est ce propre ? Résolu/Fermé

Question

Bonjour, Après moult nettoyage, pourriez vous m'indiquez si mon pc est propre ou s'il reste des petites saloperies dessus ? Merci d'avance Win7 intégrale x64 boitier Antec Nine Hundred Two + Akasa Freedom Power 750w Core I5 760 2.8 (o/c 3.5) + Corsair H50 Corsair Dominator DDR3 pc 10600 2*2Go Sapphire HD 6870 Western Digital caviar 1To + 300Go Carte PCI Wifi Trendnet Souris RAT3 + clavier standard Acer Ecran Thomson Intuiva 27"

kyoshiro56380 · Answer

Je vois pas en quoi on peut t'aider si tu nous donne ta config ????

paillefoin · Answer

Voici les rapports de HIJACKTHIS et ZXDIAG 

RAPPORT HIJACKTHIS 

Logfile of Trend Micro HijackThis v2.0.2 
Scan saved at 09:31:03, on 14/11/2010 
Platform: Unknown Windows (WinNT 6.01.3504) 
MSIE: Unable to get Internet Explorer version! 
Boot mode: Normal 

Running processes: 
C:\Program Files\ASUS\Six Engine\SixEngine.exe 
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe 
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe 
C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanCU.exe 
C:\Program Files\Alwil Software\Avast5\AvastUI.exe 
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
C:\Program Files (x86)\Java\jre6\bin\javaw.exe 
C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =  
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL 
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll 
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r 
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe 
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin 
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices 
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui 
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') 
O4 - Global Startup: Wireless Configuration Utility.lnk = C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanCU.exe 
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll 
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll 
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll 
O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll 
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL 
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) 
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) 
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) 
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe 
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe 
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) 
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) 
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe 
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe 
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe 
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files (x86)\ma-config.com\maconfservice.exe 
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) 
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe 
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) 
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) 
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe 
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) 
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) 
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) 
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) 
O23 - Service: WlanWpsSvc - Unknown owner - C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanWpsSvc.exe 
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) 
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

paillefoin · Answer

et ZXDIAG 

Rapport de ZHPDiag v1.27.122 par Nicolas Coolman, Update du 12/11/2010 
Run by Arma_Dams at 13/11/2010 10:47:55 
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
Contact : nicolascoolman@yahoo.fr 

---\ Web Browser 
MSIE: Internet Explorer v8.0.7600.16385 
MFIE: Mozilla Firefox (3.6.12) 

---\ System Information 
Windows 7 Ultimate Edition, 64-bit  (Build 7600) 
Processor: Intel64 Family 6 Model 30 Stepping 5, GenuineIntel 
Operating System: 64 Bits 
Boot mode: Normal (Normal boot) 
Total RAM: 4094 MB (70% free) 
System drive C: has 211 GB (72%) free of 293 GB 

---\ Logged in mode 
Computer Name: ARMA_DAMS-PC 
User Name: Arma_Dams 
All Users Names: HomeGroupUser$, Guest, ASPNET, Arma_Dams, Administrator,  
Unselected Option:  O1,O45,O61,O62,O65,O82 
Logged in as Administrator 

---\ DOS/Devices 
C:\ Hard drive, Flash drive, Thumb drive (Free 211 Go of 293 Go) 
D:\ Hard drive, Flash drive, Thumb drive (Free 335 Go of 639 Go) 
E:\ CD-ROM drive (Not Inserted) 
F:\ Hard drive, Flash drive, Thumb drive (Free 50 Go of 98 Go) 
G:\ CD-ROM drive (Not Inserted) 
H:\ Hard drive, Flash drive, Thumb drive (Free 129 Go of 195 Go) 
I:\ Hard drive, Flash drive, Thumb drive (Free 174 Go of 466 Go) 


---\ Security Center & Tools Informations 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified 


---\ Recherche particulière de fichiers génériques 
[MD5.A185677FE318CA65DBDFAEA938B23E94] - (.Microsoft Corporation - Explorateur Windows.) (.08/06/2010 15:54:29.) -- C:\Windows\Explorer.exe [2873344] 
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256] 


---\ Processus lancés 
[MD5.41666A20C22EC32A1EF15BD6C5AD5922] - (.ASUSTeK Computer Inc. - Pas de description.) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe   [6060032] 
[MD5.5AF1E9600E3FF841E522703A4993ED0C] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe   [186904] 
[MD5.F6987FF6C6D683F79FDCE707B071A997] - (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe   [955392] 
[MD5.F6933596E3C8893A04ECD5453DC8C855] - (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe   [136544] 
[MD5.6C1B31F5C16E03153F0037AC6C451FFD] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe   [2838912] 
[MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [248552] 
[MD5.0684E19BE8C11E330840EEF053A52D82] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [619008] 


---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2) 
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pdeployJava1.dll 
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pnul32.dll 
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.0".) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
ppdf32.dll 
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll 
P2 - FPN: [HKLM] [@canon.com/EPPEX] - (.CANON INC. - CANON iMAGE GATEWAY Album Plugin Utility Module.) -- C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.dll 
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files (x86)\Google\Picasa3
pPicasa3.dll 
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files (x86)\Java\jre6\bin
ew_plugin
pjp2.dll 
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files (x86)\ma-config.com
phardwaredetection.dll 
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.dll 
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.dll 
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files (x86)\Google\Update\1.2.183.39
pGoogleOneClick8.dll 
M0 - MFSP: prefs.js [Arma_Dams - urigzd8m.default] www.google.fr 
M2 - MFEP: prefs.js [Arma_Dams - urigzd8m.default\battlefieldheroespatcher@ea.com] [] Battlefield Heroes Updater v5.0.31.0 (.EA Digital Illusions CE AB.) 
M2 - MFEP: prefs.js [Arma_Dams - urigzd8m.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.2.2 (.Wladimir Palant.) 
M2 - MFEP: prefs.js [Arma_Dams - urigzd8m.default\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}] [] Adobe DLM (powered by getPlus(R)) v1.6.2.91 (.NOS Microsystems Ltd..) 


---\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3) 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/ 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\SysWOW64\ieframe.dll 


---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) 
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, 
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe 
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe 


---\ Browser Helper Objects de navigateur (O2) 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL 
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll 


---\ Applications démarrées par registre & par dossier (O4) 
O4 - HKLM\..\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe  
O4 - HKLM\..\Run: [JMB36X IDE Setup] . (.Pas de propriétaire - Pas de description.) -- C:\Windows\RaidTool\xInsIDE.exe  
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe  
O4 - HKLM\..\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe  
O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe  
O4 - HKLM\..\Run: [IJNetworkScanUtility] . (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe  
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe  
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe  
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe  
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe  
O4 - HKLM\..\Run: [ATICustomerCare] . (.Advanced Micro Devices, Inc. - ATI Customer Care.) -- C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe  
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe  
O4 - HKCU\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe  
O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe  
O4 - HKLM\..\Wow6432Node\Run: [JMB36X IDE Setup] . (.Pas de propriétaire - Pas de description.) -- C:\Windows\RaidTool\xInsIDE.exe  
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe  
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe  
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe  
O4 - HKLM\..\Wow6432Node\Run: [IJNetworkScanUtility] . (.CANON INC. - Canon IJ Network Scan Utility.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe  
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe  
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  
O4 - HKLM\..\Wow6432Node\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe  
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe  
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe  
O4 - HKLM\..\Wow6432Node\Run: [ATICustomerCare] . (.Advanced Micro Devices, Inc. - ATI Customer Care.) -- C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe  
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe  
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe  
O4 - HKUS\S-1-5-21-741099833-2336198860-3695462740-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe  
O4 - HKUS\S-1-5-21-741099833-2336198860-3695462740-1000\..\Run: [SuperCopier2.exe] . (.SFX TEAM - SuperCopier 2 (explorer file copy replaceme.) -- C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe  
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)  
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)  
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Configuration Utility.lnk . (.Pas de propriétaire.)  -- C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanCU.exe 


---\ Autres liens utilisateurs (O4) 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.)  -- C:\Program Files (x86)\Mozilla Thunderbird	hunderbird.exe 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.)  -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe 
O4 - Global Startup: C:\Users\Arma_Dams\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline 


---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) 
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no 


---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) 
O8 - Extra context menu item: &Envoyer à OneNote . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll 
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\Windows\system32\GPhotos.scr 
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~2\MICROS~1\Office14\EXCEL.exe 


---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) 
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll 
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~2\MICROS~1\Office14\ONBTTN~1.dll 


---\ Winsock hijacker (Layered Service Provider) (O10) 
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll 
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll 
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll 
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll 
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll 
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll 


---\ Modification Domaine/Adresses DNS (O17) 
O17 - HKLM\System\CCS\Services\Tcpip\..\{279F1A60-4F2C-4CA2-AE03-E3E4ABC3D195}: DhcpNameServer = 212.27.40.240 212.27.40.241 
O17 - HKLM\System\CS1\Services\Tcpip\..\{279F1A60-4F2C-4CA2-AE03-E3E4ABC3D195}: DhcpNameServer = 212.27.40.240 212.27.40.241 
O17 - HKLM\System\CS2\Services\Tcpip\..\{279F1A60-4F2C-4CA2-AE03-E3E4ABC3D195}: DhcpNameServer = 212.27.40.240 212.27.40.241 
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 


---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. 


---\ Liste des services NT non Microsoft et non désactivés (O23) 
O23 - Service:  (AMD External Events Utility) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\atiesrxx.exe (.not file.) 
O23 - Service: ASUS System Control Service (AsSysCtrlService) . (.ASUSTeK Computer Inc. - AsSysCtr Application.) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe 
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe 
O23 - Service: avast! Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe 
O23 - Service: C:\Windows\system32\efssvc.dll (EFS) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\lsass.exe (.not file.) 
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe 
O23 - Service: KMService (KMService) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\srvany.exe 
O23 - Service: NMSAccess (NMSAccess) . (.Pas de propriétaire - Pas de description.) - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 
O23 - Service: PnkBstrA (PnkBstrA) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\PnkBstrA.exe 
O23 - Service: C:\Windows\system32\samsrv.dll (SamSs) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\lsass.exe (.not file.) 
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 
O23 - Service: C:\Windows\system32\spoolsv.exe (Spooler) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\spoolsv.exe (.not file.) 
O23 - Service: WlanWpsSvc (WlanWpsSvc) . (.Pas de propriétaire - WlanSvc Application.) - C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanWpsSvc.exe 


---\ Enumération Active Desktop & MHTML Editor (O24) 
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) -  (.not file.) 


---\ Tâches planifiées en automatique (O39) 
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 
[MD5.5447AF432CDA61159ADDE218C468FFD9] [APT] [AdobeAAMUpdater-1.0-Arma_Dams-PC-Arma_Dams] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe 
[MD5.00000000000000000000000000000000] [APT] [CreateChoiceProcessTask] (.Pas de propriétaire.) -- C:\Windows\System32\browserchoice.exe (.not file.) 
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 
[MD5.41666A20C22EC32A1EF15BD6C5AD5922] [APT] [ASUS SIX Engine] (.ASUSTeK Computer Inc..) -- C:\Program Files\ASUS\Six Engine\SixEngine.exe 


---\ Composants installés (ActiveSetup Installed Components) (O40) 
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- "%ProgramFiles(x86)%\Windows Mail\WinMail.exe 
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r45.) -- C:\Windows\SysWow64\Macromed\Flash\Flash10e.ocx 


---\ Pilotes lancés au démarrage (O41) 
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\afd.sys 
O41 - Driver: AsIO (AsIO) . (.Pas de propriétaire - Pas de description.) - C:\Windows\sysWow64\drivers\AsIO.sys 
O41 - Driver: (blbdrive) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\blbdrive.sys 
O41 - Driver: CD-ROM Driver (cdrom) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\cdrom.sys 
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\csc.sys 
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\Drivers\dfsc.sys 
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\discache.sys 
O41 - Driver: Microsoft System Management BIOS Driver (mssmbios) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\mssmbios.sys 
O41 - Driver: NetBIOS Interface (NetBIOS) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS
etbios.sys 
O41 - Driver: C:\Windows\system32\drivers
etbt.sys (NetBT) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS
etbt.sys 
O41 - Driver: C:\Windows\system32\drivers
siproxy.sys (nsiproxy) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers
siproxy.sys 
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\pacer.sys 
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERSdbss.sys 
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\RDPCDD.sys 
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\driversdpencdd.sys 
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\driversdprefmp.sys 
O41 - Driver: Serial port driver (Serial) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\serial.sys 
O41 - Driver: Terminal Device Driver (TermDD) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS	ermdd.sys 
O41 - Driver: (VgaSave) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\drivers\vga.sys 
O41 - Driver: WFP Lightweight Filter (WfpLwf) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\DRIVERS\wfplwf.sys 


---\ Logiciels installés (O42) 
O42 - Logiciel: ATI Catalyst Registration - (.ATI Technologies Inc..) [HKLM] -- {11083C7A-D0D6-4DA4-8C3A-74B8389EC07B} 
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR 
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} 
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM] -- {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7} 
O42 - Logiciel: Adobe Creative Suite 5 Master Collection - (.Adobe Systems Incorporated.) [HKLM] -- {1BBD8D70-721A-41AD-AC8F-7308A0C8FA92} 
O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7} 
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX 
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin 
O42 - Logiciel: Adobe Reader 9.4.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001} 
O42 - Logiciel: Assassin's Creed II - (.Ubisoft.) [HKLM] -- {8570BEE8-0CA3-4977-9AB1-80ED93F0513C} 
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 
O42 - Logiciel: Battlefield Heroes - (.EA Digital illusions.) [HKLM] -- {8DC910CD-8EE3-4ffc-A4EB-9B02701059C4} 
O42 - Logiciel: Battlefield: Bad Company 2 - (.DICE.) [HKLM] -- Steam App 24960 
O42 - Logiciel: Borderlands - (.Pas de propriétaire.) [HKLM] -- {1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7} 
O42 - Logiciel: Burnout(TM) Paradise The Ultimate Box - (.Electronic Arts.) [HKLM] -- {9A996B6A-846E-4A89-B9C4-17546B7BE49F} 
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1 
O42 - Logiciel: Canon Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX 
O42 - Logiciel: Canon IJ Network Scan Utility - (.Pas de propriétaire.) [HKLM] -- Canon_IJ_Network_Scan_UTILITY 
O42 - Logiciel: Canon IJ Network Tool - (.Pas de propriétaire.) [HKLM] -- Canon_IJ_Network_UTILITY 
O42 - Logiciel: Canon MP Navigator EX 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 3.0 
O42 - Logiciel: Canon My Printer - (.Pas de propriétaire.) [HKLM] -- CanonMyPrinter 
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {DDA34038-89BD-4804-B0B8-DC48D5DFB463} 
O42 - Logiciel: Crysis(R) - (.Electronic Arts.) [HKLM] -- {000E79B7-E725-4F01-870A-C12942B7F8E4} 
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1 
O42 - Logiciel: Day of Defeat: Source - (.Valve.) [HKLM] -- Steam App 300 
O42 - Logiciel: Dead Rising 2 - (.Capcom.) [HKLM] -- GFWL_{4343080E-91B7-4388-AB4D-FB1000008200} 
O42 - Logiciel: Dead Rising 2 - (.Capcom.) [HKLM] -- {4343080E-91B7-4388-AB4D-FB1000008200} 
O42 - Logiciel: Definition update for Microsoft Office 2010 (KB982726) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{820F2EBF-0AEC-46F1-9DCD-66CAAD8344D3} 
O42 - Logiciel: Dropbox - (.Pas de propriétaire.) [HKCU] -- Dropbox 
O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM] -- EADM 
O42 - Logiciel: EPU-6 Engine - (.Pas de propriétaire.) [HKLM] -- {56B83336-FBC1-4C46-8613-90A9E3B440D6} 
O42 - Logiciel: EVEREST Ultimate Edition v5.50 - (.Lavalys, Inc..) [HKLM] -- EVEREST Ultimate Edition_is1 
O42 - Logiciel: Fallout 3 - (.Bethesda Softworks.) [HKLM] -- {974C4B12-4D02-4879-85E0-61C95CC63E9E} 
O42 - Logiciel: Fallout New Vegas - (.Pas de propriétaire.) [HKLM] -- Fallout New Vegas_is1 
O42 - Logiciel: Full Tilt Poker.Fr - (.Pas de propriétaire.) [HKLM] -- {34785AD0-6276-11DF-A08A-0800200C9A66} 
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome 
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} 
O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {B80BE2E3-EA77-53D4-7A56-C53D452E6D50} 
O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader 
O42 - Logiciel: JMicron JMB36X Driver - (.JMICRON Technology Corp..) [HKLM] -- {3A1B5D40-41E9-43FA-8C7B-A8667F5586EF} 
O42 - Logiciel: James Cameron's AVATAR(tm): THE GAME - (.Ubisoft.) [HKLM] -- {7E19B002-4CA3-4C9F-BA92-91D101B97219} 
O42 - Logiciel: Java(TM) 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216021FF} 
O42 - Logiciel: Jibbin version March 2010 - (.Thomas Champagne.) [HKLM] -- {3252AF1C-86C7-404B-90EE-96C41C60F24F}_is1 
O42 - Logiciel: K-Lite Codec Pack 5.9.0 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1 
O42 - Logiciel: Kane & Lynch 2: Dog Days Demo - (.IO Interactive.) [HKLM] -- Steam App 28020 
O42 - Logiciel: Live 8.2 - (.Pas de propriétaire.) [HKLM] -- Live 8.2 
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {96EB95A2-5245-4EA2-B6EA-B8BA2FBF64C4} 
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 
O42 - Logiciel: Metro 2033 - (.THQ.) [HKLM] -- {280D9B4C-7E9C-4F5A-A5CC-5D47044C2E28}_is1 
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} 
O42 - Logiciel: Microsoft Games for Windows - LIVE - (.Microsoft Corporation.) [HKLM] -- {F97E3841-CA9D-4964-9D64-26066241D26F} 
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {8FB1B528-E260-451E-9B55-E9152F94B80B} 
O42 - Logiciel: Microsoft Office Access MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0015-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Excel MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0016-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Groove MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-00BA-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0044-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-00A1-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001A-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0018-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Professionnel Plus 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PROPLUS 
O42 - Logiciel: Microsoft Office Proof (Arabic) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0401-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Dutch) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0413-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (German) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0407-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proofing (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-002C-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0019-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Shared MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-006E-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Word MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001B-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} 
O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25} 
O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} 
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} 
O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} 
O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} 
O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} 
O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} 
O42 - Logiciel: Mozilla Firefox (3.6.12) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.12) 
O42 - Logiciel: Mozilla Thunderbird (3.1.6) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.6) 
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {54194F60-988C-4D03-B922-C2B00EFDA39A} 
O42 - Logiciel: Network Stumbler 0.4.0 (remove only) - (.Pas de propriétaire.) [HKLM] -- Network Stumbler 
O42 - Logiciel: OCCT Perestroika 3.1.0 - (.Tetedeiench.) [HKLM] -- OCCT_is1 
O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL 
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392} 
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3 
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM] -- PunkBusterSvc 
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} 
O42 - Logiciel: Section 8 - (.Pas de propriétaire.) [HKLM] -- Section 8_is1 
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2289161) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F134C2C6-30B3-4169-A325-58482B4CE6FC} 
O42 - Logiciel: Security Update for Microsoft Word 2010 (KB2345000) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A6D422EE-1196-45EE-B9AE-6B5B64975E8B} 
O42 - Logiciel: Sins of a Solar Empire - (.Kalypso.) [HKLM] -- {C1DAC986-A6EE-407D-A5CE-0CE910807C6D} 
O42 - Logiciel: Sins of a Solar Empire - (.Stardock Entertainment.) [HKLM] -- Sins of a Solar Empire 
O42 - Logiciel: Sniper Ghost Warrior - (.Pas de propriétaire.) [HKLM] -- Sniper Ghost Warrior_is1 
O42 - Logiciel: SpeedFan (remove only) - (.Pas de propriétaire.) [HKLM] -- SpeedFan 
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 
O42 - Logiciel: StarCraft II - (.Blizzard Entertainment.) [HKLM] -- StarCraft II 
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} 
O42 - Logiciel: SuperCopier2 - (.Pas de propriétaire.) [HKLM] -- SuperCopier2 
O42 - Logiciel: System Requirements Lab CYRI - (.Husdawg, LLC.) [HKLM] -- {AB49B509-8FCA-45E6-9FB9-9E4AEEB8F148} 
O42 - Logiciel: TRENDnet TEW-641PC/TEW-643PI Wireless Cardbus/PCI Adapter - (.TRENDnet.) [HKLM] -- {A9A1B8A2-D2EC-4A05-951D-7E337B07B5C3} 
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM] -- TeamSpeak 3 Client 
O42 - Logiciel: Tom Clancy's EndWar - (.Ubisoft.) [HKLM] -- {7C3D8108-8D99-427F-A1C2-D8E0D25A469C} 
O42 - Logiciel: TrackMania Nations Forever - (.Nadeo.) [HKLM] -- Steam App 11020 
O42 - Logiciel: Trials 2: Second Edition - (.RedLynx.) [HKLM] -- Steam App 16600 
O42 - Logiciel: Turbo Key - (.Pas de propriétaire.) [HKLM] -- {B83F7FA5-3191-4E39-A1F2-8A9038BD0B04} 
O42 - Logiciel: TurboV - (.Pas de propriétaire.) [HKLM] -- {A31951C5-DCD8-4DFE-A525-CFC701F54792} 
O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM] -- {888F1505-C2B3-4FDE-835D-36353EBD4754} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2202188) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{86B7A074-265D-420C-9E1E-7A920EF0ECA7} 
O42 - Logiciel: Update for Microsoft OneNote 2010 (KB2288640) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{521AB5E8-5FFF-45C8-B750-6967F8C0A2B9} 
O42 - Logiciel: Update for Microsoft Outlook Social Connector (KB2289116) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{75F91382-920C-4AE1-B9E6-FFFCEDA797E8} 
O42 - Logiciel: VIA Gestionnaire de périphériques de plate-forme - (.VIA Technologies, Inc..) [HKLM] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169} 
O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM] -- VLC media player 
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp 
O42 - Logiciel: avast! Internet Security - (.Alwil Software.) [HKLM] -- avast5 
O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} 
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent 

---\ HKCU & HKLM Software Keys 
[HKCU\Software\7-Zip] 
[HKCU\Software\ALWIL Software] 
[HKCU\Software\AMD] 
[HKCU\Software\ASUS] 
[HKCU\Software\ATI] 
[HKCU\Software\Ad-Remover] 
[HKCU\Software\Adobe] 
[HKCU\Software\AppDataLow\Software\Yahoo] 
[HKCU\Software\AppDataLow\Software] 
[HKCU\Software\AppDataLow] 
[HKCU\Software\Auslogics] 
[HKCU\Software\BitTorrent] 
[HKCU\Software\Blizzard Entertainment] 
[HKCU\Software\Bogosoft] 
[HKCU\Software\Canneverbe Limited] 
[HKCU\Software\Canon] 
[HKCU\Software\Classes] 
[HKCU\Software\Clients] 
[HKCU\Software\CoreVorbis] 
[HKCU\Software\Criterion Games] 
[HKCU\Software\DT Soft] 
[HKCU\Software\DVD Shrink] 
[HKCU\Software\DivXNetworks] 
[HKCU\Software\EA Games] 
[HKCU\Software\Full Tilt Poker.fr] 
[HKCU\Software\GNU] 
[HKCU\Software\Gabest] 
[HKCU\Software\GameSpy] 
[HKCU\Software\Google] 
[HKCU\Software\Haali] 
[HKCU\Software\IGA] 
[HKCU\Software\IO Interactive] 
[HKCU\Software\JavaSoft] 
[HKCU\Software\Lavalys] 
[HKCU\Software\Leadertech] 
[HKCU\Software\Logitech] 
[HKCU\Software\MONOGRAM] 
[HKCU\Software\Macromedia] 
[HKCU\Software\Malwarebytes' Anti-Malware] 
[HKCU\Software\MediaInfo] 
[HKCU\Software\MozillaPlugins] 
[HKCU\Software\Netscape] 
[HKCU\Software\ODBC] 
[HKCU\Software\Piriform] 
[HKCU\Software\Policies] 
[HKCU\Software\Razer] 
[HKCU\Software\RedLynx] 
[HKCU\Software\SFX TEAM] 
[HKCU\Software\Safer Networking Limited] 
[HKCU\Software\SecuROM] 
[HKCU\Software\Softonic] 
[HKCU\Software\SpeedFan] 
[HKCU\Software\System Requirements Lab] 
[HKCU\Software\TeamSpeak 3 Client] 
[HKCU\Software\Trolltech] 
[HKCU\Software\Ubisoft] 
[HKCU\Software\Valve] 
[HKCU\Software\Winamp] 
[HKCU\Software\Wintertree] 
[HKCU\Software\Wow6432Node] 
[HKCU\Software\Xfire] 
[HKCU\Software\YahooPartnerToolbar] 
[HKCU\Software\Yahoo] 
[HKCU\Software\cybelsoft] 
[HKCU\Software\madFlac] 
[HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec] 
[HKLM\Software\AGEIA Technologies] 
[HKLM\Software\ALWIL Software] 
[HKLM\Software\AMD] 
[HKLM\Software\ASUS] 
[HKLM\Software\ATI Technologies] 
[HKLM\Software\ATI] 
[HKLM\Software\Adobe] 
[HKLM\Software\Bethesda Softworks] 
[HKLM\Software\Blizzard Entertainment] 
[HKLM\Software\Bogosoft] 
[HKLM\Software\Borderlands] 
[HKLM\Software\CDDB] 
[HKLM\Software\CLASSES] 
[HKLM\Software\Canon] 
[HKLM\Software\Capcom] 
[HKLM\Software\ChilipokerFR] 
[HKLM\Software\Clients] 
[HKLM\Software\Codec Tweak Tool] 
[HKLM\Software\Crytek] 
[HKLM\Software\DICE] 
[HKLM\Software\DT Soft] 
[HKLM\Software\DivXNetworks] 
[HKLM\Software\EA Games] 
[HKLM\Software\Electronic Arts] 
[HKLM\Software\Even Balance] 
[HKLM\Software\Full Tilt Poker] 
[HKLM\Software\GNU] 
[HKLM\Software\Gearbox Software] 
[HKLM\Software\Google] 
[HKLM\Software\HaaliMkx] 
[HKLM\Software\InstallShield] 
[HKLM\Software\Intel] 
[HKLM\Software\JMICRON Technology Corp.] 
[HKLM\Software\JavaSoft] 
[HKLM\Software\JreMetrics] 
[HKLM\Software\KLCodecPack] 
[HKLM\Software\Macromedia] 
[HKLM\Software\Malwarebytes' Anti-Malware] 
[HKLM\Software\MimarSinan] 
[HKLM\Software\MozillaPlugins] 
[HKLM\Software\Mozilla] 
[HKLM\Software\NOS] 
[HKLM\Software\Nullsoft] 
[HKLM\Software\ODBC] 
[HKLM\Software\PTECH] 
[HKLM\Software\Policies] 
[HKLM\Software\Propellerhead Software] 
[HKLM\Software\Realtek] 
[HKLM\Software\RedLynx] 
[HKLM\Software\RegisteredApplications] 
[HKLM\Software\RtWLan] 
[HKLM\Software\Safer Networking Limited] 
[HKLM\Software\Stardock] 
[HKLM\Software\TRENDnet] 
[HKLM\Software\The Silicon Realms Toolworks] 
[HKLM\Software\TrendMicro] 
[HKLM\Software\Trymedia Systems] 
[HKLM\Software\Ubisoft] 
[HKLM\Software\VIA Technologies, Inc] 
[HKLM\Software\Valve] 
[HKLM\Software\VideoLAN] 
[HKLM\Software\Windows] 
[HKLM\Software\Yahoo] 
[HKLM\Software\cybelsoft] 
[HKLM\Software\mozilla.org] 


---\ Contenu des dossiers ProgramFiles/ProgramData (O43) 
O43 - CFD:Common File Directory ----D- C:\Program Files\7-Zip 
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe 
O43 - CFD:Common File Directory ----D- C:\Program Files\Alwil Software 
O43 - CFD:Common File Directory ----D- C:\Program Files\ASUS 
O43 - CFD:Common File Directory ----D- C:\Program Files\ATI 
O43 - CFD:Common File Directory ----D- C:\Program Files\ATI Technologies 
O43 - CFD:Common File Directory ----D- C:\Program Files\Avast5 
O43 - CFD:Common File Directory ----D- C:\Program Files\Canon 
O43 - CFD:Common File Directory --H-D- C:\Program Files\CanonBJ 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files 
O43 - CFD:Common File Directory ----D- C:\Program Files\CPUID 
O43 - CFD:Common File Directory ----D- C:\Program Files\DIFX 
O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Maker 
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer 
O43 - CFD:Common File Directory ----D- C:\Program Files\Logitech 
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office 
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Xbox 360 Accessories 
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild 
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies 
O43 - CFD:Common File Directory ----D- C:\Program Files\TRENDnet 
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Viewer 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices 
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\ATI Technologies 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LogiShrd 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Microsoft Shared 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Ableton 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Adobe 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Alwil Software 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Application Data 
O43 - CFD:Common File Directory ----D- C:\ProgramData\ASUS OC Profiles 
O43 - CFD:Common File Directory ----D- C:\ProgramData\ATI 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Blizzard Entertainment 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Canneverbe Limited 
O43 - CFD:Common File Directory --H-D- C:\ProgramData\CanonBJ 
O43 - CFD:Common File Directory --H-D- C:\ProgramData\CanonEPP 
O43 - CFD:Common File Directory --H-D- C:\ProgramData\CanonIJEPPEX2 
O43 - CFD:Common File Directory --H-D- C:\ProgramData\CanonIJScan 
O43 - CFD:Common File Directory ----D- C:\ProgramData\DAEMON Tools Lite 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Desktop 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Documents 
O43 - CFD:Common File Directory ----D- C:\ProgramData\DVD Shrink 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Electronic Arts 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favorites 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Logishrd 
O43 - CFD:Common File Directory ----D- C:\ProgramData\ma-config.com 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Malwarebytes 
O43 - CFD:Common File Directory ----D- C:\ProgramData\McAfee 
O43 - CFD:Common File Directory -S--D- C:\ProgramData\Microsoft 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Microsoft Help 
O43 - CFD:Common File Directory ----D- C:\ProgramData\NOS 
O43 - CFD:Common File Directory ----D- C:\ProgramDataegid.1986-12.com.adobe 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Solidshield 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Spybot - Search & Destroy 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Start Menu 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Sun 
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Templates 
O43 - CFD:Common File Directory ----D- C:\ProgramData\TrackMania 
O43 - CFD:Common File Directory ----D- C:\ProgramData\Ubisoft 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\ATI Technologies 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LogiShrd 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Microsoft Shared 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines 
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Ableton 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Ad-Remover 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Adobe 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ASUS 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ATI 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ATI Technologies 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Auslogics 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Canon 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CCleaner 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\CDBurnerXP 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\DAEMON Tools Lite 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Downloaded Installations 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\DVD Shrink 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\EA Games 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Electronic Arts 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Full Tilt Poker.Fr 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Google 
O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\InstallShield Installation Information 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Intel 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Internet Explorer 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Java 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\JDownloader 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Jibbin 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\K-Lite Codec Pack 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Lavalys 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ma-config.com 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Analysis Services 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Games for Windows - LIVE 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Office 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Sync Framework 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Synchronization Services 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft Visual Studio 8 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Microsoft.NET 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Mozilla Firefox 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Mozilla Thunderbird 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\MSBuild 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Network Stumbler 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\NOS 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\NVIDIA Corporation 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\OCCT 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\OpenAL 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Realtek 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Reference Assemblies 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\SpeedFan 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Spybot - Search & Destroy 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\SuperCopier2 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\SystemRequirementsLab 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\TeamSpeak 3 Client 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Trend Micro 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Ubisoft 
O43 - CFD:Common File Directory --H-D- C:\Program Files (x86)\Uninstall Information 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\uTorrent 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\VIA 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\VideoLAN 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Winamp 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Defender 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Mail 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Media Player 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows NT 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Photo Viewer 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Portable Devices 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Windows Sidebar 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Yahoo! 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\ZHPDiag 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Adobe 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Adobe AIR 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\ATI Technologies 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Blizzard Entertainment 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\DESIGNER 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\InstallShield 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Java 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\LogiShrd 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\microsoft shared 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\PX Storage Engine 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Services 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\SpeechEngines 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Steam 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\System 
O43 - CFD:Common File Directory ----D- C:\Program Files (x86)\Common Files\Wise Installation Wizard 


---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) 
O44 - LFC:[MD5.EC546262E1E1E74A0833E4DFF0FEC494] - 13/11/2010 - 10:47:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Ad-Report-SCAN[1].txt   [1837] 
O44 - LFC:[MD5.2E01000000000000000000002CEF1800] - 13/11/2010 - 10:45:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log   [1773746] 
O44 - LFC:[MD5.FA975B6EB062B467A12F8268ADACFE3B] - 13/11/2010 - 10:20:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\PerfStringBackup.INI   [1553042] 
O44 - LFC:[MD5.C29B73114C60E8183A13D6AD74DC7C1C] - 13/11/2010 - 10:20:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc009.dat   [107396] 
O44 - LFC:[MD5.85062CD96EE5BEF8EAB96E6CAFC696AC] - 13/11/2010 - 10:20:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfc00C.dat   [131860] 
O44 - LFC:[MD5.11A61764A25F73D27456B8D2AC7FEF02] - 13/11/2010 - 10:20:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh009.dat   [615760] 
O44 - LFC:[MD5.340D606B1C240240555D0C159B08EE55] - 13/11/2010 - 10:20:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\perfh00C.dat   [702738] 
O44 - LFC:[MD5.1F2A702ED469859F9DEA39A41B961F1B] - 13/11/2010 - 10:14:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log   [1074] 
O44 - LFC:[MD5.7E6D6D5189E7B200D6BD2940E39B6C68] - 13/11/2010 - 10:14:19 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat   [67584] 
O44 - LFC:[MD5.48A3EEAF20BE5EC40EEF76A0AFAF91E0] - 13/11/2010 - 09:52:31 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   [9776] 
O44 - LFC:[MD5.48A3EEAF20BE5EC40EEF76A0AFAF91E0] - 13/11/2010 - 09:52:31 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   [9776] 
O44 - LFC:[MD5.549347BCD4AACD63243D78E8F869DBB1] - 09/11/2010 - 21:05:04 ---A- . (.Creative Labs - OpenAL32.) -- C:\Windows\SysNative\wrap_oal.dll   [466456] 
O44 - LFC:[MD5.549347BCD4AACD63243D78E8F869DBB1] - 09/11/2010 - 21:05:04 ---A- . (.Creative Labs - OpenAL32.) -- C:\Windows\System32\wrap_oal.dll   [444952] 
O44 - LFC:[MD5.2AD7B4F3C8D2BB686D231EDFF404B7A4] - 09/11/2010 - 21:05:04 ---A- . (.Portions (C) Creative Labs Inc. and NVIDIA - Standard OpenAL(TM) Implementation.) -- C:\Windows\SysNative\OpenAL32.dll   [122904] 
O44 - LFC:[MD5.2AD7B4F3C8D2BB686D231EDFF404B7A4] - 09/11/2010 - 21:05:04 ---A- . (.Portions (C) Creative Labs Inc. and NVIDIA - Standard OpenAL(TM) Implementation.) -- C:\Windows\System32\OpenAL32.dll   [109080] 
O44 - LFC:[MD5.88126C43B482C1A2AAFA3790A925466E] - 09/11/2010 - 21:04:49 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DirectX.log   [17627] 
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 07/11/2010 - 01:00:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setuperr.log   [0] 
O44 - LFC:[MD5.8EE2F3DDAEC6453175EE681E24B7C509] - 06/11/2010 - 13:22:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\TDSSKiller.2.4.4.0_06.11.2010_13.17.32_log.txt   [64996] 
O44 - LFC:[MD5.64B95F7B70693EEB4DE20111DCF6ED38] - 28/10/2010 - 11:44:07 ---A- . (.AMD - CoInstaller DLL.) -- C:\Windows\SysNative\coinst.dll   [58880] 
O44 - LFC:[MD5.DDEECB73EAA47F84CBEA7CC0C279330F] - 28/10/2010 - 11:44:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\atiapfxx.blb   [78848] 
O44 - LFC:[MD5.53E8269C811E750861B1C6E4E67B86C9] - 28/10/2010 - 11:44:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\atiogl.xml   [22190] 
O44 - LFC:[MD5.B369BCD378FB18D36026AAF82BDE2129] - 28/10/2010 - 11:44:06 ---A- . (.Advanced Micro Devices, Inc. - Graphics DEM.) -- C:\Windows\SysNative\ATIDEMGX.dll   [450560] 
O44 - LFC:[MD5.9E11B96A2051A336ACD6DBCCD918B5F4] - 28/10/2010 - 11:44:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysNative\atipblag.dat   [2857] 
O44 - LFC:[MD5.9E11B96A2051A336ACD6DBCCD918B5F4] - 28/10/2010 - 11:44:06 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\atipblag.dat   [2857] 
O44 - LFC:[MD5.62C5E46076F52D394EA0B898FF7B8747] - 15/10/2010 - 11:23:02 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr   [38848] 


---\ Opérations et fonctions au démarrage de Windows Explorer (O46) 
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL 


---\ Déni du service (Local Security Authority) (LSA) (O48) 
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll 
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll 


---\ Trojan Driver Search Data (HKLM)(TDSD) (O52) 
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\SysWOW64\l3codeca.acm" . (.Pas de propriétaire - Pas de description.) -- (.not file.) 
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll 
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll 
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll 
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm 
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.

paillefoin · Answer

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ff_vfw.dll ---\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll ---\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=0 O55 - MWPS:[HKLM\...\Policies\System] - "VerboseStatus"=1 ---\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 ---\ Liste des Drivers Système (SDL) (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys O58 - SDL:[MD5.7A4B413614C055935567CF88A9734D38] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys O58 - SDL:[MD5.B4AD0CACBAB298671DD6F6EF7E20679D] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys O58 - SDL:[MD5.19B006B181E3875FD254F7B67ACF1E7C] - 16/07/2009 - 04:38:40 ---A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\Windows\system32\drivers\ASACPI.sys O58 - SDL:[MD5.B76182F203E0BD5EB6A5F6538F0FAEE4] - 07/09/2010 - 15:47:10 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys O58 - SDL:[MD5.DD281CFC996D71553A4185CE424B5C45] - 07/09/2010 - 15:54:22 ---A- . (.AVAST Software - avast! Filtering TDI driver.) -- C:\Windows\system32\drivers\aswFW.sys O58 - SDL:[MD5.A88E9544EDDA1CE83825DD22D6A8B5F9] - 07/09/2010 - 15:47:33 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys O58 - SDL:[MD5.518B8D447A1975AB46DA093A2E743256] - 07/09/2010 - 15:24:46 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\Windows\system32\drivers\aswNdis.sys O58 - SDL:[MD5.B14A130C09AB3DB6697F9E9DF44AD7DE] - 07/09/2010 - 15:53:40 ---A- . (.AVAST Software - avast! Filtering NDIS driver.) -- C:\Windows\system32\drivers\aswNdis2.sys O58 - SDL:[MD5.CFAD2FB33B22E7039C9DC233BAACBF8B] - 07/09/2010 - 15:47:49 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys O58 - SDL:[MD5.9638A3064B642410011B43A210276F55] - 07/09/2010 - 15:54:10 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\system32\drivers\aswSnx.sys O58 - SDL:[MD5.594365E887F4A5AD3970870B352EB887] - 07/09/2010 - 15:52:09 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys O58 - SDL:[MD5.4BA0A0E1D36F88F536180FFE5EFD8B7C] - 07/09/2010 - 15:52:29 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys O58 - SDL:[MD5.7E2F5A758F63F80F8B03F889B4E6B19F] - 09/03/2010 - 11:21:42 ---A- . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtiHdmi.sys O58 - SDL:[MD5.FDA1E117A7E880BFF5540D180C06EA87] - 16/08/2010 - 11:42:00 ---A- . (.ATI Technologies, Inc. - ATI High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtihdW76.sys O58 - SDL:[MD5.BBAB5B28253FE0FC7255D8775BA05C1D] - 29/09/2010 - 03:26:12 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys O58 - SDL:[MD5.CBA35FF4092B91E105D93ED11A0250B6] - 29/09/2010 - 02:14:48 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\system32\drivers\atikmpag.sys O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys O58 - SDL:[MD5.641243746597FBD650E5000D95811EA3] - 30/03/2010 - 22:35:04 ---A- . (.Windows (R) Win 7 DDK provider - CPUID Driver.) -- C:\Windows\system32\drivers\cpuz133_x64.sys O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 03/02/2010 - 14:56:56 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\system32\drivers\hamachi.sys O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys O58 - SDL:[MD5.0886D440058F203EBA0E1825E4355914] - 14/07/2009 - 02:47:48 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys O58 - SDL:[MD5.1D004CB1DA6323B1F55CAEF7F94B61D9] - 04/06/2009 - 17:54:36 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStor.sys O58 - SDL:[MD5.D83EFB6FD45DF9D55E9A1AFC63640D50] - 14/07/2009 - 02:48:04 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys O58 - SDL:[MD5.2224ABC439D115A44EDB5630A92C1D7E] - 18/07/2009 - 06:18:48 ---A- . (.JMicron Technology Corp. - JMicron JMB36X RAID Driver.) -- C:\Windows\system32\drivers\jraid.sys O58 - SDL:[MD5.0A7D6ED578D85F0C35353424EE3F5245] - 18/03/2010 - 10:00:00 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\system32\drivers\LHidFilt.Sys O58 - SDL:[MD5.6542E2E6DB58118FBB1B82A68CE3AFF9] - 18/03/2010 - 10:00:16 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\Windows\system32\drivers\LMouFilt.Sys O58 - SDL:[MD5.64AEB5790901EA8854884981F104CAA6] - 29/09/2010 - 22:19:04 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\Windows\system32\drivers\LNonPnP.sys O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys O58 - SDL:[MD5.DA3494DF01C62D821911ED91CE5E1642] - 18/03/2010 - 10:00:40 ---A- . (.Logitech, Inc. - Logitech USB Filter Driver..) -- C:\Windows\system32\drivers\LUsbFilt.sys O58 - SDL:[MD5.E330051CCE41EB4522E5DCEBC15ADCEA] - 29/04/2010 - 14:39:28 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers frd960.sys O58 - SDL:[MD5.3E38712941E9BB4DDBEE00AFFE3FED3D] - 14/07/2009 - 02:48:27 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers vraid.sys O58 - SDL:[MD5.477DC4D6DEB99BE37084C9AC6D013DA1] - 14/07/2009 - 02:45:45 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers vstor.sys O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys O58 - SDL:[MD5.B49DC435AE3695BAC5623DD94B05732D] - 22/05/2009 - 15:52:30 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\system32\drivers\Rt64win7.sys O58 - SDL:[MD5.0DAAD9487C71542182E9B8E586D3BA1B] - 18/05/2009 - 17:29:58 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\Windows\system32\drivers tl819xp.sys O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys O58 - SDL:[MD5.0F00000000000000000000002CEF1800] - 21/09/2010 - 02:56:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\sptd.sys O58 - SDL:[MD5.E57B778208C783D8DEBAB320C16A1B82] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\StarOpen.sys O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys O58 - SDL:[MD5.627270F2103D41086BAB9675A3315DAB] - 10/07/2009 - 04:07:02 ---A- . (.VIA Technologies, Inc. - VIA High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\viahduaa.sys O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 12:34:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\drivers\AsInsHelp32.sys O58 - SDL:[MD5.EDAA17CE771C696655B6585F7CAD2100] - 04/01/2008 - 12:34:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\drivers\AsInsHelp64.sys O58 - SDL:[MD5.A82C01606DC27D05D9D3BFB6BB807E32] - 04/08/2009 - 03:28:28 R--A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\drivers\AsIO.sys O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 02/04/2009 - 13:30:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\drivers\ASUSHWIO.SYS O58 - SDL:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 29/04/2010 - 14:39:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys O58 - SDL:[MD5.F92254B0BCFCD10CAAC7BCCC7CB7F467] - 12/11/2009 - 13:48:56 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\drivers\StarOpen.sys O58 - SDL:[MD5.53F7546E8DAEFB3A0813F5E19C4613C9] - 24/03/2004 - 03:12:34 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - NetStumbler NDIS 5.0 Protocol Driver.) -- C:\Windows\SysWOW64 sndis5.sys O58 - SDL:[MD5.5F9785E7535F8F602CB294A54962C9E7] - 07/02/2007 - 19:27:46 ---A- . (.Windows (R) Server 2003 DDK provider - SpeedFan Device Driver.) -- C:\Windows\SysWOW64\speedfan.sys ---\ Liste des outils de nettoyage (LATC) (O63) O63 - Logiciel: Ad-Remover By C_XX - (.C_XX.) [HKLM] -- Ad-Remover O63 - Logiciel: HijackThis 2.0.2 - (.TrendMicro.) [HKLM] -- HijackThis O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ---\ Observateur d'évènement d'application (OEA) (O66) O66 - EventLog: ID=80 (SideBySide) - (.Pas de propriétaire - Pas de description.) -- C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest O66 - EventLog: ID=1000 (Application Error) - (.Bethesda Softworks - FalloutNV.) -- D:\Fallout New Vegas\FalloutNV.exe O66 - EventLog: ID=1000 (Application Error) - (.4A Games - Metro 2033 Executable.) -- D:\Metro 2033\metro2033.exe O66 - EventLog: ID=1000 (Application Error) - (.CAPCOM CO., LTD. - Dead Rising 2.) -- D:\DeadRising II\deadrising2.exe O66 - EventLog: ID=1000 (Application Error) - (.Electronic Arts - Burnout(TM) Paradise Application.) -- D:\BurnoutParadise\BurnoutParadise.exe ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe ---\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- (.Not Key.) (.not file.) ---\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {758B870D-DF78-4A6A-9955-DEDDCACF94DC} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKUS\.DEFAULT] {758B870D-DF78-4A6A-9955-DEDDCACF94DC} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKUS\S-1-5-18] {758B870D-DF78-4A6A-9955-DEDDCACF94DC} - (Google) - https://www.google.com/?gws_rd=ssl ---\ Recherche des services démarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\aelupsvc.dll [0] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\certprop.dll [0] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\certprop.dll [0] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\srvsvc.dll [0] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\gpsvc.dll [0] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\Audiosrv.dll [0] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32 asauto.dll [0] O83 - Search Svchost Services: Rasman (Rasman) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32 asmans.dll [0] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [49664] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ipnathlp.dll [0] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32 apisrv.dll [241664] O83 - Search Svchost Services: TermService (TermService) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32 ermsrv.dll [0] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\wuaueng.dll [0] O83 - Search Svchost Services: BITS (BITS) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\qmgr.dll [0] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\iphlpsvc.dll [0] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\iscsiexe.dll [0] O83 - Search Svchost Services: schedule (schedule) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\schedsvc.dll [0] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\system32\sessenv.dll [99328] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\wbem\WMIsvc.dll [0] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504] ---\ Recherche particuliere à la racine de certains dossiers (SPRF) (O84) [MD5.56ECE9BD3C4A321166F1BD1EFCABF585] [SPRF] (.Microsoft Corporation - Direct driver preloader.) -- C:\Program Files\DSETUP.dll [94040] [MD5.EF0ECDE0DF6DC9CE1AC6D6907C261CEA] [SPRF] (.Microsoft Corporation - Programme d'installation de DirectX - 32 bits.) -- C:\Program Files\dsetup32.dll [1691480] [MD5.F5443547CAAC20AA334A88817579270F] [SPRF] (.Microsoft Corporation - Installation de Microsoft DirectX.) -- C:\Program Files\DXSETUP.exe [525656] ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 0 | C:\Windows\System32\alg.exe (ALG) . (.Pas de propriétaire.) - C:\Windows\System32\alg.exe SR - | Auto 0 | C:\Windows\system32\atiesrxx.exe (AMD External Events Utility) . (.Pas de propriétaire.) - C:\Windows\system32\atiesrxx.exe SS - | Demand 0 | C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (aspnet_state) . (.Pas de propriétaire.) - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe SR - | Auto 19/08/2009 90112 | C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe (AsSysCtrlService) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe SR - | Auto 07/09/2010 40384 | "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SS - | Auto 07/09/2010 119200 | "C:\Program Files\Alwil Software\Avast5\afwServ.exe (avast! Firewall) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\afwServ.exe SS - | Demand 07/09/2010 40384 | "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Mail Scanner) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SS - | Demand 07/09/2010 40384 | "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (avast! Web Scanner) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe SS - | Auto 07/09/2010 0 | C:\Windows\System32\lsass.exe (EFS) . (.Pas de propriétaire.) - C:\Windows\System32\lsass.exe SS - | Demand 07/09/2010 0 | C:\Windows\system32\fxssvc.exe (Fax) . (.Pas de propriétaire.) - C:\Windows\system32\fxssvc.exe SS - | Auto 04/11/2010 136176 | "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 22/12/2009 136120 | "C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 04/06/2009 354840 | C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe SS - | Demand 03/04/2005 69632 | "C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SR - | Demand 03/04/2005 0 | C:\Windows\system32\lsass.exe (KeyIso) . (.Pas de propriétaire.) - C:\Windows\system32\lsass.exe SS - | Auto 18/04/2003 8192 | C:\Windows\system32\srvany.exe (KMService) . (.Pas de propriétaire.) - C:\Windows\system32\srvany.exe SS - | Demand 06/05/2010 357456 | C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe SS - | Demand 12/09/2010 251248 | "C:\Program Files (x86)\ma-config.com\maconfservice.exe (maconfservice) . (.CybelSoft.) - C:\Program Files (x86)\ma-config.com\maconfservice.exe SS - | Demand 12/09/2010 0 | C:\Windows\System32\msdtc.exe (MSDTC) . (.Pas de propriétaire.) - C:\Windows\System32\msdtc.exe SS - | Demand 12/09/2010 0 | C:\Windows\system32\lsass.exe (Netlogon) . (.Pas de propriétaire.) - C:\Windows\system32\lsass.exe SR - | Auto 04/03/2010 71096 | C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe (NMSAccess) . (.Pas de propriétaire.) - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe SS - | Demand 14/07/2009 20992 | C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll (nosGetPlusHelper) . (.NOS Microsystems Ltd..) - C:\Windows\System32\svchost.exe SR - | Auto 24/09/2010 75064 | C:\Windows\system32\PnkBstrA.exe (PnkBstrA) . (.Pas de propriétaire.) - C:\Windows\system32\PnkBstrA.exe SS - | Demand 24/09/2010 0 | C:\Windows\system32\lsass.exe (ProtectedStorage) . (.Pas de propriétaire.) - C:\Windows\system32\lsass.exe SS - | Demand 24/09/2010 0 | C:\Windows\system32\locator.exe (RpcLocator) . (.Pas de propriétaire.) - C:\Windows\system32\locator.exe SR - | Auto 24/09/2010 0 | C:\Windows\system32\lsass.exe (SamSs) . (.Pas de propriétaire.) - C:\Windows\system32\lsass.exe SR - | Auto 26/01/2009 1153368 | C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe SS - | Demand 26/01/2009 0 | C:\Windows\System32\snmptrap.exe (SNMPTRAP) . (.Pas de propriétaire.) - C:\Windows\System32\snmptrap.exe SR - | Auto 26/01/2009 0 | C:\Windows\System32\spoolsv.exe (Spooler) . (.Pas de propriétaire.) - C:\Windows\System32\spoolsv.exe SS - | Demand 26/01/2009 0 | C:\Windows\system32\sppsvc.exe (sppsvc) . (.Pas de propriétaire.) - C:\Windows\system32\sppsvc.exe SS - | Demand 09/11/2010 403240 | C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Demand 19/02/2010 517096 | "C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe SS - | Demand 19/02/2010 0 | C:\Windows\system32\UI0Detect.exe (UI0Detect) . (.Pas de propriétaire.) - C:\Windows\system32\UI0Detect.exe SS - | Demand 19/02/2010 0 | C:\Windows\system32\lsass.exe (VaultSvc) . (.Pas de propriétaire.) - C:\Windows\system32\lsass.exe SS - | Demand 19/02/2010 0 | C:\Windows\System32\vds.exe (vds) . (.Pas de propriétaire.) - C:\Windows\System32\vds.exe SS - | Demand 19/02/2010 0 | C:\Windows\system32\vssvc.exe (VSS) . (.Pas de propriétaire.) - C:\Windows\system32\vssvc.exe SS - | Demand 19/02/2010 0 | C:\Windows\system32\Wat\WatAdminSvc.exe (WatAdminSvc) . (.Pas de propriétaire.) - C:\Windows\system32\Wat\WatAdminSvc.exe SS - | Demand 19/02/2010 0 | "C:\Windows\system32\wbengine.exe (wbengine) . (.Pas de propriétaire.) - C:\Windows\system32\wbengine.exe SR - | Auto 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 26/06/2008 167936 | C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanWpsSvc.exe (WlanWpsSvc) . (.Pas de propriétaire.) - C:\Program Files\TRENDnet\TEW-641PC_TEW-643PI\WlanWpsSvc.exe SS - | Demand 26/06/2008 0 | C:\Windows\system32\wbem\WmiApSrv.exe (wmiApSrv) . (.Pas de propriétaire.) - C:\Windows\system32\wbem\WmiApSrv.exe SR - | Auto 14/07/2009 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net Run by Arma_Dams at 13/11/2010 10:49:08 device: opened successfully user: error reading MBR Disk trace: error: Read Descripteur non valide kernel: error reading MBR ---\ Recherche Master Boot Record Infection (MBRCheck)(O80) MBRCheck, version 1.2.3 by ad13, http://ad13.geekstog Run by Arma_Dams at 13/11/2010 10:49:12 Dump file Name : C:\Program Files (x86)\ZHPDiag\MBRDump_11-13-10_10-49-18_PhysicalDrive0.bin End of the scan (961 lines in 01mn 23s)(0)

jacques.gache · Answer

bonjour, tu fais un examen complet de ton pc avec malwarebytes , tu postes le rapport , et un nouveau zhpdiag en susivant la procédure pour tous cochés !! que tu posteras enpassant par le biais de cijoint pour l'avoir en entier donc plus exploitable

1 déactives spybot pour ps qu'il géne le nettoyage , mais perso je te conseillerais même de le virer car il est lourd et même presque inutil !! deplus tu as window défender sur ton pc et cela fait double emploie et ralentie ton pc pour rien 

déactives la protection résidente de spybot pour pas qu'il nous bloque le fixe 
quand tu le réactiveras possible qu'il te demande d'accepter ou pas les modifications il faudra les accepter toutes 
pour t'aider au cas ou : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924 



2) fais un examen complet de ton pc avec malwarebytes

si vous avez Vista ou seven, vous devez désactiver l'UAC le temps de la désinfection. 

pour vista suivre ce tuto si besoin : http://nostools.pagesperso-orange.fr/uac_vista.html

pour seven celui ci : http://nostools.pagesperso-orange.fr/uac_win7.html




 !! ATTENTION !!! près de 2 heures de scan !!!

Télécharge Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

si problème essais avec celui ci : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installation, alors télécharge le ici :COMCTL32.OCX 

. enregistres le sur le bureau
. Utilisateur de Vista et Windows 7 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur » 
. si le pare-feu demande l'autorisation  de se connecter pour malwarebytes, acceptes
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Une fois la mise à jour terminée
. rend-toi dans l'onglet, Recherche
. Sélectionnes  Exécuter un examen complet
. Sélectionnes tous les disques si proposés
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. redemarre le pc si il le fait pas lui même
. une fois redémarré  double-cliques sur malwarebytes
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller


Si tu as besoin d'aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/



3) postes un nouveau zhpdiag comme expliqué

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !! 

Clique sur le Tournevis puis sur Tous pour cocher toutes les cases des options. 

Cliques sur la loupe pour lancer l'analyse. 

 si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire  un rapport plus complet et pouvoir en faire une lecture plus approfondis 

Laisses l'outil travailler, il peut être assez long 

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau. 


Fermes ZHPDiag en fin d'analyse. 


Pour me le transmettre clique sur ce lien : 

http://www.cijoint.fr/index.php

Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et  ZHPDiag.txt clique dessus 

Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

babarjo · Answer

met ton rapport la dessus et tu verras

http://www.hijackthis.de/fr

paillefoin · Answer

Rapport MBAM

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5114

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

15/11/2010 10:32:57
mbam-log-2010-11-15 (10-32-57).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|)
Elément(s) analysé(s): 374197
Temps écoulé: 45 minute(s), 44 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Quarantined and deleted successfully.
D:\!_DOWNLOAD\KeyScrambler Premium 2.7.0-Up By Willou57 For Wawa-Mania\keygen-Up By Willou57 For Wawa-Mania.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
D:\Assassin's Creed II\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Quarantined and deleted successfully.


RAPPORT ZHPDIAG

http://www.cijoint.fr/cjlink.php?file=cj201011/cijpjt1u99.txt

Est ce propre ?

7 réponses

Discussions similaires