Virus startsear.ch

[Theandre]

Bonjour,

 

Google.fr est redevenu ma page de démarrage et la toolbar vShare.tv a disparu mais je ne suis pas suffisamment expert pour interprêter avec certitude les rapports et notamment le dernier. Vous semble-t-il qu'à leur lecture les problèmes que j'avais intialement soulevés sont résolus et les malware suprimés?

 

Dans l'attente de votre réponse, je vous remercie de votre aide et de votre disponibilité.

 

Cordialement

 

Theandre

[Theandre]

Bonjour,

 

Je me permets de revenir vers vous car je n'ai pas reçu de réponse suite à mon dernier mail depuis votre absence du 5 au 10 octobre.

 

S'il semble que la toolbar vShare.tv a disparu ainsi que la page d'accueil startsear.ch qui remplaçait google.fr, je ne suis pas rassuré pour autant puisque ma boite hotmail a été piratée. En effet, à partir du 9 octobre de nombreux mails bizarres (spams), proposant en anglais ou en français de cliquer sur un lien suspect ont été envoyé à ma liste de contacts, en s'appropriant mon identité. Dois-je craindre d'autres problèmes de ce genre, le malware s'étant approprié mes informations personnelles?

 

Par ailleurs, dans le dernier rapport de ZHPFix du O3/10, comment dois-je comprendre la fin du rapport? Dans "AUTRE" il y a la ligne "NON TRAITE TOOLBAR INUTILE (Navigateur internet)". Cela signifie-t-il que la toolabr vShare.tv n'a pas été complétement supprimé?

 

Merci de votre réponse et de votre aide.

 

Theandre

 

 

Rapport de ZHPFix 1.12.3362 par Nicolas Coolman, Update du 23/09/2011

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-03-10-2011-21-15-24.txt

Run by Nicolas at 03/10/2011 21:15:16

Windows XP Home Edition Service Pack 3 (Build 2600)

Web site : ZHPFix Fix de rapport

 

========== Clé(s) du Registre ==========

SUPPRIME Key: HKCU\Software\StartSearch

SUPPRIME Key: SearchScopes :{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{09F1ADAC-76D8-4D0F-99A5-5C907DADB988}

SUPPRIME Key: HKCU\Software\Boonty

SUPPRIME Key: HKLM\Software\Boonty

SUPPRIME Key: HKCU\Software\vShare.tv

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

ABSENT Key: HKLM\Software\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}

SUPPRIME Key: HKLM\Software\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}

SUPPRIME Key: HKLM\Software\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3}

SUPPRIME Key: HKLM\Software\Classes\Installer\Features\caf0fc2bc25d8d14180efb7d3a7e8cb4

SUPPRIME Key: HKLM\Software\Classes\Installer\Products\caf0fc2bc25d8d14180efb7d3a7e8cb4

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\caf0fc2bc25d8d14180efb7d3a7e8cb4

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\vShare.tv plugin

SUPPRIME Key: HKCU\Software\FalcoAlaTalk

 

========== Valeur(s) du Registre ==========

SUPPRIME RunValue: BoontyBox

ABSENT RunValue: BoontyBox

SUPPRIME Toolbar: {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

SUPPRIME RunValue: Motive SmartBridge

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Program Files\BoontyGames

SUPPRIME Folder: C:\Program Files\Fichiers Communs\BOONTY Shared

SUPPRIME Temporaires Windows: : 15

 

========== Fichier(s) ==========

ABSENT File: c:\program files\boonty\boontybox\boontybox.exe

ABSENT File: c:\program files\vshare.tv plugin\barlcher.dll

SUPPRIME Reboot c:\progra~1\club-i~1\lecomp~1\smartb~1\motivesb.exe

SUPPRIME Temporaires Windows: : 1232

 

========== Autre ==========

NON TRAITE PROCESSUS SUPERFLU DU SYSTEME

NON TRAITE TOOLBAR INUTILE (Navigateur internet)

NON TRAITE PROCESSUS D'ACTION INCONNUE

NON TRAITE PROCESSUS INUTILE (Au démarrage du système)

 

 

========== Récapitulatif ==========

28 : Clé(s) du Registre

4 : Valeur(s) du Registre

3 : Dossier(s)

4 : Fichier(s)

4 : Autre

 

 

End of clean in 00mn 30s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 03/10/2011 21:15:16 [3908]

[pear]

Bonjour,

 

[NON TRAITE PROCESSUS SUPERFLU DU SYSTEME

NON TRAITE TOOLBAR INUTILE (Navigateur internet)

NON TRAITE PROCESSUS D'ACTION INCONNUE

NON TRAITE PROCESSUS INUTILE (Au démarrage du système)/quote]

 

Ce sont des titres qui ne sont pas traités,par contre leur contenu l'a été.

Votre machine est propre, à cette date.

 

Ce qui se passe à partir du 9 octobre, c'est donc nouveau.

Relancez Zhpdiag que l'on y voie peut-être plus clair

[Theandre]

Bonjour,

 

Merci pour votre réponse. J'ai relancé ZHPDiag. Voici le rapport:

 

 

 

 

 

Rapport de ZHPDiag v1.28.1367 par Nicolas Coolman, Update du 05/10/2011

Run by Nicolas at 14/10/2011 19:09:26

Web site : ZHPDiag Outil de diagnostic

State : Version à jour.

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

 

---\\ Windows Product Information

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1023 MB (34% free)

System Restore: Activé (Enable)

System drive C: has 62 GB (66%) free of 93 GB

 

---\\ Logged in mode

~ Computer Name: YOUR-0B8EED07AB

~ User Name: Nicolas

~ All Users Names: SUPPORT_388945a0, Nicolas, HelpAssistant, ASPNET, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\Nicolas\Application Data\

~ %Desktop% : C:\Documents and Settings\Nicolas\Bureau\

~ %Favorites% : C:\Documents and Settings\Nicolas\Favoris\

~ %LocalAppData% : C:\Documents and Settings\Nicolas\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\Nicolas\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 62 Go of 93 Go)

D:\ CD-ROM drive (Not Inserted)

F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/10/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.14/10/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.7DF35C3D173E799F97F208CC5F3B1C93] - (.Microsoft Corporation - Internet Extensions for Win32.) (.14/10/2011 - 00:41:31.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/10/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/10/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496] 1868

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.14/10/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512] 1788

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/10/2011 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744] 1804

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/10/2011 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976] 1780

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/10/2011 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672] 1852

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/10/2011 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384] 1940

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/10/2011 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144] 1852

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/10/2011 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112] 1780

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/10/2011 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832] 1820

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/10/2011 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264] 1756

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.14/10/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320] 1844

[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/10/2011 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816] 1788

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/10/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976] 1788

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/10/2011 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384] 1852

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/10/2011 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328] 1876

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14/10/2011 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224] 1828

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/10/2011 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752] 1892

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 247/4012

~ Mes musiques (My Musics) : 393/1204

~ Mes Videos (My Videos) : 4/97

~ Mes Favoris (My Favorites) : 2/202

~ Mes Documents (My Documents) : 710/6551

~ Mon Bureau (My Desktop) : 7/150

~ Menu demarrer (Programs) : 6/26

~ Scan Hidden Files in 00mn 05s

 

 

 

---\\ Processus lancés

[MD5.6633CBF0D658440F0962D90E5BD20DDE] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [360448] [PID.]

[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]

[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [349472] [PID.]

[MD5.98D65C9B0F4A28300E0F5FDCB3A4874C] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [36864] [PID.]

[MD5.892648C3B0B46DB191FA8F5E5A224584] - (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) -- C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe [215648] [PID.]

[MD5.FB38FF052B9568971D8AD9FBF0A3FC28] - (.F-Secure Corporation - F-Secure Management Agent.) -- C:\Program Files\F-Secure\Common\FSMA32.EXE [117400] [PID.]

[MD5.09A12C446A327C5DA0D39FD48FAD9E5B] - (.F-Secure Corporation - Gatekeeper Handler II.) -- C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE [496808] [PID.]

[MD5.2A0D3EE7D2D42A3A812D3E6795A2382B] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.Exe [222568] [PID.]

[MD5.FD9B7B22875787699ACDE127F30EBAE1] - (.F-Secure Corporation - F-Secure Message Broker.) -- C:\Program Files\F-Secure\Common\FSMB32.EXE [232088] [PID.]

[MD5.5C7B88695CE461D8BDA4FE0C0E57E71D] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [154136] [PID.]

[MD5.3978F082274F723AD5A0A8058C2417DD] - (.Analog Devices, Inc. - SoundMAX service agent component.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056] [PID.]

[MD5.A4C743F26B53456E24F2A90CF626B49F] - (.F-Secure Corporation - F-Secure Configuration Handler.) -- C:\Program Files\F-Secure\Common\FCH32.EXE [125592] [PID.]

[MD5.C65BAC90FDB6E9700D4AAA8C5868F7D7] - (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe [34816] [PID.]

[MD5.693920C69F10F4007A23F42CE17A657A] - (.F-Secure Corporation - F-Secure Alert and Management Extension Han.) -- C:\Program Files\F-Secure\Common\FAMEH32.EXE [404064] [PID.]

[MD5.D99EB602CC2A306C351DBB0E896EB167] - (.F-Secure Corporation - F-Secure Quarantine Handler.) -- C:\Program Files\F-Secure\Anti-Virus\fsqh.exe [43680] [PID.]

[MD5.67C5AF84809468061121FBCBECB19285] - (.Symantec Corporation - Norton Security Center Service.) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe [316544] [PID.]

[MD5.A9ACC4B9730B6D5B0BB2BFFDC53F0812] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [86606] [PID.]

[MD5.2A528B2E9D280AF372F46FC5042F85A0] - (.F-Secure Corporation - F-Secure Internet Shield daemon.) -- C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe [510560] [PID.]

[MD5.2FC4774E100F47E10E61C9A393E7D8B9] - (.F-Secure Corporation - F-Secure Scanner Manager.) -- C:\Program Files\F-Secure\Anti-Virus\fssm32.exe [709800] [PID.]

[MD5.B8A6A3855FEFDB0FBDD1EAA11821A9C2] - (.F-Secure Corporation - F-Secure Automatic Update Agent.) -- C:\Program Files\F-Secure\FSAUA\program\fsaua.exe [490080] [PID.]

[MD5.BFCA837AA5687BD23E770476A9B5FAD6] - (.F-Secure Corporation - F-Secure Network Request Broker.) -- C:\Program Files\F-Secure\Common\FNRB32.EXE [162456] [PID.]

[MD5.2BD22FBD783226E1449B9F167C1DC5B0] - (.F-Secure Corporation - F-Secure Installation Launcher.) -- C:\Program Files\F-Secure\Common\FIH32.EXE [101016] [PID.]

[MD5.76F874B3FC5F60991CE2F179B50B2BC4] - (.F-Secure Corporation - FSAV Handler.) -- C:\Program Files\F-Secure\Anti-Virus\fsav32.exe [347232] [PID.]

[MD5.12E76B92A26AA03213DCAD20C7793966] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394] [PID.3996]

[MD5.343AE860DA9FAE4E275F890BA0916D6E] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218] [PID.2328]

[MD5.FCD532BE0C00E6583E9DFEBA273A8F10] - (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\Toshiba\Tvs\TvsTray.exe [73728] [PID.3744]

[MD5.C2EDE68251407CCACABF5E48028626BD] - (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\Ltmoh.exe [184320] [PID.312]

[MD5.08486B4336D032373B94C4C4687AC380] - (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe [88363] [PID.648]

[MD5.8A2210C556B9E312631567426994E19B] - (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe [352256] [PID.676]

[MD5.454D563D0EAE7F12F203FB508F02FD2C] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe [266240] [PID.3584]

[MD5.AF76A7F839F6446F27EC01FB0CEDE80E] - (.TOSHIBA CORPORATION - ConfigFree Tray.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [929792] [PID.696]

[MD5.5281DCC470A1C2981C2D82CDD814AB01] - (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [118784] [PID.904]

[MD5.3E248C34D0D5E9D777D9BC452B421635] - (.TOSHIBA - PadTouch Main.) -- C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe [1077327] [PID.2436]

[MD5.C22BDB59D346ABA833A3A207E1629F07] - (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe [122939] [PID.1108]

[MD5.B13D262EE5962EC91F93FDD933030E6A] - (.TOSHIBA Corporation - TFncKy.) -- C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe [114688] [PID.4048]

[MD5.50EFC94102FA43A2A744371BE4443709] - (.Analog Devices, Inc. - SMax4PNP MFC Application.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [1388544] [PID.268]

[MD5.52BEF4634BE1BC8B64805E93E8EB22FA] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSBattM.exe [40960] [PID.1300]

[MD5.E558CDE2913DAA077D4E25732D1AA176] - (.Hewlett-Packard Company - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152] [PID.3896]

[MD5.2EF94D5240D568760D6A83801A275712] - (.Talkway Communications - Talkway VMailTalk Manager application.) -- C:\Program Files\Fichiers communs\Talkway\vmtalk.exe [61440] [PID.1332]

[MD5.50908DB9055BB8AFBB031F8C327043D6] - (.TOSHIBA CORPORATION - ConfigFree Search for Wireless Devices.) -- C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe [544768] [PID.2276]

[MD5.D3DB89FAB9FDC9504C8A1B941CF746B0] - (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files\F-Secure\Common\FSM32.EXE [182936] [PID.2580]

[MD5.3B8C106587A57159639713EEE074EF83] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2780432] [PID.2832]

[MD5.8CAFFE5B919983211CD1F3AC0CA4D338] - (.F-Secure Corporation - F-Secure GUI component.) -- C:\Program Files\F-Secure\FSGUI\fsguidll.exe [604768] [PID.2724]

[MD5.6877F8C1787D644AE6EAF8330F93ED18] - (.TOSHIBA CORPORATION - ConfigFree SUMMIT Engine.) -- C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe [819200] [PID.3512]

[MD5.C0FD8553CECDE061AD3E7C1CC80C7EDB] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [PID.3020]

[MD5.A7A0ED26C68892135F23F4D4F176E2E3] - (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe [65536] [PID.2788]

[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856] [PID.]

[MD5.635538786A1C04FCB9EF009DE0BE7DEB] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3370296] [PID.1584]

[MD5.C519CEC624CF9BCBA3059F32266C8FFF] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [258048] [PID.732]

[MD5.334CCEA05934B9A00C591E2AC2213CE9] - (.PIXELA CORPORATION - ImageMixer Menu.) -- C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe [1871872] [PID.692]

[MD5.63336300C6CC335203FE003E6FF7A1DE] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE [64864] [PID.132]

[MD5.A84657FDDF46ECD976117BB200B9F711] - (...) -- C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe [559888] [PID.3540]

[MD5.6B2B9B46D7DA5C67397412DEA6CF9A14] - (.Hewlett-Packard Co. - Pas de description.) -- C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe [425984] [PID.4252]

[MD5.E51BD095B2FDF56B17EE010BB794D6ED] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820520] [PID.]

[MD5.9D84376931440F3679BEEF2A414FA493] - (.HP - PML Driver.) -- C:\WINDOWS\system32\HPZipm12.exe [69632] [PID.5016]

[MD5.7B2E3899314974CC40D93A6CD7C855C8] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2134016] [PID.5948]

[MD5.FA726D2A95B3AC8ED3292DAAC3580E87] - (.F-Secure Corporation - F-Secure ORSP Service.) -- C:\Program Files\F-Secure\ORSP Client\fsorsp.exe [55904] [PID.]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

[MD5.8BA7C024070F2B7FDD98ED8A4BA41789] - (.Microsoft Corporation - PresentationFontCache.exe.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104] [PID.]

~ Scan Processes Running in 00mn 10s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (...) -- C:\Program Files\Veetle\plugins\npVeetle.dll (.not file.)

P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (...) -- C:\Program Files\Veetle\Player\npvlc.dll (.not file.)

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search

R0 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = Google

R1 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = google

R1 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = Google

R1 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\Software\Microsoft\Internet Explorer\Main,Search Page = Google

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19131 (longhorn_ie8_gdr.110815-1715)) -- C:\WINDOWS\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Search Toolbar extension.) -- C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Search Toolbar extension.) -- C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [synTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Tvs] . (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\Toshiba\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [LtMoh] . (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\Ltmoh.exe

O4 - HKLM\..\Run: [AGRSMMSG] . (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe

O4 - HKLM\..\Run: [THotkey] . (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe

O4 - HKLM\..\Run: [TPSMain] . (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [smoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

O4 - HKLM\..\Run: [PadTouch] . (.TOSHIBA - PadTouch Main.) -- C:\Program Files\TOSHIBA\Touch and Launch\Padexe.exe

O4 - HKLM\..\Run: [dla] . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [TFncKy] TFncKy.exe

O4 - HKLM\..\Run: [ATIPTA] . (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [soundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP MFC Application.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [soundMAX] . (.Analog Devices, Inc. - SoundMAX Control Center.) -- C:\Program Files\Analog Devices\SoundMAX\Smax4.exe

O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Company - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [vmtalk] . (.Talkway Communications - Talkway VMailTalk Manager application.) -- C:\Program Files\Fichiers communs\Talkway\vmtalk.exe

O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe

O4 - HKLM\..\Run: [F-Secure Manager] . (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files\F-Secure\Common\FSM32.exe

O4 - HKLM\..\Run: [F-Secure TNB] . (.F-Secure Corporation - tnbutil.) -- C:\Program Files\F-Secure\FSGUI\TNBUtil.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

O4 - HKLM\..\Run: [CanalPlayerHelper] C:\Program Files\Lecteur CANALPLAY\CanalPlayerHelper.exe (.not file.)

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [EasyFlirt Messenger] C:\Program Files\EasyFlirt Messenger\EasyFlirt Messenger.exe (.not file.)

O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [EasyFlirt Messenger] C:\Program Files\EasyFlirt Messenger\EasyFlirt Messenger.exe (.not file.)

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{C41300B9-185D-475E-BFEC-39EF732F19B1}\AppleSoftwareUpdateIco.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. SA.) -- C:\Program Files\HP\Digital Imaging\DocProc\regipe.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Norton Security Center.lnk . (.Symantec Corporation.) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymSCUI.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Desktop Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe

O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll

O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico

O9 - Extra button: Skype add-on for Internet Explorer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Site dans la Zone de confiance d'Internet Explorer (O15)

O15 - Trusted Zone: [HKCU\...\Domains] *.canalplay.com

O15 - Trusted Zone: [HKCU\...\Domains\www] *.canalplay.com

O15 - Trusted Zone: [HKCU\...\Domains] *.canalplusactive.com

O15 - Trusted Zone: [HKCU\...\Domains\www] *.canalplusactive.com

O15 - Trusted Zone: [HKLM\...\Domains] *.canalplay.com

O15 - Trusted Zone: [HKLM\...\Domains\www] *.canalplay.com

O15 - Trusted Zone: [HKLM\...\Domains] *.canalplusactive.com

O15 - Trusted Zone: [HKLM\...\Domains\www] *.canalplusactive.com

~ Scan IE Zone Confiance in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~3\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~3\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: ConfigFree Service (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

O23 - Service: FSMA (FSMA) . (.F-Secure Corporation - F-Secure Management Agent.) - C:\Program Files\F-Secure\Common\FSMA32.exe

O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Process Monitor (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) . (.Analog Devices, Inc. - SoundMAX service agent component.) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: SymWMI Service (SymWSC) . (.Symantec Corporation - Norton Security Center Service.) - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

O23 - Service: TOSHIBA Application Service (TAPPSRV) . (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 1.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 3.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E97B5276-5839-4D0B-866D-2B9A542A7641}.job

~ Scan Scheduled Task in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (F-Secure HIPS) . (.F-Secure Corporation - F-Secure HIPS 32-bit Driver.) - C:\Program Files\F-Secure\HIPS\drivers\fshs.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (sscdbhk5) . (.Sonic Solutions - Shared Driver Component.) - C:\WINDOWS\system32\drivers\sscdbhk5.sys

O41 - Driver: (ssrtln) . (.Sonic Solutions - Shared Driver Component.) - C:\WINDOWS\system32\drivers\ssrtln.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software

O42 - Logiciel: ATI Control Panel - (.Pas de propriétaire.) [HKLM] -- {0BEDBD4E-2D34-47B5-9973-57E62B29307C}

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {CACAEB5F-174D-4C7C-AC56-A33289A807CA}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}

O42 - Logiciel: Assist TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Barre d'outils MSN Search - (.Microsoft Corporation.) [HKLM] -- {B2CF0FAC-D52C-41D8-81E0-BFD7A3E7C84B}

O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.Pas de propriétaire.) [HKLM] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}

O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{5B03B93F-1B32-4509-9CA6-4BB33E9987EF}

O42 - Logiciel: Canon Camera Access Library - (.Canon.) [HKLM] -- InstallShield_{901F8ED7-13E8-43EF-B738-2FE89B0588EB}

O42 - Logiciel: Canon Camera Support Core Library - (.Canon.) [HKLM] -- InstallShield_{A1D0D14A-B776-4907-BC00-5149F2298086}

O42 - Logiciel: Canon Camera Window DC_DV 5 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}

O42 - Logiciel: Canon Camera Window DC_DV 6 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{50E25180-3BDC-4B6D-80A2-3F1F0C9CF39D}

O42 - Logiciel: Canon Camera Window DSLR 5 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{0A146245-DB79-4197-BF5D-FE1A699A2CC7}

O42 - Logiciel: Canon Camera Window MC 6 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{6C3A75A6-9A90-44A3-A703-82AC1EA6A85D}

O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- InstallShield_{D0E8C34D-19D2-49FD-A900-88DEB788FF86}

O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{4DBBF091-FACD-422C-B43C-786335BD5398}

O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {BBBC2B89-E193-4348-A83C-C8DD8210A4AC}

O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}

O42 - Logiciel: Canon Utilities PhotoStitch 3.1 - (.Canon.) [HKLM] -- InstallShield_{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}

O42 - Logiciel: Canon ZoomBrowser EX (F) - (.Canon.) [HKLM] -- {C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}

O42 - Logiciel: Coffret de pilotes Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- lvdrivers_12.0

O42 - Logiciel: Commandes TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {A6690C0E-B96E-4F0F-A8EB-D5B332454AC6}

O42 - Logiciel: Configurateur Modem - (.Pas de propriétaire.) [HKLM] -- ConfigurateurModem

O42 - Logiciel: EasyFlirt Messenger 2.0 - (.Pas de propriétaire.) [HKLM] -- {400EEB8E-513A-47E6-8170-BFCF6C8A7DCF}_is1

O42 - Logiciel: F-Secure Client Security - Analyse courrier élect. - (.Pas de propriétaire.) [HKLM] -- F-Secure E-mail Scanning

O42 - Logiciel: F-Secure Client Security - Analyse du trafic Web - (.Pas de propriétaire.) [HKLM] -- F-Secure Protocol Scanner

O42 - Logiciel: F-Secure Client Security - Contrôle du système - (.Pas de propriétaire.) [HKLM] -- F-Secure HIPS

O42 - Logiciel: F-Secure Client Security - Protection Internet - (.Pas de propriétaire.) [HKLM] -- F-Secure Internet Shield

O42 - Logiciel: F-Secure Client Security - Protection contre les virus et les logiciels espions - (.Pas de propriétaire.) [HKLM] -- F-Secure Anti-Virus

O42 - Logiciel: Formatage de carte mémoire SD TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {48CF9A66-5F03-4025-ABD0-B3A3FA095A59}

O42 - Logiciel: Gestion d'énergie TOSHIBA - (.Pas de propriétaire.) [HKLM] -- Power Saver

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E}

O42 - Logiciel: HP Image Zone 4.7 - (.HP.) [HKLM] -- HP Photo & Imaging

O42 - Logiciel: HP PSC & OfficeJet 4.7 - (.HP.) [HKLM] -- {342C7C88-D335-4bc2-8CF1-281857629CE2}

O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {64FC0C98-B035-4530-B15D-3D30610B6DF1}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: ImageMixer for HDD Camcorder - (.PIXELA.) [HKLM] -- {44E5B47F-870E-4E38-A458-8A5FC4DCFECF}

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: InterVideo WinDVD for TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {91810AFC-A4F8-4EBA-A5AA-B198BBC81144}

O42 - Logiciel: J2SE Runtime Environment 5.0 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150000}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: LE COMPAGNON CLUB - (.Pas de propriétaire.) [HKLM] -- TONLFR.MCCInstall

O42 - Logiciel: Lecteur CANALPLAY 2.6 - (.Canal+ Distribution.) [HKLM] -- {E9E37358-E3E1-47BA-9E21-375EF3616BC9}

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}

O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {AC96671C-2001-432C-9826-5266D84EF1DC}

O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}

O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Macromedia Flash Player - (.Macromedia, Inc..) [HKLM] -- {0456ebd7-5f67-4ab6-852e-63781e3f389c}

O42 - Logiciel: Manuels TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {188BA1CC-F3A1-49B0-A34D-8C861C64E1AE}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2572067) - (.Pas de propriétaire.) [HKLM] -- M2572067

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs

O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office OneNote 2003 - (.Microsoft Corporation.) [HKLM] -- {91A1040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {A059DE09-1B49-4450-B340-7AE097EC3F04}

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Norton Security Center - (.Symantec Corporation.) [HKLM] -- {503AA035-41E2-4858-B31F-1E49AC66C309}

O42 - Logiciel: Orange Plug-in messagerie vocale 888 - (.Pas de propriétaire.) [HKLM] -- {16E79B1D-D1C2-4CA6-8B23-F4D890E0DCB9}

O42 - Logiciel: Outil de diagnostic PC TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {B1310222-C64A-4E1E-ABE7-2489B33955FB}

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}

O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O42 - Logiciel: SD Secure Module - (.Nom de votre société.) [HKLM] -- {C45F4811-31D5-4786-801D-F79CD06EDD85}

O42 - Logiciel: SMSC IrCC V5.1.3600.5 - (.Pas de propriétaire.) [HKLM] -- {F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Service Photos Club Internet - (.Pas de propriétaire.) [HKLM] -- Service Photos Club Internet_is1

O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A}

O42 - Logiciel: Skype™ 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: Son virtuel TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {8B12BA86-ADAC-4BA6-B441-FFC591087252}

O42 - Logiciel: Sonic DLA - (.Sonic Solutions.) [HKLM] -- {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}

O42 - Logiciel: Sonic RecordNow! - (.Sonic Solutions.) [HKLM] -- {9541FED0-327F-4DF0-8B96-EF57EF622F19}

O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C}

O42 - Logiciel: Synaptics Pointing Device Driver - (.Pas de propriétaire.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: TOSHIBA ConfigFree - (.Pas de propriétaire.) [HKLM] -- {BDD83DC9-BEE9-4654-A5DA-CC46C250088D}

O42 - Logiciel: TOSHIBA Hotkey Utility - (.Pas de propriétaire.) [HKLM] -- {64DD71BC-3109-4C88-9AD3-D5422644B722}

O42 - Logiciel: TOSHIBA Software Modem - (.Pas de propriétaire.) [HKLM] -- TOSHIBA Software Modem

O42 - Logiciel: TOSHIBA TouchPad ON/Off Utility - (.Pas de propriétaire.) [HKLM] -- {69BE47C2-36FE-4397-8199-85D8EAE69982}

O42 - Logiciel: TOSHIBA Utilities - (.Pas de propriétaire.) [HKLM] -- {78C68CB9-3DF5-44F3-AB9D-FA305C5EB85C}

O42 - Logiciel: Touch and Launch - (.Pas de propriétaire.) [HKLM] -- {5D96E2B1-D9AC-46E0-9073-425C5F63E338}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Utilitaire de zoom TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {64212898-097F-4F3F-AECA-6D34A7EF82DF}

O42 - Logiciel: Veetle TV - (.Veetle, Inc.) [HKLM] -- Veetle TV

O42 - Logiciel: Vidéo Email v2.0 pour Outlook Express - (.Talkway Communications.) [HKLM] -- Vidéo Email v2.0 pour Outlook Express

O42 - Logiciel: Virtual Skipper 4 1.5.4 - (.Nadeo.) [HKLM] -- Vsk4_is1

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage v1.3.0254.0 - (.Microsoft.) [HKLM] -- {63569CE9-FA00-469C-AF5C-E5D4D93ACF91}

O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {F59A9E08-A6A4-4ACF-91F2-D0344956C30B}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\2LMultimedia]

[HKCU\Software\3rd Eye Solutions]

[HKCU\Software\Adobe]

[HKCU\Software\Analog Devices]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\BackWeb]

[HKCU\Software\CDDB]

[HKCU\Software\CISRA]

[HKCU\Software\Canal+ Active]

[HKCU\Software\Canon]

[HKCU\Software\Classes]

[HKCU\Software\Clubinternet_FR]

[HKCU\Software\F-Secure]

[HKCU\Software\Google]

[HKCU\Software\HP]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\IM Providers]

[HKCU\Software\Intel]

[HKCU\Software\InterVideo]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lake]

[HKCU\Software\Leadertech]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\LogiShrd]

[HKCU\Software\Logitech]

[HKCU\Software\Macromedia]

[HKCU\Software\Motive]

[HKCU\Software\Nadeo]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\ORL]

[HKCU\Software\PIXELA]

[HKCU\Software\Policies]

[HKCU\Software\Samsung]

[HKCU\Software\Skype]

[HKCU\Software\Sonic]

[HKCU\Software\Sony Corporation]

[HKCU\Software\Symantec]

[HKCU\Software\Synaptics]

[HKCU\Software\Sysinternals]

[HKCU\Software\TOSHIBA]

[HKCU\Software\Talkway Communications]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\Veetle]

[HKCU\Software\keyhole.com]

[HKLM\Software\ATI Technologies Inc.]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\AdwCleaner]

[HKLM\Software\Agere]

[HKLM\Software\Analog Devices]

[HKLM\Software\Andrea Electronics]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\BrowserChoice]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CISRA]

[HKLM\Software\Canal+ Active]

[HKLM\Software\Canon]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Clubinternet_FR]

[HKLM\Software\Data Fellows]

[HKLM\Software\GEAR Software]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\HP]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\ICE]

[HKLM\Software\INTEL]

[HKLM\Software\InstallShield]

[HKLM\Software\InstalledOptions]

[HKLM\Software\InterVideo]

[HKLM\Software\JavaSoft]

[HKLM\Software\LEAD Technologies, Inc.]

[HKLM\Software\Lake]

[HKLM\Software\LogiShrd]

[HKLM\Software\Logitech]

[HKLM\Software\Lucent]

[HKLM\Software\Macromedia]

[HKLM\Software\MarkAny]

[HKLM\Software\McAfee.com]

[HKLM\Software\Motive]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\Nadeo]

[HKLM\Software\ODBC]

[HKLM\Software\OldTimer Tools]

[HKLM\Software\Orange]

[HKLM\Software\PIXELA]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Samsung]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secure]

[HKLM\Software\Skype]

[HKLM\Software\SoftShape]

[HKLM\Software\Sonic]

[HKLM\Software\Staccato]

[HKLM\Software\Symantec]

[HKLM\Software\Synaptics]

[HKLM\Software\TENCENT]

[HKLM\Software\TOSHIBA]

[HKLM\Software\Talkway Communications]

[HKLM\Software\The Silicon Realms Toolworks]

[HKLM\Software\Unisys Corporation]

[HKLM\Software\Veetle]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\optimidata]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 09/06/2009 - 19:58:06 - [250212084] ----D- C:\Program Files\Adobe

O43 - CFD: 16/06/2005 - 09:30:08 - [4280286] ----D- C:\Program Files\Analog Devices

O43 - CFD: 06/05/2010 - 14:17:52 - [2306366] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 16/06/2005 - 09:26:46 - [942080] ----D- C:\Program Files\ATI Technologies

O43 - CFD: 18/05/2011 - 22:35:20 - [620967] ----D- C:\Program Files\Bonjour

O43 - CFD: 29/08/2006 - 23:29:58 - [183467693] ----D- C:\Program Files\Canon

O43 - CFD: 25/11/2009 - 02:12:26 - [34842362] ----D- C:\Program Files\Club-Internet

O43 - CFD: 09/06/2009 - 20:03:30 - [14203156] ----D- C:\Program Files\Common Files

O43 - CFD: 14/10/2011 - 17:51:48 - [448105995] ----D- C:\Program Files\F-Secure

O43 - CFD: 03/10/2011 - 21:15:12 - [534595258] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 15/06/2011 - 23:11:26 - [108570265] ----D- C:\Program Files\Google

O43 - CFD: 08/10/2005 - 18:58:38 - [4141261] ----D- C:\Program Files\Hewlett-Packard

O43 - CFD: 08/10/2005 - 19:01:54 - [273430847] ----D- C:\Program Files\HP

O43 - CFD: 19/01/2011 - 02:14:50 - [67121494] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 25/01/2005 - 11:49:12 - [47394] ----D- C:\Program Files\Intel

O43 - CFD: 14/10/2011 - 12:46:38 - [5967432] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 25/01/2005 - 14:13:08 - [34147203] ----D- C:\Program Files\InterVideo

O43 - CFD: 18/05/2011 - 22:41:48 - [1856627] ----D- C:\Program Files\iPod

O43 - CFD: 18/05/2011 - 22:42:58 - [128197016] ----D- C:\Program Files\iTunes

O43 - CFD: 24/01/2005 - 13:55:54 - [72349676] ----D- C:\Program Files\Java

O43 - CFD: 01/11/2010 - 23:22:06 - [10588296] ----D- C:\Program Files\Lecteur CANALPLAY

O43 - CFD: 23/06/2010 - 19:55:20 - [62529425] ----D- C:\Program Files\Logitech

O43 - CFD: 25/01/2005 - 12:09:38 - [358606] ----D- C:\Program Files\ltmoh

O43 - CFD: 19/01/2011 - 02:15:42 - [2565408] ----D- C:\Program Files\MarkAny

O43 - CFD: 09/06/2009 - 19:59:10 - [0] ----D- C:\Program Files\Mes Jeux Installés

O43 - CFD: 23/10/2008 - 23:22:30 - [2152579] ----D- C:\Program Files\Messenger

O43 - CFD: 10/09/2010 - 19:47:16 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 11/09/2010 - 17:33:22 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 24/01/2005 - 13:44:10 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 13/07/2011 - 15:23:48 - [346734596] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 16/06/2005 - 10:31:32 - [149660739] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 25/01/2005 - 14:46:06 - [315392] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 09/06/2009 - 20:03:10 - [1313712] ----D- C:\Program Files\Motive

O43 - CFD: 24/08/2010 - 00:52:58 - [10374874] ----D- C:\Program Files\Movie Maker

O43 - CFD: 16/01/2011 - 02:13:12 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 20/09/2010 - 00:26:04 - [39944647] ----D- C:\Program Files\MSECache

O43 - CFD: 28/09/2007 - 18:22:40 - [21471559] ----D- C:\Program Files\MSN

O43 - CFD: 24/01/2005 - 13:39:40 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 19/02/2006 - 01:00:00 - [39002890] ----D- C:\Program Files\MSN Toolbar Suite

O43 - CFD: 25/11/2009 - 03:06:14 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/10/2008 - 23:14:52 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 24/01/2005 - 13:39:50 - [1804] ----D- C:\Program Files\Online Services

O43 - CFD: 15/11/2010 - 00:35:26 - [1196032] ----D- C:\Program Files\Orange

O43 - CFD: 16/12/2010 - 01:35:48 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 05/05/2007 - 17:44:02 - [167458386] ----D- C:\Program Files\PIXELA

O43 - CFD: 09/12/2010 - 00:08:14 - [76322555] ----D- C:\Program Files\QuickTime

O43 - CFD: 16/01/2011 - 02:12:52 - [36400897] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 19/01/2011 - 02:17:18 - [212433368] ----D- C:\Program Files\Samsung

O43 - CFD: 24/01/2005 - 13:42:08 - [1025] ----D- C:\Program Files\Services en ligne

O43 - CFD: 02/06/2010 - 23:28:54 - [38378187] R---D- C:\Program Files\Skype

O43 - CFD: 25/01/2005 - 14:25:34 - [34267015] ----D- C:\Program Files\Sonic

O43 - CFD: 25/01/2005 - 12:02:14 - [26408331] ----D- C:\Program Files\Synaptics

O43 - CFD: 21/10/2005 - 19:40:06 - [317279] ----D- C:\Program Files\Talkway

O43 - CFD: 31/07/2007 - 17:09:40 - [82283486] ----D- C:\Program Files\TOSHIBA

O43 - CFD: 11/12/2005 - 00:33:42 - [740372848] ----D- C:\Program Files\Virtual Skipper 4

O43 - CFD: 13/10/2011 - 19:51:44 - [81920207] ----D- C:\Program Files\Windows Live

O43 - CFD: 10/09/2010 - 19:46:52 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 13/05/2007 - 15:57:08 - [3581070] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 03/09/2009 - 01:05:42 - [9338616] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 23/10/2008 - 23:14:42 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 24/01/2005 - 13:44:10 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 14/10/2011 - 19:09:44 - [5499575] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 09/06/2009 - 20:04:12 - [14203156] ----D- C:\Program Files\Common Files\Motive

O43 - CFD: 26/02/2009 - 00:20:42 - [4622484] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 18/05/2011 - 22:41:44 - [91751120] ----D- C:\Program Files\Fichiers Communs\Apple

O43 - CFD: 10/01/2006 - 18:48:52 - [86016] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 08/10/2005 - 18:57:38 - [284535] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard

O43 - CFD: 08/10/2005 - 19:00:46 - [3924422] ----D- C:\Program Files\Fichiers Communs\HP

O43 - CFD: 25/01/2005 - 12:03:44 - [21162565] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 24/01/2005 - 13:55:52 - [26602893] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 23/06/2010 - 19:54:20 - [80598029] ----D- C:\Program Files\Fichiers Communs\LogiShrd

O43 - CFD: 20/09/2010 - 00:26:30 - [222390114] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 09/06/2009 - 20:03:44 - [0] ----D- C:\Program Files\Fichiers Communs\Motive

O43 - CFD: 24/01/2005 - 13:41:24 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 11/09/2010 - 17:26:48 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 14/01/2011 - 23:56:34 - [2267] ----D- C:\Program Files\Fichiers Communs\Samsung

O43 - CFD: 24/01/2005 - 13:41:28 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 02/06/2010 - 23:28:42 - [2135336] ----D- C:\Program Files\Fichiers Communs\Skype

O43 - CFD: 24/01/2005 - 14:33:22 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 10/01/2006 - 17:56:18 - [3918036] ----D- C:\Program Files\Fichiers Communs\Symantec Shared

O43 - CFD: 23/10/2008 - 23:14:38 - [20167943] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 21/10/2005 - 19:40:08 - [61440] ----D- C:\Program Files\Fichiers Communs\Talkway

O43 - CFD: 10/09/2010 - 19:25:14 - [52808563] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 11/02/2008 - 22:25:00 - [50879225] ----D- C:\Documents and Settings\Nicolas\Application Data\Adobe

O43 - CFD: 05/06/2008 - 16:51:42 - [82] ----D- C:\Documents and Settings\Nicolas\Application Data\AdobeUM

O43 - CFD: 10/01/2011 - 01:46:20 - [289177] ----D- C:\Documents and Settings\Nicolas\Application Data\Apple Computer

O43 - CFD: 18/04/2006 - 23:39:44 - [54088] ----D- C:\Documents and Settings\Nicolas\Application Data\F-Secure

O43 - CFD: 16/09/2006 - 16:48:30 - [109695] ----D- C:\Documents and Settings\Nicolas\Application Data\Google

O43 - CFD: 01/09/2008 - 00:16:18 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\Help

O43 - CFD: 24/01/2005 - 14:27:44 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\Identities

O43 - CFD: 07/10/2005 - 18:20:08 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\InterVideo

O43 - CFD: 23/06/2010 - 19:55:02 - [466] ----D- C:\Documents and Settings\Nicolas\Application Data\Leadertech

O43 - CFD: 21/10/2005 - 19:40:52 - [3056768] ----D- C:\Documents and Settings\Nicolas\Application Data\Macromedia

O43 - CFD: 31/07/2011 - 03:44:24 - [11091009] ----D- C:\Documents and Settings\Nicolas\Application Data\mediamove for Lexar Media

O43 - CFD: 20/09/2010 - 00:28:14 - [7589091] -S--D- C:\Documents and Settings\Nicolas\Application Data\Microsoft

O43 - CFD: 19/02/2006 - 01:08:06 - [58] ----D- C:\Documents and Settings\Nicolas\Application Data\MSN Search Toolbar

O43 - CFD: 05/05/2007 - 19:55:32 - [2144] ----D- C:\Documents and Settings\Nicolas\Application Data\Pixela

O43 - CFD: 19/01/2011 - 02:10:40 - [6405444] ----D- C:\Documents and Settings\Nicolas\Application Data\Samsung

O43 - CFD: 12/04/2011 - 00:25:10 - [9522226] ----D- C:\Documents and Settings\Nicolas\Application Data\Skype

O43 - CFD: 11/04/2011 - 22:41:32 - [19576] ----D- C:\Documents and Settings\Nicolas\Application Data\skypePM

O43 - CFD: 25/01/2005 - 14:18:24 - [65184] ----D- C:\Documents and Settings\Nicolas\Application Data\Sonic

O43 - CFD: 04/11/2005 - 15:07:38 - [1500] ----D- C:\Documents and Settings\Nicolas\Application Data\Sun

O43 - CFD: 07/10/2005 - 18:12:16 - [14615] ----D- C:\Documents and Settings\Nicolas\Application Data\Symantec

O43 - CFD: 09/10/2005 - 19:28:36 - [8704] ----D- C:\Documents and Settings\Nicolas\Application Data\Template

O43 - CFD: 25/01/2005 - 13:24:10 - [320] ----D- C:\Documents and Settings\Nicolas\Application Data\toshiba

O43 - CFD: 26/02/2009 - 00:23:06 - [47809811] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Adobe

O43 - CFD: 28/03/2010 - 21:08:00 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Apple

O43 - CFD: 19/05/2006 - 18:33:02 - [3516051] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Apple Computer

O43 - CFD: 14/10/2011 - 13:34:16 - [42318] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 29/09/2010 - 19:19:38 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Club Internet

O43 - CFD: 19/01/2011 - 02:01:06 - [89597830] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Downloaded Installations

O43 - CFD: 04/05/2011 - 23:03:02 - [943867903] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Google

O43 - CFD: 01/09/2008 - 00:16:18 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Help

O43 - CFD: 08/10/2005 - 19:14:00 - [14613228] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\HP

O43 - CFD: 08/10/2005 - 16:17:02 - [303396] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Identities

O43 - CFD: 08/10/2005 - 19:23:54 - [830] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\IsolatedStorage

O43 - CFD: 23/06/2010 - 19:55:48 - [1863517] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\LogiShrd

O43 - CFD: 10/09/2010 - 19:56:12 - [171579750] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Microsoft

O43 - CFD: 15/08/2011 - 21:13:26 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\PCHealth

O43 - CFD: 19/01/2011 - 02:19:50 - [12324] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Samsung

O43 - CFD: 04/05/2011 - 22:58:16 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Temp

O43 - CFD: 24/01/2005 - 13:55:46 - [10387968] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150000}

~ Scan Program Folder in 00mn 01s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.DB30E13F06948688C974D7F61D20704C] - 14/10/2011 - 18:04:48 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.1B2C67F712727B2270FE3BCF092D1F9D] - 14/10/2011 - 17:08:44 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1249725]

O44 - LFC:[MD5.ABD860037910495A52BC824E8BD9E7AE] - 14/10/2011 - 16:50:36 ---A- . (...) -- C:\WINDOWS\setupapi.log [263066]

O44 - LFC:[MD5.5BE8201C57727E74CEC2FC4CD70EEE97] - 14/10/2011 - 12:32:44 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [1158]

O44 - LFC:[MD5.BA4617FA57D9EAE7CE1EEC5108FC236D] - 14/10/2011 - 12:19:51 ---A- . (...) -- C:\WINDOWS\FSSTM.LOG [13615]

O44 - LFC:[MD5.52792E7EFAE11A16A231D586771987B4] - 14/10/2011 - 12:19:43 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.8632B705D9AF5569796DCAA95FB2418E] - 14/10/2011 - 12:19:41 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/10/2011 - 12:19:27 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 14/10/2011 - 12:19:19 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.54AE17CC5E4102BDF2F94295F535D34F] - 14/10/2011 - 12:19:09 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [240736]

O44 - LFC:[MD5.474FC52CB2A6BCC2F7C1D77740652B73] - 14/10/2011 - 12:18:07 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32486]

O44 - LFC:[MD5.6A66938865FCB26F507758423EB3BA3C] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\KB2564958.log [12188]

O44 - LFC:[MD5.88F934DDD13C6C13B959BBD2A27A11A5] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\comsetup.log [780438]

O44 - LFC:[MD5.FBD9CCEE4FE0231549703BBC6208C606] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\iis6.log [385614]

O44 - LFC:[MD5.37D44F868F2B6193CE5F592F341D9553] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\imsins.log [1393]

O44 - LFC:[MD5.B7A0F2071670882E09235BC32F38281F] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [473889]

O44 - LFC:[MD5.A5957A64C802BBA3BD8EC199B5231248] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\ocmsn.log [128813]

O44 - LFC:[MD5.D13517E37CA23FF05C1130E09F1BF7DC] - 14/10/2011 - 12:00:33 ---A- . (...) -- C:\WINDOWS\tsoc.log [931893]

O44 - LFC:[MD5.19FEAEC4604FBA0F936A8F5B602C3FE8] - 14/10/2011 - 12:00:32 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [2415335]

O44 - LFC:[MD5.9C4FBF46E97B9368D53B7AE7AC8FF3BC] - 14/10/2011 - 12:00:32 ---A- . (...) -- C:\WINDOWS\msgsocm.log [121175]

O44 - LFC:[MD5.AC7A4F9636B10C726CAE892893DC391D] - 14/10/2011 - 12:00:32 ---A- . (...) -- C:\WINDOWS\ocgen.log [1165777]

O44 - LFC:[MD5.3917FB753B48ACB045D5E19E89EF2208] - 14/10/2011 - 11:59:17 ---A- . (...) -- C:\WINDOWS\updspapi.log [389685]

O44 - LFC:[MD5.7C594CB2AC007950543F22D315AC0BD3] - 14/10/2011 - 11:58:36 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1109432]

O44 - LFC:[MD5.2A433A9636FA34A7C9C95DC2F342E322] - 14/10/2011 - 11:58:36 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [75942]

O44 - LFC:[MD5.E63638231FC895F95BD0810E99A308E4] - 14/10/2011 - 11:58:36 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [89546]

O44 - LFC:[MD5.305812D9202B9DD1207B00BEB943DFFC] - 14/10/2011 - 11:58:36 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [451950]

O44 - LFC:[MD5.FDD0F0089FC16F1B2AE8A46D43906F7A] - 14/10/2011 - 11:58:36 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [521324]

O44 - LFC:[MD5.564AF27774009664E230F23657EFBCF5] - 14/10/2011 - 11:50:41 ---A- . (...) -- C:\WINDOWS\KB2567053.log [18536]

O44 - LFC:[MD5.B7A7828D0F73BCDE1B18DA8BE0EB18EB] - 14/10/2011 - 11:50:41 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1393]

O44 - LFC:[MD5.3DD316568E1748D9A31D2DD0799B62CB] - 14/10/2011 - 11:49:21 ---A- . (...) -- C:\WINDOWS\KB2592799.log [12721]

O44 - LFC:[MD5.36E63682D5C09F64B948077FC6EC4711] - 14/10/2011 - 11:48:03 ---A- . (...) -- C:\WINDOWS\KB2586448-IE8.log [17218]

O44 - LFC:[MD5.56F07CD932B4500DFE8809155AFB11DB] - 02/10/2011 - 18:27:09 ---A- . (...) -- C:\AdwCleaner[s1].txt [1132]

O44 - LFC:[MD5.ED6F8ADBB6EC3ADBD906B40DEB47EB66] - 02/10/2011 - 18:24:42 ---A- . (...) -- C:\AdwCleaner[R1].txt [897]

O44 - LFC:[MD5.3ADB99529939136B1BD8B23056876A87] - 28/09/2011 - 21:10:07 ---A- . (...) -- C:\prefs.js [355]

~ Scan Files in 00mn 15s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.922D6ED0CEEB0620F0231D1689C4627A] - 14/10/2011 - 11:43:51 ---A- - C:\WINDOWS\Prefetch\NGEN.EXE-171CDCC6.pf

O45 - LFCP:[MD5.7D80D8F00C9F8E1F3D209FDC277F05C0] - 14/10/2011 - 12:21:20 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.7645ABE44D89FAE11FE0326C36FE8E1D] - 14/10/2011 - 12:22:18 ---A- - C:\WINDOWS\Prefetch\FSAV32.EXE-156522DB.pf

O45 - LFCP:[MD5.515B732402AA0BE4D795F29DADFDF720] - 14/10/2011 - 12:33:09 ---A- - C:\WINDOWS\Prefetch\MSN_SL.EXE-047411B3.pf

O45 - LFCP:[MD5.C9E6EAFDEC5988E22BFF0EEECDCE3895] - 14/10/2011 - 12:33:16 ---A- - C:\WINDOWS\Prefetch\SYNTPLPR.EXE-28BB9F3B.pf

O45 - LFCP:[MD5.2ABE070EEEE02220B0BE9479D9D7B166] - 14/10/2011 - 12:33:19 ---A- - C:\WINDOWS\Prefetch\TVSTRAY.EXE-157920F2.pf

O45 - LFCP:[MD5.49027DC95201D4E6D93E812933C648F8] - 14/10/2011 - 12:33:24 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:[MD5.30A29BAC37A482E2ED2A3C24FD8E74F0] - 14/10/2011 - 12:33:33 ---A- - C:\WINDOWS\Prefetch\CFXFER.EXE-20DC06E7.pf

O45 - LFCP:[MD5.1F43264584D83BD7431DD4324AD75E82] - 14/10/2011 - 12:33:48 ---A- - C:\WINDOWS\Prefetch\MPBTN.EXE-2FAB7DA0.pf

O45 - LFCP:[MD5.6AB8671A1128D835DA12486E2D88743A] - 14/10/2011 - 12:34:05 ---A- - C:\WINDOWS\Prefetch\COCIMANAGER.EXE-046DBC57.pf

O45 - LFCP:[MD5.18E8674B2A564254FC6E151AC2A62CD5] - 14/10/2011 - 12:34:05 ---A- - C:\WINDOWS\Prefetch\WINDOWSSEARCHINDEXER.EXE-158AA150.pf

O45 - LFCP:[MD5.142FCBFF820EA6AD5BCAE69BBA57F4D7] - 14/10/2011 - 12:34:20 ---A- - C:\WINDOWS\Prefetch\HPQGALRY.EXE-07140C25.pf

O45 - LFCP:[MD5.91915681D70EE9830CFEF08E7B4A5F22] - 14/10/2011 - 12:34:34 ---A- - C:\WINDOWS\Prefetch\IPODSERVICE.EXE-3192DE38.pf

O45 - LFCP:[MD5.51EB527A0A45F14FACF4E35F9DDC8336] - 14/10/2011 - 12:34:54 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf

O45 - LFCP:[MD5.DC76A6D22D398B50101A0E897D626F3C] - 14/10/2011 - 12:34:58 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf

O45 - LFCP:[MD5.22377E7E932A31606D6DE10A7D958674] - 14/10/2011 - 12:35:07 ---A- - C:\WINDOWS\Prefetch\DEVICEMANAGER.EXE-30082278.pf

O45 - LFCP:[MD5.F27E539B20C84EA158022A947CBDE8FF] - 14/10/2011 - 12:35:10 ---A- - C:\WINDOWS\Prefetch\CONNECTIONMANAGER.EXE-3A872C5F.pf

O45 - LFCP:[MD5.D428CB355AA428BD36DFC8B52860001A] - 14/10/2011 - 12:35:30 ---A- - C:\WINDOWS\Prefetch\PRESENTATIONFONTCACHE.EXE-1706C4D2.pf

O45 - LFCP:[MD5.8AB22C9D37515D79101DAB1EB9AD2F34] - 14/10/2011 - 12:35:39 ---A- - C:\WINDOWS\Prefetch\HPRBLOG.EXE-35C0D80C.pf

O45 - LFCP:[MD5.B18043142F1FE73034233405A07B0A33] - 14/10/2011 - 12:36:06 ---A- - C:\WINDOWS\Prefetch\LOGITECHUPDATE.EXE-09DF4673.pf

O45 - LFCP:[MD5.E4C1E2CDC5E95CD9E4714022CAD7FD15] - 14/10/2011 - 12:36:06 ---A- - C:\WINDOWS\Prefetch\LULNCHR.EXE-016ABA85.pf

O45 - LFCP:[MD5.F9ECAB60BD50C5577C60FAC2927EA137] - 14/10/2011 - 13:26:55 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.F40199C3264E64680B007044B76B3AA5] - 14/10/2011 - 14:27:15 ---A- - C:\WINDOWS\Prefetch\HPZIPM12.EXE-145E7369.pf

O45 - LFCP:[MD5.FE15F0AF7DDBB3946709EA795FD960FD] - 14/10/2011 - 14:27:26 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf

O45 - LFCP:[MD5.5520F6456AC44ED4FCC58CFCC2C6FD95] - 14/10/2011 - 16:50:28 ---A- - C:\WINDOWS\Prefetch\TNBUTIL.EXE-2EBD29F1.pf

O45 - LFCP:[MD5.91522D33739B18A11DE9C54A5ADAF772] - 14/10/2011 - 16:51:45 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATEONDEMAND.EXE-01BAF5F2.pf

O45 - LFCP:[MD5.99C07BF68830FDFC3537F20CB1E271B5] - 14/10/2011 - 16:51:54 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf

O45 - LFCP:[MD5.F616F76A1211554A001BF5641C68B7CA] - 14/10/2011 - 16:51:58 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARMANAGER_4E7D715D-0DE7EE04.pf

O45 - LFCP:[MD5.C7F70A24C63B8636FC69B8D96CD683DC] - 14/10/2011 - 17:00:35 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.F2BF593EA71AFDE419F0AEB7A7574D23] - 14/10/2011 - 17:00:59 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.A98ECA8762079E54DB7E9AF4DC4A88E9] - 14/10/2011 - 17:18:04 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf

O45 - LFCP:[MD5.F982B5B248EF10200990BD6782E56650] - 14/10/2011 - 17:29:18 ---A- - C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf

O45 - LFCP:[MD5.4551E7F97FE7832DF188B3E3ED9BC858] - 14/10/2011 - 17:33:32 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2[1].EXE-2DE48044.pf

O45 - LFCP:[MD5.B7D3CE07A16EE06F615C9EC7B01E7A59] - 14/10/2011 - 17:33:37 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2[1].TMP-2BFBA877.pf

O45 - LFCP:[MD5.72C6FC98831337F5BE9741BE9FCCA826] - 14/10/2011 - 17:48:21 ---A- - C:\WINDOWS\Prefetch\SSFLWBOX.SCR-12F43B2F.pf

O45 - LFCP:[MD5.198CB7C473CF98D0C76F1929337D53C0] - 14/10/2011 - 17:48:29 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.5285585BA08071A72B3DD1989FCC9E66] - 14/10/2011 - 17:52:37 ---A- - C:\WINDOWS\Prefetch\LADS.EXE-06335087.pf

O45 - LFCP:[MD5.27BFE53B773E3103DFB8BF0A64661354] - 14/10/2011 - 17:52:49 ---A- - C:\WINDOWS\Prefetch\SETACL.EXE-33B348AC.pf

O45 - LFCP:[MD5.494E5B487BC790A8588A1D6187D4F5D5] - 14/10/2011 - 17:52:49 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-17974576.pf

O45 - LFCP:[MD5.23DE4DE7AB0529E48CF7D24ADA3D6880] - 14/10/2011 - 17:57:11 ---A- - C:\WINDOWS\Prefetch\SIGCHECK.EXE-306CABDB.pf

O45 - LFCP:[MD5.B744B90DDA93497229D2B70D10A92A13] - 14/10/2011 - 18:00:05 ---A- - C:\WINDOWS\Prefetch\NSLOOKUP.EXE-160B1221.pf

O45 - LFCP:[MD5.794D1C90A9894FC97C43688F37E29B67] - 14/10/2011 - 18:04:46 ---A- - C:\WINDOWS\Prefetch\MBR.EXE-313604BE.pf

O45 - LFCP:[MD5.0534811E868BC7086678501AAF7863CC] - 14/10/2011 - 18:04:48 ---A- - C:\WINDOWS\Prefetch\MBRCHECK.EXE-2B10ECF1.pf

O45 - LFCP:[MD5.91B3A52CC320EBBA371B5766881F045C] - 14/10/2011 - 18:05:43 ---A- - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf

O45 - LFCP:[MD5.9AB29CAA47D77CFCAE8A425FCDCC2007] - 14/10/2011 - 18:08:09 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf

O45 - LFCP:[MD5.7ABBC8678EC1A5B7A374ADC50F437B11] - 14/10/2011 - 18:08:16 ---A- - C:\WINDOWS\Prefetch\SKYPENAMES2.EXE-2F29C6AC.pf

O45 - LFCP:[MD5.8C34AECA1C0FEA043524425BBE708BC9] - 14/10/2011 - 18:08:26 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4929CF69.pf

O45 - LFCP:[MD5.310B2105D71734127F0AB753D1FA6A91] - 14/10/2011 - 18:08:58 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:[MD5.C0F38953427E0F8E27C662971B925011] - 14/10/2011 - 18:09:32 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:[MD5.4E24085DC34D6F404B50618B23A8DEEB] - 14/10/2011 - 18:09:32 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf

O45 - LFCP:[MD5.F044BBF77933896503D12DFACF227DBD] - 14/10/2011 - 18:09:48 ---A- - C:\WINDOWS\Prefetch\WINDOWSSEARCHFILTER.EXE-0C0DB978.pf

~ Scan Prefetcher in 00mn 01s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe" [Enabled] .(.TOSHIBA CORPORATION - ConfigFree SUMMIT Engine.) -- C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Logitech\Logitech Vid\Vid.exe" [Enabled] .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\WINDOWS\system32\muzapp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Veetle\Player\VeetleNet.exe" [Enabled] .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe (.not file.)

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Veetle\Player\VeetleNet.exe" [Enabled] .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\system32\lvcodec2.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.LEAD"="LCODCCMP.DLL" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.F13D8E7E1FAA31019C25EB17B5FB2662] - 14/10/2011 - 07:29:50 ---A- . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys [129280]

O58 - SDL:[MD5.B06D36C988152B4C8DEA71235F6D1011] - 14/10/2011 - 22:37:50 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [1270572]

O58 - SDL:[MD5.37E1A3630872B3CCAA45E2468F437DF0] - 14/10/2011 - 00:45:36 ---A- . (.Atheros Communications, Inc. - Driver for Atheros AR5001 Wireless Network Adapter.) -- C:\WINDOWS\system32\drivers\ar5211.sys [393600]

O58 - SDL:[MD5.2FBDFEC8CD60CEC3D55E615865333033] - 14/10/2011 - 22:00:58 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [1034752]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 14/10/2011 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 14/10/2011 - 12:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.6BD1BE810AEF19DBA8BAC4819D7FDF9C] - 14/10/2011 - 16:10:54 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\WINDOWS\system32\drivers\dgderdrv.sys [18120]

O58 - SDL:[MD5.F41619AE216B51D68DDA163805EEFAA9] - 14/10/2011 - 03:21:00 ---A- . (.Sonic Solutions - Device Driver.) -- C:\WINDOWS\system32\drivers\drvmcdb.sys [87168]

O58 - SDL:[MD5.B295700E684ED1984DB1D6BE40354421] - 14/10/2011 - 02:56:00 ---A- . (.Sonic Solutions - Device Driver Manager.) -- C:\WINDOWS\system32\drivers\drvnddm.sys [40448]

O58 - SDL:[MD5.343786E182B9C9AE3066E00DEC650F50] - 14/10/2011 - 20:26:14 ---A- . (...) -- C:\WINDOWS\system32\drivers\fsbts.sys [42672]

O58 - SDL:[MD5.5636F999A6C2568C4BCB3DF150DCF0A7] - 14/10/2011 - 11:18:38 ---A- . (.F-Secure Corporation - F-Secure Internet Shield Driver.) -- C:\WINDOWS\system32\drivers\fsdfw.sys [79872]

O58 - SDL:[MD5.C52E8C821E326CDA4FA0D1654E10C154] - 14/10/2011 - 11:01:38 ---A- . (.F-Secure Corporation - F-Secure Network Interceptor.) -- C:\WINDOWS\system32\drivers\fsndis5.sys [33584]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 14/10/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.9F1D80908658EB7F1BF70809E0B51470] - 14/10/2011 - 20:06:28 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZid412.sys [51120]

O58 - SDL:[MD5.F7E3E9D50F9CD3DE28085A8FDAA0A1C3] - 14/10/2011 - 20:06:28 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys [16496]

O58 - SDL:[MD5.CF1B7951B4EC8D13F3C93B74BB2B461B] - 14/10/2011 - 20:06:28 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys [21744]

O58 - SDL:[MD5.C57C48FB9AE3EFB9848AF594E3123A63] - 14/10/2011 - 15:00:12 ---A- . (...) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys [25624]

O58 - SDL:[MD5.87ECCE893D8AEC5A9337B917742D339C] - 14/10/2011 - 00:01:36 R--A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\WINDOWS\system32\drivers\lvrs.sys [265496]

O58 - SDL:[MD5.291F69B3DDA0F033D2490C5BA5179F7C] - 14/10/2011 - 00:03:08 R--A- . (.Logitech Inc. - Logitech USB Video Class Driver.) -- C:\WINDOWS\system32\drivers\lvuvc.sys [6754712]

O58 - SDL:[MD5.A75DDC492D2D1D6558AD8003A4ADB73A] - 14/10/2011 - 00:03:30 R--A- . (.Logitech Inc. - Logitech USB Video Class Filter Driver.) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys [23832]

O58 - SDL:[MD5.7420B0C35BE9D7E9651CEB1456948C87] - 14/10/2011 - 14:28:02 ---A- . (.Toshiba Corporation - Toshiba Notebook PC SMI Driver.) -- C:\WINDOWS\system32\drivers\NBSMI.sys [4352]

O58 - SDL:[MD5.1265EB253ED4EBE4ACB3BD5F548FF796] - 14/10/2011 - 22:35:00 ---A- . (.TOSHIBA Corporation. - Network Device Usermode I/O protocol.) -- C:\WINDOWS\system32\drivers\Netdevio.sys [12032]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 14/10/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 14/10/2011 - 12:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.9AD4D2414B18900A192D47C417B01A13] - 14/10/2011 - 02:03:00 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys [20576]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 14/10/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 14/10/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 14/10/2011 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 14/10/2011 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\drivers\sfdrv01.sys [50688]

O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 14/10/2011 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\drivers\sfhlp02.sys [6656]

O58 - SDL:[MD5.EFEBBC1D13FDB77A6AF4EDDFC7232EDF] - 14/10/2011 - 15:06:28 ---A- . (.Protection Technology - StarForce Protection Synchronization Driver.) -- C:\WINDOWS\system32\drivers\sfsync02.sys [19968]

O58 - SDL:[MD5.9EF50060CC7E6953BAB83F2A42CCC421] - 14/10/2011 - 18:01:51 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\WINDOWS\system32\drivers\sfvfs02.sys [66048]

O58 - SDL:[MD5.A8EB0AA07632A4C936FF6F8EDA5BDEAD] - 14/10/2011 - 11:19:58 ---A- . (.SMSC - SMSC IrCC NDIS 5.0 IrDA FIR Device Driver.) -- C:\WINDOWS\system32\drivers\smcirda.sys [46080]

O58 - SDL:[MD5.014AB093E6452EA88031BB6E22919BB5] - 14/10/2011 - 11:17:46 ---A- . (.Analog Devices, Inc. - SoundMAX Integrated Digital Audio.) -- C:\WINDOWS\system32\drivers\smwdm.sys [259648]

O58 - SDL:[MD5.D7968049BE0ADBB6A57CEE3960320911] - 14/10/2011 - 11:29:04 ---A- . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\system32\drivers\sscdbhk5.sys [5627]

O58 - SDL:[MD5.B2063CE662AF3AB20045121A5B716DF6] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG USB Composite Device V2 Driver.) -- C:\WINDOWS\system32\drivers\sscebus.sys [98560]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecm.sys [12416]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecmnt.sys [12416]

O58 - SDL:[MD5.66799DC0AFE3DCAF8368CAE17394A762] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 Filter Driver.) -- C:\WINDOWS\system32\drivers\sscemdfl.sys [14848]

O58 - SDL:[MD5.CBF03FFC08F8DB547BAB2F79AA663D16] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 WDM.) -- C:\WINDOWS\system32\drivers\sscemdm.sys [123648]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewh.sys [12288]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 14/10/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewhnt.sys [12288]

O58 - SDL:[MD5.C3FFD65ABFB6441E7606CF74F1155273] - 14/10/2011 - 11:28:50 ---A- . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\system32\drivers\ssrtln.sys [23545]

O58 - SDL:[MD5.F6770219B73BD989D5613D2E9C78A227] - 14/10/2011 - 23:14:04 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [185728]

O58 - SDL:[MD5.244CFBFFDEFB77F3DF571A8CD108FC06] - 14/10/2011 - 10:12:36 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\WINDOWS\system32\drivers\tifm21.sys [162560]

O58 - SDL:[MD5.78E9819E076B909541BD4A37F8F0668B] - 14/10/2011 - 05:51:58 ---A- . (.TOSHIBA Corporation - TOSHIBA SD Bluetooth Card #2 Driver.) -- C:\WINDOWS\system32\drivers\tosbtsd2.sys [21120]

O58 - SDL:[MD5.142B91503C45C1A05A355414E13A51D1] - 14/10/2011 - 00:27:28 ---A- . (.TOSHIBA Corporation - SD Bluetooth Transport Driver.) -- C:\WINDOWS\system32\drivers\tosdbt.sys [48640]

O58 - SDL:[MD5.62C57E7411B5F20980E70530CA69D5A7] - 14/10/2011 - 21:55:48 ---A- . (.TOSHIBA Corporation. - Toshiba Bluetooth HID mini port driver.) -- C:\WINDOWS\system32\drivers\Toshidpt.sys [2851]

O58 - SDL:[MD5.F3DB7683C34FCF389976DDF34AC6C718] - 14/10/2011 - 23:13:04 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth Port Emulation Driver.) -- C:\WINDOWS\system32\drivers\Tosporte.sys [49070]

O58 - SDL:[MD5.E53CB56E8CE6D5F74A8479FAF4FF8961] - 14/10/2011 - 06:18:32 ---A- . (.TOSHIBA CORPORATION - Bluetooth RF Bus Driver.) -- C:\WINDOWS\system32\drivers\TosRfbd.sys [96896]

O58 - SDL:[MD5.FE200EECE7521061CDAD658C6EE4F341] - 14/10/2011 - 01:07:32 ---A- . (.TOSHIBA Corporation - Bluetooth RFBNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys [36531]

O58 - SDL:[MD5.8EF8069EC1FDE5D924CBD9348F4787F8] - 14/10/2011 - 20:02:48 ---A- . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\system32\drivers\tosrfcom.sys [62959]

O58 - SDL:[MD5.CC42FDBE9760CA1639E23158AB995F98] - 14/10/2011 - 23:18:24 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\system32\drivers\Tosrfec.sys [8573]

O58 - SDL:[MD5.66E443CE97A3270C977EA21ABBE8E42D] - 14/10/2011 - 04:01:30 ---A- . (.TOSHIBA Corporation. - Bluetooth HID Driver from TOSHIBA.) -- C:\WINDOWS\system32\drivers\TosRfhid.sys [49536]

O58 - SDL:[MD5.AE5B75C86574A1BD0A093A9159F829F9] - 14/10/2011 - 00:24:20 ---A- . (.TOSHIBA Corporation. - Bluetooth LAN Emulation Driver.) -- C:\WINDOWS\system32\drivers\tosrflan.sys [25420]

O58 - SDL:[MD5.6C3B5204EA0CD610C847A6834913BC4E] - 14/10/2011 - 22:35:08 ---A- . (.TOSHIBA Corporation. - Bluetooth BNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfnds.sys [18308]

O58 - SDL:[MD5.87031831486F7ED4EAFEF27125BB56C8] - 14/10/2011 - 05:53:22 ---A- . (.TOSHIBA Corporation - Bluetooth TOSHIBA PC-Card Driver.) -- C:\WINDOWS\system32\drivers\TosRFPCC.sys [160672]

O58 - SDL:[MD5.12DC9BFBC63E9E60D68CCB1E966E6AEF] - 14/10/2011 - 17:42:34 ---A- . (.TOSHIBA Corporation - Bluetooth Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\TosRfSnd.sys [50176]

O58 - SDL:[MD5.9E8FC547B882B68006D935589110CFE0] - 14/10/2011 - 02:05:24 ---A- . (.TOSHIBA CORPORATION - Bluetooth USB Miniport Driver.) -- C:\WINDOWS\system32\drivers\tosrfusb.sys [35840]

O58 - SDL:[MD5.306E19413EADB0CA8842D5381A0354FC] - 14/10/2011 - 20:52:28 ---A- . (.TOSHIBA Corporation - Toshiba SD-IO Transport Driver.) -- C:\WINDOWS\system32\drivers\tostrans.sys [16320]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 14/10/2011 - 12:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.342574B9CE3ADEE78CB5D7D67C0B911E] - 14/10/2011 - 14:26:34 ---A- . (.Pas de propriétaire - SRS Labs TruSurround XT kernel DLL.) -- C:\WINDOWS\system32\drivers\TSXT_kern_i386.sys [29184]

O58 - SDL:[MD5.2FA539E0701CBAB260A055749D245620] - 14/10/2011 - 13:04:38 ---A- . (.TOSHIBA Corporation - TOSHIBA Audio Filter Driver.) -- C:\WINDOWS\system32\drivers\Tvs.sys [29056]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 14/10/2011 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.C89DA341FCC883A3D79DC11727484FC2] - 14/10/2011 - 02:48:10 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\WINDOWS\system32\drivers\w29n51.sys [3222784]

O58 - SDL:[MD5.97EB24F1A5C3E78A61158B2531D61BA4] - 14/10/2011 - 09:16:10 ---A- . (.Pas de propriétaire - SRS Labs WOW XT kernel DLL.) -- C:\WINDOWS\system32\drivers\WOWXT_kern_i386.sys [28032]

O58 - SDL:[MD5.BAC4E920C920168C302C90C0F37740F6] - 14/10/2011 - 15:29:00 ---A- . (.Marvell - NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller.) -- C:\WINDOWS\system32\drivers\yk51x86.sys [224000]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.10398B515653442A5B89FDF6A1D06180] - 14/10/2011 - 22:23:40 ---A- . (...) -- C:\WINDOWS\system32\FsUsbExDisk.Sys [42112]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 14/10/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.D74375BE63DCA31E6145248E4278893E] - 14/10/2011 - 09:54:14 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis4.sys [16848]

O58 - SDL:[MD5.FC6BAFC20114160A6291C1C45545F137] - 14/10/2011 - 09:54:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis5.sys [17162]

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 14/10/2011 - 11:58:37 ---A- C:\Documents And Settings\Default User\Cookies\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 11:58:37 ---A- C:\Documents And Settings\Default User\Local Settings\Historique\History.IE5\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 12:17:16 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf [786]

O61 - LFC:Last File Created 14/10/2011 - 12:18:10 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\local.orspheap [262164]

O61 - LFC:Last File Created 14/10/2011 - 12:19:30 ---A- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 12:19:30 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 12:19:36 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 12:19:36 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 12:20:01 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0000.idx [256]

O61 - LFC:Last File Created 14/10/2011 - 12:20:01 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0001.idx [256]

O61 - LFC:Last File Created 14/10/2011 - 12:20:01 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0002.idx [256]

O61 - LFC:Last File Created 14/10/2011 - 12:20:01 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0003.idx [256]

O61 - LFC:Last File Created 14/10/2011 - 12:20:01 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0004.idx [256]

O61 - LFC:Last File Created 14/10/2011 - 12:29:32 --HA- C:\Documents And Settings\Invité\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 14/10/2011 - 12:32:33 -SHA- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Credentials\S-1-5-21-680403475-1107398295-2291755242-1006\Credentials [516]

O61 - LFC:Last File Created 14/10/2011 - 12:33:45 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\en-us\strings.en-us.xml [0]

O61 - LFC:Last File Created 14/10/2011 - 12:33:45 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\resource.h [0]

O61 - LFC:Last File Created 14/10/2011 - 12:33:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\config.xml [0]

O61 - LFC:Last File Created 14/10/2011 - 12:33:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\fr-fr\strings.fr-fr.xml [0]

O61 - LFC:Last File Created 14/10/2011 - 12:33:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\manifest.xml [5232]

O61 - LFC:Last File Created 14/10/2011 - 12:34:10 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse [0]

O61 - LFC:Last File Created 14/10/2011 - 12:34:24 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\handle.dat [178]

O61 - LFC:Last File Created 14/10/2011 - 12:34:46 ---A- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 12:34:46 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 12:34:46 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 14/10/2011 - 12:35:26 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt [0]

O61 - LFC:Last File Created 14/10/2011 - 12:36:47 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Properties\MSS.chk [8192]

O61 - LFC:Last File Created 14/10/2011 - 12:37:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.860.Crwl [880]

O61 - LFC:Last File Created 14/10/2011 - 12:37:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.860.gthr [1012]

O61 - LFC:Last File Created 14/10/2011 - 12:37:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr [1114112]

O61 - LFC:Last File Created 14/10/2011 - 12:37:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4A [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h0 [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h1 [196608]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4B [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr [1114112]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.Dir [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.idx [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h0 [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h0.Dir [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h1 [196608]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4A [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4A.Dir [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4B [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4B.Dir [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010003.ci [544768]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010003.dir [4144]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.chk2.gthr [4096]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\Indexer\DocId.Map [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h1.Dir [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h3 [65536]

O61 - LFC:Last File Created 14/10/2011 - 12:37:21 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Idm.gthr [4096]

O61 - LFC:Last File Created 14/10/2011 - 12:38:22 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar Cache\7.1.2003.1856\fr\translate_languages.json.content [1481]

O61 - LFC:Last File Created 14/10/2011 - 16:51:33 ---A- C:\Documents And Settings\Nicolas\Cookies\3YEQ049M.txt [129]

O61 - LFC:Last File Created 14/10/2011 - 16:51:35 ---A- C:\Documents And Settings\Nicolas\Cookies\DRG6IH5W.txt [351]

O61 - LFC:Last File Created 14/10/2011 - 16:53:13 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F [533]

O61 - LFC:Last File Created 14/10/2011 - 16:53:13 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F [100]

O61 - LFC:Last File Created 14/10/2011 - 16:53:14 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 [26011]

O61 - LFC:Last File Created 14/10/2011 - 16:53:14 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 [124]

O61 - LFC:Last File Created 14/10/2011 - 17:29:11 ---A- C:\Documents And Settings\Nicolas\Cookies\H1VER823.txt [64]

O61 - LFC:Last File Created 14/10/2011 - 17:31:29 ---A- C:\Documents And Settings\Nicolas\Cookies\7REB2PA9.txt [753]

O61 - LFC:Last File Created 14/10/2011 - 17:31:29 ---A- C:\Documents And Settings\Nicolas\Cookies\DGWGJ0GU.txt [420]

O61 - LFC:Last File Created 14/10/2011 - 17:33:05 ---A- C:\Documents And Settings\Nicolas\Cookies\OVUZ7ATN.txt [394]

O61 - LFC:Last File Created 14/10/2011 - 17:33:07 ---A- C:\Documents And Settings\Nicolas\Cookies\RPKK3HCU.txt [101]

O61 - LFC:Last File Created 14/10/2011 - 17:34:05 ---A- C:\Documents And Settings\All Users\Bureau\MBRCheck.lnk [673]

O61 - LFC:Last File Created 14/10/2011 - 17:34:05 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [666]

O61 - LFC:Last File Created 14/10/2011 - 17:34:05 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [661]

O61 - LFC:Last File Created 14/10/2011 - 17:34:05 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\ZHP\ZHPDiag.lnk [489]

O61 - LFC:Last File Created 14/10/2011 - 17:34:05 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.chk1.gthr [4096]

O61 - LFC:Last File Created 14/10/2011 - 17:34:26 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar DNS data\data [1689]

O61 - LFC:Last File Created 14/10/2011 - 17:35:00 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010001.ci [4096]

O61 - LFC:Last File Created 14/10/2011 - 17:35:00 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010001.dir [372]

O61 - LFC:Last File Created 14/10/2011 - 17:37:15 ---A- C:\Documents And Settings\Nicolas\Cookies\VWPFBP9N.txt [86]

O61 - LFC:Last File Created 14/10/2011 - 17:37:17 ---A- C:\Documents And Settings\Nicolas\Cookies\X9P6UAKG.txt [780]

O61 - LFC:Last File Created 14/10/2011 - 17:56:47 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]

O61 - LFC:Last File Created 14/10/2011 - 17:56:47 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]

O61 - LFC:Last File Created 14/10/2011 - 17:57:23 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18]

O61 - LFC:Last File Created 14/10/2011 - 17:57:23 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216]

O61 - LFC:Last File Created 14/10/2011 - 18:05:15 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010002.ci [135168]

O61 - LFC:Last File Created 14/10/2011 - 18:05:15 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010002.dir [1425]

O61 - LFC:Last File Created 14/10/2011 - 18:05:40 ---A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Office\Récent\Bureau.lnk [305]

O61 - LFC:Last File Created 14/10/2011 - 18:05:40 ---A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Office\Récent\Rapport 1 et 2 de ZHPDiag v1.lnk [520]

O61 - LFC:Last File Created 14/10/2011 - 18:05:40 --H-- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Office\Récent\index.dat [1481]

O61 - LFC:Last File Created 14/10/2011 - 18:06:33 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010004.ci [135168]

O61 - LFC:Last File Created 14/10/2011 - 18:06:33 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010004.dir [1425]

O61 - LFC:Last File Created 14/10/2011 - 18:07:22 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\0.crl [1211]

O61 - LFC:Last File Created 14/10/2011 - 18:07:23 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Daas2\cert\fsc (revoke hq).crl [1211]

O61 - LFC:Last File Created 14/10/2011 - 18:07:23 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\1.crl [1211]

O61 - LFC:Last File Created 14/10/2011 - 18:07:54 ---A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Office\Word11.pip [1652]

O61 - LFC:Last File Created 14/10/2011 - 18:07:54 ---A- C:\Documents And Settings\Nicolas\Recent\Rapport 1 et 2 de ZHPDiag v1.lnk [584]

O61 - LFC:Last File Created 14/10/2011 - 18:08:00 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Historique\History.IE5\MSHist012011101420111015\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 18:08:18 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96089]

O61 - LFC:Last File Created 14/10/2011 - 18:08:18 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 ---A- C:\Documents And Settings\Nicolas\UserData\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 -SHA- C:\Documents And Settings\Nicolas\IECompatCache\index.dat [868352]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 -SHA- C:\Documents And Settings\Nicolas\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [49152]

O61 - LFC:Last File Created 14/10/2011 - 18:08:22 -SHA- C:\Documents And Settings\Nicolas\PrivacIE\index.dat [10125312]

O61 - LFC:Last File Created 14/10/2011 - 18:08:34 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{25E77450-F687-11E0-B1EF-0012F0CF84A4}.dat [3584]

O61 - LFC:Last File Created 14/10/2011 - 18:08:34 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{25E77451-F687-11E0-B1EF-0012F0CF84A4}.dat [11264]

O61 - LFC:Last File Created 14/10/2011 - 18:08:48 ---A- C:\Documents And Settings\Nicolas\Cookies\index.dat [327680]

O61 - LFC:Last File Created 14/10/2011 - 18:08:48 ---A- C:\Documents And Settings\Nicolas\Local Settings\Historique\History.IE5\index.dat [1622016]

O61 - LFC:Last File Created 14/10/2011 - 18:09:39 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\CiFLfffd.001 [65536]

O61 - LFC:Last File Created 14/10/2011 - 18:09:39 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\CiFLfffd.002 [65536]

O61 - LFC:Last File Created 14/10/2011 - 18:09:39 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Ntfy123.gthr [186774]

O61 - LFC:Last File Created 14/10/2011 - 18:13:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [6144]

O61 - LFC:Last File Created 14/10/2011 - 18:13:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Galerie de composants Web Slice~.feed-ms [36864]

O61 - LFC:Last File Created 14/10/2011 - 18:13:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\MSN Météo~.feed-ms [28672]

O61 - LFC:Last File Created 14/10/2011 - 18:14:07 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar Cache\7.1.2003.1856\fr\annotaions_whitelist.json.content [370]

O61 - LFC:Last File Created 14/10/2011 - 18:14:07 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar Cache\7.1.2003.1856\fr\translate_element.js.content [2401]

O61 - LFC:Last File Created 14/10/2011 - 18:16:08 ---A- C:\Documents And Settings\Nicolas\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [7585]

O61 - LFC:Last File Created 14/10/2011 - 18:25:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [4646]

O61 - LFC:Last File Created 14/10/2011 - 18:25:52 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232]

O61 - LFC:Last File Created 14/10/2011 - 18:35:24 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.859.Crwl [880]

O61 - LFC:Last File Created 14/10/2011 - 18:35:24 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.859.gthr [1012]

O61 - LFC:Last File Created 14/10/2011 - 18:38:36 ---A- C:\Documents And Settings\Nicolas\Cookies\HFYL21QF.txt [71]

O61 - LFC:Last File Created 14/10/2011 - 18:40:01 ---A- C:\Documents And Settings\Nicolas\Application Data\Macromedia\Flash Player\#SharedObjects\JEUUXF3P\www.meetic.fr\messenger\flash\connector.swf\saveTempMv3.sol [42]

O61 - LFC:Last File Created 14/10/2011 - 18:44:48 ---A- C:\Documents And Settings\Nicolas\Application Data\Macromedia\Flash Player\#SharedObjects\JEUUXF3P\www.meetic.fr\messenger\flash\event.swf\ConnectorEvent_v1.sol [6043]

O61 - LFC:Last File Created 14/10/2011 - 18:48:56 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\3130B1871A126520A8C47861EFE3ED4D [552]

O61 - LFC:Last File Created 14/10/2011 - 18:48:56 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D [132]

O61 - LFC:Last File Created 14/10/2011 - 18:50:36 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\MSI831bd.LOG [778]

O61 - LFC:Last File Created 14/10/2011 - 18:52:01 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Live\Windows Live Mail.lnk [2011]

~ Scan Files in 01mn 48s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 02/06/2005 - C:\Program Files\Canon\CAL\CALMAIN.exe - Canon Camera Access Library 8(CCALib8) .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8

O64 - Services: CurCS - 10/11/2004 - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe - ConfigFree Service(CFSvcs) .(.TOSHIBA CORPORATION - Service of ConfigFree..) - LEGACY_CFSVCS

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 14/07/2004 - C:\WINDOWS\system32\drivers\drvnddm.sys - drvnddm(drvnddm) .(.Sonic Solutions - Device Driver Manager.) - LEGACY_DRVNDDM

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe - F-Secure Automatic Update Agent(FSAUA) .(.F-Secure Corporation - F-Secure Automatic Update Agent.) - LEGACY_FSAUA

O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\Drivers\fsbts.sys - fsbts (fsbts) .(...) - LEGACY_FSBTS

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe - F-Secure Anti-Virus Firewall Daemon(FSDFWD) .(.F-Secure Corporation - F-Secure Internet Shield daemon.) - LEGACY_FSDFWD

O64 - Services: CurCS - 09/10/2008 - C:\WINDOWS\system32\drivers\fsdfw.sys - F-Secure Firewall Driver(FSFW) .(.F-Secure Corporation - F-Secure Internet Shield Driver.) - LEGACY_FSFW

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Common\FSMA32.exe - F-Secure Management Agent(FSMA) .(.F-Secure Corporation - F-Secure Management Agent.) - LEGACY_FSMA

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe - F-Secure ORSP Client(FSORSPClient) .(.F-Secure Corporation - F-Secure ORSP Service.) - LEGACY_FSORSPCLIENT

O64 - Services: CurCS - 05/01/2011 - C:\WINDOWS\system32\FsUsbExDisk.sys - FsUsbExDisk (FsUsbExDisk) .(...) - LEGACY_FSUSBEXDISK

O64 - Services: CurCS - 05/01/2011 - C:\WINDOWS\system32\FsUsbExService.exe - FsUsbExService(FsUsbExService) .(.Teruten - FsUsbDevice.) - LEGACY_FSUSBEXSERVICE

O64 - Services: CurCS - 27/10/2009 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate)(gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE

O64 - Services: CurCS - 27/10/2009 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdatem)(gupdatem) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM

O64 - Services: CurCS - 01/05/2009 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater(gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - 03/04/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - 30/04/2009 - C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - 30/04/2009 - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe - Process Monitor(LVPrcSrv) .(.Logitech Inc. - Logitech LVPrcSrv Module..) - LEGACY_LVPRCSRV

O64 - Services: CurCS - ??/??/???? - C:\DOCUME~1\Nicolas\LOCALS~1\Temp\mbr.sys (.not file.) - mbr (mbr) .(...) - LEGACY_MBR

O64 - Services: CurCS - 22/11/2004 - C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.sys - MRENDIS5 NDIS Protocol Driver(MRENDIS5) .(.Motive, Inc. - Motive NDIS 5.0 Protocol Driver.) - LEGACY_MRENDIS5

O64 - Services: CurCS - 29/01/2003 - C:\WINDOWS\system32\DRIVERS\netdevio.sys - TOSHIBA Network Device Usermode I/O Protocol(Netdevio) .(.TOSHIBA Corporation. - Network Device Usermode I/O protocol.) - LEGACY_NETDEVIO

O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\drivers\sfdrv01.sys - StarForce Protection Environment Driver (version 1.x)(sfdrv01) .(.Protection Technology - StarForce Protection Environment Driver.) - LEGACY_SFDRV01

O64 - Services: CurCS - 16/05/2005 - C:\WINDOWS\system32\drivers\sfhlp02.sys - StarForce Protection Helper Driver (version 2.x)(sfhlp02) .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02

O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\drivers\sfsync02.sys - StarForce Protection Synchronization Driver (version 2.x)(sfsync02) .(.Protection Technology - StarForce Protection Synchronization Driver.) - LEGACY_SFSYNC02

O64 - Services: CurCS - 29/09/2005 - C:\WINDOWS\system32\drivers\sfvfs02.sys - StarForce Protection VFS Driver (version 2.x)(sfvfs02) .(.Protection Technology - StarForce Protection VFS Driver.) - LEGACY_SFVFS02

O64 - Services: CurCS - 14/07/2004 - C:\WINDOWS\system32\drivers\ssrtln.sys - ssrtln(ssrtln) .(.Sonic Solutions - Shared Driver Component.) - LEGACY_SSRTLN

O64 - Services: CurCS - 02/11/2004 - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe - SymWMI Service(SymWSC) .(.Symantec Corporation - Norton Security Center Service.) - LEGACY_SYMWSC

O64 - Services: CurCS - 14/12/2004 - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe - TOSHIBA Application Service(TAPPSRV) .(.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - LEGACY_TAPPSRV

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnboio.sys - tfsnboio(tfsnboio) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNBOIO

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsncofs.sys - tfsncofs(tfsncofs) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNCOFS

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsndrct.sys - tfsndrct(tfsndrct) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNDRCT

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsndres.sys - tfsndres(tfsndres) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNDRES

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnifs.sys - tfsnifs(tfsnifs) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNIFS

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnopio.sys - tfsnopio(tfsnopio) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNOPIO

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnpool.sys - tfsnpool(tfsnpool) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNPOOL

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnudf.sys - tfsnudf(tfsnudf) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNUDF

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnudfa.sys - tfsnudfa(tfsnudfa) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNUDFA

O64 - Services: CurCS - 02/10/2011 - C:\Documents and Settings\Nicolas\Bureau\TrueSight.sys - TrueSight (TrueSight) .(...) - LEGACY_TRUESIGHT

~ Scan Services in 00mn 01s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:30/11/2004 (. - DLLVGA.) (1, 0, 0, 2) - c:\windows\system32\DLLVGA.dll

O65 - LUF:04/01/2011 (.Pas de propriétaire - EjectDisk ?? ?? ?????.) (1, 0, 0, 1) - c:\windows\system32\FsUsbExDevice.Dll

O65 - LUF:14/12/2004 (.Pas de propriétaire - DisplayPage Module.) (1, 0, 1, 6) - c:\windows\system32\MousePage.dll

O65 - LUF:03/12/2004 (.Pas de propriétaire - TCtrlIODLL ??????? ??? ??????.) (1, 0, 1, 7) - c:\windows\system32\TCtrlIO.dll

O65 - LUF:07/05/2004 (.Pas de propriétaire - ToshBIOS Module.) (1, 0, 0, 1) - c:\windows\system32\ToshBIOS.dll

O65 - LUF:17/06/2004 (.Pas de propriétaire - Module KeyboardPage.) (1, 0, 0, 1) - c:\windows\system32\TosKeyboardPage.dll

O65 - LUF:17/06/2004 (.Pas de propriétaire - Module MousePage.) (1, 0, 0, 1) - c:\windows\system32\TosMousePage.dll

O65 - LUF:11/10/2001 (.Pas de propriétaire - TW_CT Dynamic Link Library.) (1, 1, 1, 1) - c:\windows\system32\TW_CT.dll

~ Scan Sigcheck in 05mn 08s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <htmlfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {67B6BED9-2E6E-4AFD-98D5-81F5EC9CF22A} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {9D88035C-6F29-4C27-BDF0-56A480639353} - (Google) - Google

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.730084170015038D0A5BCCBB55D55DA2] [sPRF][27/10/2009] (.Google Inc. - Setup.) -- C:\Documents and Settings\Nicolas\Bureau\GoogleEarthSetup.exe [570016]

[MD5.F594C711A1FD18148A5322336154B4DF] [sPRF][16/09/2006] (.Macrovision Corporation - Setup.exe.) -- C:\Documents and Settings\Nicolas\Bureau\GoogleEarthWin.exe [14405024]

[MD5.1D18D923EA0390BB2B453FF833C8B1B4] [sPRF][14/11/2010] (.Unisys Corporation - Pas de description.) -- C:\Documents and Settings\Nicolas\Bureau\Plug-in_messagerie_vocale_888.exe [1517136]

[MD5.21CD08A367C577B917C3CF917F712D64] [sPRF][28/03/2010] (.Apple Inc. - QuickTime Installer.) -- C:\Documents and Settings\Nicolas\Bureau\QuickTimeInstaller.exe [32494896]

[MD5.155B6CB5488F3194208012E7F9B8D888] [sPRF][02/10/2011] (...) -- C:\Documents and Settings\Nicolas\Bureau\TrueSight.sys [111104]

[MD5.632E0CE38FBCADEAAE28077F4C9C45D5] [sPRF][21/10/2010] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.1 r102.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [2827728]

~ Scan Files in 00mn 02s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : neufbox

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 209.85.148.103, 209.85.148.147, 209.85.148.105, 209.85.148.106

209.85.148.99, 209.85.148.104

Aliases: www.google.fr, www.google.com

~ Scan DNS in 01mn 31s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 14/10/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 14/10/2011 360448 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\Ati2evxx.exe

SR - | Auto 14/10/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Demand 0 | (Boonty Games) . (...) - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

SR - | Auto 14/10/2011 86606 | (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe

SR - | Auto 14/10/2011 36864 | (CFSvcs) . (.TOSHIBA CORPORATION.) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

SS - | Demand 14/10/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SR - | Auto 14/10/2011 215648 | (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

SR - | Demand 14/10/2011 162456 | (F-Secure Network Request Broker) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\Common\FNRB32.exe

SR - | Demand 14/10/2011 490080 | (FSAUA) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe

SR - | Demand 14/10/2011 510560 | (FSDFWD) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe

SR - | Auto 14/10/2011 117400 | (FSMA) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\Common\FSMA32.exe

SR - | Demand 14/10/2011 55904 | (FSORSPClient) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe

SR - | Auto 14/10/2011 222568 | (FsUsbExService) . (.Teruten.) - C:\WINDOWS\system32\FsUsbExService.exe

SS - | Auto 14/10/2011 133104 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 14/10/2011 133104 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 14/10/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 14/10/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

SR - | Demand 14/10/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 14/10/2011 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

SR - | Auto 14/10/2011 69632 | (Pml Driver HPZ12) . (.HP.) - C:\WINDOWS\system32\HPZipm12.exe

SS - | Demand 14/10/2011 450560 | (Service CANALPLAY) . (.Canal+ Distribution.) - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe

SR - | Auto 14/10/2011 45056 | (SoundMAX Agent Service (default)) . (.Analog Devices, Inc..) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

SR - | Auto 14/10/2011 316544 | (SymWSC) . (.Symantec Corporation.) - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

SR - | Auto 14/10/2011 34816 | (TAPPSRV) . (.TOSHIBA Corp..) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

~ Scan Services in 01mn 32s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Nicolas at 14/10/2011 19:20:33

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys pciide.sys PCIIDEX.SYS

C:\WINDOWS\system32\drivers\sfsync02.sys Protection Technology StarForce Protection System

1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x86F6AAB8]

3 CLASSPNP[0xF765EFD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000088[0x86F6C9E8]

5 ACPI[0xF75A4620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x86F8B940]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 01mn 34s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Nicolas at 14/10/2011 19:20:36

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 01mn 36s

 

 

 

End of the scan (1478 lines in 11mn 09s)(0)

[pear]

Bonjour,

 

Votre rapport est propre.

 

Vous devriez trouver une aide appropriée sur Internet-et-reseaux de ce site.

[Theandre]

Bonjour,

 

Merci de votre expertise.

 

Hotmail m'indique en premier lieu de changer le mot de passe de ma boîte (ce que je vais faire) et d'installer un programme antivirus afin, une fois configuré, qu'il télécharge les mises à jour et analyse mon ordinateur de façon régulière. Ils proposent de télécharger et d'installer Microsoft Security Essentials gratuitement. Qu'en pensez-vous?

[pear]

MSE est un excellent antivirus.

[Theandre]

Ok, merci, je vais télécharger MSE.

 

Une dernière question. Dans le rapport ZHPDiag que je vous ai envoyé hier, il y a quelque chose que je ne comprends pas à la lecture de la ligne R0 (Pages de démarrage d'Internet Explorer). On peut y lire (voir ci-dessous) la présence de google.com, ce qui est normal, mais aussi de startsear.ch que nous cherchons à éliminer ensemble depuis deux semaines depuis que j'ai malencontreusement téléchargé vShare.tv pour voir un match de foot en streaming...

 

Pourtant à chaque fois que je lance le navigateur, startsear.ch a disparu et c'est seulement google qui apparaît comme page de démarrage.

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://startsear.

 

 

Merci de votre réponse et de votre expertise.

[Theandre]

Bonjour,

 

Je suis désolé de vous déranger encore avec mes questions au sujet du malware startsear.ch que vous m'avez aidé à traiter, mais je n'ai pas reçu de réponse de votre part suite à ma dernière question avant que vous vous absentiez fin octobre. Moi-même ayant été en vacances ces derniers temps, voilà la raison pour laquelle je reviens vers vous avec tant de décalage par rapport à notre dernière conversation.

 

 

Les lignes qui suivent sont un copié-collé de ma question posté le 15 octobre:

 

Dans le rapport ZHPDiag que je vous ai envoyé la dernière fois, il y a quelque chose que je ne comprends pas à la lecture de la ligne R0 (Pages de démarrage d'Internet Explorer). On peut y lire (voir ci-dessous) la présence de google.com, ce qui est normal, mais aussi de startsear.ch que nous cherchons à éliminer ensemble depuis deux semaines depuis que j'ai malencontreusement téléchargé vShare.tv pour voir un match de foot en streaming...

 

Pourtant à chaque fois que je lance le navigateur, startsear.ch a disparu et c'est google qui apparaît comme page de démarrage.

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://startsear.

 

Est-ce normal? Le malware stratsear.ch est-il définitivement éradiqué?

 

 

Merci de votre réponse et de votre expertise.

 

Théandre

[pear]

Bonsoir,

 

Démarrer->Exécuter->Regedit

 

allez à

 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

 

supprimez http://startsear.