Virus ou pas ?

[willow35]

Rapport de ZHPDiag v1.28.136 par Nicolas Coolman, Update du 29/09/2011

Run by willy at 01/10/2011 19:17:49

Web site : ZHPDiag Outil de diagnostic

 

 

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox 5.0 v5.0 (Defaut)

 

---\\ Windows Product Information

Windows XP Professional Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : KO

 

---\\ System Information

~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3582 MB (66% free)

System Restore: Activé (Enable)

System drive C: has 5 GB (18%) free of 25 GB

 

---\\ Logged in mode

~ Computer Name: WILL

~ User Name: willy

~ All Users Names: willy, SUPPORT_388945a0, HelpAssistant, ASPNET, Administrateur,

~ Unselected Option: None

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\willy\Application Data\

~ %Desktop% : C:\Documents and Settings\willy\Bureau\

~ %Favorites% : C:\Documents and Settings\willy\Favoris\

~ %LocalAppData% : C:\Documents and Settings\willy\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\willy\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

 

---\\ DOS/Devices

A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

C:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 25 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 12 Go of 52 Go)

E:\ CD-ROM drive (Not Inserted)

F:\ Hard drive, Flash drive, Thumb drive (Free 77 Go of 190 Go)

G:\ Hard drive, Flash drive, Thumb drive (Free 72 Go of 298 Go)

H:\ CD-ROM drive (Not Inserted)

I:\ Hard drive, Flash drive, Thumb drive (Free 43 Go of 75 Go)

 

 

 

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.01/10/2011 - 02:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.01/10/2011 - 02:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.3008D2F793F23FF0DDBC5A1FB9F8374F] - (.Microsoft Corporation - Internet Extensions for Win32.) (.01/10/2011 - 19:31:32.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.01/10/2011 - 02:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.355556D9E580915118CD7EF736653A89] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.01/10/2011 - 14:22:48.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496] 1868

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.01/10/2011 - 18:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512] 1788

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.01/10/2011 - 19:14:22.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744] 1804

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.01/10/2011 - 18:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976] 1780

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.01/10/2011 - 01:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672] 1852

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.01/10/2011 - 16:36:06.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384] 1940

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.01/10/2011 - 02:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144] 1852

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.01/10/2011 - 18:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112] 1780

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.01/10/2011 - 18:57:16.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832] 1820

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.01/10/2011 - 19:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264] 1756

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.01/10/2011 - 14:29:32.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320] 1844

[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.01/10/2011 - 19:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816] 1788

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.01/10/2011 - 19:15:54.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976] 1788

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.01/10/2011 - 02:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384] 1852

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.01/10/2011 - 19:19:44.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328] 1876

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.01/10/2011 - 18:32:52.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224] 1828

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.01/10/2011 - 01:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752] 1892

[MD5.93D313C31F7AD9EA2B75F26075413C7C] - (.Microsoft Corporation - Pilote de périphérique série.) (.01/10/2011 - 02:00:08.) -- C:\WINDOWS\system32\drivers\Serial.sys [66048] 1868

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 4/35

~ Mes musiques (My Musics) : 3/87

~ Mes Favoris (My Favorites) : 2/66

~ Mes Documents (My Documents) : 12/364

~ Mon Bureau (My Desktop) : 3/516

~ Menu demarrer (Programs) : 6/45

~ Scan Hidden Files in 00mn 00s

 

 

 

---\\ Processus lancés

[MD5.C186324EE414CF271F39604F1E68C579] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.4.) -- C:\WINDOWS\system32\nvsvc32.exe [156776] [PID.]

[MD5.018857EAD9A077A56AEDFC0E5EF7A24A] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]

[MD5.F832F1505AD8B83474BD9A5B1B985E01] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [345376] [PID.]

[MD5.65BB49DDE576CC824FBA1BE0DAD07E5B] - (.ESET - Eset Service.) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe [468224] [PID.]

[MD5.15AB846886C225FFF0376F3CEF21188F] - (.Teruten - FsUsbDevice.) -- C:\WINDOWS\system32\FsUsbExService.Exe [233472] [PID.]

[MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [PID.]

[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]

[MD5.D2AEADFD998706B4216315B2BD3FA79E] - (.InstallShield Software Corporation - InstallShield Update Service Scheduler.) -- C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [81920] [PID.1680]

[MD5.89F21CDE4563589BC5D9EAECA87D8F91] - (.Symantec Corporation - Tray Application.) -- C:\Program Files\Norton Ghost\Agent\VProTray.exe [2250088] [PID.1692]

[MD5.48A1A16B4C684B334592F54CD513DD31] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [18790432] [PID.1800]

[MD5.F87040E63A04812E2435806A3B917C00] - (.ESET - Eset GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe [1447168] [PID.1808]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792] [PID.1876]

[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [322120] [PID.]

[MD5.A0F1C0BA38F1BF3A57613CDC1542A5FD] - (.ROUTE 66 - Sync9Loader.) -- C:\Program Files\ROUTE 66\ROUTE 66 Sync\Sync9Loader.exe [168448] [PID.136]

[MD5.FB793400976F3E3A3F146B4D6D42684B] - (.Network Associates, Inc. - NAI ePolicy Orchestrator Agent.) -- C:\EPOAgent\naimas32.exe [204876] [PID.]

[MD5.026423673B8563E9975BDA97ED6273C7] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449608] [PID.200]

[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696] [PID.912]

[MD5.4365BCC30F28052005157284B916C681] - (.Symantec Corporation - Service Module.) -- C:\Program Files\Norton Ghost\Agent\VProSvc.exe [4322656] [PID.]

[MD5.075C3AB393298BA25EA580D8B3B1204D] - (.Pas de propriétaire - CursorXP.) -- C:\Program Files\CursorXP\CursorXP.exe [140288] [PID.1220]

[MD5.AB6607984BF45E54DF4AF90FED7D9F33] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe [934800] [PID.280]

[MD5.01BC447DAC92D664BBA0A569E6D5715B] - (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [13824] [PID.1260]

[MD5.3B71CF4150E01AE33E20150E3E695CB4] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [26101032] [PID.1032]

[MD5.1713D9DE407313138118D501B0E3C05B] - (...) -- C:\WINDOWS\system32\PnkBstrA.exe [75136] [PID.]

[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120] [PID.]

[MD5.668056D5C3C11AB7D266819A96B964E8] - (.Microsoft Corporation - WMDM PMSP Service.) -- C:\WINDOWS\system32\MsPMSPSv.exe [53248] [PID.]

[MD5.89CF33E9040E3CC39F097238D3D97032] - (.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe [78008] [PID.1036]

[MD5.E79184F51F3474568011818F08B7195C] - (.Symantec - Symantec Snapshot Service.) -- C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe [1562096] [PID.]

[MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.1556]

[MD5.4486AD32BB05628967695FCA1BADD46E] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.4036]

[MD5.4CBE2BD48A10404A7CB9FA9D45FD77A3] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [1047208] [PID.3428]

[MD5.8876910AC81F21A0E18AB50B633BBB97] - (...) -- C:\UsbFix\UsbFix.exe [552885] [PID.3232]

[MD5.A6333BD6D9D42AE4E3A72E5EA5E7560F] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2125312] [PID.1136]

[MD5.8BA7C024070F2B7FDD98ED8A4BA41789] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104] [PID.]

[MD5.8648D670AE0D95C95E7BBB5B80661796] - (.Microsoft Corporation - MS DTC console program.) -- C:\WINDOWS\system32\msdtc.exe [6144] [PID.]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\prefs.js

C:\Documents and Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\user.js (.not file.)

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [willy] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

M0 - MFSP: prefs.js [willy - quel3sm8.default] Navigateur incompatible | Facebook

M2 - MFEP: prefs.js [willy - quel3sm8.default\{7b13ec3e-999a-4b70-b9cb-2617b8323822}] [] Zynga Community Toolbar v3.7.0.6 (.Conduit Ltd..)

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

P2 - FPN: [HKLM] [@funwebproducts.com/Plugin] - (...) -- C:\Program Files\FunWebProducts\Installr\6.bin\NPFunWeb.dll (.not file.)

P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.10] - (.the VideoLAN Team - Version 1.1.10, copyright 1996-2011 The VideoLAN Team<br><a href="http.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll

P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail, Messenger, Actualité, Sport, People, Femmes - MSN France

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail, Messenger, Actualité, Sport, People, Femmes - MSN France

R0 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail, Messenger, Actualité, Sport, People, Femmes - MSN France

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (...) (No version) -- (.not file.)

R3 - URLSearchHook: (no name) - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (...) (No version) -- (.not file.)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)) -- C:\WINDOWS\system32\ieframe.dll

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 01s

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} . (.Orbiscom Ltd. All rights reserved. - FTO CMB.) -- C:\WINDOWS\system32\BhoECart.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corp. - Microsoft Search Helper Extention.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: (no name) - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (...) -- (.not file.)

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [iSUSScheduler] . (.InstallShield Software Corporation - InstallShield Update Service Scheduler.) -- C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

O4 - HKLM\..\Run: [Norton Ghost 14.0] . (.Symantec Corporation - Tray Application.) -- C:\Program Files\Norton Ghost\Agent\VProTray.exe

O4 - HKLM\..\Run: [bootSkin Startup Jobs] . (.Pas de propriétaire - Stardock BootSkin!.) -- C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe

O4 - HKLM\..\Run: [iSUSPM Startup] . (.InstallShield Software Corporation - InstallShield Update Service Update Manager.) -- c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\WINDOWS\KHALMNPR.exe

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] . (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\WINDOWS\KHALMNPR.exe

O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe

O4 - HKLM\..\Run: [egui] . (.ESET - Eset GUI.) -- C:\Program Files\ESET\ESET Smart Security\egui.exe

O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll

O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll

O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKLM\..\Run: [ROUTE66Sync] . (.ROUTE 66 - Sync9Loader.) -- C:\Program Files\ROUTE 66\ROUTE 66 Sync\Sync9Loader.exe

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKCU\..\Run: [CursorXP] . (.Pas de propriétaire - CursorXP.) -- C:\Program Files\CursorXP\CursorXP.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKCU\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\..\Run: [CursorXP] . (.Pas de propriétaire - CursorXP.) -- C:\Program Files\CursorXP\CursorXP.exe

O4 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe

O4 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKUS\S-1-5-21-823518204-1060284298-839522115-1003\..\Run: [skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop 7.0.lnk . (.Adobe Systems, Incorporated.) -- C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ImageReady 7.0.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Photoshop 7.0\ImageReady.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Audacity 1.3 Beta (Unicode).lnk . (.The Audacity Team.) -- C:\Program Files\Audacity 1.3 Beta (Unicode)\audacity.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office Word Viewer 2003.lnk . (...) -- C:\WINDOWS\Installer\{9085040C-6000-11D3-8CFE-0150048383C9}\wrdvicon.exe

O4 - Global Startup: C:\Documents And Settings\willy\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

O4 - Global Startup: C:\Documents And Settings\willy\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\willy\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr

O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe

~ Scan IE Menu Contextuel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Uninstall BitDefender Online Scanner v8 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Site dans la Zone de confiance d'Internet Explorer (O15)

O15 - Trusted Zone: [HKCU\...\Domains] http.mappy.com

O15 - Trusted Zone: [HKCU\...\Domains\www] http.mappy.com

O15 - Trusted Zone: [HKCU\...\Domains] http.orange.fr

O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr

~ Scan IE Zone Confiance in 00mn 01s

 

 

 

---\\ Objets ActiveX (Downloaded Program Files)(O16)

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab

O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://juniper.net/dana-cached/sc/JuniperSetupClient.cab

~ Scan Objets ActiveX in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{F88BCCD4-E921-43D5-B21D-688D0478D5FF}: NameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{786E73E2-ECA4-4E6B-A437-AC5BCBD713D7}: DhcpNameServer = 178.32.51.4 76.73.18.50

O17 - HKLM\System\CCS\Services\Tcpip\..\{C2EBB685-4EF8-4E95-934A-10667AB81543}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{F88BCCD4-E921-43D5-B21D-688D0478D5FF}: NameServer = 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{786E73E2-ECA4-4E6B-A437-AC5BCBD713D7}: DhcpNameServer = 178.32.51.4 76.73.18.50

O17 - HKLM\System\CS1\Services\Tcpip\..\{C2EBB685-4EF8-4E95-934A-10667AB81543}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{F88BCCD4-E921-43D5-B21D-688D0478D5FF}: NameServer = 192.168.1.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{786E73E2-ECA4-4E6B-A437-AC5BCBD713D7}: DhcpNameServer = 192.168.1.1 81.253.149.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{C2EBB685-4EF8-4E95-934A-10667AB81543}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{F88BCCD4-E921-43D5-B21D-688D0478D5FF}: NameServer = 192.168.1.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{786E73E2-ECA4-4E6B-A437-AC5BCBD713D7}: DhcpNameServer = 178.32.51.4 76.73.18.50

O17 - HKLM\System\CS3\Services\Tcpip\..\{C2EBB685-4EF8-4E95-934A-10667AB81543}: DhcpNameServer = 192.168.1.1 192.168.1.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL

O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Eset Service (ekrn) . (.ESET - Eset Service.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe

O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\WINDOWS\system32\FsUsbExService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Agent NAI ePolicy Orchestrator (NAIMAGENT32) . (.Network Associates, Inc. - NAI ePolicy Orchestrator Agent.) - C:\EPOAgent\naimas32.exe

O23 - Service: Norton Ghost (Norton Ghost) . (.Symantec Corporation - Service Module.) - C:\Program Files\Norton Ghost\Agent\VProSvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.4.) - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (easdrv) . (.ESET - Eset AntiStealth driver.) - C:\WINDOWS\system32\DRIVERS\easdrv.sys

O41 - Driver: (epfwtdi) . (.ESET - Eset Personal Firewall TDI filter.) - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: (wdmaud) . (.Microsoft Corporation - MMSYSTEM Wave/Midi API mapper.) - C:\WINDOWS\system32\drivers\wdmaud.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}

O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM] -- {B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}

O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1

O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1

O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1

O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {197A3012-8C85-4FD3-AB66-9EC7E13DB92E}

O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683}

O42 - Logiciel: Adobe Dreamweaver CS4 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_acce07fd2c8fe7f9e3f26243e626578

O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems.) [HKLM] -- ShockwaveFlash

O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

O42 - Logiciel: Adobe Media Player - (.Adobe Systems Incorporated.) [HKLM] -- {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}

O42 - Logiciel: Adobe Reader X (10.1.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}

O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {14AFE241-FC6E-4FDB-BCA0-7AD6F4974171}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {308B6AEA-DE50-4666-996D-0FA461719D6B}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}

O42 - Logiciel: Audacity 1.3.11 (Unicode) - (.Audacity Team.) [HKLM] -- Audacity 1.3 Beta (Unicode)_is1

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {2A981294-F14C-4F0F-9627-D793270922F8}

O42 - Logiciel: BootSkin - (.Pas de propriétaire.) [HKLM] -- BootSkin

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner

O42 - Logiciel: CDDRV_Installer - (.Logitech.) [HKLM] -- {0C826C5B-B131-423A-A229-C71B3CACCD6A}

O42 - Logiciel: CursorXP - (.Pas de propriétaire.) [HKLM] -- CursorXP

O42 - Logiciel: DMIView B06.1227.01 - (.Gigabyte.) [HKLM] -- {3EE1008C-11A1-4F4F-8DB7-27573924DE78}

O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU] -- Winamp Detect

O42 - Logiciel: ESET Smart Security - (.ESET, spol s r. o..) [HKLM] -- {FBF09842-EB7F-4BC2-BD32-DDE2572B2195}

O42 - Logiciel: ETC B07.1212.01 - (.Gigabyte.) [HKLM] -- {9C6105B4-2A33-4ADB-89A0-F423D562F3B9}

O42 - Logiciel: Face_Wizard B07.1212.01 - (.Gigabyte.) [HKLM] -- {E76FCE6B-9999-4250-8C75-B2DA4AD41268}

O42 - Logiciel: Free Mp3 Wma Converter V 1.81 - (.Pas de propriétaire.) [HKLM] -- Free Mp3 Wma Converter_is1

O42 - Logiciel: Gadwin PrintScreen - (.Pas de propriétaire.) [HKLM] -- Gadwin PrintScreen

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}

O42 - Logiciel: Gigabyte Raid Configurer - (.Gigabyte Technology Corp..) [HKLM] -- {3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}

O42 - Logiciel: Google Talk (remove only) - (.Pas de propriétaire.) [HKLM] -- {226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {CC016F21-3970-11DE-B878-005056806466}

O42 - Logiciel: HP Imaging Device Functions 10.0 - (.HP.) [HKLM] -- HP Imaging Device Functions

O42 - Logiciel: HP Photosmart Essential 2.5 - (.HP.) [HKLM] -- HP Photosmart Essential

O42 - Logiciel: Hercules Classic Link Webcam - (.Hercules.) [HKLM] -- {FD4FE0F7-91FC-43A2-9C3A-187553991FFF}

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView

O42 - Logiciel: Java 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216013FF}

O42 - Logiciel: Juniper Networks Cache Cleaner 6.5.0 - (.Juniper Networks.) [HKCU] -- Juniper_Networks_Cache_Cleaner 6.5.0

O42 - Logiciel: Juniper Networks Host Checker - (.Juniper Networks.) [HKCU] -- Neoteris_Host_Checker

O42 - Logiciel: Juniper Networks Setup Client - (.Juniper Networks.) [HKCU] -- Juniper_Setup_Client

O42 - Logiciel: Juniper Networks Setup Client Activex Control - (.Juniper Networks.) [HKLM] -- Juniper_Setup_Client Activex Control

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: KhalInstallWrapper - (.Logitech.) [HKLM] -- {3101CB58-3482-4D21-AF1A-7057FC935355}

O42 - Logiciel: LAME v3.98.2 for Audacity - (.Pas de propriétaire.) [HKLM] -- LAME for Audacity_is1

O42 - Logiciel: LiveUpdate 3.2 (Symantec Corporation) - (.Symantec Corporation.) [HKLM] -- LiveUpdate

O42 - Logiciel: Logitech SetPoint - (.Logitech.) [HKLM] -- {F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}

O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27}

O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}

O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447

O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1

O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM] -- {F97E3841-CA9D-4964-9D64-26066241D26F}

O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {8FB1B528-E260-451E-9B55-E9152F94B80B}

O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}

O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95120000-0122-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft Office Word Viewer 2003 - (.Microsoft Corporation.) [HKLM] -- {9085040C-6000-11D3-8CFE-0150048383C9}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}

O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)

O42 - Logiciel: NVIDIA Logiciel système PhysX 9.10.0514 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX

O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}

O42 - Logiciel: NVIDIA Pilote audio HD : 1.1.13.1 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver

O42 - Logiciel: NVIDIA Pilote graphique 266.44 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: NVIDIA nView 135.50 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView

O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager

O42 - Logiciel: Nero 6 Ultra Edition - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey

O42 - Logiciel: Norton Ghost - (.Symantec Corporation.) [HKLM] -- {B0255743-165B-4BD5-8DA8-37DFB9930014}

O42 - Logiciel: OCR Software by I.R.I.S. 10.0 - (.HP.) [HKLM] -- HPOCR

O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {089DD780-DB3F-4CDB-A0C2-111360247298}

O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3

O42 - Logiciel: PunkBuster Services - (.Pas de propriétaire.) [HKLM] -- PunkBusterSvc

O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}

O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}

O42 - Logiciel: ROUTE 66 Sync - (.ROUTE 66.) [HKLM] -- InstallShield_{BE1A2C04-6F14-4A16-B290-003769418AD9}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O42 - Logiciel: SYSTEM_INFO B07.1213.01 - (.Gigabyte.) [HKLM] -- {CC4914EF-6618-4949-A1CF-BD4917A00221}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}

O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Skype™ 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}

O42 - Logiciel: SmartTRAK - (.UWATEC AG.) [HKLM] -- SmartTRAK

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: TeamViewer 5 - (.TeamViewer GmbH.) [HKLM] -- TeamViewer 5

O42 - Logiciel: USB 2.0 IrDA Bridge - (.Pas de propriétaire.) [HKLM] -- {10F5D9BB-E2F2-4B18-A65D-928B73D22E6F}

O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM] -- {888F1505-C2B3-4FDE-835D-36353EBD4754}

O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

O42 - Logiciel: Usb Joypad v1.22 - (.Pas de propriétaire.) [HKLM] -- Usb Joypad v1.22

O42 - Logiciel: VLC media player 1.1.10 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: Virtualis Crédit Mutuel - (.Pas de propriétaire.) [HKLM] -- Virtualis Crédit Mutuel

O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}

O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01

O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver

O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp

O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {9FF9FDF7-F84A-4F99-B4BB-066B6F95F33D}

O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {9D6524E6-15CF-4852-BF70-04FE973A3DE1}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}

O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime

O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

O42 - Logiciel: erLT - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {881F5DE8-9367-4B81-A325-E91BBC6472F9}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\AVS4YOU]

[HKCU\Software\Activision]

[HKCU\Software\Adobe]

[HKCU\Software\Ahead]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software\{5F3EFCA0-5598-DF77-B8DE-7262634B8F26}]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Audacity]

[HKCU\Software\Billeo]

[HKCU\Software\BitComet eMule plugin]

[HKCU\Software\BitComet]

[HKCU\Software\Borland]

[HKCU\Software\Bugsplat]

[HKCU\Software\CDDB]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\CocoonSoftware]

[HKCU\Software\CodeGear]

[HKCU\Software\CyberLink]

[HKCU\Software\DT Soft]

[HKCU\Software\DownloadCenter]

[HKCU\Software\ESET]

[HKCU\Software\Eagle Dynamics]

[HKCU\Software\Eidos]

[HKCU\Software\Electronic Arts]

[HKCU\Software\GNU]

[HKCU\Software\Gadwin Systems]

[HKCU\Software\GibbHill]

[HKCU\Software\Google]

[HKCU\Software\Haemimont Games]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\HookNetwork]

[HKCU\Software\IM Providers]

[HKCU\Software\IncrediMail]

[HKCU\Software\InstallShield]

[HKCU\Software\Intel]

[HKCU\Software\JEDI-VCL]

[HKCU\Software\JavaSoft]

[HKCU\Software\Juniper Networks]

[HKCU\Software\JustCause2]

[HKCU\Software\Leadertech]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Logitech]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Micro Application]

[HKCU\Software\Monitored]

[HKCU\Software\Mozilla]

[HKCU\Software\MultiStageTrayAgent]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\Nokia]

[HKCU\Software\ODBC]

[HKCU\Software\PC SOFT]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\RLZer]

[HKCU\Software\Reality Pump]

[HKCU\Software\Realtek]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Samsung]

[HKCU\Software\SecuROM]

[HKCU\Software\Skype]

[HKCU\Software\Smallfrogs Studio]

[HKCU\Software\SmartTRAK]

[HKCU\Software\Softonic]

[HKCU\Software\Softonic_France]

[HKCU\Software\Software FX, Inc]

[HKCU\Software\Stardock]

[HKCU\Software\SuperSoftwarePackage]

[HKCU\Software\Symantec]

[HKCU\Software\Sysinternals]

[HKCU\Software\TeamViewer]

[HKCU\Software\TouchStone Software]

[HKCU\Software\Trolltech]

[HKCU\Software\TuneUp]

[HKCU\Software\Ubisoft]

[HKCU\Software\Usbfix]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\Valve]

[HKCU\Software\VirtualDub.org]

[HKCU\Software\Wargaming.Net]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\Winamp]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Zyrax Software]

[HKCU\Software\eMule]

[HKCU\Software\keyhole.com]

[HKCU\Software\settings]

[HKCU\Software\yahooinstall]

[HKCU\Software\yuPlay]

[HKLM\Software\11131874]

[HKLM\Software\685D6D1C-D73A-4F37-B7E5E53660311DDB]

[HKLM\Software\AGEIA Technologies]

[HKLM\Software\AMD]

[HKLM\Software\AVS4YOU]

[HKLM\Software\Adobe]

[HKLM\Software\AdwCleaner]

[HKLM\Software\Ahead]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\Borland]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CDDB]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\CoreSecurity]

[HKLM\Software\Creative Tech]

[HKLM\Software\CyberLink]

[HKLM\Software\DT Soft]

[HKLM\Software\DivXNetworks]

[HKLM\Software\EA Games]

[HKLM\Software\ELTIMA Software]

[HKLM\Software\ESET]

[HKLM\Software\Electronic Arts]

[HKLM\Software\Even Balance]

[HKLM\Software\FRANCE TELECOM]

[HKLM\Software\FastImageResizer]

[HKLM\Software\FreeArc]

[HKLM\Software\GEAR Software]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\HP]

[HKLM\Software\Hercules Technologies]

[HKLM\Software\Hercules]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\ICE]

[HKLM\Software\Illusion Softworks]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\Khronos]

[HKLM\Software\Lame for Audacity]

[HKLM\Software\Licenses]

[HKLM\Software\Logitech]

[HKLM\Software\Macromedia]

[HKLM\Software\Macrovision]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\MarkAny]

[HKLM\Software\Micro Application]

[HKLM\Software\MicroQuill]

[HKLM\Software\Midway]

[HKLM\Software\MimarSinan]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\Network Associates]

[HKLM\Software\Nokia]

[HKLM\Software\Nullsoft]

[HKLM\Software\ODBC]

[HKLM\Software\PC Connectivity Solution]

[HKLM\Software\Panda Software]

[HKLM\Software\Piriform]

[HKLM\Software\PixArt]

[HKLM\Software\Pocket Soft]

[HKLM\Software\PocketSoft]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\ROUTE66]

[HKLM\Software\RTLSetup]

[HKLM\Software\Reality Pump]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Runscanner.net]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Samsung]

[HKLM\Software\Schlumberger]

[HKLM\Software\SeekappSrch]

[HKLM\Software\Services]

[HKLM\Software\Skype]

[HKLM\Software\Softonic_France]

[HKLM\Software\Stardock]

[HKLM\Software\Symantec]

[HKLM\Software\TeamViewer]

[HKLM\Software\TrendMicro]

[HKLM\Software\TuneUp]

[HKLM\Software\UWATEC AG]

[HKLM\Software\Ubisoft]

[HKLM\Software\Uniblue]

[HKLM\Software\Valve]

[HKLM\Software\VideoLAN]

[HKLM\Software\WB Electronics]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Windows]

[HKLM\Software\Wow6432Node]

[HKLM\Software\mozilla.org]

[HKLM\Software\swearware]

~ Scan Softwares in 00mn 00s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 20/07/2008 - 10:15:36 - [812321712] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 20/07/2008 - 10:50:32 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 20/07/2008 - 10:50:34 - [19278399] ----D- C:\Program Files\MSN

O43 - CFD: 20/07/2008 - 10:51:08 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 01/10/2011 - 13:35:06 - [6447152] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 20/07/2008 - 10:51:16 - [5250925] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 07/02/2011 - 16:46:00 - [2188837] ----D- C:\Program Files\Microsoft Sync Framework

O43 - CFD: 20/07/2008 - 10:51:28 - [0] ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 20/07/2008 - 10:52:04 - [5932136] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 20/07/2008 - 10:52:12 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 20/07/2008 - 10:52:16 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 20/07/2008 - 10:52:26 - [10374874] ----D- C:\Program Files\Movie Maker

O43 - CFD: 20/07/2008 - 10:53:24 - [929] ----D- C:\Program Files\Services en ligne

O43 - CFD: 20/07/2008 - 10:53:28 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 20/07/2008 - 10:54:30 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 20/07/2008 - 10:54:30 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 20/07/2008 - 11:00:56 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 20/07/2008 - 11:12:58 - [96701] ----D- C:\Program Files\Intel

O43 - CFD: 20/07/2008 - 11:17:34 - [145889261] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 20/07/2008 - 11:17:34 - [119871279] ----D- C:\Program Files\Realtek

O43 - CFD: 20/07/2008 - 11:31:54 - [263980307] ----D- C:\Program Files\Adobe

O43 - CFD: 20/07/2008 - 11:32:18 - [14518483] ----D- C:\Program Files\Gigabyte

O43 - CFD: 20/07/2008 - 11:41:14 - [366916682] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 20/07/2008 - 11:42:12 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 20/07/2008 - 11:42:18 - [4368271] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 20/07/2008 - 11:42:22 - [73278551] ----D- C:\Program Files\Ahead

O43 - CFD: 20/07/2008 - 11:43:06 - [184320] ----D- C:\Program Files\Microsoft.NET

O43 - CFD: 20/07/2008 - 11:50:04 - [3378588] ----D- C:\Program Files\WinRAR

O43 - CFD: 27/02/2011 - 17:34:56 - [155366] ----D- C:\Program Files\Winamp Detect

O43 - CFD: 20/07/2008 - 12:00:24 - [4751663] ----D- C:\Program Files\CursorXP

O43 - CFD: 07/02/2011 - 16:45:30 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition

O43 - CFD: 20/07/2008 - 12:30:36 - [43748302] ----D- C:\Program Files\Winamp

O43 - CFD: 20/07/2008 - 12:35:48 - [66198389] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 29/05/2011 - 00:21:48 - [34248059] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 20/07/2008 - 13:43:50 - [144285312] ----D- C:\Program Files\Windows Live

O43 - CFD: 20/07/2008 - 13:49:34 - [138504205] ----D- C:\Program Files\VideoLAN

O43 - CFD: 20/07/2008 - 13:50:40 - [3525368] ----D- C:\Program Files\CCleaner

O43 - CFD: 30/09/2011 - 22:39:16 - [6281188] ----D- C:\Program Files\Argente Registry Cleaner 3.0.0.0 Beta 3

O43 - CFD: 20/07/2008 - 18:22:26 - [7130807] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 20/07/2008 - 20:53:08 - [115256081] ----D- C:\Program Files\Google

O43 - CFD: 20/07/2008 - 20:59:52 - [3659084] ----D- C:\Program Files\Gadwin Systems

O43 - CFD: 20/07/2008 - 21:11:14 - [10326293] ----D- C:\Program Files\Stardock

O43 - CFD: 20/07/2008 - 23:43:38 - [289065829] ----D- C:\Program Files\Norton Ghost

O43 - CFD: 20/07/2008 - 23:44:50 - [16269313] ----D- C:\Program Files\Symantec

O43 - CFD: 30/04/2009 - 11:57:48 - [52666244] ----D- C:\Program Files\ESET

O43 - CFD: 30/04/2009 - 12:06:16 - [31099990] ----D- C:\Program Files\Hercules

O43 - CFD: 30/04/2009 - 16:21:10 - [86607910] ----D- C:\Program Files\Java

O43 - CFD: 14/05/2009 - 14:30:36 - [211078058] ----D- C:\Program Files\HP

O43 - CFD: 22/07/2009 - 10:11:54 - [13394442] ----D- C:\Program Files\PC Connectivity Solution

O43 - CFD: 01/08/2009 - 10:12:10 - [799424] ----D- C:\Program Files\OpenAL

O43 - CFD: 06/08/2009 - 15:02:14 - [17545122] ----D- C:\Program Files\TeamViewer

O43 - CFD: 12/09/2009 - 20:43:56 - [10158473] ----D- C:\Program Files\Free Audio Pack

O43 - CFD: 28/09/2009 - 00:07:02 - [304402160] ----D- C:\Program Files\NVIDIA Corporation

O43 - CFD: 28/09/2009 - 00:16:04 - [11266688] ----D- C:\Program Files\Microsoft Games for Windows - LIVE

O43 - CFD: 28/09/2009 - 00:17:48 - [6849] ----D- C:\Program Files\MSXML 6.0

O43 - CFD: 28/09/2009 - 00:19:06 - [36400897] ----D- C:\Program Files\Reference Assemblies

O43 - CFD: 28/09/2009 - 00:19:10 - [25757] ----D- C:\Program Files\MSBuild

O43 - CFD: 07/11/2009 - 09:25:50 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 07/11/2009 - 09:26:00 - [1356715] ----D- C:\Program Files\Microsoft

O43 - CFD: 07/11/2009 - 09:28:58 - [1559148] ----D- C:\Program Files\Microsoft Office Outlook Connector

O43 - CFD: 07/11/2009 - 09:29:08 - [38411899] ----D- C:\Program Files\Microsoft Silverlight

O43 - CFD: 15/12/2009 - 21:13:52 - [18120467] ----D- C:\Program Files\Logitech

O43 - CFD: 15/12/2009 - 21:15:30 - [2368590] ----D- C:\Program Files\Common Files

O43 - CFD: 05/01/2010 - 16:23:16 - [193409] ----D- C:\Program Files\Joypad

O43 - CFD: 08/03/2010 - 19:54:22 - [30285001] R---D- C:\Program Files\Skype

O43 - CFD: 13/04/2010 - 13:38:00 - [3031908] ----D- C:\Program Files\Adobe Media Player

O43 - CFD: 23/04/2010 - 13:00:08 - [11548319] ----D- C:\Program Files\DataTrak

O43 - CFD: 23/04/2010 - 13:00:48 - [159] ----D- C:\Program Files\SmartTRAK

O43 - CFD: 01/05/2010 - 16:29:32 - [317272] ----D- C:\Program Files\Virtualis

O43 - CFD: 04/05/2010 - 09:19:26 - [11100004] ----D- C:\Program Files\AVSVideoConverter6

O43 - CFD: 04/05/2010 - 09:20:34 - [48763364] ----D- C:\Program Files\AVS4YOU

O43 - CFD: 22/06/2010 - 23:28:50 - [10308220] ----D- C:\Program Files\DAEMON Tools Lite

O43 - CFD: 26/08/2010 - 18:02:32 - [34621306] ----D- C:\Program Files\Audacity 1.3 Beta (Unicode)

O43 - CFD: 26/08/2010 - 19:20:48 - [1226517] ----D- C:\Program Files\Lame for Audacity

O43 - CFD: 07/09/2010 - 14:32:14 - [4299] ----D- C:\Program Files\GT Interactive

O43 - CFD: 31/10/2010 - 09:28:48 - [1682209] ----D- C:\Program Files\IrfanView

O43 - CFD: 04/11/2010 - 14:25:14 - [249051638] ----D- C:\Program Files\Samsung

O43 - CFD: 04/11/2010 - 14:36:28 - [1595928] ----D- C:\Program Files\DIFX

O43 - CFD: 14/12/2010 - 12:34:58 - [26904610] ----D- C:\Program Files\MSECache

O43 - CFD: 30/12/2010 - 12:13:48 - [616775] ----D- C:\Program Files\Bonjour

O43 - CFD: 30/12/2010 - 12:14:02 - [76322555] ----D- C:\Program Files\QuickTime

O43 - CFD: 30/12/2010 - 12:14:20 - [128528715] ----D- C:\Program Files\iTunes

O43 - CFD: 30/12/2010 - 12:14:20 - [1856115] ----D- C:\Program Files\iPod

O43 - CFD: 04/01/2010 - 09:59:54 - [215974828] ----D- C:\Program Files\ROUTE 66

O43 - CFD: 07/01/2011 - 21:36:16 - [2147758] ----D- C:\Program Files\Messenger

O43 - CFD: 13/01/2011 - 00:08:44 - [2675] ----D- C:\Program Files\UltraVPN

O43 - CFD: 08/04/2011 - 09:15:40 - [0] ----D- C:\Program Files\icons

O43 - CFD: 15/12/2009 - 21:15:30 - [517484] ----D- C:\Program Files\Common Files\LogiShrd

O43 - CFD: 04/11/2010 - 14:25:32 - [1851106] ----D- C:\Program Files\Common Files\Samsung

O43 - CFD: 20/07/2008 - 10:15:36 - [271530447] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 20/07/2008 - 10:15:38 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 20/07/2008 - 10:15:40 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 20/07/2008 - 10:52:06 - [25382502] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 20/07/2008 - 10:52:40 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 20/07/2008 - 10:52:42 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 20/07/2008 - 11:17:28 - [12070090] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 20/07/2008 - 11:42:18 - [86016] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 20/07/2008 - 11:42:26 - [16721672] ----D- C:\Program Files\Fichiers Communs\Ahead

O43 - CFD: 20/07/2008 - 13:44:18 - [4407482] -SH-D- C:\Program Files\Fichiers Communs\WindowsLiveInstaller

O43 - CFD: 20/07/2008 - 21:11:16 - [315392] ----D- C:\Program Files\Fichiers Communs\Stardock

O43 - CFD: 20/07/2008 - 23:43:58 - [24156639] ----D- C:\Program Files\Fichiers Communs\Symantec Shared

O43 - CFD: 02/05/2009 - 00:11:56 - [98744743] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 14/05/2009 - 14:31:10 - [5280332] ----D- C:\Program Files\Fichiers Communs\HP

O43 - CFD: 14/05/2009 - 14:31:16 - [469525] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard

O43 - CFD: 04/07/2009 - 15:18:58 - [329728] ----D- C:\Program Files\Fichiers Communs\Micro Application Shared

O43 - CFD: 12/09/2009 - 20:37:22 - [64011769] ----D- C:\Program Files\Fichiers Communs\AVSMedia

O43 - CFD: 06/11/2009 - 16:24:00 - [141136195] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 15/12/2009 - 21:13:54 - [13894015] ----D- C:\Program Files\Fichiers Communs\Logishrd

O43 - CFD: 08/03/2010 - 19:54:24 - [2135336] ----D- C:\Program Files\Fichiers Communs\Skype

O43 - CFD: 13/04/2010 - 13:35:22 - [27374423] ----D- C:\Program Files\Fichiers Communs\Adobe AIR

O43 - CFD: 18/05/2010 - 09:11:20 - [4077444] ----D- C:\Program Files\Fichiers Communs\France Telecom

O43 - CFD: 04/11/2010 - 14:25:04 - [75237] ----D- C:\Program Files\Fichiers Communs\Samsung

O43 - CFD: 30/12/2010 - 12:13:42 - [94762864] ----D- C:\Program Files\Fichiers Communs\Apple

O43 - CFD: 04/01/2010 - 09:59:54 - [20480] ----D- C:\Program Files\Fichiers Communs\ROUTE 66

O43 - CFD: 10/02/2011 - 13:33:36 - [935] ----D- C:\Program Files\Fichiers Communs\DirectX

O43 - CFD: 01/10/2011 - 07:23:38 - [1258951] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 20/07/2008 - 10:15:00 - [6264427] -S--D- C:\Documents and Settings\willy\Application Data\Microsoft

O43 - CFD: 27/06/2011 - 14:56:08 - [83161] ----D- C:\Documents and Settings\willy\Application Data\vlc

O43 - CFD: 20/07/2008 - 11:00:58 - [0] ----D- C:\Documents and Settings\willy\Application Data\Identities

O43 - CFD: 20/07/2008 - 11:18:50 - [0] ----D- C:\Documents and Settings\willy\Application Data\InstallShield

O43 - CFD: 20/07/2008 - 12:05:14 - [27497438] ----D- C:\Documents and Settings\willy\Application Data\Mozilla

O43 - CFD: 20/07/2008 - 12:30:36 - [3366591] ----D- C:\Documents and Settings\willy\Application Data\Winamp

O43 - CFD: 20/07/2008 - 12:59:38 - [6220399] ----D- C:\Documents and Settings\willy\Application Data\Adobe

O43 - CFD: 20/07/2008 - 12:59:38 - [43876] ----D- C:\Documents and Settings\willy\Application Data\Macromedia

O43 - CFD: 20/07/2008 - 18:22:30 - [2195891] ----D- C:\Documents and Settings\willy\Application Data\Malwarebytes

O43 - CFD: 20/07/2008 - 19:02:26 - [0] ----D- C:\Documents and Settings\willy\Application Data\DAEMON Tools

O43 - CFD: 20/07/2008 - 23:50:34 - [0] ----D- C:\Documents and Settings\willy\Application Data\WinRAR

O43 - CFD: 21/07/2008 - 01:29:36 - [24972] R-H-D- C:\Documents and Settings\willy\Application Data\SecuROM

O43 - CFD: 21/07/2008 - 01:29:38 - [122384] ----D- C:\Documents and Settings\willy\Application Data\Bioshock

O43 - CFD: 21/07/2008 - 12:02:40 - [336] ----D- C:\Documents and Settings\willy\Application Data\Symantec

O43 - CFD: 06/04/2011 - 16:29:00 - [835440] ----D- C:\Documents and Settings\willy\Application Data\PunkBuster

O43 - CFD: 30/04/2009 - 11:58:08 - [652609] ----D- C:\Documents and Settings\willy\Application Data\ESET

O43 - CFD: 30/04/2009 - 08:50:10 - [0] ----D- C:\Documents and Settings\willy\Application Data\FileSubmit

O43 - CFD: 30/04/2009 - 16:20:16 - [32618787] ----D- C:\Documents and Settings\willy\Application Data\Sun

O43 - CFD: 30/04/2009 - 16:50:04 - [4060] ----D- C:\Documents and Settings\willy\Application Data\DAEMON Tools Lite

O43 - CFD: 03/05/2009 - 18:55:24 - [0] ----D- C:\Documents and Settings\willy\Application Data\AdobeUM

O43 - CFD: 06/05/2009 - 10:14:24 - [0] ----D- C:\Documents and Settings\willy\Application Data\GibbHill Properties Ltd

O43 - CFD: 14/05/2009 - 17:23:22 - [199] ----D- C:\Documents and Settings\willy\Application Data\dvdcss

O43 - CFD: 26/06/2009 - 16:57:32 - [31691] ----D- C:\Documents and Settings\willy\Application Data\HP

O43 - CFD: 17/03/2011 - 23:40:54 - [5120] ----D- C:\Documents and Settings\willy\Application Data\TuneUp Software

O43 - CFD: 25/05/2011 - 14:11:34 - [0] ----D- C:\Documents and Settings\willy\Application Data\EurekaLog

O43 - CFD: 22/07/2009 - 10:23:28 - [187328] ----D- C:\Documents and Settings\willy\Application Data\Nokia

O43 - CFD: 22/07/2009 - 10:24:48 - [1534700] ----D- C:\Documents and Settings\willy\Application Data\PC Suite

O43 - CFD: 01/08/2009 - 00:12:44 - [33609] ----D- C:\Documents and Settings\willy\Application Data\Google

O43 - CFD: 06/08/2009 - 15:02:22 - [342189] ----D- C:\Documents and Settings\willy\Application Data\TeamViewer

O43 - CFD: 18/08/2009 - 23:44:52 - [405206] ----D- C:\Documents and Settings\willy\Application Data\Microsoft Games

O43 - CFD: 30/08/2009 - 00:45:06 - [1878660] ----D- C:\Documents and Settings\willy\Application Data\The Creative Assembly

O43 - CFD: 12/09/2009 - 20:37:54 - [0] ----D- C:\Documents and Settings\willy\Application Data\AVS4YOU

O43 - CFD: 25/05/2011 - 13:17:06 - [0] ----D- C:\Documents and Settings\willy\Application Data\RegistryKeys

O43 - CFD: 01/10/2011 - 11:28:20 - [157184] ----D- C:\Documents and Settings\willy\Application Data\Runscanner.net

O43 - CFD: 11/11/2009 - 14:02:32 - [10713737] ----D- C:\Documents and Settings\willy\Application Data\Juniper Networks

O43 - CFD: 20/11/2009 - 17:38:52 - [5942453] ----D- C:\Documents and Settings\willy\Application Data\Ubisoft

O43 - CFD: 15/12/2009 - 21:15:36 - [353] ----D- C:\Documents and Settings\willy\Application Data\Leadertech

O43 - CFD: 15/12/2009 - 22:44:22 - [32367] ----D- C:\Documents and Settings\willy\Application Data\Logitech

O43 - CFD: 08/03/2010 - 19:54:50 - [3573524] ----D- C:\Documents and Settings\willy\Application Data\Skype

O43 - CFD: 08/03/2010 - 19:56:44 - [220760] ----D- C:\Documents and Settings\willy\Application Data\skypePM

O43 - CFD: 11/03/2010 - 09:34:40 - [365686] ----D- C:\Documents and Settings\willy\Application Data\Bioshock2

O43 - CFD: 12/04/2010 - 12:04:20 - [15403] ----D- C:\Documents and Settings\willy\Application Data\FileZilla

O43 - CFD: 19/04/2010 - 13:58:20 - [0] ----D- C:\Documents and Settings\willy\Application Data\NVIDIA

O43 - CFD: 23/04/2010 - 13:00:52 - [402] ----D- C:\Documents and Settings\willy\Application Data\Uwatec

O43 - CFD: 03/05/2010 - 15:14:58 - [0] ----D- C:\Documents and Settings\willy\Application Data\Broad Intelligence

O43 - CFD: 06/06/2010 - 14:20:32 - [0] ----D- C:\Documents and Settings\willy\Application Data\Help

O43 - CFD: 25/07/2010 - 17:16:02 - [18366355] ----D- C:\Documents and Settings\willy\Application Data\CocoonSoftware

O43 - CFD: 26/08/2010 - 18:02:44 - [1909] ----D- C:\Documents and Settings\willy\Application Data\Audacity

O43 - CFD: 18/10/2010 - 11:27:14 - [455953] ----D- C:\Documents and Settings\willy\Application Data\BitComet

O43 - CFD: 04/11/2010 - 14:25:56 - [157785829] ----D- C:\Documents and Settings\willy\Application Data\Samsung

O43 - CFD: 30/12/2010 - 12:14:56 - [728408] ----D- C:\Documents and Settings\willy\Application Data\Apple Computer

O43 - CFD: 04/01/2010 - 10:00:22 - [233570] ----D- C:\Documents and Settings\willy\Application Data\ROUTE 66 Sync

O43 - CFD: 13/01/2011 - 13:07:56 - [4125] ----D- C:\Documents and Settings\willy\Application Data\CyberLink

O43 - CFD: 20/07/2008 - 10:54:14 - [554056602] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Microsoft

O43 - CFD: 20/07/2008 - 12:00:30 - [812611] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Stardock

O43 - CFD: 20/07/2008 - 12:05:14 - [63329168] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Mozilla

O43 - CFD: 20/07/2008 - 15:50:24 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\TouchStoneSoftware

O43 - CFD: 20/07/2008 - 20:53:10 - [113779044] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Google

O43 - CFD: 21/07/2008 - 01:50:04 - [1950597] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Ahead

O43 - CFD: 30/04/2009 - 23:58:40 - [74087017] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\ESET

O43 - CFD: 03/05/2009 - 18:55:20 - [161298669] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Adobe

O43 - CFD: 08/08/2009 - 14:29:54 - [14389097] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\HP

O43 - CFD: 03/12/2009 - 13:35:04 - [3096] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\PC

O43 - CFD: 23/12/2009 - 09:21:46 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\WMTools Downloaded Files

O43 - CFD: 25/04/2010 - 10:38:54 - [3413] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Symantec_Corporation

O43 - CFD: 03/05/2010 - 15:23:12 - [2752132] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Broad Intelligence

O43 - CFD: 29/05/2010 - 00:22:52 - [900747] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\storage

O43 - CFD: 06/06/2010 - 14:20:32 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Help

O43 - CFD: 25/07/2010 - 17:15:50 - [275] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\WDSetup

O43 - CFD: 25/07/2010 - 17:22:30 - [15614] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\xrecode2

O43 - CFD: 21/11/2010 - 22:17:48 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\FalloutNV

O43 - CFD: 30/12/2010 - 12:13:24 - [7277510] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Apple Computer

O43 - CFD: 30/12/2010 - 12:13:58 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Apple

O43 - CFD: 04/01/2010 - 09:59:34 - [214961104] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Downloaded Installations

O43 - CFD: 04/01/2010 - 10:00:18 - [17726739] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9

O43 - CFD: 07/01/2011 - 10:43:32 - [2872] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\ApplicationHistory

O43 - CFD: 13/01/2011 - 13:13:36 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Power2Go

O43 - CFD: 15/01/2011 - 10:51:18 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Apache

O43 - CFD: 19/01/2011 - 20:26:34 - [161360] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Identities

O43 - CFD: 06/02/2011 - 13:39:46 - [11776] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Electronic Arts

O43 - CFD: 08/02/2011 - 10:18:14 - [14414] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Samsung

O43 - CFD: 10/02/2011 - 13:33:26 - [51262875] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Divinity 2

O43 - CFD: 13/03/2011 - 23:24:10 - [2326] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Two Worlds II

O43 - CFD: 14/05/2011 - 17:15:10 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\PackageAware

O43 - CFD: 16/05/2011 - 16:47:18 - [412] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\SKIDROW

O43 - CFD: 04/06/2011 - 12:19:04 - [845] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\28070

O43 - CFD: 04/06/2011 - 12:19:10 - [161834] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\ALI213

O43 - CFD: 04/06/2011 - 12:19:30 - [1688] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\dxhr

O43 - CFD: 01/10/2011 - 08:16:20 - [0] ----D- C:\Documents and Settings\willy\Local Settings\Application Data\Temp

~ Scan Program Folder in 00mn 00s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.1494C5A7051CC70C22AE917C795E7E56] - 01/10/2011 - 16:31:04 ---A- . (...) -- C:\UsbFix.txt [3683]

O44 - LFC:[MD5.6778C5D6AFDDBFC66373548E26E2EA70] - 01/10/2011 - 16:30:40 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1728826]

O44 - LFC:[MD5.F8A243D4E035BA1A62C60C8062D2DEEC] - 01/10/2011 - 16:25:22 ---A- . (...) -- C:\AdwCleaner[s3].txt [4058]

O44 - LFC:[MD5.AC9251A5060A0579CD65B6BAE242997E] - 01/10/2011 - 16:24:50 ---A- . (...) -- C:\AdwCleaner[R2].txt [3818]

O44 - LFC:[MD5.BF5A97395FC5E6B00640E506F0258437] - 01/10/2011 - 16:22:16 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.B29C263B42F2D0F2D4233ABF28023300] - 01/10/2011 - 16:10:34 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.C92211DFF82B53FF46E8A704AFD63ACB] - 01/10/2011 - 16:10:32 ---A- . (...) -- C:\WINDOWS\randseed.rnd [512]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/10/2011 - 16:10:26 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.0877AC09CAA217471589644C398FA572] - 01/10/2011 - 16:10:26 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.D5C72F2A612DE941BA2AC0004D96BC21] - 01/10/2011 - 16:09:08 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32536]

O44 - LFC:[MD5.5C3596D6CDD37EA65687245B058ED2B4] - 01/10/2011 - 16:09:08 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.26FAB0785A86CDCDC2C50B756F286A73] - 01/10/2011 - 16:01:40 ---A- . (...) -- C:\UsbFix_Upload_Me_WILL.zip [86763411]

O44 - LFC:[MD5.E712F88C1F861F5B6637F357FCFAFB7B] - 01/10/2011 - 15:35:28 ---A- . (...) -- C:\WINDOWS\setupact.log [2533]

O44 - LFC:[MD5.4B310DF73D37386150C8723DE0166796] - 01/10/2011 - 15:35:28 ---A- . (...) -- C:\WINDOWS\setupapi.log [43303]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/10/2011 - 15:35:28 --HA- . (...) -- C:\WINDOWS\system32\drivers\Msft_Kernel_LHidEqd_01005.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/10/2011 - 15:35:20 --HA- . (...) -- C:\WINDOWS\system32\drivers\Msft_Kernel_LEqdUsb_01005.Wdf [0]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/10/2011 - 15:11:32 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]

O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 01/10/2011 - 14:27:34 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini [116]

O44 - LFC:[MD5.D9F5147E5E1660CF452234C056668034] - 01/10/2011 - 09:48:22 ---A- . (...) -- C:\WINDOWS\reimage.ini [272]

O44 - LFC:[MD5.2340832B8B1EFB379280A30140D1B7ED] - 01/10/2011 - 06:23:25 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\WINDOWS\system32\java.exe [145184]

O44 - LFC:[MD5.FD8AB373BD7834A65114DD899199D00B] - 01/10/2011 - 06:23:25 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\WINDOWS\system32\javaw.exe [145184]

O44 - LFC:[MD5.4EDDB64328BE19A164657230C647913E] - 01/10/2011 - 06:23:25 ---A- . (.Sun Microsystems, Inc. - Java Web Start Launcher.) -- C:\WINDOWS\system32\javaws.exe [157472]

O44 - LFC:[MD5.3FA50D19887B754914491A29DF836171] - 01/10/2011 - 06:23:24 ---A- . (...) -- C:\WINDOWS\system32\jupdate-1.6.0_26-b03.log [3794]

O44 - LFC:[MD5.EEBACD996A2059BAE2181BB60673B938] - 01/10/2011 - 05:46:20 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [404640]

O44 - LFC:[MD5.8A7C91B7E9A46B3C489E634E8E0A9A27] - 01/10/2011 - 05:41:22 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [295664]

O44 - LFC:[MD5.F4D7863E97649611605109E7F8F9C9B6] - 30/09/2011 - 20:10:36 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [374818]

O44 - LFC:[MD5.6AAEB723C184453105DCF650DDF7BE07] - 30/09/2011 - 20:10:28 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [1085644]

O44 - LFC:[MD5.569699A0E3D218E64ACE3DD3F3F05326] - 30/09/2011 - 20:10:28 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [72384]

O44 - LFC:[MD5.F5ACA3E927712BC60AF37CAC6FCE4825] - 30/09/2011 - 20:10:28 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [86404]

O44 - LFC:[MD5.E5C53AEBBF121A5802BC81D05591F1B6] - 30/09/2011 - 20:10:28 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [444318]

O44 - LFC:[MD5.7C5E75EFF27758879A01BB2B24EAB676] - 30/09/2011 - 20:10:28 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [513428]

O44 - LFC:[MD5.8B270491886979B1DFBB09EB185DC760] - 30/09/2011 - 17:54:22 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2206]

~ Scan Files in 00mn 27s

 

 

 

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)

O45 - LFCP:[MD5.5C2E6C5533943D63A42E46874CAD0A75] - 01/10/2011 - 12:05:52 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf

O45 - LFCP:[MD5.A08D1565A731034073B396FA1F7351A3] - 01/10/2011 - 15:16:10 ---A- - C:\WINDOWS\Prefetch\WLXQUICKTIMECONTROLHOST.EXE-271639BF.pf

O45 - LFCP:[MD5.6219607D874AB489251313EA76E36109] - 01/10/2011 - 16:00:20 ---A- - C:\WINDOWS\Prefetch\EKRN.EXE-3B08DCD8.pf

O45 - LFCP:[MD5.B3E8D01F8A59ED6CC4FCA0BA2DA17C7D] - 01/10/2011 - 16:03:10 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf

O45 - LFCP:[MD5.4BB805CB91023EE77120E9F585F89BE0] - 01/10/2011 - 16:11:22 ---A- - C:\WINDOWS\Prefetch\READER_SL.EXE-3329220B.pf

O45 - LFCP:[MD5.CDE1046F7685BBF7275A1D66B32D87EC] - 01/10/2011 - 16:11:22 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf

O45 - LFCP:[MD5.DACF0E4972167C503A55A3F3F951010C] - 01/10/2011 - 16:12:18 ---A- - C:\WINDOWS\Prefetch\DLLHOST.EXE-5353C76C.pf

O45 - LFCP:[MD5.4020CBB39C10795B55C4BD38B6F65E06] - 01/10/2011 - 16:12:18 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf

O45 - LFCP:[MD5.A4DC6C8BFC10736B6AE2E8DFA03541A7] - 01/10/2011 - 16:12:20 ---A- - C:\WINDOWS\Prefetch\PRESENTATIONFONTCACHE.EXE-1706C4D2.pf

O45 - LFCP:[MD5.50EDEBEB6B1D119C90F636B3E8258540] - 01/10/2011 - 16:12:20 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf

O45 - LFCP:[MD5.E8AC81FDF59DFEC4687A64766283B1DD] - 01/10/2011 - 16:12:34 ---A- - C:\WINDOWS\Prefetch\SYMSNAPSERVICE.EXE-1C9FAF9A.pf

O45 - LFCP:[MD5.854C67AE614BE0D519F48FAE4EDCEAFE] - 01/10/2011 - 16:12:44 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf

O45 - LFCP:[MD5.DEBD1BB1A4D1B8C1BF1F4EC9AA1CBA7C] - 01/10/2011 - 16:12:44 ---A- - C:\WINDOWS\Prefetch\MSDTC.EXE-0E6E4AF7.pf

O45 - LFCP:[MD5.4BCB1E9E570A701CAE790169D1006B5A] - 01/10/2011 - 16:18:50 ---A- - C:\WINDOWS\Prefetch\LADS.EXE-06335087.pf

O45 - LFCP:[MD5.5EB41FCC51DBB95CFB41EE1660F89ABB] - 01/10/2011 - 16:18:52 ---A- - C:\WINDOWS\Prefetch\SETACL.EXE-33B348AC.pf

O45 - LFCP:[MD5.1EDC9A6B710B054AFB649C4E1F6FAF74] - 01/10/2011 - 16:18:52 ---A- - C:\WINDOWS\Prefetch\SUBINACL.EXE-17974576.pf

O45 - LFCP:[MD5.61D900197D08D2A69E1E599E5841B999] - 01/10/2011 - 16:20:18 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf

O45 - LFCP:[MD5.A14D10FF2C5501D8502203480C91ABA3] - 01/10/2011 - 16:20:46 ---A- - C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf

O45 - LFCP:[MD5.81DF7E55ED807B8216A47278D780BA14] - 01/10/2011 - 16:20:50 ---A- - C:\WINDOWS\Prefetch\SIGCHECK.EXE-306CABDB.pf

O45 - LFCP:[MD5.144AAD752C8F5C899843FF8AD0784CA9] - 01/10/2011 - 16:22:12 ---A- - C:\WINDOWS\Prefetch\NSLOOKUP.EXE-160B1221.pf

O45 - LFCP:[MD5.1A81B7C6264B347BCE8FED7AC3A3C43C] - 01/10/2011 - 16:25:34 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf

O45 - LFCP:[MD5.9BB95957B5BA1DB729C116E43E9C6A3F] - 01/10/2011 - 16:25:48 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf

O45 - LFCP:[MD5.D99EC1095BFE2C5F3C1AF32334852ACB] - 01/10/2011 - 16:26:02 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf

O45 - LFCP:[MD5.0D53CAC9B297333DF22BF5229D805E84] - 01/10/2011 - 16:26:08 ---A- - C:\WINDOWS\Prefetch\MBAM.EXE-0BEE0439.pf

O45 - LFCP:[MD5.89A74E9452062B7189C44B7FA42B9FAA] - 01/10/2011 - 16:28:36 ---A- - C:\WINDOWS\Prefetch\DEVICEMANAGER.EXE-30082278.pf

O45 - LFCP:[MD5.0D2C5A8A9664AB44B25CD3E34CDE81EA] - 01/10/2011 - 16:29:00 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf

O45 - LFCP:[MD5.7EAA533111E6E2AFF9EDE423740E2EAC] - 01/10/2011 - 16:29:56 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4489B61B.pf

O45 - LFCP:[MD5.3A1D5C6BE85523AF670F7A1A329E72FF] - 01/10/2011 - 16:31:22 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf

O45 - LFCP:[MD5.0BEEEB970E588B32C96808FA42ADFB53] - 01/10/2011 - 17:10:44 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf

O45 - LFCP:[MD5.5ED55286DB2446B7AB5715687715AB3D] - 01/10/2011 - 17:35:02 ---A- - C:\WINDOWS\Prefetch\Layout.ini

O45 - LFCP:[MD5.D62DD02F878E79152904D5FFD5099D23] - 01/10/2011 - 17:35:12 ---A- - C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf

O45 - LFCP:[MD5.1CD4A8B8BCF40096755DDED10AA3050A] - 01/10/2011 - 17:35:12 ---A- - C:\WINDOWS\Prefetch\DFRGFAT.EXE-03D95883.pf

O45 - LFCP:[MD5.DACBD404C32E274C6A1ABCBA6E78FBBA] - 01/10/2011 - 18:17:02 ---A- - C:\WINDOWS\Prefetch\WSCRIPT.EXE-32960AB9.pf

O45 - LFCP:[MD5.2DE428356A80358FFF7157D9AF4A41EA] - 01/10/2011 - 18:17:08 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf

O45 - LFCP:[MD5.F703CC2261606AF4AE1FF5C573F3B514] - 01/10/2011 - 18:17:08 ---A- - C:\WINDOWS\Prefetch\GREP.COM-2D03091C.pf

O45 - LFCP:[MD5.24D7E0AEB94887AE7C928BF7B09959F7] - 01/10/2011 - 18:17:38 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf

O45 - LFCP:[MD5.08C5AB58E9C96EAD405790AB4836B0CE] - 01/10/2011 - 18:17:58 ---A- - C:\WINDOWS\Prefetch\PV.EXE-215F4419.pf

O45 - LFCP:[MD5.1D062C2F2B5DA5C7B501A0F98DEA5B27] - 01/10/2011 - 18:18:06 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-0CBF6A11.pf

~ Scan Prefetcher in 00mn 00s

 

 

 

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "C:\Program Files\Google\Google Talk\googletalk.exe" [Enabled] .(.Google - Google Talk.) -- C:\Program Files\Google\Google Talk\googletalk.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\sessmgr.exe" [Disabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" [Enabled] .(.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" [Enabled] .(.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" [Enabled] .(.Hewlett-Packard Co. - HP All-in-One Launcher Utility.) -- C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" [Enabled] .(.Hewlett-Packard - MFC HP Scan Application.) -- C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" [Enabled] .(.Hewlett-Packard - HP CUE-Scanning Flow Component.) -- C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\TeamViewer\Version5\TeamViewer.exe" [Enabled] .(.TeamViewer GmbH - TeamViewer.) -- C:\Program Files\TeamViewer\Version5\TeamViewer.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Skype Technologies - Skype Extras Manager.) -- C:\Program Files\Skype\Plugin Manager\skypePM.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\WINDOWS\System32\muzapp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Bonjour\mDNSResponder.exe" [Enabled] .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O47 - AAKE:Key Export SP - "C:\Program Files\iTunes\iTunes.exe" [Enabled] .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\PnkBstrA.exe" [Enabled] .(...) -- C:\WINDOWS\System32\PnkBstrA.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\System32\PnkBstrB.exe" [Enabled] .(...) -- C:\WINDOWS\System32\PnkBstrB.exe

O47 - AAKE:Key Export SP - "D:\bitcom\bitcom 32Bit\BitComet.exe" [Enabled] .(...) -- D:\bitcom\bitcom 32Bit\BitComet.exe (.not file.)

O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Microsoft Corporation - Windows Live Sync.) -- C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF Dynamic.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nm.sys . (...) -- C:\WINDOWS\system32\Drivers\nm.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF Dynamic.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51)

O51 - MPSK:{0d24e83e-d9c0-11df-9f55-001d7daf3809}\AutoRun\command - Clé orpheline

O51 - MPSK:{318c6f48-383d-11e0-92eb-001d7daf3809}\AutoRun\command - Clé orpheline

O51 - MPSK:{6ecf0be2-c54a-11df-9455-001d7daf3809}\AutoRun\command - Clé orpheline

~ Scan Keys in 00mn 00s

 

 

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\36X Raid Configurer [Key] . (.Gigabyte Technology Corp. - Gigabyte RAID Configurer.) -- C:\WINDOWS\system32\xRaidSetup.exe

O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (...) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)

O53 - SMSR:HKLM\...\startupreg\Gadwin PrintScreen [Key] . (.Gadwin Systems, Inc - Gadwin PrintScreen.) -- C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe

O53 - SMSR:HKLM\...\startupreg\hpqSRMon [Key] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe

O53 - SMSR:HKLM\...\startupreg\JMB36X IDE Setup [Key] . (...) -- C:\WINDOWS\RaidTool\xInsIDE.exe

O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe

O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (...) -- G:\GAMES\cv5\Steam.exe (.not file.)

~ Scan SMSR Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSaveSettings"=

O56 - MWPE:[HKCU\...\policies\Explorer] - "ClearRecentDocsOnExit"=

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoActiveDesktop"=

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 01/10/2011 - 21:44:38 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 01/10/2011 - 21:42:38 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 01/10/2011 - 21:42:38 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 01/10/2011 - 21:42:38 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 01/10/2011 - 21:42:38 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 01/10/2011 - 21:42:38 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.7174F20AD9B7B7878A51ECCA03C499C2] - 01/10/2011 - 18:31:16 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys [106368]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 01/10/2011 - 21:42:38 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 01/10/2011 - 21:42:38 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.DF91159321C0991A2E2EB97C84DC4110] - 01/10/2011 - 07:57:14 ---A- . (.ESET - Eset AntiStealth driver.) -- C:\WINDOWS\system32\drivers\easdrv.sys [53256]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 01/10/2011 - 11:25:54 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.50ACB7253D1104E5917E15A0670D63D5] - 01/10/2011 - 00:10:52 R--A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\system32\drivers\nvhda32.sys [100456]

O58 - SDL:[MD5.5BC2E26075304E762FE442C78168B8AB] - 01/10/2011 - 14:27:38 ---A- . (.Guillemot Corporation - Filter Driver for the Hercules Webcams (MJPG).) -- C:\WINDOWS\system32\drivers\camfilt2.sys [98432]

O58 - SDL:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 01/10/2011 - 16:00:50 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [22216]

O58 - SDL:[MD5.8EDEC494AE4AA567E9BA77624BD5BC9B] - 01/10/2011 - 12:12:26 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 266.44.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [9885696]

O58 - SDL:[MD5.1E89DE7A4FB7A854EBB241D0AA8996DD] - 01/10/2011 - 15:51:02 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\WINDOWS\system32\drivers\tap0901.sys [25216]

O58 - SDL:[MD5.6216FD7FD227DE454238A702B218CEC7] - 01/10/2011 - 16:00:20 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x86).) -- C:\WINDOWS\system32\drivers\dgderdrv.sys [20032]

O58 - SDL:[MD5.D83F78382D78327B3102008A5E04BCBE] - 01/10/2011 - 14:25:26 ---A- . (...) -- C:\WINDOWS\system32\drivers\vidstub.sys [163712]

O58 - SDL:[MD5.A1ECEEAA5C5E74B2499EB51D38185B84] - 01/10/2011 - 20:56:16 ---A- . (.Sony Corporation - Sony USB Lower Filter driver.) -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS [7552]

O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/10/2011 - 00:00:00 ---A- . (...) -- C:\WINDOWS\system32\drivers\sptd.sys [691696]

O58 - SDL:[MD5.70035567754BED4E6AD353CA3F175127] - 01/10/2011 - 16:55:50 ---A- . (.Logitech, Inc. - Logitech Equad USB Driver..) -- C:\WINDOWS\system32\drivers\LEqdUsb.sys [40720]

O58 - SDL:[MD5.1961F8B618E3C20DF54C146B294EFD2A] - 01/10/2011 - 16:12:50 ---A- . (.Intel Corporation - Pilote NDIS 5.) -- C:\WINDOWS\system32\drivers\e100b325.sys [117760]

O58 - SDL:[MD5.F8A7212D0864EF5E9185FB95E6623F4D] - 01/10/2011 - 16:35:56 ---A- . (...) -- C:\WINDOWS\system32\drivers\lirsgt.sys [25888]

O58 - SDL:[MD5.1747E022B76BC248795B0AEDECCCF96F] - 01/10/2011 - 16:07:20 ---A- . (.Symantec Corporation - V2iMount.sys - Image Mounting Device Driver.) -- C:\WINDOWS\system32\drivers\v2imount.sys [38112]

O58 - SDL:[MD5.269ADC224B5946AD75D8368CE91F5ED7] - 01/10/2011 - 08:04:38 ---A- . (.ESET - Eset Personal Firewall TDI filter.) -- C:\WINDOWS\system32\drivers\epfwtdi.sys [54280]

O58 - SDL:[MD5.E78781B2C86C92A0A738DF566460F716] - 01/10/2011 - 18:40:16 ---A- . (.Symantec Corporation - VProEventMonitor.Sys - Event Monitoring driver.) -- C:\WINDOWS\system32\drivers\vproeventmonitor.sys [15088]

O58 - SDL:[MD5.E0B251DC16C6DF74BD6B2B8F5AAD7ABB] - 01/10/2011 - 08:04:36 ---A- . (.ESET - Eset Personal Firewall NDIS filter.) -- C:\WINDOWS\system32\drivers\epfwndis.sys [30728]

O58 - SDL:[MD5.E5FD8F94EA5E8BE3E5AEFBCADFDEC2CF] - 01/10/2011 - 08:04:34 ---A- . (.ESET - Eset Personal Firewall driver.) -- C:\WINDOWS\system32\drivers\epfw.sys [71688]

O58 - SDL:[MD5.9307BB1B5C3ED19517056E1F122D8C77] - 01/10/2011 - 07:56:22 ---A- . (.ESET - Amon monitor.) -- C:\WINDOWS\system32\drivers\eamon.sys [39944]

O58 - SDL:[MD5.5C2BDC152BBAB34F36473DEAF7713F22] - 01/10/2011 - 14:44:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\system32\drivers\usbaapl.sys [41984]

O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 01/10/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys [26600]

O58 - SDL:[MD5.021AF3E05B3152C0552AD7D06522A927] - 01/10/2011 - 16:09:02 ---A- . (.Compaq Computer Corporation - Pilote désérialisé pour carte ou module Compaq Ethernet/Fast Et.) -- C:\WINDOWS\system32\drivers\n100325.sys [131072]

O58 - SDL:[MD5.ABCB05CCDBF03000354B9553820E39F8] - 01/10/2011 - 10:25:56 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys [21568]

O58 - SDL:[MD5.D03D10F7DED688FECF50F8FBF1EA9B8A] - 01/10/2011 - 10:25:54 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZid412.sys [49920]

O58 - SDL:[MD5.89F41658929393487B6B7D13C8528CE3] - 01/10/2011 - 10:25:54 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys [16496]

O58 - SDL:[MD5.A324485106F133E751F4B7F47C4BE3EA] - 01/10/2011 - 18:21:04 ---A- . (.JMicron Technology Corp. - JMicron JMB36X RAID Driver.) -- C:\WINDOWS\system32\drivers\jraid.sys [83296]

O58 - SDL:[MD5.FD2041E9BA03DB7764B2248F02475079] - 01/10/2011 - 09:26:12 ---A- . (.Nokia - PCCS Mode Change Filter Driver.) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys [18816]

O58 - SDL:[MD5.6D39682A1051A5BE7437EC99F1BF9921] - 01/10/2011 - 04:14:30 R--A- . (.Ralink Technology Inc. - Sample Driver for Ralink 802.11g Wireless USB Adapters.) -- C:\WINDOWS\system32\drivers\rt2500usb.sys [140416]

O58 - SDL:[MD5.B2063CE662AF3AB20045121A5B716DF6] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - SAMSUNG USB Composite Device V2 Driver.) -- C:\WINDOWS\system32\drivers\sscebus.sys [98560]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewh.sys [12288]

O58 - SDL:[MD5.F0D933B42CD0594048E4D5200AE9E417] - 01/10/2011 - 16:35:56 ---A- . (...) -- C:\WINDOWS\system32\drivers\atksgt.sys [281760]

O58 - SDL:[MD5.50F2FBC24FF96334C88C51E8577CB939] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscewhnt.sys [12288]

O58 - SDL:[MD5.CBF03FFC08F8DB547BAB2F79AA663D16] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 WDM.) -- C:\WINDOWS\system32\drivers\sscemdm.sys [123648]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecm.sys [12416]

O58 - SDL:[MD5.1F6C65AC04ED909356B94E983A7479FC] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\WINDOWS\system32\drivers\sscecmnt.sys [12416]

O58 - SDL:[MD5.66799DC0AFE3DCAF8368CAE17394A762] - 01/10/2011 - 13:33:24 ---A- . (.MCCI Corporation - SAMSUNG Mobile Modem V2 Filter Driver.) -- C:\WINDOWS\system32\drivers\sscemdfl.sys [14848]

O58 - SDL:[MD5.81A0921E2A3FDCF840E43AF64BF96EA2] - 01/10/2011 - 07:50:56 ---A- . (.PixArt Imaging Inc. - PAC7302.) -- C:\WINDOWS\system32\drivers\PAC7302.SYS [457984]

O58 - SDL:[MD5.53F064EDEC4A0B7D4281E9E87813F90A] - 01/10/2011 - 10:08:38 ---A- . (.ELTIMA Software - Virtual Serial Bus.) -- C:\WINDOWS\system32\drivers\evsbc.sys [26448]

O58 - SDL:[MD5.9101FFFCFCCD1A30E870A5B8A9091B10] - 01/10/2011 - 17:12:42 ---A- . (.TeamViewer GmbH - TeamViewerVPN Network Adapter.) -- C:\WINDOWS\system32\drivers\teamviewervpn.sys [25088]

O58 - SDL:[MD5.77030525CD86A93F1AF34FA9B96D33CE] - 01/10/2011 - 16:56:32 ---A- . (.Logitech, Inc. - Logitech USB Filter Driver..) -- C:\WINDOWS\system32\drivers\LUsbFilt.sys [28560]

O58 - SDL:[MD5.7F9C7B28CF1C859E1C42619EEA946DC8] - 01/10/2011 - 16:56:06 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys [35472]

O58 - SDL:[MD5.AB33792A87285344F43B5CE23421BAB0] - 01/10/2011 - 16:56:16 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys [37392]

O58 - SDL:[MD5.0C6E346CDE730CF1356DD69AD6E9BC42] - 01/10/2011 - 16:55:18 ---A- . (.Logitech, Inc. - Logitech PS2 Keyboard Filter Driver..) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys [20240]

O58 - SDL:[MD5.8A5993705ADD14352C9A279FA8338334] - 01/10/2011 - 16:55:26 ---A- . (.Logitech, Inc. - Logitech PS/2 Mouse Filter Driver..) -- C:\WINDOWS\system32\drivers\L8042mou.Sys [63248]

O58 - SDL:[MD5.9837E55673818ECD8FEBB47F7F77521A] - 01/10/2011 - 16:56:24 ---A- . (.Logitech, Inc. - Logitech Filter Driver for Mouse Class..) -- C:\WINDOWS\system32\drivers\LMouKE.Sys [79248]

O58 - SDL:[MD5.C42F37A1F345219B4888188BF297DDEF] - 01/10/2011 - 10:36:48 ---A- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [5818400]

O58 - SDL:[MD5.C7D9F9717916B34C1B00DD4834AF485C] - 01/10/2011 - 23:17:00 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys [1395800]

O58 - SDL:[MD5.267FC636801EDC5AB28E14036349E3BE] - 01/10/2011 - 23:16:00 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys [1691480]

O58 - SDL:[MD5.BC9C2EF22EE0320C079E3FF9B4D29951] - 01/10/2011 - 10:38:10 ---A- . (.Silicon Laboratories - SiUSBXp.sys.) -- C:\WINDOWS\system32\drivers\SiUSBXp.sys [14848]

O58 - SDL:[MD5.3205EEDEB6E57D9063E703F84721E768] - 01/10/2011 - 10:38:10 ---A- . (.Silicon Laboratories - SiLib WDM Support Driver.) -- C:\WINDOWS\system32\drivers\SiLib.sys [18944]

O58 - SDL:[MD5.D92AFAE1AF76AB9CC31B479DE74A1D4D] - 01/10/2011 - 10:08:44 ---A- . (.ELTIMA Software - Virtual Serial Port Driver.) -- C:\WINDOWS\system32\drivers\evserial.sys [52944]

O58 - SDL:[MD5.1029C62982DDC1B6237C39A55F14E358] - 01/10/2011 - 10:38:04 ---A- . (.WB Electronic - INFUSB.SYS.) -- C:\WINDOWS\system32\drivers\infusb.sys [15904]

O58 - SDL:[MD5.D3218867AFDF74D7AB76A3911B4544A2] - 01/10/2011 - 10:28:16 ---A- . (.StorageCraft - StorageCraft Volume Snap-Shot.) -- C:\WINDOWS\system32\drivers\symsnap.sys [138464]

O58 - SDL:[MD5.A1A16662C6B1A665D965D61B9EECC5A7] - 01/10/2011 - 20:49:10 ---A- . (.SigmaTel, Inc. - NDIS 5.0 USB Infra-Red Driver.) -- C:\WINDOWS\system32\drivers\irstusb.sys [26624]

O58 - SDL:[MD5.32491B6BAE0AFAD1D7A62C0EF0AF4321] - 01/10/2011 - 16:55:58 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidEqd.sys [10384]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 01/10/2011 - 21:41:22 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 01/10/2011 - 21:42:04 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 01/10/2011 - 21:42:50 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 01/10/2011 - 21:43:08 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 01/10/2011 - 21:44:20 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 01/10/2011 - 21:44:20 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 01/10/2011 - 21:44:20 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 01/10/2011 - 21:44:20 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 01/10/2011 - 21:44:20 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.ECD2F9D67B06606064DAF6961A6D5EFE] - 01/10/2011 - 17:53:54 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\pcandis5.sys [32128]

O58 - SDL:[MD5.B670C5D89F0726B7A2A7DFB4E968CDF8] - 01/10/2011 - 09:38:34 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) -- C:\WINDOWS\system32\pcampr5.sys [34688]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 01/10/2011 - 01:46:56 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 01/10/2011 - 01:45:26 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 01/10/2011 - 01:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 01/10/2011 - 01:45:12 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 01/10/2011 - 01:45:16 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 01/10/2011 - 01:45:14 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.B07663A810E861EEBFD0EAC7E82CA62D] - 01/10/2011 - 09:03:52 ---A- . (...) -- C:\WINDOWS\system32\FsUsbExDisk.Sys [36640]

~ Scan Drivers in 00mn 02s

 

 

 

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)

O61 - LFC:Last File Created 01/10/2011 - 05:54:28 ---A- C:\Documents And Settings\willy\Recent\msvcr90.zip.lnk [334]

O61 - LFC:Last File Created 01/10/2011 - 05:58:58 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\bookmarkbackups\bookmarks-2011-10-01.json [11262]

O61 - LFC:Last File Created 01/10/2011 - 06:22:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\C554DCF706A5AAB8B360FAD227EAB9C7 [1310]

O61 - LFC:Last File Created 01/10/2011 - 06:22:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\E8974A4669383843486E5AFDB09650F5 [2249]

O61 - LFC:Last File Created 01/10/2011 - 06:22:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\C554DCF706A5AAB8B360FAD227EAB9C7 [100]

O61 - LFC:Last File Created 01/10/2011 - 06:22:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\E8974A4669383843486E5AFDB09650F5 [124]

O61 - LFC:Last File Created 01/10/2011 - 06:22:56 ---A- C:\Documents And Settings\willy\Application Data\Sun\Java\jre1.6.0_26\Java3BillDevices.jpg [21010]

O61 - LFC:Last File Created 01/10/2011 - 06:23:30 ---A- C:\Documents And Settings\willy\Application Data\Sun\Java\Deployment\deployment.properties [474]

O61 - LFC:Last File Created 01/10/2011 - 06:23:36 ---A- C:\Documents And Settings\willy\Application Data\Sun\Java\AU\au.cab [577073]

O61 - LFC:Last File Created 01/10/2011 - 06:23:36 ---A- C:\Documents And Settings\willy\Application Data\Sun\Java\AU\au.msi [207360]

O61 - LFC:Last File Created 01/10/2011 - 06:23:38 ---A- C:\Documents And Settings\All Users\Application Data\Sun\Java\Java Update\jaureglist.xml [260]

O61 - LFC:Last File Created 01/10/2011 - 06:23:40 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\F78CAE5D65CB8F387E2E0E15EF7E4AE3 [3254]

O61 - LFC:Last File Created 01/10/2011 - 06:23:40 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\F78CAE5D65CB8F387E2E0E15EF7E4AE3 [238]

O61 - LFC:Last File Created 01/10/2011 - 06:34:38 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\content-prefs.sqlite [229376]

O61 - LFC:Last File Created 01/10/2011 - 06:42:36 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_62.67.184.68\update.ver [43258]

O61 - LFC:Last File Created 01/10/2011 - 07:04:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 [70070]

O61 - LFC:Last File Created 01/10/2011 - 07:04:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\8EDCF682921FE94F4A02A43CD1A28E6B [500]

O61 - LFC:Last File Created 01/10/2011 - 07:04:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 [114]

O61 - LFC:Last File Created 01/10/2011 - 07:04:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\8EDCF682921FE94F4A02A43CD1A28E6B [100]

O61 - LFC:Last File Created 01/10/2011 - 07:07:18 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk [1804]

O61 - LFC:Last File Created 01/10/2011 - 07:08:50 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\#SharedObjects\NFUQ77XH\mail.google.com\wakeup.sol [37]

O61 - LFC:Last File Created 01/10/2011 - 07:08:50 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\pluginreg.dat [12880]

O61 - LFC:Last File Created 01/10/2011 - 07:16:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\RdLang_rdlang32.fra [9373696]

O61 - LFC:Last File Created 01/10/2011 - 07:16:26 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Color\ACECache11.lst [15469]

O61 - LFC:Last File Created 01/10/2011 - 07:16:30 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Acrobat\10.0\UserCache.bin [80550]

O61 - LFC:Last File Created 01/10/2011 - 07:16:32 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Acrobat\10.0\SharedDataEvents [3072]

O61 - LFC:Last File Created 01/10/2011 - 07:16:44 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 [932]

O61 - LFC:Last File Created 01/10/2011 - 07:16:44 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 [134]

O61 - LFC:Last File Created 01/10/2011 - 07:16:46 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\RdLang_Annots.FRA [2508288]

O61 - LFC:Last File Created 01/10/2011 - 07:16:48 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Adobe\Acrobat\10.0\Cache\RdLang_SendMail.FRA [23040]

O61 - LFC:Last File Created 01/10/2011 - 07:16:50 ---A- C:\Documents And Settings\willy\Application Data\Adobe\Acrobat\10.0\ReaderMessages [20480]

O61 - LFC:Last File Created 01/10/2011 - 07:17:20 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\config.conf [2399]

O61 - LFC:Last File Created 01/10/2011 - 07:17:20 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\custom.conf [5]

O61 - LFC:Last File Created 01/10/2011 - 07:17:20 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\news.conf [250]

O61 - LFC:Last File Created 01/10/2011 - 07:17:28 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\UpdateDL.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:32:38 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.111001-0832.txt [1992]

O61 - LFC:Last File Created 01/10/2011 - 07:42:36 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_89.202.157.227\update.ver [43258]

O61 - LFC:Last File Created 01/10/2011 - 07:57:42 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.70154 [77]

O61 - LFC:Last File Created 01/10/2011 - 07:57:42 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.70154 [54784]

O61 - LFC:Last File Created 01/10/2011 - 07:57:44 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-10-01 (08-57-42).txt [1106]

O61 - LFC:Last File Created 01/10/2011 - 07:58:14 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\extensions.sqlite [393216]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Bots.sbe [18]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Cookies.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\FileExt.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Links.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\Single.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\SystemInternals.sbe [126]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\WaitFor.sbe [0]

O61 - LFC:Last File Created 01/10/2011 - 07:58:30 --HA- C:\Documents And Settings\All Users\ntuser.dat.LOG [1024]

O61 - LFC:Last File Created 01/10/2011 - 07:58:32 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Sync9Loader.log.0003 [4138]

O61 - LFC:Last File Created 01/10/2011 - 07:58:34 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\httpfe\cookies.dat [2]

O61 - LFC:Last File Created 01/10/2011 - 08:06:04 --HA- C:\Documents And Settings\willy\Application Data\Skype\etilqs_0eSSP0Z6ecgCDN9WVA8z [3608]

O61 - LFC:Last File Created 01/10/2011 - 08:06:04 --HA- C:\Documents And Settings\willy\Application Data\Skype\etilqs_lMhig4JyB4T25tUa4TCI [31744]

O61 - LFC:Last File Created 01/10/2011 - 09:05:18 ---A- C:\Documents And Settings\willy\Application Data\ROUTE 66 Sync\Download\SpeedCamera\France.safety [140468]

O61 - LFC:Last File Created 01/10/2011 - 09:05:18 ---A- C:\Documents And Settings\willy\Application Data\ROUTE 66 Sync\Download\mobile.dat [15040]

O61 - LFC:Last File Created 01/10/2011 - 09:08:14 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\ROUTE66Sync.log.0001 [57512]

O61 - LFC:Last File Created 01/10/2011 - 09:08:38 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\Services.lnk [1506]

O61 - LFC:Last File Created 01/10/2011 - 09:28:54 ---A- C:\Documents And Settings\willy\Cookies\XDAXM30S.txt [98]

O61 - LFC:Last File Created 01/10/2011 - 09:30:02 ---A- C:\Documents And Settings\willy\Recent\Photo0057.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 09:30:58 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD [558]

O61 - LFC:Last File Created 01/10/2011 - 09:30:58 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD [146]

O61 - LFC:Last File Created 01/10/2011 - 09:31:06 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 [159020]

O61 - LFC:Last File Created 01/10/2011 - 09:31:06 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 [124]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 [15698]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 [469]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 [460]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 [110]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 [98]

O61 - LFC:Last File Created 01/10/2011 - 09:31:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 [110]

O61 - LFC:Last File Created 01/10/2011 - 09:35:02 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ars.cache [155326]

O61 - LFC:Last File Created 01/10/2011 - 09:35:06 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\census.cache [231445]

O61 - LFC:Last File Created 01/10/2011 - 09:43:02 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\ROUTE66Sync.log.0000 [24928]

O61 - LFC:Last File Created 01/10/2011 - 09:45:06 --HA- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\Phone.dat [435]

O61 - LFC:Last File Created 01/10/2011 - 09:45:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\Res\navkeys.dat [24621]

O61 - LFC:Last File Created 01/10/2011 - 09:45:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\Temporary\Tiles\MapsListBackup.txt [859]

O61 - LFC:Last File Created 01/10/2011 - 09:45:10 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Sync9Loader.log.0002 [9633]

O61 - LFC:Last File Created 01/10/2011 - 09:46:14 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\B99BAAE191397E2048C62BA973FE16E4C20AFBF9.NQF [7909376]

O61 - LFC:Last File Created 01/10/2011 - 09:46:46 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\B99BAAE191397E2048C62BA973FE16E4C20AFBF9.NDF [1004]

O61 - LFC:Last File Created 01/10/2011 - 09:46:46 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\INFO.NQI [12]

O61 - LFC:Last File Created 01/10/2011 - 09:47:54 ---A- C:\Documents And Settings\willy\Application Data\ROUTE 66 Sync\Backup\Landmarks.db [372]

O61 - LFC:Last File Created 01/10/2011 - 09:47:54 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\Res\Landmarks.db [372]

O61 - LFC:Last File Created 01/10/2011 - 09:47:54 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\Temporary\Tiles\20_cities.db [483]

O61 - LFC:Last File Created 01/10/2011 - 09:47:54 --HA- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Data\hk.flg [0]

O61 - LFC:Last File Created 01/10/2011 - 09:50:14 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\3B1CD018D5C9CA03ED19BD0CC0ADCEF8 [544]

O61 - LFC:Last File Created 01/10/2011 - 09:50:14 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD [781]

O61 - LFC:Last File Created 01/10/2011 - 09:50:14 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\3B1CD018D5C9CA03ED19BD0CC0ADCEF8 [136]

O61 - LFC:Last File Created 01/10/2011 - 09:50:14 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD [156]

O61 - LFC:Last File Created 01/10/2011 - 09:51:02 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\B8CC409ACDBF2A2FE04C56F2875B1FD6 [561]

O61 - LFC:Last File Created 01/10/2011 - 09:51:02 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6 [134]

O61 - LFC:Last File Created 01/10/2011 - 09:52:14 ---A- C:\Documents And Settings\willy\Cookies\YEP62YFN.txt [1183]

O61 - LFC:Last File Created 01/10/2011 - 10:28:20 ---A- C:\Documents And Settings\willy\Application Data\Runscanner.net\VirusTotalUpload.exe [157184]

O61 - LFC:Last File Created 01/10/2011 - 10:29:14 ---A- C:\Documents And Settings\willy\Recent\runscanner.run.lnk [431]

O61 - LFC:Last File Created 01/10/2011 - 10:29:16 ---A- C:\Documents And Settings\willy\Recent\runscanner.log.lnk [431]

O61 - LFC:Last File Created 01/10/2011 - 10:43:14 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_um14.eset.com\update.ver [43258]

O61 - LFC:Last File Created 01/10/2011 - 11:20:24 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\localstore.rdf [6010]

O61 - LFC:Last File Created 01/10/2011 - 11:33:44 ---A- C:\Documents And Settings\willy\Recent\Photo0181.jpg.lnk [464]

O61 - LFC:Last File Created 01/10/2011 - 11:37:10 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Logs\virlog.dat [91403]

O61 - LFC:Last File Created 01/10/2011 - 11:37:10 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\DBB77009B79D356709C08EBD7F83DD7A2E595D9B.NDF [736]

O61 - LFC:Last File Created 01/10/2011 - 11:37:10 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\DBB77009B79D356709C08EBD7F83DD7A2E595D9B.NQF [1264963]

O61 - LFC:Last File Created 01/10/2011 - 11:37:10 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\ESET\ESET Smart Security\Quarantine\INFO.NQI [12]

O61 - LFC:Last File Created 01/10/2011 - 11:38:46 ---A- C:\Documents And Settings\willy\Recent\Vidéo0003.mp4.lnk [559]

O61 - LFC:Last File Created 01/10/2011 - 11:38:56 ---A- C:\Documents And Settings\willy\Recent\Photo0184.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 12:32:02 ---A- C:\Documents And Settings\willy\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk [2283]

O61 - LFC:Last File Created 01/10/2011 - 12:33:18 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\13d931e9-4234-4366-a3b0-33253ff40afa.dmp [26396]

O61 - LFC:Last File Created 01/10/2011 - 12:33:18 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\13d931e9-4234-4366-a3b0-33253ff40afa.extra [3703]

O61 - LFC:Last File Created 01/10/2011 - 12:34:58 ---A- C:\Documents And Settings\willy\Bureau\ZHPDiag2.exe [2299038]

O61 - LFC:Last File Created 01/10/2011 - 12:35:08 ---A- C:\Documents And Settings\All Users\Bureau\MBRCheck.lnk [577]

O61 - LFC:Last File Created 01/10/2011 - 12:35:08 ---A- C:\Documents And Settings\All Users\Bureau\ZHPDiag.lnk [570]

O61 - LFC:Last File Created 01/10/2011 - 12:35:08 ---A- C:\Documents And Settings\All Users\Bureau\ZHPFix.lnk [565]

O61 - LFC:Last File Created 01/10/2011 - 12:35:08 ---A- C:\Documents And Settings\All Users\Menu Démarrer\Programmes\ZHP\ZHPDiag.lnk [489]

O61 - LFC:Last File Created 01/10/2011 - 12:43:48 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_um12.eset.com\update.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 12:43:50 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\continuous\nod4E54.nup [9147]

O61 - LFC:Last File Created 01/10/2011 - 12:48:38 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\1B749B72855CB97BF2F58675617C9BF9 [576]

O61 - LFC:Last File Created 01/10/2011 - 12:48:38 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\1B749B72855CB97BF2F58675617C9BF9 [162]

O61 - LFC:Last File Created 01/10/2011 - 12:49:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\207B9FD92391B9B2A60A89B4C965D5DF [618]

O61 - LFC:Last File Created 01/10/2011 - 12:49:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\D41693DAFE5DEF0C36959FF1FCEF5C96 [543]

O61 - LFC:Last File Created 01/10/2011 - 12:49:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\207B9FD92391B9B2A60A89B4C965D5DF [174]

O61 - LFC:Last File Created 01/10/2011 - 12:49:00 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\D41693DAFE5DEF0C36959FF1FCEF5C96 [166]

O61 - LFC:Last File Created 01/10/2011 - 12:49:38 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 [569]

O61 - LFC:Last File Created 01/10/2011 - 12:49:38 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 [142]

O61 - LFC:Last File Created 01/10/2011 - 12:49:56 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 [70226]

O61 - LFC:Last File Created 01/10/2011 - 12:49:56 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 [128]

O61 - LFC:Last File Created 01/10/2011 - 12:49:58 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 [265437]

O61 - LFC:Last File Created 01/10/2011 - 12:49:58 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1 [120]

O61 - LFC:Last File Created 01/10/2011 - 13:01:56 ----- C:\Documents And Settings\willy\Bureau\Photos0001\Photo0220.jpg [1753416]

O61 - LFC:Last File Created 01/10/2011 - 13:17:04 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\e61c5ca7-8142-4658-9302-c6704be7c364.dmp [26396]

O61 - LFC:Last File Created 01/10/2011 - 13:17:04 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\e61c5ca7-8142-4658-9302-c6704be7c364.extra [3703]

O61 - LFC:Last File Created 01/10/2011 - 13:20:04 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\feeds\cbc8c166b3afe4a32114ae7882d0efb0 [37873]

O61 - LFC:Last File Created 01/10/2011 - 13:20:04 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\contacts\contacts.xml [11651]

O61 - LFC:Last File Created 01/10/2011 - 13:20:04 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\albumdata_category.pmp [456]

O61 - LFC:Last File Created 01/10/2011 - 13:20:04 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\catdata_catpri.pmp [32]

O61 - LFC:Last File Created 01/10/2011 - 13:20:04 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\imagedata_filetype.pmp [17376]

O61 - LFC:Last File Created 01/10/2011 - 13:20:06 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\feeds\405d1694b182c79fe6c45c2f8069efd4 [126085]

O61 - LFC:Last File Created 01/10/2011 - 13:20:06 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\feeds\62796a42724d6fe2b7bbc7c8c2e2ec44 [3702]

O61 - LFC:Last File Created 01/10/2011 - 13:20:06 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\5F74056C561F814B7771CB2993A44DEB [19353]

O61 - LFC:Last File Created 01/10/2011 - 13:20:06 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\5F74056C561F814B7771CB2993A44DEB [104]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2Albums\frexcludefolders.txt [66]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2Albums\watchedfolders.txt [82]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\cacheindex_fn.pmp [657]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\cacheindex_lastfetch.pmp [196]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\cache\cacheindex_serial.pmp [108]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\albumdata_date.pmp [892]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\albums_index.db [1328]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\bigthumbs_index.db [54224]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\facetemplatesV2_index.db [52088]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\previews_index.db [54224]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\repository.dat [1347]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\saverlist.txt [0]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\scanlist.txt [108]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\starlist.txt [0]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\tags.txt [0]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\thumbindex.db [162646]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\thumbs2_index.db [52088]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\thumbs_index.db [52088]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\usernames.dat [288]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\db3\wordhash.dat [224868]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\ioqueue\albumsafe.ioq [0]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\ioqueue\filesafe.ioq [0]

O61 - LFC:Last File Created 01/10/2011 - 13:21:08 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Google\Picasa2\ioqueue\slingshot.ioq [0]

O61 - LFC:Last File Created 01/10/2011 - 13:39:12 ---A- C:\Documents And Settings\willy\Recent\Photo0192.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 13:39:22 ---A- C:\Documents And Settings\willy\Recent\Photo0194.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 13:39:36 ---A- C:\Documents And Settings\willy\Recent\Photo0198.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 13:39:44 ---A- C:\Documents And Settings\willy\Recent\Photo0204.jpg.lnk [547]

O61 - LFC:Last File Created 01/10/2011 - 13:43:48 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_93.184.71.27\update.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 14:02:48 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\startupCache\startupCache.4.little [393831]

O61 - LFC:Last File Created 01/10/2011 - 14:03:54 ---A- C:\Documents And Settings\willy\Recent\P1020131.JPG.lnk [679]

O61 - LFC:Last File Created 01/10/2011 - 14:04:56 ---A- C:\Documents And Settings\willy\Recent\P1020192.JPG.lnk [679]

O61 - LFC:Last File Created 01/10/2011 - 14:06:54 ---A- C:\Documents And Settings\willy\Recent\2011-09-09_10-19-59_192.jpg.lnk [754]

O61 - LFC:Last File Created 01/10/2011 - 14:06:54 ---A- C:\Documents And Settings\willy\Recent\willy photos.lnk [438]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M1522432949Offset63_Volume.pqh [2175]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M2457443050Offset16128_Volume.pqh [2184]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M3532509837Offset63_Volume.pqh [2184]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M859213236Offset63_Volume.pqh [2332]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M859213236Offset75939318_Volume.pqh [2334]

O61 - LFC:Last File Created 01/10/2011 - 14:09:54 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M94635427Offset51520518_Volume.pqh [2195]

O61 - LFC:Last File Created 01/10/2011 - 14:10:02 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\5ef9920f-4b3d-4dd8-be72-cb09d1ba04b3VProConsole.log.txt [10840]

O61 - LFC:Last File Created 01/10/2011 - 14:10:04 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\edbc19a1-0938-44b7-8072-ce21caa5b56eVProConsole.log.txt [11588]

O61 - LFC:Last File Created 01/10/2011 - 14:10:10 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\VProConsole.log.txt [452476]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\d313c58b-b648-46a8-b497-740619523181VProConsole.log.txt [18471]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\RemoteComputers.xml [401]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\VProConsole\ActionSequence.a92a2032-4aaf-467c-9ff5-c15f0b50e5f6.j7zQd6GBW3Ffbji-vYitE3xQIig.xml [412]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\VProConsole\Tallies.a92a2032-4aaf-467c-9ff5-c15f0b50e5f6.j7zQd6GBW3Ffbji-vYitE3xQIig.xml [877]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\willy\Application Data\Symantec\Norton Ghost\UserPreferences.xml [336]

O61 - LFC:Last File Created 01/10/2011 - 14:10:20 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Symantec_Corporation\VProConsole.exe_Url_lpdc2k50jgmq1bxprss5e1wfkmvu5yvj\8.0.5.0\user.config [1710]

O61 - LFC:Last File Created 01/10/2011 - 14:17:44 ---A- C:\Documents And Settings\willy\Bureau\RK_Quarantine\adwcleaner0.exe.vir [526586]

O61 - LFC:Last File Created 01/10/2011 - 14:17:44 ---A- C:\Documents And Settings\willy\Bureau\adwcleaner0.exe [526586]

O61 - LFC:Last File Created 01/10/2011 - 14:20:12 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\permissions.sqlite [1736704]

O61 - LFC:Last File Created 01/10/2011 - 14:20:12 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\signons.sqlite [294912]

O61 - LFC:Last File Created 01/10/2011 - 14:21:40 ---A- C:\Documents And Settings\willy\Bureau\RogueKiller.exe [713728]

O61 - LFC:Last File Created 01/10/2011 - 14:24:18 ---A- C:\Documents And Settings\willy\Bureau\RK_Quarantine\QuarantineReport.txt [205]

O61 - LFC:Last File Created 01/10/2011 - 14:26:30 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\build.conf [261]

O61 - LFC:Last File Created 01/10/2011 - 14:26:30 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref [7273104]

O61 - LFC:Last File Created 01/10/2011 - 14:27:34 ---A- C:\Documents And Settings\willy\Recent\Vidéos.lnk [345]

O61 - LFC:Last File Created 01/10/2011 - 14:27:34 ---A- C:\Documents And Settings\willy\Recent\nympho-sexsuckhouse.avi.lnk [487]

O61 - LFC:Last File Created 01/10/2011 - 14:28:44 ---A- C:\Documents And Settings\willy\Bureau\UsbFix.exe [1577515]

O61 - LFC:Last File Created 01/10/2011 - 14:35:24 ---A- C:\Documents And Settings\willy\Application Data\vlc\ml.xspf [304]

O61 - LFC:Last File Created 01/10/2011 - 14:43:50 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_89.202.149.36\update.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 14:43:50 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\lastupd.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 14:43:50 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\upd.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 14:51:28 ---A- C:\Documents And Settings\willy\Bureau\Photos0001\Photo0217.jpg [1618396]

O61 - LFC:Last File Created 01/10/2011 - 14:51:38 ---A- C:\Documents And Settings\willy\Bureau\Photos0001\Photo0218.jpg [1548458]

O61 - LFC:Last File Created 01/10/2011 - 14:57:48 ---A- C:\Documents And Settings\willy\Application Data\skypePM\2011-10-01-1.ezlog [107192]

O61 - LFC:Last File Created 01/10/2011 - 15:00:06 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\VssDllLog.dbg [207557]

O61 - LFC:Last File Created 01/10/2011 - 15:09:48 ---A- C:\Documents And Settings\willy\Recent\P1020127.JPG.lnk [542]

O61 - LFC:Last File Created 01/10/2011 - 15:15:04 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\SymSnapProviderDebugLog.dbg [106382]

O61 - LFC:Last File Created 01/10/2011 - 15:17:02 ---A- C:\Documents And Settings\willy\Recent\2011-09-16_13-02-32_370.jpg.lnk [617]

O61 - LFC:Last File Created 01/10/2011 - 15:17:04 ---A- C:\Documents And Settings\willy\Recent\Photos0001.lnk [327]

O61 - LFC:Last File Created 01/10/2011 - 15:22:26 ---A- C:\Documents And Settings\willy\Recent\mbam-log-2011-10-01 (16-22-15).txt.lnk [529]

O61 - LFC:Last File Created 01/10/2011 - 15:24:14 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.65396 [107]

O61 - LFC:Last File Created 01/10/2011 - 15:24:14 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\BACKUP1.96315 [136]

O61 - LFC:Last File Created 01/10/2011 - 15:24:14 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.65396 [75264]

O61 - LFC:Last File Created 01/10/2011 - 15:24:14 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.96315 [425472]

O61 - LFC:Last File Created 01/10/2011 - 15:24:16 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-10-01 (16-24-14).txt [1306]

O61 - LFC:Last File Created 01/10/2011 - 15:29:40 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\downloads.sqlite [65536]

O61 - LFC:Last File Created 01/10/2011 - 15:29:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Sync9Loader.log.0001 [7121]

O61 - LFC:Last File Created 01/10/2011 - 15:34:34 ---A- C:\Documents And Settings\willy\Cookies\GNF5Y3FL.txt [84]

O61 - LFC:Last File Created 01/10/2011 - 15:34:36 ---A- C:\Documents And Settings\willy\Cookies\AO2DYW9G.txt [241]

O61 - LFC:Last File Created 01/10/2011 - 15:42:04 -SHA- C:\Documents And Settings\NetworkService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 15:42:04 -SHA- C:\Documents And Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 15:42:42 ----- C:\Documents And Settings\willy\Local Settings\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e\CliSecureRT.dll [55816]

O61 - LFC:Last File Created 01/10/2011 - 15:56:30 ---A- C:\Documents And Settings\willy\Recent\AV.txt.lnk [374]

O61 - LFC:Last File Created 01/10/2011 - 15:56:30 ---A- C:\Documents And Settings\willy\Recent\UsbFix.lnk [275]

O61 - LFC:Last File Created 01/10/2011 - 16:00:20 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\Sync9Loader.log.0000 [3806]

O61 - LFC:Last File Created 01/10/2011 - 16:01:54 -SHA- C:\Documents And Settings\willy\IECompatCache\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 16:01:54 -SHA- C:\Documents And Settings\willy\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat [32768]

O61 - LFC:Last File Created 01/10/2011 - 16:01:54 -SHA- C:\Documents And Settings\willy\PrivacIE\index.dat [344064]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\3XJIHSZ2.txt [253]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\61N8F8CH.txt [235]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\66AYHD97.txt [237]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\8BJO5LN2.txt [263]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\Q4O9KPU1.txt [63]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\TDTC4YOX.txt [241]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 ---A- C:\Documents And Settings\willy\Cookies\UNH52DQ7.txt [133]

O61 - LFC:Last File Created 01/10/2011 - 16:01:56 -SHA- C:\Documents And Settings\NetworkService\IETldCache\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 16:01:58 ---A- C:\Documents And Settings\willy\Cookies\9QGFANKK.txt [82]

O61 - LFC:Last File Created 01/10/2011 - 16:02:02 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{8714CC14-1C9E-11E0-B4D0-001D7DAF3809}.dat [3584]

O61 - LFC:Last File Created 01/10/2011 - 16:02:02 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{50DC1826-EC3E-11E0-A7B6-001D7DAF3809}.dat [4608]

O61 - LFC:Last File Created 01/10/2011 - 16:02:04 ---A- C:\Documents And Settings\willy\Application Data\Microsoft\Windows Live\Toolbar\Feeds\index.xml [657]

O61 - LFC:Last File Created 01/10/2011 - 16:09:06 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\cert8.db [98304]

O61 - LFC:Last File Created 01/10/2011 - 16:09:06 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\key3.db [16384]

O61 - LFC:Last File Created 01/10/2011 - 16:09:08 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Charon\CACHE.NDB [76150]

O61 - LFC:Last File Created 01/10/2011 - 16:09:08 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Norton Ghost.notify.xml [1556]

O61 - LFC:Last File Created 01/10/2011 - 16:09:08 ---A- C:\Documents And Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [1318464]

O61 - LFC:Last File Created 01/10/2011 - 16:10:26 -SHA- C:\Documents And Settings\willy\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-823518204-1060284298-839522115-1003\Credentials [5058]

O61 - LFC:Last File Created 01/10/2011 - 16:10:28 -SHA- C:\Documents And Settings\willy\Local Settings\Historique\History.IE5\MSHist012011100120111002\index.dat [49152]

O61 - LFC:Last File Created 01/10/2011 - 16:10:32 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\VProTray.dbg [1027]

O61 - LFC:Last File Created 01/10/2011 - 16:10:32 ---A- C:\Documents And Settings\LocalService\Cookies\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 16:10:32 ---A- C:\Documents And Settings\LocalService\Local Settings\Historique\History.IE5\index.dat [16384]

O61 - LFC:Last File Created 01/10/2011 - 16:10:32 -SHA- C:\Documents And Settings\LocalService\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 01/10/2011 - 16:10:34 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\EHttpSrv.xml [1486]

O61 - LFC:Last File Created 01/10/2011 - 16:10:42 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\EpfwTemp.dat [11588]

O61 - LFC:Last File Created 01/10/2011 - 16:10:42 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\EpfwUser.dat [11588]

O61 - LFC:Last File Created 01/10/2011 - 16:10:42 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\epfwdata.bin [37708]

O61 - LFC:Last File Created 01/10/2011 - 16:10:48 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\Norton Ghost.log.txt [802792]

O61 - LFC:Last File Created 01/10/2011 - 16:11:34 ---A- C:\Documents And Settings\willy\Application Data\ROUTE 66 Sync\Settings2.xml [1676]

O61 - LFC:Last File Created 01/10/2011 - 16:11:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\ROUTE 66 Sync 9\CommunicationProtocol.xml [207]

O61 - LFC:Last File Created 01/10/2011 - 16:11:44 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Logs\warnlog.dat [892080]

O61 - LFC:Last File Created 01/10/2011 - 16:11:46 ---A- C:\Documents And Settings\willy\Application Data\Skype\shared_dynco\dc.db [1306624]

O61 - LFC:Last File Created 01/10/2011 - 16:11:46 ---A- C:\Documents And Settings\willy\Application Data\Skype\shared_dynco\dc.db-journal [858248]

O61 - LFC:Last File Created 01/10/2011 - 16:12:06 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat [8119]

O61 - LFC:Last File Created 01/10/2011 - 16:12:06 ---A- C:\Documents And Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat [8119]

O61 - LFC:Last File Created 01/10/2011 - 16:12:12 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\protection-log-2011-10-01.txt [3062]

O61 - LFC:Last File Created 01/10/2011 - 16:12:12 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\bistats.db [61440]

O61 - LFC:Last File Created 01/10/2011 - 16:12:12 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\bistats.db-journal [33344]

O61 - LFC:Last File Created 01/10/2011 - 16:12:16 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\#SharedObjects\NFUQ77XH\skype.com\#ui\preferences.sol [233]

O61 - LFC:Last File Created 01/10/2011 - 16:12:36 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\SymSnapServiceDebugLog.dbg [139131]

O61 - LFC:Last File Created 01/10/2011 - 16:12:38 ---A- C:\Documents And Settings\willy\Recent\UsbFix.txt.lnk [407]

O61 - LFC:Last File Created 01/10/2011 - 16:12:44 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\History\M94635427Offset63_Volume.pqh [16157]

O61 - LFC:Last File Created 01/10/2011 - 16:12:44 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Schedule\{D1DA43EB-D0AE-4065-8B00-4B38DF3C3E10}.pqj [3709]

O61 - LFC:Last File Created 01/10/2011 - 16:12:46 ---A- C:\Documents And Settings\All Users\Application Data\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\pxml.xml [121316]

O61 - LFC:Last File Created 01/10/2011 - 16:19:54 ---A- C:\Documents And Settings\willy\Recent\Malwarebytes.Anti-Malware.v1.51.0.1200.Final-RED.lnk [515]

O61 - LFC:Last File Created 01/10/2011 - 16:19:54 ---A- C:\Documents And Settings\willy\Recent\key.txt.lnk [687]

O61 - LFC:Last File Created 01/10/2011 - 16:20:22 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 [558]

O61 - LFC:Last File Created 01/10/2011 - 16:20:22 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 [144]

O61 - LFC:Last File Created 01/10/2011 - 16:23:30 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\dc.db [45056]

O61 - LFC:Last File Created 01/10/2011 - 16:23:30 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\dc.db-journal [25136]

O61 - LFC:Last File Created 01/10/2011 - 16:23:48 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\sessionstore.bak [77911]

O61 - LFC:Last File Created 01/10/2011 - 16:25:20 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\cookies.sqlite [1048576]

O61 - LFC:Last File Created 01/10/2011 - 16:25:20 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\cookies.sqlite-shm [32768]

O61 - LFC:Last File Created 01/10/2011 - 16:25:20 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\cookies.sqlite-wal [590288]

O61 - LFC:Last File Created 01/10/2011 - 16:25:20 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\places.sqlite-shm [32768]

O61 - LFC:Last File Created 01/10/2011 - 16:25:20 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\urlclassifier3.sqlite [36700160]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\conduitCommon\cachedIcons\http___storage_conduit_com_27_243_CT2438727_Images_Blank.png [163]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\prefs.js [13353]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\E\B5\C4D26d01 [36464]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\_CACHE_001_ [291273]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\_CACHE_002_ [440163]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\_CACHE_003_ [1091701]

O61 - LFC:Last File Created 01/10/2011 - 16:25:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\_CACHE_MAP_ [276]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\conduitCommon\alert\servicesMap.json [686]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\urlclassifierkey3.txt [154]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\1\10\488FFd01 [25563]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\2\0B\05A03d01 [54524]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\2\A5\B56D1d01 [42336]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\3\FB\9BCF0d01 [18194]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\4\50\F9CADd01 [88153]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\4\B0\B00EAd01 [32866]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\5\C2\60591d01 [89943]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\6\8A\D32D4d01 [72174]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\8\10\ECF68d01 [18774]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\C\0F\748FDd01 [48467]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\C\EE\F1936d01 [42267]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\D\03\AE71Bd01 [86805]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\D\B9\CAF24d01 [37200]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\37\82808d01 [40164]

O61 - LFC:Last File Created 01/10/2011 - 16:25:36 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\C5\C0472d01 [27886]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\0\06\7EAFEd01 [87474]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\0\3E\A05A7d01 [32249]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\3\B4\F5CDEd01 [33624]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\5\9D\4B9ACd01 [42946]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\5\A3\E3FC0d01 [24882]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\5\F8\872DCd01 [23064]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\6\4C\50F36d01 [18957]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\6\CA\DA288d01 [34252]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\9\41\9C52Ad01 [29746]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\9\5C\745C7d01 [22669]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\A\AD\E71B3d01 [42850]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\A\FC\02FE3d01 [45536]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\B\3C\0080Fd01 [18533]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\B\54\AEA65d01 [117901]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\B\7A\59613d01 [32851]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\38\9B31Cd01 [19497]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\C3\D943Dd01 [17020]

O61 - LFC:Last File Created 01/10/2011 - 16:25:38 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\EA\0BFF7d01 [47620]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\2\43\7570Ed01 [50416]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\2\57\78B80d01 [26317]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\2\D5\6A6AEd01 [19216]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\7\03\604D1d01 [31845]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\7\5E\B81EBd01 [81803]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\C\A7\4BE7Cd01 [38141]

O61 - LFC:Last File Created 01/10/2011 - 16:25:40 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\F\7B\8E875d01 [49760]

O61 - LFC:Last File Created 01/10/2011 - 16:25:46 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\E\36\6AFFAd01 [26376]

O61 - LFC:Last File Created 01/10/2011 - 16:26:20 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-10-01 (17-26-18).txt [1037]

O61 - LFC:Last File Created 01/10/2011 - 16:26:58 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\0\DE\64245d01 [79211]

O61 - LFC:Last File Created 01/10/2011 - 16:26:58 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\1\61\8402Ed01 [36959]

O61 - LFC:Last File Created 01/10/2011 - 16:27:00 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\8\A4\D2586d01 [22408]

O61 - LFC:Last File Created 01/10/2011 - 16:27:32 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\places.sqlite [10485760]

O61 - LFC:Last File Created 01/10/2011 - 16:27:32 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\places.sqlite-wal [1049376]

O61 - LFC:Last File Created 01/10/2011 - 16:27:34 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\9\A4\781E2d01 [34050]

O61 - LFC:Last File Created 01/10/2011 - 16:27:46 ---A- C:\Documents And Settings\willy\Bureau\AdwCleaner[R2].txt [3818]

O61 - LFC:Last File Created 01/10/2011 - 16:27:46 ---A- C:\Documents And Settings\willy\Recent\AdwCleaner[R2].txt.lnk [455]

O61 - LFC:Last File Created 01/10/2011 - 16:27:54 ---A- C:\Documents And Settings\willy\Bureau\AdwCleaner[s3].txt [4058]

O61 - LFC:Last File Created 01/10/2011 - 16:27:54 ---A- C:\Documents And Settings\willy\Recent\AdwCleaner[s3].txt.lnk [455]

O61 - LFC:Last File Created 01/10/2011 - 16:28:06 ---A- C:\Documents And Settings\willy\Recent\ZHPDiag.Txt.lnk [412]

O61 - LFC:Last File Created 01/10/2011 - 16:31:04 -SHA- C:\Documents And Settings\willy\IETldCache\index.dat [262144]

O61 - LFC:Last File Created 01/10/2011 - 16:31:32 ---A- C:\Documents And Settings\willy\Bureau\Souris.lnk [548]

O61 - LFC:Last File Created 01/10/2011 - 16:44:42 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_um10.eset.com\update.ver [43257]

O61 - LFC:Last File Created 01/10/2011 - 17:10:32 ---A- C:\Documents And Settings\willy\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2011-10-01 (18-10-31).txt [1079]

O61 - LFC:Last File Created 01/10/2011 - 17:40:14 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\3\69\A7726d01 [18846]

O61 - LFC:Last File Created 01/10/2011 - 17:40:14 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\D\33\AB5DEd01 [17438]

O61 - LFC:Last File Created 01/10/2011 - 17:40:16 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\4\35\ED8A1d01 [26464]

O61 - LFC:Last File Created 01/10/2011 - 17:40:16 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\5\47\5FC0Fd01 [16942]

O61 - LFC:Last File Created 01/10/2011 - 17:40:16 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\A\8D\EBA0Fd01 [20345]

O61 - LFC:Last File Created 01/10/2011 - 17:42:20 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\config.xml [10152]

O61 - LFC:Last File Created 01/10/2011 - 17:55:24 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Configuration\local.conf [440]

O61 - LFC:Last File Created 01/10/2011 - 17:56:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 [898]

O61 - LFC:Last File Created 01/10/2011 - 17:56:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 [94]

O61 - LFC:Last File Created 01/10/2011 - 17:56:32 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 [96089]

O61 - LFC:Last File Created 01/10/2011 - 17:56:32 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 [124]

O61 - LFC:Last File Created 01/10/2011 - 17:56:42 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4 [35954]

O61 - LFC:Last File Created 01/10/2011 - 17:56:42 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4 [132]

O61 - LFC:Last File Created 01/10/2011 - 18:09:26 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\addons.sqlite [262144]

O61 - LFC:Last File Created 01/10/2011 - 18:09:26 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\addons.sqlite-journal [164392]

O61 - LFC:Last File Created 01/10/2011 - 18:11:26 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\blocklist.xml [11263]

O61 - LFC:Last File Created 01/10/2011 - 18:12:18 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\main.db [290816]

O61 - LFC:Last File Created 01/10/2011 - 18:12:18 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\main.db-journal [107216]

O61 - LFC:Last File Created 01/10/2011 - 18:12:32 ---A- C:\Documents And Settings\All Users\Application Data\Skype\Plugins\local_store.dat [772]

O61 - LFC:Last File Created 01/10/2011 - 18:12:32 ---A- C:\Documents And Settings\willy\Application Data\skypePM\2011-10-01-2.ezlog [69496]

O61 - LFC:Last File Created 01/10/2011 - 18:12:44 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\Logs\Norton Ghost.dbg [643692]

O61 - LFC:Last File Created 01/10/2011 - 18:13:26 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\XUL.mfl [3960015]

O61 - LFC:Last File Created 01/10/2011 - 18:13:52 ---A- C:\Documents And Settings\willy\Application Data\Skype\shared.xml [54255]

O61 - LFC:Last File Created 01/10/2011 - 18:16:50 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\conduitCommon\notificationDB.sqlite [393216]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\active-update.xml [1190]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates.xml [1468]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates\0\update.mar [17959845]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates\0\update.status [8]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Mozilla Firefox\updates\0\update.version [6]

O61 - LFC:Last File Created 01/10/2011 - 18:17:22 ---A- C:\Documents And Settings\willy\Local Settings\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\Cache\4\28\D589Cd01 [89069]

O61 - LFC:Last File Created 01/10/2011 - 18:17:26 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\sessionstore.js [70845]

O61 - LFC:Last File Created 01/10/2011 - 18:17:36 ---A- C:\Documents And Settings\willy\Local Settings\Historique\History.IE5\index.dat [475136]

O61 - LFC:Last File Created 01/10/2011 - 18:17:36 -SHA- C:\Documents And Settings\willy\Cookies\index.dat [49152]

O61 - LFC:Last File Created 01/10/2011 - 18:18:42 ---A- C:\Documents And Settings\All Users\Application Data\Skype\Plugins\_sstore.dat [500]

O61 - LFC:Last File Created 01/10/2011 - 18:19:28 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\webappsstore.sqlite [98304]

O61 - LFC:Last File Created 01/10/2011 - 18:33:56 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\bookmarkbackups\bookmarks-2011-09-30.json [11262]

O61 - LFC:Last File Created 01/10/2011 - 18:34:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9 [552]

O61 - LFC:Last File Created 01/10/2011 - 18:34:10 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9 [132]

O61 - LFC:Last File Created 01/10/2011 - 18:54:50 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\http_um16.eset.com\update.ver [43258]

O61 - LFC:Last File Created 01/10/2011 - 18:55:04 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\continuous\nod025C.nup [161519]

O61 - LFC:Last File Created 01/10/2011 - 18:55:04 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\nod04D7.nup [404041]

O61 - LFC:Last File Created 01/10/2011 - 18:55:04 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\nod7044.nup [12601008]

O61 - LFC:Last File Created 01/10/2011 - 18:55:06 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\continuous\nod32A2.nup [30414]

O61 - LFC:Last File Created 01/10/2011 - 18:55:06 ---A- C:\Documents And Settings\All Users\Application Data\ESET\ESET Smart Security\Updfiles\continuous\nod7741.nup [225762]

O61 - LFC:Last File Created 01/10/2011 - 19:10:44 -SHA- C:\Documents And Settings\willy\Local Settings\Historique\History.IE5\MSHist012011093020111001\index.dat [32768]

O61 - LFC:Last File Created 01/10/2011 - 19:10:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 [25066]

O61 - LFC:Last File Created 01/10/2011 - 19:10:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F [533]

O61 - LFC:Last File Created 01/10/2011 - 19:10:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 [124]

O61 - LFC:Last File Created 01/10/2011 - 19:10:52 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F [100]

O61 - LFC:Last File Created 01/10/2011 - 20:06:38 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\CT2438727\ServiceMap.json [4354]

O61 - LFC:Last File Created 01/10/2011 - 20:06:40 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\CT2438727\LocalSettings.txt [22722]

O61 - LFC:Last File Created 01/10/2011 - 20:06:40 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\CT2438727\ThirdPartyComponents.xml [6678]

O61 - LFC:Last File Created 01/10/2011 - 20:06:40 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\CT2438727\languagePack.json [81125]

O61 - LFC:Last File Created 01/10/2011 - 20:06:40 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\CT2438727\searchInNewTabData.xml [14403]

O61 - LFC:Last File Created 01/10/2011 - 20:07:18 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\chatsync\36\36e9802410d3f97f.dat [2019]

O61 - LFC:Last File Created 01/10/2011 - 20:16:28 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 [18]

O61 - LFC:Last File Created 01/10/2011 - 20:16:28 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 [216]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\2659C1A560AB92C9C29D4B2B25815AE8 [545]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 [44965]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\Content\DEEA0BD81CC3B68E08E92D12B0916963 [26952]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\2659C1A560AB92C9C29D4B2B25815AE8 [146]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 [216]

O61 - LFC:Last File Created 01/10/2011 - 20:16:30 -S-A- C:\Documents And Settings\willy\Application Data\Microsoft\CryptnetUrlCache\MetaData\DEEA0BD81CC3B68E08E92D12B0916963 [106]

O61 - LFC:Last File Created 01/10/2011 - 20:24:06 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\6b22ace5-0e73-4876-a111-881bb3bb396c.dmp [26396]

O61 - LFC:Last File Created 01/10/2011 - 20:24:06 ---A- C:\Documents And Settings\willy\Application Data\Mozilla\Firefox\Crash Reports\pending\6b22ace5-0e73-4876-a111-881bb3bb396c.extra [3657]

O61 - LFC:Last File Created 01/10/2011 - 20:29:28 ---A- C:\Documents And Settings\willy\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-65d2d9ff.idx [487]

O61 - LFC:Last File Created 01/10/2011 - 21:22:34 ---A- C:\Documents And Settings\willy\Application Data\Microsoft\Internet Explorer\Quick Launch\BitComet.exe.lnk [603]

O61 - LFC:Last File Created 01/10/2011 - 21:22:48 ---A- C:\Documents And Settings\willy\Application Data\BitComet\fav\fav_fr.xml [4144]

O61 - LFC:Last File Created 01/10/2011 - 21:29:00 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\protection-log-2011-09-30.txt [752]

O61 - LFC:Last File Created 01/10/2011 - 21:29:06 ---A- C:\Documents And Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe [9852544]

O61 - LFC:Last File Created 01/10/2011 - 21:38:42 ---A- C:\Documents And Settings\willy\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk [706]

O61 - LFC:Last File Created 01/10/2011 - 21:39:50 ---A- C:\Documents And Settings\willy\Application Data\Microsoft\Internet Explorer\Quick Launch\RegCleaner.exe.lnk [835]

O61 - LFC:Last File Created 01/10/2011 - 21:42:08 -SHA- C:\Documents And Settings\willy\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\index.dat [32768]

O61 - LFC:Last File Created 01/10/2011 - 21:45:24 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol [4176]

O61 - LFC:Last File Created 01/10/2011 - 21:54:42 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\#SharedObjects\NFUQ77XH\zyngapv.hs.llnwd.net\e6\mwfb\graphics\swf\friendladder_h.swf\mw_p%7C37324231_friendladder_h.sol [37366]

O61 - LFC:Last File Created 01/10/2011 - 21:54:42 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#zyngapv.hs.llnwd.net\settings.sol [90]

O61 - LFC:Last File Created 01/10/2011 - 21:54:50 ---A- C:\Documents And Settings\All Users\Application Data\Symantec\Norton Ghost\WILL.sv2i [5069]

O61 - LFC:Last File Created 01/10/2011 - 22:00:54 ---A- C:\Documents And Settings\willy\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#zynga1-a.akamaihd.net\settings.sol [91]

O61 - LFC:Last File Created 01/10/2011 - 22:27:28 ---A- C:\Documents And Settings\willy\Application Data\Skype\william.ferrari4\chatsync\19\19810f01ec15eed0.dat [1987]

O61 - LFC:Last File Created 01/10/2011 - 22:27:30 ---A- C:\Documents And Settings\willy\Application Data\skypePM\2011-09-30-2.ezlog [44072]

~ Scan Files in 01mn 14s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido.) [HKLM] -- Usbfix

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 20/11/2009 - C:\WINDOWS\system32\DRIVERS\atksgt.sys - atksgt (atksgt) .(...) - LEGACY_ATKSGT

O64 - Services: CurCS - 06/08/2009 - C:\WINDOWS\system32\drivers\vidstub.sys - BootScreen (BootScreen) .(...) - LEGACY_BOOTSCREEN

O64 - Services: CurCS - ??/??/???? - C:\DOCUME~1\willy\LOCALS~1\Temp\cpuz134\cpuz134_x32.sys (.not file.) - cpuz134 (cpuz134) .(...) - LEGACY_CPUZ134

O64 - Services: CurCS - 29/01/2011 - C:\WINDOWS\system32\drivers\dgderdrv.sys - dgderdrv(dgderdrv) .(.Devguru Co., Ltd - Device Error Recovery SDK(x86).) - LEGACY_DGDERDRV

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 14/10/2001 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 01/07/2008 - C:\WINDOWS\system32\DRIVERS\eamon.sys - EAMON(eamon) .(.ESET - Amon monitor.) - LEGACY_EAMON

O64 - Services: CurCS - 01/07/2008 - C:\WINDOWS\system32\DRIVERS\easdrv.sys - easdrv(easdrv) .(.ESET - Eset AntiStealth driver.) - LEGACY_EASDRV

O64 - Services: CurCS - 21/12/2007 - C:\Program Files\ESET\ESET Smart Security\ekrn.exe - Eset Service(ekrn) .(.ESET - Eset Service.) - LEGACY_EKRN

O64 - Services: CurCS - 01/07/2008 - C:\WINDOWS\system32\DRIVERS\epfw.sys - epfw(epfw) .(.ESET - Eset Personal Firewall driver.) - LEGACY_EPFW

O64 - Services: CurCS - 01/07/2008 - C:\WINDOWS\system32\DRIVERS\epfwtdi.sys - epfwtdi(epfwtdi) .(.ESET - Eset Personal Firewall TDI filter.) - LEGACY_EPFWTDI

O64 - Services: CurCS - 25/10/2010 - C:\WINDOWS\system32\FsUsbExDisk.sys - FsUsbExDisk (FsUsbExDisk) .(...) - LEGACY_FSUSBEXDISK

O64 - Services: CurCS - 28/05/2010 - C:\WINDOWS\system32\FsUsbExService.exe - FsUsbExService(FsUsbExService) .(.Teruten - FsUsbDevice.) - LEGACY_FSUSBEXSERVICE

O64 - Services: CurCS - 14/06/2011 - C:\WINDOWS\gdrv.sys - gdrv(gdrv) .(.Windows ® 2000 DDK provider - GIGABYTE Tools.) - LEGACY_GDRV

O64 - Services: CurCS - 31/07/2009 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate1ca122bd83a21a4)(gupdate1ca122bd83a21a4) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE1CA122BD83A21A4

O64 - Services: CurCS - 31/07/2009 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Software Updater(gusvc) .(.Google - gusvc.) - LEGACY_GUSVC

O64 - Services: CurCS - 04/05/2011 - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - 20/11/2009 - C:\WINDOWS\system32\DRIVERS\lirsgt.sys - lirsgt (lirsgt) .(...) - LEGACY_LIRSGT

O64 - Services: CurCS - 12/09/2007 - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe - LiveUpdate(LiveUpdate) .(.Symantec Corporation - LiveUpdate Engine COM Module.) - LEGACY_LIVEUPDATE

O64 - Services: CurCS - 31/08/2011 - C:\WINDOWS\system32\drivers\mbam.sys - MBAMProtector(MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR

O64 - Services: CurCS - 31/08/2011 - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe - MBAMService(MBAMService) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSERVICE

O64 - Services: CurCS - ??/??/???? - C:\DOCUME~1\willy\LOCALS~1\Temp\mbr.sys (.not file.) - mbr (mbr) .(...) - LEGACY_MBR

O64 - Services: CurCS - 10/04/2003 - C:\EPOAgent\naimas32.exe - Agent NAI ePolicy Orchestrator(NAIMAGENT32) .(.Network Associates, Inc. - NAI ePolicy Orchestrator Agent.) - LEGACY_NAIMAGENT32

O64 - Services: CurCS - 27/12/2010 - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service(NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.4.) - LEGACY_NVSVC

O64 - Services: CurCS - 23/09/2003 - C:\WINDOWS\system32\PCAMPR5.sys - PCAMPR5 NDIS Protocol Driver(PCAMPR5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) - LEGACY_PCAMPR5

O64 - Services: CurCS - 01/03/2006 - C:\WINDOWS\system32\PCANDIS5.sys - PCANDIS5 NDIS Protocol Driver(PCANDIS5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5

O64 - Services: CurCS - 06/04/2011 - C:\WINDOWS\system32\PnkBstrA.exe - PnkBstrA (PnkBstrA) .(...) - LEGACY_PNKBSTRA

O64 - Services: CurCS - 14/01/2009 - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe - SeaPort(SeaPort) .(.Microsoft Corp. - Microsoft SeaPort Search Enhancement Broker.) - LEGACY_SEAPORT

O64 - Services: CurCS - 14/06/2010 - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe - ServiceLayer(ServiceLayer) .(.Nokia - ServiceLayer Module.) - LEGACY_SERVICELAYER

O64 - Services: CurCS - ??/??/???? - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(...) - LEGACY_SPTD

O64 - Services: CurCS - 01/07/2009 - C:\WINDOWS\system32\DRIVERS\symsnap.sys - Symantec Volume Snap Shot Driver(symsnap) .(.StorageCraft - StorageCraft Volume Snap-Shot.) - LEGACY_SYMSNAP

O64 - Services: CurCS - 01/07/2009 - C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe - SymSnapService(SymSnapService) .(.Symantec - Symantec Snapshot Service.) - LEGACY_SYMSNAPSERVICE

O64 - Services: CurCS - 13/08/2008 - C:\WINDOWS\system32\DRIVERS\v2imount.sys - Symantec V2i Mount Driver(v2imount) .(.Symantec Corporation - V2iMount.sys - Image Mounting Device Driver.) - LEGACY_V2IMOUNT

~ Scan Services in 00mn 02s

 

 

 

---\\ Liste des fichiers non signés (O65)

O65 - LUF:31/12/2004 (.Pas de propriétaire - .) (1, 2, 0, 2) - c:\windows\system32\jsdriver.dll

O65 - LUF:31/12/2004 (.Pas de propriétaire - Joypad.) (1, 2, 0, 2) - c:\windows\system32\jspage.dll

O65 - LUF:25/05/2010 (.Pas de propriétaire - EjectDisk ?? ?? ?????.) (1, 0, 0, 1) - c:\windows\system32\FsUsbExDevice.Dll

~ Scan Sigcheck in 02mn 06s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.9A1D450B3F2B5BBD4C49E5E8A6C971CF] [sPRF][01/10/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\willy\Bureau\ZHPDiag2.exe [2299038]

[MD5.8DFDFACEBCEA8D560023614B98285011] [sPRF][01/10/2011] (.El Desaparecido.com - UsbFix.) -- C:\Documents and Settings\willy\Bureau\UsbFix.exe [1577515]

[MD5.E091C7D56F09DEF72DE2F32CA914F204] [sPRF][01/10/2011] (...) -- C:\Documents and Settings\willy\Bureau\adwcleaner0.exe [526586]

[MD5.35C6197407DCB733D0166340E78B9855] [sPRF][01/10/2011] (...) -- C:\Documents and Settings\willy\Bureau\RogueKiller.exe [713728]

[MD5.42A8F70C194D09611202C78AC99FF42F] [sPRF][04/04/2007] (.Pas de propriétaire - UpdateUtility MFC Application.) -- C:\Program Files\updateutility.exe [207680]

[MD5.3CE1456CE9D67C59CCF6E7D9D3C0A2A3] [sPRF][23/11/2006] (.Pas de propriétaire - BIOS_Run MFC Application.) -- C:\Program Files\BIOS_Run.exe [207680]

[MD5.4383ACEA417E424C5139A78A8FE9A38A] [sPRF][02/03/2007] (.Pas de propriétaire - gwflash MFC Application.) -- C:\Program Files\gwf32.exe [240448]

[MD5.D0FF633AF13C61E67F527B99AC2966ED] [sPRF][14/02/2008] (.Pas de propriétaire - gwflash MFC Application.) -- C:\Program Files\gwflash.exe [231944]

[MD5.3551E9E7BBF87C4C7FDAEB92A6AE73BC] [sPRF][21/08/2007] (...) -- C:\Program Files\MarkFunDrv.dll [125504]

[MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [sPRF][17/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\WINDOWS\Downloaded Program Files\isusweb.dll [401408]

[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [sPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.exe [196608]

[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [sPRF][26/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\WINDOWS\Downloaded Program Files\dwusplay.dll [24576]

[MD5.11B757C44B95B50ECE47B3E1128B8A2B] [sPRF][03/09/2007] (.Symantec, Inc. - tgctlsr Module.) -- C:\WINDOWS\Downloaded Program Files\tgctlsr.dll [578848]

[MD5.A4A91F5B12B01A8340DC95DAF46F2283] [sPRF][09/11/2010] (...) -- C:\WINDOWS\Downloaded Program Files\JuniperExt.exe [398704]

[MD5.F1708661FC772DE2495A1601D2F4D8F9] [sPRF][09/11/2010] (...) -- C:\WINDOWS\Downloaded Program Files\JuniperSetupClientCtrlUninstaller.exe [42896]

~ Scan Files in 00mn 01s

 

 

 

---\\ Recherche d'infection Rogue (O86)

C:\Documents and Settings\willy\Local Settings\Application Data\28070

~ Scan Files in 00mn 00s

 

 

 

---\\ Scan Additionnel (O88)

Database Version : 8645 - (29/09/2011)

Clés trouvées (Keys found) : 6

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 1

Fichiers trouvés (Files found) : 0

 

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}] =>Toolbar.AskTBar

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] =>Toolbar.Conduit

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent

[HKCU\Software\Softonic_France] =>Toolbar.Conduit

[HKLM\Software\Softonic_France] =>Toolbar.Conduit

C:\Documents and Settings\willy\Application Data\FileSubmit =>Adware.FileSubmit

~ Scan Additionnel in 00mn 04s

 

 

 

---\\ Recherche détournement de DNS routeur (O89)

Serveur : livebox.home

Address: 192.168.1.1

Nom : www.l.google.com

Addresses: 209.85.148.104, 209.85.148.106, 209.85.148.105, 209.85.148.103

209.85.148.99, 209.85.148.147

Aliases: www.google.fr, www.google.com

~ Scan DNS in 00mn 02s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 01/10/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SR - | Auto 01/10/2011 345376 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Demand 01/10/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SS - | Demand 01/10/2011 19200 | (EhttpSrv) . (.ESET.) - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe

SR - | Auto 01/10/2011 468224 | (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Smart Security\ekrn.exe

SR - | Auto 01/10/2011 233472 | (FsUsbExService) . (.Teruten.) - C:\WINDOWS\system32\FsUsbExService.exe

SS - | Disabled 01/10/2011 133104 | (gupdate1ca122bd83a21a4) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 01/10/2011 190448 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Demand 01/10/2011 820008 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SR - | Auto 01/10/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SS - | Demand 01/10/2011 121360 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe

SS - | Demand 01/10/2011 2999664 | (LiveUpdate) . (.Symantec Corporation.) - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe

SR - | Auto 01/10/2011 366152 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

SR - | Auto 01/10/2011 204876 | (NAIMAGENT32) . (.Network Associates, Inc..) - C:\EPOAgent\naimas32.exe

SR - | Auto 01/10/2011 4322656 | (Norton Ghost) . (.Symantec Corporation.) - C:\Program Files\Norton Ghost\Agent\VProSvc.exe

SR - | Auto 01/10/2011 156776 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

SR - | Auto 75136 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe

SS - | Demand 01/10/2011 615936 | (ServiceLayer) . (.Nokia.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

SR - | Demand 01/10/2011 1562096 | (SymSnapService) . (.Symantec.) - C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe

~ Scan Services in 00mn 02s

 

 

 

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by willy at 01/10/2011 19:22:26

 

device: opened successfully

user: MBR read successfully

 

Disk trace:

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 05s

 

 

 

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by willy at 01/10/2011 19:22:28

 

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 07s

 

 

 

End of the scan (1948 lines in 04mn 38s)(0)

 

 

 

 

j'ai une fenetre "microsoft visual C++ runtime error

c:/program ...

( rien apres les 3 petits points )

dans l'observateur d'evenement il n'y a rien referant a ce type d'erreur ) juste le device manager pour l'erreur : AppName: devicemanager.exe AppVer: 1.0.0.2 ModName: msvcr90.dll

 

une autre fenetre retrieving COM class factory component CLSID .... failed to fatal error 00000

 

si ca peut aider ..

merci encore une fois

Modifié le 1 octobre 2011 par willow35

[willow35]

une autre solution ?

merci

[pear]

Bonjour,

 

 

Spybot, totalement obsolète( comme aussi Ad_Aware) va être désinstallé.Vous pourrez utiliser Mbam pour le remplacer.

Auparavant, vous devez faire ceci, avant de lancer Zhpfix:

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Sous Vista, exécuter avec privilèges Administrateur

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Effacer le contenu du dossier Snapshots(le contenu de snapshots, pas le fichier snapshots) , sous XP :

C:\Documents and Settings\All Users\Application Data\Spybot - Search &Destroy\Snapshots

Et sous Vista :

C:\ProgramData\Spybot - Search & Destroy\Snapshots

 

Sur le bureau ,il y a 3 icônes

Cliquer sur l'icône Zhpfix

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Copiez/Collez les lignes vertes dans le cadre ci dessous:

pour cela;

Clic gauche maintenu enfoncé, Balayer l'ensemble du texte à copier avec la souris pour le mettre en surbrillance ,de gauche à droite et de haut en bas

Ctrl+c mettre le tout en mémoire

Ctrl+v pour inscrire le texte dans le Document

 

P2 - FPN: [HKLM] [@funwebproducts.com/Plugin] - (...) -- C:\Program Files\FunWebProducts\Installr\6.bin\NPFunWeb.dll (.not file.) => Infection BT (Adware.MyWebSearch)

[HKLM\Software\SeekappSrch] => Infection Diverse (Cloaked Malware)

O43 - CFD: 30/04/2009 - 08:50:10 - [0] ----D- C:\Documents and Settings\willy\Application Data\FileSubmit => Infection BT (Adware.FileSubmit)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing => Infection PUP (Hijacker.Agent)

C:\Documents and Settings\willy\Local Settings\Application Data\28070 => Infection Rogue (Possible)

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] => Infection BT (Hijack.Browser)

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] => Infection BT (Hijack.Browser)

C:\Documents and Settings\willy\Application Data\FileSubmit => Infection BT (Adware.FileSubmit)

 

PROCESSUS SUPERFLU DU SYSTEME

C:\Documents and Settings\willy\Application Data\Mozilla\Firefox\Profiles\quel3sm8.default\user.js (.not file.) => Fichier absent

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 => Safer Networking Limited Spybot - S&D

O43 - CFD: 20/07/2008 - 12:35:48 - [66198389] ----D- C:\Program Files\Spybot - Search & Destroy => Spybot - Search & Destroy

O47 - AAKE:Key Export SP - "D:\bitcom\bitcom 32Bit\BitComet.exe" [Enabled] .(...) -- D:\bitcom\bitcom 32Bit\BitComet.exe (.not file.) => Fichier absent

O51 - MPSK:{0d24e83e-d9c0-11df-9f55-001d7daf3809}\AutoRun\command - Clé orpheline => Orphean Key not necessary

O51 - MPSK:{318c6f48-383d-11e0-92eb-001d7daf3809}\AutoRun\command - Clé orpheline => Orphean Key not necessary

O51 - MPSK:{6ecf0be2-c54a-11df-9455-001d7daf3809}\AutoRun\command - Clé orpheline => Orphean Key not necessary

O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (...) -- G:\GAMES\cv5\Steam.exe (.not file.) => Fichier absent

 

TOOLBAR INUTILE (Navigateur internet)

M2 - MFEP: prefs.js [willy - quel3sm8.default\{7b13ec3e-999a-4b70-b9cb-2617b8323822}] [] Zynga Community Toolbar v3.7.0.6 (.Conduit Ltd..) => Conduit Zynga Toolbar

R3 - URLSearchHook: (no name) - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (...) (No version) -- (.not file.) => Toolbar.Conduit

O3 - Toolbar: (no name) - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (...) -- (.not file.) => Toolbar.Conduit

[HKCU\Software\Softonic_France] => Toolbar.Conduit

[HKLM\Software\Softonic_France] => Toolbar.Conduit

[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}] => Toolbar.Ask

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit

[HKCU\Software\Softonic_France] => Toolbar.Conduit

[HKLM\Software\Softonic_France] => Toolbar.Conduit

 

 

 

 

EmptyTemp

 

Cliquez ensuite sur le H-

Cliquer sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.

Cliquer sur "Tous" puis sur "Nettoyer" .

Redémarrer pour achever le nettoyage.

Un rapport apparait:

Si le rapport n'apparait pas,cliquer sur

Copier-coller le rapport de suppression dans la prochaine réponse.

 

 

 

 

j'ai une fenetre "microsoft visual C++ runtime error

c:/program ...

 

Désinstallez/réinstallez Visual C++

[willow35]

Rapport de ZHPFix 1.12.3362 par Nicolas Coolman, Update du 23/09/2011

Fichier d'export Registre :

Run by willy at 04/10/2011 15:06:16

Windows XP Professional Service Pack 3 (Build 2600)

Web site : ZHPFix Fix de rapport

 

========== Logiciel(s) ==========

ABSENT Software Key: {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

 

========== Clé(s) du Registre ==========

SUPPRIME Key: Mozilla Plugin: @funwebproducts.com/Plugin

SUPPRIME Key: HKLM\Software\SeekappSrch

SUPPRIME Key: SearchScopes :{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}

SUPPRIME CLSID MPSK: {0d24e83e-d9c0-11df-9f55-001d7daf3809}

SUPPRIME CLSID MPSK: {318c6f48-383d-11e0-92eb-001d7daf3809}

SUPPRIME CLSID MPSK: {6ecf0be2-c54a-11df-9455-001d7daf3809}

SUPPRIME Key: StartupReg: Steam

SUPPRIME Key: HKCU\Software\Softonic_France

SUPPRIME Key: HKLM\Software\Softonic_France

SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37F4A335-D085-423e-A425-0370799166FB}

SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}

 

========== Valeur(s) du Registre ==========

SUPPRIME URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352}

SUPPRIME Toolbar: {4daac69c-cba7-45e2-9bc8-1044483d3352}

 

========== Dossier(s) ==========

SUPPRIME Folder: C:\Documents and Settings\willy\Application Data\FileSubmit

SUPPRIME Folder: c:\documents and settings\willy\local settings\application data\28070

ABSENT C:\Program Files\Spybot - Search & Destroy

SUPPRIME Temporaires Windows: : 172

 

========== Fichier(s) ==========

ABSENT File: c:\program files\funwebproducts\installr\6.bin\npfunweb.dll

ABSENT Folder/File: c:\documents and settings\willy\application data\filesubmit

ABSENT Folder/File: c:\documents and settings\willy\application data\mozilla\firefox\profiles\quel3sm8.default\user.js (.not file.)

ABSENT File: d:\bitcom\bitcom 32bit\bitcomet.exe

ABSENT File: g:\games\cv5\steam.exe

SUPPRIME Temporaires Windows: : 861

 

========== Autre ==========

NON TRAITE PROCESSUS SUPERFLU DU SYSTEME

NON TRAITE TOOLBAR INUTILE (Navigateur internet)

 

 

========== Récapitulatif ==========

13 : Clé(s) du Registre

3 : Valeur(s) du Registre

4 : Dossier(s)

6 : Fichier(s)

1 : Logiciel(s)

2 : Autre

 

 

End of clean in 00mn 01s

 

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 04/10/2011 15:06:16 [2665]

[willow35]

coucou

ca a l'air d'etre un peu mieux , apres reboot

toujours la meme erreur device et visual c++ + un autre :

par contre j'ai eu " la recuperation de la fabrique de classe COM pour le composant clid XXX a echoue en raison de l'erreur suivante 80080005

Modifié le 4 octobre 2011 par willow35

[willow35]

on peut ferme le sujet merci j'ai fait une restore assez vieille

merci pour vos poste

bonne journee