Virus startsear.ch

[Theandre]

Bonsoir,

 

Exact ! Désolé.

 

J'ai suivi vos instructions en allant dans mon navigateur (Explorer). J'ai cliqué sur "Outils" puis "Gérer les modules complémentaires". Pas de trace de startsear.ch dans "Barres d'outils et extensions" ni dans "Moteurs de recherche". Le seul truc etonnant que j'ai trouvé c'est que Bing (www.bing.com) était en 2e dans l'ordre de la liste de préférence des moteurs de recherche, c'est tout...

 

Quelle suite donner?

 

Merci de votre aide.

[pear]

Il me vient un doute.

 

Relancez "Seaf" comme précédemment

 

Vérifiez que la recherche dans le régistre soit bien activée.

[Theandre]

Bonjour,

 

Excusez-moi pour mon manque de réactivité, j'étais absent ces derniers jours.

 

Conformément à vos instructions, j'ai relancé SEAF en prenant bien le soin de cliquer sur "chercher également dans le registre".

 

Voici le rapport:

 

1. ========================= SEAF 1.0.1.0 - C_XX

2.

3. Commencé à: 19:54:34 le 03/12/2011

4.

5. Valeur(s) recherchée(s):

6. startsear

7.

8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès

9.

10. (!) --- Calcul du Hash "MD5"

11. (!) --- Informations supplémentaires

12. (!) --- Recherche registre

13.

14. ====== Fichier(s) ======

15.

16.

17. "C:\Documents and Settings\Nicolas\Local Settings\Temporary Internet Files\Content.IE5\SZGH391W\affich-23021703-supprimer-malware-startsear-ch[1].htm" [ NOT_CONTENT_INDEXED|ARCHIVE | 120 Ko ]

18. TC: 30/09/2011,16:14:40 | TM: 30/09/2011,16:14:40 | DA: 14/11/2011,23:01:49

19.

20. Hash MD5: DEAFEC7B53A1EE9DC1E68E06C05066E6

21.

22.

23. =========================

24.

25.

26.

27. ====== Entrée(s) du registre ======

28.

29. Aucun élément dans le registre trouvé

30.

31. =========================

32.

33. Fin à: 19:57:56 le 03/12/2011

34. 250538 Éléments analysés

35.

36. =========================

37. E.O.F

[pear]

Bonjour,

 

Téléchargez TFC par OldTimer sur votre Bureau pour supprimer vos fichiers temporaires

Faites un double clic sur TFC.exe pour le lancer.

Sous Vista, faites un clic droit sur le fichier et choisissez Exécuter en tant qu'Administrateur

L'outil va fermer tous les programmes lors de son exécution, donc vérifiez que vous avez sauvegardé tout votre travail en cours auparavant.

Cliquez sur le bouton Start pour lancer le processus.

Selon la fréquence à laquelle vous supprimez vos fichiers temporaires, cela peut durer de quelques secondes à une minute ou deux.

Laissez le programme s'exécuter sans l'interrompre.

Lorsqu'il aura terminé, l'outil devrait faire redémarrer votre systèmepour parachever le nettoyage..

S'il ne le faisait pas,faites redémarrer manuellement le PC

[Theandre]

Bonsoir,

 

J'ai suivi vos instructions en téléchargeant TFC par OldTimer, puis en le lançant. Tout s'est bien passé, j'ai laissé le programme s'exécuter et au bout d'une à deux minutes environ, comme vous me l'aviez annoncé, TFC a fait redémarrer mon système.

 

Quelle est la prochaine étape?

 

 

Merci de votre aide et de votre patience.

[pear]

Cela a-t-il réglé le problème ?

[Theandre]

Bonjour,

 

J'ai procédé à un nouvel examen avec ZhpDiag. Vous trouverez ci-dessous le rapport. Il me semble que c'est propre concernant les paragraphes "-\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R2,R3,R4)". Idem pour le paragraphe "Internet Explorer Toolbars (03)".

 

Qu'en pensez-vous?

 

Par ailleurs, voyez-vous autre chose de suspect dans d'autres paragraphes?

 

Merci de votre aide.

 

 

 

Rapport de ZHPDiag v1.28.262 par Nicolas Coolman, Update du 07/12/2011

Run by Nicolas at 09/12/2011 17:50:32

Web site : ZHPDiag Outil de diagnostic

State : Version à jour.

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702 (Defaut)

 

---\\ Windows Product Information

~ Langage: Français

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : OK

 

---\\ System Information

~ Processor: x86 Family 6 Model 13 Stepping 8, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1023 MB (40% free)

System Restore: Activé (Enable)

System drive C: has 62 GB (66%) free of 93 GB

 

---\\ Logged in mode

~ Computer Name: YOUR-0B8EED07AB

~ User Name: Nicolas

~ All Users Names: SUPPORT_388945a0, Nicolas, HelpAssistant, ASPNET, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\Nicolas\Application Data\

~ %Desktop% : C:\Documents and Settings\Nicolas\Bureau\

~ %Favorites% : C:\Documents and Settings\Nicolas\Favoris\

~ %LocalAppData% : C:\Documents and Settings\Nicolas\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\Nicolas\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 62 Go of 93 Go)

D:\ CD-ROM drive (Free 0 Go of 0 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.09/12/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.09/12/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.7DF35C3D173E799F97F208CC5F3B1C93] - (.Microsoft Corporation - Internet Extensions for Win32.) (.09/12/2011 - 00:41:31.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.09/12/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.09/12/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.09/12/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.09/12/2011 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.09/12/2011 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.09/12/2011 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.09/12/2011 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.09/12/2011 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.09/12/2011 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.09/12/2011 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.09/12/2011 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.09/12/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]

[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.09/12/2011 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.09/12/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.09/12/2011 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.09/12/2011 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.09/12/2011 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.09/12/2011 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]

[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.09/12/2011 - 02:56:04.) -- C:\WINDOWS\system32\drivers\volsnap.sys [53376]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 247/4011

~ Mes musiques (My Musics) : 400/1252

~ Mes Videos (My Videos) : 4/97

~ Mes Favoris (My Favorites) : 2/205

~ Mes Documents (My Documents) : 717/6593

~ Mon Bureau (My Desktop) : 7/163

~ Menu demarrer (Programs) : 6/27

~ Scan Hidden Files in 00mn 19s

 

 

 

---\\ Processus lancés

[MD5.6633CBF0D658440F0962D90E5BD20DDE] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [360448] [PID.]

[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]

[MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [349472] [PID.]

[MD5.98D65C9B0F4A28300E0F5FDCB3A4874C] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [36864] [PID.]

[MD5.892648C3B0B46DB191FA8F5E5A224584] - (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) -- C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe [215648] [PID.]

[MD5.FB38FF052B9568971D8AD9FBF0A3FC28] - (.F-Secure Corporation - F-Secure Management Agent.) -- C:\Program Files\F-Secure\Common\FSMA32.EXE [117400] [PID.]

[MD5.09A12C446A327C5DA0D39FD48FAD9E5B] - (.F-Secure Corporation - Gatekeeper Handler II.) -- C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE [496808] [PID.]

[MD5.2A0D3EE7D2D42A3A812D3E6795A2382B] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.Exe [222568] [PID.]

[MD5.FD9B7B22875787699ACDE127F30EBAE1] - (.F-Secure Corporation - F-Secure Message Broker.) -- C:\Program Files\F-Secure\Common\FSMB32.EXE [232088] [PID.]

[MD5.5C7B88695CE461D8BDA4FE0C0E57E71D] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [154136] [PID.]

[MD5.3978F082274F723AD5A0A8058C2417DD] - (.Analog Devices, Inc. - SoundMAX service agent component.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056] [PID.]

[MD5.C65BAC90FDB6E9700D4AAA8C5868F7D7] - (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe [34816] [PID.]

[MD5.A4C743F26B53456E24F2A90CF626B49F] - (.F-Secure Corporation - F-Secure Configuration Handler.) -- C:\Program Files\F-Secure\Common\FCH32.EXE [125592] [PID.]

[MD5.693920C69F10F4007A23F42CE17A657A] - (.F-Secure Corporation - F-Secure Alert and Management Extension Han.) -- C:\Program Files\F-Secure\Common\FAMEH32.EXE [404064] [PID.]

[MD5.D99EB602CC2A306C351DBB0E896EB167] - (.F-Secure Corporation - F-Secure Quarantine Handler.) -- C:\Program Files\F-Secure\Anti-Virus\fsqh.exe [43680] [PID.]

[MD5.67C5AF84809468061121FBCBECB19285] - (.Symantec Corporation - Norton Security Center Service.) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe [316544] [PID.]

[MD5.A9ACC4B9730B6D5B0BB2BFFDC53F0812] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe [86606] [PID.]

[MD5.B8A6A3855FEFDB0FBDD1EAA11821A9C2] - (.F-Secure Corporation - F-Secure Automatic Update Agent.) -- C:\Program Files\F-Secure\FSAUA\program\fsaua.exe [490080] [PID.]

[MD5.2FC4774E100F47E10E61C9A393E7D8B9] - (.F-Secure Corporation - F-Secure Scanner Manager.) -- C:\Program Files\F-Secure\Anti-Virus\fssm32.exe [709800] [PID.]

[MD5.BFCA837AA5687BD23E770476A9B5FAD6] - (.F-Secure Corporation - F-Secure Network Request Broker.) -- C:\Program Files\F-Secure\Common\FNRB32.EXE [162456] [PID.]

[MD5.2BD22FBD783226E1449B9F167C1DC5B0] - (.F-Secure Corporation - F-Secure Installation Launcher.) -- C:\Program Files\F-Secure\Common\FIH32.EXE [101016] [PID.]

[MD5.2A528B2E9D280AF372F46FC5042F85A0] - (.F-Secure Corporation - F-Secure Internet Shield daemon.) -- C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe [510560] [PID.]

[MD5.76F874B3FC5F60991CE2F179B50B2BC4] - (.F-Secure Corporation - FSAV Handler.) -- C:\Program Files\F-Secure\Anti-Virus\fsav32.exe [347232] [PID.]

[MD5.12E76B92A26AA03213DCAD20C7793966] - (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394] [PID.2696]

[MD5.343AE860DA9FAE4E275F890BA0916D6E] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218] [PID.1956]

[MD5.FCD532BE0C00E6583E9DFEBA273A8F10] - (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\Toshiba\Tvs\TvsTray.exe [73728] [PID.1944]

[MD5.C2EDE68251407CCACABF5E48028626BD] - (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\Ltmoh.exe [184320] [PID.2536]

[MD5.08486B4336D032373B94C4C4687AC380] - (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe [88363] [PID.3316]

[MD5.8A2210C556B9E312631567426994E19B] - (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe [352256] [PID.3356]

[MD5.454D563D0EAE7F12F203FB508F02FD2C] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe [266240] [PID.1708]

[MD5.AF76A7F839F6446F27EC01FB0CEDE80E] - (.TOSHIBA CORPORATION - ConfigFree Tray.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [929792] [PID.3440]

[MD5.5281DCC470A1C2981C2D82CDD814AB01] - (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [118784] [PID.3480]

[MD5.3E248C34D0D5E9D777D9BC452B421635] - (.TOSHIBA - PadTouch Main.) -- C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe [1077327] [PID.492]

[MD5.C22BDB59D346ABA833A3A207E1629F07] - (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe [122939] [PID.3588]

[MD5.B13D262EE5962EC91F93FDD933030E6A] - (.TOSHIBA Corporation - TFncKy.) -- C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe [114688] [PID.3600]

[MD5.52BEF4634BE1BC8B64805E93E8EB22FA] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSBattM.exe [40960] [PID.1760]

[MD5.50EFC94102FA43A2A744371BE4443709] - (.Analog Devices, Inc. - SMax4PNP MFC Application.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [1388544] [PID.3644]

[MD5.E558CDE2913DAA077D4E25732D1AA176] - (.Hewlett-Packard Company - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152] [PID.3736]

[MD5.2EF94D5240D568760D6A83801A275712] - (.Talkway Communications - Talkway VMailTalk Manager application.) -- C:\Program Files\Fichiers communs\Talkway\vmtalk.exe [61440] [PID.3748]

[MD5.50908DB9055BB8AFBB031F8C327043D6] - (.TOSHIBA CORPORATION - ConfigFree Search for Wireless Devices.) -- C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe [544768] [PID.3700]

[MD5.D3DB89FAB9FDC9504C8A1B941CF746B0] - (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files\F-Secure\Common\FSM32.EXE [182936] [PID.4020]

[MD5.3B8C106587A57159639713EEE074EF83] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2780432] [PID.2056]

[MD5.8CAFFE5B919983211CD1F3AC0CA4D338] - (.F-Secure Corporation - F-Secure GUI component.) -- C:\Program Files\F-Secure\FSGUI\fsguidll.exe [604768] [PID.2452]

[MD5.C0FD8553CECDE061AD3E7C1CC80C7EDB] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421160] [PID.3164]

[MD5.6877F8C1787D644AE6EAF8330F93ED18] - (.TOSHIBA CORPORATION - ConfigFree SUMMIT Engine.) -- C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe [819200] [PID.3248]

[MD5.A7A0ED26C68892135F23F4D4F176E2E3] - (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe [65536] [PID.2364]

[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856] [PID.]

[MD5.A84657FDDF46ECD976117BB200B9F711] - (...) -- C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe [559888] [PID.3620]

[MD5.635538786A1C04FCB9EF009DE0BE7DEB] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3370296] [PID.2752]

[MD5.C519CEC624CF9BCBA3059F32266C8FFF] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [258048] [PID.164]

[MD5.334CCEA05934B9A00C591E2AC2213CE9] - (.PIXELA CORPORATION - ImageMixer Menu.) -- C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe [1871872] [PID.1220]

[MD5.63336300C6CC335203FE003E6FF7A1DE] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE [64864] [PID.3432]

[MD5.E51BD095B2FDF56B17EE010BB794D6ED] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [820520] [PID.]

[MD5.6B2B9B46D7DA5C67397412DEA6CF9A14] - (.Hewlett-Packard Co. - Pas de description.) -- C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe [425984] [PID.5232]

[MD5.294ACD3C9C99017CE6A9DA2AB60CCCE5] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2209792] [PID.5852]

[MD5.FA726D2A95B3AC8ED3292DAAC3580E87] - (.F-Secure Corporation - F-Secure ORSP Service.) -- C:\Program Files\F-Secure\ORSP Client\fsorsp.exe [55904] [PID.]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

[MD5.8BA7C024070F2B7FDD98ED8A4BA41789] - (.Microsoft Corporation - PresentationFontCache.exe.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104] [PID.]

~ Scan Processes Running in 00mn 05s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (...) -- C:\Program Files\Veetle\plugins\npVeetle.dll (.not file.)

P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (...) -- C:\Program Files\Veetle\Player\npvlc.dll (.not file.)

~ Scan Firefox Browser in 00mn 01s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19131 (longhorn_ie8_gdr.110815-1715)) -- C:\WINDOWS\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll

O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Search Toolbar extension.) -- C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} . (.Microsoft Corporation - MSN Search Toolbar extension.) -- C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [synTPLpr] . (.Synaptics, Inc. - TouchPad Driver Helper Application.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Tvs] . (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [LtMoh] . (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\ltmoh.exe

O4 - HKLM\..\Run: [AGRSMMSG] . (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe

O4 - HKLM\..\Run: [THotkey] . (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\TOSHIBA\TOSHIBA Applet\THotkey.exe

O4 - HKLM\..\Run: [TPSMain] . (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [smoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe

O4 - HKLM\..\Run: [PadTouch] . (.TOSHIBA - PadTouch Main.) -- C:\Program Files\TOSHIBA\Touch and Launch\Padexe.exe

O4 - HKLM\..\Run: [dla] . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [TFncKy] TFncKy.exe

O4 - HKLM\..\Run: [ATIPTA] . (.ATI Technologies, Inc. - ATI Desktop Control Panel.) -- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [soundMAXPnP] . (.Analog Devices, Inc. - SMax4PNP MFC Application.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [soundMAX] . (.Analog Devices, Inc. - SoundMAX Control Center.) -- C:\Program Files\Analog Devices\SoundMAX\Smax4.exe

O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Company - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

O4 - HKLM\..\Run: [vmtalk] . (.Talkway Communications - Talkway VMailTalk Manager application.) -- C:\Program Files\Fichiers communs\Talkway\vmtalk.exe

O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe

O4 - HKLM\..\Run: [F-Secure Manager] . (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files\F-Secure\Common\FSM32.exe

O4 - HKLM\..\Run: [F-Secure TNB] . (.F-Secure Corporation - tnbutil.) -- C:\Program Files\F-Secure\FSGUI\TNBUtil.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

O4 - HKLM\..\Run: [CanalPlayerHelper] C:\Program Files\Lecteur CANALPLAY\CanalPlayerHelper.exe (.not file.)

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKUS\S-1-5-21-680403475-1107398295-2291755242-1006\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{C41300B9-185D-475E-BFEC-39EF732F19B1}\AppleSoftwareUpdateIco.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. SA.) -- C:\Program Files\HP\Digital Imaging\DocProc\regipe.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Lanceur de tâches Microsoft Works.lnk . (.Microsoft® Corporation.) -- C:\Program Files\Microsoft Works\MSWorks.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office PowerPoint Viewer 2003.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Norton Security Center.lnk . (.Symantec Corporation.) -- C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymSCUI.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Desktop Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\Nicolas\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 04s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files\MICROS~2\OFFICE11\EXCEL.exe

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico

O9 - Extra button: Skype Click to Call - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Site dans la Zone de confiance d'Internet Explorer (O15)

O15 - Trusted Zone: [HKCU\...\Domains] *.canalplay.com

O15 - Trusted Zone: [HKCU\...\Domains\www] *.canalplay.com

O15 - Trusted Zone: [HKCU\...\Domains] *.canalplusactive.com

O15 - Trusted Zone: [HKCU\...\Domains\www] *.canalplusactive.com

O15 - Trusted Zone: [HKLM\...\Domains] *.canalplay.com

O15 - Trusted Zone: [HKLM\...\Domains\www] *.canalplay.com

O15 - Trusted Zone: [HKLM\...\Domains] *.canalplusactive.com

O15 - Trusted Zone: [HKLM\...\Domains\www] *.canalplusactive.com

~ Scan IE Zone Confiance in 00mn 00s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: Microsoft XML Parser for Java - (Microsoft XML Parser for Java) - (.not file.) - file:\\C:\WINDOWS\Java\classes\xmldso.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{9BFB133E-8859-4BE4-9C38-835272E47C6F}: DhcpNameServer = 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~3\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~3\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 01s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS\system32\Ati2evxx.dll

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: WgaLogon . (.Microsoft Corporation - Notifications Windows Genuine Advantage.) -- C:\WINDOWS\system32\WgaLogon.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: ConfigFree Service (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

O23 - Service: FSMA (FSMA) . (.F-Secure Corporation - F-Secure Management Agent.) - C:\Program Files\F-Secure\common\FSMA32.exe

O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Process Monitor (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: Pml Driver HPZ12 (Pml Driver HPZ12) . (.HP - PML Driver.) - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) . (.Analog Devices, Inc. - SoundMAX service agent component.) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: SymWMI Service (SymWSC) . (.Symantec Corporation - Norton Security Center Service.) - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\symwsc.exe

O23 - Service: TOSHIBA Application Service (TAPPSRV) . (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

~ Scan Keys in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 1.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Rappel d'enregistrement 3.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\User_Feed_Synchronization-{E97B5276-5839-4D0B-866D-2B9A542A7641}.job

~ Scan Scheduled Task in 00mn 00s

 

 

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe

O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui

O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll

O40 - ASIC: Microsoft VM - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Microsoft Corporation - Microsoft® VM.) -- C:\WINDOWS\system32\msjava.dll

O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll

O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf

O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf

O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll

O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui

O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- c:\WINDOWS\system32\mscories.dll

O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\WINDOWS\system32\Macromed\Flash\Flash11e.ocx

~ Scan Active Setup in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (F-Secure HIPS) . (.F-Secure Corporation - F-Secure HIPS 32-bit Driver.) - C:\Program Files\F-Secure\HIPS\drivers\fshs.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (sscdbhk5) . (.Sonic Solutions - Shared Driver Component.) - C:\WINDOWS\system32\drivers\sscdbhk5.sys

O41 - Driver: (ssrtln) . (.Sonic Solutions - Shared Driver Component.) - C:\WINDOWS\system32\drivers\ssrtln.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software

O42 - Logiciel: ATI Control Panel - (.Pas de propriétaire.) [HKLM] -- {0BEDBD4E-2D34-47B5-9973-57E62B29307C}

O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver

O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {853A4763-6643-4604-8D64-28BDD8925F4C}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {CACAEB5F-174D-4C7C-AC56-A33289A807CA}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {C41300B9-185D-475E-BFEC-39EF732F19B1}

O42 - Logiciel: Assist TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Barre d'outils MSN Search - (.Microsoft Corporation.) [HKLM] -- {B2CF0FAC-D52C-41D8-81E0-BFD7A3E7C84B}

O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.Pas de propriétaire.) [HKLM] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {C2E4B5BD-32DB-4817-A060-341AB17C3F90}

O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{5B03B93F-1B32-4509-9CA6-4BB33E9987EF}

O42 - Logiciel: Canon Camera Access Library - (.Canon.) [HKLM] -- InstallShield_{901F8ED7-13E8-43EF-B738-2FE89B0588EB}

O42 - Logiciel: Canon Camera Support Core Library - (.Canon.) [HKLM] -- InstallShield_{A1D0D14A-B776-4907-BC00-5149F2298086}

O42 - Logiciel: Canon Camera Window DC_DV 5 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}

O42 - Logiciel: Canon Camera Window DC_DV 6 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{50E25180-3BDC-4B6D-80A2-3F1F0C9CF39D}

O42 - Logiciel: Canon Camera Window DSLR 5 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{0A146245-DB79-4197-BF5D-FE1A699A2CC7}

O42 - Logiciel: Canon Camera Window MC 6 for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{6C3A75A6-9A90-44A3-A703-82AC1EA6A85D}

O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Canon Inc..) [HKLM] -- InstallShield_{D0E8C34D-19D2-49FD-A900-88DEB788FF86}

O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{4DBBF091-FACD-422C-B43C-786335BD5398}

O42 - Logiciel: Canon PhotoRecord - (.Cisra.) [HKLM] -- {BBBC2B89-E193-4348-A83C-C8DD8210A4AC}

O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Canon.) [HKLM] -- InstallShield_{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}

O42 - Logiciel: Canon Utilities PhotoStitch 3.1 - (.Canon.) [HKLM] -- InstallShield_{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}

O42 - Logiciel: Canon ZoomBrowser EX (F) - (.Canon.) [HKLM] -- {C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}

O42 - Logiciel: Coffret de pilotes Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- lvdrivers_12.0

O42 - Logiciel: Commandes TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {A6690C0E-B96E-4F0F-A8EB-D5B332454AC6}

O42 - Logiciel: Configurateur Modem - (.Pas de propriétaire.) [HKLM] -- ConfigurateurModem

O42 - Logiciel: EasyFlirt Messenger 2.0 - (.Pas de propriétaire.) [HKLM] -- {400EEB8E-513A-47E6-8170-BFCF6C8A7DCF}_is1

O42 - Logiciel: F-Secure Client Security - Analyse courrier élect. - (.Pas de propriétaire.) [HKLM] -- F-Secure E-mail Scanning

O42 - Logiciel: F-Secure Client Security - Analyse du trafic Web - (.Pas de propriétaire.) [HKLM] -- F-Secure Protocol Scanner

O42 - Logiciel: F-Secure Client Security - Contrôle du système - (.Pas de propriétaire.) [HKLM] -- F-Secure HIPS

O42 - Logiciel: F-Secure Client Security - Protection Internet - (.Pas de propriétaire.) [HKLM] -- F-Secure Internet Shield

O42 - Logiciel: F-Secure Client Security - Protection contre les virus et les logiciels espions - (.Pas de propriétaire.) [HKLM] -- F-Secure Anti-Virus

O42 - Logiciel: Formatage de carte mémoire SD TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {48CF9A66-5F03-4025-ABD0-B3A3FA095A59}

O42 - Logiciel: Gestion d'énergie TOSHIBA - (.Pas de propriétaire.) [HKLM] -- Power Saver

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}

O42 - Logiciel: HP Image Zone 4.7 - (.HP.) [HKLM] -- HP Photo & Imaging

O42 - Logiciel: HP PSC & OfficeJet 4.7 - (.HP.) [HKLM] -- {342C7C88-D335-4bc2-8CF1-281857629CE2}

O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {64FC0C98-B035-4530-B15D-3D30610B6DF1}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399

O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: ImageMixer for HDD Camcorder - (.PIXELA.) [HKLM] -- {44E5B47F-870E-4E38-A458-8A5FC4DCFECF}

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: InterVideo WinDVD for TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {91810AFC-A4F8-4EBA-A5AA-B198BBC81144}

O42 - Logiciel: J2SE Runtime Environment 5.0 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150000}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: LE COMPAGNON CLUB - (.Pas de propriétaire.) [HKLM] -- TONLFR.MCCInstall

O42 - Logiciel: Lecteur CANALPLAY 2.6 - (.Canal+ Distribution.) [HKLM] -- {E9E37358-E3E1-47BA-9E21-375EF3616BC9}

O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player

O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}

O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {AC96671C-2001-432C-9826-5266D84EF1DC}

O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}

O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Macromedia Flash Player - (.Macromedia, Inc..) [HKLM] -- {0456ebd7-5f67-4ab6-852e-63781e3f389c}

O42 - Logiciel: Manuels TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {188BA1CC-F3A1-49B0-A34D-8C861C64E1AE}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)

O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2572067) - (.Pas de propriétaire.) [HKLM] -- M2572067

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB979906) - (.Pas de propriétaire.) [HKLM] -- M979906

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1

O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs

O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office OneNote 2003 - (.Microsoft Corporation.) [HKLM] -- {91A1040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000

O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {A059DE09-1B49-4450-B340-7AE097EC3F04}

O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}

O42 - Logiciel: Norton Security Center - (.Symantec Corporation.) [HKLM] -- {503AA035-41E2-4858-B31F-1E49AC66C309}

O42 - Logiciel: Orange Plug-in messagerie vocale 888 - (.Pas de propriétaire.) [HKLM] -- {16E79B1D-D1C2-4CA6-8B23-F4D890E0DCB9}

O42 - Logiciel: Outil de diagnostic PC TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {B1310222-C64A-4E1E-ABE7-2489B33955FB}

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}

O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O42 - Logiciel: SD Secure Module - (.Nom de votre société.) [HKLM] -- {C45F4811-31D5-4786-801D-F79CD06EDD85}

O42 - Logiciel: SMSC IrCC V5.1.3600.5 - (.Pas de propriétaire.) [HKLM] -- {F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Service Photos Club Internet - (.Pas de propriétaire.) [HKLM] -- Service Photos Club Internet_is1

O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}

O42 - Logiciel: Skype™ 5.5 - (.Skype Technologies S.A..) [HKLM] -- {AA59DDE4-B672-4621-A016-4C248204957A}

O42 - Logiciel: Son virtuel TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {8B12BA86-ADAC-4BA6-B441-FFC591087252}

O42 - Logiciel: Sonic DLA - (.Sonic Solutions.) [HKLM] -- {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}

O42 - Logiciel: Sonic RecordNow! - (.Sonic Solutions.) [HKLM] -- {9541FED0-327F-4DF0-8B96-EF57EF622F19}

O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C}

O42 - Logiciel: Synaptics Pointing Device Driver - (.Pas de propriétaire.) [HKLM] -- SynTPDeinstKey

O42 - Logiciel: TOSHIBA ConfigFree - (.Pas de propriétaire.) [HKLM] -- {BDD83DC9-BEE9-4654-A5DA-CC46C250088D}

O42 - Logiciel: TOSHIBA Hotkey Utility - (.Pas de propriétaire.) [HKLM] -- {64DD71BC-3109-4C88-9AD3-D5422644B722}

O42 - Logiciel: TOSHIBA Software Modem - (.Pas de propriétaire.) [HKLM] -- TOSHIBA Software Modem

O42 - Logiciel: TOSHIBA TouchPad ON/Off Utility - (.Pas de propriétaire.) [HKLM] -- {69BE47C2-36FE-4397-8199-85D8EAE69982}

O42 - Logiciel: TOSHIBA Utilities - (.Pas de propriétaire.) [HKLM] -- {78C68CB9-3DF5-44F3-AB9D-FA305C5EB85C}

O42 - Logiciel: Touch and Launch - (.Pas de propriétaire.) [HKLM] -- {5D96E2B1-D9AC-46E0-9073-425C5F63E338}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Utilitaire de zoom TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {64212898-097F-4F3F-AECA-6D34A7EF82DF}

O42 - Logiciel: Veetle TV - (.Veetle, Inc.) [HKLM] -- Veetle TV

O42 - Logiciel: Vidéo Email v2.0 pour Outlook Express - (.Talkway Communications.) [HKLM] -- Vidéo Email v2.0 pour Outlook Express

O42 - Logiciel: Virtual Skipper 4 1.5.4 - (.Nadeo.) [HKLM] -- Vsk4_is1

O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify

O42 - Logiciel: Windows Genuine Advantage v1.3.0254.0 - (.Microsoft.) [HKLM] -- {63569CE9-FA00-469C-AF5C-E5D4D93ACF91}

O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {F59A9E08-A6A4-4ACF-91F2-D0344956C30B}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\2LMultimedia]

[HKCU\Software\3rd Eye Solutions]

[HKCU\Software\Adobe]

[HKCU\Software\Analog Devices]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\BackWeb]

[HKCU\Software\CDDB]

[HKCU\Software\CISRA]

[HKCU\Software\Canal+ Active]

[HKCU\Software\Canon]

[HKCU\Software\Classes]

[HKCU\Software\Clubinternet_FR]

[HKCU\Software\F-Secure]

[HKCU\Software\Google]

[HKCU\Software\HP]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\IM Providers]

[HKCU\Software\Intel]

[HKCU\Software\InterVideo]

[HKCU\Software\JavaSoft]

[HKCU\Software\Lake]

[HKCU\Software\Leadertech]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\LogiShrd]

[HKCU\Software\Logitech]

[HKCU\Software\Macromedia]

[HKCU\Software\Motive]

[HKCU\Software\Nadeo]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\ORL]

[HKCU\Software\PIXELA]

[HKCU\Software\Policies]

[HKCU\Software\Samsung]

[HKCU\Software\Skype]

[HKCU\Software\Sonic]

[HKCU\Software\Sony Corporation]

[HKCU\Software\Symantec]

[HKCU\Software\Synaptics]

[HKCU\Software\Sysinternals]

[HKCU\Software\TOSHIBA]

[HKCU\Software\Talkway Communications]

[HKCU\Software\Trend Micro]

[HKCU\Software\Trolltech]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\keyhole.com]

[HKLM\Software\ATI Technologies Inc.]

[HKLM\Software\ATI Technologies]

[HKLM\Software\Adobe]

[HKLM\Software\AdwCleaner]

[HKLM\Software\Agere]

[HKLM\Software\Analog Devices]

[HKLM\Software\Andrea Electronics]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\BrowserChoice]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CISRA]

[HKLM\Software\Canal+ Active]

[HKLM\Software\Canon]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\Clubinternet_FR]

[HKLM\Software\Data Fellows]

[HKLM\Software\GEAR Software]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\HP]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\ICE]

[HKLM\Software\INTEL]

[HKLM\Software\InstallShield]

[HKLM\Software\InstalledOptions]

[HKLM\Software\InterVideo]

[HKLM\Software\JavaSoft]

[HKLM\Software\LEAD Technologies, Inc.]

[HKLM\Software\Lake]

[HKLM\Software\LogiShrd]

[HKLM\Software\Logitech]

[HKLM\Software\Lucent]

[HKLM\Software\Macromedia]

[HKLM\Software\MarkAny]

[HKLM\Software\McAfee.com]

[HKLM\Software\Motive]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NOS]

[HKLM\Software\Nadeo]

[HKLM\Software\ODBC]

[HKLM\Software\OldTimer Tools]

[HKLM\Software\Orange]

[HKLM\Software\PIXELA]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Samsung]

[HKLM\Software\Schlumberger]

[HKLM\Software\Secure]

[HKLM\Software\Skype]

[HKLM\Software\SoftShape]

[HKLM\Software\Sonic]

[HKLM\Software\Staccato]

[HKLM\Software\Symantec]

[HKLM\Software\Synaptics]

[HKLM\Software\TENCENT]

[HKLM\Software\TOSHIBA]

[HKLM\Software\Talkway Communications]

[HKLM\Software\The Silicon Realms Toolworks]

[HKLM\Software\TrendMicro]

[HKLM\Software\Unisys Corporation]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\optimidata]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 09/06/2009 - 18:58:06 - [238,621] ----D- C:\Program Files\Adobe

O43 - CFD: 16/06/2005 - 08:30:08 - [4,082] ----D- C:\Program Files\Analog Devices

O43 - CFD: 06/05/2010 - 13:17:52 - [2,200] ----D- C:\Program Files\Apple Software Update

O43 - CFD: 16/06/2005 - 08:26:46 - [0,898] ----D- C:\Program Files\ATI Technologies

O43 - CFD: 18/05/2011 - 21:35:20 - [0,592] ----D- C:\Program Files\Bonjour

O43 - CFD: 29/08/2006 - 22:29:58 - [174,968] ----D- C:\Program Files\Canon

O43 - CFD: 25/11/2009 - 01:12:26 - [33,247] ----D- C:\Program Files\Club-Internet

O43 - CFD: 09/06/2009 - 19:03:30 - [13,545] ----D- C:\Program Files\Common Files

O43 - CFD: 09/12/2011 - 15:03:34 - [428,159] ----D- C:\Program Files\F-Secure

O43 - CFD: 15/11/2011 - 19:55:48 - [457,454] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 17/11/2011 - 13:28:32 - [127,790] ----D- C:\Program Files\Google

O43 - CFD: 08/10/2005 - 17:58:38 - [3,949] ----D- C:\Program Files\Hewlett-Packard

O43 - CFD: 08/10/2005 - 18:01:54 - [260,764] ----D- C:\Program Files\HP

O43 - CFD: 19/01/2011 - 01:14:50 - [64,012] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 25/01/2005 - 10:49:12 - [0,045] ----D- C:\Program Files\Intel

O43 - CFD: 24/10/2011 - 23:14:52 - [5,595] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 25/01/2005 - 13:13:08 - [32,565] ----D- C:\Program Files\InterVideo

O43 - CFD: 18/05/2011 - 21:41:48 - [1,771] ----D- C:\Program Files\iPod

O43 - CFD: 18/05/2011 - 21:42:58 - [122,258] ----D- C:\Program Files\iTunes

O43 - CFD: 24/01/2005 - 12:55:54 - [68,998] ----D- C:\Program Files\Java

O43 - CFD: 01/11/2010 - 22:22:06 - [10,098] ----D- C:\Program Files\Lecteur CANALPLAY

O43 - CFD: 23/06/2010 - 18:55:20 - [59,633] ----D- C:\Program Files\Logitech

O43 - CFD: 25/01/2005 - 11:09:38 - [0,342] ----D- C:\Program Files\ltmoh

O43 - CFD: 19/01/2011 - 01:15:42 - [2,447] ----D- C:\Program Files\MarkAny

O43 - CFD: 09/06/2009 - 18:59:10 - [0] ----D- C:\Program Files\Mes Jeux Installés

O43 - CFD: 23/10/2008 - 22:22:30 - [2,053] ----D- C:\Program Files\Messenger

O43 - CFD: 10/09/2010 - 18:47:16 - [0,216] ----D- C:\Program Files\Microsoft

O43 - CFD: 11/09/2010 - 16:33:22 - [0,764] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 24/01/2005 - 12:44:10 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 13/07/2011 - 14:23:48 - [330,672] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 16/06/2005 - 09:31:32 - [142,728] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 25/01/2005 - 13:46:06 - [0,301] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 09/06/2009 - 19:03:10 - [1,253] ----D- C:\Program Files\Motive

O43 - CFD: 23/08/2010 - 23:52:58 - [9,894] ----D- C:\Program Files\Movie Maker

O43 - CFD: 16/01/2011 - 01:13:12 - [0,025] ----D- C:\Program Files\MSBuild

O43 - CFD: 19/09/2010 - 23:26:04 - [38,094] ----D- C:\Program Files\MSECache

O43 - CFD: 28/09/2007 - 17:22:40 - [20,477] ----D- C:\Program Files\MSN

O43 - CFD: 24/01/2005 - 12:39:40 - [8,341] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 19/02/2006 - 00:00:00 - [37,204] ----D- C:\Program Files\MSN Toolbar Suite

O43 - CFD: 25/11/2009 - 02:06:14 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 23/10/2008 - 22:14:52 - [3,133] ----D- C:\Program Files\NetMeeting

O43 - CFD: 24/01/2005 - 12:39:50 - [0,002] ----D- C:\Program Files\Online Services

O43 - CFD: 14/11/2010 - 23:35:26 - [1,141] ----D- C:\Program Files\Orange

O43 - CFD: 16/12/2010 - 00:35:48 - [4,176] ----D- C:\Program Files\Outlook Express

O43 - CFD: 05/05/2007 - 16:44:02 - [159,701] ----D- C:\Program Files\PIXELA

O43 - CFD: 08/12/2010 - 23:08:14 - [72,787] ----D- C:\Program Files\QuickTime

O43 - CFD: 16/01/2011 - 01:12:52 - [34,715] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 19/01/2011 - 01:17:18 - [202,592] ----D- C:\Program Files\Samsung

O43 - CFD: 14/11/2011 - 22:59:18 - [0,482] ----D- C:\Program Files\SEAF

O43 - CFD: 24/01/2005 - 12:42:08 - [0,001] ----D- C:\Program Files\Services en ligne

O43 - CFD: 15/11/2011 - 19:57:20 - [31,089] R---D- C:\Program Files\Skype

O43 - CFD: 25/01/2005 - 13:25:34 - [32,680] ----D- C:\Program Files\Sonic

O43 - CFD: 25/01/2005 - 11:02:14 - [25,185] ----D- C:\Program Files\Synaptics

O43 - CFD: 21/10/2005 - 18:40:06 - [0,303] ----D- C:\Program Files\Talkway

O43 - CFD: 31/07/2007 - 16:09:40 - [78,472] ----D- C:\Program Files\TOSHIBA

O43 - CFD: 14/11/2011 - 00:31:16 - [0,370] ----D- C:\Program Files\Trend Micro

O43 - CFD: 10/12/2005 - 23:33:42 - [706,075] ----D- C:\Program Files\Virtual Skipper 4

O43 - CFD: 13/10/2011 - 18:51:44 - [78,125] ----D- C:\Program Files\Windows Live

O43 - CFD: 10/09/2010 - 18:46:52 - [0,234] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 13/05/2007 - 14:57:08 - [3,415] ----D- C:\Program Files\Windows Media Connect 2

O43 - CFD: 03/09/2009 - 00:05:42 - [8,906] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 23/10/2008 - 22:14:42 - [3,760] ----D- C:\Program Files\Windows NT

O43 - CFD: 24/01/2005 - 12:44:10 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 09/12/2011 - 17:51:00 - [9,478] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 09/06/2009 - 19:04:12 - [13,545] ----D- C:\Program Files\Common Files\Motive

O43 - CFD: 25/02/2009 - 23:20:42 - [4,408] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 18/05/2011 - 21:41:44 - [87,501] ----D- C:\Program Files\Fichiers Communs\Apple

O43 - CFD: 10/01/2006 - 17:48:52 - [0,082] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 08/10/2005 - 17:57:38 - [0,271] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard

O43 - CFD: 08/10/2005 - 18:00:46 - [3,743] ----D- C:\Program Files\Fichiers Communs\HP

O43 - CFD: 25/01/2005 - 11:03:44 - [20,182] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 24/01/2005 - 12:55:52 - [25,370] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 23/06/2010 - 18:54:20 - [76,887] ----D- C:\Program Files\Fichiers Communs\LogiShrd

O43 - CFD: 19/09/2010 - 23:26:30 - [212,088] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 09/06/2009 - 19:03:44 - [0] ----D- C:\Program Files\Fichiers Communs\Motive

O43 - CFD: 24/01/2005 - 12:41:24 - [0,271] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 11/09/2010 - 16:26:48 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 14/01/2011 - 22:56:34 - [0,002] ----D- C:\Program Files\Fichiers Communs\Samsung

O43 - CFD: 24/01/2005 - 12:41:28 - [0,008] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 24/01/2005 - 13:33:22 - [3,612] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 10/01/2006 - 16:56:18 - [3,737] ----D- C:\Program Files\Fichiers Communs\Symantec Shared

O43 - CFD: 23/10/2008 - 22:14:38 - [19,234] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 21/10/2005 - 18:40:08 - [0,059] ----D- C:\Program Files\Fichiers Communs\Talkway

O43 - CFD: 10/09/2010 - 18:25:14 - [0] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 11/02/2008 - 21:25:00 - [50,076] ----D- C:\Documents and Settings\Nicolas\Application Data\Adobe

O43 - CFD: 05/06/2008 - 15:51:42 - [0,000] ----D- C:\Documents and Settings\Nicolas\Application Data\AdobeUM

O43 - CFD: 10/01/2011 - 00:46:20 - [0,296] ----D- C:\Documents and Settings\Nicolas\Application Data\Apple Computer

O43 - CFD: 18/04/2006 - 22:39:44 - [0,052] ----D- C:\Documents and Settings\Nicolas\Application Data\F-Secure

O43 - CFD: 16/09/2006 - 15:48:30 - [0,112] ----D- C:\Documents and Settings\Nicolas\Application Data\Google

O43 - CFD: 31/08/2008 - 23:16:18 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\Help

O43 - CFD: 24/01/2005 - 13:27:44 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\Identities

O43 - CFD: 07/10/2005 - 17:20:08 - [0] ----D- C:\Documents and Settings\Nicolas\Application Data\InterVideo

O43 - CFD: 23/06/2010 - 18:55:02 - [0,000] ----D- C:\Documents and Settings\Nicolas\Application Data\Leadertech

O43 - CFD: 21/10/2005 - 18:40:52 - [0,000] ----D- C:\Documents and Settings\Nicolas\Application Data\Macromedia

O43 - CFD: 31/07/2011 - 02:44:24 - [10,577] ----D- C:\Documents and Settings\Nicolas\Application Data\mediamove for Lexar Media

O43 - CFD: 19/09/2010 - 23:28:14 - [7,620] -S--D- C:\Documents and Settings\Nicolas\Application Data\Microsoft

O43 - CFD: 19/02/2006 - 00:08:06 - [0,000] ----D- C:\Documents and Settings\Nicolas\Application Data\MSN Search Toolbar

O43 - CFD: 05/05/2007 - 18:55:32 - [0,002] ----D- C:\Documents and Settings\Nicolas\Application Data\Pixela

O43 - CFD: 19/01/2011 - 01:10:40 - [6,109] ----D- C:\Documents and Settings\Nicolas\Application Data\Samsung

O43 - CFD: 05/12/2011 - 00:43:36 - [9,087] ----D- C:\Documents and Settings\Nicolas\Application Data\Skype

O43 - CFD: 15/11/2011 - 19:31:12 - [0,020] ----D- C:\Documents and Settings\Nicolas\Application Data\skypePM

O43 - CFD: 25/01/2005 - 13:18:24 - [0,062] ----D- C:\Documents and Settings\Nicolas\Application Data\Sonic

O43 - CFD: 04/11/2005 - 14:07:38 - [0,002] ----D- C:\Documents and Settings\Nicolas\Application Data\Sun

O43 - CFD: 07/10/2005 - 17:12:16 - [0,014] ----D- C:\Documents and Settings\Nicolas\Application Data\Symantec

O43 - CFD: 09/10/2005 - 18:28:36 - [0,008] ----D- C:\Documents and Settings\Nicolas\Application Data\Template

O43 - CFD: 25/01/2005 - 12:24:10 - [0,000] ----D- C:\Documents and Settings\Nicolas\Application Data\toshiba

O43 - CFD: 25/02/2009 - 23:23:06 - [45,602] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Adobe

O43 - CFD: 28/03/2010 - 20:08:00 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Apple

O43 - CFD: 19/05/2006 - 17:33:02 - [3,580] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Apple Computer

O43 - CFD: 09/12/2011 - 15:12:48 - [0,040] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 29/09/2010 - 18:19:38 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Club Internet

O43 - CFD: 19/01/2011 - 01:01:06 - [85,447] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Downloaded Installations

O43 - CFD: 13/11/2011 - 23:23:18 - [900,279] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Google

O43 - CFD: 31/08/2008 - 23:16:18 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Help

O43 - CFD: 08/10/2005 - 18:14:00 - [13,936] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\HP

O43 - CFD: 08/10/2005 - 15:17:02 - [0,289] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Identities

O43 - CFD: 08/10/2005 - 18:23:54 - [0,001] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\IsolatedStorage

O43 - CFD: 23/06/2010 - 18:55:48 - [1,777] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\LogiShrd

O43 - CFD: 10/09/2010 - 18:56:12 - [164,749] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Microsoft

O43 - CFD: 15/08/2011 - 20:13:26 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\PCHealth

O43 - CFD: 19/01/2011 - 01:19:50 - [0,012] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Samsung

O43 - CFD: 04/05/2011 - 21:58:16 - [0] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\Temp

O43 - CFD: 24/01/2005 - 12:55:46 - [9,907] ----D- C:\Documents and Settings\Nicolas\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150000}

~ Scan Program Folder in 00mn 39s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.C2FED08B378D03534D56134A8F74E84A] - 09/12/2011 - 17:47:25 ---A- . (...) -- C:\WINDOWS\wiadebug.log [211]

O44 - LFC:[MD5.A6253527F40FBA7FF9CDF3AFFACD8738] - 09/12/2011 - 17:33:56 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1184894]

O44 - LFC:[MD5.890B52C669D191BED788723AC787B169] - 09/12/2011 - 15:11:38 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [1158]

O44 - LFC:[MD5.1D9BBC4959147311901D9A4DBBC91BEE] - 09/12/2011 - 14:57:55 ---A- . (...) -- C:\WINDOWS\FSSTM.LOG [13702]

O44 - LFC:[MD5.18F8205D5A54443FE45E3623871B078A] - 09/12/2011 - 14:57:46 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/12/2011 - 14:57:33 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 09/12/2011 - 14:57:29 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.C53792CA8A9AE3957D3EC69B3E483389] - 08/12/2011 - 01:02:23 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32390]

O44 - LFC:[MD5.94CC0D084E4AA383B6521850E6010AB8] - 03/12/2011 - 19:18:18 ---A- . (...) -- C:\WINDOWS\setupapi.log [280146]

O44 - LFC:[MD5.8F71A250C4A8257EE0CDA01F6791B3E9] - 03/12/2011 - 19:18:13 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [414368]

O44 - LFC:[MD5.C6EDFE920EE8B7EB76A18AC3D0515984] - 23/11/2011 - 23:19:41 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [75968]

O44 - LFC:[MD5.7EFFA90218495A3807A0593B79E0230F] - 23/11/2011 - 23:19:41 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [89572]

O44 - LFC:[MD5.4294525C6C2FCEB662F1F503A3BE7448] - 23/11/2011 - 23:19:41 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [451976]

O44 - LFC:[MD5.51ED1CCC4F52F2BC12C68142BAEC7343] - 23/11/2011 - 23:19:41 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [521350]

O44 - LFC:[MD5.7AB111934BFC3C68B3484906275AC1B9] - 23/11/2011 - 23:19:40 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1148854]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/11/2011 - 19:28:33 ---A- . (...) -- C:\WINDOWS\system32\drivers\lvuvc.hs [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/11/2011 - 19:28:20 ---A- . (...) -- C:\WINDOWS\system32\drivers\logiflt.iad [0]

O44 - LFC:[MD5.B34D8FCA303A22A735D9C3CA2E39E13A] - 13/11/2011 - 23:15:44 ---A- . (...) -- C:\WINDOWS\iis6.log [392528]

O44 - LFC:[MD5.670C7AA9F2E75746CA06EF2F31E75794] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [2458617]

O44 - LFC:[MD5.A345C6D50BD0F56E97D3AA7467EEEE86] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\KB2544893-v2.log [12548]

O44 - LFC:[MD5.82BE8ADF1A6CBAB42488518DE5493F51] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\comsetup.log [794859]

O44 - LFC:[MD5.CE30B3A29C67F79B0C97255940E3AD45] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\imsins.log [1393]

O44 - LFC:[MD5.DB3C5176C52775F563E68F082024939A] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\msgsocm.log [123338]

O44 - LFC:[MD5.4A70909EBE5CA0BCD1CD0C162F9C2436] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [482618]

O44 - LFC:[MD5.69460E6ECF8B36D8DF0C37293F91A2AA] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\ocgen.log [1186469]

O44 - LFC:[MD5.99B6F34B89D28F0F97D32E839236A6F4] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\ocmsn.log [131207]

O44 - LFC:[MD5.51DA736DB59581074E829266B6FFD6FC] - 13/11/2011 - 23:15:43 ---A- . (...) -- C:\WINDOWS\tsoc.log [948406]

O44 - LFC:[MD5.EBB353A88C64B01829B129559516E132] - 13/11/2011 - 23:10:53 ---A- . (...) -- C:\WINDOWS\KB2641690.log [13305]

O44 - LFC:[MD5.C34AC81994E04A72FAE03654DC3F9C8D] - 13/11/2011 - 23:10:53 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1393]

O44 - LFC:[MD5.895CD6A6550778F797B7652CE7EE3B41] - 13/11/2011 - 23:10:01 ---A- . (...) -- C:\WINDOWS\updspapi.log [493243]

~ Scan Files in 02mn 47s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.6931BCB1C1DAA48E77BDF3032EB10EAE] - 09/12/2011 - 14:59:22 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.342E46651A2EA888908D9565D869ABB6] - 09/12/2011 - 15:11:38 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-26322309.pf

O45 - LFCP:[MD5.2BC8168C3D543EF31068D486721F83C8] - 09/12/2011 - 15:11:53 ---A- - C:\WINDOWS\Prefetch\MSN_SL.EXE-047411B3.pf

O45 - LFCP:[MD5.D645DF3AB7CC86FD33CFDFA4562196D0] - 09/12/2011 - 15:11:58 ---A- - C:\WINDOWS\Prefetch\SYNTPLPR.EXE-28BB9F3B.pf

O45 - LFCP:[MD5.F13C8C4CFBB1787335F1431DE5B25426] - 09/12/2011 - 15:11:58 ---A- - C:\WINDOWS\Prefetch\TVSTRAY.EXE-157920F2.pf

O45 - LFCP:[MD5.6D7A6B42E642A87C9823C6F460D7CD33] - 09/12/2011 - 15:12:09 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:[MD5.05E2282344A738E19CDB7BD4E3173506] - 09/12/2011 - 15:12:24 ---A- - C:\WINDOWS\Prefetch\COCIMANAGER.EXE-046DBC57.pf

O45 - LFCP:[MD5.1D84A9B8F330BD71DC6EFABDE494CE40] - 09/12/2011 - 15:12:29 ---A- - C:\WINDOWS\Prefetch\KIESHELPER.EXE-31380185.pf

O45 - LFCP:[MD5.2B706178D6DEB1ABEFA093808A7B9015] - 09/12/2011 - 15:12:29 ---A- - C:\WINDOWS\Prefetch\KIESTRAYAGENT.EXE-2338B09E.pf

O45 - LFCP:[MD5.386741F123DC69AE65149E85BA20E762] - 09/12/2011 - 15:12:29 ---A- - C:\WINDOWS\Prefetch\MPBTN.EXE-2FAB7DA0.pf

O45 - LFCP:[MD5.317919FE15382A71EF481C5FD695B4C6] - 09/12/2011 - 15:12:34 ---A- - C:\WINDOWS\Prefetch\HPQTHB08.EXE-060DCF16.pf

O45 - LFCP:[MD5.7A2D98B4443CAE8F897048AD764C133D] - 09/12/2011 - 15:12:34 ---A- - C:\WINDOWS\Prefetch\IMX3LAUNCHER.EXE-173DE365.pf

O45 - LFCP:[MD5.F5ED809D61FAC1C8018ED4D6108A1557] - 09/12/2011 - 15:12:37 ---A- - C:\WINDOWS\Prefetch\ONENOTEM.EXE-3861D1B6.pf

O45 - LFCP:[MD5.CA46FDDD17D0186C78AC99CAC572F52B] - 09/12/2011 - 15:12:44 ---A- - C:\WINDOWS\Prefetch\WINDOWSSEARCHINDEXER.EXE-158AA150.pf

O45 - LFCP:[MD5.DD28F003C6322E5634958022F92B277F] - 09/12/2011 - 15:13:03 ---A- - C:\WINDOWS\Prefetch\IPODSERVICE.EXE-3192DE38.pf

O45 - LFCP:[MD5.946F190DA4DDF199AA6ABFF56EBBB71F] - 09/12/2011 - 15:13:09 ---A- - C:\WINDOWS\Prefetch\HPQGALRY.EXE-07140C25.pf

O45 - LFCP:[MD5.5E15582A47F7EA2FA1E294404E7E375D] - 09/12/2011 - 15:13:37 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf

O45 - LFCP:[MD5.6ACD6D7A92189B82E708DA7E147639AC] - 09/12/2011 - 15:14:05 ---A- - C:\WINDOWS\Prefetch\DEVICEMANAGER.EXE-30082278.pf

O45 - LFCP:[MD5.BD9FFF044D551B73EDAEBA27B10F78F5] - 09/12/2011 - 15:14:09 ---A- - C:\WINDOWS\Prefetch\CONNECTIONMANAGER.EXE-3A872C5F.pf

O45 - LFCP:[MD5.B278FC33A7D562F9D45F0B22A38F22AC] - 09/12/2011 - 15:14:27 ---A- - C:\WINDOWS\Prefetch\LOGITECHUPDATE.EXE-09DF4673.pf

O45 - LFCP:[MD5.6E3E522E9157AE530D3F1EBC039485BF] - 09/12/2011 - 15:14:27 ---A- - C:\WINDOWS\Prefetch\LULNCHR.EXE-016ABA85.pf

O45 - LFCP:[MD5.2E8835552ADA194E29AD8038A4DFBA1B] - 09/12/2011 - 15:14:35 ---A- - C:\WINDOWS\Prefetch\PRESENTATIONFONTCACHE.EXE-1706C4D2.pf

O45 - LFCP:[MD5.397C28A4F26B19C2D8DBAF852506B471] - 09/12/2011 - 15:16:10 ---A- - C:\WINDOWS\Prefetch\MSFEEDSSYNC.EXE-25E13438.pf

O45 - LFCP:[MD5.F939F667BABFC899219775D866682F71] - 09/12/2011 - 15:27:20 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.67D592CB1E0160B9BA37F6F1E6129020] - 09/12/2011 - 15:28:42 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.D4FD637DBB11FED5B3B5158C0334CFDB] - 09/12/2011 - 16:01:53 ---A- - C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf

O45 - LFCP:[MD5.2E57B38912EE652541F7C6B71BD97C82] - 09/12/2011 - 16:02:09 ---A- - C:\WINDOWS\Prefetch\HPRBLOG.EXE-35C0D80C.pf

O45 - LFCP:[MD5.0F37B798B993CE1628B6C8A988603281] - 09/12/2011 - 16:02:47 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATEONDEMAND.EXE-01935369.pf

O45 - LFCP:[MD5.627C5EB441F2C0A176D335660967B159] - 09/12/2011 - 16:02:48 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARMANAGER_C2F5B49B-16C3D24F.pf

O45 - LFCP:[MD5.CAE9FFAEC2334CB3F9D47A2BC3306382] - 09/12/2011 - 16:02:57 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf

O45 - LFCP:[MD5.3AE7D07CB6D76FC0C1FF364B4A0F0DC3] - 09/12/2011 - 16:12:17 ---A- - C:\WINDOWS\Prefetch\SSFLWBOX.SCR-12F43B2F.pf

O45 - LFCP:[MD5.6E911D1179FFECCF6181AE053C1A648C] - 09/12/2011 - 16:27:17 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.54CA8DD978B71BCBAD2547B1C24CB62C] - 09/12/2011 - 17:18:51 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf

O45 - LFCP:[MD5.1FD0ECDB40F3492C7B1E8168DCAA46B9] - 09/12/2011 - 17:18:53 ---A- - C:\WINDOWS\Prefetch\TNBUTIL.EXE-2EBD29F1.pf

O45 - LFCP:[MD5.A8B90378B2432CEB88D1D27E3E102950] - 09/12/2011 - 17:19:01 ---A- - C:\WINDOWS\Prefetch\HPZIPM12.EXE-145E7369.pf

O45 - LFCP:[MD5.6610E05507FD6C02BF8CF22CB2A0C9D5] - 09/12/2011 - 17:19:03 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf

O45 - LFCP:[MD5.D00DEC5177F8E7148D3DBB4753E813A2] - 09/12/2011 - 17:19:49 ---A- - C:\WINDOWS\Prefetch\WLLOGINPROXY.EXE-2D4B6027.pf

O45 - LFCP:[MD5.DF13DF76BCEACB49868ADDEDE35C1318] - 09/12/2011 - 17:24:00 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-1E123D86.pf

O45 - LFCP:[MD5.16C0A5CA71570FBDDE8EAD666CAAD022] - 09/12/2011 - 17:29:48 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-2C845F62.pf

O45 - LFCP:[MD5.520D617F50222B95E07190FF34E7A9FD] - 09/12/2011 - 17:34:02 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.15AC5AF0B2EAEC1E123F65ABDAB24309] - 09/12/2011 - 17:42:20 ---A- - C:\WINDOWS\Prefetch\WINWORD.EXE-37F6AE09.pf

O45 - LFCP:[MD5.A1EB403DEC535F3FABE7E948B86662E1] - 09/12/2011 - 17:42:29 ---A- - C:\WINDOWS\Prefetch\HPZSTC12.EXE-2A807C2C.pf

O45 - LFCP:[MD5.7BC31AC2B2D98A6055EC564CB3319626] - 09/12/2011 - 17:42:38 ---A- - C:\WINDOWS\Prefetch\HPZENG12.EXE-07E42CEC.pf

O45 - LFCP:[MD5.4CE608C5111DB506C22A84F2940BAF05] - 09/12/2011 - 17:45:00 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf

O45 - LFCP:[MD5.822019F59E19614989DB3B322A855C03] - 09/12/2011 - 17:46:03 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-00817841.pf

O45 - LFCP:[MD5.330C1BA12B5E88845A3ECE004E92A5AD] - 09/12/2011 - 17:46:38 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-0A5BF4C8.pf

O45 - LFCP:[MD5.34B17A4584ED75C394787BD5109D38D0] - 09/12/2011 - 17:47:08 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-071D37D0.pf

O45 - LFCP:[MD5.6C3473B1D5DD118740868C4AE83C94DE] - 09/12/2011 - 17:47:08 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-21021B33.pf

O45 - LFCP:[MD5.73F5041BF18D43874225D46CDD9AA77F] - 09/12/2011 - 17:48:13 ---A- - C:\WINDOWS\Prefetch\WINDOWSSEARCHFILTER.EXE-0C0DB978.pf

O45 - LFCP:[MD5.0337810E1B8A666EE1077B9B848F4CCC] - 09/12/2011 - 17:49:42 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:[MD5.2F8E8C581B0E20F9C4D928AAFEC498C1] - 09/12/2011 - 17:50:53 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf

O45 - LFCP:[MD5.B39452A32C8EFD6FB093B285FE93072B] - 09/12/2011 - 17:51:10 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

~ Scan Prefetcher in 00mn 01s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe" [Enabled] .(.TOSHIBA CORPORATION - ConfigFree SUMMIT Engine.) -- C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(...) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Logitech\Logitech Vid\Vid.exe" [Enabled] .(.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\WINDOWS\system32\muzapp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Veetle\Player\VeetleNet.exe" [Enabled] .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(...) -- C:\Program Files\MSN Messenger\livecall.exe (.not file.)

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Veetle\Player\VeetleNet.exe" [Enabled] .(...) -- C:\Program Files\Veetle\Player\VeetleNet.exe (.not file.)

~ Scan Keys in 00mn 01s

 

 

 

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51) (None)

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\system32\lvcodec2.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.LEAD"="LCODCCMP.DLL" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53) (None)

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.F13D8E7E1FAA31019C25EB17B5FB2662] - 09/12/2011 - 07:29:50 ---A- . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys [129280]

O58 - SDL:[MD5.B06D36C988152B4C8DEA71235F6D1011] - 09/12/2011 - 22:37:50 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [1270572]

O58 - SDL:[MD5.37E1A3630872B3CCAA45E2468F437DF0] - 09/12/2011 - 00:45:36 ---A- . (.Atheros Communications, Inc. - Driver for Atheros AR5001 Wireless Network Adapter.) -- C:\WINDOWS\system32\drivers\ar5211.sys [393600]

O58 - SDL:[MD5.2FBDFEC8CD60CEC3D55E615865333033] - 09/12/2011 - 22:00:58 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [1034752]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 09/12/2011 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 09/12/2011 - 12:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.6BD1BE810AEF19DBA8BAC4819D7FDF9C] - 09/12/2011 - 16:10:54 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\WINDOWS\system32\drivers\dgderdrv.sys [18120]

O58 - SDL:[MD5.F41619AE216B51D68DDA163805EEFAA9] - 09/12/2011 - 03:21:00 ---A- . (.Sonic Solutions - Device Driver.) -- C:\WINDOWS\system32\drivers\drvmcdb.sys [87168]

O58 - SDL:[MD5.B295700E684ED1984DB1D6BE40354421] - 09/12/2011 - 02:56:00 ---A- . (.Sonic Solutions - Device Driver Manager.) -- C:\WINDOWS\system32\drivers\drvnddm.sys [40448]

O58 - SDL:[MD5.343786E182B9C9AE3066E00DEC650F50] - 09/12/2011 - 20:26:14 ---A- . (...) -- C:\WINDOWS\system32\drivers\fsbts.sys [42672]

O58 - SDL:[MD5.5636F999A6C2568C4BCB3DF150DCF0A7] - 09/12/2011 - 11:18:38 ---A- . (.F-Secure Corporation - F-Secure Internet Shield Driver.) -- C:\WINDOWS\system32\drivers\fsdfw.sys [79872]

O58 - SDL:[MD5.C52E8C821E326CDA4FA0D1654E10C154] - 09/12/2011 - 11:01:38 ---A- . (.F-Secure Corporation - F-Secure Network Interceptor.) -- C:\WINDOWS\system32\drivers\fsndis5.sys [33584]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 09/12/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.9F1D80908658EB7F1BF70809E0B51470] - 09/12/2011 - 20:06:28 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZid412.sys [51120]

O58 - SDL:[MD5.F7E3E9D50F9CD3DE28085A8FDAA0A1C3] - 09/12/2011 - 20:06:28 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys [16496]

O58 - SDL:[MD5.CF1B7951B4EC8D13F3C93B74BB2B461B] - 09/12/2011 - 20:06:28 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys [21744]

O58 - SDL:[MD5.C57C48FB9AE3EFB9848AF594E3123A63] - 09/12/2011 - 15:00:12 ---A- . (...) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys [25624]

O58 - SDL:[MD5.87ECCE893D8AEC5A9337B917742D339C] - 09/12/2011 - 00:01:36 R--A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\WINDOWS\system32\drivers\lvrs.sys [265496]

O58 - SDL:[MD5.291F69B3DDA0F033D2490C5BA5179F7C] - 09/12/2011 - 00:03:08 R--A- . (.Logitech Inc. - Logitech USB Video Class Driver.) -- C:\WINDOWS\system32\drivers\lvuvc.sys [6754712]

O58 - SDL:[MD5.A75DDC492D2D1D6558AD8003A4ADB73A] - 09/12/2011 - 00:03:30 R--A- . (.Logitech Inc. - Logitech USB Video Class Filter Driver.) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys [23832]

O58 - SDL:[MD5.7420B0C35BE9D7E9651CEB1456948C87] - 09/12/2011 - 14:28:02 ---A- . (.Toshiba Corporation - Toshiba Notebook PC SMI Driver.) -- C:\WINDOWS\system32\drivers\NBSMI.sys [4352]

O58 - SDL:[MD5.1265EB253ED4EBE4ACB3BD5F548FF796] - 09/12/2011 - 22:35:00 ---A- . (.TOSHIBA Corporation. - Network Device Usermode I/O protocol.) -- C:\WINDOWS\system32\drivers\Netdevio.sys [12032]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 09/12/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 09/12/2011 - 12:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.9AD4D2414B18900A192D47C417B01A13] - 09/12/2011 - 02:03:00 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys [20576]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 09/12/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 09/12/2011 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 09/12/2011 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.4C0D673281178CB496011A2E28571FC8] - 09/12/2011 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\drivers\sfdrv01.sys [50688]

O58 - SDL:[MD5.15BE2B5E4DC5B8623CF167720682ABC9] - 09/12/2011 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\drivers\sfhlp02.sys [6656]

O58 - SDL:[MD5.EFEBBC1D13FDB77A6AF4EDDFC7232EDF] - 09/12/2011 - 15:06:28 ---A- . (.Protection Technology - StarForce Protection Synchronization Driver.) -- C:\WINDOWS\system32\drivers\sfsync02.sys [19968]

O58 - SDL:[MD5.9EF50060CC7E6953BAB83F2A42CCC421] - 09/12/2011 - 18:01:51 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\WINDOWS\system32\drivers\sfvfs02.sys [66048]

O58 - SDL:[MD5.A8EB0AA07632A4C936FF6F8EDA5BDEAD] - 09/12/2011 - 11:19:58 ---A- . (.SMSC - SMSC IrCC NDIS 5.0 IrDA FIR Device Driver.) -- C:\WINDOWS\system32\drivers\smcirda.sys [46080]

O58 - SDL:[MD5.014AB093E6452EA88031BB6E22919BB5] - 09/12/2011 - 11:17:46 ---A- . (.Analog Devices, Inc. - SoundMAX Integrated Digital Audio.) -- C:\WINDOWS\system32\drivers\smwdm.sys [259648]

O58 - SDL:[MD5.D7968049BE0ADBB6A57CEE3960320911] - 09/12/2011 - 11:29:04 ---A- . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\system32\drivers\sscdbhk5.sys [5627]

O58 - SDL:[MD5.B2063CE662AF3AB20045121A5B716DF6] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG USB Composite Device V2 Driver.) -- C:\WINDOWS\system32\drivers\sscebus.sys [98560]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecm.sys [12416]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecmnt.sys [12416]

O58 - SDL:[MD5.66799DC0AFE3DCAF8368CAE17394A762] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 Filter Driver.) -- C:\WINDOWS\system32\drivers\sscemdfl.sys [14848]

O58 - SDL:[MD5.CBF03FFC08F8DB547BAB2F79AA663D16] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 WDM.) -- C:\WINDOWS\system32\drivers\sscemdm.sys [123648]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewh.sys [12288]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 09/12/2011 - 06:55:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewhnt.sys [12288]

O58 - SDL:[MD5.C3FFD65ABFB6441E7606CF74F1155273] - 09/12/2011 - 11:28:50 ---A- . (.Sonic Solutions - Shared Driver Component.) -- C:\WINDOWS\system32\drivers\ssrtln.sys [23545]

O58 - SDL:[MD5.F6770219B73BD989D5613D2E9C78A227] - 09/12/2011 - 23:14:04 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\WINDOWS\system32\drivers\SynTP.sys [185728]

O58 - SDL:[MD5.244CFBFFDEFB77F3DF571A8CD108FC06] - 09/12/2011 - 10:12:36 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\WINDOWS\system32\drivers\tifm21.sys [162560]

O58 - SDL:[MD5.78E9819E076B909541BD4A37F8F0668B] - 09/12/2011 - 05:51:58 ---A- . (.TOSHIBA Corporation - TOSHIBA SD Bluetooth Card #2 Driver.) -- C:\WINDOWS\system32\drivers\tosbtsd2.sys [21120]

O58 - SDL:[MD5.142B91503C45C1A05A355414E13A51D1] - 09/12/2011 - 00:27:28 ---A- . (.TOSHIBA Corporation - SD Bluetooth Transport Driver.) -- C:\WINDOWS\system32\drivers\tosdbt.sys [48640]

O58 - SDL:[MD5.62C57E7411B5F20980E70530CA69D5A7] - 09/12/2011 - 21:55:48 ---A- . (.TOSHIBA Corporation. - Toshiba Bluetooth HID mini port driver.) -- C:\WINDOWS\system32\drivers\Toshidpt.sys [2851]

O58 - SDL:[MD5.F3DB7683C34FCF389976DDF34AC6C718] - 09/12/2011 - 23:13:04 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth Port Emulation Driver.) -- C:\WINDOWS\system32\drivers\Tosporte.sys [49070]

O58 - SDL:[MD5.E53CB56E8CE6D5F74A8479FAF4FF8961] - 09/12/2011 - 06:18:32 ---A- . (.TOSHIBA CORPORATION - Bluetooth RF Bus Driver.) -- C:\WINDOWS\system32\drivers\TosRfbd.sys [96896]

O58 - SDL:[MD5.FE200EECE7521061CDAD658C6EE4F341] - 09/12/2011 - 01:07:32 ---A- . (.TOSHIBA Corporation - Bluetooth RFBNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys [36531]

O58 - SDL:[MD5.8EF8069EC1FDE5D924CBD9348F4787F8] - 09/12/2011 - 20:02:48 ---A- . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\system32\drivers\tosrfcom.sys [62959]

O58 - SDL:[MD5.CC42FDBE9760CA1639E23158AB995F98] - 09/12/2011 - 23:18:24 ---A- . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\WINDOWS\system32\drivers\Tosrfec.sys [8573]

O58 - SDL:[MD5.66E443CE97A3270C977EA21ABBE8E42D] - 09/12/2011 - 04:01:30 ---A- . (.TOSHIBA Corporation. - Bluetooth HID Driver from TOSHIBA.) -- C:\WINDOWS\system32\drivers\TosRfhid.sys [49536]

O58 - SDL:[MD5.AE5B75C86574A1BD0A093A9159F829F9] - 09/12/2011 - 00:24:20 ---A- . (.TOSHIBA Corporation. - Bluetooth LAN Emulation Driver.) -- C:\WINDOWS\system32\drivers\tosrflan.sys [25420]

O58 - SDL:[MD5.6C3B5204EA0CD610C847A6834913BC4E] - 09/12/2011 - 22:35:08 ---A- . (.TOSHIBA Corporation. - Bluetooth BNEP Driver.) -- C:\WINDOWS\system32\drivers\tosrfnds.sys [18308]

O58 - SDL:[MD5.87031831486F7ED4EAFEF27125BB56C8] - 09/12/2011 - 05:53:22 ---A- . (.TOSHIBA Corporation - Bluetooth TOSHIBA PC-Card Driver.) -- C:\WINDOWS\system32\drivers\TosRFPCC.sys [160672]

O58 - SDL:[MD5.12DC9BFBC63E9E60D68CCB1E966E6AEF] - 09/12/2011 - 17:42:34 ---A- . (.TOSHIBA Corporation - Bluetooth Audio Driver (WDM).) -- C:\WINDOWS\system32\drivers\TosRfSnd.sys [50176]

O58 - SDL:[MD5.9E8FC547B882B68006D935589110CFE0] - 09/12/2011 - 02:05:24 ---A- . (.TOSHIBA CORPORATION - Bluetooth USB Miniport Driver.) -- C:\WINDOWS\system32\drivers\tosrfusb.sys [35840]

O58 - SDL:[MD5.306E19413EADB0CA8842D5381A0354FC] - 09/12/2011 - 20:52:28 ---A- . (.TOSHIBA Corporation - Toshiba SD-IO Transport Driver.) -- C:\WINDOWS\system32\drivers\tostrans.sys [16320]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 09/12/2011 - 12:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.342574B9CE3ADEE78CB5D7D67C0B911E] - 09/12/2011 - 14:26:34 ---A- . (.Pas de propriétaire - SRS Labs TruSurround XT kernel DLL.) -- C:\WINDOWS\system32\drivers\TSXT_kern_i386.sys [29184]

O58 - SDL:[MD5.2FA539E0701CBAB260A055749D245620] - 09/12/2011 - 13:04:38 ---A- . (.TOSHIBA Corporation - TOSHIBA Audio Filter Driver.) -- C:\WINDOWS\system32\drivers\Tvs.sys [29056]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 09/12/2011 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.C89DA341FCC883A3D79DC11727484FC2] - 09/12/2011 - 02:48:10 ---A- . (.Intel® Corporation - Intel® Wireless LAN Driver.) -- C:\WINDOWS\system32\drivers\w29n51.sys [3222784]

O58 - SDL:[MD5.97EB24F1A5C3E78A61158B2531D61BA4] - 09/12/2011 - 09:16:10 ---A- . (.Pas de propriétaire - SRS Labs WOW XT kernel DLL.) -- C:\WINDOWS\system32\drivers\WOWXT_kern_i386.sys [28032]

O58 - SDL:[MD5.BAC4E920C920168C302C90C0F37740F6] - 09/12/2011 - 15:29:00 ---A- . (.Marvell - NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller.) -- C:\WINDOWS\system32\drivers\yk51x86.sys [224000]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.10398B515653442A5B89FDF6A1D06180] - 09/12/2011 - 22:23:40 ---A- . (...) -- C:\WINDOWS\system32\FsUsbExDisk.Sys [42112]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 09/12/2011 - 12:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.D74375BE63DCA31E6145248E4278893E] - 09/12/2011 - 09:54:14 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis4.sys [16848]

O58 - SDL:[MD5.FC6BAFC20114160A6291C1C45545F137] - 09/12/2011 - 09:54:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\Pcandis5.sys [17162]

~ Scan Drivers in 00mn 01s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 07/12/2011 - 23:22:10 ---A- C:\Documents And Settings\Nicolas\Bureau\TFC.exe [446464]

O61 - LFC:Last File Created 09/12/2011 - 00:02:03 ---A- C:\Documents And Settings\Nicolas\Cookies\8EL2YP8L.txt [107]

O61 - LFC:Last File Created 09/12/2011 - 00:02:16 ---A- C:\Documents And Settings\Nicolas\Cookies\ZZ7U5XBN.txt [73]

O61 - LFC:Last File Created 09/12/2011 - 00:02:21 ---A- C:\Documents And Settings\Nicolas\Cookies\7HO001IA.txt [663]

O61 - LFC:Last File Created 09/12/2011 - 00:02:24 ---A- C:\Documents And Settings\Nicolas\Cookies\OPCN85UE.txt [396]

O61 - LFC:Last File Created 09/12/2011 - 00:07:01 ---A- C:\Documents And Settings\Nicolas\Cookies\S2EKUYKS.txt [255]

O61 - LFC:Last File Created 09/12/2011 - 00:16:45 ---A- C:\Documents And Settings\Nicolas\Cookies\PAY94GE3.txt [178]

O61 - LFC:Last File Created 09/12/2011 - 00:16:52 ---A- C:\Documents And Settings\Nicolas\Cookies\HQ67BUJW.txt [663]

O61 - LFC:Last File Created 09/12/2011 - 00:17:04 ---A- C:\Documents And Settings\Nicolas\Cookies\0NDU9SDA.txt [451]

O61 - LFC:Last File Created 09/12/2011 - 00:18:14 ---A- C:\Documents And Settings\Nicolas\Application Data\Google\Local Search History\google%2Eweb.w [65088]

O61 - LFC:Last File Created 09/12/2011 - 00:18:35 ---A- C:\Documents And Settings\Nicolas\Application Data\Google\Local Search History\google%2Emaps.w [12958]

O61 - LFC:Last File Created 09/12/2011 - 00:37:19 ---A- C:\Documents And Settings\Nicolas\Cookies\40B48TVR.txt [648]

O61 - LFC:Last File Created 09/12/2011 - 00:43:42 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\16c1_appcompat.txt [4392]

O61 - LFC:Last File Created 09/12/2011 - 00:44:43 ---A- C:\Documents And Settings\Nicolas\Cookies\0GZXVGG4.txt [540]

O61 - LFC:Last File Created 09/12/2011 - 00:44:44 ---A- C:\Documents And Settings\Nicolas\Cookies\2Y53MCEW.txt [388]

O61 - LFC:Last File Created 09/12/2011 - 00:45:31 ---A- C:\Documents And Settings\Nicolas\Cookies\LTNWDX3W.txt [150]

O61 - LFC:Last File Created 09/12/2011 - 00:45:44 ---A- C:\Documents And Settings\Nicolas\Cookies\D84JZWGV.txt [256]

O61 - LFC:Last File Created 09/12/2011 - 00:46:19 ---A- C:\Documents And Settings\Nicolas\Cookies\MPDUC9WK.txt [1069]

O61 - LFC:Last File Created 09/12/2011 - 00:46:53 ---A- C:\Documents And Settings\Nicolas\Cookies\TPFNSWUB.txt [682]

O61 - LFC:Last File Created 09/12/2011 - 00:48:46 ---A- C:\Documents And Settings\Nicolas\Cookies\8S05D3U3.txt [722]

O61 - LFC:Last File Created 09/12/2011 - 00:50:59 ---A- C:\Documents And Settings\Nicolas\Cookies\1QQXPIEI.txt [301]

O61 - LFC:Last File Created 09/12/2011 - 00:51:02 ---A- C:\Documents And Settings\Nicolas\Cookies\VWFPQMI0.txt [486]

O61 - LFC:Last File Created 09/12/2011 - 00:52:15 ---A- C:\Documents And Settings\Nicolas\Cookies\2AUULN3O.txt [457]

O61 - LFC:Last File Created 09/12/2011 - 00:52:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\4AOAK0GC\www.seloger[1].xml [228]

O61 - LFC:Last File Created 09/12/2011 - 00:52:22 ---A- C:\Documents And Settings\Nicolas\Cookies\PT24H5H6.txt [102]

O61 - LFC:Last File Created 09/12/2011 - 00:54:52 ---A- C:\Documents And Settings\Nicolas\Cookies\238EHV51.txt [530]

O61 - LFC:Last File Created 09/12/2011 - 00:55:24 ---A- C:\Documents And Settings\Nicolas\Cookies\2IM7FU5I.txt [473]

O61 - LFC:Last File Created 09/12/2011 - 00:55:25 ---A- C:\Documents And Settings\Nicolas\Cookies\EJ5VI6IS.txt [585]

O61 - LFC:Last File Created 09/12/2011 - 00:55:25 ---A- C:\Documents And Settings\Nicolas\Cookies\LDA0ET8Y.txt [1299]

O61 - LFC:Last File Created 09/12/2011 - 00:55:26 ---A- C:\Documents And Settings\Nicolas\Cookies\KNX8A7JM.txt [698]

O61 - LFC:Last File Created 09/12/2011 - 00:55:26 ---A- C:\Documents And Settings\Nicolas\Cookies\RESJBHQP.txt [157]

O61 - LFC:Last File Created 09/12/2011 - 00:55:50 ---A- C:\Documents And Settings\Nicolas\Cookies\4ZLP7ZJ8.txt [432]

O61 - LFC:Last File Created 09/12/2011 - 00:55:51 ---A- C:\Documents And Settings\Nicolas\Cookies\D744BUPR.txt [214]

O61 - LFC:Last File Created 09/12/2011 - 00:55:51 ---A- C:\Documents And Settings\Nicolas\Cookies\O6PLKVMX.txt [966]

O61 - LFC:Last File Created 09/12/2011 - 00:56:13 ---A- C:\Documents And Settings\Nicolas\Cookies\VMKZD6JN.txt [1270]

O61 - LFC:Last File Created 09/12/2011 - 00:57:01 ---A- C:\Documents And Settings\Nicolas\Cookies\URS9XCSC.txt [641]

O61 - LFC:Last File Created 09/12/2011 - 00:57:36 ---A- C:\Documents And Settings\Nicolas\Cookies\3INQB3GZ.txt [709]

O61 - LFC:Last File Created 09/12/2011 - 00:58:17 ---A- C:\Documents And Settings\Nicolas\Cookies\4GJ7PQEY.txt [2562]

O61 - LFC:Last File Created 09/12/2011 - 00:58:18 ---A- C:\Documents And Settings\Nicolas\Cookies\OQ162832.txt [452]

O61 - LFC:Last File Created 09/12/2011 - 00:58:19 ---A- C:\Documents And Settings\Nicolas\Cookies\L9RGTZST.txt [997]

O61 - LFC:Last File Created 09/12/2011 - 00:59:05 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Historique\History.IE5\MSHist012011120820111209\index.dat [49152]

O61 - LFC:Last File Created 09/12/2011 - 00:59:09 ---A- C:\Documents And Settings\Nicolas\Cookies\7Y5S2CWE.txt [934]

O61 - LFC:Last File Created 09/12/2011 - 00:59:11 ---A- C:\Documents And Settings\Nicolas\Cookies\DJTLX8TC.txt [1168]

O61 - LFC:Last File Created 09/12/2011 - 00:59:16 ---A- C:\Documents And Settings\Nicolas\Cookies\J71M21B2.txt [422]

O61 - LFC:Last File Created 09/12/2011 - 00:59:40 ---A- C:\Documents And Settings\Nicolas\Cookies\8Z4OET6K.txt [2539]

O61 - LFC:Last File Created 09/12/2011 - 00:59:41 ---A- C:\Documents And Settings\Nicolas\Cookies\KXOOQ0C9.txt [393]

O61 - LFC:Last File Created 09/12/2011 - 01:00:19 ---A- C:\Documents And Settings\Nicolas\Cookies\MXOYVG1M.txt [1681]

O61 - LFC:Last File Created 09/12/2011 - 01:00:46 ---A- C:\Documents And Settings\Nicolas\Cookies\RRCEEJXN.txt [244]

O61 - LFC:Last File Created 09/12/2011 - 01:01:41 --HA- C:\Documents And Settings\Nicolas\Local Settings\Application Data\IconCache.db [4289336]

O61 - LFC:Last File Created 09/12/2011 - 01:02:11 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf [786]

O61 - LFC:Last File Created 09/12/2011 - 01:02:28 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [384672]

O61 - LFC:Last File Created 09/12/2011 - 01:02:29 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\local.orspheap [262164]

O61 - LFC:Last File Created 09/12/2011 - 14:57:41 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 09/12/2011 - 14:57:41 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [32768]

O61 - LFC:Last File Created 09/12/2011 - 14:58:05 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0000.idx [256]

O61 - LFC:Last File Created 09/12/2011 - 14:58:05 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0001.idx [256]

O61 - LFC:Last File Created 09/12/2011 - 14:58:05 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0002.idx [256]

O61 - LFC:Last File Created 09/12/2011 - 14:58:05 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0003.idx [256]

O61 - LFC:Last File Created 09/12/2011 - 14:58:05 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Quarantine\Repository\Index\0004.idx [256]

O61 - LFC:Last File Created 09/12/2011 - 15:11:29 -SHA- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Credentials\S-1-5-21-680403475-1107398295-2291755242-1006\Credentials [516]

O61 - LFC:Last File Created 09/12/2011 - 15:12:07 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\en-us\strings.en-us.xml [0]

O61 - LFC:Last File Created 09/12/2011 - 15:12:07 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\resource.h [0]

O61 - LFC:Last File Created 09/12/2011 - 15:12:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\config.xml [0]

O61 - LFC:Last File Created 09/12/2011 - 15:12:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\fr-fr\strings.fr-fr.xml [0]

O61 - LFC:Last File Created 09/12/2011 - 15:12:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\manifest.xml [5232]

O61 - LFC:Last File Created 09/12/2011 - 15:13:08 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse [0]

O61 - LFC:Last File Created 09/12/2011 - 15:13:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\handle.dat [178]

O61 - LFC:Last File Created 09/12/2011 - 15:13:24 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Cookies\index.dat [16384]

O61 - LFC:Last File Created 09/12/2011 - 15:13:24 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat [32768]

O61 - LFC:Last File Created 09/12/2011 - 15:13:24 -SHA- C:\Documents And Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 09/12/2011 - 15:16:29 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr [1114112]

O61 - LFC:Last File Created 09/12/2011 - 15:16:29 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4A [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:29 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4B [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h0 [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h1 [196608]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr [1114112]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4A [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4A.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4B [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:30 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.idx [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\Indexer\DocId.Map [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h0 [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h0.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h1 [196608]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h1.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h3 [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Hash.gthr.h4B.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 15:16:31 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Save\MyIndex.Idm.gthr [4096]

O61 - LFC:Last File Created 09/12/2011 - 15:16:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.894.Crwl [880]

O61 - LFC:Last File Created 09/12/2011 - 15:16:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.894.gthr [1012]

O61 - LFC:Last File Created 09/12/2011 - 15:16:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.chk1.gthr [4096]

O61 - LFC:Last File Created 09/12/2011 - 15:17:06 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms [6144]

O61 - LFC:Last File Created 09/12/2011 - 15:17:06 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Galerie de composants Web Slice~.feed-ms [36864]

O61 - LFC:Last File Created 09/12/2011 - 15:17:06 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\MSN Météo~.feed-ms [28672]

O61 - LFC:Last File Created 09/12/2011 - 15:25:16 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Properties\MSS.chk [8192]

O61 - LFC:Last File Created 09/12/2011 - 15:28:30 ---A- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 09/12/2011 - 15:28:30 ---A- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 09/12/2011 - 15:28:42 --HA- C:\Documents And Settings\Invité\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 09/12/2011 - 16:01:52 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temp\MSIb8dc0.LOG [314]

O61 - LFC:Last File Created 09/12/2011 - 16:01:54 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt [0]

O61 - LFC:Last File Created 09/12/2011 - 17:19:43 ---A- C:\Documents And Settings\Nicolas\Cookies\1R8CI5H1.txt [64]

O61 - LFC:Last File Created 09/12/2011 - 17:19:43 ---A- C:\Documents And Settings\Nicolas\Cookies\6N3O2RCG.txt [65]

O61 - LFC:Last File Created 09/12/2011 - 17:23:52 ---A- C:\Documents And Settings\Nicolas\Cookies\C251VGER.txt [74]

O61 - LFC:Last File Created 09/12/2011 - 17:25:20 ---A- C:\Documents And Settings\Nicolas\Cookies\K3AKU20M.txt [580]

O61 - LFC:Last File Created 09/12/2011 - 17:25:21 ---A- C:\Documents And Settings\Nicolas\Cookies\N4QPOBH4.txt [398]

O61 - LFC:Last File Created 09/12/2011 - 17:25:21 ---A- C:\Documents And Settings\Nicolas\Cookies\RG4K2KYF.txt [90]

O61 - LFC:Last File Created 09/12/2011 - 17:25:21 ---A- C:\Documents And Settings\Nicolas\Cookies\SZYRTX5K.txt [1353]

O61 - LFC:Last File Created 09/12/2011 - 17:26:01 ---A- C:\Documents And Settings\Nicolas\Cookies\0FX9730A.txt [78]

O61 - LFC:Last File Created 09/12/2011 - 17:26:01 ---A- C:\Documents And Settings\Nicolas\Cookies\1S51247S.txt [154]

O61 - LFC:Last File Created 09/12/2011 - 17:26:02 ---A- C:\Documents And Settings\Nicolas\Cookies\0MT4YLGL.txt [398]

O61 - LFC:Last File Created 09/12/2011 - 17:26:43 ---A- C:\Documents And Settings\Nicolas\Cookies\B1I9KEIK.txt [1137]

O61 - LFC:Last File Created 09/12/2011 - 17:26:46 ---A- C:\Documents And Settings\Nicolas\Cookies\PU2LWLL5.txt [4350]

O61 - LFC:Last File Created 09/12/2011 - 17:26:47 ---A- C:\Documents And Settings\Nicolas\Cookies\63PE3UV1.txt [198]

O61 - LFC:Last File Created 09/12/2011 - 17:26:55 ---A- C:\Documents And Settings\Nicolas\Cookies\53Q860KH.txt [467]

O61 - LFC:Last File Created 09/12/2011 - 17:27:46 ---A- C:\Documents And Settings\Nicolas\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [456]

O61 - LFC:Last File Created 09/12/2011 - 17:27:46 ---A- C:\Documents And Settings\Nicolas\Cookies\866DGWOF.txt [198]

O61 - LFC:Last File Created 09/12/2011 - 17:28:06 ---A- C:\Documents And Settings\Nicolas\Cookies\0CARTM7L.txt [323]

O61 - LFC:Last File Created 09/12/2011 - 17:28:06 ---A- C:\Documents And Settings\Nicolas\Cookies\Z146WZ75.txt [394]

O61 - LFC:Last File Created 09/12/2011 - 17:28:44 ---A- C:\Documents And Settings\Nicolas\Cookies\T68V26WU.txt [105]

O61 - LFC:Last File Created 09/12/2011 - 17:28:49 ---A- C:\Documents And Settings\Nicolas\Cookies\MRF330WC.txt [504]

O61 - LFC:Last File Created 09/12/2011 - 17:28:59 ---A- C:\Documents And Settings\Nicolas\Cookies\XQ7XB28K.txt [453]

O61 - LFC:Last File Created 09/12/2011 - 17:29:00 ---A- C:\Documents And Settings\Nicolas\Cookies\FRLNXRLF.txt [935]

O61 - LFC:Last File Created 09/12/2011 - 17:29:24 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.chk2.gthr [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:29:34 ---A- C:\Documents And Settings\Nicolas\Bureau\ZHPDiag2.exe [4077498]

O61 - LFC:Last File Created 09/12/2011 - 17:31:14 ---A- C:\Documents And Settings\Nicolas\Cookies\SJZFH5SD.txt [1651]

O61 - LFC:Last File Created 09/12/2011 - 17:31:14 ---A- C:\Documents And Settings\Nicolas\Cookies\YZXQLZZR.txt [424]

O61 - LFC:Last File Created 09/12/2011 - 17:32:11 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010001.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:32:11 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010001.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:32:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010002.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:32:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010002.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:33:15 ---A- C:\Documents And Settings\Nicolas\Cookies\I7PNZ61V.txt [1027]

O61 - LFC:Last File Created 09/12/2011 - 17:33:15 ---A- C:\Documents And Settings\Nicolas\Cookies\V67FQ76B.txt [422]

O61 - LFC:Last File Created 09/12/2011 - 17:33:20 ---A- C:\Documents And Settings\Nicolas\Cookies\PHVEJTZ3.txt [74]

O61 - LFC:Last File Created 09/12/2011 - 17:33:21 ---A- C:\Documents And Settings\Nicolas\Cookies\GPPP3VFH.txt [390]

O61 - LFC:Last File Created 09/12/2011 - 17:33:22 ---A- C:\Documents And Settings\Nicolas\Cookies\50HUG4L1.txt [2165]

O61 - LFC:Last File Created 09/12/2011 - 17:33:23 ---A- C:\Documents And Settings\Nicolas\Cookies\ETUOW8UL.txt [225]

O61 - LFC:Last File Created 09/12/2011 - 17:33:38 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar DNS data\data [1704]

O61 - LFC:Last File Created 09/12/2011 - 17:42:17 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office\Microsoft Office Word 2003.lnk [2585]

O61 - LFC:Last File Created 09/12/2011 - 17:42:37 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010005.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:42:38 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010005.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:42:51 ---A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\Office\Word11.pip [1648]

O61 - LFC:Last File Created 09/12/2011 - 17:43:48 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010006.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:43:48 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010006.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:44:39 ---A- C:\Documents And Settings\Nicolas\Cookies\5U0JUPHP.txt [75]

O61 - LFC:Last File Created 09/12/2011 - 17:44:39 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\IJIEYVUQ\secure.shared.live[1].xml [576]

O61 - LFC:Last File Created 09/12/2011 - 17:44:41 ---A- C:\Documents And Settings\Nicolas\Cookies\0SFNEPUF.txt [601]

O61 - LFC:Last File Created 09/12/2011 - 17:44:42 ---A- C:\Documents And Settings\Nicolas\Cookies\UZKH6MHJ.txt [87]

O61 - LFC:Last File Created 09/12/2011 - 17:44:44 ---A- C:\Documents And Settings\Nicolas\Cookies\JSLUNMFX.txt [1039]

O61 - LFC:Last File Created 09/12/2011 - 17:44:46 ---A- C:\Documents And Settings\Nicolas\Cookies\CZ60RZT1.txt [204]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 ---A- C:\Documents And Settings\Nicolas\UserData\index.dat [32768]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\IECompatCache\index.dat [868352]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [49152]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\Local Settings\Historique\History.IE5\MSHist012011120920111210\index.dat [32768]

O61 - LFC:Last File Created 09/12/2011 - 17:44:51 -SHA- C:\Documents And Settings\Nicolas\PrivacIE\index.dat [10125312]

O61 - LFC:Last File Created 09/12/2011 - 17:45:10 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar\metrics_36182221319.xml [6168]

O61 - LFC:Last File Created 09/12/2011 - 17:45:10 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{6157EA21-1246-11E1-B20A-00A0D123B225}.dat [3584]

O61 - LFC:Last File Created 09/12/2011 - 17:45:10 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{22A621A6-2285-11E1-B219-00A0D123B225}.dat [12288]

O61 - LFC:Last File Created 09/12/2011 - 17:46:41 ---A- C:\Documents And Settings\All Users\Bureau\MBRCheck.lnk [673]

O61 - LFC:Last File Created 09/12/2011 - 17:46:41 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [666]

O61 - LFC:Last File Created 09/12/2011 - 17:46:41 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [661]

O61 - LFC:Last File Created 09/12/2011 - 17:46:41 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\ZHP\ZHPDiag.lnk [489]

O61 - LFC:Last File Created 09/12/2011 - 17:48:04 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010007.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:48:04 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010007.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:48:51 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010008.ci [4096]

O61 - LFC:Last File Created 09/12/2011 - 17:48:51 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010008.dir [372]

O61 - LFC:Last File Created 09/12/2011 - 17:49:32 ---A- C:\Documents And Settings\Nicolas\Cookies\index.dat [327680]

O61 - LFC:Last File Created 09/12/2011 - 17:49:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Historique\History.IE5\index.dat [1622016]

O61 - LFC:Last File Created 09/12/2011 - 17:50:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\CiFLfffc.001 [65536]

O61 - LFC:Last File Created 09/12/2011 - 17:50:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\CiFLfffc.002 [65536]

O61 - LFC:Last File Created 09/12/2011 - 17:50:46 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Ntfy127.gthr [7607]

O61 - LFC:Last File Created 09/12/2011 - 20:28:47 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\c2616ed9.cert [9028]

O61 - LFC:Last File Created 09/12/2011 - 20:28:48 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\0.crl [1211]

O61 - LFC:Last File Created 09/12/2011 - 20:28:49 ---A- C:\Documents And Settings\All Users\Application Data\F-Secure\Daas2\cert\fsc (revoke hq).crl [1211]

O61 - LFC:Last File Created 09/12/2011 - 20:28:49 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\1.crl [1211]

O61 - LFC:Last File Created 09/12/2011 - 20:29:47 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96089]

O61 - LFC:Last File Created 09/12/2011 - 20:29:47 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]

O61 - LFC:Last File Created 09/12/2011 - 20:56:46 ---A- C:\Documents And Settings\All Users\Application Data\Google\Google Toolbar\Update\GoogleToolbarInstaller_updater_signed.exe [526512]

O61 - LFC:Last File Created 09/12/2011 - 20:56:46 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4 [36023]

O61 - LFC:Last File Created 09/12/2011 - 20:56:46 -S-A- C:\Documents And Settings\Nicolas\Application Data\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4 [132]

O61 - LFC:Last File Created 09/12/2011 - 20:57:05 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [5463]

O61 - LFC:Last File Created 09/12/2011 - 20:57:06 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [4232]

O61 - LFC:Last File Created 09/12/2011 - 23:19:50 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar Cache\7.2.2318.1946\fr\translate_languages.json.content [1481]

O61 - LFC:Last File Created 09/12/2011 - 23:19:51 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar Cache\7.2.2318.1946\fr\translate_element.js.content [2401]

O61 - LFC:Last File Created 09/12/2011 - 23:20:43 ---A- C:\Documents And Settings\Nicolas\Cookies\VW5JNJQ3.txt [420]

O61 - LFC:Last File Created 09/12/2011 - 23:20:44 ---A- C:\Documents And Settings\Nicolas\Cookies\1JTKE9IU.txt [69]

O61 - LFC:Last File Created 09/12/2011 - 23:21:09 ---A- C:\Documents And Settings\Nicolas\Cookies\GHH0LWH8.txt [83]

O61 - LFC:Last File Created 09/12/2011 - 23:21:10 ---A- C:\Documents And Settings\Nicolas\Cookies\MKMFQJGS.txt [82]

O61 - LFC:Last File Created 09/12/2011 - 23:23:12 ---A- C:\Documents And Settings\Nicolas\Cookies\DZHBJCT0.txt [129]

O61 - LFC:Last File Created 09/12/2011 - 23:23:18 ---A- C:\Documents And Settings\Nicolas\Cookies\0W62F2TK.txt [352]

O61 - LFC:Last File Created 09/12/2011 - 23:23:53 ---A- C:\Documents And Settings\Nicolas\Cookies\IPGSNVAE.txt [667]

O61 - LFC:Last File Created 09/12/2011 - 23:26:40 ---A- C:\Documents And Settings\Nicolas\Cookies\9QOS4E9R.txt [5163]

O61 - LFC:Last File Created 09/12/2011 - 23:26:40 ---A- C:\Documents And Settings\Nicolas\Cookies\PTP9P3Z5.txt [626]

O61 - LFC:Last File Created 09/12/2011 - 23:26:40 ---A- C:\Documents And Settings\Nicolas\Cookies\ZMWB58UV.txt [71]

O61 - LFC:Last File Created 09/12/2011 - 23:32:35 ---A- C:\Documents And Settings\NetworkService\Local Settings\Application Data\F-Secure\Orsp\c6616ed9.cert [9028]

O61 - LFC:Last File Created 09/12/2011 - 23:38:02 ---A- C:\Documents And Settings\Nicolas\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat [294804]

O61 - LFC:Last File Created 09/12/2011 - 23:39:37 ---A- C:\Documents And Settings\Nicolas\Cookies\61S0475D.txt [191]

O61 - LFC:Last File Created 09/12/2011 - 23:46:47 ---A- C:\Documents And Settings\Nicolas\Cookies\2XY8DHJY.txt [397]

O61 - LFC:Last File Created 09/12/2011 - 23:46:51 ---A- C:\Documents And Settings\Nicolas\Cookies\CV52KK09.txt [559]

O61 - LFC:Last File Created 09/12/2011 - 23:46:51 ---A- C:\Documents And Settings\Nicolas\Cookies\FQB2T5A8.txt [181]

O61 - LFC:Last File Created 09/12/2011 - 23:46:54 ---A- C:\Documents And Settings\Nicolas\Cookies\I7ZF6HR7.txt [362]

O61 - LFC:Last File Created 09/12/2011 - 23:46:56 ---A- C:\Documents And Settings\Nicolas\Cookies\RPBBOV8S.txt [190]

O61 - LFC:Last File Created 09/12/2011 - 23:46:59 ---A- C:\Documents And Settings\Nicolas\Cookies\0EUL7P4S.txt [572]

O61 - LFC:Last File Created 09/12/2011 - 23:46:59 ---A- C:\Documents And Settings\Nicolas\Cookies\P8T2WRQ9.txt [3284]

O61 - LFC:Last File Created 09/12/2011 - 23:47:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:18 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.idx [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4A.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:19 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h4B.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\NlFiles\DocId.Map [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h0.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h1.Dir [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Hash.gthr.h3 [65536]

O61 - LFC:Last File Created 09/12/2011 - 23:47:20 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\MyIndex.Idm.gthr [4096]

O61 - LFC:Last File Created 09/12/2011 - 23:48:55 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.893.Crwl [1888]

O61 - LFC:Last File Created 09/12/2011 - 23:48:55 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\GatherLogs\MyIndex\MyIndex.893.gthr [3520]

O61 - LFC:Last File Created 09/12/2011 - 23:48:55 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010004.ci [450560]

O61 - LFC:Last File Created 09/12/2011 - 23:48:55 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Microsoft\Desktop Search\Applications\RSApp\Projects\MyIndex\Build\Indexer\CiFiles\00010004.dir [3954]

O61 - LFC:Last File Created 09/12/2011 - 23:50:26 ---A- C:\Documents And Settings\Nicolas\Cookies\ZSPPHJVT.txt [505]

O61 - LFC:Last File Created 09/12/2011 - 23:50:32 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar\metrics_4098489165.xml [6484]

O61 - LFC:Last File Created 09/12/2011 - 23:50:49 ---A- C:\Documents And Settings\Nicolas\Cookies\W3Z8HWZB.txt [249]

O61 - LFC:Last File Created 09/12/2011 - 23:50:52 ---A- C:\Documents And Settings\Nicolas\Cookies\5F4MSFCZ.txt [456]

O61 - LFC:Last File Created 09/12/2011 - 23:51:40 ---A- C:\Documents And Settings\Nicolas\Cookies\0MA37N12.txt [420]

O61 - LFC:Last File Created 09/12/2011 - 23:52:15 ---A- C:\Documents And Settings\Nicolas\Cookies\1556UHSW.txt [422]

O61 - LFC:Last File Created 09/12/2011 - 23:52:32 ---A- C:\Documents And Settings\Nicolas\Cookies\PNTXK8FB.txt [92]

O61 - LFC:Last File Created 09/12/2011 - 23:52:54 ---A- C:\Documents And Settings\Nicolas\Cookies\H4MYP9DJ.txt [103]

O61 - LFC:Last File Created 09/12/2011 - 23:52:54 ---A- C:\Documents And Settings\Nicolas\Cookies\MJAK29HD.txt [566]

O61 - LFC:Last File Created 09/12/2011 - 23:52:56 ---A- C:\Documents And Settings\Nicolas\Cookies\J51JHY6E.txt [1008]

O61 - LFC:Last File Created 09/12/2011 - 23:53:54 ---A- C:\Documents And Settings\Nicolas\Cookies\E9IIJO1N.txt [817]

O61 - LFC:Last File Created 09/12/2011 - 23:53:55 ---A- C:\Documents And Settings\Nicolas\Cookies\QQNY3V1P.txt [243]

O61 - LFC:Last File Created 09/12/2011 - 23:56:07 ---A- C:\Documents And Settings\Nicolas\Cookies\65FODVCJ.txt [297]

O61 - LFC:Last File Created 09/12/2011 - 23:56:08 ---A- C:\Documents And Settings\Nicolas\Cookies\3EUN016R.txt [371]

O61 - LFC:Last File Created 09/12/2011 - 23:56:09 ---A- C:\Documents And Settings\Nicolas\Local Settings\Application Data\Google\Toolbar\metrics_5304669502.xml [6314]

O61 - LFC:Last File Created 09/12/2011 - 23:59:40 ---A- C:\Documents And Settings\Nicolas\Cookies\SRZ33M1T.txt [563]

O61 - LFC:Last File Created 09/12/2011 - 23:59:46 ---A- C:\Documents And Settings\Nicolas\Cookies\FBAF3YWZ.txt [1374]

O61 - LFC:Last File Created 09/12/2011 - 23:59:47 ---A- C:\Documents And Settings\Nicolas\Cookies\4LYX5399.txt [169]

O61 - LFC:Last File Created 09/12/2011 - 23:59:48 ---A- C:\Documents And Settings\Nicolas\Cookies\4N87D26T.txt [91]

O61 - LFC:Last File Created 09/12/2011 - 23:59:48 ---A- C:\Documents And Settings\Nicolas\Cookies\VWYP06WT.txt [71]

O61 - LFC:Last File Created 09/12/2011 - 23:59:57 ---A- C:\Documents And Settings\Nicolas\Cookies\6D85O74X.txt [624]

~ Scan Files in 10mn 34s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: SEAF By C_XX - (.C_XX.) [HKLM] -- SEAF

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 18/02/2011 - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Mobile Device) .(.Apple Inc. - MobileDeviceService.) - LEGACY_APPLE_MOBILE_DEVICE

O64 - Services: CurCS - 22/03/2005 - C:\WINDOWS\system32\Ati2evxx.exe (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER

O64 - Services: CurCS - 06/04/2011 - C:\Program Files\Bonjour\mDNSResponder.exe (Bonjour Service) .(.Apple Inc. - Bonjour Service.) - LEGACY_BONJOUR_SERVICE

O64 - Services: CurCS - 02/06/2005 - C:\Program Files\Canon\CAL\CALMAIN.exe (CCALib8) .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8

O64 - Services: CurCS - 10/11/2004 - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (CFSvcs) .(.TOSHIBA CORPORATION - Service of ConfigFree..) - LEGACY_CFSVCS

O64 - Services: CurCS - ??\??\???? - (COMSysApp) .(. - .) - LEGACY_COMSYSAPP

O64 - Services: CurCS - ??\??\???? - (DcomLaunch) .(. - .) - LEGACY_DCOMLAUNCH

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys (dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 14/07/2004 - C:\WINDOWS\system32\drivers\drvnddm.sys (drvnddm) .(.Sonic Solutions - Device Driver Manager.) - LEGACY_DRVNDDM

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys - F-Secure File System Filter (F-Secure Filter) .(...) - LEGACY_F-SECURE_FILTER

O64 - Services: CurCS - 29/07/2010 - C:\Program Files\F-Secure\Anti-Virus\minifilter\fsgk.sys - F-Secure Gatekeeper (F-Secure Gatekeeper) .(...) - LEGACY_F-SECURE_GATEKEEPER

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe (F-Secure Gatekeeper Handler Starter) .(.F-Secure Corporation - F-Secure Anti-Virus Scanning Service.) - LEGACY_F-SECURE_GATEKEEPER_HANDLER_STARTER

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\HIPS\drivers\fshs.sys (F-Secure HIPS) .(.F-Secure Corporation - F-Secure HIPS 32-bit Driver.) - LEGACY_F-SECURE_HIPS

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Common\FNRB32.exe (F-Secure Network Request Broker) .(.F-Secure Corporation - F-Secure Network Request Broker.) - LEGACY_F-SECURE_NETWORK_REQUEST_BROKER

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys - F-Secure File System Recognizer (F-Secure Recognizer) .(...) - LEGACY_F-SECURE_RECOGNIZER

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe (FSAUA) .(.F-Secure Corporation - F-Secure Automatic Update Agent.) - LEGACY_FSAUA

O64 - Services: CurCS - 17/08/2011 - C:\WINDOWS\system32\Drivers\fsbts.sys - fsbts (fsbts) .(...) - LEGACY_FSBTS

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe (FSDFWD) .(.F-Secure Corporation - F-Secure Internet Shield daemon.) - LEGACY_FSDFWD

O64 - Services: CurCS - 09/10/2008 - C:\WINDOWS\system32\drivers\fsdfw.sys (FSFW) .(.F-Secure Corporation - F-Secure Internet Shield Driver.) - LEGACY_FSFW

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\Common\FSMA32.exe (FSMA) .(.F-Secure Corporation - F-Secure Management Agent.) - LEGACY_FSMA

O64 - Services: CurCS - 09/10/2008 - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe (FSORSPClient) .(.F-Secure Corporation - F-Secure ORSP Service.) - LEGACY_FSORSPCLIENT

O64 - Services: CurCS - 05/01/2011 - C:\WINDOWS\system32\FsUsbExDisk.sys - FsUsbExDisk (FsUsbExDisk) .(...) - LEGACY_FSUSBEXDISK

O64 - Services: CurCS - 05/01/2011 - C:\WINDOWS\system32\FsUsbExService.exe (FsUsbExService) .(.Teruten - FsUsbDevice.) - LEGACY_FSUSBEXSERVICE

O64 - Services: CurCS - 27/10/2009 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE

O64 - Services: CurCS - 27/10/2009 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATEM

O64 - Services: CurCS - 01/05/2009 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - 03/04/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - 27/04/2011 - C:\Program Files\iPod\bin\iPodService.exe (iPod Service) .(.Apple Inc. - iPodService Module (32-bit).) - LEGACY_IPOD_SERVICE

O64 - Services: CurCS - 30/04/2009 - C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - 30/04/2009 - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe (LVPrcSrv) .(.Logitech Inc. - Logitech LVPrcSrv Module..) - LEGACY_LVPRCSRV

O64 - Services: CurCS - 22/11/2004 - C:\Program Files\COMMON~1\Motive\MRENDIS5.sys (MRENDIS5) .(.Motive, Inc. - Motive NDIS 5.0 Protocol Driver.) - LEGACY_MRENDIS5

O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\Mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP

O64 - Services: CurCS - 29/01/2003 - C:\WINDOWS\system32\DRIVERS\netdevio.sys (Netdevio) .(.TOSHIBA Corporation. - Network Device Usermode I/O protocol.) - LEGACY_NETDEVIO

O64 - Services: CurCS - 29/09/2004 - C:\WINDOWS\system32\HPZipm12.exe (Pml Driver HPZ12) .(.HP - PML Driver.) - LEGACY_PML_DRIVER_HPZ12

O64 - Services: CurCS - ??\??\???? - (RpcSs) .(. - .) - LEGACY_RPCSS

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\lsass.exe (SamSs) .(.Microsoft Corporation - LSA Shell (Export Version).) - LEGACY_SAMSS

O64 - Services: CurCS - 28/09/2010 - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe (Service CANALPLAY) .(.Canal+ Distribution - CanalPlayService.exe.) - LEGACY_SERVICE_CANALPLAY

O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\drivers\sfdrv01.sys (sfdrv01) .(.Protection Technology - StarForce Protection Environment Driver.) - LEGACY_SFDRV01

O64 - Services: CurCS - 16/05/2005 - C:\WINDOWS\system32\drivers\sfhlp02.sys (sfhlp02) .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02

O64 - Services: CurCS - 10/08/2005 - C:\WINDOWS\system32\drivers\sfsync02.sys (sfsync02) .(.Protection Technology - StarForce Protection Synchronization Driver.) - LEGACY_SFSYNC02

O64 - Services: CurCS - 29/09/2005 - C:\WINDOWS\system32\drivers\sfvfs02.sys (sfvfs02) .(.Protection Technology - StarForce Protection VFS Driver.) - LEGACY_SFVFS02

O64 - Services: CurCS - 20/09/2002 - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (SoundMAX Agent Service (default)) .(.Analog Devices, Inc. - SoundMAX service agent component.) - LEGACY_SOUNDMAX_AGENT_SERVICE_(DEFAULT)

O64 - Services: CurCS - 14/07/2004 - C:\WINDOWS\system32\drivers\ssrtln.sys (ssrtln) .(.Sonic Solutions - Shared Driver Component.) - LEGACY_SSRTLN

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\svchost.exe (stisvc) .(.Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_STISVC

O64 - Services: CurCS - 02/11/2004 - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe (SymWSC) .(.Symantec Corporation - Norton Security Center Service.) - LEGACY_SYMWSC

O64 - Services: CurCS - 14/12/2004 - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe (TAPPSRV) .(.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - LEGACY_TAPPSRV

O64 - Services: CurCS - ??\??\???? - (TermService) .(. - .) - LEGACY_TERMSERVICE

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnboio.sys (tfsnboio) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNBOIO

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsncofs.sys (tfsncofs) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNCOFS

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsndrct.sys (tfsndrct) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNDRCT

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsndres.sys (tfsndres) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNDRES

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnifs.sys (tfsnifs) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNIFS

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnopio.sys (tfsnopio) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNOPIO

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnpool.sys (tfsnpool) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNPOOL

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnudf.sys (tfsnudf) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNUDF

O64 - Services: CurCS - 03/08/2004 - C:\WINDOWS\system32\dla\tfsnudfa.sys (tfsnudfa) .(.Sonic Solutions - Drive Letter Access Component.) - LEGACY_TFSNUDFA

O64 - Services: CurCS - 02/10/2011 - C:\Documents and Settings\Nicolas\Bureau\TrueSight.sys - TrueSight (TrueSight) .(...) - LEGACY_TRUESIGHT

~ Scan Services in 00mn 12s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:30/11/2004 (. - DLLVGA.) (1, 0, 0, 2) - c:\windows\system32\DLLVGA.dll

O65 - LUF:04/01/2011 (.Pas de propriétaire - EjectDisk ?? ?? ?????.) (1, 0, 0, 1) - c:\windows\system32\FsUsbExDevice.Dll

O65 - LUF:14/12/2004 (.Pas de propriétaire - DisplayPage Module.) (1, 0, 1, 6) - c:\windows\system32\MousePage.dll

O65 - LUF:03/12/2004 (.Pas de propriétaire - TCtrlIODLL ??????? ??? ??????.) (1, 0, 1, 7) - c:\windows\system32\TCtrlIO.dll

O65 - LUF:07/05/2004 (.Pas de propriétaire - ToshBIOS Module.) (1, 0, 0, 1) - c:\windows\system32\ToshBIOS.dll

O65 - LUF:17/06/2004 (.Pas de propriétaire - Module KeyboardPage.) (1, 0, 0, 1) - c:\windows\system32\TosKeyboardPage.dll

O65 - LUF:17/06/2004 (.Pas de propriétaire - Module MousePage.) (1, 0, 0, 1) - c:\windows\system32\TosMousePage.dll

O65 - LUF:11/10/2001 (.Pas de propriétaire - TW_CT Dynamic Link Library.) (1, 1, 1, 1) - c:\windows\system32\TW_CT.dll

~ Scan Sigcheck in 00mn 55s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <htmlfile>[HKCU\..\open\Command] (.Not Key.)

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {67B6BED9-2E6E-4AFD-98D5-81F5EC9CF22A} [DefaultScope] - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - Google

O69 - SBI: SearchScopes [HKCU] {9D88035C-6F29-4C27-BDF0-56A480639353} - (Google) - Google

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche des services démarrés par Svchost (O83)

O83 - Search Svchost Services: AppMgmt (AppMgmt) . (...) -- C:\WINDOWS\System32\appmgmts.dll [0]

O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\System32\audiosrv.dll [42496]

O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [77824]

O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\System32\cryptsvc.dll [62464]

O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\System32\dmserver.dll [24576]

O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\System32\dhcpcsvc.dll [127488]

O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\System32\ersvc.dll [23040]

O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll [253952]

O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]

O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\System32\hidserv.dll [0]

O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\WINDOWS\System32\irmon.dll [29184]

O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\System32\srvsvc.dll [99840]

O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\System32\wkssvc.dll [132096]

O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\System32\msgsvc.dll [33792]

O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\System32\netman.dll [198144]

O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\System32\mswsock.dll [247808]

O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272]

O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [88576]

O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [186368]

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\System32\mprdim.dll [53248]

O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560]

O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\System32\seclogon.dll [18944]

O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424]

O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\System32\ipnathlp.dll [332800]

O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520]

O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\WINDOWS\System32\tapisrv.dll [249856]

O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]

O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112]

O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176]

O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\System32\wzcsvc.dll [483840]

O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408]

O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896]

O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\System32\xmlprov.dll [129024]

O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll [409088]

O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656]

O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\System32\shsvcs.dll [135680]

O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400]

O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\mspmsnsv.dll [27136]

O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\System32\qagentrt.dll [293376]

O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\System32\kmsvc.dll [61440]

~ Scan Services in 00mn 02s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.AB6E8F6A2C6AE0860151BC14C98AD757] [sPRF][08/10/2005] (...) -- C:\Documents and Settings\Nicolas\Local Settings\Application Data\fusioncache.dat [130]

[MD5.3B917CB12219918A5D04A9E379E3B15F] [sPRF][17/02/2010] (...) -- C:\Documents and Settings\Nicolas\Application Data\wklnhst.dat [2018]

[MD5.730084170015038D0A5BCCBB55D55DA2] [sPRF][27/10/2009] (.Google Inc. - Setup.) -- C:\Documents and Settings\Nicolas\Bureau\GoogleEarthSetup.exe [570016]

[MD5.F594C711A1FD18148A5322336154B4DF] [sPRF][16/09/2006] (.Macrovision Corporation - Setup.exe.) -- C:\Documents and Settings\Nicolas\Bureau\GoogleEarthWin.exe [14405024]

[MD5.1D18D923EA0390BB2B453FF833C8B1B4] [sPRF][14/11/2010] (.Unisys Corporation - Pas de description.) -- C:\Documents and Settings\Nicolas\Bureau\Plug-in_messagerie_vocale_888.exe [1517136]

[MD5.21CD08A367C577B917C3CF917F712D64] [sPRF][28/03/2010] (.Apple Inc. - QuickTime Installer.) -- C:\Documents and Settings\Nicolas\Bureau\QuickTimeInstaller.exe [32494896]

[MD5.95A960B7C3C05CB9BBF0EDD80086F770] [sPRF][03/12/2011] (.C_XX - SEAF.) -- C:\Documents and Settings\Nicolas\Bureau\SEAF.exe [498868]

[MD5.5B5D56738C261634C281C7BA1CA1A2DF] [sPRF][07/12/2011] (.OldTimer Tools - Pas de description.) -- C:\Documents and Settings\Nicolas\Bureau\TFC.exe [446464]

[MD5.155B6CB5488F3194208012E7F9B8D888] [sPRF][02/10/2011] (...) -- C:\Documents and Settings\Nicolas\Bureau\TrueSight.sys [111104]

[MD5.D969B6B7C55F6F913BD851F8AAFB2115] [sPRF][09/12/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Nicolas\Bureau\ZHPDiag2.exe [4077498]

[MD5.632E0CE38FBCADEAAE28077F4C9C45D5] [sPRF][21/10/2010] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.1 r102.) -- C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [2827728]

~ Scan Files in 00mn 11s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8878 - (07/12/2011)

Clés trouvées (Keys found) : 5

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 0

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher] =>PUP.VShareRedir

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher.1] =>PUP.VShareRedir

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO] =>PUP.VShareRedir

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1] =>PUP.VShareRedir

[HKLM\Software\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}] =>PUP.VShareRedir

~ Scan Additionnel in 00mn 08s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : neufbox

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 173.194.34.51, 173.194.34.50, 173.194.34.52, 173.194.34.49

173.194.34.48

Aliases: www.google.fr, www.google.com

~ Scan DNS in 00mn 57s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 09/12/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 09/12/2011 360448 | (Ati HotKey Poller) . (.ATI Technologies Inc..) - C:\WINDOWS\system32\ati2evxx.exe

SR - | Auto 09/12/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Disabled 0 | (Boonty Games) . (...) - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

SR - | Auto 09/12/2011 86606 | (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe

SR - | Auto 09/12/2011 36864 | (CFSvcs) . (.TOSHIBA CORPORATION.) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

SS - | Demand 09/12/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe

SR - | Auto 09/12/2011 215648 | (F-Secure Gatekeeper Handler Starter) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

SR - | Demand 09/12/2011 162456 | (F-Secure Network Request Broker) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\common\FNRB32.exe

SR - | Demand 09/12/2011 490080 | (FSAUA) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe

SR - | Demand 09/12/2011 510560 | (FSDFWD) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\FWES\program\fsdfwd.exe

SR - | Auto 09/12/2011 117400 | (FSMA) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\common\FSMA32.exe

SR - | Demand 09/12/2011 55904 | (FSORSPClient) . (.F-Secure Corporation.) - C:\Program Files\F-Secure\ORSP Client\fsorsp.exe

SR - | Auto 09/12/2011 222568 | (FsUsbExService) . (.Teruten.) - C:\WINDOWS\system32\FsUsbExService.exe

SS - | Auto 09/12/2011 133104 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 09/12/2011 133104 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 09/12/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 09/12/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

SR - | Demand 09/12/2011 820520 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 09/12/2011 154136 | (LVPrcSrv) . (.Logitech Inc..) - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

SS - | Auto 09/12/2011 69632 | (Pml Driver HPZ12) . (.HP.) - C:\WINDOWS\system32\HPZipm12.exe

SS - | Demand 09/12/2011 450560 | (Service CANALPLAY) . (.Canal+ Distribution.) - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe

SR - | Auto 09/12/2011 45056 | (SoundMAX Agent Service (default)) . (.Analog Devices, Inc..) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

SR - | Auto 09/12/2011 316544 | (SymWSC) . (.Symantec Corporation.) - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\symwsc.exe

SR - | Auto 09/12/2011 34816 | (TAPPSRV) . (.TOSHIBA Corp..) - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

~ Scan Services in 00mn 58s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Nicolas at 09/12/2011 18:09:21

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys pciide.sys PCIIDEX.SYS

C:\WINDOWS\system32\drivers\sfsync02.sys Protection Technology StarForce Protection System

1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x86F29AB8]

3 CLASSPNP[0xF765EFD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000088[0x86F6E9E8]

5 ACPI[0xF75A4620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x86F3C940]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 02s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Nicolas at 09/12/2011 18:09:23

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 04s

 

 

 

End of the scan (1718 lines in 09mn 23s)(0)

[Theandre]

Bonjour,

 

Je reviens vers vous car je n'ai pas de réponse suite à notre dernier échange. J'ai procédé à un nouvel examen avec ZhpDiag (lire mail ci-dessus). Vous trouverez ci-dessous le rapport. Il me semble que c'est propre concernant les paragraphes "-\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R2,R3,R4)". Idem pour le paragraphe "Internet Explorer Toolbars (03)".

 

Qu'en pensez-vous?

 

Par ailleurs, voyez-vous autre chose ailleurs qui pourrait être suspect ?

 

Merci de votre aide.

[pear]

Vous devez trouver sur le bureau ou ,sinon, dans le dossier où vous avez installé Zhpdiag ces 3 icônes .

Cliquer sur l'icône Zhpfix

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Copiez/Collez les lignes vertes dans le cadre ci dessous:

pour cela;

Clic gauche maintenu enfoncé, Balayer l'ensemble du texte à copier avec la souris pour le mettre en surbrillance ,de gauche à droite et de haut en bas

Ctrl+c mettre le tout en mémoire

Ctrl+v pour inscrire le texte dans le Document

Vous ne verrez rien avant d'avoir Cliqué sur le H-

 

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher]

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher.1]

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO]

[HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1]

[HKLM\Software\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}]

EmptyFlash

EmptyTemp

 

 

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

Cliquer sur "Tous" puis sur "Nettoyer" .

Redémarrer pour achever le nettoyage.

Un rapport apparait:

Si le rapport n'apparait pas,cliquer sur

Copier-coller le rapport de suppression dans la prochaine réponse.

[Theandre]

Bonjour

 

J'ai suivi vos instructions à la lettre avec ZHP Fix en collant les lignes vertes puis en nettoyant.

 

Voici le rapport:

 

Rapport de ZHPFix 1.12.3375 par Nicolas Coolman, Update du 16/12/2011

Fichier d'export Registre :

Run by Nicolas at 19/12/2011 17:10:48

Windows XP Home Edition Service Pack 3 (Build 2600)

Web site : ZHPFix Fix de rapport

 

========== Clé(s) du Registre ==========

SUPPRIME Key: HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher

SUPPRIME Key: HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncher.1

SUPPRIME Key: HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO

SUPPRIME Key: HKLM\Software\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1

SUPPRIME Key: HKLM\Software\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}

 

========== Dossier(s) ==========

SUPPRIME Flash Cookies: 24

SUPPRIME Temporaires Windows: : 11

 

========== Fichier(s) ==========

SUPPRIME Flash Cookies: 7

SUPPRIME Temporaires Windows: : 23

 

 

========== Récapitulatif ==========

5 : Clé(s) du Registre

2 : Dossier(s)

2 : Fichier(s)

 

 

End of clean in 00mn 04s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 03/10/2011 20:15:16 [3960]

C:\ZHP\ZHPFix[R2].txt - 19/12/2011 17:10:48 [1112]

 

 

Mon chemin de croix est-il terminé?

 

Merci de votre aide