Poste de travail en recherche avec torche PC sur XP familiale

Apollo · le 5 novembre 2011

Ce rapport est incomplet et ZGHPDiag doit être mis à jour.

Lance ZHPDiag puis clique sur la grosse flèche verte; accepter l'installation de la nouvelle version qui écrasera l'actuelle.

Je redonne la procédure à suivre pour avoir un rapport complet:

Double-clique sur ZHPDiag pour lancer l'exécution
- Important:
  Sous Vista et Windows 7 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur

[*]Clique sur le tournevis.

[*]Clique sur la loupe pour lancer l'analyse. Tu patientes jusqu'à ce que le scan affiche 100%

Tu refermes ZHPDiag

[*]Le rapport ZHPDiag.txt se trouve sur le Bureau. (et sous c:\ZHP\ZHPDiag.txt)

Ce rapport étant trop long pour le forum, héberge le :

soit directement sur le forum en pièce jointe dans ta réponse : Ajouter un fichier en pièce jointe sur le forum <<< Seulement pour le forum Vista-XP.fr!
soit sur Cijoint.fr et copie-colle le lien fourni dans ta réponse.
Free large file hosting. Send big files the easy way! copier/coller le tout premier lien fourni.

@+

Orvald · le 5 novembre 2011

Rapport de ZHPDiag v1.28.22 par Nicolas Coolman, Update du 04/11/2011

Run by Domnique at 05/11/2011 13:03:02

Web site : ZHPDiag Outil de diagnostic

State : Version à jour.

---\\ Web Browser

MSIE: Internet Explorer v8.0.6001.18702

MFIE: Mozilla Firefox 7.0 v7.0 (Defaut)

GCIE: Google Chrome v15.0.874.106

---\\ Windows Product Information

Windows XP Home Edition Service Pack 3 (Build 2600)

Windows Automatic Updates : OK

Windows Genuine Advantage : KO

---\\ System Information

~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 3071 MB (66% free)

System Restore: Activé (Enable)

System drive C: has 155 GB (79%) free of 195 GB

---\\ Logged in mode

~ Computer Name: DOMINIQUE-

~ User Name: Domnique

~ All Users Names: SUPPORT_388945a0, HelpAssistant, Domnique, Administrateur,

~ Unselected Option: O45,O61,O62,O65,O66,O82,O89

Logged in as Administrator

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Documents and Settings\Domnique\Application Data\

~ %Desktop% : C:\Documents and Settings\Domnique\Bureau\

~ %Favorites% : C:\Documents and Settings\Domnique\Favoris\

~ %LocalAppData% : C:\Documents and Settings\Domnique\Local Settings\Application Data\

~ %StartMenu% : C:\Documents and Settings\Domnique\Menu Démarrer\

~ %Windir% : C:\WINDOWS\

~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 155 Go of 195 Go)

D:\ CD-ROM drive (Not Inserted)

E:\ Hard drive, Flash drive, Thumb drive (Free 266 Go of 270 Go)

F:\ Hard drive, Flash drive, Thumb drive (Free 47 Go of 47 Go)

G:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 10 Go)

H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

---\\ Security Center & Tools Informations

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK

~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques

[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.05/11/2011 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.05/11/2011 - 03:34:20.) -- C:\WINDOWS\system32\rundll32.exe [33792]

[MD5.7DF35C3D173E799F97F208CC5F3B1C93] - (.Microsoft Corporation - Internet Extensions for Win32.) (.05/11/2011 - 00:41:31.) -- C:\WINDOWS\system32\wininet.dll [916480]

[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.05/11/2011 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]

[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.05/11/2011 - 14:49:54.) -- C:\WINDOWS\system32\drivers\AFD.sys [138496]

[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.05/11/2011 - 19:40:30.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]

[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.05/11/2011 - 20:14:21.) -- C:\WINDOWS\system32\drivers\Cdfs.sys [63744]

[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.05/11/2011 - 19:40:46.) -- C:\WINDOWS\system32\drivers\Cdrom.sys [62976]

[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.05/11/2011 - 02:57:38.) -- C:\WINDOWS\system32\drivers\Fips.sys [44672]

[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows ® Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.05/11/2011 - 17:36:05.) -- C:\WINDOWS\system32\drivers\HDAudBus.sys [144384]

[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.05/11/2011 - 03:00:52.) -- C:\WINDOWS\system32\drivers\i8042prt.sys [54144]

[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.05/11/2011 - 19:40:58.) -- C:\WINDOWS\system32\drivers\Imapi.sys [42112]

[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.05/11/2011 - 19:57:15.) -- C:\WINDOWS\system32\drivers\IpNat.sys [152832]

[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.05/11/2011 - 20:19:42.) -- C:\WINDOWS\system32\drivers\IPSec.sys [75264]

[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.05/11/2011 - 14:29:31.) -- C:\WINDOWS\system32\drivers\MRxSmb.sys [456320]

[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.05/11/2011 - 20:21:00.) -- C:\WINDOWS\system32\drivers\netBT.sys [162816]

[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.05/11/2011 - 20:15:53.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.05/11/2011 - 03:09:40.) -- C:\WINDOWS\system32\drivers\Parport.sys [80384]

[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.05/11/2011 - 20:19:43.) -- C:\WINDOWS\system32\drivers\Rasl2tp.sys [51328]

[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.05/11/2011 - 19:32:51.) -- C:\WINDOWS\system32\drivers\rdpdr.sys [196224]

[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.05/11/2011 - 02:57:34.) -- C:\WINDOWS\system32\drivers\redbook.sys [58752]

~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 20/44

~ Mes musiques (My Musics) : 1/2

~ Mes Favoris (My Favorites) : 4/11

~ Mes Documents (My Documents) : 44/675

~ Mon Bureau (My Desktop) : 2/20

~ Menu demarrer (Programs) : 5/35

~ Scan Hidden Files in 00mn 01s

---\\ Processus lancés

[MD5.6797E0F85E5F419EEFBE2E4C7A622EA1] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2435592] [PID.]

[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE [33792] [PID.668]

[MD5.013A269E7AF8B01FF20B384FEEBFFDA5] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [16862720] [PID.708]

[MD5.44B3B997E25C5D9A81D6C501451A96D7] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe [99888] [PID.]

[MD5.2F2BC80803F0638F6738E37F769E4BD0] - (.Hewlett-Packard - hpgs2wnd.) -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe [69632] [PID.260]

[MD5.76B130090C789ECBDE63CA5E4423020F] - (.HP - Pas de description.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [188416] [PID.396]

[MD5.E9B4D167643611408FFA0C2C34F5A985] - (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [212992] [PID.492]

[MD5.919CE09D182D8AAAFCFBC4C40493961D] - (...) -- C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [49152] [PID.1904]

[MD5.C39FCB57279D2C4D3235D31E43BE4196] - (.Hewlett-Packard - HPHmon05.) -- C:\WINDOWS\system32\hphmon05.exe [483328] [PID.1996]

[MD5.03E0CDD5CCF362593EA52B0151750D0A] - (.Logitech Inc. - Logitech Communications Manager.) -- C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe [497200] [PID.2000]

[MD5.A302AE354F6A164DB1AE2A778EA48B9D] - (.Pas de propriétaire - hpgs2wnf Module.) -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe [77824] [PID.208]

[MD5.6C645D7DF2462697BC7A086E328607D5] - (...) -- C:\Program Files\Logitech\QuickCam10\QuickCam10.exe [614960] [PID.636]

[MD5.F63465BBCE7059EA281ECAFF7590E1E8] - (.Logitech Inc. - LVCom Server.) -- C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe [243248] [PID.224]

[MD5.F052CB43FCA828CF5C711BAFBECD692F] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [1043968] [PID.]

[MD5.6E3245DF783E58375B3465F03274743E] - (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696] [PID.496]

[MD5.9B4C1812595C389AB9CCF1FF3B315248] - (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe [98304] [PID.1352]

[MD5.026423673B8563E9975BDA97ED6273C7] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449608] [PID.1432]

[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe [1695232] [PID.1636]

[MD5.381B25DC8E958D905B33130D500BBF29] - (.Sun Microsystems, Inc. - Java Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [PID.]

[MD5.67384147DD005E54D2C0A20408E28579] - (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe [1242448] [PID.2428]

[MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [PID.2456]

[MD5.D6D4106FD6BE51126397B844B3394C31] - (.D-Link - D-Link AirPlus G+ Wireless Adapter Utility.) -- C:\Program Files\D-Link\D-Link AirPlus G+ Wireless Adapter Utility\DWLGTI.EXE [671744] [PID.2500]

[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]

[MD5.A50AF72FBCA4B753FED148688E7D9ABB] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 169.3.) -- C:\WINDOWS\system32\nvsvc32.exe [155716] [PID.]

[MD5.F9A1CF5B5B2E9E17A2DDEB198337F97C] - (.Logitech Inc. - Logitech Camera Control Interface.) -- C:\Program Files\Logitech\QuickCam10\COCIManager.exe [166448] [PID.2076]

[MD5.C4221678BBAA55239C23632875759961] - (.Microsoft Corporation - API Image Mastering.) -- C:\WINDOWS\system32\imapi.exe [150528] [PID.]

[MD5.5C1CADD1CB67C0B9D8A84EC6E4D6B5CC] - (.HP - PML Driver.) -- C:\WINDOWS\system32\HPZipm12.exe [65795] [PID.600]

[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]

[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [PID.]

[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]

[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- c:\program files\avira\antivir desktop\avgnt.exe [281768] [PID.412]

[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.4236]

[MD5.83F4BA8B8CDA4F063AA2002955A508A9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.4432]

[MD5.6EE99B6BC3F93C4F68A780781F2A638D] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [697344] [PID.5228]

[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe [44544] [PID.]

~ Scan Processes Running in 00mn 02s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Documents and Settings\Domnique\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

G1 - GCS: Preference [user Data\Default] None

G0 - GCSP: Preference [user Data\Default][HomePage] Google

~ Scan Google Browser in 00mn 00s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Documents and Settings\Domnique\Application Data\Mozilla\Firefox\Profiles\es8jfovq.default\prefs.js

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Domnique] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml

M0 - MFSP: prefs.js [Domnique - es8jfovq.default] Google

M2 - MFEP: prefs.js [Domnique - es8jfovq.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.7.0.6 (.Conduit Ltd..)

M2 - MFEP: prefs.js [Domnique - es8jfovq.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.4.2.20111006100951 (.Yahoo!.)

M2 - MFEP: prefs.js [Domnique - es8jfovq.default\{e001c731-5e37-4538-a5cb-8168736a2360}] [bitdefender] BitDefender QuickScan v0.9.9.99 (.Echipa R&D BitDefender.)

M2 - MFEP: prefs.js [Domnique - es8jfovq.default\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}] [greasemonkey] Greasemonkey v0.9.12 (.Aaron Boodman; http://youngpup.net/.)

P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll

P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL

P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll

P2 - FPN:Firefox Plugin Navigator . (.Apple Computer, Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

P2 - FPN: [HKLM] [@checkpoint.com/FFApi] - (...) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll (.not file.)

P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

~ Scan Firefox Browser in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Microsoft Corporation

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Bing

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19131 (longhorn_ie8_gdr.110815-1715)) -- C:\WINDOWS\system32\ieframe.dll

~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

~ Scan Keys in 00mn 00s

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

~ Scan BHO in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [NvCplDaemon] C:\WINDOWS\system32\NvCpl.dll, (.not file.)

O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32\nwiz.exe

O4 - HKLM\..\Run: [NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll, (.not file.)

O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe

O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe

O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] . (.Hewlett-Packard - hpgs2wnd.) -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - Pas de description.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe

O4 - HKLM\..\Run: [HPHUPD05] . (.Hewlett-Packard - HPHupd05.) -- C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe

O4 - HKLM\..\Run: [HP Component Manager] . (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

O4 - HKLM\..\Run: [HP Software Update] . (...) -- C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe

O4 - HKLM\..\Run: [HPHmon05] . (.Hewlett-Packard - HPHmon05.) -- C:\WINDOWS\system32\hphmon05.exe

O4 - HKLM\..\Run: [LogitechCommunicationsManager] . (.Logitech Inc. - Logitech Communications Manager.) -- C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

O4 - HKLM\..\Run: [LVCOMSX] . (.Logitech Inc. - LVCom Server.) -- C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] . (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKCU\..\Run: [steam] . (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe

O4 - HKUS\S-1-5-21-1644491937-1343024091-725345543-1004\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1644491937-1343024091-725345543-1004\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - HKUS\S-1-5-21-1644491937-1343024091-725345543-1004\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O4 - HKUS\S-1-5-21-1644491937-1343024091-725345543-1004\..\Run: [steam] . (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe

O4 - HKUS\S-1-5-21-1644491937-1343024091-725345543-1004\..\Run: [spybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

~ Scan Application in 00mn 00s

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A94000000001}\SC_Reader.ico

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. SA.) -- C:\Program Files\Hewlett-Packard\Digital Imaging\DocProc\regipe.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe

O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Search.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O4 - Global Startup: C:\Documents And Settings\Domnique\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe

O4 - Global Startup: C:\Documents And Settings\Domnique\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Documents And Settings\Domnique\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe

O4 - Global Startup: C:\Documents And Settings\Domnique\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe

~ Scan Global Startup in 00mn 00s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)

O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~3\Office12\EXCEL.exe\

~ Scan IE Menu Contextuel in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\PROGRA~1\MICROS~3\Office12\REFBARH.ICO

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -- C:\Program Files\Messenger\msmsgs.exe, (.not file.)

~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

~ Scan Winsock in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{295BAA9D-55D0-40CD-BBBE-04CF81D637A6}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{D9DB941B-B7D6-4BC9-BBDC-ECBAFBBD44D1}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS1\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS1\Services\Tcpip\..\{295BAA9D-55D0-40CD-BBBE-04CF81D637A6}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS1\Services\Tcpip\..\{D9DB941B-B7D6-4BC9-BBDC-ECBAFBBD44D1}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS1\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS3\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS3\Services\Tcpip\..\{295BAA9D-55D0-40CD-BBBE-04CF81D637A6}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS3\Services\Tcpip\..\{D9DB941B-B7D6-4BC9-BBDC-ECBAFBBD44D1}: NameServer = 46.4.11.10,8.8.8.8,8.8.4.4

O17 - HKLM\System\CS3\Services\Tcpip\..\{00DB7C02-80F1-4AB6-BC6C-ADAE2F2F30DE}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS3\Services\Tcpip\..\{088B6C08-43EE-425C-AFF7-E17E8387F102}: DhcpNameServer = 192.168.0.1

~ Scan Domain in 00mn 00s

---\\ Protocole additionnel (O18)

O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} . (.Hewlett-Packard Company - HPCETIUI Protocol Handler Module.) -- C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll

O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll

O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll

O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft ® HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll

O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll

O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll

O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll

O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

~ Scan Protocole Additionnel in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll

O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll

O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll

O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll

O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll

O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll

O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll

~ Scan Winlogon in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll

~ Scan SSODL in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)

O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

~ Scan STS/SSO in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

O23 - Service: LVSrvLauncher (LVSrvLauncher) . (.Logitech Inc. - Service Launcher.) - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe

O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 169.3.) - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

~ Scan Services in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe

~ Scan Desktop Component in 00mn 00s

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

~ Scan Keys in 00mn 00s

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Efnca.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HP DArC Task #Hewlett-Packard#7600#MY375213H7D4.job

O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\HP Usg Daily.job

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe

[MD5.5EE36B2AD1B9877CFA6D2CB4F646A992] [APT] [HP DArC Task #Hewlett-Packard#7600#MY375213H7D4] (.Hewlett-Packard Company.) -- C:\Program Files\HP\hpcoretech\comp\hpdarc.exe

[MD5.0769E4D5FD9262AF6312FE5EACFB6441] [APT] [HP Usg Daily] (...) -- C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\pexpress\hphped05.exe

~ Scan Scheduled Task in 00mn 00s

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Planificateur de tâches - {CC2A9BA0-3BDD-11D0-821E-444553540000} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Shockwave Flash - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} . (...) -- C:\WINDOWS\system32\ie4uinit.exe.mui,

~ Scan Active Setup in 00mn 00s

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys

O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys

O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys

O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys

O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys

O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys

O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys

O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys

O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys

O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys

O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys

O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys

O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys

O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys

O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys

O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys

O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

O41 - Driver: (vsdatant) . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - C:\WINDOWS\system32\vsdatant.sys

~ Scan Drivers in 00mn 00s

---\\ Logiciels installés (O42)

O42 - Logiciel: 3Planesoft Screensaver Manager 1.0 - (.3Planesoft.) [HKLM] -- 3Planesoft Screensaver Manager_is1

O42 - Logiciel: 7-Zip 4.65 - (.Pas de propriétaire.) [HKLM] -- 7-Zip

O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Reader 9.4.6 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}

O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}

O42 - Logiciel: Atheros Communications Inc.® AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}

O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop

O42 - Logiciel: BurnAware Free 3.0.7 - (.Burnaware Technologies.) [HKLM] -- BurnAware Free_is1

O42 - Logiciel: Call of Duty: Modern Warfare 2 - (.Infinity Ward.) [HKLM] -- Steam App 10180

O42 - Logiciel: Call of Duty: Modern Warfare 2 - Multiplayer - (.Infinity Ward.) [HKLM] -- Steam App 10190

O42 - Logiciel: Company of Heroes - (.THQ Inc..) [HKLM] -- Company of Heroes

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {14574B7F-75D1-4718-B7F2-EBF6E2862A35}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {199E6632-EB28-4F73-AECB-3E192EB92D18}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {25724802-CC14-4B90-9F3B-3D6955EE27B1}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {50193078-F553-4EBA-AA77-64C9FAA12F98}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {51D718D1-DA81-4FAD-919F-5C1CE3C33379}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {66F78C51-D108-4F0C-A93C-1CBE74CE338F}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {80D03817-7943-4839-8E96-B9F924C5E67D}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {97E5205F-EA4F-438F-B211-F1846419F1C1}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {99A7722D-9ACB-43F3-A222-ABC7133F159E}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {BA801B94-C28D-46EE-B806-E1E021A3D519}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {D4D244D1-05E0-4D24-86A2-B2433C435671}

O42 - Logiciel: Company of Heroes - FAKEMSI - (.THQ Inc..) [HKLM] -- {EAF636A9-F664-4703-A659-85A894DA264F}

O42 - Logiciel: D-Link AirPlus G+ Wireless Adapter Utility - (.Pas de propriétaire.) [HKLM] -- {A2F67EA3-0721-4E0D-A7B9-AE8F321303AF}

O42 - Logiciel: DiMAGE Viewer - (.Pas de propriétaire.) [HKLM] -- {976EA7B1-7562-483D-88DA-4323D263B7CD}

O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}

O42 - Logiciel: FileZilla Client 3.5.1 - (.FileZilla Project.) [HKLM] -- FileZilla Client

O42 - Logiciel: Free Text Pad - (.Zenith Technology Limited.) [HKLM] -- Free Text Pad

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E}

O42 - Logiciel: HP Photo and Imaging 1.0 - Scanjet 3500c Series - (.{&Tahoma8}Hewlett-Packard.) [HKLM] -- {B8E952E3-A823-443A-8493-39A0CCE0E3EB}

O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {6FA269F8-38CB-4DF7-AA0D-36E3CE789485}

O42 - Logiciel: Half-Life Dedicated Server Update Tool - (.Pas de propriétaire.) [HKLM] -- Half-Life Dedicated Server Update Tool

O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2

O42 - Logiciel: Hotfix for Windows XP (KB915800-v4) - (.Microsoft Corporation.) [HKLM] -- KB915800-v4

O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3

O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}

O42 - Logiciel: Java 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022FF}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}

O42 - Logiciel: Logitech Audio Echo Cancellation Component - (.Logitech Inc..) [HKLM] -- {BEF726DD-4037-4214-8C6A-E625C02D2870}

O42 - Logiciel: Logitech QuickCam - (.Logitech Inc..) [HKLM] -- {EC42ED6A-751D-45C0-A4F9-8CD00E4690FC}

O42 - Logiciel: Logitech Video Enumerator - (.Logitech Inc..) [HKLM] -- {EA516024-D84D-41F1-814F-83175A6188F2}

O42 - Logiciel: MSN - (.Pas de propriétaire.) [HKLM] -- MSNINST

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}

O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}

O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Mozilla Firefox 7.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 7.0 (x86 fr)

O42 - Logiciel: MyDefrag v4.3.1 - (.J.C. Kessels.) [HKLM] -- MyDefrag v4.3.1_is1

O42 - Logiciel: MyPDFConverter - (.Aedge Performance BCN SL.) [HKLM] -- {1D76557F-04F5-4CF9-AB20-6A621B0D52D7}

O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers

O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}

O42 - Logiciel: Photosmart 140,240,7200,7600,7700,7900 Series - (.Hewlett-Packard.) [HKLM] -- {45B6180B-DCAB-4093-8EE8-6164457517F0}

O42 - Logiciel: Programme de gestion Camera de Logitech® - (.Pas de propriétaire.) [HKLM] -- QcDrv

O42 - Logiciel: QuickTime - (.Pas de propriétaire.) [HKLM] -- QuickTime

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5729F1AE-5895-468F-9165-BAD161C9E982}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A}

O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4}

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906

O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{65EA4836-B5A3-4C1D-8883-0C35E471003A}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB982135) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0112C750-A06F-4F92-9C40-E5C1EA9A70EB}

O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}

O42 - Logiciel: Security Update for Windows Search 4 - KB963093 - (.Microsoft Corporation.) [HKLM] -- KB963093

O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}

O42 - Logiciel: The Lost Watch 3D Screensaver 1.0 - (.3Planesoft.) [HKLM] -- The Lost Watch 3D Screensaver_is1

O42 - Logiciel: UMVPLStandalone - (.Logitech Inc..) [HKLM] -- {8AC049F7-1383-45C3-9E7D-F93CA667F9E1}

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2583910) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BDC21583-5601-4B2B-88F3-7919F6DE8FB1}

O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2596560) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{2964DDE1-4925-4DF1-AF2C-0A36B3442228}

O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player

O42 - Logiciel: Windows Essentials Media Codec Pack 3.2 - (.Media Codec.) [HKLM] -- Windows Essentials Media Codec Pack

O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8

O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}

O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriétaire.) [HKLM] -- Windows Live OneCare safety scanner

O42 - Logiciel: Windows Search 4.0 - (.Microsoft Corporation.) [HKLM] -- KB940157

O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service

O42 - Logiciel: ZoneAlarm - (.Check Point, Inc.) [HKLM] -- ZoneAlarm

---\\ HKCU & HKLM Software Keys

[HKCU\Software\7-Zip]

[HKCU\Software\ASUS]

[HKCU\Software\Adobe]

[HKCU\Software\AppDataLow\ISWVolatile]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Ask.com.tmp]

[HKCU\Software\Avance]

[HKCU\Software\Avira]

[HKCU\Software\BitDefender]

[HKCU\Software\CTPW Data]

[HKCU\Software\Cdzpuhtzbu]

[HKCU\Software\CheckPoint]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\DanMorin.Com]

[HKCU\Software\Digital Minds Software]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Haali]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\IM Providers]

[HKCU\Software\Intel]

[HKCU\Software\InterTrust]

[HKCU\Software\JEDI-VCL]

[HKCU\Software\JavaSoft]

[HKCU\Software\Licenses]

[HKCU\Software\Local AppWizard-Generated Applications]

[HKCU\Software\Logitech]

[HKCU\Software\MINOLTA]

[HKCU\Software\Macromedia]

[HKCU\Software\Macrovision]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Monitored]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\MyDefrag]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\Oak Technology]

[HKCU\Software\ObviousIdea]

[HKCU\Software\Policies]

[HKCU\Software\Realtek]

[HKCU\Software\SCS Software]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\SampleView]

[HKCU\Software\SecuROM]

[HKCU\Software\Softonic]

[HKCU\Software\TomTom]

[HKCU\Software\Valve]

[HKCU\Software\WinRAR]

[HKCU\Software\YahooPartnerToolbar]

[HKCU\Software\Yahoo]

[HKCU\Software\Z-Com, Inc.]

[HKCU\Software\Zone Labs]

[HKCU\Software\settings]

[HKLM\Software\3Planesoft]

[HKLM\Software\ASUS]

[HKLM\Software\Activision]

[HKLM\Software\Adobe]

[HKLM\Software\AdwCleaner]

[HKLM\Software\America Online]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Atheros Communications Inc.]

[HKLM\Software\Avira]

[HKLM\Software\C07ft5Y]

[HKLM\Software\CUSTPDF Writer]

[HKLM\Software\Cdzpuhtzbu]

[HKLM\Software\CheckPoint]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\D-Link]

[HKLM\Software\Driver-Soft]

[HKLM\Software\Essentials Codec Pack]

[HKLM\Software\FileZilla 3]

[HKLM\Software\GNU]

[HKLM\Software\GPL Ghostscript]

[HKLM\Software\Gabest]

[HKLM\Software\Gemplus]

[HKLM\Software\Google]

[HKLM\Software\HaaliMkx]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\InstallShield]

[HKLM\Software\Intel]

[HKLM\Software\JavaSoft]

[HKLM\Software\JreMetrics]

[HKLM\Software\KONICA MINOLTA PHOTO IMAGING, INC.]

[HKLM\Software\Logitech]

[HKLM\Software\MINOLTA]

[HKLM\Software\Macromedia]

[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]

[HKLM\Software\Malwarebytes' Anti-Malware]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\ODBC]

[HKLM\Software\Oak Technology]

[HKLM\Software\OldTimer Tools]

[HKLM\Software\Policies]

[HKLM\Software\Program Groups]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\Safer Networking Limited]

[HKLM\Software\Schlumberger]

[HKLM\Software\SecureDigitalServices]

[HKLM\Software\Secure]

[HKLM\Software\THQ]

[HKLM\Software\TrendMicro]

[HKLM\Software\Trymedia Systems]

[HKLM\Software\TuneUp]

[HKLM\Software\Valve]

[HKLM\Software\VideoLAN]

[HKLM\Software\WinLicense]

[HKLM\Software\Windows 3.1 Migration Status]

[HKLM\Software\Windows]

[HKLM\Software\X-AVCSD]

[HKLM\Software\Yahoo]

[HKLM\Software\ZSMC]

[HKLM\Software\Zone Labs]

[HKLM\Software\mozilla.org]

[HKLM\Software\mypdfconverter]

[HKLM\Software\scatlaws]

~ Scan Softwares in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 21/11/2010 - 18:39:02 - [84540] ----D- C:\Program Files\3Planesoft Screensaver Manager

O43 - CFD: 21/11/2010 - 10:58:34 - [3094515] ----D- C:\Program Files\7-Zip

O43 - CFD: 19/11/2010 - 14:38:56 - [245022952] ----D- C:\Program Files\Adobe

O43 - CFD: 25/05/2011 - 15:37:42 - [59] ----D- C:\Program Files\Anuman Interactive

O43 - CFD: 19/11/2010 - 13:23:52 - [154419475] ----D- C:\Program Files\Avira

O43 - CFD: 21/11/2010 - 11:25:26 - [22791115] ----D- C:\Program Files\BurnAware Free

O43 - CFD: 06/03/2011 - 09:39:24 - [826513] ----D- C:\Program Files\CheckPoint

O43 - CFD: 13/11/2010 - 18:23:54 - [0] ----D- C:\Program Files\ComPlus Applications

O43 - CFD: 15/11/2010 - 19:12:14 - [2198554] ----D- C:\Program Files\D-Link

O43 - CFD: 01/11/2011 - 15:23:42 - [5088792] ----D- C:\Program Files\DiMAGE Viewer

O43 - CFD: 21/11/2010 - 12:10:40 - [37440918] ----D- C:\Program Files\Essentials Codec Pack

O43 - CFD: 22/10/2011 - 08:25:04 - [364738689] ----D- C:\Program Files\Fichiers communs

O43 - CFD: 03/10/2011 - 06:48:24 - [17082341] ----D- C:\Program Files\FileZilla FTP Client

O43 - CFD: 23/12/2010 - 17:39:34 - [765703] ----D- C:\Program Files\Free Text Pad

O43 - CFD: 09/07/2011 - 13:31:48 - [365123771] ----D- C:\Program Files\Google

O43 - CFD: 13/10/2011 - 21:20:40 - [8075602] ----D- C:\Program Files\GPLGS

O43 - CFD: 21/11/2010 - 16:18:24 - [265939536] ----D- C:\Program Files\Hewlett-Packard

O43 - CFD: 30/10/2011 - 21:13:58 - [6795726] ----D- C:\Program Files\HP

O43 - CFD: 01/11/2011 - 15:23:40 - [9713790] --H-D- C:\Program Files\InstallShield Installation Information

O43 - CFD: 15/11/2010 - 16:36:26 - [64868] ----D- C:\Program Files\Intel

O43 - CFD: 14/10/2011 - 00:34:02 - [5229200] ----D- C:\Program Files\Internet Explorer

O43 - CFD: 22/10/2011 - 08:24:52 - [81218906] ----D- C:\Program Files\Java

O43 - CFD: 21/11/2010 - 16:24:12 - [13455271] ----D- C:\Program Files\Logitech

O43 - CFD: 04/11/2011 - 07:42:38 - [7014604] ----D- C:\Program Files\Malwarebytes' Anti-Malware

O43 - CFD: 19/11/2010 - 14:14:34 - [2152579] ----D- C:\Program Files\Messenger

O43 - CFD: 19/11/2010 - 14:50:54 - [226432] ----D- C:\Program Files\Microsoft

O43 - CFD: 21/11/2010 - 12:34:18 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2

O43 - CFD: 13/11/2010 - 18:26:40 - [0] ----D- C:\Program Files\microsoft frontpage

O43 - CFD: 29/06/2011 - 06:25:30 - [569846472] ----D- C:\Program Files\Microsoft Office

O43 - CFD: 21/11/2010 - 11:05:00 - [14904] ----D- C:\Program Files\Microsoft Visual Studio

O43 - CFD: 21/11/2010 - 12:31:46 - [3726168] ----D- C:\Program Files\Microsoft Works

O43 - CFD: 21/11/2010 - 12:29:52 - [10374874] ----D- C:\Program Files\Movie Maker

O43 - CFD: 26/10/2011 - 18:55:40 - [37193261] ----D- C:\Program Files\Mozilla Firefox

O43 - CFD: 21/11/2010 - 11:05:06 - [764] ----D- C:\Program Files\MSBuild

O43 - CFD: 06/06/2011 - 19:17:52 - [21471559] ----D- C:\Program Files\MSN

O43 - CFD: 13/11/2010 - 18:23:16 - [8745735] ----D- C:\Program Files\MSN Gaming Zone

O43 - CFD: 22/11/2010 - 19:08:28 - [0] ----D- C:\Program Files\MSXML 4.0

O43 - CFD: 15/11/2010 - 17:03:00 - [0] ----D- C:\Program Files\My Company Name

O43 - CFD: 29/10/2011 - 11:09:50 - [3357263] ----D- C:\Program Files\MyDefrag v4.3.1

O43 - CFD: 13/10/2011 - 21:20:32 - [11812918] ----D- C:\Program Files\MyPDFConverter

O43 - CFD: 19/11/2010 - 14:10:58 - [3285523] ----D- C:\Program Files\NetMeeting

O43 - CFD: 03/10/2011 - 00:30:22 - [36629870] ----D- C:\Program Files\ObviousIdea

O43 - CFD: 13/11/2010 - 18:23:24 - [1804] ----D- C:\Program Files\Online Services

O43 - CFD: 16/12/2010 - 00:22:38 - [4379321] ----D- C:\Program Files\Outlook Express

O43 - CFD: 01/11/2011 - 15:28:42 - [3117721] ----D- C:\Program Files\QuickTime

O43 - CFD: 15/11/2010 - 16:48:06 - [52259734] ----D- C:\Program Files\Realtek

O43 - CFD: 13/11/2010 - 18:25:36 - [1025] ----D- C:\Program Files\Services en ligne

O43 - CFD: 01/07/2011 - 09:26:38 - [3817900] ----D- C:\Program Files\Sony

O43 - CFD: 25/06/2011 - 14:04:00 - [1859052709] ----D- C:\Program Files\Sports Interactive

O43 - CFD: 01/11/2011 - 18:04:18 - [61908229] ----D- C:\Program Files\Spybot - Search & Destroy

O43 - CFD: 05/11/2011 - 11:21:24 - [12449311667] ----D- C:\Program Files\Steam

O43 - CFD: 21/11/2010 - 18:39:00 - [83060] ----D- C:\Program Files\The Lost Watch 3D Screensaver

O43 - CFD: 18/12/2010 - 18:21:46 - [5390823775] ----D- C:\Program Files\THQ

O43 - CFD: 13/11/2010 - 18:32:10 - [0] --H-D- C:\Program Files\Uninstall Information

O43 - CFD: 29/10/2011 - 19:03:26 - [1313066] ----D- C:\Program Files\Valve

O43 - CFD: 21/11/2010 - 12:02:40 - [80329029] ----D- C:\Program Files\VideoLAN

O43 - CFD: 07/03/2011 - 08:16:38 - [5418300] ----D- C:\Program Files\Windows Desktop Search

O43 - CFD: 19/11/2010 - 14:51:14 - [81919897] ----D- C:\Program Files\Windows Live

O43 - CFD: 04/10/2011 - 20:28:00 - [59117371] ----D- C:\Program Files\Windows Live Safety Center

O43 - CFD: 19/11/2010 - 14:50:38 - [245112] ----D- C:\Program Files\Windows Live SkyDrive

O43 - CFD: 19/11/2010 - 14:12:28 - [3534189] ----D- C:\Program Files\Windows Media Player

O43 - CFD: 19/11/2010 - 14:10:56 - [3942655] ----D- C:\Program Files\Windows NT

O43 - CFD: 13/11/2010 - 18:25:40 - [0] --H-D- C:\Program Files\WindowsUpdate

O43 - CFD: 03/10/2011 - 00:19:40 - [4055815] ----D- C:\Program Files\WinRAR

O43 - CFD: 13/11/2010 - 18:26:40 - [0] ----D- C:\Program Files\xerox

O43 - CFD: 25/06/2011 - 14:06:48 - [2673] --H-D- C:\Program Files\Zero G Registry

O43 - CFD: 05/11/2011 - 13:03:08 - [7074272] ----D- C:\Program Files\ZHPDiag

O43 - CFD: 19/11/2010 - 13:33:12 - [21742333] ----D- C:\Program Files\Zone Labs

O43 - CFD: 19/11/2010 - 14:39:04 - [6322530] ----D- C:\Program Files\Fichiers Communs\Adobe

O43 - CFD: 21/11/2010 - 11:05:00 - [92976] ----D- C:\Program Files\Fichiers Communs\DESIGNER

O43 - CFD: 21/11/2010 - 16:09:36 - [97375] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard

O43 - CFD: 15/11/2010 - 19:10:38 - [8232124] ----D- C:\Program Files\Fichiers Communs\InstallShield

O43 - CFD: 22/10/2011 - 08:25:04 - [1258951] ----D- C:\Program Files\Fichiers Communs\Java

O43 - CFD: 21/11/2010 - 16:25:34 - [28756898] ----D- C:\Program Files\Fichiers Communs\Logitech

O43 - CFD: 21/11/2010 - 12:32:02 - [221444945] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared

O43 - CFD: 13/11/2010 - 18:24:42 - [568832] ----D- C:\Program Files\Fichiers Communs\MSSoap

O43 - CFD: 13/11/2010 - 20:11:02 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC

O43 - CFD: 13/11/2010 - 18:24:48 - [8106] ----D- C:\Program Files\Fichiers Communs\Services

O43 - CFD: 13/11/2010 - 20:11:00 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines

O43 - CFD: 21/11/2010 - 12:31:00 - [41360161] ----D- C:\Program Files\Fichiers Communs\System

O43 - CFD: 19/11/2010 - 14:47:44 - [52808562] ----D- C:\Program Files\Fichiers Communs\Windows Live

O43 - CFD: 10/12/2010 - 21:42:08 - [3325575] ----D- C:\Documents and Settings\Domnique\Application Data\Adobe

O43 - CFD: 19/11/2010 - 13:29:04 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\Avira

O43 - CFD: 31/10/2011 - 18:21:16 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\BeSpotted

O43 - CFD: 06/03/2011 - 09:41:04 - [162455] ----D- C:\Documents and Settings\Domnique\Application Data\CheckPoint

O43 - CFD: 01/11/2011 - 16:26:56 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\DIMAGE

O43 - CFD: 21/11/2010 - 16:09:50 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\Dossier de téléchargement Share-to-Web

O43 - CFD: 21/11/2010 - 16:09:50 - [874816] ----D- C:\Documents and Settings\Domnique\Application Data\Dossier de téléchargement Share-to-Web

O43 - CFD: 03/10/2011 - 06:50:08 - [23700] ----D- C:\Documents and Settings\Domnique\Application Data\FileZilla

O43 - CFD: 19/12/2010 - 19:16:04 - [86708] ----D- C:\Documents and Settings\Domnique\Application Data\Google

O43 - CFD: 21/11/2010 - 19:21:08 - [3745] ----D- C:\Documents and Settings\Domnique\Application Data\Hewlett-Packard

O43 - CFD: 13/11/2010 - 18:32:12 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\Identities

O43 - CFD: 21/11/2010 - 19:03:38 - [3261] ----D- C:\Documents and Settings\Domnique\Application Data\Macromedia

O43 - CFD: 02/11/2011 - 22:38:36 - [3249] ----D- C:\Documents and Settings\Domnique\Application Data\Malwarebytes

O43 - CFD: 21/11/2010 - 12:28:08 - [16] ----D- C:\Documents and Settings\Domnique\Application Data\Media Player Classic

O43 - CFD: 18/10/2011 - 19:56:48 - [8023410] -S--D- C:\Documents and Settings\Domnique\Application Data\Microsoft

O43 - CFD: 19/11/2010 - 13:18:00 - [60563723] ----D- C:\Documents and Settings\Domnique\Application Data\Mozilla

O43 - CFD: 11/06/2011 - 12:16:10 - [25077] ----D- C:\Documents and Settings\Domnique\Application Data\MSNInstaller

O43 - CFD: 01/11/2011 - 19:16:14 - [51901] ----D- C:\Documents and Settings\Domnique\Application Data\ObviousIdea

O43 - CFD: 01/11/2011 - 18:21:20 - [75393] ----D- C:\Documents and Settings\Domnique\Application Data\QuickScan

O43 - CFD: 18/12/2010 - 20:14:04 - [0] R-H-D- C:\Documents and Settings\Domnique\Application Data\SecuROM

O43 - CFD: 25/06/2011 - 14:07:56 - [11083938] ----D- C:\Documents and Settings\Domnique\Application Data\Sports Interactive

O43 - CFD: 19/11/2010 - 14:30:06 - [8798342] ----D- C:\Documents and Settings\Domnique\Application Data\Sun

O43 - CFD: 01/11/2011 - 19:13:22 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\Systweak

O43 - CFD: 21/11/2010 - 12:04:18 - [77524] ----D- C:\Documents and Settings\Domnique\Application Data\vlc

O43 - CFD: 06/03/2011 - 11:05:58 - [196] ----D- C:\Documents and Settings\Domnique\Application Data\Windows Desktop Search

O43 - CFD: 09/06/2011 - 22:11:56 - [0] ----D- C:\Documents and Settings\Domnique\Application Data\Windows Search

O43 - CFD: 03/10/2011 - 00:19:50 - [12] ----D- C:\Documents and Settings\Domnique\Application Data\WinRAR

O43 - CFD: 21/11/2010 - 16:54:06 - [9992] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Adobe

O43 - CFD: 24/12/2010 - 19:10:02 - [545628669] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Google

O43 - CFD: 21/11/2010 - 18:51:04 - [552880] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Identities

O43 - CFD: 04/10/2011 - 20:12:38 - [348543914] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Microsoft

O43 - CFD: 21/11/2010 - 11:02:44 - [0] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Microsoft Help

O43 - CFD: 19/11/2010 - 13:17:38 - [46711128] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Mozilla

O43 - CFD: 25/06/2011 - 14:07:56 - [0] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Sports Interactive

O43 - CFD: 09/06/2011 - 19:05:58 - [311441] ----D- C:\Documents and Settings\Domnique\Local Settings\Application Data\Temp

~ Scan Program Folder in 00mn 10s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.4B770F0434AC39260F35D26319E4A4AB] - 05/11/2011 - 12:44:03 ---A- . (...) -- C:\AdwCleaner[s2].txt [1584]

O44 - LFC:[MD5.2221F0ECFB5B9D3F685A406DFA2E5424] - 05/11/2011 - 12:43:43 ---A- . (...) -- C:\AdwCleaner[R2].txt [1370]

O44 - LFC:[MD5.A8895FA0414E8DD53B78B602C52E8FF2] - 05/11/2011 - 12:15:06 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]

O44 - LFC:[MD5.2A3C67DB8BBC8D017F4238DA064A0E44] - 05/11/2011 - 12:15:04 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]

O44 - LFC:[MD5.F23BA6E0E3F9C4B1882E03EEAA5ABCB9] - 05/11/2011 - 11:22:50 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1916919]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 05/11/2011 - 11:19:47 ---A- . (...) -- C:\WINDOWS\0.log [0]

O44 - LFC:[MD5.3F7761418EB18FC77E3F8D4FA14C68C6] - 05/11/2011 - 11:19:17 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [13646]

O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 05/11/2011 - 11:19:16 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]

O44 - LFC:[MD5.BDB72A767F87C18FE0A656BF017B3510] - 05/11/2011 - 00:57:45 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32552]

O44 - LFC:[MD5.AA038BEC95878820180C6F0CF804F6BD] - 05/11/2011 - 00:56:52 ---A- . (...) -- C:\WINDOWS\system32\The Lost Watch.log [8105]

O44 - LFC:[MD5.A915C35C4FAE98D3C6253B7C7D16F105] - 04/11/2011 - 07:24:16 ---A- . (...) -- C:\AdwCleaner[s1].txt [34917]

O44 - LFC:[MD5.F90A8FA3686F3EE1E0F81F494E5BE40C] - 04/11/2011 - 07:20:08 ---A- . (...) -- C:\AdwCleaner[R1].txt [34185]

O44 - LFC:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 02/11/2011 - 22:38:19 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [22216]

O44 - LFC:[MD5.0C2F95B85F5BC2792E28FB68310CA598] - 02/11/2011 - 13:01:34 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]

O44 - LFC:[MD5.7486F1BC036AB423D5C67A9BF4ECD74D] - 01/11/2011 - 18:25:57 ---A- . (...) -- C:\WINDOWS\hpqcopy.INI [281]

O44 - LFC:[MD5.B56EFCA076A7A31C2D87EFEBBDDE2878] - 01/11/2011 - 16:50:16 ---A- . (.Systweak Inc., (www.systweak.com) - Regclean Pro.) -- C:\WINDOWS\system32\roboot.exe [17280]

O44 - LFC:[MD5.E1034D757709F37F2D1EBD96D5EAD02B] - 01/11/2011 - 16:26:53 ---A- . (...) -- C:\WINDOWS\QTFont.for [1409]

O44 - LFC:[MD5.DBA91CD5A3A68302967C03213E52BDE8] - 01/11/2011 - 16:26:53 --HA- . (...) -- C:\WINDOWS\QTFont.qfn [54156]

O44 - LFC:[MD5.9B91238821B483663BEFF72D5603AA33] - 01/11/2011 - 15:28:33 ---A- . (.MindVision - Installer VISE uninstall application file.) -- C:\WINDOWS\unvise32qt.exe [86016]

O44 - LFC:[MD5.FD82DF43EF4F3B6B17198D8B9F311930] - 01/11/2011 - 15:28:32 ---A- . (...) -- C:\WINDOWS\system32\qtplugin.log [3999]

O44 - LFC:[MD5.E8EAC09B7BEDCC28229740CD623BF42E] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - Color Management Library.) -- C:\WINDOWS\system32\MCMLDSC2.dll [339968]

O44 - LFC:[MD5.164156D65B3EA1D6D930834F28BD1173] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - Digital Camera Image Processing Library.) -- C:\WINDOWS\system32\DSCIPLib2.dll [204800]

O44 - LFC:[MD5.733168636D8332C25320CA27F664BF2F] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - MQTQueen.) -- C:\WINDOWS\system32\MQTQueen.dll [69632]

O44 - LFC:[MD5.EFD3F13C74BC4908AD49D993DAD2E7D0] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - MQTQueen2.) -- C:\WINDOWS\system32\MQTQueen2.dll [69632]

O44 - LFC:[MD5.CC6EF54E5317811F00B3C1F3167BE720] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - MQueen.) -- C:\WINDOWS\system32\MQueen.dll [245760]

O44 - LFC:[MD5.FD615C74583A7BC13884670946656779] - 01/11/2011 - 15:23:40 ---A- . (.KONICA MINOLTA PHOTO IMAGING, INC. - MQueen2.) -- C:\WINDOWS\system32\MQueen2.dll [81920]

O44 - LFC:[MD5.90F2BF94A6FF6995CE86F75D46FFD5A3] - 31/10/2011 - 10:11:24 ---A- . (...) -- C:\WINDOWS\setupapi.log [282270]

O44 - LFC:[MD5.22BBEC7DAE2DAAEFCEBFFC42F7D28E47] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [1453338]

O44 - LFC:[MD5.82E7FCAF6F282656A3F9884106221504] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\comsetup.log [380823]

O44 - LFC:[MD5.120CA8AC6DD5C35AB2889CE2961858C2] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\iis6.log [232304]

O44 - LFC:[MD5.41997B7E3A4648411BAF87D62E4AD103] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\imsins.log [1943]

O44 - LFC:[MD5.2E181AF450D4645130868FFA725AFE29] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\msgsocm.log [73052]

O44 - LFC:[MD5.69782E14635D0EF8967E66BEB50466A6] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [228690]

O44 - LFC:[MD5.48C16D26E33C0E23C93654491F9CDBCB] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\ocgen.log [705808]

O44 - LFC:[MD5.004A035D4BA7D8625170B57325738823] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\ocmsn.log [61492]

O44 - LFC:[MD5.F1BDB635D3891396EF8F613588347877] - 31/10/2011 - 09:52:10 ---A- . (...) -- C:\WINDOWS\tsoc.log [560166]

O44 - LFC:[MD5.4E7FB179B4D585D9F0D6CF19994C39C3] - 31/10/2011 - 09:40:18 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI [817370]

O44 - LFC:[MD5.C1F94EC7E7E2A02AB80FF92859B5C4C0] - 31/10/2011 - 09:40:18 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat [41224]

O44 - LFC:[MD5.C00774789F45B0036A4EF241DE916CA4] - 31/10/2011 - 09:40:18 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat [59004]

O44 - LFC:[MD5.F82A5CAC1680237AEA2B880F97C0B0BD] - 31/10/2011 - 09:40:18 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat [315088]

O44 - LFC:[MD5.1A8A529EB0B50CB7CF9E8CE0E4EC843C] - 31/10/2011 - 09:40:18 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat [394132]

O44 - LFC:[MD5.5FF46D8922A230E0CFE1CAE9090997E7] - 30/10/2011 - 23:39:21 ---A- . (...) -- C:\WINDOWS\DHCPUPG.LOG [403]

O44 - LFC:[MD5.D2B2E0060082C65256CCD2CA94950302] - 30/10/2011 - 23:38:30 ---A- . (...) -- C:\WINDOWS\WINNT32.LOG [426]

O44 - LFC:[MD5.56306ADA505A62996A17AC8BEE2E8053] - 30/10/2011 - 23:38:15 ---A- . (...) -- C:\WINDOWS\setupact.log [182452]

O44 - LFC:[MD5.C63780C8A8FE925A69C6E5367CEB896B] - 30/10/2011 - 23:17:31 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1943]

O44 - LFC:[MD5.926BD40C63B155FE7686651D4BC30426] - 30/10/2011 - 23:16:48 ---A- . (...) -- C:\WINDOWS\UPGRADE.TXT [901]

O44 - LFC:[MD5.385798940A958D31BA2A48208D6149ED] - 30/10/2011 - 21:13:56 ---A- . (...) -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini [214]

O44 - LFC:[MD5.66C2B117829AB32E27D736E99632C69D] - 22/10/2011 - 08:24:50 ---A- . (...) -- C:\WINDOWS\system32\jupdate-1.6.0_29-b11.log [3104]

O44 - LFC:[MD5.2C536D41DCE213E1D449F18B3D41EA55] - 17/10/2011 - 06:18:49 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl [414368]

O44 - LFC:[MD5.B18B4CA43E838B665018F72FD5505C18] - 14/10/2011 - 06:25:48 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [264616]

O44 - LFC:[MD5.5483501583B169C3F575247515DE4F91] - 14/10/2011 - 00:35:28 ---A- . (...) -- C:\WINDOWS\KB2564958.log [10441]

O44 - LFC:[MD5.96CB461673FA54649DEDBB6AE4EA9C20] - 14/10/2011 - 00:35:27 ---A- . (...) -- C:\WINDOWS\updspapi.log [215724]

O44 - LFC:[MD5.E50327F61BEA5D9B3BCCCB415605AB2E] - 14/10/2011 - 00:34:35 ---A- . (...) -- C:\WINDOWS\KB2567053.log [15849]

O44 - LFC:[MD5.FE4E274F5360AD20904C670508F736F6] - 14/10/2011 - 00:34:29 ---A- . (...) -- C:\WINDOWS\KB2592799.log [10835]

O44 - LFC:[MD5.69F7D5FF70C9249EA39D16489C2310CC] - 14/10/2011 - 00:34:06 ---A- . (...) -- C:\WINDOWS\KB2586448-IE8.log [15167]

O44 - LFC:[MD5.7EE1622A8C253689140658670853498B] - 13/10/2011 - 12:35:22 ---A- . (...) -- C:\WINDOWS\system32\custmon32.dll [86016]

O44 - LFC:[MD5.C91966E32E718C480716499473713F31] - 21/06/2002 - 15:09:46 ---A- . (...) -- C:\WINDOWS\system32\PowerToysLicense.rtf [160217]

~ Scan Files in 00mn 11s

---\\ Export de clé d'application autorisée (O47)

O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\ZoneLabs\vsmon.exe" [Enabled] .(.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" [Enabled] .(.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe

O47 - AAKE:Key Export SP - "C:\Program Files\THQ\Company of Heroes\RelicCOH.exe" [Enabled] .(.THQ Canada Inc. - RelicCOH.) -- C:\Program Files\THQ\Company of Heroes\RelicCOH.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Steam\Steam.exe" [Enabled] .(.Valve Corporation - Steam.) -- C:\Program Files\Steam\Steam.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe" [Enabled] .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe

O47 - AAKE:Key Export SP - "C:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe" [Enabled] .(...) -- C:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe

O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe

O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe

O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

~ Scan Keys in 00mn 00s

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll

~ Scan Keys in 00mn 00s

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)

~ Scan CSB in 00mn 00s

---\\ Image File Execution Options (IFEO) (O50)

O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d

~ Scan IFEO in 00mn 00s

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm

O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll

O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\system32\lvcodec2.dll

O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll

O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax

O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax

O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)

O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- (.not file.)

~ Scan Keys in 00mn 00s

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\CTFMON.EXE [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe

O53 - SMSR:HKLM\...\startupreg\msnmsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

~ Scan SMSR Keys in 00mn 00s

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll

~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoBandCustomize"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoMovingBands"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoCloseDragDropBands"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSetTaskbar"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoToolbarsOnTaskbar"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSaveSettings"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoActiveDesktop"=0

O56 - MWPE:[HKCU\...\policies\Explorer] - "ClassicShell"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1

~ Scan Keys in 00mn 00s

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.B34B1AB0A7690A0E2301FEC6D17B2FC1] - 05/11/2011 - 16:18:02 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS [82380]

O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 05/11/2011 - 11:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys [5810]

O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 05/11/2011 - 16:22:02 ---A- . (...) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS [10296]

O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 05/11/2011 - 15:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]

O58 - SDL:[MD5.1E4114685DE1FFA9675E09C6A1FB3F4B] - 05/11/2011 - 19:08:25 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [66616]

O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 05/11/2011 - 15:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]

O58 - SDL:[MD5.0F78D3DAE6DEDD99AE54C9491C62ADF2] - 05/11/2011 - 19:08:25 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [138192]

O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 05/11/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]

O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 05/11/2011 - 13:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]

O58 - SDL:[MD5.96E5D1F45FB555C913553701EFAB6ECC] - 05/11/2011 - 16:59:54 ---A- . (.Pas de propriétaire - Wireless LAN NDIS 5.1 Miniport Driver.) -- C:\WINDOWS\system32\drivers\GPLUS.sys [283392]

O58 - SDL:[MD5.287A63BD8509BD78E7978823B38AFA81] - 05/11/2011 - 20:19:52 R--A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys [51056]

O58 - SDL:[MD5.0B4FDA2657C3E0315EAA57F9C6D4FD1F] - 05/11/2011 - 20:19:54 R--A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys [16496]

O58 - SDL:[MD5.29559DB25258B60510A60C4E470FCE32] - 05/11/2011 - 20:17:54 R--A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys [21488]

O58 - SDL:[MD5.93E64BAB9DEE162CA0CA5258D132A047] - 05/11/2011 - 17:47:00 R--A- . (.Atheros Communications, Inc. - Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller ndis min.) -- C:\WINDOWS\system32\drivers\l1e51x86.sys [36864]

O58 - SDL:[MD5.4350CB255AD546F4668C8B8AFD6A00A4] - 05/11/2011 - 23:29:27 R--A- . (.Logitech Inc. - Audio filter for Express Plus.) -- C:\WINDOWS\system32\drivers\lv302af.sys [12080]

O58 - SDL:[MD5.6B310DE726E1A0DEFD66718A7F79B5D2] - 05/11/2011 - 23:29:28 R--A- . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\system32\drivers\LV302AV.SYS [720176]

O58 - SDL:[MD5.2D0AB9D29E6B0C42CCE955B5A8E0D62D] - 05/11/2011 - 10:33:28 ---A- . (.Logitech Inc. - Logitech Kernel Audio Processing Filter Driver.) -- C:\WINDOWS\system32\drivers\Lvckap.sys [1587632]

O58 - SDL:[MD5.A3963E3D997C3646E1D3338EB88A48E9] - 05/11/2011 - 10:33:36 ---A- . (.Logitech Inc. - Logitech Machine Vision Engine Loader.) -- C:\WINDOWS\system32\drivers\LVMVdrv.sys [1952816]

O58 - SDL:[MD5.39C767BD6D99C23D28E71B6E0CBA3129] - 05/11/2011 - 10:33:40 ---A- . (...) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys [23472]

O58 - SDL:[MD5.6AD3F5275F117F08C12EAB2233A9E3FB] - 05/11/2011 - 23:29:46 R--A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys [38960]

O58 - SDL:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 05/11/2011 - 17:00:50 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [22216]

O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 05/11/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]

O58 - SDL:[MD5.54281E0EEB10143EC4327BB5D123F125] - 05/11/2011 - 18:53:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 169.32.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [7434336]

O58 - SDL:[MD5.5DCC587DEBA479B1F8E33AA8FB079B8A] - 05/11/2011 - 19:09:14 ---A- . (.Funk Software, Inc. - Odyssey Intermediate Driver.) -- C:\WINDOWS\system32\drivers\odysseyIM3.sys [62865]

O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 05/11/2011 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]

O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 05/11/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]

O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 05/11/2011 - 13:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]

O58 - SDL:[MD5.19AFBB8427CE65042599555E578170DF] - 05/11/2011 - 10:53:00 R---- . (.Realtek Semiconductor Corp. - Realtek® High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [4800000]

O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 05/11/2011 - 17:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]

O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 05/11/2011 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]

O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 05/11/2011 - 13:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]

O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 05/11/2011 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]

O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]

O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]

O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]

O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]

O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]

O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]

O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]

O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]

O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]

O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]

O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]

O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]

O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]

O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]

O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 05/11/2011 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]

O58 - SDL:[MD5.58C5EA3DE400FE1D08CFECA6D5C14EBD] - 05/11/2011 - 19:09:14 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\WINDOWS\system32\PCANDIS5.SYS [16292]

O58 - SDL:[MD5.050C38EBB22512122E54B47DC278BCCD] - 05/11/2011 - 10:02:32 ---A- . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) -- C:\WINDOWS\system32\vsdatant.sys [532224]

~ Scan Drivers in 00mn 03s

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

~ Scan ADS in 00mn 00s

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 22/05/2011 - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur(AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE

O64 - Services: CurCS - 08/09/2011 - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard(AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE

O64 - Services: CurCS - 17/06/2010 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO

O64 - Services: CurCS - 08/09/2011 - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT

O64 - Services: CurCS - 08/09/2011 - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\System32\dmadmin.exe - Service d'administration du Gestionnaire de disque logique(dmadmin) .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN

O64 - Services: CurCS - 14/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys - dmboot(dmboot) .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT

O64 - Services: CurCS - 05/08/2004 - C:\WINDOWS\system32\drivers\dmload.sys - dmload(dmload) .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD

O64 - Services: CurCS - 19/12/2010 - C:\Program Files\Google\Update\GoogleUpdate.exe - Service Google Update (gupdate)(gupdate) .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE

O64 - Services: CurCS - 04/04/2005 - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe - InstallDriver Table Manager(IDriverT) .(.Macrovision Corporation - IDriverT Module.) - LEGACY_IDRIVERT

O64 - Services: CurCS - 03/10/2011 - C:\Program Files\Java\jre6\bin\jqs.exe - Java Quick Starter(JavaQuickStarterService) .(.Sun Microsystems, Inc. - Java Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE

O64 - Services: CurCS - 26/06/2006 - C:\WINDOWS\system32\drivers\LVPr2Mon.sys - Logitech LVPr2Mon Driver (LVPr2Mon) .(...) - LEGACY_LVPR2MON

O64 - Services: CurCS - 26/06/2006 - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe - Logitech Process Monitor(LVPrcSrv) .(.Logitech Inc. - Logitech LVPrcSrv Module..) - LEGACY_LVPRCSRV

O64 - Services: CurCS - 26/06/2006 - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe - LVSrvLauncher(LVSrvLauncher) .(.Logitech Inc. - Service Launcher.) - LEGACY_LVSRVLAUNCHER

O64 - Services: CurCS - 31/08/2011 - C:\WINDOWS\system32\drivers\mbam.sys - MBAMProtector(MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR

O64 - Services: CurCS - 31/08/2011 - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe - MBAMService(MBAMService) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSERVICE

O64 - Services: CurCS - 08/01/2008 - C:\WINDOWS\system32\nvsvc32.exe - NVIDIA Display Driver Service(NVSvc) .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 169.3.) - LEGACY_NVSVC

O64 - Services: CurCS - 20/08/2004 - C:\WINDOWS\system32\PCANDIS5.sys - PCANDIS5 Protocol Driver(PCANDIS5) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PCANDIS5

O64 - Services: CurCS - 17/06/2010 - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV

O64 - Services: CurCS - 13/05/2010 - C:\WINDOWS\system32\vsdatant.sys - vsdatant(vsdatant) .(.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - LEGACY_VSDATANT

O64 - Services: CurCS - 18/02/2011 - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - TrueVector Internet Monitor(vsmon) .(.Check Point Software Technologies LTD - TrueVector Service.) - LEGACY_VSMON

~ Scan Services in 00mn 01s

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- "%1" %*

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe

~ Scan Keys in 00mn 00s

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Scan Keys in 00mn 00s

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - () - Bing

~ Scan Keys in 00mn 00s

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.D9DE89F0FAF18019BC9595F0F47BCA61] [sPRF][19/11/2010] (.Atribune.org - ATF Cleaner.exe.) -- C:\Documents and Settings\Domnique\Bureau\ATF-Cleaner.exe [50688]

[MD5.31B66CC197BE80F499538597FCFE3FBF] [sPRF][04/11/2011] (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Documents and Settings\Domnique\Bureau\mbam-setup-1.51.2.1300.exe [9852544]

[MD5.5B5D56738C261634C281C7BA1CA1A2DF] [sPRF][19/11/2010] (.OldTimer Tools - Pas de description.) -- C:\Documents and Settings\Domnique\Bureau\TFC.exe [446464]

~ Scan Files in 00mn 01s

---\\ Scan Additionnel (O88)

Database Version : 8818 - (04/11/2011)

Clés trouvées (Keys found) : 5

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 0

Fichiers trouvés (Files found) : 0

[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit

[HKLM\Software\Classes\Toolbar.CT2542115] =>Adware.Hotbar

[HKLM\Software\Classes\Toolbar.CT2613520] =>Adware.Hotbar

[HKCU\Software\Ask.com.tmp] =>Toolbar.Ask

[HKLM\Software\Trymedia Systems] =>Adware.Trymedia

~ Scan Additionnel in 00mn 04s

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SR - | Auto 05/11/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe

SR - | Auto 05/11/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

SS - | Demand 05/11/2011 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\System32\dmadmin.exe

SS - | Auto 05/11/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 05/11/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe

SS - | Demand 05/11/2011 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

SR - | Auto 05/11/2011 153376 | (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe

SR - | Auto 05/11/2011 99888 | (LVPrcSrv) . (.Logitech Inc..) - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

SS - | Auto 05/11/2011 91696 | (LVSrvLauncher) . (.Logitech Inc..) - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe

SR - | Auto 05/11/2011 366152 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

SR - | Auto 05/11/2011 155716 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe

SR - | Demand 05/11/2011 65795 | (Pml Driver HPZ12) . (.HP.) - C:\WINDOWS\system32\HPZipm12.exe

SR - | Auto 05/11/2011 2435592 | (vsmon) . (.Check Point Software Technologies LTD.) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

~ Scan Services in 00mn 04s

---\\ Recherche Master Boot Record Infection (MBR)(O80)

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover

Run by Domnique at 05/11/2011 13:03:46

device: opened successfully

user: MBR read successfully

Disk trace:

called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys

1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk1\DR1[0x8AA68AB8]

3 CLASSPNP[0xBA108FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\0000006b[0x8AA25900]

5 ACPI[0xB9F7E620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP3T0L0-13[0x8AA8F940]

kernel: MBR read successfully

user & kernel MBR OK

~ Scan MBR in 00mn 06s

---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)

Written by ad13, http://ad13.geekstog

Run by Domnique at 05/11/2011 13:03:48

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ Scan MBR in 00mn 08s

End of the scan (1255 lines in 00mn 45s)(0)

Apollo · le 5 novembre 2011

Désactive le teatimer de Spybot en passant par les options de Spybot: une fois dans le logiciel, il faut aller dans le menu "Mode" => coche "Mode avancé" => "Outils"(en bas de page)=> "Résident" => et tu décoches cette case: "Résident Teatimer" . Tu ne dois plus voir l'icône du Teatimer dans la barre de tâches!

Ne fais pas l'impasse sur cette étape, car ça peut faire échouer la procédure de désinfection !

---------------

ZHPFix :

Ferme toutes les applications ouvertes
Double-clique sur ZHPFix, raccourci installé par ZHPDiag sur le Bureau
Important:
Sous Vista et Windows 7 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur.
Clique sur H .
Copie-colle les lignes ci-dessous dans la fenêtre

[HKLM\Software\Trymedia Systems]    
[HKLM\Software\Classes\Toolbar.CT2542115]    
[HKLM\Software\Classes\Toolbar.CT2613520]    
M2 - MFEP: prefs.js [Domnique - es8jfovq.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.7.0.6 (.Conduit Ltd..)   
[HKCU\Software\Ask.com.tmp]    => Toolbar.Ask  
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine]     
[HKCU\Software\Ask.com.tmp]    
emptytemp
emptyflash
firewallraz

Clique sur l'icône représentant la lettre H (« coller les lignes Helper »). Le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le.

Clique sur le bouton GO pour lancer le nettoyage

Valide par Oui la désinstallation des programmes si demandé
Laisse l'outil travailler. Si un redémarrage est demandé, accepte et redémarre le PC
Le rapport ZHPFixReport.txt s'affiche. Copie-colle le contenu de ce rapport dans ta réponse.
Le rapport ZHPFixReport.txt est enregistré sous C:\ZHP\ZHPFixReport.txt

Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide.

-@++

Orvald · le 5 novembre 2011

Cijoint.fr - Service gratuit de dépôt de fichiers

Orvald · le 5 novembre 2011

Cijoint.fr - Service gratuit de dépôt de fichiers

Apollo · le 5 novembre 2011

C'est ce rapport que tu dois poster: Le rapport ZHPFixReport.txt est enregistré sous C:\ZHP\ZHPFixReport.txt

en clair cette fois stp.

---------------------

Ensuite:

ESET ONLINE SCANNER

Télécharge ESET Online Scanner sur ton Bureau en cliquant sur ce logo:

http://download.eset.com/special/eos/esetsmartinstaller_enu.exe

Double-clique sur le fichier esetsmartinstaller_enu.exe présent sur ton Bureau pour installer le scanner. Attention: si tu disposes de Windows VISTA, clique droit sur esetsmartinstaller_enu.exe puis sélectionne "exécuter en tant qu'administrateur"
Accepte la licence en cochant la case "YES, i accept the terms of use", puis clique sur le bouton "Start"
Une fois le scanner installé, configure-le en cochant la case "Remove found threats" et en cochant la case "Scan archives" de même que la case "scan for the potentially unsafe applications."
Lance la recherche antivirale en cliquant sur le bouton "Start": l'outil se met à jour puis lance le scan: une barre de progression indique où en est la recherche
Quand le scan est terminé, si des virus ont été détectés, clique sur la ligne "List of found threats":
Une nouvelle fenêtre aparaît: clique sur "Export to text file" et enregistre le rapport sur ton Bureau en le nommant logESET.txt
Clique sur le bouton "Back" pour retourner à l'interface précédente, puis coche la case "Uninstall application on close"

NB: Tu peux également désinstaller eset online par ajout/suppression de programmes (xp), ou programmes et fonctionnalités sous Vista/7 ou alors via le dossier eset qui est sur le C:\ qui contient un fichier unins ou uninstall.exe à exécuter.
Clique enfin sur le bouton "Finish" puis ferme la fenêtre du scanner
Ouvre le fichier logESET sur ton Bureau et copie-colle son contenu dans ta prochaine réponse

Nota : ce scan peut être très long et prendre plusieurs heures.

++

Orvald · le 5 novembre 2011

Rapport de ZHPFix 1.12.3367 par Nicolas Coolman, Update du 29/10/2011

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-05-11-2011-14-32-37.txt

Run by Domnique at 05/11/2011 14:32:37

Windows XP Home Edition Service Pack 3 (Build 2600)

Web site : ZHPFix Fix de rapport

========== Clé(s) du Registre ==========

SUPPRIME Key: HKLM\Software\Trymedia Systems

SUPPRIME Key: HKLM\Software\Classes\Toolbar.CT2542115

SUPPRIME Key: HKLM\Software\Classes\Toolbar.CT2613520

SUPPRIME Key: HKCU\Software\Ask.com.tmp

SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine

ABSENT Key: HKCU\Software\Ask.com.tmp

========== Valeur(s) du Registre ==========

Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========

SUPPRIME Temporaires Windows: : 70

SUPPRIME Flash Cookies: 24

========== Fichier(s) ==========

SUPPRIME Temporaires Windows: : 2

SUPPRIME Flash Cookies: 11

========== Récapitulatif ==========

6 : Clé(s) du Registre

1 : Valeur(s) du Registre

2 : Dossier(s)

2 : Fichier(s)

End of clean in 00mn 03s

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 05/11/2011 12:48:07 [574]

C:\ZHP\ZHPFix[R2].txt - 05/11/2011 14:32:37 [1220]

Orvald · le 5 novembre 2011

C:\Documents and Settings\Domnique\Mes documents\Téléchargements\SoftonicDownloader_pour_windows-live-messenger(2).exe a variant of Win32/SoftonicDownloader.A application cleaned by deleting - quarantined

C:\Documents and Settings\Domnique\Mes documents\Téléchargements\SoftonicDownloader_pour_windows-live-messenger.exe a variant of Win32/SoftonicDownloader.A application cleaned by deleting - quarantined

C:\Documents and Settings\Domnique\Mes documents\Téléchargements\SweetImSetup.exe a variant of Win32/SweetIM.B application cleaned by deleting - quarantined

Apollo · le 5 novembre 2011

C'est ok; ton pc se comporte-t-il mieux?

Fais ces vérifications de sécurité stp:

Apollo Et Compagnie :: A vérifier de temps en temps, important!

Le PSI n'est pas obligatoire mais il peut se révéler utile pour connaître les failles dans diverses applications.

---------------------------

Télécharge DelFix sur ton bureau. http://general-changelog-team.fr/outil s /delfix

Lance-le et appuie sur le bouton [Recherche]

Copie tout le contenu du texte qui s'ouvre et colle-le dans ta réponse.

Note : Le rapport est sauvegardé sous C:\DelFixSearch.txt

------------------------

Relance Delfix et appuie sur le bouton [suppression]

Copie tout le contenu du fichier texte qui s'ouvre et colle-le dans ta réponse.

Note : Le rapport est sauvegardé sous C:\DelFixSuppr.txt

Tu peux ensuite relancer DelFix et appuyer sur [Désinstaller] afin de supprimer toute trace de son utilisation.

+++

Orvald · le 5 novembre 2011

çà continue toujours le problème est toujours là

Connexion

Pas encore inscrit ?

Poste de travail en recherche avec torche PC sur XP familiale

Messages recommandés

Apollo

Orvald

Apollo

Orvald

Orvald

Apollo

Orvald

Orvald

Apollo

Orvald

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer