint

Dossier trouvé: C:\Program Files\Viewpoint

Dossier trouvé: C:\Program Files\Winsudate

 

Clé trouvée: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Clé trouvée: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Clé trouvée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}

Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl

Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1

Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary

Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1

Clé trouvée: HKLM\Software\Classes\Conduit.Engine

Clé trouvée: HKLM\Software\Classes\Toolbar.CT2724386

Clé trouvée: HKLM\Software\Conduit

Clé trouvée: HKLM\Software\MetaStream

Clé trouvée: HKLM\Software\Viewpoint

Clé trouvée: HKLM\Software\Winsudate

Clé trouvée: HKCU\Software\Dynamic Toolbar

Clé trouvée: HKCU\Software\Trymedia Systems

Clé trouvée: HKCU\Software\Winsudate

Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}

Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}

Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Clé trouvée: HKLM\Software\MozillaPlugins\@viewpoint.com/VMP

 

Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}

 

 

============== SCAN ADDITIONNEL ==============

 

**** Mozilla Firefox Version [5.0.1 (fr)] ****

 

Plugins\npdivx32.dll (DivX,Inc.)

Plugins\npDivxPlayerPlugin.dll (DivX, Inc)

HKLM_MozillaPlugins\@viewpoint.com/VMP (x)

HKLM_MozillaPlugins\Adobe Reader (x)

Searchplugins\bing.xml ( hxxp://www.bing.com/search)

Components\browsercomps.dll (Mozilla Foundation)

 

-- C:\Documents and Settings\papa\Application Data\Mozilla\FireFox\Profiles\4v776y1c.default --

Extensions\nostmp (?)

Searchplugins\MyStart Search.xml (?)

Prefs.js - browser.download.dir, C:\\Documents and Settings\\papa\\Bureau

Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\papa\\Mes documents\\HUBERT

Prefs.js - browser.search.defaultenginename, MyStart Search

Prefs.js - browser.search.selectedEngine, Google

Prefs.js - browser.startup.homepage, hxxp://www.google.fr/

Prefs.js - browser.startup.homepage_override.buildID, 20110707182747

Prefs.js - browser.startup.homepage_override.mstone, rv:5.0.1

Prefs.js - keyword.URL, hxxp://mystart.incredimail.com/?loc=ff_address_bar&search=

 

========================================

 

**** Internet Explorer Version [7.0.5730.11] ****

 

HKCU_Main|Search bar - hxxp://g.msn.fr/0SEFRFR/SAOS02

HKCU_Main|Search Page - hxxp://home.microsoft.com/access/allinone.asp

HKCU_Main|Start Page - hxxp://home.alot.com/?client_id=22BAADA001CBB5A20013ECB5&install_time=2011-01-16T17:23:48Z&src_id=11451&camp_id=1226&tb_...

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKCU_SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - "ALOT Recherche" (hxxp://search.alot.com/web?q={searchTerms}&pr=prov&client_id=7404308001CC131E01B...)

HKCU_SearchScopes\{7a14ea26-cbb6-4fd1-b802-49415c8e9ee6} - "Wibeez" (hxxp://www.wibeez.com/annuaire?search&q={searchTerms})

HKCU_SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96} - "MyStart Search" (hxxp://mystart.incredigames.com/?search={searchTerms}&loc=incredigame_search_box)

HKCU_SearchScopes\{CD10120B-C165-4f8d-8C74-639629E238FF} - "MyStart Rechercher" (hxxp://mystart.magentic.com/?search={searchTerms}&loc=search_box)

HKCU_Toolbar\ShellBrowser|{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} (x)

HKCU_Toolbar\WebBrowser|{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} (x)

HKCU_Toolbar\WebBrowser|{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} (x)

HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)

HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)

HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\Neuf\Kit\9launch.exe (SFR)

HKLM_Extensions\{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - "Real.com" (C:\Program Files\Real\RealPlayer\eb_inact.ico)

HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)

BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 0 Fichier(s)

 

C:\Ad-Report-SCAN[1].txt - 08/08/2011 18:58:31 (5121 Octet(s))

 

Fin à: 18:59:18, 08/08/2011

 

============== E.O.F ==============

 

 

Clean

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 12/04/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: http://www.teamxscript.org

 

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 19:00:03 le 08/08/2011, Mode normal

 

Microsoft Windows XP Édition familiale Service Pack 3 (X86)

papa@HUBERT ( )

 

============== ACTION(S) ==============

 

 

Fichier supprimé: C:\WINDOWS\system32\ConduitEngine.tmp

Dossier supprimé: C:\Documents and Settings\papa\Local Settings\Application Data\Conduit

Dossier supprimé: C:\Program Files\Dynamic Toolbar

Dossier supprimé: C:\Documents and Settings\papa\Application Data\Viewpoint

Dossier supprimé: C:\Documents and Settings\All Users\Application Data\Viewpoint

Dossier supprimé: C:\Program Files\Viewpoint

Dossier supprimé: C:\Program Files\Winsudate

 

(!) -- Fichiers temporaires supprimés.

 

 

Clé supprimée: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Clé supprimée: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Clé supprimée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}

Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl

Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1

Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary

Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1

Clé supprimée: HKLM\Software\Classes\Conduit.Engine

Clé supprimée: HKLM\Software\Classes\Toolbar.CT2724386

Clé supprimée: HKLM\Software\Conduit

Clé supprimée: HKLM\Software\MetaStream

Clé supprimée: HKLM\Software\Viewpoint

Clé supprimée: HKLM\Software\Winsudate

Clé supprimée: HKCU\Software\Dynamic Toolbar

Clé supprimée: HKCU\Software\Trymedia Systems

Clé supprimée: HKCU\Software\Winsudate

Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}

Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}

Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Clé supprimée: HKLM\Software\MozillaPlugins\@viewpoint.com/VMP

 

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D}

 

 

============== SCAN ADDITIONNEL ==============

 

**** Mozilla Firefox Version [5.0.1 (fr)] ****

 

Plugins\npdivx32.dll (DivX,Inc.)

Plugins\npDivxPlayerPlugin.dll (DivX, Inc)

HKLM_MozillaPlugins\Adobe Reader (x)

Searchplugins\bing.xml ( hxxp://www.bing.com/search)

Components\browsercomps.dll (Mozilla Foundation)

 

-- C:\Documents and Settings\papa\Application Data\Mozilla\FireFox\Profiles\4v776y1c.default --

Extensions\nostmp (?)

Searchplugins\MyStart Search.xml (?)

Prefs.js - browser.download.dir, C:\\Documents and Settings\\papa\\Bureau

Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\papa\\Mes documents\\HUBERT

Prefs.js - browser.search.defaultenginename, MyStart Search

Prefs.js - browser.search.selectedEngine, Google

Prefs.js - browser.startup.homepage, hxxp://www.google.fr/

Prefs.js - browser.startup.homepage_override.buildID, 20110707182747

Prefs.js - browser.startup.homepage_override.mstone, rv:5.0.1

Prefs.js - keyword.URL, hxxp://mystart.incredimail.com/?loc=ff_address_bar&search=

 

========================================

 

**** Internet Explorer Version [7.0.5730.11] ****

 

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896

HKCU_Main|Start Page - hxxp://fr.msn.com/

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm

HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Start Page - hxxp://fr.msn.com/

HKCU_SearchScopes\{7a14ea26-cbb6-4fd1-b802-49415c8e9ee6} - "Wibeez" (hxxp://www.wibeez.com/annuaire?search&q={searchTerms})

HKCU_SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96} - "MyStart Search" (hxxp://mystart.incredigames.com/?search={searchTerms}&loc=incredigame_search_box)

HKCU_SearchScopes\{CD10120B-C165-4f8d-8C74-639629E238FF} - "MyStart Rechercher" (hxxp://mystart.magentic.com/?search={searchTerms}&loc=search_box)

HKCU_Toolbar\ShellBrowser|{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} (x)

HKCU_Toolbar\WebBrowser|{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} (x)

HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)

HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)

HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\Neuf\Kit\9launch.exe (SFR)

HKLM_Extensions\{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - "Real.com" (C:\Program Files\Real\RealPlayer\eb_inact.ico)

HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)

BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 141 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

 

C:\Ad-Report-CLEAN[1].txt - 08/08/2011 19:00:14 (924 Octet(s))

C:\Ad-Report-SCAN[1].txt - 08/08/2011 18:58:31 (6184 Octet(s))

 

Fin à: 19:01:04, 08/08/2011

 

============== E.O.F ==============

[pear]

Voyons Mbam.

[ffrodon]

Rapport Mbam :

 

Malwarebytes' Anti-Malware 1.51.1.1800

www.malwarebytes.org

 

Version de la base de données: 7411

 

Windows 5.1.2600 Service Pack 3

Internet Explorer 7.0.5730.11

 

08/08/2011 21:06:38

mbam-log-2011-08-08 (21-06-38).txt

 

Type d'examen: Examen complet (C:\|E:\|)

Elément(s) analysé(s): 210718

Temps écoulé: 28 minute(s), 22 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 2

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

c:\APPS\inventime\files\media\finalparticulier.exe (Trojan.Meredrop) -> Quarantined and deleted successfully.

c:\documents and settings\papa\application data\Icones\icones_pa.ico (Adware.GibMedia) -> Quarantined and deleted successfully.

[pear]

Ca semble bon!

 

Comment va la machine ?

[ffrodon]

La machine a l'air pas trop mal, je télécharge IE 8 pour mise a jour il etait resté à IE 7

[ffrodon]

Merci Pear