Virus : physical driveo

Résolu
nathalie -  
Smart91 Messages postés 30146 Statut Contributeur sécurité -
Bonjour,
voila deux quelques jours en allumant mon pc j ai le virus physical driveo et je n'arrive pas a le retirer

51 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

Le virus signalé, 'physical driveo', se manifeste après le démarrage et pose des difficultés de suppression sur Windows 7 / Internet Explorer 8, nécessitant une approche de nettoyage et des outils spécialisés. Pour y parvenir, plusieurs réponses préconisent de désinstaller les antivirus (McAfee et Norton) pour éviter les conflits et de maintenir Avast, puis d'utiliser ZHPFix avec un script fourni pour éliminer les traces. D'autres recommandations préconisent MBAM et la quarantaine, AD-Remover et TDSSKiller selon le cas, puis l'analyse des rapports pour identifier les composants résiduels et les virus tenaces. La progression inclut la génération de rapports (par exemple TDSSKiller ou ZHPFix) et la possibilité de relancer le nettoyage sur un autre ordinateur si des restes persistent.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Relance MBAM et vide la quarantaine.
    Ensuite tu vas faire ceci:
    - Rends-toi à cette adresse afin de télécharger AD-Remover (créé par C_XX) : http://www.teamxscript.org/adremoverTelechargement.html
    - Clique sur TÉLÉCHARGER et enregistre-le sur ton bureau.
    - Déconnecte toi et ferme toutes les applications en cours
    - Double clique sur le fichier d'installation de AD-Remover, le programme s'installera automatiquement.
    - Au menu principal choisi l'option "Nettoyage" et tape sur [entrée] .
    - Laisse travailler l'outil et ne touche à rien ...
    - Poste le rapport qui apparait à la fin. (Le rapport est sauvegardé aussi sous C:\Ad-report.log)
    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Tu peux toujour poster le rapport dans la réponse

    Smart
    1
  2. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    C'est mieux. mias il y des restes que l'on va supprimer.
    J'ai également remarquer tu avez plusieurs antivirus
    AVast
    McAffee
    Norton et des restes de Panda
    Cela ne sert à rien sinon d'avoir des conflits et ralentir ton PC
    McAffe et Norton étant payant je te conseille de garder Avast et d'avoir la version 6
    Il faut que tu les désinstalles.
    Pour Panda je vais supprimer les restes dans mon script:

    - Ferme toutes tes applications en cours
    - Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
    Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
    Copie/colle les lignes en gras suivantes :

    ----------------------------------------------------------
    O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
    O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
    [HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France]
    [HKCU\Software\AppDataLow\Software\Softonic_France]
    [MD5.E4CC410BD005958125CD87C5F6E66371] [SPRF] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Users\pcbs\AppData\Local\Temp\tbDVD0.dll [3908192]
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
    [HKCU\Software\AppDataLow\Software\Softonic_France]
    [HKCU\Software\Panda Security]
    [HKCU\Software\Panda Software]
    [HKLM\Software\Panda Security]
    [HKLM\Software\Panda Software]
    O43 - CFD: 14/04/2011 - 14:42:40 - [0] ----D- C:\Program Files\Panda Security
    O43 - CFD: 14/04/2011 - 14:42:38 - [0] ----D- C:\Program Files\Common Files\Panda Security
    O43 - CFD: 07/04/2011 - 18:21:42 - [2730] ----D- C:\ProgramData\Panda Security
    O43 - CFD: 14/04/2011 - 14:42:40 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Panda Security
    O43 - CFD: 07/04/2011 - 18:22:08 - [62342] ----D- C:\Users\pcbs\Appdata\Local\Panda Security
    EmpyTemp
    EmptyFlash

    ----------------------------------------------------------
    - Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
    - Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
    - Clique sur le bouton « GO » pour le lancer le nettoyage
    - Copie/colle la totalité du rapport dans ta prochaine réponse

    Smart
    "Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)
    1
    1. natalium
       
      Rapport de ZHPFix 1.12.3280 par Nicolas Coolman, Update du 02/05/2011
      Fichier d'export Registre : C:\ZHPExportRegistry-06-05-2011-18-57-18.txt
      Run by pcbs at 06/05/2011 18:57:18
      Windows 7 Home Premium Edition, 32-bit (Build 7600)
      Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

      ========== Module(s) mémoire ==========
      C:\Users\pcbs\AppData\Local\Temp\tbDVD0.dll [3908192] => Supprimé et mis en quarantaine

      ========== Clé(s) du Registre ==========
      HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France => Clé supprimée avec succès
      HKCU\Software\AppDataLow\Software\Softonic_France => Clé supprimée avec succès
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352} => Clé supprimée avec succès
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352} => Clé supprimée avec succès
      HKCU\Software\Panda Security => Clé supprimée avec succès
      HKCU\Software\Panda Software => Clé supprimée avec succès
      HKLM\Software\Panda Security => Clé supprimée avec succès
      HKLM\Software\Panda Software => Clé supprimée avec succès

      ========== Valeur(s) du Registre ==========
      O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Valeur supprimée avec succès
      O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Valeur absente

      ========== Dossier(s) ==========
      Dossiers Flash Cookies supprimés : 441

      ========== Fichier(s) ==========
      Fichiers Flash Cookies supprimés : 224

      ========== Autre ==========
      EmpyTemp => Format Non supporté


      ========== Récapitulatif ==========
      1 : Module(s) mémoire
      8 : Clé(s) du Registre
      2 : Valeur(s) du Registre
      1 : Dossier(s)
      1 : Fichier(s)
      1 : Autre


      End of the scan
      0
  3. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Bonjour,

    * Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
    * Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
    * Clique sur [Start Scan] pour démarrer l'analyse.
    * Si des éléments sont trouvés, clique sur [Continue] puis sur [Reboot Now]
    * Un rapport s'ouvrira au redémarrage de l'ordinateur.
    * Copie/colle son contenu dans ta prochaine réponse.
    Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

    Smart
    0
    1. natalium
       
      j ai lancé le scan avec tddskiller et il m'a trouver aucun erreur
      0
  4. nathalie
     
    2011/04/11 14:31:09.0437 TDSS rootkit removing tool 2.4.1.2 Aug 16 2010 09:46:23
    2011/04/11 14:31:09.0438 ================================================================================
    2011/04/11 14:31:09.0438 SystemInfo:
    2011/04/11 14:31:09.0438
    2011/04/11 14:31:09.0438 OS Version: 6.1.7600 ServicePack: 0.0
    2011/04/11 14:31:09.0438 Product type: Workstation
    2011/04/11 14:31:09.0438 ComputerName: PCBS-PC
    2011/04/11 14:31:09.0438 UserName: pcbs
    2011/04/11 14:31:09.0438 Windows directory: C:\Windows
    2011/04/11 14:31:09.0438 System windows directory: C:\Windows
    2011/04/11 14:31:09.0438 Processor architecture: Intel x86
    2011/04/11 14:31:09.0438 Number of processors: 4
    2011/04/11 14:31:09.0438 Page size: 0x1000
    2011/04/11 14:31:09.0438 Boot type: Normal boot
    2011/04/11 14:31:09.0439 ================================================================================
    2011/04/11 14:31:09.0667 Initialize success
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Tu es sûr que le rapport est complet ?
    Tu as bien suivi la procédure donnée ?

    Si oui fais ceci:

    Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et suis les instructions.

    /!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »

    N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.
    - Double clique sur le raccourci ZHPDiag sur ton Bureau pour le lancer.
    (/!\L'outil a créé 2 icônes ZHPDiag et ZHPFix)
    - Clique sur la loupe pour lancer l'analyse.
    - Laisse l'outil travailler, il peut être assez long.
    - Ferme ZHPDiag en fin d'analyse.
    - Pour transmettre le rapport clique sur ce lien : http://www.cijoint.fr/
    - Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
    - Sélectionne le fichier ZHPDiag.txt.
    - Clique sur "Cliquez ici pour déposer le fichier".
    - Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.
    - Copie ce lien dans ta réponse.

    Smart
    0
    1. natalium
       
      zhp je bloque il me dit qu il y a un autre programme qui bloque
      0
    2. natalium
       
      il me di le processus ne peut pas acceder au fichier car ce fichier est utilise par un autre processus
      0
    3. nathalie
       
      j'envoi quand meme le fichier
      0
  7. nathalie
     
    http://www.cijoint.fr/cjlink.php?file=cj201104/cijdhkBnA8.txt
    0
  8. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Ce n'est pas le bon rapport
    Tu n'as répondu concernant TDSSKiller
    Est-ce que tu as bien lancé ZHPDiag en tant qu'adiministrateur
    Si c'est le cas peux-tu me dire à quel moment ZHPDiag plante
    Ferme bien tous les autres applications quand tu le lances

    Smart
    0
    1. natalium
       
      pour tdsskiller j ai fai comme tu ma di
      0
    2. natalium
       
      ca bloque tjrs
      0
    3. natalium
       
      tjrs la meme chose il bloque pourtant il n y a d autres application en marche
      0
  9. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    OK. Cela bloque mais à quel niveau, c'est marqué en bas de la fenêtre de scan

    Smart
    0
  10. natalium
     
    alors c est marqué recherche des masters boot record infection. a 80%
    0
  11. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Relance ZHPDiag, tu cliques sur le tournevix et tu déconches la ligne avec O80 entre parenthèses et tu refais un scan et tu poste le rapport via cijoint

    Smart
    0
  12. natalium
     
    http://www.cijoint.fr/cjlink.php?file=cj201104/cijgS8VXKV.txt
    0
  13. natalium
     
    je ne sai pas si c'est le bon scan car j'essaye de le faire avec l'autre fichier mais sur le site cijoint.fr il me le prends pas. peut etre il es trop grand.
    0
  14. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Ce n'est pas le bon rapport
    Essaie de le poster via ce site: https://www.luanagames.com/index.fr.html
    Je te rappelle que le rapport se trouve ici:
    C:\Program Files\ZHPDiag\ZHPDiag.txt

    Ensuite essaie de repasser TDSSKiller, en suivant bien les instructions
    * Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")

    * Clique sur [Start Scan] pour démarrer l'analyse.

    * Si des éléments sont trouvés, clique sur [Continue] puis sur [Reboot Now]

    * Un rapport s'ouvrira au redémarrage de l'ordinateur.

    * Copie/colle son contenu dans ta prochaine réponse
    .
    Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

    Smart
    0
  15. natalium
     
    toujours impossible de poster sur le site http://up.sur-la-toile.com/heberger
    0
  16. natalium
     
    Rapport de ZHPDiag v1.27.1868 par Nicolas Coolman, Update du 11/04/2011
    Run by pcbs at 13/04/2011 13:49:26
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    ---\\ Web Browser
    MSIE: Internet Explorer v8.0.7600.16385 (Defaut)
    GCIE: Google Chrome v10.0.648.204

    ---\\ System Information
    Windows 7 Home Premium Edition, 32-bit (Build 7600)
    Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
    Operating System: 32 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3070 MB (46% free)
    System Restore: Activé (Enable)
    System drive C: has 865 GB (92%) free of 931 GB

    ---\\ Logged in mode
    Computer Name: PCBS-PC
    User Name: pcbs
    All Users Names: pcbs, HomeGroupUser$, Administrateur,
    Unselected Option: O45,O61,O62,O65,O66,O80,O82
    Logged in as Administrator

    ---\\ Environnement Variables
    %AppData%=C:\Users\pcbs\AppData\Roaming
    %LocalAppData%=C:\Users\pcbs\AppData\Local
    %StartMenu%=C:\Users\pcbs\AppData\Roaming\Microsoft\Windows\Start Menu

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 865 Go of 931 Go)
    D:\ CD-ROM drive (Not Inserted)

    ---\\ Security Center & Tools Informations
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

    ---\\ Recherche particulière de fichiers génériques
    [MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 06:45:39.) -- C:\Windows\Explorer.exe [2614272]
    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256]
    [MD5.78B9ADA2BC8946AF7B17678E0D07A773] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/12/2010 06:38:22.) -- C:\Windows\system32\wininet.dll [981504]
    [MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 07:17:59.) -- C:\Windows\system32\Winlogon.exe [285696]
    [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\system32\drivers\atapi.sys [21584]
    [MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.14/07/2009 02:20:44.) -- C:\Windows\system32\drivers\ntfs.sys [1210432]

    ---\\ Processus lancés
    [MD5.10093078F831C6A14F98B59A06FF4796] - (.Panda Security, S.L. - Internet resident proxy.) -- C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe [107776]
    [MD5.2589FFE360BED8F824CBC6171CB5B874] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304]
    [MD5.CB71DFA64E99B01752E71E13827AC4AB] - (.MusicLab, LLC - Data Manager.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe [983480]
    [MD5.2E9A1A6555C20424FC6DCC3AF21F4D68] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3451496]
    [MD5.E563002C689DF5A8F3CBF68450E52740] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6711840]
    [MD5.1C873A043474E39779E453E699CC6AE4] - (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\ApVxdWin.exe [988480]
    [MD5.E1473471169EC64C57B49F9C984DFB1A] - (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe [5458704]
    [MD5.AA08B68EF4E35EFA170CF85A44B23B70] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [673040]
    [MD5.99B6CE3840F5AD5C4B13B666249AA467] - (.Microsoft Corporation - Microsoft Search Client Server.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe [316208]
    [MD5.16F79039FA40B1E1F7FF1C9C81BF15A8] - (.Secure Digital Services Limited - OfferBox.) -- C:\Program Files\OfferBox\OfferBox.exe [1966936]
    [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
    [MD5.A51D1C449E9CA956F477F9BFBE67A5C8] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe [232912]
    [MD5.103C66E16FAA3D61F3B37BC7118EEA11] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [642560]

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
    P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
    P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
    P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
    P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
    P2 - FPN: [HKLM] [@veetle.com/vbp;version=0.9.17] - (.Veetle Inc - Version 0.9.17, copyright 2008-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\VLCBroadcast\npvbp.dll
    P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.17] - (.Veetle Inc - Version 0.9.17, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
    P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.17] - (.Veetle Inc - Version 0.9.17, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    G1 - GCS: Preference [User Data\Default] http://search.bearshare.com
    G0 - GCSP: Preference [User Data\Default][HomePage] http://search.bearshare.com

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
    R0 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
    R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 2, 0) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
    R3 - URLSearchHook: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
    R3 - URLSearchHook: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
    R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Softonic_France\tbSoft.dll
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
    R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 2, 0) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
    R3 - URLSearchHook: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
    R3 - URLSearchHook: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
    R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Softonic_France\tbSoft.dll
    R3 - URLSearchHook: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} Clé orpheline
    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

    ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
    F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,
    F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} . (.Pas de propriétaire - MediaBar Link Library.) -- C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
    O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll
    O2 - BHO: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} . (.MusicLab, LLC - IEHelper.) -- C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
    O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} . (.Secure Digital Services Limited - OfferBox.) -- C:\Program Files\OfferBox\OfferBoxBHO.dll

    ---\\ Internet Explorer Toolbars (O3)
    O3 - Toolbar: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
    O3 - Toolbar: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
    O3 - Toolbar: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
    O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll
    O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
    O3 - Toolbar: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} . (.Pas de propriétaire - MediaBar Link Library.) -- C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
    O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] . (.Logitech Inc. - Logitech KHAL Main Process.) -- C:\Windows\KHALMNPR.exe
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
    O4 - HKLM\..\Run: [DATAMNGR] . (.MusicLab, LLC - Data Manager.) -- C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.exe
    O4 - HKLM\..\Run: [amd_dc_opt] . (.AMD - AMD Dual-Core Optimizer.) -- C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech KHAL Main Process.) -- C:\Windows\KHALMNPR.exe
    O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
    O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\Skytel.exe
    O4 - HKLM\..\Run: [APVXDWIN] . (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\APVXDWIN.exe
    O4 - HKLM\..\Run: [SCANINICIO] . (.Panda Security, S.L. - Inicio Programado.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Inicio.exe
    O4 - HKCU\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\vid.exe
    O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
    O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files\steam\steam.exe
    O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
    O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\vid.exe
    O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
    O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files\steam\steam.exe
    O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
    O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk . (.Logitech Inc..) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SMCWUSB-G 802.11g Wireless USB Utility.lnk . (...) -- C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe

    ---\\ ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Microsoft Office Excel 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Microsoft Office Word 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Virtual DJ LE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_le.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    O4 - Global Startup: C:\Users\pcbs\Desktop\Windows Live Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe
    O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
    O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Panda Antivirus Pro 2011.lnk . (.Panda Security, S.L..) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Iface.exe

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.exe
    O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MIF5BA~1\OFFICE11\REFBARH.ICO

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
    O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
    O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
    O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
    O17 - HKLM\System\CS1\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
    O17 - HKLM\System\CS2\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

    ---\\ Protocole additionnel et piratage de protocole (O18)
    O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
    O20 - Winlogon Notify: avldr . (.On-Access Anti-Malware Scanner Sync - On-Access Anti-Malware Scanner Sync.) -- C:\Windows\System32\avldr.dll

    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
    O20 - AppInit_DLLs: . (.MusicLab, LLC - Data Manager.) - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: (C-DillaCdaC11BA) . (.Macrovision - Macrovision RTS Service.) - C:\Windows\system32\drivers\CDAC11BA.exe
    O23 - Service: ES lite Service for program management. (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe
    O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 258.9.) - C:\Windows\system32\nvvsvc.exe
    O23 - Service: (Panda Software Controller) . (.Panda Security, S.L. - Panda Software Controler.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
    O23 - Service: (PAVFNSVR) . (.Panda Security, S.L. - Panda Function Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
    O23 - Service: (PavPrSrv) . (.Panda Security, S.L. - Panda Process Protection Service.) - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
    O23 - Service: (PAVSRV) . (.Panda Security, S.L. - Enhanced On-Access Anti-Malware Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\pavsrvx86.exe
    O23 - Service: (PSIMSVC) . (.Panda Security S.L. - Panda Interface Manager Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe
    O23 - Service: (PskSvcRetail) . (.Panda Security, S.L. - Anti-malware protection support executable.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe
    O23 - Service: (Steam Client Service) . (.Valve Corporation - Steam Client Service (buildbot_buildbot_ste.) - C:\Program Files\Common Files\Steam\SteamService.exe
    O23 - Service: (TPSrv) . (.Panda Security, S.L. - TPSrv Application.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
    O23 - Service: C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp.Defrag) . (.TuneUp Software - TuneUp Drive Defrag-Dienst.) - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
    O23 - Service: (TuneUp.UtilitiesSvc) . (.TuneUp Software - TuneUp Utilities Service.) - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
    O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Norton Security Scan for pcbs.job
    [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
    [MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
    [MD5.E0D6538B62C79FCBF0B27F95FAF3208B] [APT] [Java Update Scheduler] (.Sun Microsystems, Inc..) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
    [MD5.EF6C857E9758308C577FB5CB208B7922] [APT] [Norton Security Scan for pcbs] (.Symantec Corporation.) -- C:\Program Files\Norton Security Scan\Engine\2.7.3.34\Nss.exe
    [MD5.D621D2AD7E7F521ED64E4AFF43FF9EC1] [APT] [TuneUpUtilities_Task_BkGndMaintenance] (.TuneUp Software.) -- C:\Program Files\TuneUp Utilities 2010\OneClick.exe
    [MD5.00000000000000000000000000000000] [APT] [{5C09F191-F5E9-4C65-8339-7A2A4DB07913}] (.Pas de propriétaire.) -- C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{7778AA63-E94C-4E90-BBE8-72BFE96F579C}] (.Pas de propriétaire.) -- C:\Program Files\AutoCAD 2008\Setup\Setup.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{B24C0D00-AC7E-4B37-8714-29DEAD9A350D}] (.Pas de propriétaire.) -- C:\Program Files\EA GAMES\Les Sims 2 La Vie en Appartement\EAUninstall.exe (.not file.)
    [MD5.6FBBB73BE9FB38389AB73F38828A9CAC] [APT] [{EE838F76-CA50-490C-A19F-E5C56FB2BD9B}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe

    ---\\ Pilotes lancés au démarrage (O41)
    O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
    O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
    O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
    O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
    O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
    O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
    O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
    O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
    O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
    O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
    O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
    O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
    O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
    O41 - Driver: (ShldDrv) . (.Panda Security, S.L. - PandaShield driver.) - C:\Windows\System32\DRIVERS\ShlDrv51.sys
    O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
    O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
    O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: ASIO4ALL - (.Michael Tippach.) [HKLM] -- ASIO4ALL
    O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1
    O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems, Inc..) [HKLM] -- {AF36CE1D-FD2C-4BA0-93FA-1196785DD610}
    O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems, Inc..) [HKLM] -- {BB65C393-C76E-4F06-9B0C-2124AA8AF97B}
    O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
    O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
    O42 - Logiciel: Ask.com Search Assistant 1.0.2 - (.Ask.com.) [HKLM] -- Ask.com Search Assistant
    O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
    O42 - Logiciel: AutoCAD 2004 - (.Autodesk.) [HKLM] -- {5783F2D7-0201-040C-0002-0060B0CE6BBA}
    O42 - Logiciel: Autodesk DWF Viewer 7 - (.Autodesk, Inc..) [HKLM] -- {9A346205-EA92-4406-B1AB-50379DA3F057}
    O42 - Logiciel: Autodesk Express Viewer - (.Autodesk, Inc..) [HKLM] -- Autodesk Express Viewer
    O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
    O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}
    O42 - Logiciel: CDDRV_Installer - (.Logitech.) [HKLM] -- {8CC990CD-87C8-475C-AC32-8A7984E2FCFA}
    O42 - Logiciel: Call of Duty: Modern Warfare 2 - (.Infinity Ward.) [HKLM] -- Steam App 10180
    O42 - Logiciel: Call of Duty: Modern Warfare 2 - Multiplayer - (.Infinity Ward.) [HKLM] -- Steam App 10190
    O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
    O42 - Logiciel: Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta) - (.Microsoft Corporation.) [HKLM] -- {30120000-00B2-040C-0000-0000000FF1CE}
    O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
    O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
    O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- Steam App 240
    O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- {9580813D-94B1-4C28-9426-A441E2BB29A5}
    O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
    O42 - Logiciel: DVDVideoSoft Toolbar - (.Pas de propriétaire.) [HKLM] -- DVDVideoSoft Toolbar
    O42 - Logiciel: Day of Defeat: Source - (.Valve.) [HKLM] -- Steam App 300
    O42 - Logiciel: Dual-Core Optimizer - (.AMD.) [HKLM] -- {9FD6F1A8-5550-46AF-8509-271DF0E768B5}
    O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}
    O42 - Logiciel: EPSON Copy Utility 3 - (.Pas de propriétaire.) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
    O42 - Logiciel: EPSON Easy Photo Print - (.Pas de propriétaire.) [HKLM] -- {5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}
    O42 - Logiciel: EPSON File Manager - (.Pas de propriétaire.) [HKLM] -- {E86BC406-944E-41F6-ADE6-2C136734C96B}
    O42 - Logiciel: EPSON Image Clip Palette - (.Pas de propriétaire.) [HKLM] -- {314F6D08-A8B7-11D8-8446-0050BA1D384D}
    O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
    O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
    O42 - Logiciel: EPSON Scan Assistant - (.Pas de propriétaire.) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}
    O42 - Logiciel: EPSON Web-To-Page - (.Pas de propriétaire.) [HKLM] -- {7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}
    O42 - Logiciel: ESDX4800_4200 Guide util. - (.Pas de propriétaire.) [HKLM] -- ESDX4800_4200 Guide util.
    O42 - Logiciel: EasySaver B9.0410.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}
    O42 - Logiciel: Free Audio CD Burner version 1.4 - (.DVDVideoSoft Limited..) [HKLM] -- Free Audio CD Burner_is1
    O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
    O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
    O42 - Logiciel: Half-Life 2: Deathmatch - (.Valve.) [HKLM] -- Steam App 320
    O42 - Logiciel: Half-Life 2: Lost Coast - (.Valve.) [HKLM] -- Steam App 340
    O42 - Logiciel: Insurgency: Modern Infantry Combat Dedicated Server - (.Team Insurgency.) [HKLM] -- Steam App 17705
    O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424}
    O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
    O42 - Logiciel: KhalInstallWrapper - (.Logitech.) [HKLM] -- {56918C0C-0D87-4CA6-92BF-4975A43AC719}
    O42 - Logiciel: Le Maître de l'Olympe - Zeus. - (.Pas de propriétaire.) [HKLM] -- Le Maître de l'Olympe - Zeus.
    O42 - Logiciel: Logitech SetPoint - (.Logitech.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
    O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}
    O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9}
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    O42 - Logiciel: MediaBar - (.Musiclab, LLC.) [HKLM] -- BearShare MediaBar
    O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
    O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
    O42 - Logiciel: Messenger_Plus_Live Toolbar - (.Pas de propriétaire.) [HKLM] -- Messenger_Plus_Live Toolbar
    O42 - Logiciel: Messenger_Plus_Live_France Toolbar - (.Pas de propriétaire.) [HKLM] -- Messenger_Plus_Live_France Toolbar
    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
    O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
    O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}
    O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7}
    O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
    O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
    O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
    O42 - Logiciel: NVIDIA Display Control Panel - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Display Control Panel
    O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
    O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
    O42 - Logiciel: Norton Security Scan - (.Symantec Corporation.) [HKLM] -- NSS
    O42 - Logiciel: OfferBox Browser - (.Secure Digital Services Limited.) [HKLM] -- OfferBox Browser
    O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL
    O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {97B3824E-B2D2-4C49-A860-BCA56F10B040}
    O42 - Logiciel: PIF DESIGNER - (.Pas de propriétaire.) [HKLM] -- {B90450DF-E781-46FD-B1F1-0C86DA40E443}
    O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A}
    O42 - Logiciel: Panda Antivirus Pro 2011 - (.Panda Security.) [HKLM] -- {E55FB276-73C9-4776-AB53-BC028C0509ED}
    O42 - Logiciel: Panda Secure Vault 5 - (.AceBIT GmbH.) [HKLM] -- {B1D3568D-BC21-4C50-92A5-2396570DF1DE}_is1
    O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
    O42 - Logiciel: SMCWUSB-G 802.11g Wireless USB 2.0 Adapter - (.SMC Networks, Inc.) [HKLM] -- InstallShield_{802C87BF-3A1E-45B0-8C12-9527A5C572B3}
    O42 - Logiciel: SafeCast Shared Components - (.Macrovision.) [HKLM] -- CdaC13Ba
    O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
    O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    O42 - Logiciel: Skype(TM) 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}
    O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
    O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
    O42 - Logiciel: TeLL me More - (.Pas de propriétaire.) [HKLM] -- TeLLmeMoreV40
    O42 - Logiciel: TrackMania Nations Forever - (.Nadeo.) [HKLM] -- Steam App 11020
    O42 - Logiciel: TuneUp Utilities - (.TuneUp Software.) [HKLM] -- TuneUp Utilities
    O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1
    O42 - Logiciel: Veetle TV 0.9.17 - (.Veetle, Inc.) [HKLM] -- Veetle TV
    O42 - Logiciel: Virtual DJ - Atomix Productions - (.Pas de propriétaire.) [HKLM] -- Virtual DJ - Atomix Productions
    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
    O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
    O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
    O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {F53D678E-238F-4A71-9742-08BB6774E9DC}
    O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {FCFBA290-CB48-4AF1-A241-2685AEDEDD66}
    O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
    O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
    O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
    O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
    O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}
    O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
    O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
    O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
    O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
    O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
    O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
    O42 - Logiciel: Windows Live Remote Client - (.Microsoft Corporation.) [HKLM] -- {19A4A990-5343-4FF7-B3B5-6F046C091EDF}
    O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM] -- {DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}
    O42 - Logiciel: Windows Live Remote Service - (.Microsoft Corporation.) [HKLM] -- {227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}
    O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM] -- {AB93C51F-71F9-4A28-8134-FE1B5B9373E9}
    O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
    O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
    O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
    O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
    O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
    O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
    O42 - Logiciel: Zoo Tycoon: Complete Collection - (.Pas de propriétaire.) [HKLM] -- Zoo Tycoon 1.0
    O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\ALWIL Software]
    [HKCU\Software\ASIO4ALL v2 by Wuschel]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\AVS4YOU]
    [HKCU\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\Conduit]
    [HKCU\Software\AppDataLow\Software\DVDVideoSoftTB]
    [HKCU\Software\AppDataLow\Software\DVDVideoSoft]
    [HKCU\Software\AppDataLow\Software\Macromedia]
    [HKCU\Software\AppDataLow\Software\MarkAny]
    [HKCU\Software\AppDataLow\Software\Messenger_Plus_Live]
    [HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France]
    [HKCU\Software\AppDataLow\Software\Microsoft]
    [HKCU\Software\AppDataLow\Software\Monitored]
    [HKCU\Software\AppDataLow\Software\PriceGong]
    [HKCU\Software\AppDataLow\Software\Softonic_France]
    [HKCU\Software\AppDataLow\Software\bearsharemediabartb]
    [HKCU\Software\AppDataLow\Software\conduitEngine]
    [HKCU\Software\AppDataLow\Software\settings]
    [HKCU\Software\AppDataLow\Software]
    [HKCU\Software\AppDataLow\Toolbar]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\AskSearchAsst]
    [HKCU\Software\Auralog]
    [HKCU\Software\Autodesk]
    [HKCU\Software\BearShare]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\DVDVideoSoft]
    [HKCU\Software\DataMngr]
    [HKCU\Software\DownloadCenter]
    [HKCU\Software\EPSON]
    [HKCU\Software\Edusoft-TLC]
    [HKCU\Software\FLEXlm License Manager]
    [HKCU\Software\Google]
    [HKCU\Software\IGA]
    [HKCU\Software\IM Providers]
    [HKCU\Software\IZSoftware]
    [HKCU\Software\Intel]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\Leadertech]
    [HKCU\Software\Local AppWizard-Generated Applications]
    [HKCU\Software\LogiShrd]
    [HKCU\Software\Logitech]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Magnet]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\NVIDIA Corporation]
    [HKCU\Software\Netscape]
    [HKCU\Software\ODBC]
    [HKCU\Software\OfferBox]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\Panda Security]
    [HKCU\Software\Panda Software]
    [HKCU\Software\Patchou]
    [HKCU\Software\Policies]
    [HKCU\Software\Realtek]
    [HKCU\Software\SEIKO EPSON]
    [HKCU\Software\SMC]
    [HKCU\Software\Samsung]
    [HKCU\Software\SecuROM]
    [HKCU\Software\Skype]
    [HKCU\Software\Softonic]
    [HKCU\Software\Trolltech]
    [HKCU\Software\TuneUp]
    [HKCU\Software\VB and VBA Program Settings]
    [HKCU\Software\Valve]
    [HKCU\Software\Veetle]
    [HKCU\Software\VirtualDJ]
    [HKCU\Software\ej-technologies]
    [HKCU\Software\keyhole.com]
    [HKLM\Software\AGEIA Technologies]
    [HKLM\Software\ALWIL Software]
    [HKLM\Software\AMD]
    [HKLM\Software\ASIO]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\AVAST Software]
    [HKLM\Software\AVS4YOU]
    [HKLM\Software\AceBIT]
    [HKLM\Software\Activision]
    [HKLM\Software\Adobe]
    [HKLM\Software\AppDataLow]
    [HKLM\Software\Atheros Communications Inc.]
    [HKLM\Software\Atheros]
    [HKLM\Software\Auralog]
    [HKLM\Software\Autodesk]
    [HKLM\Software\BearShareMediabarTb]
    [HKLM\Software\BrowserChoice]
    [HKLM\Software\CDDB]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\Conduit]
    [HKLM\Software\DVDVideoSoft]
    [HKLM\Software\DataMngr]
    [HKLM\Software\EPSON]
    [HKLM\Software\Gigabyte]
    [HKLM\Software\Google]
    [HKLM\Software\IZSoftware]
    [HKLM\Software\InstallShield]
    [HKLM\Software\Intel]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\Khronos]
    [HKLM\Software\L&H]
    [HKLM\Software\Licenses]
    [HKLM\Software\LogiShrd]
    [HKLM\Software\Logitech]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Macrovision]
    [HKLM\Software\Messenger Plus!]
    [HKLM\Software\Messenger_Plus_Live]
    [HKLM\Software\Messenger_Plus_Live_France]
    [HKLM\Software\MimarSinan]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\MusicNet]
    [HKLM\Software\NVIDIA Corporation]
    [HKLM\Software\Norton]
    [HKLM\Software\ODBC]
    [HKLM\Software\OfferBox]
    [HKLM\Software\OpenCandy NSIS SDK]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Panda Security]
    [HKLM\Software\Panda Software]
    [HKLM\Software\Patchou]
    [HKLM\Software\Policies]
    [HKLM\Software\Realtek Semiconductor Corp.]
    [HKLM\Software\Realtek]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SMC]
    [HKLM\Software\SRS Labs]
    [HKLM\Software\Sierra On-Line]
    [HKLM\Software\Sierra OnLine]
    [HKLM\Software\Skype]
    [HKLM\Software\Softonic_France]
    [HKLM\Software\Sonic]
    [HKLM\Software\Sun Microsystems]
    [HKLM\Software\Symantec]
    [HKLM\Software\TENCENT]
    [HKLM\Software\Telltale Games]
    [HKLM\Software\TuneUp]
    [HKLM\Software\Valve]
    [HKLM\Software\Veetle]
    [HKLM\Software\VirtualDJ]
    [HKLM\Software\Volatile]
    [HKLM\Software\Waves Audio]
    [HKLM\Software\WexTech Systems]
    [HKLM\Software\Wow6432Node]
    [HKLM\Software\mozilla.org]

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 16/01/2011 - 16:40:08 - [114154297] ----D- C:\Program Files\Adobe
    O43 - CFD: 29/12/2009 - 15:55:48 - [123382454] ----D- C:\Program Files\AGEIA Technologies
    O43 - CFD: 02/04/2011 - 19:44:00 - [0] ----D- C:\Program Files\Alwil Software
    O43 - CFD: 18/12/2010 - 20:58:00 - [104114] ----D- C:\Program Files\AMD
    O43 - CFD: 06/12/2010 - 23:02:50 - [3997789] ----D- C:\Program Files\AnswerWorks 4.0
    O43 - CFD: 02/04/2011 - 10:34:34 - [280866] ----D- C:\Program Files\ASIO4ALL v2
    O43 - CFD: 02/04/2011 - 10:34:34 - [124870] ----D- C:\Program Files\Ask Search Assistant
    O43 - CFD: 02/11/2010 - 21:39:46 - [1618] ----D- C:\Program Files\Ask.com
    O43 - CFD: 06/12/2010 - 23:03:06 - [171935898] ----D- C:\Program Files\AutoCAD 2004
    O43 - CFD: 06/12/2010 - 22:58:16 - [353519896] ----D- C:\Program Files\Autocad 2004 Fr
    O43 - CFD: 06/12/2010 - 23:03:22 - [6531114] ----D- C:\Program Files\Autodesk
    O43 - CFD: 02/04/2011 - 19:41:22 - [152412307] ----D- C:\Program Files\AVAST Software
    O43 - CFD: 29/12/2009 - 15:55:48 - [27847481] ----D- C:\Program Files\AVS4YOU
    O43 - CFD: 05/12/2010 - 19:12:46 - [4766877] ----D- C:\Program Files\BearShare Applications
    O43 - CFD: 11/11/2010 - 10:10:44 - [999006] ----D- C:\Program Files\Bing Bar Installer
    O43 - CFD: 07/04/2011 - 17:50:48 - [709799809] ----D- C:\Program Files\Common Files
    O43 - CFD: 29/12/2009 - 15:55:50 - [537696] ----D- C:\Program Files\Conduit
    O43 - CFD: 21/11/2010 - 21:37:22 - [3933149] ----D- C:\Program Files\ConduitEngine
    O43 - CFD: 23/01/2011 - 10:49:12 - [7068732] ----D- C:\Program Files\Driver Whiz
    O43 - CFD: 14/07/2009 - 11:01:10 - [83226132] ----D- C:\Program Files\DVD Maker
    O43 - CFD: 21/11/2010 - 21:35:46 - [21807138] ----D- C:\Program Files\DVDVideoSoft
    O43 - CFD: 13/02/2011 - 13:23:28 - [18777053] ----D- C:\Program Files\EA GAMES
    O43 - CFD: 05/12/2010 - 19:27:10 - [161653337] ----D- C:\Program Files\epson
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\Program Files\Fichiers communs
    O43 - CFD: 29/12/2009 - 15:55:50 - [5903409] ----D- C:\Program Files\Gigabyte
    O43 - CFD: 02/04/2011 - 10:34:36 - [551205803] ----D- C:\Program Files\Google
    O43 - CFD: 07/04/2011 - 18:21:24 - [46632312] --H-D- C:\Program Files\InstallShield Installation Information
    O43 - CFD: 29/12/2009 - 15:55:52 - [64806] ----D- C:\Program Files\Intel
    O43 - CFD: 10/02/2011 - 04:18:42 - [4496553] ----D- C:\Program Files\Internet Explorer
    O43 - CFD: 04/08/2010 - 22:18:46 - [87503810] ----D- C:\Program Files\Java
    O43 - CFD: 21/11/2010 - 14:51:32 - [17091] ----D- C:\Program Files\LimeWire
    O43 - CFD: 02/01/2010 - 19:07:44 - [114758020] ----D- C:\Program Files\Logitech
    O43 - CFD: 29/12/2009 - 15:55:54 - [1827624] ----D- C:\Program Files\MarkAny
    O43 - CFD: 15/11/2010 - 20:53:18 - [18606502] ----D- C:\Program Files\Messenger Plus! Live
    O43 - CFD: 12/03/2010 - 18:56:26 - [2550249] ----D- C:\Program Files\Messenger_Plus_Live
    O43 - CFD: 02/07/2010 - 19:35:02 - [7985414] ----D- C:\Program Files\Messenger_Plus_Live_France
    O43 - CFD: 10/01/2010 - 13:09:20 - [6041653] ----D- C:\Program Files\Metal Gear Solid
    O43 - CFD: 29/12/2009 - 15:55:58 - [2664525] ----D- C:\Program Files\Microsoft
    O43 - CFD: 03/01/2010 - 23:22:48 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    O43 - CFD: 30/05/2010 - 12:18:02 - [1278152268] ----D- C:\Program Files\Microsoft Games
    O43 - CFD: 06/12/2010 - 22:36:22 - [135765956] ----D- C:\Program Files\Microsoft Office
    O43 - CFD: 02/04/2011 - 10:34:36 - [38361211] ----D- C:\Program Files\Microsoft Silverlight
    O43 - CFD: 13/01/2010 - 19:47:24 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
    O43 - CFD: 26/06/2010 - 00:08:36 - [146787] ----D- C:\Program Files\Microsoft.NET
    O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild
    O43 - CFD: 13/06/2010 - 13:56:22 - [40129499] ----D- C:\Program Files\MSECache
    O43 - CFD: 11/11/2010 - 10:10:26 - [6834838] ----D- C:\Program Files\MSN Toolbar
    O43 - CFD: 26/12/2009 - 13:48:56 - [0] ----D- C:\Program Files\MSXML 4.0
    O43 - CFD: 18/11/2010 - 20:57:38 - [12605848] ----D- C:\Program Files\Norton Security Scan
    O43 - CFD: 18/11/2010 - 20:57:36 - [8446131] ----D- C:\Program Files\NortonInstaller
    O43 - CFD: 28/12/2010 - 20:47:52 - [56753623] ----D- C:\Program Files\NVIDIA Corporation
    O43 - CFD: 22/02/2011 - 00:21:02 - [3583851] ----D- C:\Program Files\OfferBox
    O43 - CFD: 17/01/2010 - 15:16:58 - [782336] ----D- C:\Program Files\OpenAL
    O43 - CFD: 11/04/2010 - 18:54:28 - [371455429] ----D- C:\Program Files\OpenOffice.org 3
    O43 - CFD: 07/04/2011 - 18:21:38 - [330049113] ----D- C:\Program Files\Panda Security
    O43 - CFD: 29/12/2009 - 15:52:36 - [12654304] ----D- C:\Program Files\Realtek
    O43 - CFD: 14/07/2009 - 06:52:32 - [38597377] ----D- C:\Program Files\Reference Assemblies
    O43 - CFD: 02/03/2011 - 20:31:38 - [36340] ----D- C:\Program Files\Registry Mechanic
    O43 - CFD: 29/12/2009 - 15:56:02 - [7133] ----D- C:\Program Files\Samsung
    O43 - CFD: 01/08/2010 - 13:10:34 - [0] ----D- C:\Program Files\Sierra On-Line
    O43 - CFD: 04/10/2010 - 19:23:14 - [17468271] R---D- C:\Program Files\Skype
    O43 - CFD: 29/12/2009 - 15:56:02 - [9900289] ----D- C:\Program Files\SMC
    O43 - CFD: 04/08/2010 - 21:04:56 - [2943022] ----D- C:\Program Files\Softonic_France
    O43 - CFD: 13/04/2011 - 13:33:24 - [23347237834] ----D- C:\Program Files\Steam
    O43 - CFD: 26/12/2009 - 00:16:48 - [0] --H-D- C:\Program Files\Temp
    O43 - CFD: 16/05/2010 - 17:43:24 - [153971931] ----D- C:\Program Files\TLC-Edusoft
    O43 - CFD: 11/09/2010 - 13:29:22 - [58257578] ----D- C:\Program Files\TuneUp Utilities 2010
    O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
    O43 - CFD: 22/08/2010 - 21:18:56 - [37376791] ----D- C:\Program Files\Veetle
    O43 -
    0
  17. natalium
     
    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 16/01/2011 - 16:40:08 - [114154297] ----D- C:\Program Files\Adobe
    O43 - CFD: 29/12/2009 - 15:55:48 - [123382454] ----D- C:\Program Files\AGEIA Technologies
    O43 - CFD: 02/04/2011 - 19:44:00 - [0] ----D- C:\Program Files\Alwil Software
    O43 - CFD: 18/12/2010 - 20:58:00 - [104114] ----D- C:\Program Files\AMD
    O43 - CFD: 06/12/2010 - 23:02:50 - [3997789] ----D- C:\Program Files\AnswerWorks 4.0
    O43 - CFD: 02/04/2011 - 10:34:34 - [280866] ----D- C:\Program Files\ASIO4ALL v2
    O43 - CFD: 02/04/2011 - 10:34:34 - [124870] ----D- C:\Program Files\Ask Search Assistant
    O43 - CFD: 02/11/2010 - 21:39:46 - [1618] ----D- C:\Program Files\Ask.com
    O43 - CFD: 06/12/2010 - 23:03:06 - [171935898] ----D- C:\Program Files\AutoCAD 2004
    O43 - CFD: 06/12/2010 - 22:58:16 - [353519896] ----D- C:\Program Files\Autocad 2004 Fr
    O43 - CFD: 06/12/2010 - 23:03:22 - [6531114] ----D- C:\Program Files\Autodesk
    O43 - CFD: 02/04/2011 - 19:41:22 - [152412307] ----D- C:\Program Files\AVAST Software
    O43 - CFD: 29/12/2009 - 15:55:48 - [27847481] ----D- C:\Program Files\AVS4YOU
    O43 - CFD: 05/12/2010 - 19:12:46 - [4766877] ----D- C:\Program Files\BearShare Applications
    O43 - CFD: 11/11/2010 - 10:10:44 - [999006] ----D- C:\Program Files\Bing Bar Installer
    O43 - CFD: 07/04/2011 - 17:50:48 - [709799809] ----D- C:\Program Files\Common Files
    O43 - CFD: 29/12/2009 - 15:55:50 - [537696] ----D- C:\Program Files\Conduit
    O43 - CFD: 21/11/2010 - 21:37:22 - [3933149] ----D- C:\Program Files\ConduitEngine
    O43 - CFD: 23/01/2011 - 10:49:12 - [7068732] ----D- C:\Program Files\Driver Whiz
    O43 - CFD: 14/07/2009 - 11:01:10 - [83226132] ----D- C:\Program Files\DVD Maker
    O43 - CFD: 21/11/2010 - 21:35:46 - [21807138] ----D- C:\Program Files\DVDVideoSoft
    O43 - CFD: 13/02/2011 - 13:23:28 - [18777053] ----D- C:\Program Files\EA GAMES
    O43 - CFD: 05/12/2010 - 19:27:10 - [161653337] ----D- C:\Program Files\epson
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\Program Files\Fichiers communs
    O43 - CFD: 29/12/2009 - 15:55:50 - [5903409] ----D- C:\Program Files\Gigabyte
    O43 - CFD: 02/04/2011 - 10:34:36 - [551205803] ----D- C:\Program Files\Google
    O43 - CFD: 07/04/2011 - 18:21:24 - [46632312] --H-D- C:\Program Files\InstallShield Installation Information
    O43 - CFD: 29/12/2009 - 15:55:52 - [64806] ----D- C:\Program Files\Intel
    O43 - CFD: 10/02/2011 - 04:18:42 - [4496553] ----D- C:\Program Files\Internet Explorer
    O43 - CFD: 04/08/2010 - 22:18:46 - [87503810] ----D- C:\Program Files\Java
    O43 - CFD: 21/11/2010 - 14:51:32 - [17091] ----D- C:\Program Files\LimeWire
    O43 - CFD: 02/01/2010 - 19:07:44 - [114758020] ----D- C:\Program Files\Logitech
    O43 - CFD: 29/12/2009 - 15:55:54 - [1827624] ----D- C:\Program Files\MarkAny
    O43 - CFD: 15/11/2010 - 20:53:18 - [18606502] ----D- C:\Program Files\Messenger Plus! Live
    O43 - CFD: 12/03/2010 - 18:56:26 - [2550249] ----D- C:\Program Files\Messenger_Plus_Live
    O43 - CFD: 02/07/2010 - 19:35:02 - [7985414] ----D- C:\Program Files\Messenger_Plus_Live_France
    O43 - CFD: 10/01/2010 - 13:09:20 - [6041653] ----D- C:\Program Files\Metal Gear Solid
    O43 - CFD: 29/12/2009 - 15:55:58 - [2664525] ----D- C:\Program Files\Microsoft
    O43 - CFD: 03/01/2010 - 23:22:48 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    O43 - CFD: 30/05/2010 - 12:18:02 - [1278152268] ----D- C:\Program Files\Microsoft Games
    O43 - CFD: 06/12/2010 - 22:36:22 - [135765956] ----D- C:\Program Files\Microsoft Office
    O43 - CFD: 02/04/2011 - 10:34:36 - [38361211] ----D- C:\Program Files\Microsoft Silverlight
    O43 - CFD: 13/01/2010 - 19:47:24 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
    O43 - CFD: 26/06/2010 - 00:08:36 - [146787] ----D- C:\Program Files\Microsoft.NET
    O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild
    O43 - CFD: 13/06/2010 - 13:56:22 - [40129499] ----D- C:\Program Files\MSECache
    O43 - CFD: 11/11/2010 - 10:10:26 - [6834838] ----D- C:\Program Files\MSN Toolbar
    O43 - CFD: 26/12/2009 - 13:48:56 - [0] ----D- C:\Program Files\MSXML 4.0
    O43 - CFD: 18/11/2010 - 20:57:38 - [12605848] ----D- C:\Program Files\Norton Security Scan
    O43 - CFD: 18/11/2010 - 20:57:36 - [8446131] ----D- C:\Program Files\NortonInstaller
    O43 - CFD: 28/12/2010 - 20:47:52 - [56753623] ----D- C:\Program Files\NVIDIA Corporation
    O43 - CFD: 22/02/2011 - 00:21:02 - [3583851] ----D- C:\Program Files\OfferBox
    O43 - CFD: 17/01/2010 - 15:16:58 - [782336] ----D- C:\Program Files\OpenAL
    O43 - CFD: 11/04/2010 - 18:54:28 - [371455429] ----D- C:\Program Files\OpenOffice.org 3
    O43 - CFD: 07/04/2011 - 18:21:38 - [330049113] ----D- C:\Program Files\Panda Security
    O43 - CFD: 29/12/2009 - 15:52:36 - [12654304] ----D- C:\Program Files\Realtek
    O43 - CFD: 14/07/2009 - 06:52:32 - [38597377] ----D- C:\Program Files\Reference Assemblies
    O43 - CFD: 02/03/2011 - 20:31:38 - [36340] ----D- C:\Program Files\Registry Mechanic
    O43 - CFD: 29/12/2009 - 15:56:02 - [7133] ----D- C:\Program Files\Samsung
    O43 - CFD: 01/08/2010 - 13:10:34 - [0] ----D- C:\Program Files\Sierra On-Line
    O43 - CFD: 04/10/2010 - 19:23:14 - [17468271] R---D- C:\Program Files\Skype
    O43 - CFD: 29/12/2009 - 15:56:02 - [9900289] ----D- C:\Program Files\SMC
    O43 - CFD: 04/08/2010 - 21:04:56 - [2943022] ----D- C:\Program Files\Softonic_France
    O43 - CFD: 13/04/2011 - 13:33:24 - [23347237834] ----D- C:\Program Files\Steam
    O43 - CFD: 26/12/2009 - 00:16:48 - [0] --H-D- C:\Program Files\Temp
    O43 - CFD: 16/05/2010 - 17:43:24 - [153971931] ----D- C:\Program Files\TLC-Edusoft
    O43 - CFD: 11/09/2010 - 13:29:22 - [58257578] ----D- C:\Program Files\TuneUp Utilities 2010
    O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
    O43 - CFD: 22/08/2010 - 21:18:56 - [37376791] ----D- C:\Program Files\Veetle
    O43 - CFD: 23/01/2011 - 12:51:48 - [17636502] ----D- C:\Program Files\VirtualDJ
    O43 - CFD: 14/07/2009 - 10:39:40 - [3049984] ----D- C:\Program Files\Windows Defender
    O43 - CFD: 14/07/2009 - 11:01:08 - [7013496] ----D- C:\Program Files\Windows Journal
    O43 - CFD: 11/11/2010 - 10:13:48 - [191492015] ----D- C:\Program Files\Windows Live
    O43 - CFD: 16/12/2010 - 17:44:10 - [6180864] ----D- C:\Program Files\Windows Mail
    O43 - CFD: 16/10/2010 - 03:19:36 - [6607787] ----D- C:\Program Files\Windows Media Player
    O43 - CFD: 29/12/2009 - 16:14:36 - [12197556] ----D- C:\Program Files\Windows NT
    O43 - CFD: 14/07/2009 - 10:39:40 - [4417800] ----D- C:\Program Files\Windows Photo Viewer
    O43 - CFD: 14/07/2009 - 06:52:34 - [189440] ----D- C:\Program Files\Windows Portable Devices
    O43 - CFD: 14/07/2009 - 10:39:40 - [7158589] ----D- C:\Program Files\Windows Sidebar
    O43 - CFD: 13/04/2011 - 13:49:34 - [3953664] ----D- C:\Program Files\ZHPDiag
    O43 - CFD: 16/01/2011 - 16:40:14 - [3515885] ----D- C:\Program Files\Common Files\Adobe
    O43 - CFD: 06/12/2010 - 23:02:50 - [46475986] ----D- C:\Program Files\Common Files\Autodesk Shared
    O43 - CFD: 29/12/2009 - 15:55:48 - [42414411] ----D- C:\Program Files\Common Files\AVSMedia
    O43 - CFD: 06/12/2010 - 22:36:32 - [197904] ----D- C:\Program Files\Common Files\DESIGNER
    O43 - CFD: 05/12/2010 - 19:10:12 - [14654586] ----D- C:\Program Files\Common Files\DVDVideoSoft
    O43 - CFD: 05/12/2010 - 19:31:30 - [13368095] ----D- C:\Program Files\Common Files\InstallShield
    O43 - CFD: 04/08/2010 - 22:18:58 - [1228747] ----D- C:\Program Files\Common Files\Java
    O43 - CFD: 28/12/2010 - 20:47:26 - [39513737] ----D- C:\Program Files\Common Files\logishrd
    O43 - CFD: 29/12/2009 - 15:55:48 - [3635769] ----D- C:\Program Files\Common Files\Logitech
    O43 - CFD: 06/12/2010 - 23:03:22 - [275616] ----D- C:\Program Files\Common Files\Macrovision Shared
    O43 - CFD: 06/12/2010 - 22:36:22 - [190683024] ----D- C:\Program Files\Common Files\microsoft shared
    O43 - CFD: 07/04/2011 - 18:20:58 - [462952] ----D- C:\Program Files\Common Files\Panda Security
    O43 - CFD: 14/07/2009 - 04:37:06 - [2702] ----D- C:\Program Files\Common Files\Services
    O43 - CFD: 28/07/2010 - 09:48:12 - [2135336] ----D- C:\Program Files\Common Files\Skype
    O43 - CFD: 14/07/2009 - 04:37:06 - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines
    O43 - CFD: 02/04/2011 - 19:27:58 - [403240] ----D- C:\Program Files\Common Files\Steam
    O43 - CFD: 28/03/2011 - 15:15:00 - [0] ----D- C:\Program Files\Common Files\Symantec Shared
    O43 - CFD: 14/07/2009 - 10:39:40 - [17448035] ----D- C:\Program Files\Common Files\System
    O43 - CFD: 29/12/2009 - 15:55:50 - [224041665] ----D- C:\Program Files\Common Files\Windows Live
    O43 - CFD: 18/12/2010 - 20:57:58 - [68238336] ----D- C:\Program Files\Common Files\Wise Installation Wizard
    O43 - CFD: 16/03/2011 - 15:40:16 - [3172] ----D- C:\ProgramData\2F10
    O43 - CFD: 23/01/2011 - 09:45:04 - [124467961] ----D- C:\ProgramData\Adobe
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Application Data
    O43 - CFD: 06/12/2010 - 23:02:34 - [10268] ----D- C:\ProgramData\Autodesk
    O43 - CFD: 02/04/2011 - 19:40:58 - [22602100] ----D- C:\ProgramData\AVAST Software
    O43 - CFD: 29/12/2009 - 15:56:34 - [0] ----D- C:\ProgramData\AVS4YOU
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Bureau
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Desktop
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Documents
    O43 - CFD: 23/01/2011 - 10:49:54 - [1064] ----D- C:\ProgramData\Driver Whiz
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Favoris
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Favorites
    O43 - CFD: 02/04/2011 - 10:33:26 - [523440] ----D- C:\ProgramData\Google
    O43 - CFD: 02/01/2010 - 19:07:36 - [12948686] ----D- C:\ProgramData\LogiShrd
    O43 - CFD: 29/12/2009 - 15:56:34 - [23224727] ----D- C:\ProgramData\Logitech
    O43 - CFD: 13/03/2011 - 19:51:10 - [19170] ----D- C:\ProgramData\McAfee
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer
    O43 - CFD: 12/03/2010 - 19:38:14 - [446865] ----D- C:\ProgramData\Messenger Plus!
    O43 - CFD: 11/11/2010 - 10:11:44 - [222834604] -S--D- C:\ProgramData\Microsoft
    O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Modèles
    O43 - CFD: 18/11/2010 - 20:57:40 - [3337] ----D- C:\ProgramData\Norton
    O43 - CFD: 18/11/2010 - 20:57:36 - [67645] ----D- C:\ProgramData\NortonInstaller
    O43 - CFD: 29/12/2010 - 17:38:52 - [2269356] ----D- C:\ProgramData\NVIDIA
    O43 - CFD: 28/12/2010 - 20:48:00 - [522537] ----D- C:\ProgramData\NVIDIA Corporation
    O43 - CFD: 07/04/2011 - 18:21:42 - [6174854] ----D- C:\ProgramData\Panda Security
    O43 - CFD: 31/12/2010 - 12:30:38 - [144] ----D- C:\ProgramData\PC Drivers HeadQuarters
    O43 - CFD: 15/11/2010 - 20:56:20 - [4569600] ----D- C:\ProgramData\ReviverSoft
    O43 - CFD: 10/01/2010 - 20:36:14 - [25107412] ----D- C:\ProgramData\Skype
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Start Menu
    O43 - CFD: 04/08/2010 - 22:18:58 - [119] ----D- C:\ProgramData\Sun
    O43 - CFD: 21/11/2010 - 16:32:14 - [8086792] ----D- C:\ProgramData\Symantec
    O43 - CFD: 02/03/2011 - 20:31:38 - [0] ---AD- C:\ProgramData\TEMP
    O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Templates
    O43 - CFD: 04/12/2010 - 11:30:44 - [189734381] ----D- C:\ProgramData\TrackMania
    O43 - CFD: 16/01/2010 - 18:44:20 - [9260180] ----D- C:\ProgramData\TuneUp Software
    O43 - CFD: 23/01/2011 - 10:50:10 - [0] ----D- C:\ProgramData\UAB
    O43 - CFD: 05/12/2010 - 19:28:40 - [4085087] ----D- C:\ProgramData\UDL
    O43 - CFD: 22/11/2010 - 18:30:38 - [0] --H-D- C:\ProgramData\~0
    O43 - CFD: 22/01/2011 - 19:59:06 - [3384656] ----D- C:\Users\pcbs\AppData\Roaming\Adobe
    O43 - CFD: 06/12/2010 - 23:06:02 - [5525594] ----D- C:\Users\pcbs\AppData\Roaming\Autodesk
    O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\AVS4YOU
    O43 - CFD: 21/11/2010 - 21:35:52 - [520] ----D- C:\Users\pcbs\AppData\Roaming\DVDVideoSoftIEHelpers
    O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Google
    O43 - CFD: 13/01/2010 - 19:52:10 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Identities
    O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\InstallShield
    O43 - CFD: 02/01/2010 - 19:07:40 - [353] ----D- C:\Users\pcbs\AppData\Roaming\Leadertech
    O43 - CFD: 29/12/2009 - 15:58:14 - [30235] ----D- C:\Users\pcbs\AppData\Roaming\Logitech
    O43 - CFD: 29/12/2009 - 15:58:14 - [74715] ----D- C:\Users\pcbs\AppData\Roaming\Macromedia
    O43 - CFD: 14/07/2009 - 11:00:24 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Media Center Programs
    O43 - CFD: 22/01/2011 - 19:59:06 - [25950051] -S--D- C:\Users\pcbs\AppData\Roaming\Microsoft
    O43 - CFD: 04/08/2010 - 22:19:42 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Mozilla
    O43 - CFD: 13/04/2011 - 13:35:24 - [263888] ----D- C:\Users\pcbs\AppData\Roaming\OfferBox
    O43 - CFD: 11/04/2010 - 18:58:26 - [2356989] ----D- C:\Users\pcbs\AppData\Roaming\OpenOffice.org
    O43 - CFD: 07/04/2011 - 18:21:24 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Panda Security
    O43 - CFD: 27/02/2011 - 20:01:16 - [30] ----D- C:\Users\pcbs\AppData\Roaming\Registry Mechanic
    O43 - CFD: 25/12/2010 - 21:04:10 - [6309658] ----D- C:\Users\pcbs\AppData\Roaming\Skype
    O43 - CFD: 25/12/2010 - 18:27:40 - [16472] ----D- C:\Users\pcbs\AppData\Roaming\skypePM
    O43 - CFD: 05/05/2010 - 20:45:00 - [83535] ----D- C:\Users\pcbs\AppData\Roaming\StreamTorrent
    O43 - CFD: 17/02/2010 - 20:11:26 - [34305] ----D- C:\Users\pcbs\AppData\Roaming\teamspeak2
    O43 - CFD: 26/06/2010 - 12:11:30 - [6325] ----D- C:\Users\pcbs\AppData\Roaming\TS3Client
    O43 - CFD: 16/01/2010 - 18:44:24 - [20027] ----D- C:\Users\pcbs\AppData\Roaming\TuneUp Software
    O43 - CFD: 18/12/2010 - 22:31:38 - [295] ----D- C:\Users\pcbs\AppData\Roaming\Windows Live Writer
    0
  18. natalium
     
    2011/04/13 15:19:43.0532 TDSS rootkit removing tool 2.4.1.2 Aug 16 2010 09:46:23
    2011/04/13 15:19:43.0532 ================================================================================
    2011/04/13 15:19:43.0532 SystemInfo:
    2011/04/13 15:19:43.0532
    2011/04/13 15:19:43.0532 OS Version: 6.1.7600 ServicePack: 0.0
    2011/04/13 15:19:43.0532 Product type: Workstation
    2011/04/13 15:19:43.0532 ComputerName: PCBS-PC
    2011/04/13 15:19:43.0533 UserName: pcbs
    2011/04/13 15:19:43.0533 Windows directory: C:\Windows
    2011/04/13 15:19:43.0533 System windows directory: C:\Windows
    2011/04/13 15:19:43.0533 Processor architecture: Intel x86
    2011/04/13 15:19:43.0533 Number of processors: 4
    2011/04/13 15:19:43.0533 Page size: 0x1000
    2011/04/13 15:19:43.0533 Boot type: Normal boot
    2011/04/13 15:19:43.0533 ================================================================================
    2011/04/13 15:19:43.0819 Initialize success
    2011/04/13 15:19:47.0468 ================================================================================
    2011/04/13 15:19:47.0468 Scan started
    2011/04/13 15:19:47.0468 Mode: Manual;
    2011/04/13 15:19:47.0468 ================================================================================
    2011/04/13 15:19:49.0192 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
    2011/04/13 15:19:49.0228 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
    2011/04/13 15:19:49.0261 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
    2011/04/13 15:19:49.0292 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
    2011/04/13 15:19:49.0324 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
    2011/04/13 15:19:49.0360 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
    2011/04/13 15:19:49.0401 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
    2011/04/13 15:19:49.0424 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
    2011/04/13 15:19:49.0467 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
    2011/04/13 15:19:49.0493 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
    2011/04/13 15:19:49.0515 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
    2011/04/13 15:19:49.0537 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
    2011/04/13 15:19:49.0560 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
    2011/04/13 15:19:49.0603 AmdLLD (ad8fa28d8ed0d0a689a0559085ce0f18) C:\Windows\system32\DRIVERS\AmdLLD.sys
    2011/04/13 15:19:49.0657 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
    2011/04/13 15:19:49.0691 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
    2011/04/13 15:19:49.0720 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
    2011/04/13 15:19:49.0759 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
    2011/04/13 15:19:49.0819 AmFSM (36b58a8bafe100de90c87a3c0e56a3f2) C:\Windows\system32\DRIVERS\amm8660.sys
    2011/04/13 15:19:49.0840 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
    2011/04/13 15:19:49.0902 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
    2011/04/13 15:19:49.0931 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
    2011/04/13 15:19:49.0976 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\Windows\system32\drivers\aswFsBlk.sys
    2011/04/13 15:19:50.0004 aswMonFlt (b0f137f664f10829cd2380b0e20e7c29) C:\Windows\system32\drivers\aswMonFlt.sys
    2011/04/13 15:19:50.0043 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\Windows\system32\drivers\aswRdr.sys
    2011/04/13 15:19:50.0089 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\Windows\system32\drivers\aswSnx.sys
    2011/04/13 15:19:50.0146 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\Windows\system32\drivers\aswSP.sys
    2011/04/13 15:19:50.0173 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\Windows\system32\drivers\aswTdi.sys
    2011/04/13 15:19:50.0210 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
    2011/04/13 15:19:50.0246 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
    2011/04/13 15:19:50.0326 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
    2011/04/13 15:19:50.0394 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
    2011/04/13 15:19:50.0428 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
    2011/04/13 15:19:50.0482 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
    2011/04/13 15:19:50.0501 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
    2011/04/13 15:19:50.0541 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    2011/04/13 15:19:50.0570 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    2011/04/13 15:19:50.0621 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
    2011/04/13 15:19:50.0687 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
    2011/04/13 15:19:50.0709 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
    2011/04/13 15:19:50.0729 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
    2011/04/13 15:19:50.0779 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\DRIVERS\BthEnum.sys
    2011/04/13 15:19:50.0812 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
    2011/04/13 15:19:50.0844 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
    2011/04/13 15:19:50.0896 BTHPORT (4a34888e13224678dd062466afec4240) C:\Windows\system32\Drivers\BTHport.sys
    2011/04/13 15:19:50.0943 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\Windows\system32\Drivers\BTHUSB.sys
    2011/04/13 15:19:51.0012 CdaC15BA (f76cb7259aa575cc53f3996bc6b68c18) C:\Windows\system32\drivers\CDAC15BA.SYS
    2011/04/13 15:19:51.0062 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
    2011/04/13 15:19:51.0097 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
    2011/04/13 15:19:51.0136 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
    2011/04/13 15:19:51.0182 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
    2011/04/13 15:19:51.0221 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
    2011/04/13 15:19:51.0255 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
    2011/04/13 15:19:51.0289 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
    2011/04/13 15:19:51.0311 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
    2011/04/13 15:19:51.0349 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
    2011/04/13 15:19:51.0397 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
    2011/04/13 15:19:51.0443 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
    2011/04/13 15:19:51.0482 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
    2011/04/13 15:19:51.0522 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
    2011/04/13 15:19:51.0570 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
    2011/04/13 15:19:51.0653 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
    2011/04/13 15:19:51.0753 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
    2011/04/13 15:19:51.0934 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
    2011/04/13 15:19:51.0965 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
    2011/04/13 15:19:52.0026 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
    2011/04/13 15:19:52.0055 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
    2011/04/13 15:19:52.0098 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
    2011/04/13 15:19:52.0149 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
    2011/04/13 15:19:52.0171 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
    2011/04/13 15:19:52.0204 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
    2011/04/13 15:19:52.0238 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
    2011/04/13 15:19:52.0277 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
    2011/04/13 15:19:52.0316 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
    2011/04/13 15:19:52.0351 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
    2011/04/13 15:19:52.0376 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
    2011/04/13 15:19:52.0429 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
    2011/04/13 15:19:52.0455 gdrv (d556cb79967e92b5cc69686d16c1d846) C:\Windows\gdrv.sys
    2011/04/13 15:19:52.0496 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
    2011/04/13 15:19:52.0521 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
    2011/04/13 15:19:52.0541 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
    2011/04/13 15:19:52.0576 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
    2011/04/13 15:19:52.0633 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
    2011/04/13 15:19:52.0679 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
    2011/04/13 15:19:52.0750 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
    2011/04/13 15:19:52.0804 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
    2011/04/13 15:19:52.0830 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
    2011/04/13 15:19:52.0850 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
    2011/04/13 15:19:52.0887 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
    2011/04/13 15:19:52.0922 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
    2011/04/13 15:19:53.0020 IntcAzAudAddService (38d5b498c555403ef637806937ab6639) C:\Windows\system32\drivers\RTKVHDA.sys
    2011/04/13 15:19:53.0074 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
    2011/04/13 15:19:53.0118 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
    2011/04/13 15:19:53.0144 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    2011/04/13 15:19:53.0180 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
    2011/04/13 15:19:53.0206 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
    2011/04/13 15:19:53.0240 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
    2011/04/13 15:19:53.0263 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
    2011/04/13 15:19:53.0297 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
    2011/04/13 15:19:53.0326 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
    2011/04/13 15:19:53.0367 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
    2011/04/13 15:19:53.0405 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
    2011/04/13 15:19:53.0442 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
    2011/04/13 15:19:53.0481 L1C (6c32bfeab708915d6bbf4b20d4f3ef7b) C:\Windows\system32\DRIVERS\L1C62x86.sys
    2011/04/13 15:19:53.0533 L8042Kbd (d88846f9f4f27ae9be584a6e5b6b8753) C:\Windows\system32\DRIVERS\L8042Kbd.sys
    2011/04/13 15:19:53.0574 L8042mou (bea61fda2103f6f51b14eb0872e8a050) C:\Windows\system32\DRIVERS\L8042mou.Sys
    2011/04/13 15:19:53.0664 LHidFilt (3fa98339e8d9e007726be62f231e2015) C:\Windows\system32\DRIVERS\LHidFilt.Sys
    2011/04/13 15:19:53.0694 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
    2011/04/13 15:19:53.0740 LMouFilt (f259f758e04d8fb8d48c6cdbe45223e8) C:\Windows\system32\DRIVERS\LMouFilt.Sys
    2011/04/13 15:19:53.0760 LMouKE (cab504e38fced9a56d87d838e9ba13e9) C:\Windows\system32\DRIVERS\LMouKE.Sys
    2011/04/13 15:19:53.0805 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
    2011/04/13 15:19:53.0834 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
    2011/04/13 15:19:53.0871 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    2011/04/13 15:19:53.0901 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    2011/04/13 15:19:53.0943 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
    2011/04/13 15:19:53.0986 lvpopflt (9fb982de1c8dd769f8ed681dd878b12f) C:\Windows\system32\DRIVERS\lvpopflt.sys
    2011/04/13 15:19:54.0018 LVPr2Mon (1a7db7a00a4b0d8da24cd691a4547291) C:\Windows\system32\DRIVERS\LVPr2Mon.sys
    2011/04/13 15:19:54.0073 LVRS (a1857fbb9b4930eeb2fd92386c45c529) C:\Windows\system32\DRIVERS\lvrs.sys
    2011/04/13 15:19:54.0180 LVUVC (3703406af0726badd24c5e552493e5b1) C:\Windows\system32\DRIVERS\lvuvc.sys
    2011/04/13 15:19:54.0330 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
    2011/04/13 15:19:54.0368 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
    2011/04/13 15:19:54.0407 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
    2011/04/13 15:19:54.0463 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
    2011/04/13 15:19:54.0486 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
    2011/04/13 15:19:54.0541 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
    2011/04/13 15:19:54.0575 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
    2011/04/13 15:19:54.0607 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
    2011/04/13 15:19:54.0695 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
    2011/04/13 15:19:54.0730 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
    2011/04/13 15:19:54.0755 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys
    2011/04/13 15:19:54.0782 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    2011/04/13 15:19:54.0815 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    2011/04/13 15:19:54.0848 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
    2011/04/13 15:19:54.0888 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
    2011/04/13 15:19:54.0933 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
    2011/04/13 15:19:54.0958 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
    2011/04/13 15:19:54.0976 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
    2011/04/13 15:19:55.0018 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
    2011/04/13 15:19:55.0048 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
    2011/04/13 15:19:55.0090 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
    2011/04/13 15:19:55.0122 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
    2011/04/13 15:19:55.0156 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
    2011/04/13 15:19:55.0176 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
    2011/04/13 15:19:55.0196 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
    2011/04/13 15:19:55.0220 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
    2011/04/13 15:19:55.0264 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
    2011/04/13 15:19:55.0291 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
    2011/04/13 15:19:55.0322 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
    2011/04/13 15:19:55.0346 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
    2011/04/13 15:19:55.0368 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
    2011/04/13 15:19:55.0388 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
    2011/04/13 15:19:55.0407 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
    2011/04/13 15:19:55.0425 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
    2011/04/13 15:19:55.0473 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
    2011/04/13 15:19:55.0527 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
    2011/04/13 15:19:55.0559 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
    2011/04/13 15:19:55.0586 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
    2011/04/13 15:19:55.0641 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
    2011/04/13 15:19:55.0687 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
    2011/04/13 15:19:55.0721 NVHDA (8571011b62ce0207fa1dc95d88308f1d) C:\Windows\system32\drivers\nvhda32v.sys
    2011/04/13 15:19:55.0934 nvlddmkm (377140a534d013bd661c69f1741de43c) C:\Windows\system32\DRIVERS\nvlddmkm.sys
    2011/04/13 15:19:56.0240 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
    2011/04/13 15:19:56.0266 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
    2011/04/13 15:19:56.0295 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
    2011/04/13 15:19:56.0313 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
    2011/04/13 15:19:56.0385 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
    2011/04/13 15:19:56.0403 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
    2011/04/13 15:19:56.0432 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
    2011/04/13 15:19:56.0537 pavboot (55d654258a9c509b671310c314bd30b4) C:\Windows\system32\Drivers\pavboot.sys
    2011/04/13 15:19:56.0619 PavProc (018f51f5757819fcd9f32162c9808565) C:\Windows\system32\DRIVERS\PavProc.sys
    2011/04/13 15:19:56.0704 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
    2011/04/13 15:19:56.0736 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
    2011/04/13 15:19:56.0770 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
    2011/04/13 15:19:56.0802 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
    2011/04/13 15:19:56.0841 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
    2011/04/13 15:19:56.0940 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
    2011/04/13 15:19:56.0969 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
    2011/04/13 15:19:57.0020 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
    2011/04/13 15:19:57.0083 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
    2011/04/13 15:19:57.0175 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
    2011/04/13 15:19:57.0204 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
    2011/04/13 15:19:57.0230 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
    2011/04/13 15:19:57.0281 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
    2011/04/13 15:19:57.0305 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
    2011/04/13 15:19:57.0329 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
    2011/04/13 15:19:57.0348 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
    2011/04/13 15:19:57.0387 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
    2011/04/13 15:19:57.0411 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
    2011/04/13 15:19:57.0445 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
    2011/04/13 15:19:57.0473 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
    2011/04/13 15:19:57.0532 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
    2011/04/13 15:19:57.0561 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
    2011/04/13 15:19:57.0619 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
    2011/04/13 15:19:57.0705 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
    2011/04/13 15:19:57.0746 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
    2011/04/13 15:19:57.0804 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
    2011/04/13 15:19:57.0838 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
    2011/04/13 15:19:57.0955 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
    2011/04/13 15:19:57.0986 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
    2011/04/13 15:19:58.0023 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
    2011/04/13 15:19:58.0088 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
    2011/04/13 15:19:58.0120 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
    2011/04/13 15:19:58.0142 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\Windows\system32\drivers\sffp_sd.sys
    2011/04/13 15:19:58.0165 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
    2011/04/13 15:19:58.0232 ShldDrv (a2f0bf07cac43a11555c173f7b1ad28a) C:\Windows\system32\DRIVERS\ShlDrv51.sys
    2011/04/13 15:19:58.0270 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
    2011/04/13 15:19:58.0301 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    2011/04/13 15:19:58.0337 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
    2011/04/13 15:19:58.0372 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
    2011/04/13 15:19:58.0417 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
    2011/04/13 15:19:58.0483 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\Windows\system32\DRIVERS\srv.sys
    2011/04/13 15:19:58.0536 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\Windows\system32\DRIVERS\srv2.sys
    2011/04/13 15:19:58.0577 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\Windows\system32\DRIVERS\srvnet.sys
    2011/04/13 15:19:58.0658 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
    2011/04/13 15:19:58.0718 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
    2011/04/13 15:19:58.0811 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
    2011/04/13 15:19:58.0860 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
    2011/04/13 15:19:58.0898 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
    2011/04/13 15:19:58.0938 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
    2011/04/13 15:19:58.0959 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
    2011/04/13 15:19:58.0984 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
    2011/04/13 15:19:59.0003 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
    2011/04/13 15:19:59.0074 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
    2011/04/13 15:19:59.0159 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
    2011/04/13 15:19:59.0194 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
    2011/04/13 15:19:59.0228 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
    2011/04/13 15:19:59.0260 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
    2011/04/13 15:19:59.0316 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
    2011/04/13 15:19:59.0355 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
    2011/04/13 15:19:59.0387 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
    2011/04/13 15:19:59.0432 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
    2011/04/13 15:19:59.0466 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
    2011/04/13 15:19:59.0486 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
    2011/04/13 15:19:59.0511 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
    2011/04/13 15:19:59.0534 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
    2011/04/13 15:19:59.0584 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
    2011/04/13 15:19:59.0648 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
    2011/04/13 15:19:59.0691 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
    2011/04/13 15:19:59.0739 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    2011/04/13 15:19:59.0770 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
    2011/04/13 15:19:59.0829 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
    2011/04/13 15:19:59.0876 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
    2011/04/13 15:19:59.0900 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
    2011/04/13 15:19:59.0920 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
    2011/04/13 15:19:59.0961 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
    2011/04/13 15:19:59.0987 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
    2011/04/13 15:20:00.0016 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
    2011/04/13 15:20:00.0038 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
    2011/04/13 15:20:00.0060 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
    2011/04/13 15:20:00.0095 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
    2011/04/13 15:20:00.0126 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
    2011/04/13 15:20:00.0161 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
    2011/04/13 15:20:00.0197 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
    2011/04/13 15:20:00.0237 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/04/13 15:20:00.0252 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
    2011/04/13 15:20:00.0308 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
    2011/04/13 15:20:00.0337 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
    2011/04/13 15:20:00.0392 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
    2011/04/13 15:20:00.0432 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
    2011/04/13 15:20:00.0506 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
    2011/04/13 15:20:00.0568 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
    2011/04/13 15:20:00.0645 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
    2011/04/13 15:20:00.0695 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
    2011/04/13 15:20:00.0727 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
    2011/04/13 15:20:00.0792 ================================================================================
    2011/04/13 15:20:00.0792 Scan finished
    2011/04/13 15:20:00.0792 ================================================================================
    0
    1. natalium
       
      c 'es le scan tdsskiller
      0
  19. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Cette fois-ci TDSSKiller est bien passé.
    En revanche il faiy que tu postes le rapport ZHPDiag via cijoint comme demandé, car il est trop long pour être mis directement dans la réponse

    Smart
    "Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)
    0
    1. natalium
       
      le probleme c'est que je n'arrive pas a le poste avec ci joint et l'autre site
      0
    2. natalium
       
      le pc bloque ou internet
      0
  20. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    J'ai vu que tu avais deux antivirus Avast et Panda, cela ne sert à rien, sinon que d'engendrer des conflits et ralentir ton PC. Il ne faut en garder qu'un seul

    J'ai vu également que tu as des barres d'outils infectées et qq addawares.
    Mais on va d'abord s'occuper pour quoi tune peusx pas télécharger les rapports. On fera ensuite le rests

    Maintenant tu vas faire ceci:
    - Télécharge sur le bureau RogueKiller de Tigzy
    - Quitte tous tes programmes en cours
    - Sous Vista/Seven , clique droit -> lancer en tant qu'administrateur
    - Sinon lance simplement RogueKiller.exe
    - Lorsque demandé, tape 1 [SCAN] et valide
    - Un rapport (RKreport.txt) a du se créer sur le bureau, poste-le.

    * Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois. Si cela ne passe toujours pas , (cela peut arriver), renommer RogueKiller.exe en Winlogon.exe

    Smart
    0
    1. nathalie
       
      no iitems founf
      0
  21. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Tu peux poster le rapport directement dans ta réponse STP

    Smart
    0
    1. nathalie
       
      pas de rapport
      0
  • 1
  • 2
  • 3