Pc qui rame...qui rame...

bonjour et bonne année à toi aussi,
je ne te souhaite pas pleines infections .....

je décconne ! :-)

* Télécharge ZHPDiag sur ton bureau :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
ou
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
http://www.cijoint.fr/
ou :
http://ww38.toofiles.com/fr/documents-upload.html
ou :
https://www.terafiles.net/
tuto zhpdiag :
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

bonjour ,
écoute, il n y a pas d icones avec une loupe mais une seringue, c est la je suppose?

oupss j ai trouvé voila le raport

Rapport de ZHPDiag v1.27.1491 par Nicolas Coolman, Update du 09/01/2011
Run by david at 09/01/2011 14:01:59
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.7100.0 (Defaut)

---\\ System Information
Windows 7 Ultimate Edition, 32-bit (Build 7100)
Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (52% free)
System Restore: Activé (Enable)
System drive C: has 53 GB (76%) free of 70 GB

---\\ Logged in mode
Computer Name: DAVTOF
User Name: david
All Users Names: HomeGroupUser$, david, Administrateur,
Unselected Option: O1,O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=%USERPROFILE%\AppData\Roaming
%LocalAppData%=%USERPROFILE%\AppData\Local
%StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 53 Go of 70 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 41 Go of 149 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 43 Go of 70 Go)
F:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

---\\ Recherche particulière de fichiers génériques
[MD5.C133788B393EEC01439AD997D24E66ED] - (.Microsoft Corporation - Explorateur Windows.) (.22/04/2009 06:19:02.) -- C:\Windows\Explorer.exe [2607616]
[MD5.2E4264C95BAB587431C79C101899CCC8] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/04/2009 06:19:40.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.B9CFF761509E6C95E964B29B279D7721] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22/04/2009 06:19:40.) -- C:\Windows\System32\Winlogon.exe [285696]
[MD5.80C40F7FDFC376E4C5FEEC28B41C119E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/04/2009 06:24:04.) -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.B2B1E77C5284C86977115FE9F220843E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.22/04/2009 06:24:27.) -- C:\Windows\System32\drivers\ntfs.sys [1210448]

---\\ Processus lancés
[MD5.6C1B31F5C16E03153F0037AC6C451FFD] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2838912]
[MD5.B190B175246BA9E0EDD4905FE5105AA5] - (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe [10811696]
[MD5.89F7C30A91E5581BDF14C62AB46A2B2D] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe [255536]
[MD5.38632B02A013CD09D0F46BD0DF8C218E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [674072]
[MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
[MD5.6DD9034E180D448453C889AB040753CC] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [622592]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
P2 - FPN:Firefox Plugin Navigator . (.BitComet - BitCometAgent v1.23 for Firefox.) -- C:\Program Files\Mozilla Firefox\Plugins\npBitCometAgent.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R3 - URLSearchHook: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (8.00.7100.0 (winmain_win7rc.090421-1700)) -- C:\Windows\System32\ieframe.dll
R3 - URLSearchHook: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MessengerPlusLive France TB - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKCU\..\Run: [BitComet] . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-154251498-3448505481-382456000-1000\..\Run: [BitComet] . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O4 - HKUS\S-1-5-21-154251498-3448505481-382456000-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk . (.McAfee, Inc..) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\david\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Documents And Settings\david\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\david\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\david\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CometBird.lnk . (.CometNetwork.) -- C:\Program Files\CometBird\CometBird.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll
O8 - Extra context menu item: Tout télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O8 - Extra context menu item: Télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: C:\Windows\system32\drivers\afd.sys (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [{B53D7176-2F33-4659-B52C-98943B21E5B7}] (.Pas de propriétaire.) -- C:\Program Files\Skype\Phone\Skype.exe (.not file.)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: BitComet 1.25 - (.CometNetwork.) [HKLM] -- BitComet
O42 - Logiciel: CometBird (3.6.13) - (.CometNetwork.) [HKLM] -- CometBird (3.6.13)
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: MessengerPlusLive France TB Toolbar - (.MessengerPlusLive France TB.) [HKLM] -- MessengerPlusLive_France_TB Toolbar
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: MpcStar 4.9 - (.www.mpcstar.com.) [HKLM] -- MpcStar
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {230B83A5-7D88-4B95-B71E-F44C0C78B002}
O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\MessengerPlusLive_France_TB]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\conduitEngine]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\BitComet]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\FIXIO PC Utilities]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\MGS]
[HKCU\Software\Macromedia]
[HKCU\Software\Microgaming]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\MpcStar]
[HKCU\Software\Netscape]
[HKCU\Software\Patchou]
[HKCU\Software\Policies]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\SweetIM]
[HKCU\Software\TechSmith]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CometNetwork]
[HKLM\Software\Conduit]
[HKLM\Software\GNU]
[HKLM\Software\Google]
[HKLM\Software\Intel]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\MessengerPlusLive_France_TB]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\PCTools]
[HKLM\Software\Patchou]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\SweetIM]
[HKLM\Software\Uniblue]
[HKLM\Software\illiminable]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]

---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/11/2010 - 17:10:58 ----D- C:\Program Files\Adobe
O43 - CFD: 16/12/2010 - 15:23:22 ----D- C:\Program Files\Alwil Software
O43 - CFD: 16/12/2010 - 19:00:08 ----D- C:\Program Files\BitComet
O43 - CFD: 16/12/2010 - 19:08:26 ----D- C:\Program Files\CometBird
O43 - CFD: 09/01/2011 - 13:16:28 ----D- C:\Program Files\Common Files
O43 - CFD: 16/12/2010 - 18:52:50 ----D- C:\Program Files\Conduit
O43 - CFD: 16/12/2010 - 18:52:48 ----D- C:\Program Files\ConduitEngine
O43 - CFD: 22/04/2009 - 11:12:14 ----D- C:\Program Files\DVD Maker
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 16/12/2010 - 15:52:14 ----D- C:\Program Files\Google
O43 - CFD: 24/11/2010 - 13:26:20 ----D- C:\Program Files\Internet Explorer
O43 - CFD: 27/11/2010 - 17:17:24 ----D- C:\Program Files\McAfee Security Scan
O43 - CFD: 16/12/2010 - 18:48:28 ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD: 16/12/2010 - 18:52:50 ----D- C:\Program Files\MessengerPlusLive_France_TB
O43 - CFD: 23/11/2010 - 15:40:40 ----D- C:\Program Files\Microsoft
O43 - CFD: 22/04/2009 - 11:12:12 ----D- C:\Program Files\Microsoft Games
O43 - CFD: 20/12/2010 - 21:17:42 ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/12/2010 - 19:10:54 ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 17/12/2010 - 17:25:28 ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 16/12/2010 - 19:02:36 ----D- C:\Program Files\MpcStar
O43 - CFD: 22/04/2009 - 09:55:54 ----D- C:\Program Files\MSBuild
O43 - CFD: 22/04/2009 - 09:55:54 ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 09/01/2011 - 13:21:34 ----D- C:\Program Files\Registry Mechanic
O43 - CFD: 22/04/2009 - 09:27:02 --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Defender
O43 - CFD: 22/04/2009 - 11:12:14 ----D- C:\Program Files\Windows Journal
O43 - CFD: 13/12/2010 - 19:11:28 ----D- C:\Program Files\Windows Live
O43 - CFD: 13/12/2010 - 19:09:40 ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Mail
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Media Player
O43 - CFD: 19/12/2010 - 14:04:16 ----D- C:\Program Files\Windows NT
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 09/01/2011 - 14:02:08 ----D- C:\Program Files\ZHPDiag
O43 - CFD: 24/11/2010 - 17:11:04 ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 16/12/2010 - 15:23:34 ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 09/01/2011 - 13:21:32 ----D- C:\Program Files\Common Files\PC Tools
O43 - CFD: 22/04/2009 - 07:17:24 ----D- C:\Program Files\Common Files\Services
O43 - CFD: 22/04/2009 - 07:17:24 ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Common Files\System
O43 - CFD: 23/12/2010 - 05:40:12 ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 24/11/2010 - 17:20:12 ----D- C:\ProgramData\Adobe
O43 - CFD: 16/12/2010 - 15:23:22 ----D- C:\ProgramData\Alwil Software
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Application Data
O43 - CFD: 07/01/2011 - 16:46:16 ----D- C:\ProgramData\boost_interprocess
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Bureau
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Desktop
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Documents
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Favoris
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Favorites
O43 - CFD: 16/12/2010 - 15:40:08 ----D- C:\ProgramData\Google
O43 - CFD: 24/11/2010 - 17:07:50 ----D- C:\ProgramData\McAfee
O43 - CFD: 24/11/2010 - 17:07:50 ----D- C:\ProgramData\McAfee Security Scan
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 30/12/2010 - 23:02:20 ----D- C:\ProgramData\Messenger Plus!
O43 - CFD: 30/11/2010 - 12:06:34 ----D- C:\ProgramData\MGS
O43 - CFD: 16/12/2010 - 15:37:44 -S--D- C:\ProgramData\Microsoft
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Modèles
O43 - CFD: 01/12/2010 - 02:25:28 ----D- C:\ProgramData\Skype
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 09/01/2011 - 13:21:40 ---AD- C:\ProgramData\TEMP
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Templates
O43 - CFD: 09/01/2011 - 13:10:44 --H-D- C:\ProgramData\~0
O43 - CFD: 24/11/2010 - 17:11:44 ----D- C:\Users\david\AppData\Roaming\Adobe
O43 - CFD: 09/01/2011 - 14:01:04 ----D- C:\Users\david\AppData\Roaming\BitComet
O43 - CFD: 16/12/2010 - 19:08:02 ----D- C:\Users\david\AppData\Roaming\CometNetwork
O43 - CFD: 18/12/2010 - 18:40:12 ----D- C:\Users\david\AppData\Roaming\CometPlayer
O43 - CFD: 22/12/2010 - 07:40:50 ----D- C:\Users\david\AppData\Roaming\Google
O43 - CFD: 19/12/2010 - 14:05:02 ----D- C:\Users\david\AppData\Roaming\Identities
O43 - CFD: 22/12/2010 - 07:22:46 ----D- C:\Users\david\AppData\Roaming\Macromedia
O43 - CFD: 22/04/2009 - 11:12:06 ----D- C:\Users\david\AppData\Roaming\Media Center Programs
O43 - CFD: 13/12/2010 - 18:27:42 -S--D- C:\Users\david\AppData\Roaming\Microsoft
O43 - CFD: 17/12/2010 - 17:25:26 ----D- C:\Users\david\AppData\Roaming\Mozilla
O43 - CFD: 09/01/2011 - 13:19:02 ----D- C:\Users\david\AppData\Roaming\Registry Mechanic
O43 - CFD: 12/12/2010 - 19:42:38 ----D- C:\Users\david\AppData\Roaming\Skype
O43 - CFD: 02/12/2010 - 09:14:48 ----D- C:\Users\david\AppData\Roaming\skypePM
O43 - CFD: 02/01/2011 - 18:51:46 ----D- C:\Users\david\AppData\Roaming\tigerplayer
O43 - CFD: 09/01/2011 - 13:04:38 ----D- C:\Users\david\AppData\Roaming\Uniblue
O43 - CFD: 23/11/2010 - 15:54:28 ----D- C:\Users\david\AppData\Roaming\Windows Live Writer

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.00000000000000000000000088EE1200] - 09/01/2011 - 13:40:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1963881]
O44 - LFC:[MD5.67A7B48436997DB234E134B7A74FCAC2] - 09/01/2011 - 13:40:44 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.A599435C35BEF9188075AEC2D7BE0737] - 09/01/2011 - 09:35:58 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [13392]
O44 - LFC:[MD5.A599435C35BEF9188075AEC2D7BE0737] - 09/01/2011 - 09:35:58 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [13392]
O44 - LFC:[MD5.060218989B544041DE0E037CDF2BB9D1] - 09/01/2011 - 09:28:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [27967]
O44 - LFC:[MD5.8E73BA2A50D6785D72C541988DAEE5D7] - 05/01/2011 - 17:48:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\MEMORY.DMP [283410760]
O44 - LFC:[MD5.52E6DFF52747B183629072B33D6469A7] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [4568]
O44 - LFC:[MD5.070B852B2B8776CAD98699342974299B] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [252562]
O44 - LFC:[MD5.67C8F43A95B6E5B86C0DCBF589919ACA] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [298584]
O44 - LFC:[MD5.2A3C38354D97AEF26E9884BC640CFF54] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [763096]
O44 - LFC:[MD5.C7B057E356A679C6D480170801B749DD] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [1212710]
O44 - LFC:[MD5.FE0B8BACEF2860E40C889178A96DA9CF] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\XELDZ [206312]
O44 - LFC:[MD5.3BC86077F5E421F4AAC4761EA567E263] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\XELDZ.1st [9216]
O44 - LFC:[MD5.15A4F358BFEA2C70CB050D0CF010EEB2] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\bootxez [438840]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/12/2010 - 14:07:24 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [0]
O44 - LFC:[MD5.1FDBA4BA7AB558FFD72142961663C8E2] - 19/12/2010 - 14:03:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [264904]
O44 - LFC:[MD5.4994B42B6E7541934AEC7AF3AD5E3751] - 19/12/2010 - 14:01:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\license.rtf [37548]
O44 - LFC:[MD5.FBD309B68E978347FC85FF7460FBE07F] - 19/12/2010 - 14:00:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\TSSysprep.log [1313]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/12/2010 - 14:00:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ativpsrm.bin [0]
O44 - LFC:[MD5.4E093C279DA4478EB3613F9034FC3F1B] - 19/12/2010 - 13:58:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DtcInstall.log [1788]
O44 - LFC:[MD5.4FDC645558189C2105D109BF6AFBA847] - 19/12/2010 - 13:56:02 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\BOOTSECT.BAK [8192]
O44 - LFC:[MD5.C4C4D5B64DA63314943D2DAB1EBC7010] - 19/12/2010 - 13:56:00 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\bootmgr [383200]
O44 - LFC:[MD5.FC7CAA42D8E62EF236579BCAB82687FB] - 16/12/2010 - 19:20:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [1922]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/12/2010 - 19:08:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\nsreg.dat [0]
O44 - LFC:[MD5.A0D86B8AC93EF95620420C7A24AC5344] - 16/12/2010 - 15:24:24 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\drivers\aswFsBlk.sys [17744]
O44 - LFC:[MD5.7ECC2776638B04553F9A85BD684C3ABF] - 16/12/2010 - 15:24:24 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [165584]
O44 - LFC:[MD5.69823954BBD461A73D69774928C9737E] - 16/12/2010 - 15:24:22 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [23376]
O44 - LFC:[MD5.095ED820A926AA8189180B305E1BCFC9] - 16/12/2010 - 15:24:19 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [46672]
O44 - LFC:[MD5.BD9119468C32B7ECD1E0544D3F286A73] - 16/12/2010 - 15:24:15 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [50768]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 16/12/2010 - 15:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\config.nt [2577]
O44 - LFC:[MD5.62C5E46076F52D394EA0B898FF7B8747] - 16/12/2010 - 15:23:24 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [38848]
O44 - LFC:[MD5.C983EB22398295B00A5A10B681DABC6E] - 16/12/2010 - 15:23:24 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [167592]
O44 - LFC:[MD5.E92811002351A299F760EF30625EA193] - 13/12/2010 - 19:11:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DirectX.log [29554]
O44 - LFC:[MD5.F9F4905664C5B42B49E78EFA12D1A6B6] - 13/12/2010 - 19:10:53 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PùY [20]
O44 - LFC:[MD5.C6E055E483AAFF8911FAB6B5A23D7052] - 13/12/2010 - 18:44:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DPINST.LOG [9432]

---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \Drivers32\"vidc.tscc"="C:\PROGRA~1\MpcStar\Codecs\tscc\tsccvid.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"tsccvid.dll"="TechSmith Screen Capture Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.CB9719B72278864DCA271E214168B1E5] - 22/04/2009 - 06:24:35 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422992]
O58 - SDL:[MD5.A1A4F6FC13234C74FBB35F1B7866BDF6] - 22/04/2009 - 06:24:29 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]
O58 - SDL:[MD5.92CDAABFDA2C936A87C2823CE4A249DA] - 22/04/2009 - 06:24:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]
O58 - SDL:[MD5.EA9072AD99811A397605D3FC78F4B095] - 22/04/2009 - 06:24:04 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14416]
O58 - SDL:[MD5.A1EFDF25677AABC65A1F69F4ADB5CE70] - 22/04/2009 - 06:24:13 ---A- . (.AMD - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [77904]
O58 - SDL:[MD5.E6641B59279513BF828B85281011057F] - 22/04/2009 - 06:24:21 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]
O58 - SDL:[MD5.6524374D1080863ED2894AB58C4E7DDA] - 22/04/2009 - 06:24:04 ---A- . (.AMD - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [23120]
O58 - SDL:[MD5.70E35AA73967E87BEC99D637969CA372] - 22/04/2009 - 06:24:12 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]
O58 - SDL:[MD5.7BEEC1527A46459FCA2099031F91FFDD] - 22/04/2009 - 06:24:19 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]
O58 - SDL:[MD5.A0D86B8AC93EF95620420C7A24AC5344] - 07/09/2010 - 16:47:07 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]
O58 - SDL:[MD5.BD9119468C32B7ECD1E0544D3F286A73] - 07/09/2010 - 16:47:30 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [50768]
O58 - SDL:[MD5.69823954BBD461A73D69774928C9737E] - 07/09/2010 - 16:47:46 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23376]
O58 - SDL:[MD5.7ECC2776638B04553F9A85BD684C3ABF] - 07/09/2010 - 16:52:03 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [165584]
O58 - SDL:[MD5.095ED820A926AA8189180B305E1BCFC9] - 07/09/2010 - 16:52:25 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [46672]
O58 - SDL:[MD5.04F09923A393E4E0E8453A8F78361E73] - 18/08/2009 - 03:48:06 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [4994560]
O58 - SDL:[MD5.E1659F303F2602E0D393269970A09E35] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 22/04/2009 - 03:51:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 22/04/2009 - 03:51:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 22/04/2009 - 05:53:34 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 22/04/2009 - 03:51:16 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 22/04/2009 - 03:51:17 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 22/04/2009 - 03:51:17 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]
O58 - SDL:[MD5.2E9A4971F238DC19551C373586AC8E61] - 22/04/2009 - 06:24:04 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]
O58 - SDL:[MD5.C2D5D96A3FFAA4D5106A693743BDDFF6] - 22/04/2009 - 06:24:08 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70736]
O58 - SDL:[MD5.A2984D22D8337BAE947F63DE9A8305E1] - 22/04/2009 - 06:24:23 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]
O58 - SDL:[MD5.A65DED2EBD1C922D311545A2E7697332] - 22/04/2009 - 03:52:05 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.91A15EC4471AA8D2A6392C3BCB2D3DC2] - 22/04/2009 - 06:24:08 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]
O58 - SDL:[MD5.AC958B65CDE27ADFDEC628BF7ECCEB8C] - 22/04/2009 - 06:24:21 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332368]
O58 - SDL:[MD5.0D530FE77DFEC74C7731CCD30D620021] - 22/04/2009 - 06:24:02 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]
O58 - SDL:[MD5.E01CD2302BB3B19A50922A05028D3863] - 22/04/2009 - 06:24:14 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]
O58 - SDL:[MD5.45A1373EA2E7BF21F77AD88180820FBA] - 22/04/2009 - 06:24:12 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]
O58 - SDL:[MD5.B791FD73219AC7C4755FC473BA869D1F] - 22/04/2009 - 06:24:06 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]
O58 - SDL:[MD5.3A5BD4B6BBCDB1FDBED48555366B1589] - 22/04/2009 - 06:24:13 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]
O58 - SDL:[MD5.DE749597787DE1ABE22111F6AD8E7087] - 22/04/2009 - 06:23:59 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]
O58 - SDL:[MD5.A86E92C416C8B31620B08354FE03723E] - 22/04/2009 - 06:24:20 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [236112]
O58 - SDL:[MD5.58218EC6B61B1169CF54AAB0D00F5FE2] - 22/04/2009 - 03:01:10 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\netw5v32.sys [4231168]
O58 - SDL:[MD5.F845566B3C5DABACAFB435F0D07BA0DC] - 22/04/2009 - 06:24:05 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]
O58 - SDL:[MD5.4A5984C5859D951D0B62B7B406AFE357] - 22/04/2009 - 06:24:14 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117328]
O58 - SDL:[MD5.93CF6F974095F7D146AA273F3BF418D7] - 22/04/2009 - 06:24:17 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [142416]
O58 - SDL:[MD5.22889AFB02D1CB51EA1826BCF26AAE29] - 22/04/2009 - 06:23:56 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383504]
O58 - SDL:[MD5.CFCEA1D2F03309E13DFB22F18DA55F37] - 22/04/2009 - 06:23:49 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [105552]
O58 - SDL:[MD5.6C1F93C0760C9F79A1869D07233DF39D] - 14/11/2006 - 17:35:20 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\drivers\rixdptsk.sys [37376]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 22/04/2009 - 01:51:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.2F199E7334D5AA5D8DF6CAF8BDD20ECE] - 22/04/2009 - 06:23:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [40016]
O58 - SDL:[MD5.317FFB05894089AA3EC0BDE66FFF46B1] - 22/04/2009 - 06:23:49 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [77904]
O58 - SDL:[MD5.63D94515F23994DACD2C013BD38FE85A] - 22/04/2009 - 06:23:43 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [21072]
O58 - SDL:[MD5.E7FE0D0691708C8CEE8725211F634E61] - 22/04/2009 - 06:23:42 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [16976]
O58 - SDL:[MD5.013A033EF110AF1AC145F13BAD8592AF] - 22/04/2009 - 06:23:52 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [141904]
O58 - SDL:[MD5.E00FDFAFF025E94F9821153750C35A6D] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [207360]
O58 - SDL:[MD5.BC0C7EA89194C299F051C24119000E17] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [661504]
O58 - SDL:[MD5.CEB4E3B6890E1E42DCA6694D9E59E1A0] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [980992]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 22/04/2009 - 02:39:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 22/04/2009 - 02:39:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 22/04/2009 - 02:39:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 22/04/2009 - 02:39:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 22/04/2009 - 02:39:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 22/04/2009 - 02:39:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 22/04/2009 - 02:39:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 22/04/2009 - 02:39:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 22/04/2009 - 02:39:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 22/04/2009 - 02:39:18 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 22/04/2009 - 02:39:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 22/04/2009 - 02:39:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS [34672]

---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

---\\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - aswSP (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - C:\Windows\system32\cscsvc.dll (CSC) .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d'E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - C:\Windows\system32\vmstorfltres.dll (storflt) .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurC

tu ne prends pas l'icone avec seringue (ZHPFIX), mais l'autre qui s'appelle ZHPDIAG

oui c est ce que j ai fait, et je viens de poster le raport, que dois-je faire maintenant??

copie et colle le line du rapport hébérgé sur ton prochain message pour que j'ai accès ;-)

comment fait on?? mais la je l ai deja collé dans mon dernier post, c est bien cela??

ps: désolé je ne m y connais pas autant que vous :-( :-(

Rapport de ZHPDiag v1.27.1491 par Nicolas Coolman, Update du 09/01/2011
Run by david at 09/01/2011 14:01:59
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.7100.0 (Defaut)

---\\ System Information
Windows 7 Ultimate Edition, 32-bit (Build 7100)
Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (52% free)
System Restore: Activé (Enable)
System drive C: has 53 GB (76%) free of 70 GB

---\\ Logged in mode
Computer Name: DAVTOF
User Name: david
All Users Names: HomeGroupUser$, david, Administrateur,
Unselected Option: O1,O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=%USERPROFILE%\AppData\Roaming
%LocalAppData%=%USERPROFILE%\AppData\Local
%StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 53 Go of 70 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 41 Go of 149 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 43 Go of 70 Go)
F:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK

---\\ Recherche particulière de fichiers génériques
[MD5.C133788B393EEC01439AD997D24E66ED] - (.Microsoft Corporation - Explorateur Windows.) (.22/04/2009 06:19:02.) -- C:\Windows\Explorer.exe [2607616]
[MD5.2E4264C95BAB587431C79C101899CCC8] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22/04/2009 06:19:40.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.B9CFF761509E6C95E964B29B279D7721] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22/04/2009 06:19:40.) -- C:\Windows\System32\Winlogon.exe [285696]
[MD5.80C40F7FDFC376E4C5FEEC28B41C119E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/04/2009 06:24:04.) -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.B2B1E77C5284C86977115FE9F220843E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.22/04/2009 06:24:27.) -- C:\Windows\System32\drivers\ntfs.sys [1210448]

---\\ Processus lancés
[MD5.6C1B31F5C16E03153F0037AC6C451FFD] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2838912]
[MD5.B190B175246BA9E0EDD4905FE5105AA5] - (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe [10811696]
[MD5.89F7C30A91E5581BDF14C62AB46A2B2D] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe [255536]
[MD5.38632B02A013CD09D0F46BD0DF8C218E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [674072]
[MD5.711FD53E441255983C0AB014E2F107F4] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe [233936]
[MD5.6DD9034E180D448453C889AB040753CC] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [622592]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
P2 - FPN:Firefox Plugin Navigator . (.BitComet - BitCometAgent v1.23 for Firefox.) -- C:\Program Files\Mozilla Firefox\Plugins\npBitCometAgent.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R3 - URLSearchHook: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (8.00.7100.0 (winmain_win7rc.090421-1700)) -- C:\Windows\System32\ieframe.dll
R3 - URLSearchHook: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.3.0) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MessengerPlusLive France TB - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKCU\..\Run: [BitComet] . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-154251498-3448505481-382456000-1000\..\Run: [BitComet] . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O4 - HKUS\S-1-5-21-154251498-3448505481-382456000-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk . (.McAfee, Inc..) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\david\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Documents And Settings\david\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\david\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\david\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CometBird.lnk . (.CometNetwork.) -- C:\Program Files\CometBird\CometBird.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
O4 - Global Startup: C:\Users\david\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll
O8 - Extra context menu item: Tout télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe
O8 - Extra context menu item: Télécharger avec BitComet . (.www.BitComet.com - BitComet - a BitTorrent Client.) -- C:\Program Files\BitComet\BitComet.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} . (.BitComet - BitCometBHO.) -- C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{40D10CC9-DDD0-4263-8C43-50BF389EC3E4}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: C:\Windows\system32\drivers\afd.sys (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)

---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [{B53D7176-2F33-4659-B52C-98943B21E5B7}] (.Pas de propriétaire.) -- C:\Program Files\Skype\Phone\Skype.exe (.not file.)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: BitComet 1.25 - (.CometNetwork.) [HKLM] -- BitComet
O42 - Logiciel: CometBird (3.6.13) - (.CometNetwork.) [HKLM] -- CometBird (3.6.13)
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM] -- McAfee Security Scan
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: MessengerPlusLive France TB Toolbar - (.MessengerPlusLive France TB.) [HKLM] -- MessengerPlusLive_France_TB Toolbar
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: MpcStar 4.9 - (.www.mpcstar.com.) [HKLM] -- MpcStar
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {230B83A5-7D88-4B95-B71E-F44C0C78B002}
O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\MessengerPlusLive_France_TB]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\conduitEngine]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\BitComet]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\FIXIO PC Utilities]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\MGS]
[HKCU\Software\Macromedia]
[HKCU\Software\Microgaming]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\MpcStar]
[HKCU\Software\Netscape]
[HKCU\Software\Patchou]
[HKCU\Software\Policies]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\SweetIM]
[HKCU\Software\TechSmith]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CometNetwork]
[HKLM\Software\Conduit]
[HKLM\Software\GNU]
[HKLM\Software\Google]
[HKLM\Software\Intel]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\MessengerPlusLive_France_TB]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\PCTools]
[HKLM\Software\Patchou]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\SweetIM]
[HKLM\Software\Uniblue]
[HKLM\Software\illiminable]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]

---\\ Contenu des dossiers ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/11/2010 - 17:10:58 ----D- C:\Program Files\Adobe
O43 - CFD: 16/12/2010 - 15:23:22 ----D- C:\Program Files\Alwil Software
O43 - CFD: 16/12/2010 - 19:00:08 ----D- C:\Program Files\BitComet
O43 - CFD: 16/12/2010 - 19:08:26 ----D- C:\Program Files\CometBird
O43 - CFD: 09/01/2011 - 13:16:28 ----D- C:\Program Files\Common Files
O43 - CFD: 16/12/2010 - 18:52:50 ----D- C:\Program Files\Conduit
O43 - CFD: 16/12/2010 - 18:52:48 ----D- C:\Program Files\ConduitEngine
O43 - CFD: 22/04/2009 - 11:12:14 ----D- C:\Program Files\DVD Maker
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 16/12/2010 - 15:52:14 ----D- C:\Program Files\Google
O43 - CFD: 24/11/2010 - 13:26:20 ----D- C:\Program Files\Internet Explorer
O43 - CFD: 27/11/2010 - 17:17:24 ----D- C:\Program Files\McAfee Security Scan
O43 - CFD: 16/12/2010 - 18:48:28 ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD: 16/12/2010 - 18:52:50 ----D- C:\Program Files\MessengerPlusLive_France_TB
O43 - CFD: 23/11/2010 - 15:40:40 ----D- C:\Program Files\Microsoft
O43 - CFD: 22/04/2009 - 11:12:12 ----D- C:\Program Files\Microsoft Games
O43 - CFD: 20/12/2010 - 21:17:42 ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/12/2010 - 19:10:54 ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 17/12/2010 - 17:25:28 ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 16/12/2010 - 19:02:36 ----D- C:\Program Files\MpcStar
O43 - CFD: 22/04/2009 - 09:55:54 ----D- C:\Program Files\MSBuild
O43 - CFD: 22/04/2009 - 09:55:54 ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 09/01/2011 - 13:21:34 ----D- C:\Program Files\Registry Mechanic
O43 - CFD: 22/04/2009 - 09:27:02 --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Defender
O43 - CFD: 22/04/2009 - 11:12:14 ----D- C:\Program Files\Windows Journal
O43 - CFD: 13/12/2010 - 19:11:28 ----D- C:\Program Files\Windows Live
O43 - CFD: 13/12/2010 - 19:09:40 ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Mail
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Media Player
O43 - CFD: 19/12/2010 - 14:04:16 ----D- C:\Program Files\Windows NT
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 09/01/2011 - 14:02:08 ----D- C:\Program Files\ZHPDiag
O43 - CFD: 24/11/2010 - 17:11:04 ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 16/12/2010 - 15:23:34 ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 09/01/2011 - 13:21:32 ----D- C:\Program Files\Common Files\PC Tools
O43 - CFD: 22/04/2009 - 07:17:24 ----D- C:\Program Files\Common Files\Services
O43 - CFD: 22/04/2009 - 07:17:24 ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 22/04/2009 - 11:01:52 ----D- C:\Program Files\Common Files\System
O43 - CFD: 23/12/2010 - 05:40:12 ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 24/11/2010 - 17:20:12 ----D- C:\ProgramData\Adobe
O43 - CFD: 16/12/2010 - 15:23:22 ----D- C:\ProgramData\Alwil Software
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Application Data
O43 - CFD: 07/01/2011 - 16:46:16 ----D- C:\ProgramData\boost_interprocess
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Bureau
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Desktop
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Documents
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Favoris
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Favorites
O43 - CFD: 16/12/2010 - 15:40:08 ----D- C:\ProgramData\Google
O43 - CFD: 24/11/2010 - 17:07:50 ----D- C:\ProgramData\McAfee
O43 - CFD: 24/11/2010 - 17:07:50 ----D- C:\ProgramData\McAfee Security Scan
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 30/12/2010 - 23:02:20 ----D- C:\ProgramData\Messenger Plus!
O43 - CFD: 30/11/2010 - 12:06:34 ----D- C:\ProgramData\MGS
O43 - CFD: 16/12/2010 - 15:37:44 -S--D- C:\ProgramData\Microsoft
O43 - CFD: 19/12/2010 - 14:04:16 -SH-D- C:\ProgramData\Modèles
O43 - CFD: 01/12/2010 - 02:25:28 ----D- C:\ProgramData\Skype
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 09/01/2011 - 13:21:40 ---AD- C:\ProgramData\TEMP
O43 - CFD: 22/04/2009 - 09:27:30 -SH-D- C:\ProgramData\Templates
O43 - CFD: 09/01/2011 - 13:10:44 --H-D- C:\ProgramData\~0
O43 - CFD: 24/11/2010 - 17:11:44 ----D- C:\Users\david\AppData\Roaming\Adobe
O43 - CFD: 09/01/2011 - 14:01:04 ----D- C:\Users\david\AppData\Roaming\BitComet
O43 - CFD: 16/12/2010 - 19:08:02 ----D- C:\Users\david\AppData\Roaming\CometNetwork
O43 - CFD: 18/12/2010 - 18:40:12 ----D- C:\Users\david\AppData\Roaming\CometPlayer
O43 - CFD: 22/12/2010 - 07:40:50 ----D- C:\Users\david\AppData\Roaming\Google
O43 - CFD: 19/12/2010 - 14:05:02 ----D- C:\Users\david\AppData\Roaming\Identities
O43 - CFD: 22/12/2010 - 07:22:46 ----D- C:\Users\david\AppData\Roaming\Macromedia
O43 - CFD: 22/04/2009 - 11:12:06 ----D- C:\Users\david\AppData\Roaming\Media Center Programs
O43 - CFD: 13/12/2010 - 18:27:42 -S--D- C:\Users\david\AppData\Roaming\Microsoft
O43 - CFD: 17/12/2010 - 17:25:26 ----D- C:\Users\david\AppData\Roaming\Mozilla
O43 - CFD: 09/01/2011 - 13:19:02 ----D- C:\Users\david\AppData\Roaming\Registry Mechanic
O43 - CFD: 12/12/2010 - 19:42:38 ----D- C:\Users\david\AppData\Roaming\Skype
O43 - CFD: 02/12/2010 - 09:14:48 ----D- C:\Users\david\AppData\Roaming\skypePM
O43 - CFD: 02/01/2011 - 18:51:46 ----D- C:\Users\david\AppData\Roaming\tigerplayer
O43 - CFD: 09/01/2011 - 13:04:38 ----D- C:\Users\david\AppData\Roaming\Uniblue
O43 - CFD: 23/11/2010 - 15:54:28 ----D- C:\Users\david\AppData\Roaming\Windows Live Writer

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.00000000000000000000000088EE1200] - 09/01/2011 - 13:40:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1963881]
O44 - LFC:[MD5.67A7B48436997DB234E134B7A74FCAC2] - 09/01/2011 - 13:40:44 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.A599435C35BEF9188075AEC2D7BE0737] - 09/01/2011 - 09:35:58 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [13392]
O44 - LFC:[MD5.A599435C35BEF9188075AEC2D7BE0737] - 09/01/2011 - 09:35:58 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [13392]
O44 - LFC:[MD5.060218989B544041DE0E037CDF2BB9D1] - 09/01/2011 - 09:28:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log [27967]
O44 - LFC:[MD5.8E73BA2A50D6785D72C541988DAEE5D7] - 05/01/2011 - 17:48:58 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\MEMORY.DMP [283410760]
O44 - LFC:[MD5.52E6DFF52747B183629072B33D6469A7] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [4568]
O44 - LFC:[MD5.070B852B2B8776CAD98699342974299B] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [252562]
O44 - LFC:[MD5.67C8F43A95B6E5B86C0DCBF589919ACA] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [298584]
O44 - LFC:[MD5.2A3C38354D97AEF26E9884BC640CFF54] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [763096]
O44 - LFC:[MD5.C7B057E356A679C6D480170801B749DD] - 31/12/2010 - 16:14:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [1212710]
O44 - LFC:[MD5.FE0B8BACEF2860E40C889178A96DA9CF] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\XELDZ [206312]
O44 - LFC:[MD5.3BC86077F5E421F4AAC4761EA567E263] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\XELDZ.1st [9216]
O44 - LFC:[MD5.15A4F358BFEA2C70CB050D0CF010EEB2] - 19/12/2010 - 14:11:43 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\bootxez [438840]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/12/2010 - 14:07:24 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [0]
O44 - LFC:[MD5.1FDBA4BA7AB558FFD72142961663C8E2] - 19/12/2010 - 14:03:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [264904]
O44 - LFC:[MD5.4994B42B6E7541934AEC7AF3AD5E3751] - 19/12/2010 - 14:01:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\license.rtf [37548]
O44 - LFC:[MD5.FBD309B68E978347FC85FF7460FBE07F] - 19/12/2010 - 14:00:55 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\TSSysprep.log [1313]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/12/2010 - 14:00:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\ativpsrm.bin [0]
O44 - LFC:[MD5.4E093C279DA4478EB3613F9034FC3F1B] - 19/12/2010 - 13:58:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DtcInstall.log [1788]
O44 - LFC:[MD5.4FDC645558189C2105D109BF6AFBA847] - 19/12/2010 - 13:56:02 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\BOOTSECT.BAK [8192]
O44 - LFC:[MD5.C4C4D5B64DA63314943D2DAB1EBC7010] - 19/12/2010 - 13:56:00 RSH-- . (.Pas de propriétaire - Pas de description.) -- C:\bootmgr [383200]
O44 - LFC:[MD5.FC7CAA42D8E62EF236579BCAB82687FB] - 16/12/2010 - 19:20:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [1922]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/12/2010 - 19:08:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\nsreg.dat [0]
O44 - LFC:[MD5.A0D86B8AC93EF95620420C7A24AC5344] - 16/12/2010 - 15:24:24 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\drivers\aswFsBlk.sys [17744]
O44 - LFC:[MD5.7ECC2776638B04553F9A85BD684C3ABF] - 16/12/2010 - 15:24:24 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [165584]
O44 - LFC:[MD5.69823954BBD461A73D69774928C9737E] - 16/12/2010 - 15:24:22 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [23376]
O44 - LFC:[MD5.095ED820A926AA8189180B305E1BCFC9] - 16/12/2010 - 15:24:19 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [46672]
O44 - LFC:[MD5.BD9119468C32B7ECD1E0544D3F286A73] - 16/12/2010 - 15:24:15 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [50768]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 16/12/2010 - 15:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\config.nt [2577]
O44 - LFC:[MD5.62C5E46076F52D394EA0B898FF7B8747] - 16/12/2010 - 15:23:24 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [38848]
O44 - LFC:[MD5.C983EB22398295B00A5A10B681DABC6E] - 16/12/2010 - 15:23:24 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\System32\aswBoot.exe [167592]
O44 - LFC:[MD5.E92811002351A299F760EF30625EA193] - 13/12/2010 - 19:11:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DirectX.log [29554]
O44 - LFC:[MD5.F9F4905664C5B42B49E78EFA12D1A6B6] - 13/12/2010 - 19:10:53 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PùY [20]
O44 - LFC:[MD5.C6E055E483AAFF8911FAB6B5A23D7052] - 13/12/2010 - 18:44:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\DPINST.LOG [9432]

---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \Drivers32\"vidc.tscc"="C:\PROGRA~1\MpcStar\Codecs\tscc\tsccvid.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"tsccvid.dll"="TechSmith Screen Capture Codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)

---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.CB9719B72278864DCA271E214168B1E5] - 22/04/2009 - 06:24:35 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422992]
O58 - SDL:[MD5.A1A4F6FC13234C74FBB35F1B7866BDF6] - 22/04/2009 - 06:24:29 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]
O58 - SDL:[MD5.92CDAABFDA2C936A87C2823CE4A249DA] - 22/04/2009 - 06:24:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]
O58 - SDL:[MD5.EA9072AD99811A397605D3FC78F4B095] - 22/04/2009 - 06:24:04 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14416]
O58 - SDL:[MD5.A1EFDF25677AABC65A1F69F4ADB5CE70] - 22/04/2009 - 06:24:13 ---A- . (.AMD - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [77904]
O58 - SDL:[MD5.E6641B59279513BF828B85281011057F] - 22/04/2009 - 06:24:21 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]
O58 - SDL:[MD5.6524374D1080863ED2894AB58C4E7DDA] - 22/04/2009 - 06:24:04 ---A- . (.AMD - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [23120]
O58 - SDL:[MD5.70E35AA73967E87BEC99D637969CA372] - 22/04/2009 - 06:24:12 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]
O58 - SDL:[MD5.7BEEC1527A46459FCA2099031F91FFDD] - 22/04/2009 - 06:24:19 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]
O58 - SDL:[MD5.A0D86B8AC93EF95620420C7A24AC5344] - 07/09/2010 - 16:47:07 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [17744]
O58 - SDL:[MD5.BD9119468C32B7ECD1E0544D3F286A73] - 07/09/2010 - 16:47:30 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [50768]
O58 - SDL:[MD5.69823954BBD461A73D69774928C9737E] - 07/09/2010 - 16:47:46 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [23376]
O58 - SDL:[MD5.7ECC2776638B04553F9A85BD684C3ABF] - 07/09/2010 - 16:52:03 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [165584]
O58 - SDL:[MD5.095ED820A926AA8189180B305E1BCFC9] - 07/09/2010 - 16:52:25 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [46672]
O58 - SDL:[MD5.04F09923A393E4E0E8453A8F78361E73] - 18/08/2009 - 03:48:06 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [4994560]
O58 - SDL:[MD5.E1659F303F2602E0D393269970A09E35] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 22/04/2009 - 03:51:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 22/04/2009 - 03:51:15 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 22/04/2009 - 05:53:34 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 22/04/2009 - 03:51:16 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 22/04/2009 - 03:51:17 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 22/04/2009 - 03:51:17 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]
O58 - SDL:[MD5.2E9A4971F238DC19551C373586AC8E61] - 22/04/2009 - 06:24:04 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]
O58 - SDL:[MD5.C2D5D96A3FFAA4D5106A693743BDDFF6] - 22/04/2009 - 06:24:08 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70736]
O58 - SDL:[MD5.A2984D22D8337BAE947F63DE9A8305E1] - 22/04/2009 - 06:24:23 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 22/04/2009 - 03:01:07 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]
O58 - SDL:[MD5.A65DED2EBD1C922D311545A2E7697332] - 22/04/2009 - 03:52:05 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.91A15EC4471AA8D2A6392C3BCB2D3DC2] - 22/04/2009 - 06:24:08 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]
O58 - SDL:[MD5.AC958B65CDE27ADFDEC628BF7ECCEB8C] - 22/04/2009 - 06:24:21 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332368]
O58 - SDL:[MD5.0D530FE77DFEC74C7731CCD30D620021] - 22/04/2009 - 06:24:02 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]
O58 - SDL:[MD5.E01CD2302BB3B19A50922A05028D3863] - 22/04/2009 - 06:24:14 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]
O58 - SDL:[MD5.45A1373EA2E7BF21F77AD88180820FBA] - 22/04/2009 - 06:24:12 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]
O58 - SDL:[MD5.B791FD73219AC7C4755FC473BA869D1F] - 22/04/2009 - 06:24:06 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]
O58 - SDL:[MD5.3A5BD4B6BBCDB1FDBED48555366B1589] - 22/04/2009 - 06:24:13 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]
O58 - SDL:[MD5.DE749597787DE1ABE22111F6AD8E7087] - 22/04/2009 - 06:23:59 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]
O58 - SDL:[MD5.A86E92C416C8B31620B08354FE03723E] - 22/04/2009 - 06:24:20 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [236112]
O58 - SDL:[MD5.58218EC6B61B1169CF54AAB0D00F5FE2] - 22/04/2009 - 03:01:10 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\netw5v32.sys [4231168]
O58 - SDL:[MD5.F845566B3C5DABACAFB435F0D07BA0DC] - 22/04/2009 - 06:24:05 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]
O58 - SDL:[MD5.4A5984C5859D951D0B62B7B406AFE357] - 22/04/2009 - 06:24:14 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117328]
O58 - SDL:[MD5.93CF6F974095F7D146AA273F3BF418D7] - 22/04/2009 - 06:24:17 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [142416]
O58 - SDL:[MD5.22889AFB02D1CB51EA1826BCF26AAE29] - 22/04/2009 - 06:23:56 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383504]
O58 - SDL:[MD5.CFCEA1D2F03309E13DFB22F18DA55F37] - 22/04/2009 - 06:23:49 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [105552]
O58 - SDL:[MD5.6C1F93C0760C9F79A1869D07233DF39D] - 14/11/2006 - 17:35:20 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\drivers\rixdptsk.sys [37376]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 22/04/2009 - 01:51:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.2F199E7334D5AA5D8DF6CAF8BDD20ECE] - 22/04/2009 - 06:23:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [40016]
O58 - SDL:[MD5.317FFB05894089AA3EC0BDE66FFF46B1] - 22/04/2009 - 06:23:49 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [77904]
O58 - SDL:[MD5.63D94515F23994DACD2C013BD38FE85A] - 22/04/2009 - 06:23:43 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [21072]
O58 - SDL:[MD5.E7FE0D0691708C8CEE8725211F634E61] - 22/04/2009 - 06:23:42 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [16976]
O58 - SDL:[MD5.013A033EF110AF1AC145F13BAD8592AF] - 22/04/2009 - 06:23:52 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [141904]
O58 - SDL:[MD5.E00FDFAFF025E94F9821153750C35A6D] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [207360]
O58 - SDL:[MD5.BC0C7EA89194C299F051C24119000E17] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [661504]
O58 - SDL:[MD5.CEB4E3B6890E1E42DCA6694D9E59E1A0] - 22/04/2009 - 03:11:52 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [980992]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 22/04/2009 - 02:39:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 22/04/2009 - 02:39:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 22/04/2009 - 02:39:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 22/04/2009 - 02:39:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 22/04/2009 - 02:39:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 22/04/2009 - 02:39:36 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 22/04/2009 - 02:39:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 22/04/2009 - 02:39:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 22/04/2009 - 02:39:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 22/04/2009 - 02:39:16 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 22/04/2009 - 02:39:18 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 22/04/2009 - 02:39:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 22/04/2009 - 02:39:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS [34672]

---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

---\\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWFSBLK.sys - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - C:\Windows\system32\drivers\aswMonFlt.sys - aswMonFlt (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWRDR.sys - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWSP.sys - (.not file.) - aswSP (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP
O64 - Services: CurCS - C:\Windows\system32\Drivers\ASWTDI.sys - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI
O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - C:\Windows\system32\cscsvc.dll (CSC) .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d'E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - C:\Windows\system32\vmstorfltres.dll (storflt) .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - C:\Windows\system32

il est incomplet !!!

enregistre le rapport de zhpdiag sur ton bureau à l'ai de disquette en haut de la fênetre de zhpdiag.

clique sue l'un de ces liens pour aller sur le site d'hébergeur,

clique sur Parcourire, trouve le rapport de zhpdiag (normalement zhpdiag.txt)

puis clique sur envoyé.

une fois le rapport

voila, j ai le raport sur le bureau, mais sur quel lien dois-je cliquer??

svp, aidez moi!!!!! ;-) lol

tu prends n'importe quel lien de site d'hébergeur, à toi de choisir, c'est le même principe sur tous les sites :-)

l'essentiel c'est que j'ai le line du rapport :-)

oui ca j ai bien compris, mais c est ca que je ne réussi pas à faire!!! je dois cliquer ou?? comment je fais?? je n y connais rien en informatique :-(

EDIT :

http://www.terafiles.net/v-105188.html

http://www.terafiles.net/v-105190.html

Bonne année à tous ;-)

O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø