Aller au contenu
Zebulon

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] Gros ralentissements, impossible de lancer les applicati

cliffburton

Par cliffburton
dans Analyses et éradication malwares

 Partager

Messages recommandés

cliffburton Member

cliffburton

Posté(e)
Posté(e) (modifié)

Bonjour,

 

Je me suis attelé à la "réparation" du PC portable de ma soeur qui rencontre de gros problèmes. Seulement c'est bien plus ardu que je ne le pensais. Les symptômes sont les suivants :

 

-longue attente au démarrage et au lancement du peu d'applications qui marchent

-la majorité des logiciels et application ne peut pas être lancée (un message d'erreur provenant de Symantec s'affiche, Symantec n'ayant jamais été installé, ou alors à son insu)

-plus de son

-surchauffe régulière du PC, qui s'éteint brusquement, avec ou sans batterie. Il se peut cependant que ce ne soit pas liés aux autres symptômes

 

 

Pour le moment, j'ai tenté de lancé un scan d'AntiVir : impossible de faire une mise à jour sans Internet + scan interrompu par la surchauffe.

 

J'ai uniquement pu exécuter le rapport Hijackthis ci-dessous, en mode sans échec.

 

Auriez-vous s'il vous plait une idée pour résoudre ce problème ?

 

D'avance merci.

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:48:50, on 23/09/2011

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.19048)

Boot mode: Safe mode

 

Running processes:

C:\Windows\Explorer.EXE

C:\Users\Léa\Desktop\HiJackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! France

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! France

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! France

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Yahoo! France

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

R3 - URLSearchHook: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - (no file)

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)

O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [iS CfgWiz] "C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"

O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"

O4 - HKLM\..\Run: [PLFSetL] C:\Windows\PLFSetL.exe

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"

O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [setPanel] C:\Acer\APanel\APanel.cmd

O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe

O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"

O4 - HKLM\..\Run: [installer] C:\Program Files\Installer\lnetworker.exe

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 - HKCU\..\Run: [EA Core] "D:\Electronic Arts\EADM\Core.exe" -silent

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [uyeferirifejela] rundll32.exe "C:\Users\Léa\AppData\Local\inivikiyitej.dll",Startup

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil10p_Plugin.exe -update plugin

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O4 - Global Startup: PHOTOfunSTUDIO -viewer-.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe

O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\Léa\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O13 - Gopher Prefix:

O20 - AppInit_DLLs: eNetHook.dll

O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe

O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Backup IP Network (sdmBackupIP) - Unknown owner - C:\Windows\BackupIP\service.exe (file missing)

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

 

--

End of file - 12732 bytes

Modifié par cliffburton
Lien vers le commentaire
Partager sur d’autres sites

tomtom95 Devil Member !

tomtom95

Posté(e)
Posté(e) (modifié)

Bonsoir cliffburton

 

  • L'ordinateur de ta soeur est infecté. ;)
     
    On va essayer d'abord de supprimer certaines chose manuellement.
    Clique sur démarrer >> panneau de config >> programmes et fonctionnalité
    Désinstalle:
    Toolbar: Dealio
    Dealio Toolbar Updater
    SearchSettings
     
    Si tu as des problèmes pour désinstaller on vois aprés .
    Dans tous les cas fait la suite mode normal.
    Si tu ne peux pas fait-le en mode sans échec avec prise en charge reseau. ;)
     
    Télécharge sur le site
AD-R (de C_XX) sur ton Bureau.
 
/!\ Ferme toutes applications en cours /!\
 
Double-clique sur le raccourci AD-R.exe (clique droit -> lancer en tant qu'administrateur sous Vista) qui est sur ton bureau pour lancer l'outil .
 
Au menu principal choisis l'option "Nettoyer" et tape sur [entrée] .
 
fyjor7.jpg

/!\ Laisse travailler l'outil et ne touche à rien /!\

 

Poste le rapport qui apparait à la fin .

( Le rapport est sauvegardé sous C:\Ad-report-clean-(date).log )

 

*************************************

 

Télécharge la dernier version MalwareByte's sur ton Bureau.

  • Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.
    Une fois l'installation et la mise à jour effectuées :
  • Branche tes supports externes sur le pc (Clé USB,Disque Dur,etc..)
    Sans les ouvrirs :D
  • Exécute maintenant MalwareByte's Anti-Malware.Clique droit sur l'icône et "Exécuter en tant qu'administrateur"
    sélectionne "Exécuter un examen complet".
  • Coche toutes les cases des lecteurs
  • Afin de lancer la recherche clique sur"Rechercher".
  • Coche toutes les cases de tes lecteurs
  • Une fois le scan terminé une fenêtre s'ouvre clique sur OK.
  • Si des infections sont présentes
    clique sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau.
  • poste le rapport dans ta prochaine réponse.

 

REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression accepte en cliquant sur Ok.

 

**********************************************

 

Enfin:

Pour une analyse un peu plus détailler de ton ordinateur

applique cette procédure stp.

 

Télécharge ZHPDiag de Nicolas Coolman sur ton Bureau

 

  • Lance l'outil : double-clique sur ZHPDiag pour XP
    Pour Vista et seven
    fais un clique droit sur l'icône et exécute en tant qu'administrateur.
     
    Clique sur le Tournevis a droit en haut
    tournevis.jpg
     
    Coche toutes les cases .
  • Puis Clique sur la petite loupe loupe.jpg en haut à gauche pour débuter l'analyse :
  • L'analyse peut durer une dizaine de minutes.
  • Le rapport généré par l'outil se nomme ZHPDiag.txt
  • Clique sur le bouton avec l'appareil photo pour copier le contenu intégral du rapport généré par l'outil dans le presse-papier :
  • Dans ta prochaine réponse
    clique sur les touches CTRL+V pour coller ce rapport.
  • Si tu rencontres un message d'erreur
    cela signifie que le rapport est trop long. Il faut donc l'éditer en plusieurs parties en veillant bien à ne rien oublier
     
  • Tu peux aussi héberger le fichier contenant ce rapport ici
    http://cjoint.com/
  • Indique ensuite dans ta prochaine réponse l'adresse d'hébergement de ce rapport pour que je puisse le télécharger et l'analyser.

 

A+

Modifié par tomtom95
Lien vers le commentaire
Partager sur d’autres sites
cliffburton Member

cliffburton

Posté(e)
  • Auteur
Posté(e)

Bonjour tomtom95, et d'abord merci d'avoir pris le temps de me répondre.

 

Voici les 3 rapports sur 3 posts différents, sachant que je n'ai pas pu mettre à jour les logiciels en question car la connexion est impossible avec toutes ces infections. Par exemple, MalwareByte's était déjà installé, et a donc fonctionné avec une mise à jour datant d'il y a 3 mois.

 

D'abord le rapport AD-R :

 

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par TeamXscript le 12/04/11

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF

 

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 15:41:09 le 24/09/2011, Mode normal

 

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1 (X86)

Léa@PC-DE-LÉA (Acer Aspire 7720Z)

 

============== ACTION(S) ==============

 

Service: "sdmBackupIP" Stoppé et supprimé

 

Dossier supprimé: C:\Program Files\Installer

Fichier supprimé: C:\Windows\system32\Utils.dll

Dossier supprimé: C:\Windows\BackupIP

Dossier supprimé: C:\Users\Léa\AppData\Roaming\Mozilla\FireFox\Profiles\vysc5e9x.default\conduit

Dossier supprimé: C:\Users\Léa\AppData\LocalLow\Conduit

Dossier supprimé: C:\Program Files\Conduit

Dossier supprimé: C:\Users\Léa\AppData\LocalLow\Dealio

Dossier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dealio

Dossier supprimé: C:\Program Files\Dealio

Dossier supprimé: C:\Users\Léa\AppData\Roaming\EoRezo

Dossier supprimé: C:\Users\Léa\AppData\Local\networker

 

(!) -- Fichiers temporaires supprimés.

 

 

-- Fichier ouvert: C:\Users\Léa\AppData\Roaming\Mozilla\FireFox\Profiles\vysc5e9x.default\Prefs.js --

Ligne supprimée: user_pref("CT1460988.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...

Ligne supprimée: user_pref("CT1460988.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT146...

Ligne supprimée: user_pref("CT1460988.ct1670222.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U...

Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr...

Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "CT1460988");

Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList2", "CT1460988");

Ligne supprimée: user_pref("extensions.vshare@toolbar.update.enabled", false);

-- Fichier Fermé --

 

 

Clé supprimée: HKLM\Software\Classes\CLSID\{6A87B991-A31F-4130-AE72-6D0C294BF082}

Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6A87B991-A31F-4130-AE72-6D0C294BF082}

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082}

Clé supprimée: HKLM\Software\Classes\Interface\{03C390E8-B836-4B82-8D56-1BFDDC06AE8A}

Clé supprimée: HKLM\Software\Classes\Interface\{144940B1-F191-11D0-A8E2-00A0C90F29FC}

Clé supprimée: HKLM\Software\Classes\Interface\{2A6B0172-4ED2-11D0-98BE-00805F7CED21}

Clé supprimée: HKLM\Software\Classes\Interface\{2C4470A2-E099-4B9E-ABFE-BBA56D046AFD}

Clé supprimée: HKLM\Software\Classes\Interface\{391769AE-D8EC-45EC-967D-F5120456E514}

Clé supprimée: HKLM\Software\Classes\Interface\{39AEF150-C270-4690-AE7D-955E51BC8960}

Clé supprimée: HKLM\Software\Classes\Interface\{7C7B253C-967B-4385-901B-06873371B3CF}

Clé supprimée: HKLM\Software\Classes\Interface\{9F598C4D-E2FB-455C-9486-6AD3405620F2}

Clé supprimée: HKLM\Software\Classes\Interface\{CD73B1AB-3403-4E47-B196-517C57BE76A2}

Clé supprimée: HKLM\Software\Classes\Dealio.DealioBHO

Clé supprimée: HKLM\Software\Classes\Dealio.DealioBHO.1

Clé supprimée: HKLM\Software\Classes\Dealio.DealioSearch

Clé supprimée: HKLM\Software\Classes\Dealio.DealioSearch.1

Clé supprimée: HKLM\Software\Classes\Dealio.DealioToolbar

Clé supprimée: HKLM\Software\Classes\Dealio.DealioToolbar.1

Clé supprimée: HKLM\Software\Classes\Dealio.DealioToolbarHelper

Clé supprimée: HKLM\Software\Classes\Dealio.DealioToolbarHelper.1

Clé supprimée: HKLM\Software\Classes\Toolbar.CT1460988

Clé supprimée: HKLM\Software\Classes\AppID\EoRezoBHO.DLL

Clé supprimée: HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}

Clé supprimée: HKLM\Software\Conduit

Clé supprimée: HKLM\Software\Dealio

Clé supprimée: HKLM\Software\Install Pedia Limited

Clé supprimée: HKCU\Software\AppDataLow\Toolbar

Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit

Clé supprimée: HKLM\Software\Classes\Installer\Products\C8465016C3C0D184C811F194256DBF35

Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\C8465016C3C0D184C811F194256DBF35

Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6F7140D8-616F-4A09-BDA1-DFB45C3BE132}

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{6105648C-0C3C-481D-8C11-1F4952D6FB53}

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\EoEngine_is1

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdate_is1

Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6105648C-0C3C-481D-8C11-1F4952D6FB53}

Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1

Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Dealio

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}

Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}

Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{E908B145-C847-4e85-B315-07E2E70DECF8}

 

Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|installer

Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|au

Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}

 

 

============== SCAN ADDITIONNEL ==============

 

**** Mozilla Firefox Version [6.0.2 (fr)] ****

 

Searchplugins\babylon.xml (hxxp://search.babylon.com/web/{searchTerms})

Searchplugins\bing.xml ( hxxp://www.bing.com/search)

Components\browsercomps.dll (Mozilla Foundation)

HKCU_Extensions|{36A0949C-2D38-4B3D-A73A-1C046E99DD3C} - C:\Users\Léa\AppData\Local\{36A0949C-2D38-4B3D-A73A-1C046E99DD3C}

 

-- C:\Users\Léa\AppData\Roaming\Mozilla\FireFox\Profiles\vysc5e9x.default --

Extensions\nostmp (?)

Prefs.js - browser.download.dir, C:\\Users\\Léa\\Desktop

Prefs.js - browser.download.lastDir, C:\\Users\\Léa\\Desktop

Prefs.js - browser.search.defaultenginename, Google

Prefs.js - browser.search.defaulturl, hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=

Prefs.js - browser.search.selectedEngine, Google

Prefs.js - browser.startup.homepage, hxxp://www.google.fr/

Prefs.js - browser.startup.homepage_override.buildID, 20110902133214

Prefs.js - browser.startup.homepage_override.mstone, rv:6.0.2

 

========================================

 

**** Internet Explorer Version [8.0.6001.19048] ****

 

IEXPLORE.EXE\Shell\Open\Command - iexplore.exe

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896

HKCU_Main|Start Page - hxxp://fr.msn.com/

HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm

HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM_Main|Start Page - hxxp://fr.msn.com/

HKCU_URLSearchHooks|{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} (x)

HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKLM_Toolbar|{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} (C:\Windows\system32\eDStoolbar.dll)

HKLM_Toolbar|{90222687-F593-4738-B738-FBEE9C7B26DF} (C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll)

HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)

HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)

HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)

HKLM_ElevationPolicy\59a3fb21-9e5c-47f8-aecd-d372e6a8f0cd - C:\Program Files\myBabylon_English\myBabylon_EnglishToolbarHelper.exe (x)

HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)

HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)

HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)

HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)

BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll)

BHO\{1E8A6170-7264-4D0F-BEAE-D42A53123C75} - "?" (C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll)

BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - "ShowBarObj Class" (C:\Windows\system32\ActiveToolBand.dll)

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 596 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

 

C:\Ad-Report-CLEAN[1].txt - 24/09/2011 15:41:25 (9647 Octet(s))

 

Fin à: 15:46:15, 24/09/2011

 

============== E.O.F ==============

Lien vers le commentaire
Partager sur d’autres sites
cliffburton Member

cliffburton

Posté(e)
  • Auteur
Posté(e)

le rapport MalwareBytes's :

 

 

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Version de la base de données: 6385

 

Windows 6.0.6001 Service Pack 1 (Safe Mode)

Internet Explorer 8.0.6001.19048

 

24/09/2011 19:35:28

mbam-log-2011-09-24 (19-35-21).txt

 

Type d'examen: Examen complet (C:\|D:\|E:\|)

Elément(s) analysé(s): 343137

Temps écoulé: 1 heure(s), 5 minute(s), 6 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 1

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 1

Fichier(s) infecté(s): 92

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Uyeferirifejela (Trojan.Agent.U) -> Value: Uyeferirifejela -> No action taken.

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

c:\Recycle.Bin (Trojan.Spyeyes) -> No action taken.

 

Fichier(s) infecté(s):

c:\program files\ad-remover\quarantine\C\program files\installer\networker.exe.vir (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\01679bf5_3024cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\03b0f31b_2203cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\040929a8_cb25cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\075f4a18_b326cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\09f2c910_1707cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\0e452b44_a115cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\0e7e8996_6724cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\1043714f_760ecc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\1092e006_7727cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\136ba43e_df29cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\151f58a0_fa20cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\1e8816bb_b008cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\21e8054e_6919cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\26836773_5327cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\2ef87cb8_d412cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\31f0a06e_4b19cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\33fff149_6609cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\3a3fba80_e905cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\3fc1f31a_e7fdcb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\3ff6995c_4b15cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\40f2c867_0b14cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\44bc776f_ef29cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\4587b551_2826cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\4d43ac71_3528cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\53fa6b2f_a710cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\545cf849_ed24cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\55de9c4a_791fcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\576a40d8_c804cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\5b7ceeef_3607cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\5c16c231_e519cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\5db13f88_690ecc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\64857498_910ccc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\66ba3657_37fdcb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\6ac55ff6_c705cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\6dbc3fe5_492bcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\6e227277_8b01cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\6eb6fa09_fe0bcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\6f5b0546_abfecb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\70b1af5c_de07cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\70b1d819_4e0acc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\7165531f_9426cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\73eb8369_3724cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\73ebc722_c90fcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\7bdeca25_75fecb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\7c5837f6_9c09cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\7fa2e862_bf13cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\834232a4_76ffcb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\84ae3f21_e60ecc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\8da179ac_480ecc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\8efbb6b7_7f15cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\8f8b4ddc_5902cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\93a142d6_330bcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\9460c949_c816cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\96d7f23b_7714cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\9732cb44_190fcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\9969e4ec_ea28cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\9e5eed9c_680acc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\a2398b55_0d12cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\a5bc49bb_3019cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\a5f459b1_9b0dcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\a7b8e8f7_2c25cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\a832a7fa_49ffcb01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\b3f1748d_300ecc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\bd643261_6602cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\bd7e2951_9f22cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\bdff44ea_e60fcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\bece27a7_8d0acc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\c399d2d0_9c0ccc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\c3a04943_ea10cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\d2f4ae5c_780dcc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\d7b83222_3508cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\d91a07f6_1328cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\dc71528d_5d15cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\dd0673c2_2d2ccc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e072cf1d_a618cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e2c70a12_6a18cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e7790799_8403cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e8de84f5_9f06cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e916d69a_e304cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\e9f756b0_c023cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\eaadc7d0_1b22cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\edc0546f_6523cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\ef108f49_4320cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\f34b842e_8c17cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\f52a8a4b_f021cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\f7de41ad_aa29cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\f8a7903d_142ccc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\f921699d_1126cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\assembly\dl3\92JGBP2K.37E\X92GK1VL.LQA\e5fded8e\ff3ffa48_cc00cc01\networker.exe (Trojan.Agent) -> No action taken.

c:\Users\Léa\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\12NAXEQ6\calc[1].exe (Heuristics.Shuriken) -> No action taken.

c:\Recycle.Bin\config.bin (Trojan.Spyeyes) -> No action taken.

 

et enfin le rapport ZHP :

 

Rapport de ZHPDiag v1.28.1353 par Nicolas Coolman, Update du 24/09/2011

Run by Léa at 25/09/2011 21:48:07

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.19048

MFIE: Mozilla Firefox 6.0.2 v6.0.2 (Defaut)

GCIE: Google Chrome

 

---\\ Windows Product Information

Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)

Windows Server License Manager Script : OK

~ Vista, OEM_SLP channel

System Locked Preinstallation (OEM_SLP) : OK

Windows ID Activation : OK

~ Windows Partial Key : 6CJ97

Windows License : OK

Windows Automatic Updates : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 2045 MB (53% free)

System Restore: Activé (Enable)

System drive C: has 6 GB (8%) free of 70 GB

 

---\\ Logged in mode

~ Computer Name: PC-DE-LÉA

~ User Name: Léa

~ All Users Names: Léa, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Users\Léa\AppData\Roaming\

~ %Desktop% : C:\Users\Léa\Desktop\

~ %Favorites% : C:\Users\Léa\Favorites\

~ %LocalAppData% : C:\Users\Léa\AppData\Local\

~ %StartMenu% : C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 70 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 42 Go of 70 Go)

E:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Explorateur Windows.) (.12/12/2008 - 07:29:41.) -- C:\Windows\Explorer.exe [2927104]

[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]

[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.23/12/2010 - 23:33:38.) -- C:\Windows\system32\Wininit.exe [96768]

[MD5.047CDEFF94B63F0A4791372B47427B60] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/04/2011 - 07:21:28.) -- C:\Windows\system32\wininet.dll [916480]

[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.23/12/2010 - 23:33:38.) -- C:\Windows\system32\Winlogon.exe [314880]

[MD5.2D9C903DC76A66813D350A562DE40ED9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.23/12/2010 - 23:41:32.) -- C:\Windows\system32\drivers\atapi.sys [21560]

[MD5.B4EFFE29EB4F15538FD8A9681108492D] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.23/12/2010 - 23:43:42.) -- C:\Windows\system32\drivers\ntfs.sys [1081912]

[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.23/12/2010 - 23:34:12.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 28/1747

~ Mes musiques (My Musics) : 1230/4463

~ Mes Videos (My Videos) : 1/2

~ Mes Favoris (My Favorites) : 2/23

~ Mes Documents (My Documents) : 17/973

~ Mon Bureau (My Desktop) : 4/30

~ Menu demarrer (Programs) : 7/25

~ Scan Hidden Files in 00mn 27s

 

 

 

---\\ Processus lancés

[MD5.A659F31AC25418738351E5BDF4C85780] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4669440] [PID.2468]

[MD5.E090EE780714E376062198C6625D5B51] - (.HiTRUST - eDataSecurity System Loader( Load and prepa.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe [457216] [PID.2480]

[MD5.D12509C433C20D2818E8C03C401A256F] - (.Symantec Corporation - Symantec User Session.) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe [107112] [PID.2504]

[MD5.4297C3FC97F9FD96CC5BDC471A045882] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files\Launch Manager\LManager.exe [752136] [PID.4008]

[MD5.F79723565C57374BB8F057E03FC33B50] - (.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe [206952] [PID.1592]

[MD5.F371C6DF9A810EF2E6E4FA60ACBB5C33] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [174872] [PID.1576]

[MD5.B150D1BCB625600479EEBA51811E33CB] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe [159744] [PID.1636]

[MD5.F514CD896583E6C18D011116E3725074] - (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe [1286144] [PID.3800]

[MD5.A8CF3F60099EAA123DB72611CE7BE271] - (.Apple Computer, Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe [278528] [PID.3860]

[MD5.6E812818306D460D62B4ABEA9FDC6679] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [266497] [PID.1892]

[MD5.E8B180646BAE9E688D2E6D7EA8DED794] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [959976] [PID.]

[MD5.5E4C9C25D603AE46DEDCBD9674F86E21] - (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe [149280] [PID.2436]

[MD5.9ACE8ECDB1EBC519F48AA65DE5875573] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256] [PID.1304]

[MD5.2240A1A5973B31F9D050C137BD5794EA] - (.Matsushita Electric Industrial Co., Ltd. - PHOTOfunSTUDIO.) -- C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe [40960] [PID.4216]

[MD5.5B1A52A2F4573A1CA947A3AF859CF6F7] - (.Acer Inc. - Acer eNet Tray.) -- C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE [753664] [PID.4412]

[MD5.83170B8E03213093B065A9638E146499] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [7424000] [PID.4616]

[MD5.3C268663253DC2B6EC8A8C2E8EDB67E5] - (.Acer Inc. - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE [454656] [PID.4748]

[MD5.39CBE2E778299F468BBD5B45CFB90A70] - (.Acer Inc. - Acer Empowering Techonology Framework Launc.) -- C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE [323584] [PID.4988]

[MD5.5EF87457AB8A58694EBE35E55D093D04] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\LA4770~1\AppData\Local\Temp\RtkBtMnt.exe [208896] [PID.5080]

[MD5.4F779AD993A2975D945EE6985CAC0FEA] - (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE [397312] [PID.5108]

[MD5.42370C1DE2B83844B253478DB8A907D5] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\Apoint2K\ApMsgFwd.exe [50736] [PID.5308]

[MD5.873867A02F0E83F18CF871E776B651DC] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [7418368] [PID.5416]

[MD5.8D78BE3690DB07A2FD03D2A6B61E3DCD] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\Apoint2K\Apntex.exe [49152] [PID.5604]

[MD5.F96EBC5A624349D81DCC7600A3C5DC43] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.6140]

[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [PID.5168]

[MD5.30FFBC8CB80938E19B73022FCB5EFB2A] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2122240] [PID.2804]

[MD5.05ACAE276B57DDA3E4BDDEA4BAEC3EEA] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 186.0.) -- C:\Windows\system32\nvvsvc.exe [211488] [PID.]

[MD5.0BA91E1358AD25236863039BB2609A2E] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [2623488] [PID.]

[MD5.0238690AB96AD9E08C643D7A7AD8B293] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Windows\System32\ZoneLabs\vsmon.exe [79400] [PID.]

[MD5.E7AAB1A32AC2EEA4C4B735B8D034C802] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [107624] [PID.]

[MD5.2FE779B1A07747FED8074C433C3C4604] - (.Symantec Corporation - Symantec Application Core Service.) -- C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [46736] [PID.]

[MD5.D6C8942BEA3698A2E7559BD423BFA5D7] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [68865] [PID.]

[MD5.3845B6555DE995F6C0C07AE2ABCC0532] - (.Pas de propriétaire - ALaunchSvc Image.) -- C:\Acer\ALaunch\ALaunchSvc.exe [50688] [PID.]

[MD5.335A142923FE7F97E8C8388ACD067568] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [151297] [PID.]

[MD5.F54907AA07F60AFF81E1E09E97AF98B0] - (.HiTRSUT - eDataSecurity Service.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512] [PID.]

[MD5.FB5383BFD4DEC6792AAEF76C9343ECFF] - (.Acer Inc. - Acer eLock Management.) -- C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576] [PID.]

[MD5.9316C26F089CF2CEA2BD1496AC9F38A4] - (.Acer Inc. - acer eNet Management Service.) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe [135168] [PID.]

[MD5.AE38A12F79A4980DDB88F36514F8A1DA] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [355096] [PID.]

[MD5.793FF718477345CD5D232C50BED1E452] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.]

[MD5.842684E0DF20A59E293DA1C6F0DFE261] - (...) -- C:\Acer\Mobility Center\MobilityService.exe [107008] [PID.]

[MD5.B5D974C1FD078A68C7536C561B031D39] - (.Symantec Corporation - Automatic LiveUpdate Scheduler Service.) -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [554352] [PID.]

[MD5.0A468612A19FEB657D127E7C4810F6FC] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [266343] [PID.]

[MD5.F82FC2C30A19442B95AE554215837C46] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe [386560] [PID.]

[MD5.3D184410EF5EE017E186AC96181B3FF8] - (.Acer Inc. - eRecoveryService.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [53248] [PID.]

[MD5.CF2584CDF90DA24D3044021AAAD5DBAB] - (.Pas de propriétaire - Service.) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576] [PID.]

[MD5.7641B16BD15A392DE305D2B1C76AA42A] - (.acer - WMIServi Application.) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [167936] [PID.]

[MD5.EDA049739349F0E837D4F55E8879D665] - (.Apple Computer, Inc. - iPodService Module.) -- C:\Program Files\iPod\bin\iPodService.exe [323584] [PID.]

[MD5.FA2F6A8849219B16460BF44F9D1F3AA7] - (...) -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [1251720] [PID.]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Users\Léa\AppData\Roaming\Mozilla\Firefox\Profiles\vysc5e9x.default\prefs.js

C:\Users\Léa\AppData\Roaming\Mozilla\Firefox\Profiles\vysc5e9x.default\user.js (.not file.)

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Léa] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

M0 - MFSP: prefs.js [Léa - vysc5e9x.default] Google

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeploytk.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll

P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.775.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll

P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16291.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@nosltd.com/getPlus+®,version=1.6.2.91] - (.NOS Microsystems Ltd. - getplusplusadobe16291.) -- C:\Program Files\NOS\bin\np_gp.dll

P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.775] - (.RealNetworks, Inc. - RealPlayer LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.775] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.775] - (.RealNetworks, Inc. - 6.0.12.775.) -- C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..'>http://www..'>http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll

P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll

P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.3] - (.Pas de propriétaire - Provides additional functionality on Facebook. See <a href="http://www.) -- C:\Users\Léa\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll

~ Scan Firefox Browser in 00mn 01s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (...) (No version) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

R3 - URLSearchHook: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} . (...) (No version) -- (.not file.)

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} . (.Symantec Corporation - NcoBHO.) -- C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll

O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} . (.Symantec Corporation - UIBhoImpl.) -- C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (...) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe (.not file.)

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.)

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe (.not file.)

O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe (.not file.)

O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] . (.HiTRUST - eDataSecurity System Loader( Load and prepa.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [Acer Tour] Clé orpheline

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [ccApp] . (.Symantec Corporation - Symantec User Session.) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O4 - HKLM\..\Run: [iS CfgWiz] . (.Symantec Corporation - cltUIStub.) -- C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe

O4 - HKLM\..\Run: [osCheck] . (.Symantec Corporation - osCheck.) -- C:\Program Files\Norton Internet Security\osCheck.exe

O4 - HKLM\..\Run: [PLFSetL] . (.sonix - DefaultSettingEXE.) -- C:\Windows\PLFSetL.exe

O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [PlayMovie] . (.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe

O4 - HKLM\..\Run: [iAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [eRecoveryService] Clé orpheline

O4 - HKLM\..\Run: [Acer Tour Reminder] . (.Acer Inc. - Acer Tour Reminder.) -- C:\Acer\AcerTour\Reminder.exe

O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Inc. - WR_PopUp.) -- C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [setPanel] C:\Acer\APanel\APanel.cmd (.not file.)

O4 - HKLM\..\Run: [eAudio] . (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Computer, Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe

O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe

O4 - HKLM\..\Run: [symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exetEng.dll (.not file.)

O4 - HKLM\..\Run: [NWEReboot] Clé orpheline

O4 - HKLM\..\Run: [skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKCU\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKCU\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - HKCU\..\Run: [EA Core] D:\Electronic Arts\EADM\Core.exe (.not file.)

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - Chargeur CTF.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [AdobeUpdater] . (.Adobe Systems Incorporated - Adobe Updater.) -- C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [WindowsWelcomeCenter] oobefldr.dll

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [Acer Tour Reminder] Clé orpheline

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [EA Core] D:\Electronic Arts\EADM\Core.exe (.not file.)

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [ctfmon.exe] . (.Microsoft Corporation - Chargeur CTF.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-21-2152794718-1122633630-1261851648-1000\..\Run: [AdobeUpdater] . (.Adobe Systems Incorporated - Adobe Updater.) -- C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Users\Léa\Desktop\Ad-Remover.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe

O4 - Global Startup: C:\Users\Léa\Desktop\Corbeille.lnk - Clé orpheline

O4 - Global Startup: C:\Users\Léa\Desktop\Free Video Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free Video Converter\FreeVideoConverter.exe

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk . (.Apple Computer, Inc..) -- C:\Program Files\iTunes\iTunes.exe

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Léa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

~ Scan Global Startup in 00mn 01s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Compare Prices with &Dealio - (.not file.) - C:\Users\Léa\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 212.27.40.241 212.27.40.240

O17 - HKLM\System\CCS\Services\Tcpip\..\{20AAC3F6-BAC4-43E1-967F-CEC739BC51A5}: DhcpNameServer = 109.0.66.10 109.0.66.20

O17 - HKLM\System\CS1\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 212.27.40.241 212.27.40.240

O17 - HKLM\System\CS1\Services\Tcpip\..\{20AAC3F6-BAC4-43E1-967F-CEC739BC51A5}: DhcpNameServer = 109.0.66.10 109.0.66.20

O17 - HKLM\System\CS3\Services\Tcpip\..\{16B8C993-FC52-4DB8-BC23-BCB4264B97BC}: DhcpNameServer = 212.27.40.241 212.27.40.240

O17 - HKLM\System\CS3\Services\Tcpip\..\{20AAC3F6-BAC4-43E1-967F-CEC739BC51A5}: DhcpNameServer = 109.0.66.10 109.0.66.20

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\system32\mshtml.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 01s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (...) -- igfxdev.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (.acer - eNMSwWatcher Dynamic Link Library.) - C:\Windows\system32\eNetHook.dll

~ Scan AppInit DLL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: ALaunch Service (ALaunchService) . (.Pas de propriétaire - ALaunchSvc Image.) - C:\Acer\ALaunch\ALaunchSvc.exe

O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: eDSService.exe (eDataSecurity Service) . (.HiTRSUT - eDataSecurity Service.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eLock Service (eLockService) . (.Acer Inc. - Acer eLock Management.) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service (eNet Service) . (.Acer Inc. - acer eNet Management Service.) - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) . (.Pas de propriétaire - Service.) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: LiveUpdate Notice Service (LiveUpdate Notice Service) . (.Symantec Corporation - LiveUpdate Notice Service.) - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

O23 - Service: MobilityService (MobilityService) . (...) - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 186.0.) - C:\Windows\system32\nvvsvc.exe

O23 - Service: Planificateur LiveUpdate automatique (Planificateur LiveUpdate automatique) . (.Symantec Corporation - Automatic LiveUpdate Scheduler Service.) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Symantec AppCore Service (SymAppCore) . (.Symantec Corporation - Symantec Application Core Service.) - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\Windows\System32\ZoneLabs\vsmon.exe

O23 - Service: ePower Service (WMIService) . (.acer - WMIServi Application.) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe

O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{28C185E6-41D2-4A01-B91D-09564F7505C4}.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{8F14964C-7533-4930-A836-08B6F6DF7ADA}.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{FA0665FA-7D68-4553-9F14-3652C133945D}.job

[MD5.2C1A1F91D3288E7C02B584C2553967B6] [APT] [RealUpgradeLogonTaskS-1-5-21-2152794718-1122633630-1261851648-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

[MD5.2C1A1F91D3288E7C02B584C2553967B6] [APT] [RealUpgradeScheduledTaskS-1-5-21-2152794718-1122633630-1261851648-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe

~ Scan Scheduled Task in 00mn 03s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys

O41 - Driver: (DritekPortIO) . (.Dritek System Inc. - General Port I/O.) - C:\PROGRA~1\LAUNCH~1\DPortIO.sys

O41 - Driver: (eeCtrl) . (. - .) - C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (.not file.)

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys

O41 - Driver: (IDSvix86) . (.Symantec Corporation - IDS Core Driver.) - C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20101202.001\IDSvix86.sys

O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys

O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys

O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys

O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys

O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys

O41 - Driver: (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\Windows\system32\Drivers\SRTSPX.sys

O41 - Driver: (ssmdrv) . (.AVIRA GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys

O41 - Driver: (SYMTDI) . (.Symantec Corporation - Network Dispatch Driver.) - C:\Windows\system32\Drivers\SYMTDI.sys

O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (Vsdatant) . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - C:\Windows\system32\DRIVERS\vsdatant.sys

O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys

~ Scan Drivers in 00mn 01s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 4shared Desktop - (.Pas de propriétaire.) [HKLM] -- 4shared Desktop

O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: ALPS Touch Pad Driver - (.Alps Electric.) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}

O42 - Logiciel: AV - (.Symantec Corporation.) [HKLM] -- {F4DB525F-A986-4249-B98B-42A8066251CA}

O42 - Logiciel: AVS Audio Converter version 6.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Audio Converter 6.3_is1

O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1

O42 - Logiciel: AVS4YOU Software Navigator 1.4 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1

O42 - Logiciel: Acer Arcade Deluxe - (.CyberLink Corporation.) [HKLM] -- {EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}

O42 - Logiciel: Acer Crystal Eye Webcam Video Class Camera - (.Suyin.) [HKLM] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F}

O42 - Logiciel: Acer Crystal Eye webcam - (.SUYIN.) [HKLM] -- {AA047D7C-5E7C-4878-B75C-77589151B563}

O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2}

O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM] -- GridVista

O42 - Logiciel: Acer Mobility Center Plug-In - (.Acer Inc..) [HKLM] -- {11316260-6666-467B-AC34-183FCB5D4335}

O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}

O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35}

O42 - Logiciel: Acer eAudio Management - (.Pas de propriétaire.) [HKLM] -- {57265292-228A-41FA-9AEC-4620CBCC2739}

O42 - Logiciel: Acer eDataSecurity Management - (.HiTRUST Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A36}

O42 - Logiciel: Acer eLock Management - (.Acer Inc..) [HKLM] -- {116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}

O42 - Logiciel: Acer eNet Management - (.Acer Inc..) [HKLM] -- {C06554A1-2C1E-4D20-B613-EE62C79927CC}

O42 - Logiciel: Acer ePower Management - (.Acer Inc..) [HKLM] -- {58E5844B-7CE2-413D-83D1-99294BF6C74F}

O42 - Logiciel: Acer ePresentation Management - (.Acer Inc..) [HKLM] -- {BF839132-BD43-4056-ACBF-4377F4A88E2A}

O42 - Logiciel: Acer eSettings Management - (.Acer Inc..) [HKLM] -- {CE65A9A0-9686-45C6-9098-3C9543A412F0}

O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites

O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader 8.1.0 - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-A81000000003}

O42 - Logiciel: AppCore - (.Symantec Corporation.) [HKLM] -- {EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}

O42 - Logiciel: ArcGIS Desktop Evaluation Edition - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Desktop Evaluation Edition

O42 - Logiciel: ArcGIS Tutorial Data - (.Environmental Systems Research Institute, Inc..) [HKLM] -- ArcGIS Tutorial Data

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- AntiVir PersonalEdition Classic

O42 - Logiciel: Big Kahuna Reef 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111310630}

O42 - Logiciel: Cake Mania - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}

O42 - Logiciel: Dynasty - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111473353}

O42 - Logiciel: Facebook Plug-In - (.Facebook, Inc..) [HKCU] -- Facebook Plug-In

O42 - Logiciel: FileHunter - (.Pas de propriétaire.) [HKCU] -- FileHunter

O42 - Logiciel: Free Video Converter V 2.9 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1

O42 - Logiciel: Galapago - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}

O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Intel® Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}

O42 - Logiciel: Java 6 Update 16 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: K-Lite Codec Pack 4.6.2 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1

O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM] -- LManager

O42 - Logiciel: LiveUpdate 3.2 (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- LiveUpdate

O42 - Logiciel: LiveUpdate Notice (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- {DBA4DB9D-EE51-4944-A419-98AB1F1249C8}

O42 - Logiciel: Luxor 2 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11170417}

O42 - Logiciel: MSRedist - (.Symantec Corporation.) [HKLM] -- {B7C61755-DB48-4003-948F-3D34DB8EAF69}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR

O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox 6.0.2 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 6.0.2 (x86 fr)

O42 - Logiciel: Mystery Case Files - Prime Suspects - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111271497}

O42 - Logiciel: Mystery Case Files Ravenhearst - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112179547}

O42 - Logiciel: NTI Backup NOW! 4.7 - (.NewTech Infosystems.) [HKLM] -- {67ADE9AF-5CD9-4089-8825-55DE4B366799}

O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM] -- InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}

O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {DD1865F0-AD73-40FB-B23E-1822E02396FF}

O42 - Logiciel: Norton AntiVirus - (.Symantec Corporation.) [HKLM] -- {830D8CBD-C668-49e2-A969-C2C2106332E0}

O42 - Logiciel: Norton Confidential Browser Component - (.Symantec Corporation.) [HKLM] -- {4843B611-8FCB-4428-8C23-31D0A5EAE164}

O42 - Logiciel: Norton Confidential Web Protection Component - (.Symantec Corporation.) [HKLM] -- {D353CC51-430D-4C6F-9B7E-52003DA1E05A}

O42 - Logiciel: Norton Internet Security (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- SymSetup.{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}

O42 - Logiciel: Norton Internet Security - (.Symantec Corp..) [HKLM] -- {E3EFA461-EB83-4C3B-9C47-2C1D58A01555}

O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {3672B097-EA69-4bfe-B92F-29AE6D9D2B34}

O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {48185814-A224-447A-81DA-71BD20580E1B}

O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}

O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- {E5EE9939-259F-4DE2-8023-5C49E16A4F43}

O42 - Logiciel: Norton Protection Center - (.Symantec Corporation.) [HKLM] -- {9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}

O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: PHOTOfunSTUDIO -viewer- - (.Panasonic.) [HKLM] -- {9A9DBEBC-C800-4776-A970-D76D6AA405B1}

O42 - Logiciel: PowerProducer 3.72 - (.CyberLink Corporation.) [HKLM] -- {B7A0CE06-068E-11D6-97FD-0050BACBF861}

O42 - Logiciel: Python 2.5 numpy-1.0.3 - (.Pas de propriétaire.) [HKLM] -- Python 2.5 numpy-1.0.3

O42 - Logiciel: Python 2.5.1 - (.Pas de propriétaire.) [HKLM] -- Python 2.5.1

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {216AB108-2AE1-4130-B3D5-20B2C4C80F8F}

O42 - Logiciel: RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 - (.Pas de propriétaire.) [HKLM] -- {59F6A514-9813-47A3-948C-8A155460CC2A}

O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0

O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: SPBBC 32bit - (.Symantec Corporation.) [HKLM] -- {77772678-817F-4401-9301-ED1D01A8DA56}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2466156) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CEF209AB-F96D-404F-B5CC-44057C057CA3}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{AD0DE453-0804-4495-9C91-33D0F9AA5463}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2464583) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{151E2FEA-C3A6-4CB6-BE6B-16651FDF04BE}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Skype™ 5.1 - (.Skype Technologies S.A..) [HKLM] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

O42 - Logiciel: Star Defender 3 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111730193}

O42 - Logiciel: Treasures of the Deep - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111263673}

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}

O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}

O42 - Logiciel: Veetle TV 0.9.18 - (.Veetle, Inc.) [HKLM] -- Veetle TV

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- Windows Live OneCare safety scanner

O42 - Logiciel: Windows Live OneCare safety scanner - (.Microsoft Corporation.) [HKLM] -- {FE0646A7-19D0-41B4-A2BB-2C35D644270D}

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - (.Pas de propriétaire.) [HKLM] -- Yahoo! Companion

O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm

O42 - Logiciel: Zuma Deluxe - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}

O42 - Logiciel: ccCommon - (.Symantec.) [HKLM] -- {3CCAD2EF-CFF2-4637-82AA-AABF370282D3}

O42 - Logiciel: iPod for Windows 2006-01-10 - (.Nom de votre société.) [HKLM] -- InstallShield_{3D047C15-C859-45F7-81CE-F2681778069B}

O42 - Logiciel: iTunes - (.Apple Computer, Inc..) [HKLM] -- InstallShield_{501BADCD-F8F7-44CB-AC3F-6ED25C1A28B5}

O42 - Logiciel: myBabylon_English Toolbar - (.Pas de propriétaire.) [HKLM] -- myBabylon_English Toolbar

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\AVS4YOU]

[HKCU\Software\Acer]

[HKCU\Software\Adobe]

[HKCU\Software\Alps]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\Monitored]

[HKCU\Software\AppDataLow\Software\Musicnotes]

[HKCU\Software\AppDataLow\Software\Yahoo]

[HKCU\Software\AppDataLow\Software\myBabylon_English]

[HKCU\Software\AppDataLow\Software\settings]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Aureal]

[HKCU\Software\Avira]

[HKCU\Software\Binary Noise]

[HKCU\Software\CDDB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\Compal]

[HKCU\Software\Cyberlink]

[HKCU\Software\DivXNetworks]

[HKCU\Software\ESRI]

[HKCU\Software\Earth Resource Mapping]

[HKCU\Software\GNU]

[HKCU\Software\GSpot Appliance Corp]

[HKCU\Software\Gabest]

[HKCU\Software\Haali]

[HKCU\Software\IM Providers]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lake]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\MediaInfo]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\Musicnotes]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Nadeo]

[HKCU\Software\Netscape]

[HKCU\Software\NewTech Infosystems]

[HKCU\Software\ODBC]

[HKCU\Software\OpenOffice.org]

[HKCU\Software\Opendisc]

[HKCU\Software\PDFCreator]

[HKCU\Software\Panasonic]

[HKCU\Software\Policies]

[HKCU\Software\RealNetworks]

[HKCU\Software\Realtek]

[HKCU\Software\SecuROM]

[HKCU\Software\SkypeApps]

[HKCU\Software\Skype]

[HKCU\Software\Softonic]

[HKCU\Software\Symantec]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\Veetle]

[HKCU\Software\Yahoo]

[HKCU\Software\ZjSoft]

[HKCU\Software\Zone Labs]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\AVS4YOU]

[HKLM\Software\Acer Inc.]

[HKLM\Software\Adobe]

[HKLM\Software\Ahead]

[HKLM\Software\Alps]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Avira]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CDDB]

[HKLM\Software\CXT]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Codec Tweak Tool]

[HKLM\Software\Compal]

[HKLM\Software\Conexant Systems Inc ]

[HKLM\Software\Conexant]

[HKLM\Software\CyberLink]

[HKLM\Software\DivXNetworks]

[HKLM\Software\EA DICE]

[HKLM\Software\ESRI]

[HKLM\Software\Electronic Arts]

[HKLM\Software\Forge of Games]

[HKLM\Software\GNU]

[HKLM\Software\Google]

[HKLM\Software\HaaliMkx]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\KLCodecPack]

[HKLM\Software\LightScribe]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\Maxis]

[HKLM\Software\MimarSinan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\NewTech Infosystems]

[HKLM\Software\Nico Mak Computing]

[HKLM\Software\Norton]

[HKLM\Software\ODBC]

[HKLM\Software\Oberon Media]

[HKLM\Software\OpenOffice.org]

[HKLM\Software\PDFCreator]

[HKLM\Software\Panasonic]

[HKLM\Software\Policies]

[HKLM\Software\Python]

[HKLM\Software\RealNetworks]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\Reflexive Entertainment]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\RichFX]

[HKLM\Software\S3R521]

[HKLM\Software\SONIX]

[HKLM\Software\SRS Labs]

[HKLM\Software\Safe Software Inc.]

[HKLM\Software\Skype]

[HKLM\Software\SoftAssist]

[HKLM\Software\Sonic]

[HKLM\Software\Suyin]

[HKLM\Software\SymDebug]

[HKLM\Software\Symantec]

[HKLM\Software\Trad-FR]

[HKLM\Software\TrendMicro]

[HKLM\Software\Vantage Software Technologies]

[HKLM\Software\Veetle]

[HKLM\Software\Volatile]

[HKLM\Software\Waves Audio]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Xing Technology Corp.]

[HKLM\Software\Yahoo]

[HKLM\Software\Zone Labs]

[HKLM\Software\acer]

[HKLM\Software\mcafeeupdater]

[HKLM\Software\mozilla.org]

[HKLM\Software\muvee Technologies]

[HKLM\Software\myBabylon_English]

[HKLM\Software\nSplitter]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 26/03/2010 - 15:34:44 - [4500816] ----D- C:\Program Files\4shared Desktop

O43 - CFD: 23/12/2010 - 19:13:54 - [3094515] ----D- C:\Program Files\7-Zip

O43 - CFD: 21/12/2007 - 23:42:08 - [547041848] ----D- C:\Program Files\Acer Arcade Deluxe

O43 - CFD: 21/12/2007 - 23:35:02 - [1316014] ----D- C:\Program Files\ACER Crystal Eye webcam

O43 - CFD: 10/08/2007 - 10:05:36 - [371953624] ----D- C:\Program Files\Acer GameZone

O43 - CFD: 21/12/2007 - 23:46:36 - [1360873] ----D- C:\Program Files\Acer Inc

O43 - CFD: 10/08/2007 - 09:59:44 - [12683094] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites

O43 - CFD: 24/09/2011 - 15:41:10 - [179623984] ----D- C:\Program Files\Ad-Remover

O43 - CFD: 10/08/2007 - 09:51:16 - [184554895] ----D- C:\Program Files\Adobe

O43 - CFD: 02/09/2009 - 23:12:00 - [123222710] ----D- C:\Program Files\AGEIA Technologies

O43 - CFD: 21/12/2007 - 23:45:16 - [11413487] ----D- C:\Program Files\Apoint2K

O43 - CFD: 12/02/2009 - 00:36:12 - [2221118] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 21/10/2010 - 22:05:18 - [2322133344] ----D- C:\Program Files\ArcGIS

O43 - CFD: 13/02/2009 - 20:36:16 - [113328725] ----D- C:\Program Files\Avira

O43 - CFD: 23/12/2010 - 18:30:52 - [42487271] ----D- C:\Program Files\AVS4YOU

O43 - CFD: 11/06/2011 - 12:05:26 - [0] ----D- C:\Program Files\Babylon

O43 - CFD: 23/12/2010 - 18:29:38 - [1244221852] ----D- C:\Program Files\Common Files

O43 - CFD: 10/08/2007 - 08:40:30 - [1065440] ----D- C:\Program Files\CONEXANT

O43 - CFD: 10/08/2007 - 09:43:52 - [172409416] ----D- C:\Program Files\CyberLink

O43 - CFD: 21/10/2010 - 22:17:48 - [174] ----D- C:\Program Files\ESRI

O43 - CFD: 30/07/2008 - 17:27:42 - [0] -SH-D- C:\Program Files\Fichiers communs

O43 - CFD: 10/10/2010 - 18:58:50 - [11611047] ----D- C:\Program Files\Free Video Converter

O43 - CFD: 29/08/2009 - 21:36:44 - [117589829] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 21/12/2007 - 23:34:10 - [8167472] ----D- C:\Program Files\Intel

O43 - CFD: 14/04/2011 - 13:29:28 - [6154617] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 30/07/2008 - 13:02:48 - [55950134] ----D- C:\Program Files\iPod

O43 - CFD: 30/07/2008 - 13:06:02 - [34463223] ----D- C:\Program Files\iTunes

O43 - CFD: 20/12/2009 - 23:12:26 - [90442324] ----D- C:\Program Files\Java

O43 - CFD: 20/12/2009 - 23:15:06 - [16664352] ----D- C:\Program Files\JRE

O43 - CFD: 14/02/2009 - 00:00:20 - [36204918] ----D- C:\Program Files\K-Lite Codec Pack

O43 - CFD: 21/12/2007 - 23:40:40 - [2272070] ----D- C:\Program Files\Launch Manager

O43 - CFD: 21/10/2010 - 22:03:00 - [1160840] ----D- C:\Program Files\Leica Geosystems

O43 - CFD: 17/04/2011 - 19:35:46 - [4921884] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 18/11/2009 - 00:34:44 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 27/11/2008 - 17:03:12 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 02/11/2006 - 14:37:36 - [92807095] ----D- C:\Program Files\Microsoft Games

O43 - CFD: 01/02/2009 - 14:00:16 - [647733776] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 20/06/2011 - 14:29:08 - [38388859] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 19/11/2009 - 02:24:02 - [151889282] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 29/01/2011 - 12:01:36 - [8352099] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 02/01/2011 - 13:26:16 - [99168366] ----D- C:\Program Files\Movie Maker

O43 - CFD: 08/09/2011 - 23:26:28 - [36737111] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 02/11/2006 - 14:37:36 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 27/11/2008 - 16:46:18 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 10/08/2007 - 09:19:00 - [49022275] ----D- C:\Program Files\NewTech Infosystems

O43 - CFD: 14/12/2010 - 16:51:30 - [34538246] ----D- C:\Program Files\Norton Internet Security

O43 - CFD: 20/10/2010 - 16:15:00 - [494512] ----D- C:\Program Files\NOS

O43 - CFD: 20/12/2009 - 23:15:04 - [383829676] ----D- C:\Program Files\OpenOffice.org 3

O43 - CFD: 30/07/2008 - 13:16:10 - [50346124] ----D- C:\Program Files\Panasonic

O43 - CFD: 03/04/2011 - 10:50:18 - [26926656] ----D- C:\Program Files\PDFCreator

O43 - CFD: 12/02/2009 - 00:38:26 - [77199116] ----D- C:\Program Files\QuickTime

O43 - CFD: 13/07/2010 - 12:59:18 - [90895313] ----D- C:\Program Files\Real

O43 - CFD: 10/08/2007 - 08:31:22 - [15921159] ----D- C:\Program Files\Realtek

O43 - CFD: 02/11/2006 - 14:37:36 - [38686465] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 12/12/2010 - 13:24:32 - [15026140] R---D- C:\Program Files\Skype

O43 - CFD: 21/12/2007 - 23:35:02 - [0] ----D- C:\Program Files\SUYIN

O43 - CFD: 14/12/2010 - 14:10:12 - [20312142] ----D- C:\Program Files\Symantec

O43 - CFD: 02/11/2006 - 15:01:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 24/10/2010 - 21:12:10 - [10428379] ----D- C:\Program Files\Veetle

O43 - CFD: 31/12/2010 - 15:40:32 - [1016832] ----D- C:\Program Files\Windows Calendar

O43 - CFD: 31/12/2010 - 15:40:24 - [2760704] ----D- C:\Program Files\Windows Collaboration

O43 - CFD: 31/12/2010 - 15:40:06 - [4492240] ----D- C:\Program Files\Windows Defender

O43 - CFD: 31/12/2010 - 15:40:22 - [7084664] ----D- C:\Program Files\Windows Journal

O43 - CFD: 03/05/2009 - 19:37:34 - [81920151] ----D- C:\Program Files\Windows Live

O43 - CFD: 20/12/2009 - 22:56:38 - [40403742] ----D- C:\Program Files\Windows Live Safety Center

O43 - CFD: 03/05/2009 - 19:36:40 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 11/05/2011 - 14:55:08 - [9116344] ----D- C:\Program Files\Windows Mail

O43 - CFD: 02/01/2011 - 13:26:20 - [4499178] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 30/07/2008 - 17:27:42 - [7945486] ----D- C:\Program Files\Windows NT

O43 - CFD: 31/12/2010 - 15:40:20 - [13464738] ----D- C:\Program Files\Windows Photo Gallery

O43 - CFD: 31/12/2010 - 15:40:26 - [6511482] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 17/04/2011 - 19:31:20 - [0] ----D- C:\Program Files\WinZip

O43 - CFD: 25/09/2011 - 21:49:06 - [6395507] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 04/06/2009 - 13:19:22 - [11079326] ----D- C:\Program Files\Zone Labs

O43 - CFD: 10/08/2007 - 09:51:24 - [6778798] ----D- C:\Program Files\Common Files\Adobe

O43 - CFD: 21/10/2010 - 22:05:08 - [5133227] ----D- C:\Program Files\Common Files\AnswerWorks 4.0

O43 - CFD: 21/10/2010 - 22:05:48 - [4759552] ----D- C:\Program Files\Common Files\ArcGIS

O43 - CFD: 23/12/2010 - 18:30:58 - [64616906] ----D- C:\Program Files\Common Files\AVSMedia

O43 - CFD: 10/08/2007 - 09:55:58 - [92976] ----D- C:\Program Files\Common Files\DESIGNER

O43 - CFD: 21/10/2010 - 22:02:04 - [47467662] ----D- C:\Program Files\Common Files\ESRI

O43 - CFD: 10/08/2007 - 09:30:54 - [15915643] ----D- C:\Program Files\Common Files\InstallShield

O43 - CFD: 10/08/2007 - 09:18:38 - [7178034] ----D- C:\Program Files\Common Files\LightScribe

O43 - CFD: 20/06/2011 - 14:29:04 - [519085512] ----D- C:\Program Files\Common Files\microsoft shared

O43 - CFD: 10/08/2007 - 09:18:14 - [9706600] ----D- C:\Program Files\Common Files\muvee Technologies

O43 - CFD: 10/08/2007 - 09:19:02 - [2290478] ----D- C:\Program Files\Common Files\NewTech Infosystems

O43 - CFD: 10/08/2007 - 10:01:54 - [114688] ----D- C:\Program Files\Common Files\Oberon Media

O43 - CFD: 13/07/2010 - 12:59:40 - [20931937] ----D- C:\Program Files\Common Files\Real

O43 - CFD: 02/11/2006 - 13:18:34 - [2702] ----D- C:\Program Files\Common Files\Services

O43 - CFD: 21/12/2007 - 23:34:24 - [4820842] ----D- C:\Program Files\Common Files\snp2uvc

O43 - CFD: 02/11/2006 - 13:18:34 - [41101735] ----D- C:\Program Files\Common Files\SpeechEngines

O43 - CFD: 20/06/2011 - 16:12:42 - [98648083] ----D- C:\Program Files\Common Files\Symantec Shared

O43 - CFD: 31/12/2010 - 15:40:08 - [50407440] ----D- C:\Program Files\Common Files\System

O43 - CFD: 03/05/2009 - 19:32:56 - [291631813] ----D- C:\Program Files\Common Files\Windows Live

O43 - CFD: 26/11/2008 - 22:50:34 - [19061704] -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller

O43 - CFD: 02/09/2009 - 23:11:18 - [34123264] ----D- C:\Program Files\Common Files\Wise Installation Wizard

O43 - CFD: 13/07/2010 - 12:59:06 - [352256] ----D- C:\Program Files\Common Files\xing shared

O43 - CFD: 10/08/2007 - 09:51:38 - [752] ----D- C:\ProgramData\Adobe

O43 - CFD: 12/02/2009 - 00:36:12 - [2083840] ----D- C:\ProgramData\Apple

O43 - CFD: 12/02/2009 - 00:38:00 - [27963304] ----D- C:\ProgramData\Apple Computer

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Application Data

O43 - CFD: 13/02/2009 - 20:36:16 - [100793777] ----D- C:\ProgramData\Avira

O43 - CFD: 23/12/2010 - 18:31:42 - [0] ----D- C:\ProgramData\AVS4YOU

O43 - CFD: 30/07/2008 - 17:27:42 - [0] -SH-D- C:\ProgramData\Bureau

O43 - CFD: 04/06/2009 - 13:19:20 - [4212] ----D- C:\ProgramData\CheckPoint

O43 - CFD: 21/12/2007 - 23:42:22 - [3680] ----D- C:\ProgramData\CyberLink

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Desktop

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Documents

O43 - CFD: 29/08/2009 - 21:22:08 - [70] ----D- C:\ProgramData\EA Logs

O43 - CFD: 20/04/2009 - 17:52:12 - [65564] ----D- C:\ProgramData\Electronic Arts

O43 - CFD: 21/10/2010 - 21:56:42 - [605] ----D- C:\ProgramData\ESRI

O43 - CFD: 30/07/2008 - 17:27:42 - [0] -SH-D- C:\ProgramData\Favoris

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Favorites

O43 - CFD: 28/08/2009 - 18:43:02 - [721] ----D- C:\ProgramData\Forge of Games

O43 - CFD: 21/02/2010 - 18:51:20 - [2243376] ----D- C:\ProgramData\Google

O43 - CFD: 17/04/2011 - 19:35:32 - [6602691] ----D- C:\ProgramData\Malwarebytes

O43 - CFD: 20/10/2010 - 16:15:34 - [64004] ----D- C:\ProgramData\McAfee

O43 - CFD: 30/07/2008 - 17:27:42 - [0] -SH-D- C:\ProgramData\Menu Démarrer

O43 - CFD: 04/06/2010 - 16:56:10 - [576566776] -S--D- C:\ProgramData\Microsoft

O43 - CFD: 16/06/2011 - 19:14:32 - [57040] ----D- C:\ProgramData\Microsoft Help

O43 - CFD: 30/07/2008 - 17:27:42 - [0] -SH-D- C:\ProgramData\Modèles

O43 - CFD: 08/05/2010 - 13:18:14 - [0] ----D- C:\ProgramData\Musicnotes

O43 - CFD: 14/12/2010 - 14:08:22 - [157] ----D- C:\ProgramData\Norton

O43 - CFD: 20/10/2010 - 16:18:52 - [318650] ----D- C:\ProgramData\NOS

O43 - CFD: 02/09/2009 - 23:26:46 - [126601] ----D- C:\ProgramData\NVIDIA

O43 - CFD: 19/12/2010 - 00:27:08 - [974406] ----D- C:\ProgramData\Real

O43 - CFD: 23/08/2011 - 23:47:42 - [70138368] ----D- C:\ProgramData\Skype

O43 - CFD: 02/11/2006 - 15:02:04 - [0] -SH-D- C:\ProgramData\Start Menu

O43 - CFD: 14/12/2010 - 14:09:52 - [865318271] ----D- C:\ProgramData\Symantec

O43 - CFD: 02/11/2006 - 15:02:06 - [0] -SH-D- C:\ProgramData\Templates

O43 - CFD: 02/01/2011 - 14:21:40 - [0] ----D- C:\ProgramData\WindowsSearch

O43 - CFD: 17/04/2011 - 19:31:20 - [0] ----D- C:\ProgramData\WinZip

O43 - CFD: 26/11/2008 - 22:41:10 - [217800] ----D- C:\ProgramData\WLInstaller

O43 - CFD: 27/11/2008 - 16:41:38 - [105979] ----D- C:\ProgramData\Yahoo! Companion

O43 - CFD: 10/08/2007 - 09:59:46 - [6904815] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}

O43 - CFD: 12/01/2009 - 14:08:18 - [5527720] ----D- C:\Users\Léa\AppData\Roaming\Adobe

O43 - CFD: 01/08/2008 - 19:06:28 - [166449] ----D- C:\Users\Léa\AppData\Roaming\Apple Computer

O43 - CFD: 23/12/2010 - 18:31:30 - [228] ----D- C:\Users\Léa\AppData\Roaming\AVS4YOU

O43 - CFD: 17/09/2009 - 17:34:32 - [0] ----D- C:\Users\Léa\AppData\Roaming\CyberLink

O43 - CFD: 23/10/2010 - 12:28:28 - [1322430] ----D- C:\Users\Léa\AppData\Roaming\ESRI

O43 - CFD: 27/06/2010 - 19:37:16 - [5719763] ----D- C:\Users\Léa\AppData\Roaming\Facebook

O43 - CFD: 11/06/2011 - 12:04:52 - [4739829] ----D- C:\Users\Léa\AppData\Roaming\FileHunter

O43 - CFD: 23/12/2010 - 18:41:22 - [86] ----D- C:\Users\Léa\AppData\Roaming\FreeAudioPack

O43 - CFD: 23/12/2010 - 18:54:14 - [790] ----D- C:\Users\Léa\AppData\Roaming\FreeVideoConverter

O43 - CFD: 30/07/2008 - 17:32:26 - [0] ----D- C:\Users\Léa\AppData\Roaming\Identities

O43 - CFD: 30/07/2008 - 13:15:44 - [0] ----D- C:\Users\Léa\AppData\Roaming\InstallShield

O43 - CFD: 30/07/2008 - 17:31:04 - [3877464] ----D- C:\Users\Léa\AppData\Roaming\Macromedia

O43 - CFD: 17/04/2011 - 19:35:56 - [19062635] ----D- C:\Users\Léa\AppData\Roaming\Malwarebytes

O43 - CFD: 02/11/2006 - 14:37:36 - [0] ----D- C:\Users\Léa\AppData\Roaming\Media Center Programs

O43 - CFD: 14/02/2009 - 00:25:06 - [154] ----D- C:\Users\Léa\AppData\Roaming\Media Player Classic

O43 - CFD: 25/01/2011 - 13:27:56 - [7673378] -S--D- C:\Users\Léa\AppData\Roaming\Microsoft

O43 - CFD: 13/02/2009 - 15:45:46 - [31388698] ----D- C:\Users\Léa\AppData\Roaming\Mozilla

O43 - CFD: 20/12/2009 - 23:18:12 - [2394851] ----D- C:\Users\Léa\AppData\Roaming\OpenOffice.org

O43 - CFD: 30/07/2008 - 13:17:58 - [18382848] ----D- C:\Users\Léa\AppData\Roaming\Panasonic

O43 - CFD: 06/12/2010 - 19:41:14 - [2400656] ----D- C:\Users\Léa\AppData\Roaming\Real

O43 - CFD: 20/04/2009 - 17:53:18 - [10583] R-H-D- C:\Users\Léa\AppData\Roaming\SecuROM

O43 - CFD: 22/09/2011 - 23:41:10 - [12072479] ----D- C:\Users\Léa\AppData\Roaming\Skype

O43 - CFD: 17/09/2009 - 18:06:02 - [7392] ----D- C:\Users\Léa\AppData\Local\Acer Arcade Deluxe

O43 - CFD: 30/07/2008 - 17:33:26 - [11904] --H-D- C:\Users\Léa\AppData\Local\acer eNM

O43 - CFD: 13/02/2009 - 20:33:54 - [51768077] ----D- C:\Users\Léa\AppData\Local\Adobe

O43 - CFD: 12/02/2009 - 00:36:14 - [0] ----D- C:\Users\Léa\AppData\Local\Apple

O43 - CFD: 01/08/2008 - 19:05:04 - [476657] ----D- C:\Users\Léa\AppData\Local\Apple Computer

O43 - CFD: 30/07/2008 - 17:31:02 - [0] -SH-D- C:\Users\Léa\AppData\Local\Application Data

O43 - CFD: 23/12/2010 - 19:19:30 - [2465860] ----D- C:\Users\Léa\AppData\Local\assembly

O43 - CFD: 21/02/2010 - 18:51:20 - [0] ----D- C:\Users\Léa\AppData\Local\Google

O43 - CFD: 30/07/2008 - 17:31:02 - [0] -SH-D- C:\Users\Léa\AppData\Local\Historique

O43 - CFD: 03/01/2010 - 23:55:52 - [1695734138] ----D- C:\Users\Léa\AppData\Local\Microsoft

O43 - CFD: 24/12/2008 - 18:23:36 - [1928757] ----D- C:\Users\Léa\AppData\Local\Microsoft Games

O43 - CFD: 29/11/2008 - 20:26:12 - [96764] ----D- C:\Users\Léa\AppData\Local\Microsoft Help

O43 - CFD: 13/02/2009 - 15:45:36 - [315359845] ----D- C:\Users\Léa\AppData\Local\Mozilla

O43 - CFD: 18/09/2009 - 00:09:18 - [9306] ----D- C:\Users\Léa\AppData\Local\PlayMovie

O43 - CFD: 17/09/2009 - 18:05:52 - [0] ----D- C:\Users\Léa\AppData\Local\PowerCinema

O43 - CFD: 25/09/2011 - 21:43:38 - [1057836776] ----D- C:\Users\Léa\AppData\Local\Temp

O43 - CFD: 30/07/2008 - 17:31:02 - [0] -SH-D- C:\Users\Léa\AppData\Local\Temporary Internet Files

O43 - CFD: 02/08/2008 - 13:59:50 - [35792541] ----D- C:\Users\Léa\AppData\Local\VirtualStore

O43 - CFD: 04/04/2011 - 12:44:26 - [8960] ----D- C:\Users\Léa\AppData\Local\{36A0949C-2D38-4B3D-A73A-1C046E99DD3C}

~ Scan Program Folder in 01mn 27s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.5A2596203E1B3BEAF9FFC628676A82C8] - 25/09/2011 - 20:49:36 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1272758]

O44 - LFC:[MD5.E98CD5886C290374F80ED9B85E42A52C] - 25/09/2011 - 20:43:30 ---A- . (...) -- C:\Windows\system32\perfc009.dat [104070]

O44 - LFC:[MD5.03FC8ACBC3778A49C3DA5EEB9635FCC5] - 25/09/2011 - 20:43:30 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [126626]

O44 - LFC:[MD5.6787B207D72621EEFA429038DF5DE4A0] - 25/09/2011 - 20:43:30 ---A- . (...) -- C:\Windows\system32\perfh009.dat [595996]

O44 - LFC:[MD5.AF8C941362288A61C06F05B3A504DF65] - 25/09/2011 - 20:43:30 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [679042]

O44 - LFC:[MD5.6DC2100130EAEB94F190852E3071BC2A] - 25/09/2011 - 20:43:29 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1495948]

O44 - LFC:[MD5.D33433723BB5E31665170E0D5877403E] - 25/09/2011 - 20:36:53 --HA- . (...) -- C:\Windows\system32\drivers\vsconfig.xml [352615]

O44 - LFC:[MD5.16F748CC537074B7EE702F6CD33578A8] - 25/09/2011 - 20:36:44 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.0068D92511EFD959F72A4E62718699CF] - 24/09/2011 - 17:17:26 ---A- . (...) -- C:\Windows\ntbtlog.txt [15338170]

O44 - LFC:[MD5.7BA97CA42288B3A2451DA2A77B0E49E7] - 24/09/2011 - 14:46:16 ---A- . (...) -- C:\Ad-Report-CLEAN[1].txt [9786]

~ Scan Files in 02mn 01s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.CA4B53136357FFBF2F21116CF1DF6AC4] - 04/01/2011 - 20:40:19 ---A- - C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf

O45 - LFCP:[MD5.0E06D48D5A95C47A2416A38DA5B94C45] - 04/01/2011 - 20:42:52 ---A- - C:\Windows\Prefetch\AUPDATE.EXE-F14A3D51.pf

O45 - LFCP:[MD5.F12B2EF373AFCF4D19D76C479387738D] - 04/01/2011 - 20:51:15 ---A- - C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf

O45 - LFCP:[MD5.A4422E3FCF7210248492D6530C5067AC] - 05/06/2011 - 00:10:58 ---A- - C:\Windows\Prefetch\PIFCRAWL.EXE-BFC87315.pf

O45 - LFCP:[MD5.8AF06F365D11238B89E28793E84EEA00] - 05/06/2011 - 10:21:52 ---A- - C:\Windows\Prefetch\RTKBTMNT.EXE-6D69A9A5.pf

O45 - LFCP:[MD5.72A46CF0140DA33C97FAAE49702DFE1E] - 05/06/2011 - 10:23:25 ---A- - C:\Windows\Prefetch\WINWORD.EXE-71DAFA5C.pf

O45 - LFCP:[MD5.B6930569ABE41761982C9F90CBAD3264] - 05/06/2011 - 10:24:19 ---A- - C:\Windows\Prefetch\ITUNES.EXE-2A42B776.pf

O45 - LFCP:[MD5.C5DF0F63CBB9A2745196056F97616681] - 05/06/2011 - 14:26:19 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-FD126C57.pf

O45 - LFCP:[MD5.5459FDA3894F0FC5449F1E610F00028E] - 05/06/2011 - 14:54:05 ---A- - C:\Windows\Prefetch\WRITEACERADAPTERKEY.EXE-C47871BB.pf

O45 - LFCP:[MD5.DB31CA3451E5C5F99018C0A99CB9BE06] - 05/06/2011 - 20:38:46 ---A- - C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf

O45 - LFCP:[MD5.49ADA3A2BEF6518D7C84A26FD49DC314] - 05/06/2011 - 20:39:12 ---A- - C:\Windows\Prefetch\PREUPD.EXE-A30DA2EC.pf

O45 - LFCP:[MD5.E0EBA1A3CBA75914E6C88B8762230BD6] - 05/06/2011 - 20:39:21 ---A- - C:\Windows\Prefetch\SOFFICE.BIN-FFFF76B3.pf

O45 - LFCP:[MD5.A9CC0D2D5B27A644376C49D437C96C6B] - 05/06/2011 - 20:39:22 ---A- - C:\Windows\Prefetch\EPOWER_DMC.EXE-F199D292.pf

O45 - LFCP:[MD5.AEC18F7F1217E4CE1FE11FD799B93CCF] - 05/06/2011 - 20:39:25 ---A- - C:\Windows\Prefetch\UPDATE.EXE-6CE0A11B.pf

O45 - LFCP:[MD5.30C77F2E9C0F04CB53DAE96C33909AFC] - 05/06/2011 - 20:39:27 ---A- - C:\Windows\Prefetch\ACER.EMPOWERING.FRAMEWORK.SUP-54963495.pf

O45 - LFCP:[MD5.06F827DB898C485CB12561ABED8F3A62] - 05/06/2011 - 20:39:31 ---A- - C:\Windows\Prefetch\EAUDIO.EXE-EE0A24DD.pf

O45 - LFCP:[MD5.172749EB94B983D2362276339064063C] - 05/06/2011 - 20:39:47 ---A- - C:\Windows\Prefetch\SYMLCSVC.EXE-6FCCB913.pf

O45 - LFCP:[MD5.651000824319F0AFC4D869E0F044687A] - 05/06/2011 - 20:39:50 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf

O45 - LFCP:[MD5.FA5D0580D3FE8DB5011C35AA1427C49C] - 05/06/2011 - 20:43:09 ---A- - C:\Windows\Prefetch\JAVA.EXE-E27B75C2.pf

O45 - LFCP:[MD5.88AF6B0AB355E082124F8C3235DC3AD2] - 05/06/2011 - 20:48:17 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf

O45 - LFCP:[MD5.E3A58524BAABBC45A70C3CB62E0B49D6] - 05/06/2011 - 23:52:26 ---A- - C:\Windows\Prefetch\LMANAGER.EXE-9D025777.pf

O45 - LFCP:[MD5.49FB319159823DC5AC2BAC0F48571448] - 05/06/2011 - 23:53:42 ---A- - C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf

O45 - LFCP:[MD5.88F564B885B155B476D61C59961DFDBB] - 06/06/2011 - 14:30:35 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf

O45 - LFCP:[MD5.9714D49E52CCC42D917137077F3D1E4E] - 06/06/2011 - 14:31:47 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf

O45 - LFCP:[MD5.3063E0329A3E19643734BA45DBF30A9B] - 06/06/2011 - 14:58:50 ---A- - C:\Windows\Prefetch\ACRORD32INFO.EXE-500FD695.pf

O45 - LFCP:[MD5.CFD6AF0F88A4D0E87C0DB039FAE53CBF] - 06/06/2011 - 15:01:23 ---A- - C:\Windows\Prefetch\SSVAGENT.EXE-D0A26E22.pf

O45 - LFCP:[MD5.CBC54C7A67E9616711BE476D409A01E3] - 06/06/2011 - 20:38:30 ---A- - C:\Windows\Prefetch\ALUSCHEDULERSVC.EXE-46534E5E.pf

O45 - LFCP:[MD5.E35A1B83024D5B4FB81868244895DE52] - 06/06/2011 - 20:38:30 ---A- - C:\Windows\Prefetch\COMPILEMOF.EXE-C7D0092F.pf

O45 - LFCP:[MD5.D374B4CB591B92018401EABA0115F79B] - 06/06/2011 - 20:38:30 ---A- - C:\Windows\Prefetch\MOBILITYSERVICE.EXE-A96C1E22.pf

O45 - LFCP:[MD5.79330D011F60CC6CB359B6731C19AB25] - 06/06/2011 - 20:38:30 ---A- - C:\Windows\Prefetch\RICHVIDEO.EXE-4FA35CCC.pf

O45 - LFCP:[MD5.0C58F3925D05435F0479EC21FCDC5B02] - 06/06/2011 - 20:38:30 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-3AB35CA7.pf

O45 - LFCP:[MD5.98B4D6C68AC364C3E3D555825E0AD409] - 06/06/2011 - 20:39:29 ---A- - C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf

O45 - LFCP:[MD5.A2F36F24D220236FE85E6154DD98056D] - 07/06/2011 - 14:53:48 ---A- - C:\Windows\Prefetch\ENMTRAY.EXE-19B3589B.pf

O45 - LFCP:[MD5.2371FA9AE8C0060E524B468999670130] - 07/06/2011 - 15:35:46 ---A- - C:\Windows\Prefetch\FLASHUTIL10P_PLUGIN.EXE-DCE6AF7D.pf

O45 - LFCP:[MD5.6CE1D4F1432E7981F037BD89B0411872] - 07/06/2011 - 20:39:22 ---A- - C:\Windows\Prefetch\APNTEX.EXE-2802497E.pf

O45 - LFCP:[MD5.B049BD0165F861558CA24E95DF4D3D75] - 07/06/2011 - 23:51:59 ---A- - C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-2F4708C9.pf

O45 - LFCP:[MD5.97C4C2D4D41D75488C4084369A9983B7] - 08/06/2011 - 14:54:00 ---A- - C:\Windows\Prefetch\APMSGFWD.EXE-B9B76B4B.pf

O45 - LFCP:[MD5.73C88CEC809956CDC89BF7545DF4797D] - 08/06/2011 - 20:39:36 ---A- - C:\Windows\Prefetch\SYMLCSV1.EXE-1D262141.pf

O45 - LFCP:[MD5.7854AE2E70832BDEE41D165C187F3DBC] - 08/06/2011 - 23:51:59 ---A- - C:\Windows\Prefetch\MBRWRWIN.EXE-2144233B.pf

O45 - LFCP:[MD5.B817DDE9828127E96632F72A699B2272] - 09/06/2011 - 10:20:58 ---A- - C:\Windows\Prefetch\SERVICE.EXE-281751EE.pf

O45 - LFCP:[MD5.92C7F303A43F389577329C952D5F3DFC] - 09/06/2011 - 14:51:55 ---A- - C:\Windows\Prefetch\SEARCHINDEXER.EXE-4A6353B9.pf

O45 - LFCP:[MD5.70C0228A744D2A73C8BD1E8F8D3AB961] - 09/06/2011 - 14:51:55 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-61AE5AB6.pf

O45 - LFCP:[MD5.1826D4A43EE462BC94164B6B69F3D915] - 09/06/2011 - 14:51:55 ---A- - C:\Windows\Prefetch\SVCHOST.EXE-80F4A784.pf

O45 - LFCP:[MD5.7437A286C917106828A8654746498C1A] - 09/06/2011 - 14:51:55 ---A- - C:\Windows\Prefetch\XAUDIO.EXE-D92946E9.pf

O45 - LFCP:[MD5.965CAA3D8B8FD3208B402D95721D25F1] - 10/06/2011 - 20:42:38 ---A- - C:\Windows\Prefetch\AVGNT.EXE-562035F4.pf

O45 - LFCP:[MD5.18EC759B64DC5CEB55A1CF7F00DE943E] - 11/02/2011 - 20:42:49 ---A- - C:\Windows\Prefetch\REALPLAY.EXE-A09C7945.pf

O45 - LFCP:[MD5.4E72F7C5E314DA12D8132A87667A1FA7] - 12/02/2011 - 15:01:31 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf

O45 - LFCP:[MD5.C0117C50703DE7B15BADA38BECDC2D8C] - 12/10/2010 - 20:39:22 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-8EF34503.pf

O45 - LFCP:[MD5.8CF8D4790D0E0912144D8E35DA996386] - 14/12/2010 - 20:42:51 ---A- - C:\Windows\Prefetch\LUCOMS~1.EXE-F2E330F7.pf

O45 - LFCP:[MD5.2CD9E540E3E0A4BE8DE7A01944C7A32E] - 14/12/2010 - 20:42:53 ---A- - C:\Windows\Prefetch\LUCALLBACKPROXY.EXE-63F065B5.pf

O45 - LFCP:[MD5.49B10388B107F344263BC4F9F71B5EA1] - 15/02/2009 - 14:41:54 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf

O45 - LFCP:[MD5.D2F0A3D47BAEDCBF2DAFBF547CC001BF] - 15/02/2009 - 20:41:11 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf

O45 - LFCP:[MD5.99F542DCCCAC2ABD8D59F60C7F754D8A] - 15/04/2009 - 20:40:16 ---A- - C:\Windows\Prefetch\PCAUI.EXE-3E82C312.pf

O45 - LFCP:[MD5.ADAD5BF8C56426234BE686F20CAE1FDF] - 19/07/2010 - 15:01:44 ---A- - C:\Windows\Prefetch\REALUPGRADE.EXE-015CF2E6.pf

O45 - LFCP:[MD5.A73A7F870EB90AEB47F9B41CD0B3F21E] - 20/01/2010 - 20:44:52 ---A- - C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf

O45 - LFCP:[MD5.DCBEFCE65F057050587071E62A47277A] - 20/06/2011 - 00:38:11 ---A- - C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf

O45 - LFCP:[MD5.003A943DF5EB7380E336AB6F5CD9A48D] - 21/07/2009 - 20:45:37 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf

O45 - LFCP:[MD5.6E0FD39A4D0FF03178FC381D6A7FCB18] - 28/04/2010 - 20:39:43 ---A- - C:\Windows\Prefetch\IPCONFIG.EXE-912F3D5B.pf

O45 - LFCP:[MD5.E3C3D0B4ACBA253CFA1D3D76A67345BE] - 28/11/2009 - 20:45:32 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf

O45 - LFCP:[MD5.98687DEE35186AAF356C5C5FD406ECD9] - 29/01/2010 - 20:52:11 ---A- - C:\Windows\Prefetch\AVWSC.EXE-18A3FCA0.pf

O45 - LFCP:[MD5.65AD4CBC359F807FCACCA65483DEFDC1] - 30/07/2008 - 00:10:59 ---A- - C:\Windows\Prefetch\SSAUTORN.EXE-E6E36F94.pf

O45 - LFCP:[MD5.4C351C403F56A1CC5FADECD9D0256150] - 30/07/2008 - 00:38:19 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-2152794718-1122633630-1261851648-1000.db

O45 - LFCP:[MD5.29F416343D79C666903D8EDEF8C48F84] - 30/07/2008 - 00:38:19 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-2152794718-1122633630-1261851648-1000.db

O45 - LFCP:[MD5.FAA3FB9DE75E0BB8D80BD0C516732297] - 30/07/2008 - 00:38:23 ---A- - C:\Windows\Prefetch\PfSvPerfStats.bin

O45 - LFCP:[MD5.6EB72E3919C3EF1FC4218ACEECB0FF76] - 30/07/2008 - 00:38:25 ---A- - C:\Windows\Prefetch\AgRobust.db

O45 - LFCP:[MD5.8B7D816DF26A558F0A476F1EA04FB920] - 30/07/2008 - 00:38:35 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db

O45 - LFCP:[MD5.D6118936E86CD3B8E23E81468C83C2C1] - 30/07/2008 - 00:38:35 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db

O45 - LFCP:[MD5.21029583F39DB2C3D39B51D54208262D] - 30/07/2008 - 00:38:35 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db

O45 - LFCP:[MD5.9A177C7928C6B0ECFA3E8AAB56C77DAC] - 30/07/2008 - 20:38:30 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.3E69BD6E8529CFD3789C98A4866A1425] - 30/07/2008 - 20:41:43 ---A- - C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf

O45 - LFCP:[MD5.051EAB1C22EAEC5FF8910911D65117B4] - 30/07/2008 - 20:41:46 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf

O45 - LFCP:[MD5.D2EAEF69EE760571D289EE087179A632] - 30/07/2008 - 20:45:23 ---A- - C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf

O45 - LFCP:[MD5.1E3E9D63F79515EECFB176B202C8F71A] - 30/07/2008 - 20:49:35 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf

O45 - LFCP:[MD5.E483971EC4D8E47DB10AA02A20950686] - 30/07/2008 - 20:49:59 ---A- - C:\Windows\Prefetch\WERCON.EXE-E36BD04E.pf

O45 - LFCP:[MD5.C74A17BCCE3A22749D0E2191A67D41EF] - 30/07/2008 - 20:52:07 ---A- - C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf

~ Scan Prefetcher in 00mn 02s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\system32\Drivers\Wdf01000.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\system32\Drivers\Wdf01000.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{2fa55ff8-5e34-11dd-bdeb-c74b1aea5ebc}\AutoRun\command. (...) -- F:\LaunchU3.exe (.not file.)

O51 - MPSK:{a8c7d587-2ab0-11de-a32c-fca13fc7ee89}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\system32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\divx.dll

O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\Windows\system32\xvidvfw.dll

O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\system32\yv12vfw.dll

O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\system32\ac3acm.acm

O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\system32\lameACM.acm

O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\Windows\system32\ff_vfw.dll

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\PROGRA~1\ACERAR~1\VIDEOM~1\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\PROGRA~1\ACERAR~1\DVWIZA~1\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"divx.dll"="DivX 6.8.5" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.2.1" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\system32\ac3acm.acm

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\Windows\system32\ff_vfw.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "HideSCAHealth"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]

O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 02/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]

O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 02/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]

O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 02/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]

O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 02/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]

O58 - SDL:[MD5.DB8EA68E5864ADF61B73516788659E71] - 22/12/2007 - 03:33:26 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\system32\drivers\Apfiltr.sys [154624]

O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 02/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]

O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 02/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]

O58 - SDL:[MD5.B0C272DEF210B149C0BFA0D85600CE4B] - 10/08/2007 - 11:03:32 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys [737280]

O58 - SDL:[MD5.7334E72F94C59F7699936E182B278DC3] - 13/02/2009 - 14:39:22 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys [75096]

O58 - SDL:[MD5.C7EA0E3E37FF1CD2BB65636448322572] - 10/08/2007 - 09:57:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.0 Driver..) -- C:\Windows\system32\drivers\b57nd60x.sys [179712]

O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]

O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]

O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]

O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]

O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]

O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]

O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 02/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]

O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]

O58 - SDL:[MD5.73BAF270D24FE726B9CD7F80BB17A23D] - 10/08/2007 - 14:29:38 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\system32\drivers\DKbFltr.sys [21264]

O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 02/11/2006 - 08:30:54 ---A- . (.Intel Corporation - Intel® PRO/1000 Adapter NDIS 6 deserialized driver.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]

O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]

O58 - SDL:[MD5.29DCAEB81DDE6F154AA4D36B18ECBB1F] - 10/08/2007 - 09:26:50 ---A- . (.ENE TECHNOLOGY INC. - ENE Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\enecir.sys [32256]

O58 - SDL:[MD5.32A73A8952580B284A47290ADB62032A] - 30/07/2008 - 00:21:04 ---A- . (.GEAR Software Inc. - CDRom Class Filter Driver.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [14408]

O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 02/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]

O58 - SDL:[MD5.194BC52FC0F53E540FAF9DE8A9C05255] - 10/08/2007 - 10:18:04 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\HSXHWAZL.sys [208384]

O58 - SDL:[MD5.C9C63410D8CF98F621B9CC62243FB877] - 10/08/2007 - 10:17:54 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\HSX_CNXT.sys [660480]

O58 - SDL:[MD5.3F53B4AF98F8FD83B7F0B8B65D2D90A7] - 10/08/2007 - 10:19:26 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\HSX_DPV.sys [984064]

O58 - SDL:[MD5.997E8F5939F2D12CD9F2E6B395724C16] - 21/12/2007 - 12:58:56 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStor.sys [304920]

O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 02/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]

O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]

O58 - SDL:[MD5.9D64201C9E5AC8D1F088762BA00FF3AB] - 10/08/2007 - 17:19:34 ---A- . (...) -- C:\Windows\system32\drivers\int15.sys [76584]

O58 - SDL:[MD5.91B61589BB2915E81D436EFE07548507] - 10/08/2007 - 17:19:34 ---A- . (...) -- C:\Windows\system32\drivers\int15_64.sys [15656]

O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]

O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]

O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 02/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]

O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]

O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 02/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]

O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 17/04/2011 - 17:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952]

O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 17/04/2011 - 17:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224]

O58 - SDL:[MD5.0CEA2D0D3FA284B85ED5B68365114F76] - 10/08/2007 - 07:26:58 ---A- . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\system32\drivers\mdmxsdk.sys [12672]

O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 02/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]

O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]

O58 - SDL:[MD5.A15F219208843A5A210C8CB391384453] - 02/11/2006 - 08:30:54 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\Windows\system32\drivers\NETw3v32.sys [1781760]

O58 - SDL:[MD5.CB3AF516A6797B27725E3F1E73F3496C] - 10/08/2007 - 23:45:18 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw4v32.sys [2219520]

O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]

O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 10/08/2007 - 08:17:50 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]

O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]

O58 - SDL:[MD5.99C0A0DF332A5B28E8A3D08CC8D879F3] - 02/09/2009 - 15:04:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 186.03.) -- C:\Windows\system32\drivers\nvlddmkm.sys [9850240]

O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 02/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]

O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 02/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040]

O58 - SDL:[MD5.E801D5CC24E1CF18FA87D24D7074B876] - 10/08/2007 - 15:34:38 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20776]

O58 - SDL:[MD5.24B5E3429F7F0E779FC2E6E36A0A5F73] - 10/08/2007 - 15:34:44 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]

O58 - SDL:[MD5.01CBFD08C0E8A6106BB26FCDA297154E] - 10/08/2007 - 15:34:40 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]

O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 02/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]

O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]

O58 - SDL:[MD5.355AAC141B214BEF1DBC1483AFD9BD50] - 10/08/2007 - 13:42:22 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\system32\drivers\rimmptsk.sys [39936]

O58 - SDL:[MD5.A4216C71DD4F60B26418CCFD99CD0815] - 10/08/2007 - 15:40:20 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\system32\drivers\rimsptsk.sys [42496]

O58 - SDL:[MD5.D231B577024AA324AF13A42F3A807D10] - 10/08/2007 - 21:02:04 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\drivers\rixdptsk.sys [37376]

O58 - SDL:[MD5.90A10B39896040B3154613C11C932AEB] - 10/08/2007 - 02:59:00 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1792792]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 10/08/2005 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\Windows\system32\drivers\sfdrv01.sys [50688]

O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 16/05/2005 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\Windows\system32\drivers\sfhlp02.sys [6656]

O58 - SDL:[MD5.D5A7E09D2C6A702809E49190D52ADC9F] - 03/11/2005 - 15:40:07 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\Windows\system32\drivers\sfvfs02.sys [63488]

O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 02/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]

O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 02/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]

O58 - SDL:[MD5.A10AB556379FE56A37BAA43C3E7DF23E] - 21/12/2007 - 14:04:38 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys [28032]

O58 - SDL:[MD5.EF1F141A83C61503333569D2862F3999] - 21/12/2007 - 15:17:26 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys [1749376]

O58 - SDL:[MD5.655773F2F1A3730C6CF20280A49F4EE1] - 14/12/2010 - 23:57:12 ---A- . (.Symantec Corporation - Symantec AutoProtect.) -- C:\Windows\system32\drivers\srtsp.sys [279088]

O58 - SDL:[MD5.2A0AAF370D4C6574A34AE2F4A0709CAE] - 14/12/2010 - 23:57:12 ---A- . (.Symantec Corporation - Symantec AutoProtect.) -- C:\Windows\system32\drivers\srtspl.sys [317616]

O58 - SDL:[MD5.3104BDCEACE2D5710776DD05E6A286C1] - 14/12/2010 - 23:57:12 ---A- . (.Symantec Corporation - Symantec AutoProtect.) -- C:\Windows\system32\drivers\srtspx.sys [43696]

O58 - SDL:[MD5.71D609C5DFF067906D930BDE031C4CFE] - 13/02/2009 - 18:03:26 ---A- . (.AVIRA GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [21248]

O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]

O58 - SDL:[MD5.51B57CDA977170AC608D839DBFA1D3EE] - 14/12/2010 - 19:07:10 ---A- . (.Symantec Corporation - DNS Filter Driver.) -- C:\Windows\system32\drivers\symdns.sys [12720]

O58 - SDL:[MD5.06B95820DF51502099A8A15C93E87986] - 10/08/2007 - 13:10:11 ---A- . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\system32\drivers\SYMEVENT.SYS [124464]

O58 - SDL:[MD5.A131D8360B01044517AA44529E2137D6] - 14/12/2010 - 19:07:10 ---A- . (.Symantec Corporation - Firewall Filter Driver.) -- C:\Windows\system32\drivers\symfw.sys [145968]

O58 - SDL:[MD5.2B77868F02DAE02103380B824431B798] - 14/12/2010 - 19:07:10 ---A- . (.Symantec Corporation - IDS Filter Driver.) -- C:\Windows\system32\drivers\symids.sys [39856]

O58 - SDL:[MD5.7D3ADDFE63E5227BD2DBD5692BAFB688] - 14/12/2010 - 19:07:12 ---A- . (.Symantec Corporation - NDIS Filter Driver.) -- C:\Windows\system32\drivers\symndisv.sys [38448]

O58 - SDL:[MD5.394B2368212114D538316812AF60FDDD] - 14/12/2010 - 19:07:10 ---A- . (.Symantec Corporation - Redirector Filter Driver.) -- C:\Windows\system32\drivers\symredrv.sys [26416]

O58 - SDL:[MD5.D46676BB414C7531BDFFE637A33F5033] - 14/12/2010 - 19:07:10 ---A- . (.Symantec Corporation - Network Dispatch Driver.) -- C:\Windows\system32\drivers\symtdi.sys [188080]

O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]

O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]

O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 10/08/2007 - 17:19:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort.sys [14544]

O58 - SDL:[MD5.4E104EBC164231D2272CC9BDD1EF5C40] - 10/08/2007 - 17:19:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort64.sys [8704]

O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]

O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]

O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]

O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 02/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]

O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 02/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]

O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 02/11/2006 - 08:41:49 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [200704]

O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 02/11/2006 - 08:41:48 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [654336]

O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 02/11/2006 - 08:41:50 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [987648]

O58 - SDL:[MD5.2E579520E114A9CA309F13BF40AD8292] - 10/08/2007 - 06:23:30 ---A- . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\system32\drivers\XAudio.sys [8704]

O58 - SDL:[MD5.40AC8590CC9006DBB99FFCB37879D4C6] - 10/08/2007 - 17:19:34 ---A- . (.Zeal SoftStudio - zntport.) -- C:\Windows\system32\drivers\zntport.sys [6080]

O58 - SDL:[MD5.C32ACB6D3FB23EBF528B676F7B8197B7] - 10/08/2007 - 15:30:12 ---A- . (.Zeal SoftStudio - NTPort Library kernel driver.) -- C:\Windows\system32\drivers\zntport64.sys [13096]

O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]

O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]

O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]

O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]

O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]

O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]

O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]

O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]

O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]

O58 - SDL:[MD5.354585D8E53F2FF9B8AD5E1E2EF68CEF] - 30/07/2008 - 18:44:16 ---A- . (.Matsushita Electric Industrial Co., Ltd. - Phoebe Photo Distribution Manager.) -- C:\Windows\system32\PhDi2.sys [45056]

O58 - SDL:[MD5.A10AB556379FE56A37BAA43C3E7DF23E] - 21/12/2007 - 14:04:38 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\sncduvc.sys [28032]

O58 - SDL:[MD5.EF1F141A83C61503333569D2862F3999] - 21/12/2007 - 15:17:26 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\snp2uvc.sys [1749376]

~ Scan Drivers in 00mn 44s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 01/02/2009 - 10:23:58 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Word11.pip [1856]

O61 - LFC:Last File Created 01/02/2009 - 11:36:22 --H-- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\index.dat [1318]

O61 - LFC:Last File Created 01/08/2008 - 19:46:25 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\PowerP12.pip [1468]

O61 - LFC:Last File Created 02/09/2009 - 20:37:00 ---A- C:\Users\All Users\nvModes.dat [31681]

O61 - LFC:Last File Created 02/09/2009 - 20:44:52 ---A- C:\Users\All Users\nvModes.001 [31681]

O61 - LFC:Last File Created 02/09/2010 - 22:23:10 ---A- C:\Users\Léa\AppData\Roaming\Skype\shared_dynco\dc.db [1183744]

O61 - LFC:Last File Created 02/09/2010 - 22:40:53 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\dc.db [45056]

O61 - LFC:Last File Created 02/09/2010 - 22:41:08 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\bistats.db [77824]

O61 - LFC:Last File Created 02/09/2010 - 22:41:09 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\main.db [4382720]

O61 - LFC:Last File Created 03/05/2009 - 19:26:56 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\IdentityCRL\Production\MetaConfig.xml [163]

O61 - LFC:Last File Created 10/08/2007 - 00:38:41 ---A- C:\Users\All Users\Symantec\Common Client\settings.dat [13643244]

O61 - LFC:Last File Created 10/08/2007 - 20:42:22 ---A- C:\Users\All Users\Symantec\Definitions\VirusDefs\usage.dat [108]

O61 - LFC:Last File Created 10/08/2007 - 20:43:58 ---A- C:\Users\All Users\Symantec\LiveUpdate\Log.LiveUpdate [4291110]

O61 - LFC:Last File Created 12/12/2010 - 22:23:20 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\keyval.db [40960]

O61 - LFC:Last File Created 13/02/2009 - 20:42:38 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\EVENTDB\avevtdb.dbe [12288]

O61 - LFC:Last File Created 13/02/2009 - 20:42:38 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\JOBS\updjob.avj [1298]

O61 - LFC:Last File Created 13/07/2010 - 20:38:54 ---A- C:\Users\All Users\Real\RealUpgrade\RealUpgrade_1_1.xml [623]

O61 - LFC:Last File Created 14/12/2010 - 00:25:56 ---A- C:\Users\All Users\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Job.dat [22]

O61 - LFC:Last File Created 14/12/2010 - 20:42:22 ---A- C:\Users\Public\Documents\ccErrDspLog.txt [523182]

O61 - LFC:Last File Created 14/12/2010 - 20:43:26 R---- C:\Users\All Users\Symantec\nppw.zip [1186986]

O61 - LFC:Last File Created 14/12/2010 - 20:43:41 R---- C:\Users\All Users\Symantec\LiveUpdate\Product.Inventory.LastGood.LiveUpdate [18352]

O61 - LFC:Last File Created 15/12/2010 - 00:26:42 ---A- C:\Users\All Users\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Current.dat [22]

O61 - LFC:Last File Created 22/09/2011 - 14:11:33 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\Apap.lnk [382]

O61 - LFC:Last File Created 22/09/2011 - 14:11:33 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\chanson + anecdote.lnk [565]

O61 - LFC:Last File Created 22/09/2011 - 14:11:48 ---A- C:\Users\Léa\Music\iTunes\iTunes Library.itl [2402964]

O61 - LFC:Last File Created 22/09/2011 - 14:11:48 ---A- C:\Users\Léa\Music\iTunes\iTunes Music Library.xml [3526964]

O61 - LFC:Last File Created 22/09/2011 - 20:05:11 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\chatsync\c8\c8980d6313fed4ba.dat [3094]

O61 - LFC:Last File Created 22/09/2011 - 21:33:01 ---A- C:\Users\Léa\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog [0]

O61 - LFC:Last File Created 22/09/2011 - 22:16:19 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\De tout.lnk [401]

O61 - LFC:Last File Created 22/09/2011 - 22:16:19 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\viel zu tun!.lnk [554]

O61 - LFC:Last File Created 22/09/2011 - 22:41:09 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\config.xml [11177]

O61 - LFC:Last File Created 22/09/2011 - 22:41:09 ---A- C:\Users\Léa\AppData\Roaming\Skype\shared.xml [57645]

O61 - LFC:Last File Created 23/09/2011 - 10:23:12 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\UPDATE\AVUPDATE_4e7c4fc1\idx\master.idx [31963]

O61 - LFC:Last File Created 23/09/2011 - 10:48:08 ---A- C:\Users\Léa\AppData\Local\d3d9caps.dat [1356]

O61 - LFC:Last File Created 23/09/2011 - 11:00:38 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4edf592b.qua [162594]

O61 - LFC:Last File Created 23/09/2011 - 11:36:19 --HA- C:\Users\Léa\Documents\Job\~$V 2011.doc [162]

O61 - LFC:Last File Created 23/09/2011 - 11:36:22 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\CV 2011.lnk [906]

O61 - LFC:Last File Created 23/09/2011 - 11:36:22 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\Office\Récent\Job.lnk [778]

O61 - LFC:Last File Created 23/09/2011 - 11:53:52 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4cae7462.qua [10028]

O61 - LFC:Last File Created 23/09/2011 - 11:53:52 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4eee65a1.qua [162148]

O61 - LFC:Last File Created 23/09/2011 - 11:56:30 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4eac6613.qua [9689]

O61 - LFC:Last File Created 23/09/2011 - 11:56:30 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4edf6612.qua [10595]

O61 - LFC:Last File Created 23/09/2011 - 11:56:31 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4ead6612.qua [6386]

O61 - LFC:Last File Created 23/09/2011 - 12:08:00 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\INFECTED\4eee68f5.qua [8484]

O61 - LFC:Last File Created 23/09/2011 - 12:57:03 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\LOGFILES\AVSCAN-20110923-120010-00CA94CC.LOG [16712]

O61 - LFC:Last File Created 23/09/2011 - 13:00:54 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\TEMP\AVSCAN-20110923-120010-00C28C64\0000001E-26CC5061.av$ [2618813]

O61 - LFC:Last File Created 23/09/2011 - 15:33:44 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-09-23_Log.ALUSchedulerSvc.LiveUpdate [1836]

O61 - LFC:Last File Created 23/09/2011 - 15:35:50 ---A- C:\Users\Léa\AppData\Local\assembly\tmp\C4RF0L8V\networker.EXE [0]

O61 - LFC:Last File Created 23/09/2011 - 23:00:21 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt01.sqm [944]

O61 - LFC:Last File Created 23/09/2011 - 23:00:21 ---A- C:\Users\Léa\AppData\Roaming\Microsoft\MSN Messenger\sqmnoopt02.sqm [284]

O61 - LFC:Last File Created 24/09/2011 - 14:29:22 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\REPORTS\28c61637.avl [1450]

O61 - LFC:Last File Created 24/09/2011 - 14:30:49 ---A- C:\Users\All Users\Symantec\LiveUpdate\10.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 24/09/2011 - 14:30:49 R--A- C:\Users\All Users\Symantec\LiveUpdate\10.Settings.LiveUpdate [20054]

O61 - LFC:Last File Created 24/09/2011 - 14:34:49 ---A- C:\Users\All Users\Symantec\LiveUpdate\Downloads\livetri.zip [0]

O61 - LFC:Last File Created 24/09/2011 - 14:35:04 ---A- C:\Users\All Users\Symantec\LiveUpdate\9.Product.Inventory.LiveUpdate [18352]

O61 - LFC:Last File Created 24/09/2011 - 14:35:04 R--A- C:\Users\All Users\Symantec\LiveUpdate\9.Settings.LiveUpdate [20343]

O61 - LFC:Last File Created 24/09/2011 - 14:56:05 ---A- C:\Users\All Users\Symantec\LiveUpdate\8.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 24/09/2011 - 14:56:05 R--A- C:\Users\All Users\Symantec\LiveUpdate\8.Settings.LiveUpdate [20343]

O61 - LFC:Last File Created 24/09/2011 - 14:56:07 ---A- C:\Users\All Users\Symantec\LiveUpdate\7.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 24/09/2011 - 14:56:07 R--A- C:\Users\All Users\Symantec\LiveUpdate\7.Settings.LiveUpdate [20343]

O61 - LFC:Last File Created 24/09/2011 - 14:57:25 R--A- C:\Users\All Users\Symantec\LiveUpdate\6.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 24/09/2011 - 15:04:15 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-09-24_Log.ALUSchedulerSvc.LiveUpdate [4622]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.23615 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.30625 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.43967 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.47373 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.49522 [131]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.52644 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.56992 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.57774 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.66161 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.79260 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.81730 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.86118 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.23615 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.30625 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.43967 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.47373 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.49522 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.52644 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.56992 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.57774 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.66161 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.79260 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.81730 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:48 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.86118 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.12073 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.16433 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.24928 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.27897 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.29990 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.30444 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.38594 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.40316 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.43242 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.43970 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.45083 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.49978 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.57961 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.59328 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.59698 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.59973 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.65658 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.72680 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.85738 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.86004 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.93533 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.96990 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.12073 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.16433 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.24928 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.27897 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.29990 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.30444 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.38594 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.40316 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.43242 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.43970 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.45083 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.49978 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.57961 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.59328 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.59698 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.59973 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.65658 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.72680 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.85738 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.86004 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.93533 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:49 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.96990 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.21305 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.21456 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.23182 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.25090 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.25100 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.26538 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.28692 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.44966 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.52270 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.52979 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.57096 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.60327 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.60634 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.61002 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.64095 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.72025 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.72386 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.75387 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.76896 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.77925 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.89703 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.93388 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.21305 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.21456 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.23182 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.25090 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.25100 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.26538 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.28692 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.44966 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.52270 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.52979 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.57096 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.60327 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.60634 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.61002 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.64095 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.72025 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.72386 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.75387 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.76896 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.77925 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.89703 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:50 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.93388 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.11165 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.13833 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.15270 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.17809 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.18098 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.19825 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.19919 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.21559 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.29247 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.41104 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.42237 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.47547 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.48559 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.51080 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.56150 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.69677 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.70936 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.71734 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.73842 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.80088 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.80491 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.80770 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.87389 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.11165 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.13833 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.15270 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.17809 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.18098 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.19825 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.19919 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.21559 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.29247 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.41104 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.42237 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.47547 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.48559 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.51080 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.56150 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.69677 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.70936 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.71734 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.73842 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.80088 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.80491 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.80770 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:51 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.87389 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.14257 [76]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.14939 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.17429 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.19569 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.46129 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.53345 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.57521 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.64731 [158]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.73955 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.78075 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.85903 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.87997 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.88152 [155]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP2.83569 [67]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP4.18677 [213]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.14257 [26018]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.14939 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.17429 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.19569 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.46129 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.53345 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.57521 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.64731 [256000]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.73955 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.78075 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.85903 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.87997 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:35:52 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.88152 [14848]

O61 - LFC:Last File Created 24/09/2011 - 18:36:38 ---A- C:\Users\Léa\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-09-24 (19-36-38).txt [16219]

O61 - LFC:Last File Created 24/09/2011 - 18:40:32 ---A- C:\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware\5057193 [10702]

O61 - LFC:Last File Created 24/09/2011 - 20:38:40 ---A- C:\Users\Léa\AppData\Local\Temp\Léa.bmp [31832]

O61 - LFC:Last File Created 24/09/2011 - 20:39:31 ---A- C:\Users\Léa\AppData\Local\Temp\symlcsv1.exe [58760]

O61 - LFC:Last File Created 25/09/2011 - 00:10:57 ---A- C:\Users\All Users\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\Pep2_{BC8D3EAF-F864-4D4B-AB4D-B3D0C32E2840}.dat [1262]

O61 - LFC:Last File Created 25/09/2011 - 00:37:59 --HA- C:\Users\Léa\AppData\Local\IconCache.db [2221755]

O61 - LFC:Last File Created 25/09/2011 - 00:38:41 ---A- C:\Users\All Users\Symantec\Common Client\settings.bak [13643244]

O61 - LFC:Last File Created 25/09/2011 - 14:57:25 ---A- C:\Users\All Users\Symantec\LiveUpdate\6.Product.Inventory.LiveUpdate [18352]

O61 - LFC:Last File Created 25/09/2011 - 20:39:12 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\update.conf [1522]

O61 - LFC:Last File Created 25/09/2011 - 20:39:45 ---A- C:\Users\Léa\AppData\Roaming\OpenOffice.org\3\.lock [137]

O61 - LFC:Last File Created 25/09/2011 - 20:39:45 ---A- C:\Users\Léa\AppData\Roaming\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu [692]

O61 - LFC:Last File Created 25/09/2011 - 20:42:38 ---A- C:\Users\All Users\Avira\AntiVir PersonalEdition Classic\REPORTS\04327e26.avl [1450]

O61 - LFC:Last File Created 25/09/2011 - 20:42:41 ---A- C:\Users\All Users\Symantec\LiveUpdate\2.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 25/09/2011 - 20:42:41 R--A- C:\Users\All Users\Symantec\LiveUpdate\2.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 25/09/2011 - 20:42:42 ---A- C:\Users\All Users\Symantec\LiveUpdate\1.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 25/09/2011 - 20:42:42 R--A- C:\Users\All Users\Symantec\LiveUpdate\1.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\Identifiers.xml.bin [3543871]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\Indicators.xml.bin [76998]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\PopularSites.xml.bin [10898]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\Redirectors.xml.bin [93580]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\Resources.xml.bin [548]

O61 - LFC:Last File Created 25/09/2011 - 20:43:26 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\nppw.zip [1186986]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\SafeList.xml.bin [855943]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\SearchServices.xml.bin [27383]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\Throttle.xml.bin [454]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\TrustedDomains.xml.bin [254625]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\URLAnalysis.xml.bin [985008]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\WebHostingSites.xml.bin [35338]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\Identifiers.xml.bin [3518613]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\Indicators.xml.bin [76998]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\PopularSites.xml.bin [10898]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\Redirectors.xml.bin [93580]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\Resources.xml.bin [548]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\SafeList.xml.bin [855943]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\SearchServices.xml.bin [27383]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\Throttle.xml.bin [454]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\TrustedDomains.xml.bin [254625]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\URLAnalysis.xml.bin [985008]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\WebHostingSites.xml.bin [35338]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Identifiers.xml.bin [5354708]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Indicators.xml.bin [76998]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\PopularSites.xml.bin [10857]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Redirectors.xml.bin [93580]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Resources.xml.bin [548]

O61 - LFC:Last File Created 25/09/2011 - 20:43:27 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\SafeList.xml.bin [855695]

O61 - LFC:Last File Created 25/09/2011 - 20:43:28 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\SearchServices.xml.bin [27383]

O61 - LFC:Last File Created 25/09/2011 - 20:43:28 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Throttle.xml.bin [454]

O61 - LFC:Last File Created 25/09/2011 - 20:43:28 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\TrustedDomains.xml.bin [254625]

O61 - LFC:Last File Created 25/09/2011 - 20:43:28 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\URLAnalysis.xml.bin [985008]

O61 - LFC:Last File Created 25/09/2011 - 20:43:28 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\BinHub\WebHostingSites.xml.bin [35338]

O61 - LFC:Last File Created 25/09/2011 - 20:43:29 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.001\full-webauth.sql.bin [7587403]

O61 - LFC:Last File Created 25/09/2011 - 20:43:29 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\latest-hub-webauth.sql.bin [19023154]

O61 - LFC:Last File Created 25/09/2011 - 20:43:30 ---A- C:\Users\All Users\Symantec\Definitions\SymcData\nco1.0defs\20101214.002\full-webauth.sql.bin [7587403]

O61 - LFC:Last File Created 25/09/2011 - 20:43:39 ---A- C:\Users\All Users\Symantec\LiveUpdate\Downloads\minitri.flg [0]

O61 - LFC:Last File Created 25/09/2011 - 20:43:46 ---A- C:\Users\All Users\Symantec\LiveUpdate\Product.Inventory.LiveUpdate [18352]

O61 - LFC:Last File Created 25/09/2011 - 20:43:46 R---- C:\Users\All Users\Symantec\LiveUpdate\Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 25/09/2011 - 20:43:54 ---A- C:\Users\All Users\Symantec\LiveUpdate\2011-09-25_Log.ALUSchedulerSvc.LiveUpdate [3190]

O61 - LFC:Last File Created 25/09/2011 - 20:45:30 ---A- C:\Users\Léa\AppData\Local\Temp\eDatasecurity\FileList.txt [74]

O61 - LFC:Last File Created 25/09/2011 - 23:56:08 ---A- C:\Users\All Users\Symantec\LiveUpdate\5.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 25/09/2011 - 23:56:08 R--A- C:\Users\All Users\Symantec\LiveUpdate\5.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 25/09/2011 - 23:56:09 ---A- C:\Users\All Users\Symantec\LiveUpdate\4.Product.Inventory.LiveUpdate [17080]

O61 - LFC:Last File Created 25/09/2011 - 23:56:09 R--A- C:\Users\All Users\Symantec\LiveUpdate\4.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 25/09/2011 - 23:57:10 ---A- C:\Users\All Users\Symantec\LiveUpdate\3.Product.Inventory.LiveUpdate [18352]

O61 - LFC:Last File Created 25/09/2011 - 23:57:10 R--A- C:\Users\All Users\Symantec\LiveUpdate\3.Settings.LiveUpdate [20342]

O61 - LFC:Last File Created 30/07/2008 - 14:11:48 ---A- C:\Users\Léa\AppData\Local\Apple Computer\iTunes\iTunes.pref [10943]

O61 - LFC:Last File Created 30/07/2008 - 14:11:48 ---A- C:\Users\Léa\AppData\Roaming\Apple Computer\iTunes\iTunes.pref [106594]

O61 - LFC:Last File Created 30/08/2011 - 19:56:39 ---A- C:\Users\Léa\AppData\Roaming\Skype\lea.borel\chatsync\ea\ea6403e6d9701a49.dat [1751]

~ Scan Files in 04mn 41s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: Ad-Remover - (.Pas de propriétaire.) [HKCU] -- Ad-Remover

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 02/06/2009 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO

O64 - Services: CurCS - 02/06/2009 - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 02/06/2009 - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB

O64 - Services: CurCS - 21/11/2006 - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe - comHost(comHost) .(.Symantec Corporation - COM Aggregation Host.) - LEGACY_COMHOST

O64 - Services: CurCS - 02/11/2006 - C:\PROGRA~1\LAUNCH~1\DPortIO.sys - Dritek General Port I/O(DritekPortIO) .(.Dritek System Inc. - General Port I/O.) - LEGACY_DRITEKPORTIO

O64 - Services: CurCS - ??/??/???? - C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (.not file.) - Symantec Eraser Control driver (eeCtrl) .(...) - LEGACY_EECTRL

O64 - Services: CurCS - ??/??/???? - C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(...) - LEGACY_ERASERUTILREBOOTDRV

O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\iastorv.sys - Intel RAID Controller Vista(iaStorV) .(.Intel Corporation - Intel Matrix Storage Manager driver (base).) - LEGACY_IASTORV

O64 - Services: CurCS - 13/11/2010 - C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20101202.001\IDSvix86.sys - Symantec Intrusion Prevention Driver(IDSvix86) .(.Symantec Corporation - IDS Core Driver.) - LEGACY_IDSVIX86

O64 - Services: CurCS - 07/12/2006 - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(...) - LEGACY_INT15

O64 - Services: CurCS - ??/??/???? - C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20101214.001\NAVENG.sys (.not file.) - NAVENG (NAVENG) .(...) - LEGACY_NAVENG

O64 - Services: CurCS - ??/??/???? - C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20101214.001\NAVEX15.sys (.not file.) - NAVEX15 (NAVEX15) .(...) - LEGACY_NAVEX15

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\DRIVERS\psdfilter.sys - PSDFilter(PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\drivers\PSDNServ.sys - PSDNSERVER(PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV

O64 - Services: CurCS - 25/04/2007 - C:\Windows\system32\drivers\psdvdisk.sys - psdvdisk(psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK

O64 - Services: CurCS - 16/05/2005 - C:\Windows\system32\drivers\sfhlp02.sys - StarForce Protection Helper Driver (version 2.x)(sfhlp02) .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02

O64 - Services: CurCS - 30/11/2007 - C:\Windows\system32\Drivers\SRTSP.sys - SRTSP(SRTSP) .(.Symantec Corporation - Symantec AutoProtect.) - LEGACY_SRTSP

O64 - Services: CurCS - 30/11/2007 - C:\Windows\system32\Drivers\SRTSPX.sys - SRTSPX(SRTSPX) .(.Symantec Corporation - Symantec AutoProtect.) - LEGACY_SRTSPX

O64 - Services: CurCS - 08/11/2007 - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.AVIRA GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 14/12/2010 - C:\Windows\system32\Drivers\SYMEVENT.sys - SymEvent(SymEvent) .(.Symantec Corporation - Symantec Event Library.) - LEGACY_SYMEVENT

O64 - Services: CurCS - 03/08/2009 - C:\Windows\system32\Drivers\SYMREDRV.sys - SYMREDRV(SYMREDRV) .(.Symantec Corporation - Redirector Filter Driver.) - LEGACY_SYMREDRV

O64 - Services: CurCS - 03/08/2009 - C:\Windows\system32\Drivers\SYMTDI.sys - SYMTDI(SYMTDI) .(.Symantec Corporation - Network Dispatch Driver.) - LEGACY_SYMTDI

O64 - Services: CurCS - 03/03/2008 - C:\Windows\system32\DRIVERS\vsdatant.sys - Zone Alarm Firewall Driver(Vsdatant) .(.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - LEGACY_VSDATANT

O64 - Services: CurCS - 30/01/2007 - C:\Windows\system32\DRIVERS\xaudio.sys - XAudio(XAudio) .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO

O64 - Services: CurCS - 02/11/2006 - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl - {49DE1C67-83F8-4102-99E0-C16DCC7EEC796}({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) .(.Cyberlink Corp. - FCL Driver.) - LEGACY_{49DE1C67-83F8-4102-99E0-C16DCC7EEC

~ Scan Services in 00mn 02s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:09/12/2005 (. - .) (1.0.2169.16560) - c:\windows\system32\ClearEvent.exe

O65 - LUF:14/04/2007 (. - Assembly imported from type library 'Shell32'..) (1.0.0.0) - c:\windows\system32\Interop.Shell32.dll

~ Scan Sigcheck in 07mn 28s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {B6574168-A6E6-4302-91C0-497D0C8738A8} [DefaultScope] - (Yahoo! Search) - Yahoo! Search - Web Search

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.D41D8CD98F00B204E9800998ECF8427E] [sPRF][17/04/2011] (...) -- C:\Users\Léa\AppData\Local\Dduja.bin [0]

[MD5.2EE80908A5AFF62DAD11B164BB611DF8] [sPRF][03/04/2011] (...) -- C:\Users\Léa\AppData\Local\idezuculenelana.dll [377350]

[MD5.5EF87457AB8A58694EBE35E55D093D04] [sPRF][30/07/2008] (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\Léa\AppData\Local\Temp\RtkBtMnt.exe [208896]

[MD5.B2C46C7064C867F4722A0F51CF18FB62] [sPRF][26/10/2010] (.McAfee, Inc. - McAfee Security Scan Plus Installer.) -- C:\Users\Léa\AppData\Local\Temp\SecurityScan_Release.exe [3598224]

[MD5.D488C889BE33BE513E0F8C8AF29ECB17] [sPRF][23/08/2011] (.Skype Technologies S.A. - Skype.) -- C:\Users\Léa\AppData\Local\Temp\SkypeSetup.exe [24415368]

[MD5.6FD1FA8D176DF4EF157071BD12C02C00] [sPRF][25/09/2011] (...) -- C:\Users\Léa\AppData\Local\Temp\symlcsv1.exe [58760]

[MD5.D7D9445362AEE97FAA2214CB21B28C2F] [sPRF][07/05/2010] (.Microsoft Corporation - Windows Live Installer.) -- C:\Users\Léa\AppData\Local\Temp\wlsetup-cvr.exe [84621672]

[MD5.20CC99523920B950E1FADDA863D032EB] [sPRF][06/12/2006] (...) -- C:\Users\Léa\AppData\Local\Temp\ycomp_setup.exe [918552]

[MD5.1108B166160D6023AF76435B074052B6] [sPRF][05/04/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Léa\AppData\Local\Temp\_is9A0.exe [455600]

[MD5.FBAB280D0CAC5E21C72F0A1A7B5B9608] [sPRF][22/06/2007] (.Macrovision Corporation - Setup.exe.) -- C:\Users\Léa\AppData\Local\Temp\_isFB6E.exe [455600]

[MD5.37802DC23540941D3D5FFC0CFB97D9F0] [sPRF][24/09/2011] (...) -- C:\Users\Léa\Desktop\AD-R.exe [1563105]

[MD5.7B7ECF9E3EEC3141A95396F9274E2FF8] [sPRF][13/02/2009] (.Mozilla - Firefox.) -- C:\Users\Léa\Desktop\Firefox Setup 3.0.6.exe [7620336]

[MD5.E8269245566BE948F6A219135B434160] [sPRF][23/09/2011] (.Trend Micro Inc. - HijackThis.) -- C:\Users\Léa\Desktop\HiJackThis.exe [401720]

[MD5.CACDEE7C8483CF39FDF372159F9A64FE] [sPRF][13/02/2009] (.Check Point Software Technologies LTD - ZoneAlarm® Downloader.) -- C:\Users\Léa\Desktop\zaSetup_fr.exe [210416]

~ Scan Files in 00mn 07s

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "{1ACDC690-E812-4BF4-8277-CADB310BB196}" | In - None - P6 - TRUE | .(.Acer Incorporated - Acer Arcade Deluxe.) -- C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe

O87 - FAEL: "{975C10A6-89E7-450F-8386-9F6BEC5992B5}" | In - None - P6 - TRUE | .(.Acer Incorporated - VideoMagician.) -- C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe

O87 - FAEL: "{4B2A96AC-90BB-469D-96F2-1E462E2F2103}" | In - None - P6 - TRUE | .(.Acer Incorporated - HomeMedia.) -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe

O87 - FAEL: "{CB0A5015-2744-4511-8C92-B47FF3948EAF}" | In - None - P6 - TRUE | .(.Acer Incorporated - DV Wizard.) -- C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe

O87 - FAEL: "{BFF14675-8909-4519-A5FC-309A2808F833}" | In - None - P17 - TRUE | .(.Acer Incorporated - DVDivine.) -- C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe

O87 - FAEL: "{35E228C2-194B-4680-B6E6-216B230F43AD}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PlayMovie.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe

O87 - FAEL: "{9B115FCE-670A-4282-B3E5-A1A4B970FC7E}" | In - None - P17 - TRUE | .(.CyberLink Corp. - CyberLink PlayMovie Resident Program.) -- C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe

O87 - FAEL: "{93A27942-68FA-49B9-8CFE-E9B9E96CCC92}" | In - Public - P6 - TRUE | .(.Apple Computer, Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "{996BC56C-1871-440C-BDE8-23F8EC304988}" | In - Public - P17 - TRUE | .(.Apple Computer, Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O87 - FAEL: "TCP Query User{FA93ABB0-7337-4EFF-93E0-4FC308A2F8E8}C:\program files\itunes\itunes.exe" | In - Private - P6 - TRUE | .(.Apple Computer, Inc. - iTunes.) -- C:\program files\itunes\itunes.exe

O87 - FAEL: "UDP Query User{A4291E33-E49B-48D7-B880-496E1D7F3D20}C:\program files\itunes\itunes.exe" | In - Private - P17 - TRUE | .(.Apple Computer, Inc. - iTunes.) -- C:\program files\itunes\itunes.exe

O87 - FAEL: "TCP Query User{226ADF5F-E887-4EFC-922A-AAD423B56667}C:\program files\konami\pro evolution soccer 2009\pes2009.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2009\pes2009.exe (.not file.)

O87 - FAEL: "UDP Query User{FB36B07F-BAA0-45EF-88D3-0F5A0295A633}C:\program files\konami\pro evolution soccer 2009\pes2009.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\konami\pro evolution soccer 2009\pes2009.exe (.not file.)

O87 - FAEL: "TCP Query User{2D07681B-F47F-430F-B7B5-47186E15C2A3}D:\electronic arts\eadm\core.exe" |In - Public - P6 - TRUE | .(...) -- D:\electronic arts\eadm\core.exe (.not file.)

O87 - FAEL: "UDP Query User{8994FFED-53F3-47BD-A15B-2E4520831747}D:\electronic arts\eadm\core.exe" |In - Public - P17 - TRUE | .(...) -- D:\electronic arts\eadm\core.exe (.not file.)

O87 - FAEL: "{66C0CFBA-2539-42BE-86C8-083F58545238}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

~ Scan Firewall in 00mn 02s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8636 - (24/09/2011)

Clés trouvées (Keys found) : 14

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 1

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Classes\TypeLib\{21234BEA-125E-40DB-95EA-6B322E21F59B}] =>PUP.Dealio

[HKLM\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}] =>PUP.Dealio

[HKLM\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}] =>PUP.Dealio

[HKLM\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}] =>PUP.Dealio

[HKLM\Software\Classes\Interface\{5F5A840B-359D-46F2-81BF-52470CE866A2}] =>PUP.Dealio

[HKLM\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}] =>PUP.Dealio

[HKLM\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}] =>PUP.Dealio

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}] =>PUP.Dealio

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}] =>PUP.Dealio

[HKLM\Software\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}] =>PUP.Dealio

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8}] =>PUP.Dealio

[HKLM\Software\Classes\Interface\{F9C4F914-CB58-4272-8A3F-F732A1D1E91D}] =>PUP.Dealio

[HKLM\Software\Classes\Installer\Features\C8465016C3C0D184C811F194256DBF35] =>PUP.Dealio

[HKCU\Software\Microsoft\Internet Explorer\MenuExt\compare prices with &dealio] =>Adware.BHO

C:\Program Files\Babylon =>Toolbar.Babylon

~ Scan Additionnel in 00mn 11s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

DNS request timed out.

timeout was 2 seconds.

Serveur : UnKnown

Address: 109.0.66.10

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

~ Scan DNS in 00mn 12s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 50688 | (ALaunchService) . (...) - C:\Acer\ALaunch\ALaunchSvc.exe

SR - | Auto 13/02/2009 68865 | (AntiVirScheduler) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

SR - | Auto 13/02/2009 151297 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

SR - | Auto 10/08/2007 107624 | (ccEvtMgr) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 10/08/2007 107624 | (ccSetMgr) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SR - | Auto 10/08/2007 107624 | (CLTNetCnService) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SS - | Demand 10/08/2007 49296 | (comHost) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

SR - | Auto 10/08/2007 457512 | eDSService.exe (eDataSecurity Service) . (.HiTRSUT.) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

SR - | Auto 10/08/2007 24576 | (eLockService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

SR - | Auto 10/08/2007 135168 | (eNet Service) . (.Acer Inc..) - C:\Acer\Empowering Technology\eNet\eNet Service.exe

SR - | Auto 21/12/2007 53248 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

SR - | Auto 24576 | (eSettingsService) . (...) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

SR - | Auto 21/12/2007 355096 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

SS - | Demand 30/07/2008 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

SR - | Demand 30/07/2008 323584 | (iPodService) . (.Apple Computer, Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SS - | Demand 10/08/2007 80552 | (ISPwdSvc) . (.Symantec Corporation.) - C:\Program Files\Norton Internet Security\isPwdSvc.exe

SR - | Auto 10/08/2007 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

SS - | Demand 10/08/2007 2999664 | (LiveUpdate) . (.Symantec Corporation.) - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe

SR - | Auto 10/08/2007 107624 | (LiveUpdate Notice Ex) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

SS - | Auto 14/12/2010 583048 | (LiveUpdate Notice Service) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

SR - | Auto 107008 | (MobilityService) . (...) - C:\Acer\Mobility Center\MobilityService.exe

SR - | Auto 02/09/2009 211488 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe

SR - | Auto 10/08/2007 554352 | (Planificateur LiveUpdate automatique) . (.Symantec Corporation.) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

SR - | Auto 266343 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

SR - | Demand 1251720 | (Symantec Core LC) . (...) - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

SR - | Auto 10/08/2007 46736 | (SymAppCore) . (.Symantec Corporation.) - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

SR - | Auto 04/06/2009 79400 | (vsmon) . (.Check Point Software Technologies LTD.) - C:\Windows\System32\ZoneLabs\vsmon.exe

SR - | Auto 30/07/2008 167936 | (WMIService) . (.acer.) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

SR - | Auto 23/12/2010 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe

SR - | Auto 10/08/2007 386560 | (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\system32\DRIVERS\xaudio.exe

SR - | Auto 21/12/2007 13560 | ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp..) - C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl

~ Scan Services in 00mn 15s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Léa at 25/09/2011 22:08:27

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys

C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver

1 nt!IofCallDriver[0x8287A18D] -> \Device\Harddisk0\DR0[0x8692AAC8]

3 CLASSPNP[0x88EEF745] -> nt!IofCallDriver[0x8287A18D] -> [0x85211260]

5 acpi[0x886406A0] -> nt!IofCallDriver[0x8287A18D] -> \Device\Ide\IAAStorageDevice-0[0x85264030]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 17s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Léa at 25/09/2011 22:08:29

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 19s

 

 

 

End of the scan (1850 lines in 20mn 22s)(0)

Lien vers le commentaire
Partager sur d’autres sites
tomtom95 Devil Member !

tomtom95

Posté(e)
Posté(e)

Bonsoir cliffburton

 

Deux antivirus = un de trop :D

Symantec Norton Internet Security,et Avira AntiVir PersonalEdition

Le quelle tu va garder ? je suppose que tu veux supprimer (Norton Internet Security)

 

Le pc n'est pas a jour,on vois a la fin de la prise en charge. :outch:

 

Le Disque dur est plein,il va faloir faire du vide pour le pc fonctionne correctement.

System drive C: has 6 GB (8%) free of 70 GB il ne reste que 6 Go

 

  • Télécharge
Temp File Cleaner (TFC) de Old Timer :
 
•Enregistre-le sur le Bureau
•Enregistre (sauvegarde) tous tes travaux en cours et ferme les applications - quitte-les définitivement (l'outil les fermera de toute façon automatiquement)
•Double-clique sur TFC.exe (sous Vista - Windows 7 clique droit
"exécuter en tant qu'administrateur)
•Clique sur Start
•Laisse l'outil travailler (cela prend de quelques secondes à quelques minutes)
•Si l'outil demande à redémarrer :
Clique sur Yes
•Si l'outil ne propose pas le redémarrage
redémarrer manuellement.
Dans la barre de TFC il va y avoir un chiffre noté en rouge
indique le moi.

 

 

 

  • Ferme toutes les applications ouvertes
  • Désactive tes défenses (anti-virus
    anti-spyware)
  • Double-clique sur ZHPFix
    Pour Vista et seven
    fais un clique droit sur l'icône et exécute en tant qu'administrateur
    zhpfix.jpg
    Un raccourci installé par ZHPDiag sur le Bureau
     
    Sélectionne et surligne correctement avec la souris et "Clique droit > "Copier" ou "Ctrl+C"
    ces lignes ci dessous :
    [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified
    R3 - URLSearchHook: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} . (...) (No version) -- (.not file.)
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
    O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.HiTRUST - ActiveToolBand Module.) -- C:\Windows\system32\ActiveToolBand.dll
    O4 - Global Startup: C:\Users\Léa\Desktop\Corbeille.lnk - Clé orpheline
    O8 - Extra context menu item: Compare Prices with &Dealio - (.not file.) - C:\Users\Léa\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{28C185E6-41D2-4A01-B91D-09564F7505C4}.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{8F14964C-7533-4930-A836-08B6F6DF7ADA}.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{FA0665FA-7D68-4553-9F14-3652C133945D}.job
    [HKLM\Software\mcafeeupdater]
    O43 - CFD: 11/06/2011 - 12:05:26 - [0] ----D- C:\Program Files\Babylon
    O43 - CFD: 20/10/2010 - 16:15:34 - [64004] ----D- C:\ProgramData\McAfee
    O43 - CFD: 04/04/2011 - 12:44:26 - [8960] ----D- C:\Users\Léa\AppData\Local\{36A0949C-2D38-4B3D-A73A-1C046E99DD3C}
    O51 - MPSK:{2fa55ff8-5e34-11dd-bdeb-c74b1aea5ebc}\AutoRun\command. (...) -- F:\LaunchU3.exe (.not file.)
    O51 - MPSK:{a8c7d587-2ab0-11de-a32c-fca13fc7ee89}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)
    O56 - MWPE:[HKCU\...\policies\Explorer] - "HideSCAHealth"=1
    O61 - LFC:Last File Created 23/09/2011 - 15:35:50 ---A- C:\Users\Léa\AppData\Local\assembly\tmp\C4RF0L8V\networker.EXE [0]
    [MD5.D41D8CD98F00B204E9800998ECF8427E] [sPRF][17/04/2011] (...) -- C:\Users\Léa\AppData\Local\Dduja.bin [0]
    [MD5.2EE80908A5AFF62DAD11B164BB611DF8] [sPRF][03/04/2011] (...) -- C:\Users\Léa\AppData\Local\idezuculenelana.dll [377350]
    [MD5.B2C46C7064C867F4722A0F51CF18FB62] [sPRF][26/10/2010] (.McAfee, Inc. - McAfee Security Scan Plus Installer.) -- C:\Users\Léa\AppData\Local\Temp\SecurityScan_Release.exe [3598224]
    [HKLM\Software\Classes\TypeLib\{21234BEA-125E-40DB-95EA-6B322E21F59B}]
    [HKLM\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}]
    [HKLM\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}]
    [HKLM\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}]
    [HKLM\Software\Classes\Interface\{5F5A840B-359D-46F2-81BF-52470CE866A2}]
    [HKLM\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}]
    [HKLM\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}]
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
    [HKLM\Software\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8}]
    [HKLM\Software\Classes\Interface\{F9C4F914-CB58-4272-8A3F-F732A1D1E91D}]
    [HKLM\Software\Classes\Installer\Features\C8465016C3C0D184C811F194256DBF35]
    [HKCU\Software\Microsoft\Internet Explorer\MenuExt\compare prices with &dealio]
     
    FirewallRAZ
    EmptyTemp
    EmptyFlash
  • Clique successivement sur l'icône H (pour effacer le rapport qui s'est affiché) icone-H.jpg puis sur l'icône de la "malette cachée par la feuille" malette-cachee.jpg .
     
  • Vérifie que toutes les lignes que je t'ai demandé de copier sont dans la fenêtre.
  • Et seulement ces lignes
  • Puis clique sur le bouton [OK]
  • A ce moment apparaîtra au début de chaque ligne
    une petite case vide. [ ]
  • Ensuite clique sur Tous puis sur Nettoyer
  • Valide par Oui la désinstallation des programmes si demandé
  • Laisse l'outil travailler. Si un redémarrage est demandé accepte et redémarre le PC
  • Le rapport ZHPFixReport.txt s'affiche. Copie-colle le contenu de ce rapport dans ta réponse.
     
    Le rapport ZHPFixReport.txt est enregistré sous C:\Program files\ZHPFix\ZHPFixReport.txt

 

A+

Lien vers le commentaire
Partager sur d’autres sites
cliffburton Member

cliffburton

Posté(e)
  • Auteur
Posté(e)

J'ai effectué toutes ces opérations. Il ne reste qu'Antivir, Norton est désinstallé.

 

Pour TFC, le chiffre en rouge est 1109

 

 

Le rapport ZHPFix ci-dessous :

 

 

Rapport de ZHPFix 1.12.3362 par Nicolas Coolman, Update du 23/09/2011

Fichier d'export Registre :

Run by Léa at 26/09/2011 13:32:34

Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)

Web site : ZHPFix Fix de rapport

 

========== Module(s) mémoire ==========

SUPPRIME Memory Module: C:\Users\Léa\AppData\Local\idezuculenelana.dll

 

========== Clé(s) du Registre ==========

SUPPRIME Key: CLSID BHO: {5C255C8A-E604-49b4-9D64-90988571CECB}

SUPPRIME Key: CLSID BHO: {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}

SUPPRIME Key: Menu Contextuel: Compare Prices with &Dealio

SUPPRIME Key: HKLM\Software\mcafeeupdater

SUPPRIME CLSID MPSK: {2fa55ff8-5e34-11dd-bdeb-c74b1aea5ebc}

SUPPRIME CLSID MPSK: {a8c7d587-2ab0-11de-a32c-fca13fc7ee89}

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{21234BEA-125E-40DB-95EA-6B322E21F59B}

SUPPRIME Key: HKLM\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}

SUPPRIME Key: HKLM\Software\Classes\Interface\{5F5A840B-359D-46F2-81BF-52470CE866A2}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}

SUPPRIME Key: HKLM\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8}

SUPPRIME Key: HKLM\Software\Classes\Interface\{F9C4F914-CB58-4272-8A3F-F732A1D1E91D}

SUPPRIME Key: HKLM\Software\Classes\Installer\Features\C8465016C3C0D184C811F194256DBF35

ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\MenuExt\compare prices with &dealio

 

========== Valeur(s) du Registre ==========

SUPPRIME URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}

SUPPRIME MWPE Value: HideSCAHealth

ABSENT Valeur Standard Profile: FirewallRaz :

ABSENT Valeur Domain Profile: FirewallRaz :

SUPPRIME FirewallRaz (Private) : TCP Query User{226ADF5F-E887-4EFC-922A-AAD423B56667}C:\program files\konami\pro evolution soccer 2009\pes2009.exe

SUPPRIME FirewallRaz (Private) : UDP Query User{FB36B07F-BAA0-45EF-88D3-0F5A0295A633}C:\program files\konami\pro evolution soccer 2009\pes2009.exe

SUPPRIME FirewallRaz (Public) : TCP Query User{2D07681B-F47F-430F-B7B5-47186E15C2A3}D:\electronic arts\eadm\core.exe

SUPPRIME FirewallRaz (Public) : UDP Query User{8994FFED-53F3-47BD-A15B-2E4520831747}D:\electronic arts\eadm\core.exe

SUPPRIME FirewallRaz (None) : {3E3E0BC8-8DFB-43A2-8108-5721FE7470B4}

 

========== Elément(s) de donnée du Registre ==========

REMPLACE Value UacDisableNotify : Good (0) - Bad (1)

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Program Files\Babylon

SUPPRIME Folder: C:\ProgramData\McAfee

SUPPRIME Folder: C:\Users\Léa\AppData\Local\{36A0949C-2D38-4B3D-A73A-1C046E99DD3C}

SUPPRIME Temporaires Windows: : 72

SUPPRIME Flash Cookies: 0

 

========== Fichier(s) ==========

SUPPRIME File: c:\windows\system32\activetoolband.dll

SUPPRIME File: c:\users\léa\desktop\corbeille.lnk

ABSENT File: c:\users\léa\appdata\locallow\dealio\kb127\res\dealiosearch.html

SUPPRIME File: c:\windows\tasks\{28c185e6-41d2-4a01-b91d-09564f7505c4}.job

SUPPRIME File: c:\windows\tasks\{8f14964c-7533-4930-a836-08b6f6df7ada}.job

SUPPRIME File: c:\windows\tasks\{fa0665fa-7d68-4553-9f14-3652c133945d}.job

SUPPRIME File: c:\users\léa\appdata\local\assembly\tmp\c4rf0l8v\networker.exe

SUPPRIME File: C:\Users\Léa\AppData\Local\Dduja.bin

SUPPRIME File: c:\users\léa\appdata\local\idezuculenelana.dll

ABSENT Folder/File: c:\users\léa\appdata\local\temp\securityscan_release.exe

SUPPRIME Temporaires Windows: : 5

SUPPRIME Flash Cookies: 0

 

 

========== Récapitulatif ==========

1 : Module(s) mémoire

20 : Clé(s) du Registre

9 : Valeur(s) du Registre

1 : Elément(s) de donnée du Registre

5 : Dossier(s)

12 : Fichier(s)

 

 

End of clean in 00mn 02s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 26/09/2011 13:32:34 [4341]

Lien vers le commentaire
Partager sur d’autres sites
tomtom95 Devil Member !

tomtom95

Posté(e)
Posté(e)

Bonsoir cliffburton

 

Comment ce comporte le pc ?

 

On a pas fini ,même si ton ordinateur va mieux va jusqu'au bout de la désinfection ;)

 

Télécharge RogueKiller (par tigzy). sur le bureau

  • .
  • IMPORTANT:Quitte tous tes programmes en cours
  • Lance RogueKiller.exe.Pour Vista et seven
    fais un clique droit sur l'icône et exécute en tant qu'administrateur.
    tape 1 recherche et valide
  • Un rapport (RKreport.txt) a du se créer à côté de l'exécutable colle son contenu dans la réponse

 

A+

Lien vers le commentaire
Partager sur d’autres sites
cliffburton Member

cliffburton

Posté(e)
  • Auteur
Posté(e)

Il se porte déjà mieux... Déjà plus rapide au démarrage et dans l'éxécution des programmes.

 

Mais je n'ai toujours pas de son (problème d'incompatibilité du pilote, d'après le message au démarrage). Et de toute façon il me restera à voir quels programmes peuvent être désinstallés car c'est un vrai bazar.

 

J'execute Roguekiller dans quelques minutes...

Lien vers le commentaire
Partager sur d’autres sites

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...