Doute de réinfection

Bonjour,

aprés avoir installé mozilla firefox 4 j'ai remarqué une lenteur de mon netbook lg x110,ainsi ique des coupures de connection; joint rapport zhp diag pour analyse
Rapport de ZHPDiag v1.27.1832 par Nicolas Coolman, Update du 24/03/2011
Run by taky at 24/03/2011 22:37:59
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 4.0 v4.0 (Defaut)

---\\ System Information
Windows XP Professional Service Pack 3 (Build 2600)
Processor: x86 Family 6 Model 28 Stepping 2, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1013 MB (45% free)
System Restore: Activé (Enable)
System drive C: has 12 GB (59%) free of 20 GB

---\\ Logged in mode
Computer Name: TAKY
User Name: taky
All Users Names: taky, SUPPORT_388945a0, HelpAssistant, Administrateur,
Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Documents and Settings\taky\Application Data
%LocalAppData%=C:\Documents and Settings\taky\Local Settings\Application Data
%StartMenu%=C:\Documents and Settings\taky\Menu Démarrer

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 12 Go of 20 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 9 Go of 55 Go)
E:\ CD-ROM drive (Free 0 Go of 0 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 02:34:03.) -- C:\Windows\Explorer.exe [1037824]
[MD5.AF4EAA3B35A2D206E1902D7CA61B958A] - (.Microsoft Corporation - Internet Extensions for Win32.) (.20/12/2010 23:53:04.) -- C:\Windows\System32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 02:34:28.) -- C:\Windows\System32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 18:40:30.) -- C:\Windows\System32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 19:15:53.) -- C:\Windows\System32\drivers\ntfs.sys [574976]



---\\ Processus lancés
[MD5.7207DB389CEAD101251883511A676F91] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336]
[MD5.AC5D343FCF038C851F9DDB893B60FA97] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267944]
[MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]
[MD5.218EEBBED8B771BAEACCB9D775F6D6F2] - (...) -- C:\Program Files\Internet Mobile\Internet Mobile.exe [86016]
[MD5.7AAF26E5CEC48A364FAB61A3505668FB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632]
[MD5.356A22A5871AC798035E4082C0508F76] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856]
[MD5.3BD9A5E2020F84253C21B554AE8E01AB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [641536]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [taky] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60129.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.450] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.448] - (.RealNetworks, Inc. - 6.0.12.448.) -- C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-1060284298-287218729-725345543-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R1 - HKUS\S-1-5-21-1060284298-287218729-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)) -- C:\WINDOWS\system32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WOT\WOT.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WOT\WOT.dll



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\taky\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\taky\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\taky\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\taky\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\taky\Menu Démarrer\Programmes\Update Checker.lnk . (.FileHippo.com.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.not file.) - (.not file.)



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6886.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} () - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_1_0.cab



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{96D76B9C-D96C-4837-B705-E7D9663874F5}: NameServer = 212.217.0.1 212.217.0.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{96D76B9C-D96C-4837-B705-E7D9663874F5}: NameServer = 212.217.0.1 212.217.0.12



---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\WOT\WOT.dll



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: !SASWinLogon . (.SUPERAntiSpyware.com - SUPERAntiSpyware WinLogon Processor.) -- C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.923E02CA12F54B2F086DDB9C683E46E5] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys
O41 - Driver: (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys
O41 - Driver: (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\Windows\System32\DRIVERS\wmiacpi.sys
O41 - Driver: (cmdGuard) . (. - .) - C:\Windows\System32\DRIVERS\cmdguard.sys (.not file.)
O41 - Driver: (cmdHlp) . (. - .) - C:\Windows\System32\DRIVERS\cmdhlp.sys (.not file.)



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EE6097DD-05F4-4178-9719-D3170BF098E8}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Defraggler - (.Piriform.) [HKLM] -- Defraggler
O42 - Logiciel: F.lux - (.Pas de propriétaire.) [HKCU] -- Flux
O42 - Logiciel: FileHippo.com Update Checker - (.Pas de propriétaire.) [HKLM] -- FileHippo.com
O42 - Logiciel: Glary Utilities 2.33.0.1158 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
O42 - Logiciel: Internet Mobile - (.Huawei Technologies Co.,Ltd.) [HKLM] -- Internet Mobile
O42 - Logiciel: Java(TM) 6 Update 24 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216024FF}
O42 - Logiciel: K-Lite Codec Pack 6.6.6 (Full) - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 6.0 Parser (KB933579) - (.Microsoft Corporation.) [HKLM] -- {0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox 4.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 4.0 (x86 fr)
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI-E NIC Driver - (.Realtek.) [HKLM] -- {C9BED750-1211-4480-B1A5-718A3BE15525}
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {D4EEC21C-04F0-4CF4-8078-82C11E38EF11}
O42 - Logiciel: Real Alternative 2.0.2 - (.Pas de propriétaire.) [HKLM] -- RealAlt_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Revo Uninstaller 1.91 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller
O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Seven Remix XP 2.41 - (.NiwradSoft.) [HKLM] -- Seven Remix XP
O42 - Logiciel: Speccy - (.Piriform.) [HKLM] -- Speccy
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: WOT for Internet Explorer - (.WOT Services Oy.) [HKLM] -- {1D10C273-3F95-42A2-8371-AB6B1F59821B}
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live OneCare safety scanner - (.Pas de propriétaire.) [HKLM] -- Windows Live OneCare safety scanner

---\\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\Against Intuition]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Avira]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ComodoGroup]
[HKCU\Software\FileHippo.com]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GlarySoft]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lavalys]
[HKCU\Software\MONOGRAM]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MediaInfo]
[HKCU\Software\Michael Herf]
[HKCU\Software\Netscape]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\SUPERAntiSpyware.com]
[HKCU\Software\Sysinternals]
[HKCU\Software\VSRevoGroup]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\madFlac]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Avira]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Codec Tweak Tool]
[HKLM\Software\ComodoGroup]
[HKLM\Software\Creative Tech]
[HKLM\Software\GNU]
[HKLM\Software\GeekBuddy]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Huawei technologies]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KLCodecPack]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NiwradSoft Shell Pack]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RTLSetup]
[HKLM\Software\RealAlternative]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SUPERAntiSpyware.com]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secunia]
[HKLM\Software\Set8187SE]
[HKLM\Software\TuneUp]
[HKLM\Software\Uniblue]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\X-AVCSD]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05/02/2011 - 15:47:28 - [114255585] ----D- C:\Program Files\Adobe
O43 - CFD: 22/01/2011 - 12:51:48 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 08/01/2011 - 02:10:14 - [112124683] ----D- C:\Program Files\Avira
O43 - CFD: 01/03/2011 - 08:46:54 - [3653664] ----D- C:\Program Files\CCleaner
O43 - CFD: 17/03/2011 - 17:32:56 - [3917536] ----D- C:\Program Files\Defraggler
O43 - CFD: 21/03/2011 - 21:44:08 - [121353372] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 16/01/2011 - 16:16:18 - [381791] ----D- C:\Program Files\FileHippo.com
O43 - CFD: 26/01/2011 - 13:34:18 - [1672927] ----D- C:\Program Files\Free Hide Folder
O43 - CFD: 15/03/2011 - 08:14:44 - [19517547] ----D- C:\Program Files\Glary Utilities
O43 - CFD: 09/01/2011 - 12:22:50 - [39376957] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 07/01/2011 - 21:17:50 - [96760] ----D- C:\Program Files\Intel
O43 - CFD: 19/03/2011 - 13:34:06 - [5665384] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 22/03/2011 - 18:42:32 - [25972739] ----D- C:\Program Files\Internet Mobile
O43 - CFD: 17/02/2011 - 16:28:28 - [90669576] ----D- C:\Program Files\Java
O43 - CFD: 08/01/2011 - 04:27:12 - [47254466] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 09/01/2011 - 07:24:52 - [4933044] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 08/01/2011 - 03:02:14 - [226432] ----D- C:\Program Files\Microsoft
O43 - CFD: 07/01/2011 - 18:48:44 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 18/02/2011 - 21:47:06 - [38371963] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 10/01/2011 - 08:25:40 - [10374874] ----D- C:\Program Files\Movie Maker
O43 - CFD: 24/03/2011 - 16:15:16 - [32938139] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 09/01/2011 - 07:20:02 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 07/01/2011 - 18:44:40 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 09/01/2011 - 07:15:28 - [6849] ----D- C:\Program Files\MSXML 6.0
O43 - CFD: 09/01/2011 - 07:49:48 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 19/03/2011 - 13:43:48 - [6861497] ----D- C:\Program Files\Outlook Express
O43 - CFD: 30/01/2011 - 15:16:12 - [76322555] ----D- C:\Program Files\QuickTime
O43 - CFD: 01/02/2011 - 15:29:26 - [22758554] ----D- C:\Program Files\Real Alternative
O43 - CFD: 09/01/2011 - 12:22:50 - [83304570] ----D- C:\Program Files\Realtek
O43 - CFD: 09/01/2011 - 09:09:56 - [4227532] ----D- C:\Program Files\REALTEK RTL8187SE Wireless LAN Driver
O43 - CFD: 09/01/2011 - 07:19:52 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 07/01/2011 - 18:46:22 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 23/03/2011 - 10:52:04 - [4234128] ----D- C:\Program Files\Speccy
O43 - CFD: 19/03/2011 - 11:17:38 - [46920379] ----D- C:\Program Files\SUPERAntiSpyware
O43 - CFD: 07/01/2011 - 18:55:04 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 09/01/2011 - 13:34:30 - [6770777] ----D- C:\Program Files\VS Revo Group
O43 - CFD: 08/01/2011 - 03:02:06 - [45806173] ----D- C:\Program Files\Windows Live
O43 - CFD: 19/03/2011 - 08:23:32 - [74382239] ----D- C:\Program Files\Windows Live Safety Center
O43 - CFD: 08/01/2011 - 03:01:46 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 16/01/2011 - 11:13:40 - [3534189] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 16/01/2011 - 11:13:38 - [3944703] ----D- C:\Program Files\Windows NT
O43 - CFD: 07/01/2011 - 18:46:28 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 05/02/2011 - 17:22:54 - [1671840] ----D- C:\Program Files\WOT
O43 - CFD: 07/01/2011 - 18:48:44 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 24/03/2011 - 22:38:04 - [3587064] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 05/02/2011 - 15:47:36 - [3515885] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 22/01/2011 - 12:52:06 - [54774793] ----D- C:\Program Files\Fichiers Communs\Apple
O43 - CFD: 09/01/2011 - 12:22:32 - [2037602] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 17/02/2011 - 16:29:02 - [1247175] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 08/01/2011 - 03:01:54 - [14501951] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 07/01/2011 - 18:46:02 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 07/01/2011 - 18:46:02 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 07/01/2011 - 19:40:42 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 19/03/2011 - 13:43:46 - [7065269] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 08/01/2011 - 02:53:56 - [34131202] ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 05/02/2011 - 15:48:14 - [240592] ----D- C:\Documents and Settings\taky\Application Data\Adobe
O43 - CFD: 16/01/2011 - 16:44:16 - [1069] ----D- C:\Documents and Settings\taky\Application Data\AeroSnapApp
O43 - CFD: 24/01/2011 - 12:56:04 - [0] ----D- C:\Documents and Settings\taky\Application Data\Apple Computer
O43 - CFD: 08/01/2011 - 02:11:44 - [0] ----D- C:\Documents and Settings\taky\Application Data\Avira
O43 - CFD: 26/01/2011 - 00:32:20 - [0] ----D- C:\Documents and Settings\taky\Application Data\BatteryBar
O43 - CFD: 19/03/2011 - 07:45:44 - [1005720] ----D- C:\Documents and Settings\taky\Application Data\GlarySoft
O43 - CFD: 07/01/2011 - 18:55:06 - [0] ----D- C:\Documents and Settings\taky\Application Data\Identities
O43 - CFD: 24/03/2011 - 16:36:58 - [1037] ----D- C:\Documents and Settings\taky\Application Data\Macromedia
O43 - CFD: 08/01/2011 - 02:57:46 - [3188] ----D- C:\Documents and Settings\taky\Application Data\Malwarebytes
O43 - CFD: 05/02/2011 - 15:48:14 - [1791189] -S--D- C:\Documents and Settings\taky\Application Data\Microsoft
O43 - CFD: 07/01/2011 - 20:54:12 - [15354033] ----D- C:\Documents and Settings\taky\Application Data\Mozilla
O43 - CFD: 08/01/2011 - 18:55:00 - [90952] ----D- C:\Documents and Settings\taky\Application Data\Notepad++
O43 - CFD: 20/02/2011 - 11:55:18 - [0] ----D- C:\Documents and Settings\taky\Application Data\Real
O43 - CFD: 08/01/2011 - 07:33:30 - [36279456] ----D- C:\Documents and Settings\taky\Application Data\Sun
O43 - CFD: 16/01/2011 - 15:15:52 - [75724435] ----D- C:\Documents and Settings\taky\Application Data\SUPERAntiSpyware.com
O43 - CFD: 14/01/2011 - 07:58:52 - [64186] ----D- C:\Documents and Settings\taky\Application Data\TuneUp Software
O43 - CFD: 09/02/2011 - 08:39:30 - [0] ----D- C:\Documents and Settings\taky\Application Data\Uniblue
O43 - CFD: 05/02/2011 - 15:48:14 - [14199341] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Adobe
O43 - CFD: 16/01/2011 - 16:44:16 - [1476] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\AeroSnapApp
O43 - CFD: 22/01/2011 - 12:51:50 - [0] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Apple
O43 - CFD: 22/01/2011 - 12:51:12 - [10007] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Apple Computer
O43 - CFD: 22/03/2011 - 21:41:52 - [326040219] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Microsoft
O43 - CFD: 07/01/2011 - 20:53:54 - [55415290] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Mozilla
O43 - CFD: 09/02/2011 - 08:38:44 - [0] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\PackageAware
O43 - CFD: 05/02/2011 - 15:48:14 - [0] ----D- C:\Documents and Settings\taky\Local Settings\Application Data\Temp



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.58EF1200F915817C00FCFD7F2CF01200] - 24/03/2011 - 22:32:34 ---A- . (...) -- C:\WINDOWS\wiadebug.log [159]
O44 - LFC:[MD5.58EF1200F915817C00FCFD7F2CF01200] - 24/03/2011 - 22:32:33 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.58EF1200F915817C00FCFD7F2CF01200] - 24/03/2011 - 22:24:13 ---A- . (...) -- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt [7280]
O44 - LFC:[MD5.58EF1200F915817C00FCFD7F2CF01200] - 24/03/2011 - 20:23:00 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [338922]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/03/2011 - 20:22:07 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.BCA57ED8CDDF0D76E293DC0EFF93CC01] - 24/03/2011 - 20:21:44 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.AA75C1DD08A3364210FE0238E8FD3280] - 24/03/2011 - 19:34:04 ---A- . (...) -- C:\WINDOWS\setupapi.log [3459]
O44 - LFC:[MD5.58EF1200F915817C00FCFD7F2CF01200] - 24/03/2011 - 19:19:49 ---A- . (...) -- C:\WINDOWS\Sti_Trace.log [0]
O44 - LFC:[MD5.3A9A54E9FF21A4825E9B40A89674F085] - 24/03/2011 - 19:17:01 ---A- . (...) -- C:\WINDOWS\setupact.log [60]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/03/2011 - 19:17:01 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.0E102090B70D267FAE139E5132DB6FC2] - 24/03/2011 - 17:35:22 ---A- . (...) -- C:\DelFixSuppr.txt [1193]
O44 - LFC:[MD5.65B95AD2E0BB9A6BFCA7BC0D2FC2ACC4] - 22/03/2011 - 18:41:58 ---A- . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\WINDOWS\System32\drivers\mod7700.sys [872192]
O44 - LFC:[MD5.4183BE439981BBC77EF2C1D66629F124] - 22/03/2011 - 18:41:58 ---A- . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys [24448]
O44 - LFC:[MD5.48E66DBB523A52D6320B0DF70B7E213C] - 22/03/2011 - 18:41:58 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ewusbfake.sys [103168]
O44 - LFC:[MD5.07853191B1BDEE5B39BE4CFCFE3B9AD4] - 22/03/2011 - 18:41:58 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [101376]
O44 - LFC:[MD5.330A8465CA49BCA1911D6BC8A8AF18AD] - 22/03/2011 - 18:41:58 ---A- . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys [100992]
O44 - LFC:[MD5.E58C6DD207CF34953E730C1791D08AFB] - 22/03/2011 - 15:52:09 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat [67646]
O44 - LFC:[MD5.F673CC83434F80F98C9BA28849F9C8CE] - 22/03/2011 - 15:52:09 ---A- . (...) -- C:\WINDOWS\System32\perfc00C.dat [80946]
O44 - LFC:[MD5.003D0E41F074A308CB49322F712E53C8] - 22/03/2011 - 15:52:09 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat [432690]
O44 - LFC:[MD5.70DFC7E8652A54B346CF5DD1DBE9A078] - 22/03/2011 - 15:52:09 ---A- . (...) -- C:\WINDOWS\System32\perfh00C.dat [501138]
O44 - LFC:[MD5.857EED616F65BA77B93578C33BFA635D] - 22/03/2011 - 15:52:08 ---A- . (...) -- C:\WINDOWS\System32\PerfStringBackup.INI [1094606]
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 21/03/2011 - 21:47:17 ---A- . (...) -- C:\WINDOWS\system.ini [227]
O44 - LFC:[MD5.8715347D6B7B2E3A7CFE5ADF2D510CE3] - 20/03/2011 - 15:09:09 ---A- . (...) -- C:\WINDOWS\win.ini [477]
O44 - LFC:[MD5.824212B52ECF32AB87B10E4CE5AA32C9] - 19/03/2011 - 07:25:23 -SHA- . (...) -- C:\WINDOWS\Thumbs.db [7680]
O44 - LFC:[MD5.FEC9FE87C7969E8C3DDE17A15101742C] - 14/03/2011 - 17:33:16 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [2206]
O44 - LFC:[MD5.882A111F202B62C3B8E22747D04542FB] - 06/03/2011 - 12:25:19 ---A- . (...) -- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem #2.txt [6038]



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.486A6F1DBDF1CDFE81744CE180AD5032] - 24/03/2011 - 17:35:27 ---A- - C:\WINDOWS\Prefetch\DELFIX.EXE-3404818C.pf
O45 - LFCP:[MD5.6246A9F11FB444DD020B48AC5FD10B1C] - 24/03/2011 - 17:35:32 ---A- - C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf
O45 - LFCP:[MD5.AACE8791F85FC2340547A234A274AA9C] - 24/03/2011 - 18:05:16 ---A- - C:\WINDOWS\Prefetch\XPNETDIAG.EXE-1275668B.pf
O45 - LFCP:[MD5.BBC8E0C4470A0A2971456191809490BF] - 24/03/2011 - 18:08:02 ---A- - C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf
O45 - LFCP:[MD5.D07CD6C1EBA13955333C44550B06B8D3] - 24/03/2011 - 18:08:45 ---A- - C:\WINDOWS\Prefetch\AVCENTER.EXE-1A970FA0.pf
O45 - LFCP:[MD5.A65CB997089492B313071492531F051F] - 24/03/2011 - 18:10:48 ---A- - C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf
O45 - LFCP:[MD5.2611A10D8E8BD9B80D1615C84DBBA813] - 24/03/2011 - 18:59:39 ---A- - C:\WINDOWS\Prefetch\CCLEANER.EXE-0BCE437C.pf
O45 - LFCP:[MD5.195D455C68543A8FD6A588F28079207D] - 24/03/2011 - 19:00:48 ---A- - C:\WINDOWS\Prefetch\INTEGRATOR.EXE-3A1D428D.pf
O45 - LFCP:[MD5.A0C1037A59C514021DE2B3BD5491DDA5] - 24/03/2011 - 19:12:07 ---A- - C:\WINDOWS\Prefetch\JUNKCLEANER.EXE-33FB299F.pf
O45 - LFCP:[MD5.DC76EF6F48ADD8B1BCE7F8CE0DAC87DD] - 24/03/2011 - 19:13:08 ---A- - C:\WINDOWS\Prefetch\REGREPAIR.EXE-0CD8A22A.pf
O45 - LFCP:[MD5.301C2BC4A46F2DB43E3C95F837E1A17E] - 24/03/2011 - 19:13:47 ---A- - C:\WINDOWS\Prefetch\WINSTD.EXE-1C08535E.pf
O45 - LFCP:[MD5.91EF50BCE626459CA9CB679243B2F922] - 24/03/2011 - 19:13:50 ---A- - C:\WINDOWS\Prefetch\CHKDSK.EXE-2CC4C59D.pf
O45 - LFCP:[MD5.5384E4276AD44671C46C7B78DD68D711] - 24/03/2011 - 19:14:41 ---A- - C:\WINDOWS\Prefetch\REVOUNINSTALLER.EXE-38379543.pf
O45 - LFCP:[MD5.49E0AA8B693FCF7C838F18E171F23EDB] - 24/03/2011 - 19:16:28 ---A- - C:\WINDOWS\Prefetch\UPDATECHECKER.EXE-16A4997A.pf
O45 - LFCP:[MD5.A3631796735A8CCBB9C13E9A1CDEA431] - 24/03/2011 - 19:17:09 ---A- - C:\WINDOWS\Prefetch\CLEANMGR.EXE-1F86EA8E.pf
O45 - LFCP:[MD5.18D52ADBC31D2091559A19ADCA8A80F9] - 24/03/2011 - 19:25:08 ---A- - C:\WINDOWS\Prefetch\DEFRAGGLER.EXE-07D56010.pf
O45 - LFCP:[MD5.5A915DC1650E0AE89F3230264DA49B1D] - 24/03/2011 - 19:34:01 ---A- - C:\WINDOWS\Prefetch\SPECCY.EXE-327EBD68.pf
O45 - LFCP:[MD5.6A1F2104E6E4972B116E6B797134716E] - 24/03/2011 - 19:34:10 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
O45 - LFCP:[MD5.3D0AB8A2380393EC2C6FF32F0E5B5865] - 24/03/2011 - 19:34:12 ---A- - C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
O45 - LFCP:[MD5.6E40B7499807E8F05CA30423D5FF8D1D] - 24/03/2011 - 20:23:07 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.92E67A66BB2C4C0EC2907E94EF9E7BBD] - 24/03/2011 - 20:23:08 ---A- - C:\WINDOWS\Prefetch\INTERNET MOBILE.EXE-03B6BAD5.pf
O45 - LFCP:[MD5.0857108E0675602CE970F1769B3826E4] - 24/03/2011 - 20:25:49 ---A- - C:\WINDOWS\Prefetch\WMIADAP.EXE-2DF425B2.pf
O45 - LFCP:[MD5.CCE095642667671E800EEC3D2EBAC04B] - 24/03/2011 - 20:49:27 ---A- - C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf
O45 - LFCP:[MD5.CC34816CBA056F57BB5D2144FAB85DAE] - 24/03/2011 - 21:28:10 ---A- - C:\WINDOWS\Prefetch\SUPERANTISPYWARE.EXE-07994D9B.pf
O45 - LFCP:[MD5.2F0CDD7B7CA53C3E80FED51912AA4E71] - 24/03/2011 - 21:43:15 ---A- - C:\WINDOWS\Prefetch\layout.ini
O45 - LFCP:[MD5.392E112E0EF2D89E46474CCF60B478C3] - 24/03/2011 - 21:47:25 ---A- - C:\WINDOWS\Prefetch\SSUPDATE.EXE-1CC35C28.pf
O45 - LFCP:[MD5.46B40BC28FF83D4AD69D39391219D991] - 24/03/2011 - 21:58:01 ---A- - C:\WINDOWS\Prefetch\NIWRAD~2.SCR-2501A4C7.pf
O45 - LFCP:[MD5.D959009B09167117A5E8049E2F3E3281] - 24/03/2011 - 22:28:33 ---A- - C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-15EDC9DD.pf
O45 - LFCP:[MD5.569B77E4C6B23848345AFF2DE0C72D8E] - 24/03/2011 - 22:32:43 ---A- - C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf
O45 - LFCP:[MD5.2F1A035E2F52AE9F54FA89FADCFE352F] - 24/03/2011 - 22:32:51 ---A- - C:\WINDOWS\Prefetch\AVWSC.EXE-0283F9DD.pf
O45 - LFCP:[MD5.6D87168BF40666E9E613D32E3E643CFE] - 24/03/2011 - 22:36:34 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.EXE-04A8CF31.pf
O45 - LFCP:[MD5.0025F1D10926EF87C9DDEC7411A899E6] - 24/03/2011 - 22:36:35 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG2.TMP-00243B89.pf
O45 - LFCP:[MD5.1837387E6B51D27859CC8CA9A0889994] - 24/03/2011 - 22:36:57 ---A- - C:\WINDOWS\Prefetch\ZHPDIAG.EXE-021B7932.pf
O45 - LFCP:[MD5.2DC3D40B989137C1D1A7CB69FECC5C8D] - 24/03/2011 - 22:38:03 ---A- - C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
O45 - LFCP:[MD5.3F931BB4BC194545D8AB255BC64860AC] - 24/03/2011 - 22:38:03 ---A- - C:\WINDOWS\Prefetch\SCHTASKS.EXE-0CBF6A11.pf



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpnsvr.exe" [Enabled] .(.Microsoft Corporation - Microsoft DirectPlay8 Server.) -- C:\WINDOWS\system32\dpnsvr.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dxdiag.exe" [Enabled] .(.Microsoft Corporation - Outil de diagnostic Microsoft DirectX.) -- C:\WINDOWS\system32\dxdiag.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dpvsetup.exe" [Enabled] .(.Microsoft Corporation - Microsoft DirectPlay Voice Test.) -- C:\WINDOWS\system32\dpvsetup.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\System32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\System32\lameACM.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec 1.3.0" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98.2" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \drivers.desc\"ir41_32.ax"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \drivers.desc\"yv12vfw.dll"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\WINDOWS\System32\yv12vfw.dll



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\ctfmon.exe [Key] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=0



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.267FC636801EDC5AB28E14036349E3BE] - 18/11/2009 - 06:16:00 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\Ambfilt.sys [1691480]
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 17/06/2010 - 13:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]
O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 06/12/2010 - 07:48:06 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [61960]
O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 17/06/2010 - 13:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360]
O58 - SDL:[MD5.DA39805E2BAD99D37FCE9477DD94E7F2] - 17/02/2011 - 12:51:36 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [135096]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 24/08/2001 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 24/08/2001 - 12:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776]
O58 - SDL:[MD5.4183BE439981BBC77EF2C1D66629F124] - 09/08/2007 - 04:13:04 ---A- . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\WINDOWS\system32\drivers\ewdcsc.sys [24448]
O58 - SDL:[MD5.48E66DBB523A52D6320B0DF70B7E213C] - 17/03/2008 - 11:56:22 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\system32\drivers\ewusbfake.sys [103168]
O58 - SDL:[MD5.07853191B1BDEE5B39BE4CFCFE3B9AD4] - 17/03/2008 - 11:03:46 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\WINDOWS\system32\drivers\ewusbmdm.sys [101376]
O58 - SDL:[MD5.330A8465CA49BCA1911D6BC8A8AF18AD] - 22/01/2008 - 15:09:10 ---A- . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\WINDOWS\system32\drivers\ewusbnet.sys [100992]
O58 - SDL:[MD5.DA91F5385CFC8BA0F110F2FDE112B563] - 07/02/2006 - 08:04:34 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\drivers\ialmnt5.sys [1399615]
O58 - SDL:[MD5.48846B31BE5A4FA662CCFDE7A1BA86B9] - 15/02/2008 - 12:12:06 ---A- . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\system32\drivers\igxpmp32.sys [5854752]
O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 17:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys [20952]
O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 17:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys [38224]
O58 - SDL:[MD5.65B95AD2E0BB9A6BFCA7BC0D2FC2ACC4] - 16/03/2008 - 14:47:32 ---A- . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\WINDOWS\system32\drivers\mod7700.sys [872192]
O58 - SDL:[MD5.C7D9F9717916B34C1B00DD4834AF485C] - 18/11/2009 - 06:17:00 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\drivers\Monfilt.sys [1395800]
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 24/08/2001 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032]
O58 - SDL:[MD5.D1B956288363CC67EDBB34C578CC5374] - 12/02/2007 - 18:26:30 ---A- . (.Pas de propriétaire - 1.00.) -- C:\WINDOWS\system32\drivers\ntiopnp.sys [12800]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 24/08/2001 - 12:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792]
O58 - SDL:[MD5.C1AD738D9734C33F3813712FE7FBF262] - 28/10/2007 - 23:09:22 ---A- . (...) -- C:\WINDOWS\system32\drivers\rdummy.sys [4096]
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 24/08/2001 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032]
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 24/08/2001 - 12:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032]
O58 - SDL:[MD5.75A0FB48EFAAC5D8DCD68E15CBA76691] - 07/01/2011 - 23:40:06 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100/1000 NDIS 5.1 Driver.) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys [234728]
O58 - SDL:[MD5.0503EB6F3359E1C6E4C46FEF376405EF] - 02/11/2010 - 18:36:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [6188648]
O58 - SDL:[MD5.4F32B232374D49563884DE411F090A05] - 09/01/2011 - 09:08:59 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8187S PCIE NDIS Driver.) -- C:\WINDOWS\system32\drivers\rtl8187Se.sys [314880]
O58 - SDL:[MD5.F1ED9FFA59C369E72BC53A7631346F61] - 07/01/2011 - 21:34:44 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\WINDOWS\system32\drivers\RtsUStor.sys [193640]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/04/2008 - 16:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 17/06/2010 - 13:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520]
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 24/08/2001 - 12:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 24/08/2001 - 12:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 24/08/2001 - 12:00:00 ---A- . (...) -- C:\W