Infecté par malwares ?

[prosper54]

Bonjour à tous,

Je subis des ralentissements lors de l'envoi de mail via Outlook. Et ce pour des messages de quelques kilos Octets, pensez vous que je sois infecté par un malwares ?

Merci pour votre aide !

Pouvez-vous me donner votre avis sur le log suivant :

 

 

Rapport de ZHPDiag v1.28.1354 par Nicolas Coolman, Update du 25/09/2011

Run by NVIDIA at 28/09/2011 00:50:55

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

MFIE: Mozilla Firefox 5.0.1 v5.0.1

GCIE: Google Chrome v14.0.835.186

 

---\\ Windows Product Information

Windows XP Professional Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3583 MB (78% free)

System Restore: Activé (Enable)

System drive C: has 25 GB (42%) free of 59 GB

 

---\\ Logged in mode

~ Computer Name: MAISON-9324ABDA

~ User Name: NVIDIA

~ All Users Names: SUPPORT_388945a0, NVIDIA, HelpAssistant, ASPNET, Administrateur,

~ Unselected Option: O45,O61,O62,O65,O66,O82

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\NVIDIA\Application Data\

~ %Desktop% : C:\Documents and Settings\NVIDIA\Bureau\

~ %Favorites% : C:\Documents and Settings\NVIDIA\Favoris\

~ %LocalAppData% : C:\Documents and Settings\NVIDIA\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\NVIDIA\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 25 Go of 59 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 22 Go of 25 Go)

E:\ Hard drive, Flash drive, Thumb drive (Free 67 Go of 67 Go)

F:\ Hard drive, Flash drive, Thumb drive (Free 146 Go of 148 Go)

G:\ CD-ROM drive (Not Inserted)

H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

L:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

N:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

O:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

P:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

Q:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.28/09/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.28/09/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.3008D2F793F23FF0DDBC5A1FB9F8374F] - (.Microsoft Corporation - Internet Extensions for Win32.) (.28/09/2011 - 19:31:31.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.28/09/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.28/09/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.28/09/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 3/8

~ Mes musiques (My Musics) : 1/3

~ Mes Videos (My Videos) : 1/4

~ Mes Favoris (My Favorites) : 1/225

~ Mes Documents (My Documents) : 53/818

~ Mon Bureau (My Desktop) : 7/453

~ Menu demarrer (Programs) : 5/25

~ Scan Hidden Files in 00mn 02s

 

 

 

---\\ Processus lancés

[MD5.471087B5E1E01CC82604E81EA14781D8] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [602112] [PID.]

[MD5.43F37E8F60F3677E84C6AFC70C784AFD] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1793712] [PID.]

[MD5.12C13F85BE9D3A58FDB463A6F7DE4E61] - (.C-Dilla Ltd - C-Dilla RTS Service.) -- C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [46080] [PID.]

[MD5.B6E01969246FCB67470E87E6957EE147] - (.GEAR Software - gearsec.) -- C:\WINDOWS\SYSTEM32\GEARSEC.EXE [53248] [PID.]

[MD5.2276377973CB774F05044B2E48E49087] - (.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1336712] [PID.]

[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe [335872] [PID.]

[MD5.C7F5C284B6F46FCAF6910EA4E644700B] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.]

[MD5.359E5A91D26D0439933BEF1C29CEDEF7] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [96334] [PID.]

[MD5.9F63D9C5B238ED1C375D417EFF3D5BE7] - (.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bu.) -- C:\WINDOWS\system32\sessmgr.exe [142848] [PID.]

[MD5.80233DB66B8B836365B9D0039EC4398F] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [18782720] [PID.3096]

[MD5.05E10C2C3736E52FE33D16D2F9C73C04] - (.Microsoft Corporation - Type32.exe.) -- C:\Program Files\Microsoft IntelliType Pro\type32.exe [172032] [PID.3128]

[MD5.D6C9858536249E31A5E9A1A4F3A08113] - (.Microsoft Corporation - Point32.exe.) -- C:\Program Files\Microsoft IntelliPoint\point32.exe [204800] [PID.3136]

[MD5.895E17BFF96D3114FD19CEC65A0E749E] - (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2554696] [PID.]

[MD5.6B87742F27B087AF7FD4ADC2DB685DE0] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3160]

[MD5.4A0BBDF88636F2EF08420BDCD343D286] - (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [623992] [PID.3200]

[MD5.40AD2272C250C578F1F518FA10748F98] - (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe [225280] [PID.3220]

[MD5.B529A7AE03571EF8DA4795E8F615D036] - (.LogMeIn Inc. - Hamachi2 Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [1951112] [PID.3424]

[MD5.227846995AFEEFA70D328BF5334A86A5] - (.Macrovision Europe Ltd. - Activation Licensing Service.) -- C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848] [PID.]

[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.]

[MD5.A07E8935CC8DCE6DB787DC99129CA17C] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe [1305408] [PID.1928]

[MD5.B48EB6CE11823C5F0AC597551FAB4215] - (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe [861696] [PID.280]

[MD5.B2F2C6B80624CF017504B125E843B3D3] - (.Voxmobili - Voxsync Desktop Companion.) -- C:\Program Files\PC Sync\Voxsync.exe [712704] [PID.2348]

[MD5.1F706E1F23E4E4A7FBE4F243D0A6D5C4] - (...) -- C:\Program Files\Orange\Assistance Livebox\AssistanceLivebox.exe [147880] [PID.2356]

[MD5.C95EC84F61F1ACD19248FB686B010FDD] - (...) -- C:\Program Files\PC Sync\SyncManager.exe [139264] [PID.3308]

[MD5.4C08FB7ACB28689B586D986D3F5826CF] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe [49152] [PID.2216]

[MD5.1681D697C65628571C1B3114B1AF6772] - (...) -- C:\Program Files\Orange\Assistance Livebox\dist\ST2.exe [12412328] [PID.2284]

[MD5.DAD05809F7D980104A7546EB487C9D80] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\application\Microsoft Office\Office12\OUTLOOK.EXE [13002608] [PID.3072]

[MD5.EC23FDF23952A1942E2578AE8649B31A] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1030200] [PID.3260]

[MD5.0411F7EE63AE48D2918AB4F2C79AB6C4] - (.Microsoft Corporation - Windows® installer.) -- C:\WINDOWS\system32\msiexec.exe [78848] [PID.]

[MD5.D30EB2F98504F30ECAAEEF90DDC7DE98] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2122752] [PID.1828]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

~ Scan Processes Running in 00mn 14s

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

~ Scan Google Browser in 00mn 00s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\NVIDIA\Application Data\Mozilla\Firefox\Profiles\tr6hcg4o.default\prefs.js

C:\Documents and Settings\NVIDIA\Application Data\Mozilla\Firefox\Profiles\tr6hcg4o.default\user.js (.not file.)

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [NVIDIA] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN: [HKLM] [@canon.com/MycameraPlugin] - (.CANON INC. - CANON iMAGE GATEWAY Mycamera Plugin.) -- C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R0 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Bing

R1 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)) -- C:\WINDOWS\system32\ieframe.dll

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {1d970ed5-3eda-438d-bffd-715931e2775b} Clé orpheline

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} . (.Euro-Information - Barre de Confiance.) -- C:\Program Files\Barre de Confiance\TAPBar.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} . (.Euro-Information - Barre de Confiance.) -- C:\Program Files\Barre de Confiance\TAPBar.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\utils\QuickTime\qttask.exe

O4 - HKLM\..\Run: [CloneCDTray] . (.SlySoft, Inc. - CloneCD Tray.) -- C:\gravage\CloneCD\CloneCDTray.exe

O4 - HKLM\..\Run: [Tweak UI] TWEAKUI.cpl

O4 - HKLM\..\Run: [type32] . (.Microsoft Corporation - Type32.exe.) -- C:\Program Files\Microsoft IntelliType Pro\type32.exe

O4 - HKLM\..\Run: [intelliPoint] . (.Microsoft Corporation - Point32.exe.) -- C:\Program Files\Microsoft IntelliPoint\point32.exe

O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKLM\..\Run: [COMODO Internet Security] . (.COMODO - COMODO Internet Security.) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

O4 - HKLM\..\Run: [Device Detector] . (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe

O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi2 Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe

O4 - HKCU\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe

O4 - HKUS\S-1-5-21-1482476501-1336601894-839522115-1003\..\Run: [orangeinside] . (.Orange - Executable Orange Inside.) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\one\OrangeInside.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Acrobat Distiller 8.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-BA7E-000000000003}\_SC_Distiller.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Acrobat 8 Standard.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-1033-F400-BA7E-000000000003}\_SC_Acrobat_Standard.exe

O4 - Global Startup: C:\Documents And Settings\NVIDIA\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Ajouter au fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: ajouter cette page à vos favoris Orange . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html

O8 - Extra context menu item: Convertir en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir la sélection en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir les liens sélectionnés en Adobe PDF . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O8 - Extra context menu item: envoyer le texte sélectionné par sms . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html

O8 - Extra context menu item: envoyer par sms . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html

O8 - Extra context menu item: envoyer un mail . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html

O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll

O8 - Extra context menu item: orange.fr . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\orange_html\orange.html

O8 - Extra context menu item: rechercher le texte sélectionné . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html

O8 - Extra context menu item: traduire la page . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\translate_html\translate.html

O8 - Extra context menu item: traduire le texte sélectionné . (...) -- C:\Documents and Settings\NVIDIA\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline

O9 - Extra button: Console Java (Sun) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: Console Java (Sun) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\APPLIC~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1310490613031

O16 - DPF: {7FA319FB-FFB9-4089-87EB-63179244E6E6} (NetDirect) - https://nomad.chu-nancy.fr/nortel_cacheable/NetDirect.cab

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} () - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_4_0.cab

O16 - DPF: {A2505C6C-6F17-456F-89D2-4301FBDC6EC7} (Iewiper Control) - https://nomad.chu-nancy.fr/nortel_cacheable/iewiper.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{D07EB88E-C014-4A4B-BEB4-A90462824371}: DhcpNameServer = 192.168.1.1 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: igfxcui . (...) -- igfxdev.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (...) - C:\WINDOWS\system32\guard32.dll (.not file.)

~ Scan AppInit DLL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart (ATI Smart) . (.Pas de propriétaire - ATI Smart.) - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: C-DillaSrv (C-DillaSrv) . (.C-Dilla Ltd - C-Dilla RTS Service.) - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: COMODO Internet Security Helper Service (cmdAgent) . (.COMODO - COMODO Internet Security.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

O23 - Service: (GEARSecurity) . (.GEAR Software - gearsec.) - C:\WINDOWS\system32\GEARSEC.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe

O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: Orange update Core Service (Orange update Core Service) . (.France Telecom SA - Orange Upd@te.) - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\application\Microsoft Office\Office12\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003Core.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003UA.job

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003Core] (.Google Inc..) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-1482476501-1336601894-839522115-1003UA] (.Google Inc..) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

~ Scan Scheduled Task in 00mn 29s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (cmderd) . (.COMODO - COMODO Internet Security Eradication Driver.) - C:\WINDOWS\system32\DRIVERS\cmderd.sys

O41 - Driver: (cmdGuard) . (.COMODO - COMODO Internet Security Sandbox Driver.) - C:\WINDOWS\system32\DRIVERS\cmdguard.sys

O41 - Driver: (cmdHlp) . (.COMODO - COMODO Internet Security Helper Driver.) - C:\WINDOWS\system32\DRIVERS\cmdhlp.sys

O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys

O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MpKslaae8f1ac) . (. - .) - C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F8C326C6-1255-40DD-925D-80DEAFBA46DB}\MpKslaae8f1ac.sys (.not file.)

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: (wceusbsh) . (.Microsoft Corporation - Hôte série USB Windows CE.) - C:\WINDOWS\system32\DRIVERS\wceusbsh.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: AC3Filter (remove only) - (.Pas de propriétaire.) [HKLM] -- AC3Filter

O42 - Logiciel: ACDSee for Pentax 2.0 - (.ACD Systems Ltd..) [HKLM] -- {22D0716E-FCF8-452F-94B5-7E2C3C31D50D}

O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software

O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8}

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR

O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FDB3B167-F4FA-461D-976F-286304A57B2A}

O42 - Logiciel: Adobe Acrobat 8.1.4 Standard - (.Adobe Systems.) [HKLM] -- Adobe Acrobat 8 Standard - English, Français, Deutsch

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Photoshop CS - (.Adobe Systems, Inc..) [HKLM] -- {EFB21DE7-8C19-4A88-BB28-A766E16493BC}

O42 - Logiciel: Analyseur et SDK MSXML 4.0 SP2 - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC}

O42 - Logiciel: AndreaMosaic 3.33.0 - (.Pas de propriétaire.) [HKLM] -- AndreaMosaic

O42 - Logiciel: AnyDVD - (.SlySoft.) [HKLM] -- AnyDVD

O42 - Logiciel: Assistance Livebox - (.Orange.) [HKLM] -- Assistance Livebox

O42 - Logiciel: Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}

O42 - Logiciel: Avery DesignPro - (.Pas de propriétaire.) [HKLM] -- {2CC982C0-7EAE-11D4-ACC3-0050568AD318}

O42 - Logiciel: Barre de Confiance - (.Pas de propriétaire.) [HKLM] -- TAPBar

O42 - Logiciel: C-Dilla Licence Management System - (.Pas de propriétaire.) [HKLM] -- LMS

O42 - Logiciel: CANON iMAGE GATEWAY MyCamera Download Plugin - (.Canon Inc..) [HKLM] -- MyCamera Download Plugin

O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CANON iMAGE GATEWAY Task

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: COMODO Internet Security - (.COMODO Security Solutions Inc..) [HKLM] -- {FD8E178D-8B4E-42DA-B434-EFF270329B1C}

O42 - Logiciel: Canon Camera Access Library - (.Canon Inc..) [HKLM] -- CAL

O42 - Logiciel: Canon Camera Support Core Library - (.Canon Inc..) [HKLM] -- CSCLIB

O42 - Logiciel: Canon EOS Kiss_N REBEL_XT 350D Pilote WIA - (.Canon.) [HKLM] -- InstallShield_{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}

O42 - Logiciel: Canon G.726 WMP-Decoder - (.Canon Inc..) [HKLM] -- Canon G.726 WMP-Decoder

O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder

O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder

O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- MovieEditTask

O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {862983D7-FA08-493E-A9ED-6B7859E069D3}

O42 - Logiciel: Canon RAW Codec - (.Canon Inc..) [HKLM] -- Canon RAW Codec

O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RAW Image Task

O42 - Logiciel: Canon Utilities CameraWindow - (.Canon Inc..) [HKLM] -- CameraWindowLauncher

O42 - Logiciel: Canon Utilities CameraWindow DC - (.Canon Inc..) [HKLM] -- CameraWindowDC

O42 - Logiciel: Canon Utilities CameraWindow DC 8 - (.Canon Inc..) [HKLM] -- CameraWindowDC8

O42 - Logiciel: Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC5

O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- CameraWindowDVC6

O42 - Logiciel: Canon Utilities Digital Photo Professional 3.10 - (.Canon Inc..) [HKLM] -- DPP

O42 - Logiciel: Canon Utilities EOS Capture 1.5 - (.Canon.) [HKLM] -- InstallShield_{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}

O42 - Logiciel: Canon Utilities EOS Utility - (.Canon Inc..) [HKLM] -- EOS Utility

O42 - Logiciel: Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- EOS Video Snapshot Task

O42 - Logiciel: Canon Utilities MyCamera - (.Canon Inc..) [HKLM] -- MyCamera

O42 - Logiciel: Canon Utilities MyCamera DC - (.Canon Inc..) [HKLM] -- MyCameraDC

O42 - Logiciel: Canon Utilities PhotoStitch - (.Pas de propriétaire.) [HKLM] -- PhotoStitch

O42 - Logiciel: Canon Utilities Picture Style Editor - (.Canon Inc..) [HKLM] -- Picture Style Editor

O42 - Logiciel: Canon Utilities RemoteCapture DC - (.Canon Inc..) [HKLM] -- RemoteCaptureDC

O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- RemoteCaptureTask

O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Canon Inc..) [HKLM] -- ZoomBrowser EX

O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Canon Inc..) [HKLM] -- ZoomBrowser EX Memory Card Utility

O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {8D7133DE-27D2-47E5-B248-4180278D32AA}

O42 - Logiciel: CloneCD - (.SlySoft.) [HKLM] -- CloneCD

O42 - Logiciel: CloneDVD2 - (.Elaborate Bytes.) [HKLM] -- CloneDVD2

O42 - Logiciel: Compel Adaptec WinASPI - (.Pas de propriétaire.) [HKLM] -- Compel install Adaptec WinASPI-4.6.0(1021)_is1

O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite

O42 - Logiciel: DVD Decrypter 3.2.2.0 Fr - (.Pas de propriétaire.) [HKLM] -- DVD Decrypter 3.2.2.0 Fr

O42 - Logiciel: DaViDeo 4 professional - (.G DATA Software AG.) [HKLM] -- InstallShield_{EF4EA1D8-E44E-41BA-B4C4-B4BEFDFCF2AC}

O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler

O42 - Logiciel: Digital Video Duplicator - (.BVRP Software.) [HKLM] -- {7CCFADC3-60C4-4DD2-A843-171FAFB9467A}

O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}

O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E}

O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399

O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Jasc Paint Shop Pro 8 - (.Nom de votre société.) [HKLM] -- {81A34902-9D0B-4920-A25C-4CDC5D14B328}

O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_05 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142050}

O42 - Logiciel: Java 2 Runtime Environment, SE v1.4.2_10 - (.Sun Microsystems, Inc..) [HKLM] -- {7148F0A8-6813-11D6-A77B-00B0D0142100}

O42 - Logiciel: KONICA MINOLTA magicolor 2480MF - (.Pas de propriétaire.) [HKLM] -- KONICA MINOLTA magicolor 2480MF

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Les Indispensables Éducation pour Microsoft Office - (.Microsoft.) [HKLM] -- {75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}

O42 - Logiciel: LiveUpdate BVRP Software - (.BVRP Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}

O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- LogMeIn Hamachi

O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- {EEF985E8-8B36-4230-B174-117A2381C17F}

O42 - Logiciel: MSVCMergeModules - (.Nav N Go Kft..) [HKLM] -- {AA721D14-CFE2-410E-B975-79FE5F82F99F}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: MSXML 6.0 Parser (KB933579) - (.Microsoft Corporation.) [HKLM] -- {0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {72AD53CC-CCC0-3757-8480-9EE176866A7C}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {0BD83598-C2EF-3343-847B-7D2E84599128}

O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}

O42 - Logiciel: Microsoft AutoRoute 2007 avec récepteur GPS - (.Microsoft Corporation.) [HKLM] -- {C82185E8-C27B-4EF4-2007-3333BC2C2B6D}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft Encarta 2008 - Études - (.Microsoft Corporation.) [HKLM] -- {08181881-FCA5-44A7-B863-D66037A16AAF}

O42 - Logiciel: Microsoft Encarta Maths - (.Microsoft Corporation.) [HKLM] -- {07183840-959A-4B0D-8825-2C533F0DDB19}

O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 - (.Microsoft Corporation.) [HKLM] -- Wdf01005

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {928B06E4-DDAA-476A-926A-641620326327}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Minecraft version 1.2_02 - (.Pas de propriétaire.) [HKLM] -- {D1C729A7-4B00-4E78-9372-90CC2ABC64E3}_is1

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Morgan Stream Switcher - (.Pas de propriétaire.) [HKLM] -- mmswitch

O42 - Logiciel: Mozilla Firefox 5.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0.1 (x86 fr)

O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM] -- {6a5081b7-5183-48fd-b691-29774c2f4d6d}

O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {7E0610A2-E336-40B3-B685-C4905E97EC9A}

O42 - Logiciel: Orange Inside - (.Orange.) [HKCU] -- Orange Inside

O42 - Logiciel: Orange Installeur version 1.2.2.0 - (.Orange.) [HKLM] -- {D13FE823-C575-4451-AC37-E645A67AA581}_1.2.2.0

O42 - Logiciel: Orange update - (.Orange.) [HKLM] -- OrangeUpdateManager

O42 - Logiciel: PC Sync - (.France Telecom.) [HKLM] -- {A4DCAA77-151D-4CE9-8D79-E4ADB48031A2}

O42 - Logiciel: Package de base Microsoft de service de chiffrement pour cartes à puce - (.Microsoft Corporation.) [HKLM] -- KB909520

O42 - Logiciel: Petit Larousse 2007 - (.Pas de propriétaire.) [HKLM] -- {1444B13F-B744-4624-9695-D9E6471817B1}

O42 - Logiciel: PowerDVD - (.Pas de propriétaire.) [HKLM] -- PowerDVD

O42 - Logiciel: PressReader - (. NewspaperDirect Inc..) [HKLM] -- {912CED74-88D3-4C5B-ACB0-132318649765}

O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime

O42 - Logiciel: RadioWeb Player V4 - (.Pas de propriétaire.) [HKLM] -- ST6UNST #1

O42 - Logiciel: RealSpeak Solo pour la voix francaise Virginie - (.Nuance.) [HKLM] -- {58B0F3ED-6FAE-486C-9AB9-1C06514097B4}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5729F1AE-5895-468F-9165-BAD161C9E982}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}

O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{65EA4836-B5A3-4C1D-8883-0C35E471003A}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}

O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663

O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870

O42 - Logiciel: Security Update for Windows Search 4 - KB963093 - (.Microsoft Corporation.) [HKLM] -- KB963093

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: SereneScreen Aquarium - (.Prolific Publishing, Inc..) [HKLM] -- SereneScreen Aquarium_is1

O42 - Logiciel: Shape Collage - (.Shape Collage Inc..) [HKLM] -- ShapeCollage

O42 - Logiciel: ToolbarFR - (.Orange.) [HKLM] -- {A047FE02-C91C-41CB-898C-4ED21B86025A}

O42 - Logiciel: Universalis 10 - (.Pas de propriétaire.) [HKLM] -- Encyclopædia Universalis

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2583910) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BDC21583-5601-4B2B-88F3-7919F6DE8FB1}

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2553110) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{05D27A23-8E87-46B5-9EAF-F5B4DE7CCCA0}

O42 - Logiciel: VobSub v2.23 (Remove Only) - (.Pas de propriétaire.) [HKLM] -- VobSub

O42 - Logiciel: WBEncarta - (.Pas de propriétaire.) [HKLM] -- {WBEncarta_6189F431-6CA5-4A17-80F8-8B92994B4B00}

O42 - Logiciel: WinISO 5.3 - (.WinISO Computing Inc..) [HKLM] -- WinISO_is1

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130

O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Management Framework Core - (.Microsoft Corporation.) [HKLM] -- KB968930

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Format SDK Hotfix - KB891122 - (.Microsoft Corporation.) [HKLM] -- KB891122

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows Search 4.0 - (.Microsoft Corporation.) [HKLM] -- KB940157

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: XML Paper Specification Shared Components Language Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XPSEPSCLP

O42 - Logiciel: XviD MPEG-4 Video Codec - (.XviD Team (Koepi).) [HKLM] -- XviD_is1

O42 - Logiciel: magicolor 2480MF scan - (.KONICA MINOLTA.) [HKLM] -- {82A70CC8-DC11-4E49-B869-47DB69286A57}

O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\AC3Filter]

[HKCU\Software\ACD Systems]

[HKCU\Software\ASUS]

[HKCU\Software\ATI]

[HKCU\Software\Adobe]

[HKCU\Software\Ahead]

[HKCU\Software\AndreaMosaic]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\ArcSoft]

[HKCU\Software\Avery]

[HKCU\Software\BVRP Software]

[HKCU\Software\Borland]

[HKCU\Software\CDDB]

[HKCU\Software\CISRA]

[HKCU\Software\Canon]

[HKCU\Software\Classes]

[HKCU\Software\ComodoGroup]

[HKCU\Software\Cygwin]

[HKCU\Software\DT Soft]

[HKCU\Software\DVD Decrypter]

[HKCU\Software\DivXNetworks]

[HKCU\Software\EA Games]

[HKCU\Software\Elaborate Bytes]

[HKCU\Software\Freeware]

[HKCU\Software\G DATA]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\Ghisler]

[HKCU\Software\Google]

[HKCU\Software\IM Providers]

[HKCU\Software\Intel]

[HKCU\Software\Jasc]

[HKCU\Software\JavaSoft]

[HKCU\Software\KasperskyLab]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Macromedia]

[HKCU\Software\MainConcept]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\NavNGo]

[HKCU\Software\Nero]

[HKCU\Software\Netscape]

[HKCU\Software\Northcode Inc]

[HKCU\Software\ODBC]

[HKCU\Software\ORANGE]

[HKCU\Software\OpenOffice.org]

[HKCU\Software\OrangeInside]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\PressReader]

[HKCU\Software\Realtek]

[HKCU\Software\SereneScreen]

[HKCU\Software\SlySoft]

[HKCU\Software\Software]

[HKCU\Software\Symantec]

[HKCU\Software\Technicland]

[HKCU\Software\Trolltech]

[HKCU\Software\Voxmobili]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinZip Computing]

[HKCU\Software\e-merge]

[HKCU\Software\ej-technologies]

[HKLM\Software\ACD Systems]

[HKLM\Software\ACE Compression Software]

[HKLM\Software\ASUS]

[HKLM\Software\ATI Technologies Inc.]

[HKLM\Software\ATI Technologies]

[HKLM\Software\ATI]

[HKLM\Software\Adaptec]

[HKLM\Software\Adobe Systems]

[HKLM\Software\Adobe]

[HKLM\Software\Ahead]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Ashmanov & Partners]

[HKLM\Software\Atheros Communications Inc.]

[HKLM\Software\Audible]

[HKLM\Software\Avery]

[HKLM\Software\BVRP Software]

[HKLM\Software\BrowserChoice]

[HKLM\Software\C-Dilla]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CISRA]

[HKLM\Software\Canon]

[HKLM\Software\Canon_Inc_IC]

[HKLM\Software\ClassesTypeLib]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\ComodoGroup]

[HKLM\Software\Copernic]

[HKLM\Software\Creative Tech]

[HKLM\Software\CyberLink]

[HKLM\Software\Cygwin]

[HKLM\Software\DT Soft]

[HKLM\Software\DivXNetworks]

[HKLM\Software\EID]

[HKLM\Software\Elaborate Bytes]

[HKLM\Software\France Telecom]

[HKLM\Software\G DATA]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\Havas Interactive]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\Jasc]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\KONICA MINOLTA]

[HKLM\Software\Larousse]

[HKLM\Software\LogMeIn, Inc.]

[HKLM\Software\MAXSOFT-OCRON]

[HKLM\Software\Macromedia]

[HKLM\Software\Macrovision]

[HKLM\Software\Morgan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\Naviextras]

[HKLM\Software\Nero]

[HKLM\Software\NewspaperDirect]

[HKLM\Software\ODBC]

[HKLM\Software\On2 Technologies]

[HKLM\Software\OpenOffice.org]

[HKLM\Software\Orange]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\S3R521]

[HKLM\Software\Sanyo]

[HKLM\Software\ScanSoft]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secure]

[HKLM\Software\SereneScreen]

[HKLM\Software\SlySoft]

[HKLM\Software\Sun Microsystems]

[HKLM\Software\Symantec]

[HKLM\Software\TightVNC]

[HKLM\Software\Universalis]

[HKLM\Software\Voxmobili]

[HKLM\Software\WinISO]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Windows]

[HKLM\Software\Zenographics]

[HKLM\Software\ej-technologies]

[HKLM\Software\mozilla.org]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 16/07/2011 - 14:24:10 - [3511045] ----D- C:\Program Files\7-Zip

O43 - CFD: 12/07/2011 - 21:09:58 - [520749] ----D- C:\Program Files\AC3Filter

O43 - CFD: 03/09/2011 - 18:22:54 - [13302842] ----D- C:\Program Files\ACD Systems

O43 - CFD: 26/07/2011 - 22:54:20 - [1017074900] ----D- C:\Program Files\Adobe

O43 - CFD: 16/09/2011 - 20:47:46 - [40066673] ----D- C:\Program Files\AndreaMosaic

O43 - CFD: 13/07/2011 - 09:35:08 - [82846491] ----D- C:\Program Files\ATI Technologies

O43 - CFD: 06/08/2011 - 11:13:32 - [461795] ----D- C:\Program Files\Barre de Confiance

O43 - CFD: 16/07/2011 - 23:54:54 - [565483212] ----D- C:\Program Files\Canon

O43 - CFD: 23/07/2011 - 18:43:34 - [517780531] ----D- C:\Program Files\COMODO

O43 - CFD: 22/08/2011 - 23:34:32 - [17268545] ----D- C:\Program Files\DAEMON Tools Lite

O43 - CFD: 28/07/2011 - 18:30:40 - [601] ----D- C:\Program Files\DAEMON Tools Toolbar

O43 - CFD: 17/07/2011 - 00:41:34 - [4188184] ----D- C:\Program Files\Defraggler

O43 - CFD: 28/07/2011 - 18:16:10 - [130560] ----D- C:\Program Files\Elaborate Bytes

O43 - CFD: 03/09/2011 - 18:22:54 - [807379297] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 12/07/2011 - 21:09:54 - [62208] ----D- C:\Program Files\Gabest

O43 - CFD: 23/07/2011 - 19:50:58 - [104723369] ----D- C:\Program Files\Google

O43 - CFD: 01/08/2011 - 13:03:02 - [44980464] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 12/07/2011 - 15:08:48 - [96701] ----D- C:\Program Files\Intel

O43 - CFD: 23/08/2011 - 00:57:34 - [5432024] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 12/07/2011 - 20:53:54 - [42994546] ----D- C:\Program Files\Jasc Software Inc

O43 - CFD: 17/09/2011 - 16:31:48 - [35602958] ----D- C:\Program Files\Java

O43 - CFD: 13/07/2011 - 11:44:30 - [10214066] ----D- C:\Program Files\KONICA MINOLTA

O43 - CFD: 12/07/2011 - 21:23:34 - [3119668] ----D- C:\Program Files\Larousse

O43 - CFD: 12/07/2011 - 20:10:20 - [30108753] ----D- C:\Program Files\Learning Essentials

O43 - CFD: 12/07/2011 - 21:09:40 - [1893766] ----D- C:\Program Files\LiveUpdate

O43 - CFD: 17/09/2011 - 17:10:06 - [3519933] ----D- C:\Program Files\LogMeIn Hamachi

O43 - CFD: 22/08/2011 - 23:36:08 - [197220] ----D- C:\Program Files\LogMeIn Hamachi(2)

O43 - CFD: 12/07/2011 - 18:13:58 - [2152579] ----D- C:\Program Files\Messenger

O43 - CFD: 12/07/2011 - 19:16:14 - [2892735] ----D- C:\Program Files\Microsoft

O43 - CFD: 13/07/2011 - 07:15:22 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 12/07/2011 - 20:10:56 - [8746024] ----D- C:\Program Files\Microsoft Etudes

O43 - CFD: 12/07/2011 - 15:03:58 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 13/07/2011 - 09:22:56 - [6089660] ----D- C:\Program Files\Microsoft IntelliPoint

O43 - CFD: 13/07/2011 - 09:22:10 - [6959587] ----D- C:\Program Files\Microsoft IntelliType Pro

O43 - CFD: 13/07/2011 - 07:41:06 - [43998120] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 12/07/2011 - 21:19:46 - [38411899] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 12/07/2011 - 19:17:56 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 12/07/2011 - 20:34:50 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 12/07/2011 - 20:32:18 - [68119903] ----D- C:\Program Files\Microsoft Visual Studio 8

O43 - CFD: 13/07/2011 - 07:18:14 - [3726168] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 12/07/2011 - 20:34:14 - [8167779] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 12/07/2011 - 21:09:58 - [96112] ----D- C:\Program Files\Morgan

O43 - CFD: 16/09/2011 - 20:14:56 - [123] ----D- C:\Program Files\Mosaic-Pictures 2

O43 - CFD: 12/07/2011 - 18:37:56 - [10374874] ----D- C:\Program Files\Movie Maker

O43 - CFD: 28/07/2011 - 20:32:56 - [34248952] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 12/07/2011 - 20:35:02 - [26521] ----D- C:\Program Files\MSBuild

O43 - CFD: 13/07/2011 - 07:40:58 - [39944647] ----D- C:\Program Files\MSECache

O43 - CFD: 12/07/2011 - 14:59:52 - [0] ----D- C:\Program Files\MSN

O43 - CFD: 12/07/2011 - 15:00:28 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 12/07/2011 - 21:22:50 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 12/07/2011 - 17:49:40 - [6849] ----D- C:\Program Files\MSXML 6.0

O43 - CFD: 24/07/2011 - 12:21:02 - [4367] ----D- C:\Program Files\MyApp

O43 - CFD: 02/09/2011 - 15:46:36 - [0] ----D- C:\Program Files\Naviextras

O43 - CFD: 02/09/2011 - 15:46:56 - [15238249] ----D- C:\Program Files\NavNGo

O43 - CFD: 12/07/2011 - 18:10:26 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 02/09/2011 - 09:17:16 - [8533988] ----D- C:\Program Files\NewspaperDirect

O43 - CFD: 04/08/2011 - 17:32:42 - [137388354] ----D- C:\Program Files\Orange

O43 - CFD: 12/07/2011 - 18:40:18 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 16/07/2011 - 15:45:26 - [5072416] ----D- C:\Program Files\PC Sync

O43 - CFD: 12/07/2011 - 15:10:38 - [68293396] ----D- C:\Program Files\Realtek

O43 - CFD: 12/07/2011 - 17:51:06 - [37949185] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 12/07/2011 - 15:02:42 - [1025] ----D- C:\Program Files\Services en ligne

O43 - CFD: 16/09/2011 - 20:17:20 - [793430] ----D- C:\Program Files\Shape Collage

O43 - CFD: 12/07/2011 - 15:06:52 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 12/07/2011 - 21:09:54 - [73042] ----D- C:\Program Files\WinASPI

O43 - CFD: 12/07/2011 - 18:46:20 - [5418300] ----D- C:\Program Files\Windows Desktop Search

O43 - CFD: 16/07/2011 - 11:34:34 - [46432861] ----D- C:\Program Files\Windows Live

O43 - CFD: 12/07/2011 - 17:46:34 - [3581070] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 13/07/2011 - 08:09:46 - [8321242] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 16/07/2011 - 14:45:56 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 13/07/2011 - 07:56:44 - [20081898] ----D- C:\Program Files\Windows Sidebar

O43 - CFD: 12/07/2011 - 15:02:46 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 12/07/2011 - 15:03:58 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 12/07/2011 - 21:15:24 - [152723] ----D- C:\Program Files\XviD

O43 - CFD: 28/09/2011 - 00:51:14 - [6395870] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 03/09/2011 - 18:23:02 - [23957415] ----D- C:\Program Files\Fichiers Communs\ACD Systems

O43 - CFD: 24/07/2011 - 21:33:36 - [130926912] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 26/07/2011 - 22:54:20 - [31517343] ----D- C:\Program Files\Fichiers Communs\Adobe AIR

O43 - CFD: 12/07/2011 - 21:30:38 - [68096] ----D- C:\Program Files\Fichiers Communs\Adobe Systems Shared

O43 - CFD: 16/07/2011 - 22:52:50 - [7431415] ----D- C:\Program Files\Fichiers Communs\Canon

O43 - CFD: 12/07/2011 - 20:34:50 - [92976] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 16/07/2011 - 15:45:26 - [204800] ----D- C:\Program Files\Fichiers Communs\France Telecom

O43 - CFD: 12/07/2011 - 21:05:08 - [6099982] ----D- C:\Program Files\Fichiers Communs\G DATA

O43 - CFD: 12/07/2011 - 21:10:18 - [17728085] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 17/09/2011 - 19:19:20 - [23234022] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 24/07/2011 - 21:35:06 - [655111] ----D- C:\Program Files\Fichiers Communs\Macrovision Shared

O43 - CFD: 02/09/2011 - 09:17:18 - [262983462] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 12/07/2011 - 15:01:50 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 13/07/2011 - 08:08:24 - [205785973] ----D- C:\Program Files\Fichiers Communs\Nero

O43 - CFD: 12/07/2011 - 16:30:26 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 12/07/2011 - 15:01:54 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 12/07/2011 - 16:30:24 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 12/07/2011 - 20:52:38 - [0] ----D- C:\Program Files\Fichiers Communs\SWF Studio

O43 - CFD: 13/07/2011 - 07:17:04 - [41360161] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 12/07/2011 - 19:12:06 - [51254049] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 17/09/2011 - 18:14:44 - [90062234] ----D- C:\Documents and Settings\NVIDIA\Application Data\.minecraft

O43 - CFD: 03/09/2011 - 18:27:18 - [5168962] ----D- C:\Documents and Settings\NVIDIA\Application Data\ACD Systems

O43 - CFD: 01/08/2011 - 18:34:28 - [17899827] ----D- C:\Documents and Settings\NVIDIA\Application Data\Adobe

O43 - CFD: 16/07/2011 - 19:06:06 - [1571] ----D- C:\Documents and Settings\NVIDIA\Application Data\ArcSoft

O43 - CFD: 13/07/2011 - 09:37:24 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\ATI

O43 - CFD: 03/09/2011 - 18:52:42 - [8] ----D- C:\Documents and Settings\NVIDIA\Application Data\Canon

O43 - CFD: 16/07/2011 - 11:20:28 - [10] ----D- C:\Documents and Settings\NVIDIA\Application Data\Copernic

O43 - CFD: 28/07/2011 - 18:29:10 - [506] ----D- C:\Documents and Settings\NVIDIA\Application Data\DAEMON Tools Lite

O43 - CFD: 16/07/2011 - 12:21:56 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\DivX

O43 - CFD: 15/07/2011 - 15:52:12 - [174721] ----D- C:\Documents and Settings\NVIDIA\Application Data\eu

O43 - CFD: 23/07/2011 - 19:31:28 - [88934] ----D- C:\Documents and Settings\NVIDIA\Application Data\Google

O43 - CFD: 12/07/2011 - 21:38:06 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Help

O43 - CFD: 12/07/2011 - 15:06:52 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Identities

O43 - CFD: 12/07/2011 - 20:53:54 - [7961159] ----D- C:\Documents and Settings\NVIDIA\Application Data\Jasc Software Inc

O43 - CFD: 12/07/2011 - 22:01:58 - [81086] ----D- C:\Documents and Settings\NVIDIA\Application Data\Macromedia

O43 - CFD: 01/08/2011 - 18:35:26 - [10944173] -S--D- C:\Documents and Settings\NVIDIA\Application Data\Microsoft

O43 - CFD: 28/07/2011 - 20:33:20 - [12924968] ----D- C:\Documents and Settings\NVIDIA\Application Data\Mozilla

O43 - CFD: 02/09/2011 - 15:39:48 - [2334684] ----D- C:\Documents and Settings\NVIDIA\Application Data\naviextras

O43 - CFD: 13/07/2011 - 08:22:18 - [535256] ----D- C:\Documents and Settings\NVIDIA\Application Data\Nero

O43 - CFD: 02/09/2011 - 09:17:22 - [16145] ----D- C:\Documents and Settings\NVIDIA\Application Data\NewspaperDirect

O43 - CFD: 23/07/2011 - 23:41:50 - [1476461] ----D- C:\Documents and Settings\NVIDIA\Application Data\OpenOffice.org

O43 - CFD: 04/08/2011 - 17:34:10 - [2358076] ----D- C:\Documents and Settings\NVIDIA\Application Data\Orange

O43 - CFD: 12/07/2011 - 20:50:32 - [11770208] ----D- C:\Documents and Settings\NVIDIA\Application Data\Sun

O43 - CFD: 12/07/2011 - 21:01:54 - [13682] ----D- C:\Documents and Settings\NVIDIA\Application Data\Symantec

O43 - CFD: 12/07/2011 - 21:33:22 - [492] ----D- C:\Documents and Settings\NVIDIA\Application Data\Technicland

O43 - CFD: 23/12/2011 - 14:24:40 - [1358065] ----D- C:\Documents and Settings\NVIDIA\Application Data\uTorrent

O43 - CFD: 16/07/2011 - 15:53:42 - [314920] ----D- C:\Documents and Settings\NVIDIA\Application Data\Voxmobili

O43 - CFD: 12/07/2011 - 17:47:34 - [196] ----D- C:\Documents and Settings\NVIDIA\Application Data\Windows Desktop Search

O43 - CFD: 15/07/2011 - 15:50:20 - [0] ----D- C:\Documents and Settings\NVIDIA\Application Data\Windows Search

O43 - CFD: 26/07/2011 - 22:54:16 - [19306599] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Adobe

O43 - CFD: 12/07/2011 - 18:50:28 - [3458] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 13/07/2011 - 09:37:24 - [64793] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\ATI

O43 - CFD: 17/07/2011 - 00:02:00 - [1085] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\CANON_INC

O43 - CFD: 28/07/2011 - 17:53:42 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\COMODO

O43 - CFD: 23/07/2011 - 19:30:28 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Deployment

O43 - CFD: 18/09/2011 - 14:54:36 - [766354270] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google

O43 - CFD: 12/07/2011 - 21:38:06 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Help

O43 - CFD: 16/07/2011 - 17:02:34 - [161360] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Identities

O43 - CFD: 28/09/2011 - 00:13:22 - [543113] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\LogMeIn Hamachi

O43 - CFD: 22/08/2011 - 23:36:06 - [135943] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\LogMeIn Hamachi(2)

O43 - CFD: 24/12/2011 - 22:16:12 - [329930041] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Microsoft

O43 - CFD: 12/07/2011 - 20:31:32 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Microsoft Help

O43 - CFD: 28/07/2011 - 20:33:14 - [21142935] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Mozilla

O43 - CFD: 10/08/2011 - 15:55:30 - [4417] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Nero

O43 - CFD: 24/07/2011 - 20:57:10 - [6420] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\RcIncidents

O43 - CFD: 03/09/2011 - 18:28:50 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Showtime

O43 - CFD: 12/07/2011 - 22:04:22 - [0] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Temp

O43 - CFD: 12/07/2011 - 20:49:42 - [10449920] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142050}

O43 - CFD: 15/07/2011 - 15:33:36 - [10931200] ----D- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142100}

~ Scan Program Folder in 00mn 10s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.6E550847AC4833269109758D13FDC5FF] - 27/09/2011 - 23:41:52 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1458621]

O44 - LFC:[MD5.DCED74DCFB9D48DAAF188E000F18A7CE] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1451468]

O44 - LFC:[MD5.6632058FE20CD6F2AF778C6680D83077] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [100736]

O44 - LFC:[MD5.22BA14236F480607EACFC40824CE53FA] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [128894]

O44 - LFC:[MD5.54BF518104A79E0366480094DBA8EA7B] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [550848]

O44 - LFC:[MD5.0B45336F652A295AC47618C91D3BF668] - 27/09/2011 - 23:16:39 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [650004]

O44 - LFC:[MD5.A94B1B5C2B95CB51D62D98241A39888B] - 27/09/2011 - 23:13:10 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13646]

O44 - LFC:[MD5.C83F89E7878A038B21EB024F09093D02] - 27/09/2011 - 23:12:39 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 27/09/2011 - 23:12:38 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.4E6CF7E83E8642249BB1A04105FC806A] - 27/09/2011 - 23:12:37 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 27/09/2011 - 23:12:12 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.991F2B054A4102673BBCA6662707E22A] - 27/09/2011 - 23:11:11 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32558]

O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 27/09/2011 - 22:06:19 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [69]

O44 - LFC:[MD5.EEBACD996A2059BAE2181BB60673B938] - 25/09/2011 - 08:00:46 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [404640]

O44 - LFC:[MD5.4816922B108FF3C0F010EEAFDCFA24FA] - 22/09/2011 - 23:55:41 ---A- . (...) -- C:\WINDOWS\setupapi.log [373990]

O44 - LFC:[MD5.0C69B1BA36F2D4CB69ED2728150FB4BB] - 17/09/2011 - 18:18:08 ---A- . (.Sun Microsystems - Java Plug-in Control Panel.) -- C:\WINDOWS\system32\jpicpl32.cpl [61555]

O44 - LFC:[MD5.3FA50D19887B754914491A29DF836171] - 17/09/2011 - 15:31:47 ---A- . (...) -- C:\WINDOWS\system32\jupdate-1.6.0_26-b03.log [3794]

O44 - LFC:[MD5.134A3396434DE451A905ED1CA0C52DCF] - 16/09/2011 - 19:41:57 ---A- . (...) -- C:\WINDOWS\AndreaMosaic Setup Log.txt [8083]

O44 - LFC:[MD5.456462905091DB042141487FE030E3C9] - 16/09/2011 - 19:41:38 ---A- . (.Indigo Rose Corporation - SUF60Runtime.) -- C:\WINDOWS\iun6002.exe [737280]

O44 - LFC:[MD5.CD1835CF8233E6255D073832C62DAEB2] - 16/09/2011 - 19:11:12 ---A- . (...) -- C:\WINDOWS\cadkasdeinst01e.exe [75776]

O44 - LFC:[MD5.A145FEA81254A92666034D08B1C96BBA] - 16/09/2011 - 19:06:56 ---A- . (...) -- C:\dxlog.txt [148]

O44 - LFC:[MD5.376415EB5E7F29131C5CF41596D48276] - 16/09/2011 - 14:25:52 ---A- . (...) -- C:\WINDOWS\IE4 Error Log.txt [1472]

O44 - LFC:[MD5.1EDE734867243A39195FD27FD9075A55] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\KB2616676.log [13173]

O44 - LFC:[MD5.30B5EB783CD7FB601EFE145A1EFF6AFE] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log [9775]

O44 - LFC:[MD5.0160CEEA626EBAF55FFC8FD316135371] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\comsetup.log [47106]

O44 - LFC:[MD5.0A99249FE487803D2CEEF2AAD723540D] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\iis6.log [153412]

O44 - LFC:[MD5.57800DADF3D522782AC0138BD726602C] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]

O44 - LFC:[MD5.478FE578901884A1C08974E1E33C2791] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\msgsocm.log [7107]

O44 - LFC:[MD5.D439587F7153144D3B7CDB86F893F964] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\netfxocm.log [24909]

O44 - LFC:[MD5.16E68DD0C7879AA897056426429F76B9] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [28493]

O44 - LFC:[MD5.2C13D9202CBDCD36566C2FD097FDCF7F] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ocgen.log [67988]

O44 - LFC:[MD5.A1DA1EDFCCCB42CDB10CCACBD0FFCA94] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\ocmsn.log [7866]

O44 - LFC:[MD5.3D47144D120D8FE77F96CDC87E207072] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\tabletoc.log [7153]

O44 - LFC:[MD5.EC94BDDA3677F168AEBB71E366412747] - 14/09/2011 - 09:07:01 ---A- . (...) -- C:\WINDOWS\tsoc.log [64860]

O44 - LFC:[MD5.F4920196607D687BADCEE1E29D5840D3] - 14/09/2011 - 09:07:00 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [142215]

O44 - LFC:[MD5.129EC49402826CF3505C41F82CFBD5BB] - 14/09/2011 - 09:06:59 ---A- . (...) -- C:\WINDOWS\msmqinst.log [43844]

O44 - LFC:[MD5.343B7FBF81598082689CBCE6AEEE84FD] - 14/09/2011 - 09:06:58 ---A- . (...) -- C:\WINDOWS\updspapi.log [53149]

O44 - LFC:[MD5.E3ADC1CF5517287D6CDB762F6F92A116] - 14/09/2011 - 09:03:44 ---A- . (...) -- C:\WINDOWS\KB2570947.log [8295]

O44 - LFC:[MD5.ABBF3A732E9F613BADD9A50572A94F5E] - 14/09/2011 - 09:03:44 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]

O44 - LFC:[MD5.E1882E1206F6F0781DC74D9DC6263243] - 07/09/2011 - 09:01:47 ---A- . (...) -- C:\WINDOWS\KB2607712.log [11573]

O44 - LFC:[MD5.5903FA75200807AD739286BBF40C4904] - 03/09/2011 - 17:23:21 ---A- . (.Padus, Inc. - Padus® ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [9856]

O44 - LFC:[MD5.64B89B9E05B25D142C3EFC05E9C2D798] - 30/08/2011 - 21:35:43 ---A- . (...) -- C:\WINDOWS\KB2570791.log [3731]

O44 - LFC:[MD5.5F0CAAE5F70CD34C55042200C34390DB] - 30/08/2011 - 21:35:43 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [13072]

O44 - LFC:[MD5.1A02F340691C3A7755267DABD283B262] - 10/10/2005 - 14:09:40 ---A- . (...) -- C:\WINDOWS\system32\javaw.exe [45163]

O44 - LFC:[MD5.56FC0617B7100622E84DC5858A3A8B08] - 10/10/2005 - 14:09:28 ---A- . (...) -- C:\WINDOWS\system32\java.exe [45161]

~ Scan Files in 00mn 38s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\application\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\application\Microsoft Office\Office12\OUTLOOK.exe

O47 - AAKE:Key Export SP - "C:\internet\eMule\emule.exe" [Enabled] .(...) -- C:\internet\eMule\emule.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 7.0.1.325\French\setup.exe" [Enabled] .(.Kaspersky Lab.) -- C:\Documents and Settings\All Users\Application Data\Kasper

O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\tvnserver.exe" [Enabled] .(...) -- C:\Program Files\TightVNC\tvnserver.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\TightVNC\vncviewer.exe" [Enabled] .(...) -- C:\Program Files\TightVNC\vncviewer.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe" [Enabled] .(.France Telecom SA - Orange Upd@te.) -- C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe

O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.)

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.MPG4"="vp31vfw.dll" . (.On2.com - On2_VP3.) -- C:\WINDOWS\system32\vp31vfw.dll

O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\WINDOWS\system32\vorbis.acm

O52 - TDSD: \Drivers32\"vidc.dvsd"="pdvcodec.dll" . (.Matsushita Electric Industrial Co., Ltd. - DV Video for Windows Driver.) -- C:\WINDOWS\system32\pdvcodec.dll

O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll

O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\system32\DivX.dll

O52 - TDSD: \Drivers32\"VIDC.ACDV"="ACDV.dll" . (.ACD Systems - ACDV.) -- C:\WINDOWS\system32\ACDV.dll

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"xvidvfw.dll"="XviD MPEG-4 Video Codec" . (...) -- C:\WINDOWS\system32\xvidvfw.dll

O52 - TDSD: \drivers.desc\"l3codecp.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\WINDOWS\system32\l3codecp.acm

O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.5 Codec" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"ACDV.dll"="ACDV 1.0" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.F6AF59D6EEE5E1C304F7F73706AD11D8] - 28/09/2011 - 13:10:12 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys [1684736]

O58 - SDL:[MD5.4F0E198FD3D5CD8BEE02E0F014601BC5] - 28/09/2011 - 18:16:59 ---A- . (.SlySoft, Inc. - AnyDVD Filter Driver.) -- C:\WINDOWS\system32\drivers\AnyDVD.sys [96832]

O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 28/09/2011 - 03:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys [5810]

O58 - SDL:[MD5.B979979AB8027F7F53FB16EC4229B7DB] - 28/09/2011 - 11:06:00 ---A- . (.Adaptec - ASPI for WIN32 Kernel Driver.) -- C:\WINDOWS\system32\drivers\Aspi32.sys [25244]

O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 28/09/2011 - 13:30:14 ---A- . (...) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS [10296]

O58 - SDL:[MD5.C0B86ECB324E50F6BBD529F9D5C6B24B] - 28/09/2011 - 08:38:10 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [3565056]

O58 - SDL:[MD5.A39393941B26BFFAFE464DCBF9FC72F0] - 28/09/2011 - 09:23:22 ---A- . (.Macrovision - C-Dilla Windows NT RTS.) -- C:\WINDOWS\system32\drivers\CDANT.SYS [58288]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 28/09/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.D58B707F3D12AE410CA07D257FD28098] - 28/09/2011 - 08:38:12 ---A- . (.COMODO - COMODO Internet Security Eradication Driver.) -- C:\WINDOWS\system32\drivers\cmderd.sys [17416]

O58 - SDL:[MD5.251F906328AF49E7927A1AD12B543A2F] - 28/09/2011 - 08:38:14 ---A- . (.COMODO - COMODO Internet Security Sandbox Driver.) -- C:\WINDOWS\system32\drivers\cmdGuard.sys [242600]

O58 - SDL:[MD5.207F06D08AFCDD3BBC801EAB1A845CFB] - 28/09/2011 - 08:38:14 ---A- . (.COMODO - COMODO Internet Security Helper Driver.) -- C:\WINDOWS\system32\drivers\cmdhlp.sys [29400]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 28/09/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.555E54AC2F601A8821CEF58961653991] - 28/09/2011 - 17:26:33 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys [218688]

O58 - SDL:[MD5.CE37E3D51912E59C80C6D84337C0B4CD] - 28/09/2011 - 01:57:04 ---A- . (.SlySoft, Inc. - ElbyCDIO Filter Driver.) -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys [34760]

O58 - SDL:[MD5.D71233D7CCC2E64F8715A20428D5A33B] - 28/09/2011 - 23:57:57 ---A- . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys [31088]

O58 - SDL:[MD5.E205C313417DA6FA7AFE85912A310A65] - 28/09/2011 - 01:56:49 ---A- . (.Elaborate Bytes AG - Elby Delay Lower Filter Driver.) -- C:\WINDOWS\system32\drivers\ElbyDelay.sys [11984]

O58 - SDL:[MD5.833051C6C6C42117191935F734CFBD97] - 28/09/2011 - 16:35:40 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\WINDOWS\system32\drivers\hamachi.sys [26176]

O58 - SDL:[MD5.C9953067B2C9E3D3DD44EC22D1E0815A] - 28/09/2011 - 08:38:16 ---A- . (.COMODO - COMODO Internet Security Firewall Driver.) -- C:\WINDOWS\system32\drivers\inspect.sys [97504]

O58 - SDL:[MD5.96478FE91C5A37C673EBE3DA87C1A115] - 28/09/2011 - 08:09:52 R--A- . (.Atheros Communications, Inc. - Atheros AR813x/AR815x PCI-E Ethernet Controller ndis miniport d.) -- C:\WINDOWS\system32\drivers\l1c51x86.sys [44032]

O58 - SDL:[MD5.9FA7207D1B1ADEAD88AE8EED9CDBBAA5] - 28/09/2011 - 08:41:48 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys [1389056]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.5903FA75200807AD739286BBF40C4904] - 28/09/2011 - 17:23:21 ---A- . (.Padus, Inc. - Padus® ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [9856]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 28/09/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.E205C313417DA6FA7AFE85912A310A65] - 28/09/2011 - 01:56:49 ---A- . (.Elaborate Bytes AG - Elby Delay Lower Filter Driver.) -- C:\WINDOWS\system32\drivers\RegKill.sys [11984]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 28/09/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.3D3F703B44A26D9C676EC3E2A03BA811] - 28/09/2011 - 15:28:42 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [5934592]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 28/09/2011 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 28/09/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.FCE98C43B5C5DB8E0DA8EA0E2B45E044] - 28/09/2011 - 17:20:14 ---A- . (.Elaborate Bytes AG - VirtualCloneCD Driver.) -- C:\WINDOWS\system32\drivers\VClone.sys [30208]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 28/09/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 28/09/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 01/04/2003 - C:\WINDOWS\system32\drivers\CDANT.sys - C-Dilla(C-Dilla) .(.Macrovision - C-Dilla Windows NT RTS.) - LEGACY_C-DILLA

O64 - Services: CurCS - 01/04/2003 - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe - C-DillaSrv(C-DillaSrv) .(.C-Dilla Ltd - C-Dilla RTS Service.) - LEGACY_C-DILLASRV

O64 - Services: CurCS - 08/09/2009 - C:\Program Files\Canon\CAL\CALMAIN.exe - Canon Camera Access Library 8(CCALib8) .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8

O64 - Services: CurCS - 30/06/2011 - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe - COMODO Internet Security Helper Service(cmdAgent) .(.COMODO - COMODO Internet Security.) - LEGACY_CMDAGENT

O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmderd.sys - COMODO Internet Security Eradication Driver(cmderd) .(.COMODO - COMODO Internet Security Eradication Driver.) - LEGACY_CMDERD

O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmdguard.sys - COMODO Internet Security Sandbox Driver(cmdGuard) .(.COMODO - COMODO Internet Security Sandbox Driver.) - LEGACY_CMDGUARD

O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\cmdhlp.sys - COMODO Internet Security Helper Driver(cmdHlp) .(.COMODO - COMODO Internet Security Helper Driver.) - LEGACY_CMDHLP

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 16/12/2010 - C:\WINDOWS\system32\Drivers\ElbyCDIO.sys - ElbyCDIO Driver(ElbyCDIO) .(.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - LEGACY_ELBYCDIO

O64 - Services: CurCS - 12/07/2011 - C:\WINDOWS\system32\GEARSEC.exe - GEARSecurity(GEARSecurity) .(.GEAR Software - gearsec.) - LEGACY_GEARSECURITY

O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate)(gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE

O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdatem)(gupdatem) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM

O64 - Services: CurCS - 23/07/2011 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater(gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - 25/05/2011 - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe - LogMeIn Hamachi 2.0 Tunneling Engine(Hamachi2Svc) .(.LogMeIn Inc. - Hamachi2 Client Tunneling Engine.) - LEGACY_HAMACHI2SVC

O64 - Services: CurCS - 22/10/2004 - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - 30/06/2011 - C:\WINDOWS\system32\DRIVERS\inspect.sys - COMODO Internet Security Firewall Driver(Inspect) .(.COMODO - COMODO Internet Security Firewall Driver.) - LEGACY_INSPECT

~ Scan Services in 00mn 23s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\NVIDIA\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (Orange) - Orange : téléphones, forfaits, Internet, actualité, sport, video

O69 - SBI: SearchScopes [HKCU] {9D9CAD55-7EFE-4A19-B9EE-3973A3C35BC7} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} - (DAEMON Search) - DAEMON-Search.com :: EXPLORE

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.444067F81B9D0728A2E7E58FDF1CAF65] [sPRF][25/04/2005] (.Macromedia, Inc. - Flash Player 5.0 r30.) -- C:\Documents and Settings\NVIDIA\Bureau\shanghai_dynasty.exe [516808]

~ Scan Files in 00mn 00s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8636 - (25/09/2011)

Clés trouvées (Keys found) : 1

Valeurs trouvées (Values found) : 1

Dossiers trouvés (Folders found) : 1

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange

[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{32099aac-c132-4136-9e9a-4e364a424e17} =>Toolbar.Agent

C:\Program Files\DAEMON Tools Toolbar =>Toolbar.Agent

~ Scan Additionnel in 00mn 07s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : livebox.home

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 209.85.148.99, 209.85.148.103, 209.85.148.106, 209.85.148.147

209.85.148.105, 209.85.148.104

Aliases: www.google.fr, www.google.com

~ Scan DNS in 00mn 21s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Demand 68096 | (Adobe LM Service) . (...) - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

SR - | Auto 28/09/2011 602112 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe

SS - | Auto 593920 | (ATI Smart) . (...) - C:\WINDOWS\system32\ati2sgag.exe

SR - | Auto 28/09/2011 46080 | (C-DillaSrv) . (.C-Dilla Ltd.) - C:\WINDOWS\system32\DRIVERS\CDANTSRV.exe

SR - | Auto 28/09/2011 96334 | (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe

SR - | Auto 28/09/2011 1793712 | C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (cmdAgent) . (.COMODO.) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

SS - | Demand 28/09/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SR - | Demand 28/09/2011 654848 | (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

SR - | Auto 0 | (GEARSecurity) . (...) - c:\SYSTEM32\GEARSEC.exe

SS - | Auto 28/09/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 28/09/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 28/09/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SR - | Auto 28/09/2011 1336712 | LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe

SS - | Demand 28/09/2011 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

SR - | Auto 28/09/2011 935208 | Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe

SS - | Auto 28/09/2011 1055872 | (Orange update Core Service) . (.France Telecom SA.) - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe

~ Scan Services in 00mn 22s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by NVIDIA at 28/09/2011 00:53:34

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS

1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x8B02FAB8]

3 CLASSPNP[0xBA0E8FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\00000068[0x8B070780]

5 ACPI[0xB9F7E620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP2T0L0-5[0x8B060D98]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 28s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by NVIDIA at 28/09/2011 00:53:43

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 36s

 

 

 

End of the scan (1363 lines in 02mn 47s)(0)