Virus : physical driveo

Résolu/Fermé
nathalie - 11 avril 2011 à 12:50
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 - 8 mai 2011 à 12:16
Bonjour,
voila deux quelques jours en allumant mon pc j ai le virus physical driveo et je n'arrive pas a le retirer


A voir également:

51 réponses

Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
14 avril 2011 à 22:13
Relance MBAM et vide la quarantaine.
Ensuite tu vas faire ceci:
- Rends-toi à cette adresse afin de télécharger AD-Remover (créé par C_XX) : http://www.teamxscript.org/adremoverTelechargement.html
- Clique sur TÉLÉCHARGER et enregistre-le sur ton bureau.
- Déconnecte toi et ferme toutes les applications en cours
- Double clique sur le fichier d'installation de AD-Remover, le programme s'installera automatiquement.
- Au menu principal choisi l'option "Nettoyage" et tape sur [entrée] .
- Laisse travailler l'outil et ne touche à rien ...
- Poste le rapport qui apparait à la fin. (Le rapport est sauvegardé aussi sous C:\Ad-report.log)
(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Tu peux toujour poster le rapport dans la réponse

Smart
1
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
Modifié par Smart91 le 6/05/2011 à 18:54
C'est mieux. mias il y des restes que l'on va supprimer.
J'ai également remarquer tu avez plusieurs antivirus
AVast
McAffee
Norton et des restes de Panda
Cela ne sert à rien sinon d'avoir des conflits et ralentir ton PC
McAffe et Norton étant payant je te conseille de garder Avast et d'avoir la version 6
Il faut que tu les désinstalles.
Pour Panda je vais supprimer les restes dans mon script:

- Ferme toutes tes applications en cours
- Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
Copie/colle les lignes en gras suivantes :

----------------------------------------------------------
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
[HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[MD5.E4CC410BD005958125CD87C5F6E66371] [SPRF] (.Conduit Ltd. - Conduit Toolbar.) -- C:\Users\pcbs\AppData\Local\Temp\tbDVD0.dll [3908192]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKCU\Software\Panda Security]
[HKCU\Software\Panda Software]
[HKLM\Software\Panda Security]
[HKLM\Software\Panda Software]
O43 - CFD: 14/04/2011 - 14:42:40 - [0] ----D- C:\Program Files\Panda Security
O43 - CFD: 14/04/2011 - 14:42:38 - [0] ----D- C:\Program Files\Common Files\Panda Security
O43 - CFD: 07/04/2011 - 18:21:42 - [2730] ----D- C:\ProgramData\Panda Security
O43 - CFD: 14/04/2011 - 14:42:40 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Panda Security
O43 - CFD: 07/04/2011 - 18:22:08 - [62342] ----D- C:\Users\pcbs\Appdata\Local\Panda Security
EmpyTemp
EmptyFlash

----------------------------------------------------------
- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour le lancer le nettoyage
- Copie/colle la totalité du rapport dans ta prochaine réponse

Smart
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)
1
Rapport de ZHPFix 1.12.3280 par Nicolas Coolman, Update du 02/05/2011
Fichier d'export Registre : C:\ZHPExportRegistry-06-05-2011-18-57-18.txt
Run by pcbs at 06/05/2011 18:57:18
Windows 7 Home Premium Edition, 32-bit (Build 7600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Module(s) mémoire ==========
C:\Users\pcbs\AppData\Local\Temp\tbDVD0.dll [3908192] => Supprimé et mis en quarantaine

========== Clé(s) du Registre ==========
HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France => Clé supprimée avec succès
HKCU\Software\AppDataLow\Software\Softonic_France => Clé supprimée avec succès
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352} => Clé supprimée avec succès
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352} => Clé supprimée avec succès
HKCU\Software\Panda Security => Clé supprimée avec succès
HKCU\Software\Panda Software => Clé supprimée avec succès
HKLM\Software\Panda Security => Clé supprimée avec succès
HKLM\Software\Panda Software => Clé supprimée avec succès

========== Valeur(s) du Registre ==========
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Valeur supprimée avec succès
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Valeur absente

========== Dossier(s) ==========
Dossiers Flash Cookies supprimés : 441

========== Fichier(s) ==========
Fichiers Flash Cookies supprimés : 224

========== Autre ==========
EmpyTemp => Format Non supporté


========== Récapitulatif ==========
1 : Module(s) mémoire
8 : Clé(s) du Registre
2 : Valeur(s) du Registre
1 : Dossier(s)
1 : Fichier(s)
1 : Autre


End of the scan
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
11 avril 2011 à 13:19
Bonjour,

* Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
* Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
* Clique sur [Start Scan] pour démarrer l'analyse.
* Si des éléments sont trouvés, clique sur [Continue] puis sur [Reboot Now]
* Un rapport s'ouvrira au redémarrage de l'ordinateur.
* Copie/colle son contenu dans ta prochaine réponse.
Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

Smart
0
j ai lancé le scan avec tddskiller et il m'a trouver aucun erreur
0
2011/04/11 14:31:09.0437 TDSS rootkit removing tool 2.4.1.2 Aug 16 2010 09:46:23
2011/04/11 14:31:09.0438 ================================================================================
2011/04/11 14:31:09.0438 SystemInfo:
2011/04/11 14:31:09.0438
2011/04/11 14:31:09.0438 OS Version: 6.1.7600 ServicePack: 0.0
2011/04/11 14:31:09.0438 Product type: Workstation
2011/04/11 14:31:09.0438 ComputerName: PCBS-PC
2011/04/11 14:31:09.0438 UserName: pcbs
2011/04/11 14:31:09.0438 Windows directory: C:\Windows
2011/04/11 14:31:09.0438 System windows directory: C:\Windows
2011/04/11 14:31:09.0438 Processor architecture: Intel x86
2011/04/11 14:31:09.0438 Number of processors: 4
2011/04/11 14:31:09.0438 Page size: 0x1000
2011/04/11 14:31:09.0438 Boot type: Normal boot
2011/04/11 14:31:09.0439 ================================================================================
2011/04/11 14:31:09.0667 Initialize success
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
11 avril 2011 à 15:37
Tu es sûr que le rapport est complet ?
Tu as bien suivi la procédure donnée ?

Si oui fais ceci:

Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et suis les instructions.

/!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »

N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.
- Double clique sur le raccourci ZHPDiag sur ton Bureau pour le lancer.
(/!\L'outil a créé 2 icônes ZHPDiag et ZHPFix)
- Clique sur la loupe pour lancer l'analyse.
- Laisse l'outil travailler, il peut être assez long.
- Ferme ZHPDiag en fin d'analyse.
- Pour transmettre le rapport clique sur ce lien : http://www.cijoint.fr/
- Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
- Sélectionne le fichier ZHPDiag.txt.
- Clique sur "Cliquez ici pour déposer le fichier".
- Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.
- Copie ce lien dans ta réponse.


Smart
0
zhp je bloque il me dit qu il y a un autre programme qui bloque
0
il me di le processus ne peut pas acceder au fichier car ce fichier est utilise par un autre processus
0
j'envoi quand meme le fichier
0
http://www.cijoint.fr/cjlink.php?file=cj201104/cijdhkBnA8.txt
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
11 avril 2011 à 16:36
Ce n'est pas le bon rapport
Tu n'as répondu concernant TDSSKiller
Est-ce que tu as bien lancé ZHPDiag en tant qu'adiministrateur
Si c'est le cas peux-tu me dire à quel moment ZHPDiag plante
Ferme bien tous les autres applications quand tu le lances

Smart
0
pour tdsskiller j ai fai comme tu ma di
0
ca bloque tjrs
0
tjrs la meme chose il bloque pourtant il n y a d autres application en marche
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
11 avril 2011 à 17:07
OK. Cela bloque mais à quel niveau, c'est marqué en bas de la fenêtre de scan

Smart
0
alors c est marqué recherche des masters boot record infection. a 80%
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
11 avril 2011 à 19:09
Relance ZHPDiag, tu cliques sur le tournevix et tu déconches la ligne avec O80 entre parenthèses et tu refais un scan et tu poste le rapport via cijoint

Smart
0
http://www.cijoint.fr/cjlink.php?file=cj201104/cijgS8VXKV.txt
0
je ne sai pas si c'est le bon scan car j'essaye de le faire avec l'autre fichier mais sur le site cijoint.fr il me le prends pas. peut etre il es trop grand.
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
12 avril 2011 à 16:44
Ce n'est pas le bon rapport
Essaie de le poster via ce site: https://www.luanagames.com/index.fr.html
Je te rappelle que le rapport se trouve ici:
C:\Program Files\ZHPDiag\ZHPDiag.txt

Ensuite essaie de repasser TDSSKiller, en suivant bien les instructions
* Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")

* Clique sur [Start Scan] pour démarrer l'analyse.

* Si des éléments sont trouvés, clique sur [Continue] puis sur [Reboot Now]

* Un rapport s'ouvrira au redémarrage de l'ordinateur.

* Copie/colle son contenu dans ta prochaine réponse
.
Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

Smart
0
toujours impossible de poster sur le site http://up.sur-la-toile.com/heberger
0
Rapport de ZHPDiag v1.27.1868 par Nicolas Coolman, Update du 11/04/2011
Run by pcbs at 13/04/2011 13:49:26
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\\ Web Browser
MSIE: Internet Explorer v8.0.7600.16385 (Defaut)
GCIE: Google Chrome v10.0.648.204

---\\ System Information
Windows 7 Home Premium Edition, 32-bit (Build 7600)
Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3070 MB (46% free)
System Restore: Activé (Enable)
System drive C: has 865 GB (92%) free of 931 GB

---\\ Logged in mode
Computer Name: PCBS-PC
User Name: pcbs
All Users Names: pcbs, HomeGroupUser$, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O80,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\pcbs\AppData\Roaming
%LocalAppData%=C:\Users\pcbs\AppData\Local
%StartMenu%=C:\Users\pcbs\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 865 Go of 931 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK



---\\ Recherche particulière de fichiers génériques
[MD5.2626FC9755BE22F805D3CFA0CE3EE727] - (.Microsoft Corporation - Explorateur Windows.) (.31/10/2009 06:45:39.) -- C:\Windows\Explorer.exe [2614272]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256]
[MD5.78B9ADA2BC8946AF7B17678E0D07A773] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/12/2010 06:38:22.) -- C:\Windows\system32\wininet.dll [981504]
[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 07:17:59.) -- C:\Windows\system32\Winlogon.exe [285696]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\system32\drivers\atapi.sys [21584]
[MD5.3795DCD21F740EE799FB7223234215AF] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.14/07/2009 02:20:44.) -- C:\Windows\system32\drivers\ntfs.sys [1210432]



---\\ Processus lancés
[MD5.10093078F831C6A14F98B59A06FF4796] - (.Panda Security, S.L. - Internet resident proxy.) -- C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe [107776]
[MD5.2589FFE360BED8F824CBC6171CB5B874] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304]
[MD5.CB71DFA64E99B01752E71E13827AC4AB] - (.MusicLab, LLC - Data Manager.) -- C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe [983480]
[MD5.2E9A1A6555C20424FC6DCC3AF21F4D68] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3451496]
[MD5.E563002C689DF5A8F3CBF68450E52740] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6711840]
[MD5.1C873A043474E39779E453E699CC6AE4] - (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\ApVxdWin.exe [988480]
[MD5.E1473471169EC64C57B49F9C984DFB1A] - (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe [5458704]
[MD5.AA08B68EF4E35EFA170CF85A44B23B70] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [673040]
[MD5.99B6CE3840F5AD5C4B13B666249AA467] - (.Microsoft Corporation - Microsoft Search Client Server.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe [316208]
[MD5.16F79039FA40B1E1F7FF1C9C81BF15A8] - (.Secure Digital Services Limited - OfferBox.) -- C:\Program Files\OfferBox\OfferBox.exe [1966936]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
[MD5.A51D1C449E9CA956F477F9BFBE67A5C8] - (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe [232912]
[MD5.103C66E16FAA3D61F3B37BC7118EEA11] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [642560]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.51204.0.) -- c:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
P2 - FPN: [HKLM] [@veetle.com/vbp;version=0.9.17] - (.Veetle Inc - Version 0.9.17, copyright 2008-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\VLCBroadcast\npvbp.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.17] - (.Veetle Inc - Version 0.9.17, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.17] - (.Veetle Inc - Version 0.9.17, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
G1 - GCS: Preference [User Data\Default] http://search.bearshare.com
G0 - GCSP: Preference [User Data\Default][HomePage] http://search.bearshare.com



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 2, 0) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
R3 - URLSearchHook: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
R3 - URLSearchHook: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Softonic_France\tbSoft.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 2, 0) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
R3 - URLSearchHook: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) (5, 3, 4, 2) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
R3 - URLSearchHook: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Softonic_France\tbSoft.dll
R3 - URLSearchHook: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} Clé orpheline
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} . (.Pas de propriétaire - MediaBar Link Library.) -- C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll
O2 - BHO: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} . (.MusicLab, LLC - IEHelper.) -- C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} . (.Secure Digital Services Limited - OfferBox.) -- C:\Program Files\OfferBox\OfferBoxBHO.dll



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoft\tbDVD0.dll
O3 - Toolbar: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live\tbMess.dll
O3 - Toolbar: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\tbSoft.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O3 - Toolbar: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} . (.Pas de propriétaire - MediaBar Link Library.) -- C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] . (.Logitech Inc. - Logitech KHAL Main Process.) -- C:\Windows\KHALMNPR.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
O4 - HKLM\..\Run: [DATAMNGR] . (.MusicLab, LLC - Data Manager.) -- C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.exe
O4 - HKLM\..\Run: [amd_dc_opt] . (.AMD - AMD Dual-Core Optimizer.) -- C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] . (.Logitech Inc. - Logitech KHAL Main Process.) -- C:\Windows\KHALMNPR.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [APVXDWIN] . (.Panda Security, S.L. - Panda permanent protection.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\APVXDWIN.exe
O4 - HKLM\..\Run: [SCANINICIO] . (.Panda Security, S.L. - Inicio Programado.) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Inicio.exe
O4 - HKCU\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\vid.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files\steam\steam.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files\Logitech\Logitech Vid\vid.exe
O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [Steam] . (.Valve Corporation - Steam.) -- c:\program files\steam\steam.exe
O4 - HKUS\S-1-5-21-325314545-909985188-3106271208-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk . (.Logitech Inc..) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SMCWUSB-G 802.11g Wireless USB Utility.lnk . (...) -- C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Microsoft Office Excel 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Microsoft Office Word 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Virtual DJ LE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_le.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\pcbs\Desktop\Windows Live Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe
O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\pcbs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Panda Antivirus Pro 2011.lnk . (.Panda Security, S.L..) -- C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Iface.exe



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MIF5BA~1\OFFICE11\REFBARH.ICO



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
O17 - HKLM\System\CS1\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
O17 - HKLM\System\CS2\Services\Tcpip\..\{25B528E4-5A07-4C39-A10B-4AEEE0A3AAEA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{362AC6C7-8089-47C4-B3AC-64F8B9B422A0}: DhcpNameServer = 192.168.10.110
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1



---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: avldr . (.On-Access Anti-Malware Scanner Sync - On-Access Anti-Malware Scanner Sync.) -- C:\Windows\System32\avldr.dll



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.MusicLab, LLC - Data Manager.) - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: (C-DillaCdaC11BA) . (.Macrovision - Macrovision RTS Service.) - C:\Windows\system32\drivers\CDAC11BA.exe
O23 - Service: ES lite Service for program management. (ES lite Service) . (...) - C:\Program Files\Gigabyte\EasySaver\ESSVR.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 258.9.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: (Panda Software Controller) . (.Panda Security, S.L. - Panda Software Controler.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe
O23 - Service: (PAVFNSVR) . (.Panda Security, S.L. - Panda Function Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe
O23 - Service: (PavPrSrv) . (.Panda Security, S.L. - Panda Process Protection Service.) - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: (PAVSRV) . (.Panda Security, S.L. - Enhanced On-Access Anti-Malware Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\pavsrvx86.exe
O23 - Service: (PSIMSVC) . (.Panda Security S.L. - Panda Interface Manager Service.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe
O23 - Service: (PskSvcRetail) . (.Panda Security, S.L. - Anti-malware protection support executable.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe
O23 - Service: (Steam Client Service) . (.Valve Corporation - Steam Client Service (buildbot_buildbot_ste.) - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: (TPSrv) . (.Panda Security, S.L. - TPSrv Application.) - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe
O23 - Service: C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp.Defrag) . (.TuneUp Software - TuneUp Drive Defrag-Dienst.) - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: (TuneUp.UtilitiesSvc) . (.TuneUp Software - TuneUp Utilities Service.) - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: (wlidsvc) . (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Norton Security Scan for pcbs.job
[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.E0D6538B62C79FCBF0B27F95FAF3208B] [APT] [Java Update Scheduler] (.Sun Microsystems, Inc..) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
[MD5.EF6C857E9758308C577FB5CB208B7922] [APT] [Norton Security Scan for pcbs] (.Symantec Corporation.) -- C:\Program Files\Norton Security Scan\Engine\2.7.3.34\Nss.exe
[MD5.D621D2AD7E7F521ED64E4AFF43FF9EC1] [APT] [TuneUpUtilities_Task_BkGndMaintenance] (.TuneUp Software.) -- C:\Program Files\TuneUp Utilities 2010\OneClick.exe
[MD5.00000000000000000000000000000000] [APT] [{5C09F191-F5E9-4C65-8339-7A2A4DB07913}] (.Pas de propriétaire.) -- C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{7778AA63-E94C-4E90-BBE8-72BFE96F579C}] (.Pas de propriétaire.) -- C:\Program Files\AutoCAD 2008\Setup\Setup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{B24C0D00-AC7E-4B37-8714-29DEAD9A350D}] (.Pas de propriétaire.) -- C:\Program Files\EA GAMES\Les Sims 2 La Vie en Appartement\EAUninstall.exe (.not file.)
[MD5.6FBBB73BE9FB38389AB73F38828A9CAC] [APT] [{EE838F76-CA50-490C-A19F-E5C56FB2BD9B}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: (ShldDrv) . (.Panda Security, S.L. - PandaShield driver.) - C:\Windows\System32\DRIVERS\ShlDrv51.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: ASIO4ALL - (.Michael Tippach.) [HKLM] -- ASIO4ALL
O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1
O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems, Inc..) [HKLM] -- {AF36CE1D-FD2C-4BA0-93FA-1196785DD610}
O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems, Inc..) [HKLM] -- {BB65C393-C76E-4F06-9B0C-2124AA8AF97B}
O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Ask.com Search Assistant 1.0.2 - (.Ask.com.) [HKLM] -- Ask.com Search Assistant
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: AutoCAD 2004 - (.Autodesk.) [HKLM] -- {5783F2D7-0201-040C-0002-0060B0CE6BBA}
O42 - Logiciel: Autodesk DWF Viewer 7 - (.Autodesk, Inc..) [HKLM] -- {9A346205-EA92-4406-B1AB-50379DA3F057}
O42 - Logiciel: Autodesk Express Viewer - (.Autodesk, Inc..) [HKLM] -- Autodesk Express Viewer
O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}
O42 - Logiciel: CDDRV_Installer - (.Logitech.) [HKLM] -- {8CC990CD-87C8-475C-AC32-8A7984E2FCFA}
O42 - Logiciel: Call of Duty: Modern Warfare 2 - (.Infinity Ward.) [HKLM] -- Steam App 10180
O42 - Logiciel: Call of Duty: Modern Warfare 2 - Multiplayer - (.Infinity Ward.) [HKLM] -- Steam App 10190
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Complément Office 2007 - Microsoft Enregistrer en tant que PDF ou XPS (Beta) - (.Microsoft Corporation.) [HKLM] -- {30120000-00B2-040C-0000-0000000FF1CE}
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- Steam App 240
O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM] -- {9580813D-94B1-4C28-9426-A441E2BB29A5}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DVDVideoSoft Toolbar - (.Pas de propriétaire.) [HKLM] -- DVDVideoSoft Toolbar
O42 - Logiciel: Day of Defeat: Source - (.Valve.) [HKLM] -- Steam App 300
O42 - Logiciel: Dual-Core Optimizer - (.AMD.) [HKLM] -- {9FD6F1A8-5550-46AF-8509-271DF0E768B5}
O42 - Logiciel: EPSON Attach To Email - (.SEIKO EPSON.) [HKLM] -- InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}
O42 - Logiciel: EPSON Copy Utility 3 - (.Pas de propriétaire.) [HKLM] -- {67EDD823-135A-4D59-87BD-950616D6E857}
O42 - Logiciel: EPSON Easy Photo Print - (.Pas de propriétaire.) [HKLM] -- {5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}
O42 - Logiciel: EPSON File Manager - (.Pas de propriétaire.) [HKLM] -- {E86BC406-944E-41F6-ADE6-2C136734C96B}
O42 - Logiciel: EPSON Image Clip Palette - (.Pas de propriétaire.) [HKLM] -- {314F6D08-A8B7-11D8-8446-0050BA1D384D}
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner
O42 - Logiciel: EPSON Scan Assistant - (.Pas de propriétaire.) [HKLM] -- {2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}
O42 - Logiciel: EPSON Web-To-Page - (.Pas de propriétaire.) [HKLM] -- {7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}
O42 - Logiciel: ESDX4800_4200 Guide util. - (.Pas de propriétaire.) [HKLM] -- ESDX4800_4200 Guide util.
O42 - Logiciel: EasySaver B9.0410.1 - (.Gigabyte.) [HKLM] -- {07300F01-89CA-4CF8-92BD-2A605EB83C95}
O42 - Logiciel: Free Audio CD Burner version 1.4 - (.DVDVideoSoft Limited..) [HKLM] -- Free Audio CD Burner_is1
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
O42 - Logiciel: Half-Life 2: Deathmatch - (.Valve.) [HKLM] -- Steam App 320
O42 - Logiciel: Half-Life 2: Lost Coast - (.Valve.) [HKLM] -- Steam App 340
O42 - Logiciel: Insurgency: Modern Infantry Combat Dedicated Server - (.Team Insurgency.) [HKLM] -- Steam App 17705
O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424}
O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: KhalInstallWrapper - (.Logitech.) [HKLM] -- {56918C0C-0D87-4CA6-92BF-4975A43AC719}
O42 - Logiciel: Le Maître de l'Olympe - Zeus. - (.Pas de propriétaire.) [HKLM] -- Le Maître de l'Olympe - Zeus.
O42 - Logiciel: Logitech SetPoint - (.Logitech.) [HKLM] -- {2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}
O42 - Logiciel: Logitech Vid - (.Logitech Inc..) [HKLM] -- {4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}
O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {C27BC2A2-30DD-4014-B22E-63EB0DB572F9}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MediaBar - (.Musiclab, LLC.) [HKLM] -- BearShare MediaBar
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: Messenger_Plus_Live Toolbar - (.Pas de propriétaire.) [HKLM] -- Messenger_Plus_Live Toolbar
O42 - Logiciel: Messenger_Plus_Live_France Toolbar - (.Pas de propriétaire.) [HKLM] -- Messenger_Plus_Live_France Toolbar
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: NVIDIA Display Control Panel - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Display Control Panel
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
O42 - Logiciel: Norton Security Scan - (.Symantec Corporation.) [HKLM] -- NSS
O42 - Logiciel: OfferBox Browser - (.Secure Digital Services Limited.) [HKLM] -- OfferBox Browser
O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {97B3824E-B2D2-4C49-A860-BCA56F10B040}
O42 - Logiciel: PIF DESIGNER - (.Pas de propriétaire.) [HKLM] -- {B90450DF-E781-46FD-B1F1-0C86DA40E443}
O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A}
O42 - Logiciel: Panda Antivirus Pro 2011 - (.Panda Security.) [HKLM] -- {E55FB276-73C9-4776-AB53-BC028C0509ED}
O42 - Logiciel: Panda Secure Vault 5 - (.AceBIT GmbH.) [HKLM] -- {B1D3568D-BC21-4C50-92A5-2396570DF1DE}_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SMCWUSB-G 802.11g Wireless USB 2.0 Adapter - (.SMC Networks, Inc.) [HKLM] -- InstallShield_{802C87BF-3A1E-45B0-8C12-9527A5C572B3}
O42 - Logiciel: SafeCast Shared Components - (.Macrovision.) [HKLM] -- CdaC13Ba
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype(TM) 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3}
O42 - Logiciel: TeLL me More - (.Pas de propriétaire.) [HKLM] -- TeLLmeMoreV40
O42 - Logiciel: TrackMania Nations Forever - (.Nadeo.) [HKLM] -- Steam App 11020
O42 - Logiciel: TuneUp Utilities - (.TuneUp Software.) [HKLM] -- TuneUp Utilities
O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM] -- Uninstall_is1
O42 - Logiciel: Veetle TV 0.9.17 - (.Veetle, Inc.) [HKLM] -- Veetle TV
O42 - Logiciel: Virtual DJ - Atomix Productions - (.Pas de propriétaire.) [HKLM] -- Virtual DJ - Atomix Productions
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {F53D678E-238F-4A71-9742-08BB6774E9DC}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {FCFBA290-CB48-4AF1-A241-2685AEDEDD66}
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}
O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
O42 - Logiciel: Windows Live Messenger Companion Core - (.Microsoft Corporation.) [HKLM] -- {78A96B4C-A643-4D0F-98C2-A8E16A6669F9}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
O42 - Logiciel: Windows Live Remote Client - (.Microsoft Corporation.) [HKLM] -- {19A4A990-5343-4FF7-B3B5-6F046C091EDF}
O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM] -- {DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}
O42 - Logiciel: Windows Live Remote Service - (.Microsoft Corporation.) [HKLM] -- {227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}
O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM] -- {AB93C51F-71F9-4A28-8134-FE1B5B9373E9}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: Zoo Tycoon: Complete Collection - (.Pas de propriétaire.) [HKLM] -- Zoo Tycoon 1.0
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\ASIO4ALL v2 by Wuschel]
[HKCU\Software\AVAST Software]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\DVDVideoSoftTB]
[HKCU\Software\AppDataLow\Software\DVDVideoSoft]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\MarkAny]
[HKCU\Software\AppDataLow\Software\Messenger_Plus_Live]
[HKCU\Software\AppDataLow\Software\Messenger_Plus_Live_France]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKCU\Software\AppDataLow\Software\bearsharemediabartb]
[HKCU\Software\AppDataLow\Software\conduitEngine]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\AppDataLow]
[HKCU\Software\AskSearchAsst]
[HKCU\Software\Auralog]
[HKCU\Software\Autodesk]
[HKCU\Software\BearShare]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\DataMngr]
[HKCU\Software\DownloadCenter]
[HKCU\Software\EPSON]
[HKCU\Software\Edusoft-TLC]
[HKCU\Software\FLEXlm License Manager]
[HKCU\Software\Google]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\IZSoftware]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Leadertech]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogiShrd]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OfferBox]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Panda Security]
[HKCU\Software\Panda Software]
[HKCU\Software\Patchou]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\SMC]
[HKCU\Software\Samsung]
[HKCU\Software\SecuROM]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\Veetle]
[HKCU\Software\VirtualDJ]
[HKCU\Software\ej-technologies]
[HKCU\Software\keyhole.com]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ASIO]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVS4YOU]
[HKLM\Software\AceBIT]
[HKLM\Software\Activision]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\Atheros]
[HKLM\Software\Auralog]
[HKLM\Software\Autodesk]
[HKLM\Software\BearShareMediabarTb]
[HKLM\Software\BrowserChoice]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conduit]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\DataMngr]
[HKLM\Software\EPSON]
[HKLM\Software\Gigabyte]
[HKLM\Software\Google]
[HKLM\Software\IZSoftware]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\L&H]
[HKLM\Software\Licenses]
[HKLM\Software\LogiShrd]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Messenger Plus!]
[HKLM\Software\Messenger_Plus_Live]
[HKLM\Software\Messenger_Plus_Live_France]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MusicNet]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\OfferBox]
[HKLM\Software\OpenCandy NSIS SDK]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Panda Security]
[HKLM\Software\Panda Software]
[HKLM\Software\Patchou]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SMC]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sierra On-Line]
[HKLM\Software\Sierra OnLine]
[HKLM\Software\Skype]
[HKLM\Software\Softonic_France]
[HKLM\Software\Sonic]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Symantec]
[HKLM\Software\TENCENT]
[HKLM\Software\Telltale Games]
[HKLM\Software\TuneUp]
[HKLM\Software\Valve]
[HKLM\Software\Veetle]
[HKLM\Software\VirtualDJ]
[HKLM\Software\Volatile]
[HKLM\Software\Waves Audio]
[HKLM\Software\WexTech Systems]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/01/2011 - 16:40:08 - [114154297] ----D- C:\Program Files\Adobe
O43 - CFD: 29/12/2009 - 15:55:48 - [123382454] ----D- C:\Program Files\AGEIA Technologies
O43 - CFD: 02/04/2011 - 19:44:00 - [0] ----D- C:\Program Files\Alwil Software
O43 - CFD: 18/12/2010 - 20:58:00 - [104114] ----D- C:\Program Files\AMD
O43 - CFD: 06/12/2010 - 23:02:50 - [3997789] ----D- C:\Program Files\AnswerWorks 4.0
O43 - CFD: 02/04/2011 - 10:34:34 - [280866] ----D- C:\Program Files\ASIO4ALL v2
O43 - CFD: 02/04/2011 - 10:34:34 - [124870] ----D- C:\Program Files\Ask Search Assistant
O43 - CFD: 02/11/2010 - 21:39:46 - [1618] ----D- C:\Program Files\Ask.com
O43 - CFD: 06/12/2010 - 23:03:06 - [171935898] ----D- C:\Program Files\AutoCAD 2004
O43 - CFD: 06/12/2010 - 22:58:16 - [353519896] ----D- C:\Program Files\Autocad 2004 Fr
O43 - CFD: 06/12/2010 - 23:03:22 - [6531114] ----D- C:\Program Files\Autodesk
O43 - CFD: 02/04/2011 - 19:41:22 - [152412307] ----D- C:\Program Files\AVAST Software
O43 - CFD: 29/12/2009 - 15:55:48 - [27847481] ----D- C:\Program Files\AVS4YOU
O43 - CFD: 05/12/2010 - 19:12:46 - [4766877] ----D- C:\Program Files\BearShare Applications
O43 - CFD: 11/11/2010 - 10:10:44 - [999006] ----D- C:\Program Files\Bing Bar Installer
O43 - CFD: 07/04/2011 - 17:50:48 - [709799809] ----D- C:\Program Files\Common Files
O43 - CFD: 29/12/2009 - 15:55:50 - [537696] ----D- C:\Program Files\Conduit
O43 - CFD: 21/11/2010 - 21:37:22 - [3933149] ----D- C:\Program Files\ConduitEngine
O43 - CFD: 23/01/2011 - 10:49:12 - [7068732] ----D- C:\Program Files\Driver Whiz
O43 - CFD: 14/07/2009 - 11:01:10 - [83226132] ----D- C:\Program Files\DVD Maker
O43 - CFD: 21/11/2010 - 21:35:46 - [21807138] ----D- C:\Program Files\DVDVideoSoft
O43 - CFD: 13/02/2011 - 13:23:28 - [18777053] ----D- C:\Program Files\EA GAMES
O43 - CFD: 05/12/2010 - 19:27:10 - [161653337] ----D- C:\Program Files\epson
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 29/12/2009 - 15:55:50 - [5903409] ----D- C:\Program Files\Gigabyte
O43 - CFD: 02/04/2011 - 10:34:36 - [551205803] ----D- C:\Program Files\Google
O43 - CFD: 07/04/2011 - 18:21:24 - [46632312] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 29/12/2009 - 15:55:52 - [64806] ----D- C:\Program Files\Intel
O43 - CFD: 10/02/2011 - 04:18:42 - [4496553] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 04/08/2010 - 22:18:46 - [87503810] ----D- C:\Program Files\Java
O43 - CFD: 21/11/2010 - 14:51:32 - [17091] ----D- C:\Program Files\LimeWire
O43 - CFD: 02/01/2010 - 19:07:44 - [114758020] ----D- C:\Program Files\Logitech
O43 - CFD: 29/12/2009 - 15:55:54 - [1827624] ----D- C:\Program Files\MarkAny
O43 - CFD: 15/11/2010 - 20:53:18 - [18606502] ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD: 12/03/2010 - 18:56:26 - [2550249] ----D- C:\Program Files\Messenger_Plus_Live
O43 - CFD: 02/07/2010 - 19:35:02 - [7985414] ----D- C:\Program Files\Messenger_Plus_Live_France
O43 - CFD: 10/01/2010 - 13:09:20 - [6041653] ----D- C:\Program Files\Metal Gear Solid
O43 - CFD: 29/12/2009 - 15:55:58 - [2664525] ----D- C:\Program Files\Microsoft
O43 - CFD: 03/01/2010 - 23:22:48 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 30/05/2010 - 12:18:02 - [1278152268] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 06/12/2010 - 22:36:22 - [135765956] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 02/04/2011 - 10:34:36 - [38361211] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/01/2010 - 19:47:24 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 26/06/2010 - 00:08:36 - [146787] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 13/06/2010 - 13:56:22 - [40129499] ----D- C:\Program Files\MSECache
O43 - CFD: 11/11/2010 - 10:10:26 - [6834838] ----D- C:\Program Files\MSN Toolbar
O43 - CFD: 26/12/2009 - 13:48:56 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 18/11/2010 - 20:57:38 - [12605848] ----D- C:\Program Files\Norton Security Scan
O43 - CFD: 18/11/2010 - 20:57:36 - [8446131] ----D- C:\Program Files\NortonInstaller
O43 - CFD: 28/12/2010 - 20:47:52 - [56753623] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 22/02/2011 - 00:21:02 - [3583851] ----D- C:\Program Files\OfferBox
O43 - CFD: 17/01/2010 - 15:16:58 - [782336] ----D- C:\Program Files\OpenAL
O43 - CFD: 11/04/2010 - 18:54:28 - [371455429] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 07/04/2011 - 18:21:38 - [330049113] ----D- C:\Program Files\Panda Security
O43 - CFD: 29/12/2009 - 15:52:36 - [12654304] ----D- C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 06:52:32 - [38597377] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 02/03/2011 - 20:31:38 - [36340] ----D- C:\Program Files\Registry Mechanic
O43 - CFD: 29/12/2009 - 15:56:02 - [7133] ----D- C:\Program Files\Samsung
O43 - CFD: 01/08/2010 - 13:10:34 - [0] ----D- C:\Program Files\Sierra On-Line
O43 - CFD: 04/10/2010 - 19:23:14 - [17468271] R---D- C:\Program Files\Skype
O43 - CFD: 29/12/2009 - 15:56:02 - [9900289] ----D- C:\Program Files\SMC
O43 - CFD: 04/08/2010 - 21:04:56 - [2943022] ----D- C:\Program Files\Softonic_France
O43 - CFD: 13/04/2011 - 13:33:24 - [23347237834] ----D- C:\Program Files\Steam
O43 - CFD: 26/12/2009 - 00:16:48 - [0] --H-D- C:\Program Files\Temp
O43 - CFD: 16/05/2010 - 17:43:24 - [153971931] ----D- C:\Program Files\TLC-Edusoft
O43 - CFD: 11/09/2010 - 13:29:22 - [58257578] ----D- C:\Program Files\TuneUp Utilities 2010
O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 22/08/2010 - 21:18:56 - [37376791] ----D- C:\Program Files\Veetle
O43 -
0
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/01/2011 - 16:40:08 - [114154297] ----D- C:\Program Files\Adobe
O43 - CFD: 29/12/2009 - 15:55:48 - [123382454] ----D- C:\Program Files\AGEIA Technologies
O43 - CFD: 02/04/2011 - 19:44:00 - [0] ----D- C:\Program Files\Alwil Software
O43 - CFD: 18/12/2010 - 20:58:00 - [104114] ----D- C:\Program Files\AMD
O43 - CFD: 06/12/2010 - 23:02:50 - [3997789] ----D- C:\Program Files\AnswerWorks 4.0
O43 - CFD: 02/04/2011 - 10:34:34 - [280866] ----D- C:\Program Files\ASIO4ALL v2
O43 - CFD: 02/04/2011 - 10:34:34 - [124870] ----D- C:\Program Files\Ask Search Assistant
O43 - CFD: 02/11/2010 - 21:39:46 - [1618] ----D- C:\Program Files\Ask.com
O43 - CFD: 06/12/2010 - 23:03:06 - [171935898] ----D- C:\Program Files\AutoCAD 2004
O43 - CFD: 06/12/2010 - 22:58:16 - [353519896] ----D- C:\Program Files\Autocad 2004 Fr
O43 - CFD: 06/12/2010 - 23:03:22 - [6531114] ----D- C:\Program Files\Autodesk
O43 - CFD: 02/04/2011 - 19:41:22 - [152412307] ----D- C:\Program Files\AVAST Software
O43 - CFD: 29/12/2009 - 15:55:48 - [27847481] ----D- C:\Program Files\AVS4YOU
O43 - CFD: 05/12/2010 - 19:12:46 - [4766877] ----D- C:\Program Files\BearShare Applications
O43 - CFD: 11/11/2010 - 10:10:44 - [999006] ----D- C:\Program Files\Bing Bar Installer
O43 - CFD: 07/04/2011 - 17:50:48 - [709799809] ----D- C:\Program Files\Common Files
O43 - CFD: 29/12/2009 - 15:55:50 - [537696] ----D- C:\Program Files\Conduit
O43 - CFD: 21/11/2010 - 21:37:22 - [3933149] ----D- C:\Program Files\ConduitEngine
O43 - CFD: 23/01/2011 - 10:49:12 - [7068732] ----D- C:\Program Files\Driver Whiz
O43 - CFD: 14/07/2009 - 11:01:10 - [83226132] ----D- C:\Program Files\DVD Maker
O43 - CFD: 21/11/2010 - 21:35:46 - [21807138] ----D- C:\Program Files\DVDVideoSoft
O43 - CFD: 13/02/2011 - 13:23:28 - [18777053] ----D- C:\Program Files\EA GAMES
O43 - CFD: 05/12/2010 - 19:27:10 - [161653337] ----D- C:\Program Files\epson
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 29/12/2009 - 15:55:50 - [5903409] ----D- C:\Program Files\Gigabyte
O43 - CFD: 02/04/2011 - 10:34:36 - [551205803] ----D- C:\Program Files\Google
O43 - CFD: 07/04/2011 - 18:21:24 - [46632312] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 29/12/2009 - 15:55:52 - [64806] ----D- C:\Program Files\Intel
O43 - CFD: 10/02/2011 - 04:18:42 - [4496553] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 04/08/2010 - 22:18:46 - [87503810] ----D- C:\Program Files\Java
O43 - CFD: 21/11/2010 - 14:51:32 - [17091] ----D- C:\Program Files\LimeWire
O43 - CFD: 02/01/2010 - 19:07:44 - [114758020] ----D- C:\Program Files\Logitech
O43 - CFD: 29/12/2009 - 15:55:54 - [1827624] ----D- C:\Program Files\MarkAny
O43 - CFD: 15/11/2010 - 20:53:18 - [18606502] ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD: 12/03/2010 - 18:56:26 - [2550249] ----D- C:\Program Files\Messenger_Plus_Live
O43 - CFD: 02/07/2010 - 19:35:02 - [7985414] ----D- C:\Program Files\Messenger_Plus_Live_France
O43 - CFD: 10/01/2010 - 13:09:20 - [6041653] ----D- C:\Program Files\Metal Gear Solid
O43 - CFD: 29/12/2009 - 15:55:58 - [2664525] ----D- C:\Program Files\Microsoft
O43 - CFD: 03/01/2010 - 23:22:48 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 30/05/2010 - 12:18:02 - [1278152268] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 06/12/2010 - 22:36:22 - [135765956] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 02/04/2011 - 10:34:36 - [38361211] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/01/2010 - 19:47:24 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 26/06/2010 - 00:08:36 - [146787] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 13/06/2010 - 13:56:22 - [40129499] ----D- C:\Program Files\MSECache
O43 - CFD: 11/11/2010 - 10:10:26 - [6834838] ----D- C:\Program Files\MSN Toolbar
O43 - CFD: 26/12/2009 - 13:48:56 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 18/11/2010 - 20:57:38 - [12605848] ----D- C:\Program Files\Norton Security Scan
O43 - CFD: 18/11/2010 - 20:57:36 - [8446131] ----D- C:\Program Files\NortonInstaller
O43 - CFD: 28/12/2010 - 20:47:52 - [56753623] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 22/02/2011 - 00:21:02 - [3583851] ----D- C:\Program Files\OfferBox
O43 - CFD: 17/01/2010 - 15:16:58 - [782336] ----D- C:\Program Files\OpenAL
O43 - CFD: 11/04/2010 - 18:54:28 - [371455429] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 07/04/2011 - 18:21:38 - [330049113] ----D- C:\Program Files\Panda Security
O43 - CFD: 29/12/2009 - 15:52:36 - [12654304] ----D- C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 06:52:32 - [38597377] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 02/03/2011 - 20:31:38 - [36340] ----D- C:\Program Files\Registry Mechanic
O43 - CFD: 29/12/2009 - 15:56:02 - [7133] ----D- C:\Program Files\Samsung
O43 - CFD: 01/08/2010 - 13:10:34 - [0] ----D- C:\Program Files\Sierra On-Line
O43 - CFD: 04/10/2010 - 19:23:14 - [17468271] R---D- C:\Program Files\Skype
O43 - CFD: 29/12/2009 - 15:56:02 - [9900289] ----D- C:\Program Files\SMC
O43 - CFD: 04/08/2010 - 21:04:56 - [2943022] ----D- C:\Program Files\Softonic_France
O43 - CFD: 13/04/2011 - 13:33:24 - [23347237834] ----D- C:\Program Files\Steam
O43 - CFD: 26/12/2009 - 00:16:48 - [0] --H-D- C:\Program Files\Temp
O43 - CFD: 16/05/2010 - 17:43:24 - [153971931] ----D- C:\Program Files\TLC-Edusoft
O43 - CFD: 11/09/2010 - 13:29:22 - [58257578] ----D- C:\Program Files\TuneUp Utilities 2010
O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 22/08/2010 - 21:18:56 - [37376791] ----D- C:\Program Files\Veetle
O43 - CFD: 23/01/2011 - 12:51:48 - [17636502] ----D- C:\Program Files\VirtualDJ
O43 - CFD: 14/07/2009 - 10:39:40 - [3049984] ----D- C:\Program Files\Windows Defender
O43 - CFD: 14/07/2009 - 11:01:08 - [7013496] ----D- C:\Program Files\Windows Journal
O43 - CFD: 11/11/2010 - 10:13:48 - [191492015] ----D- C:\Program Files\Windows Live
O43 - CFD: 16/12/2010 - 17:44:10 - [6180864] ----D- C:\Program Files\Windows Mail
O43 - CFD: 16/10/2010 - 03:19:36 - [6607787] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 29/12/2009 - 16:14:36 - [12197556] ----D- C:\Program Files\Windows NT
O43 - CFD: 14/07/2009 - 10:39:40 - [4417800] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 14/07/2009 - 06:52:34 - [189440] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 14/07/2009 - 10:39:40 - [7158589] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 13/04/2011 - 13:49:34 - [3953664] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 16/01/2011 - 16:40:14 - [3515885] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 06/12/2010 - 23:02:50 - [46475986] ----D- C:\Program Files\Common Files\Autodesk Shared
O43 - CFD: 29/12/2009 - 15:55:48 - [42414411] ----D- C:\Program Files\Common Files\AVSMedia
O43 - CFD: 06/12/2010 - 22:36:32 - [197904] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 05/12/2010 - 19:10:12 - [14654586] ----D- C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 05/12/2010 - 19:31:30 - [13368095] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 04/08/2010 - 22:18:58 - [1228747] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 28/12/2010 - 20:47:26 - [39513737] ----D- C:\Program Files\Common Files\logishrd
O43 - CFD: 29/12/2009 - 15:55:48 - [3635769] ----D- C:\Program Files\Common Files\Logitech
O43 - CFD: 06/12/2010 - 23:03:22 - [275616] ----D- C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 06/12/2010 - 22:36:22 - [190683024] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 07/04/2011 - 18:20:58 - [462952] ----D- C:\Program Files\Common Files\Panda Security
O43 - CFD: 14/07/2009 - 04:37:06 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 28/07/2010 - 09:48:12 - [2135336] ----D- C:\Program Files\Common Files\Skype
O43 - CFD: 14/07/2009 - 04:37:06 - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 02/04/2011 - 19:27:58 - [403240] ----D- C:\Program Files\Common Files\Steam
O43 - CFD: 28/03/2011 - 15:15:00 - [0] ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 14/07/2009 - 10:39:40 - [17448035] ----D- C:\Program Files\Common Files\System
O43 - CFD: 29/12/2009 - 15:55:50 - [224041665] ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD: 18/12/2010 - 20:57:58 - [68238336] ----D- C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 16/03/2011 - 15:40:16 - [3172] ----D- C:\ProgramData\2F10
O43 - CFD: 23/01/2011 - 09:45:04 - [124467961] ----D- C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 06/12/2010 - 23:02:34 - [10268] ----D- C:\ProgramData\Autodesk
O43 - CFD: 02/04/2011 - 19:40:58 - [22602100] ----D- C:\ProgramData\AVAST Software
O43 - CFD: 29/12/2009 - 15:56:34 - [0] ----D- C:\ProgramData\AVS4YOU
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 23/01/2011 - 10:49:54 - [1064] ----D- C:\ProgramData\Driver Whiz
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 02/04/2011 - 10:33:26 - [523440] ----D- C:\ProgramData\Google
O43 - CFD: 02/01/2010 - 19:07:36 - [12948686] ----D- C:\ProgramData\LogiShrd
O43 - CFD: 29/12/2009 - 15:56:34 - [23224727] ----D- C:\ProgramData\Logitech
O43 - CFD: 13/03/2011 - 19:51:10 - [19170] ----D- C:\ProgramData\McAfee
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 12/03/2010 - 19:38:14 - [446865] ----D- C:\ProgramData\Messenger Plus!
O43 - CFD: 11/11/2010 - 10:11:44 - [222834604] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 29/12/2009 - 16:14:36 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 18/11/2010 - 20:57:40 - [3337] ----D- C:\ProgramData\Norton
O43 - CFD: 18/11/2010 - 20:57:36 - [67645] ----D- C:\ProgramData\NortonInstaller
O43 - CFD: 29/12/2010 - 17:38:52 - [2269356] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 28/12/2010 - 20:48:00 - [522537] ----D- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 07/04/2011 - 18:21:42 - [6174854] ----D- C:\ProgramData\Panda Security
O43 - CFD: 31/12/2010 - 12:30:38 - [144] ----D- C:\ProgramData\PC Drivers HeadQuarters
O43 - CFD: 15/11/2010 - 20:56:20 - [4569600] ----D- C:\ProgramData\ReviverSoft
O43 - CFD: 10/01/2010 - 20:36:14 - [25107412] ----D- C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 04/08/2010 - 22:18:58 - [119] ----D- C:\ProgramData\Sun
O43 - CFD: 21/11/2010 - 16:32:14 - [8086792] ----D- C:\ProgramData\Symantec
O43 - CFD: 02/03/2011 - 20:31:38 - [0] ---AD- C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 04/12/2010 - 11:30:44 - [189734381] ----D- C:\ProgramData\TrackMania
O43 - CFD: 16/01/2010 - 18:44:20 - [9260180] ----D- C:\ProgramData\TuneUp Software
O43 - CFD: 23/01/2011 - 10:50:10 - [0] ----D- C:\ProgramData\UAB
O43 - CFD: 05/12/2010 - 19:28:40 - [4085087] ----D- C:\ProgramData\UDL
O43 - CFD: 22/11/2010 - 18:30:38 - [0] --H-D- C:\ProgramData\~0
O43 - CFD: 22/01/2011 - 19:59:06 - [3384656] ----D- C:\Users\pcbs\AppData\Roaming\Adobe
O43 - CFD: 06/12/2010 - 23:06:02 - [5525594] ----D- C:\Users\pcbs\AppData\Roaming\Autodesk
O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\AVS4YOU
O43 - CFD: 21/11/2010 - 21:35:52 - [520] ----D- C:\Users\pcbs\AppData\Roaming\DVDVideoSoftIEHelpers
O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Google
O43 - CFD: 13/01/2010 - 19:52:10 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Identities
O43 - CFD: 29/12/2009 - 15:58:14 - [0] ----D- C:\Users\pcbs\AppData\Roaming\InstallShield
O43 - CFD: 02/01/2010 - 19:07:40 - [353] ----D- C:\Users\pcbs\AppData\Roaming\Leadertech
O43 - CFD: 29/12/2009 - 15:58:14 - [30235] ----D- C:\Users\pcbs\AppData\Roaming\Logitech
O43 - CFD: 29/12/2009 - 15:58:14 - [74715] ----D- C:\Users\pcbs\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 11:00:24 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Media Center Programs
O43 - CFD: 22/01/2011 - 19:59:06 - [25950051] -S--D- C:\Users\pcbs\AppData\Roaming\Microsoft
O43 - CFD: 04/08/2010 - 22:19:42 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Mozilla
O43 - CFD: 13/04/2011 - 13:35:24 - [263888] ----D- C:\Users\pcbs\AppData\Roaming\OfferBox
O43 - CFD: 11/04/2010 - 18:58:26 - [2356989] ----D- C:\Users\pcbs\AppData\Roaming\OpenOffice.org
O43 - CFD: 07/04/2011 - 18:21:24 - [0] ----D- C:\Users\pcbs\AppData\Roaming\Panda Security
O43 - CFD: 27/02/2011 - 20:01:16 - [30] ----D- C:\Users\pcbs\AppData\Roaming\Registry Mechanic
O43 - CFD: 25/12/2010 - 21:04:10 - [6309658] ----D- C:\Users\pcbs\AppData\Roaming\Skype
O43 - CFD: 25/12/2010 - 18:27:40 - [16472] ----D- C:\Users\pcbs\AppData\Roaming\skypePM
O43 - CFD: 05/05/2010 - 20:45:00 - [83535] ----D- C:\Users\pcbs\AppData\Roaming\StreamTorrent
O43 - CFD: 17/02/2010 - 20:11:26 - [34305] ----D- C:\Users\pcbs\AppData\Roaming\teamspeak2
O43 - CFD: 26/06/2010 - 12:11:30 - [6325] ----D- C:\Users\pcbs\AppData\Roaming\TS3Client
O43 - CFD: 16/01/2010 - 18:44:24 - [20027] ----D- C:\Users\pcbs\AppData\Roaming\TuneUp Software
O43 - CFD: 18/12/2010 - 22:31:38 - [295] ----D- C:\Users\pcbs\AppData\Roaming\Windows Live Writer
0
2011/04/13 15:19:43.0532 TDSS rootkit removing tool 2.4.1.2 Aug 16 2010 09:46:23
2011/04/13 15:19:43.0532 ================================================================================
2011/04/13 15:19:43.0532 SystemInfo:
2011/04/13 15:19:43.0532
2011/04/13 15:19:43.0532 OS Version: 6.1.7600 ServicePack: 0.0
2011/04/13 15:19:43.0532 Product type: Workstation
2011/04/13 15:19:43.0532 ComputerName: PCBS-PC
2011/04/13 15:19:43.0533 UserName: pcbs
2011/04/13 15:19:43.0533 Windows directory: C:\Windows
2011/04/13 15:19:43.0533 System windows directory: C:\Windows
2011/04/13 15:19:43.0533 Processor architecture: Intel x86
2011/04/13 15:19:43.0533 Number of processors: 4
2011/04/13 15:19:43.0533 Page size: 0x1000
2011/04/13 15:19:43.0533 Boot type: Normal boot
2011/04/13 15:19:43.0533 ================================================================================
2011/04/13 15:19:43.0819 Initialize success
2011/04/13 15:19:47.0468 ================================================================================
2011/04/13 15:19:47.0468 Scan started
2011/04/13 15:19:47.0468 Mode: Manual;
2011/04/13 15:19:47.0468 ================================================================================
2011/04/13 15:19:49.0192 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
2011/04/13 15:19:49.0228 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
2011/04/13 15:19:49.0261 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
2011/04/13 15:19:49.0292 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
2011/04/13 15:19:49.0324 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
2011/04/13 15:19:49.0360 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
2011/04/13 15:19:49.0401 AFD (ddc040fdb01ef1712a6b13e52afb104c) C:\Windows\system32\drivers\afd.sys
2011/04/13 15:19:49.0424 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
2011/04/13 15:19:49.0467 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
2011/04/13 15:19:49.0493 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
2011/04/13 15:19:49.0515 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
2011/04/13 15:19:49.0537 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
2011/04/13 15:19:49.0560 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
2011/04/13 15:19:49.0603 AmdLLD (ad8fa28d8ed0d0a689a0559085ce0f18) C:\Windows\system32\DRIVERS\AmdLLD.sys
2011/04/13 15:19:49.0657 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
2011/04/13 15:19:49.0691 amdsata (2101a86c25c154f8314b24ef49d7fbc2) C:\Windows\system32\DRIVERS\amdsata.sys
2011/04/13 15:19:49.0720 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
2011/04/13 15:19:49.0759 amdxata (b81c2b5616f6420a9941ea093a92b150) C:\Windows\system32\DRIVERS\amdxata.sys
2011/04/13 15:19:49.0819 AmFSM (36b58a8bafe100de90c87a3c0e56a3f2) C:\Windows\system32\DRIVERS\amm8660.sys
2011/04/13 15:19:49.0840 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
2011/04/13 15:19:49.0902 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
2011/04/13 15:19:49.0931 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
2011/04/13 15:19:49.0976 aswFsBlk (1c2e6bb4fe8621b1b863855b02bc33eb) C:\Windows\system32\drivers\aswFsBlk.sys
2011/04/13 15:19:50.0004 aswMonFlt (b0f137f664f10829cd2380b0e20e7c29) C:\Windows\system32\drivers\aswMonFlt.sys
2011/04/13 15:19:50.0043 aswRdr (b6a9373619d851be80fb5f1b5eed0d4e) C:\Windows\system32\drivers\aswRdr.sys
2011/04/13 15:19:50.0089 aswSnx (9be41c1ae8bc481eb662d85c98d979c2) C:\Windows\system32\drivers\aswSnx.sys
2011/04/13 15:19:50.0146 aswSP (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\Windows\system32\drivers\aswSP.sys
2011/04/13 15:19:50.0173 aswTdi (c7f1cea32766184911293f4e1ee653f5) C:\Windows\system32\drivers\aswTdi.sys
2011/04/13 15:19:50.0210 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/04/13 15:19:50.0246 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
2011/04/13 15:19:50.0326 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
2011/04/13 15:19:50.0394 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
2011/04/13 15:19:50.0428 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
2011/04/13 15:19:50.0482 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
2011/04/13 15:19:50.0501 bowser (fcafaef6798d7b51ff029f99a9898961) C:\Windows\system32\DRIVERS\bowser.sys
2011/04/13 15:19:50.0541 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2011/04/13 15:19:50.0570 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2011/04/13 15:19:50.0621 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
2011/04/13 15:19:50.0687 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
2011/04/13 15:19:50.0709 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
2011/04/13 15:19:50.0729 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
2011/04/13 15:19:50.0779 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\DRIVERS\BthEnum.sys
2011/04/13 15:19:50.0812 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
2011/04/13 15:19:50.0844 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
2011/04/13 15:19:50.0896 BTHPORT (4a34888e13224678dd062466afec4240) C:\Windows\system32\Drivers\BTHport.sys
2011/04/13 15:19:50.0943 BTHUSB (fa04c63916fa221dbb91fce153d07a55) C:\Windows\system32\Drivers\BTHUSB.sys
2011/04/13 15:19:51.0012 CdaC15BA (f76cb7259aa575cc53f3996bc6b68c18) C:\Windows\system32\drivers\CDAC15BA.SYS
2011/04/13 15:19:51.0062 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
2011/04/13 15:19:51.0097 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
2011/04/13 15:19:51.0136 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
2011/04/13 15:19:51.0182 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
2011/04/13 15:19:51.0221 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/04/13 15:19:51.0255 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
2011/04/13 15:19:51.0289 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
2011/04/13 15:19:51.0311 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
2011/04/13 15:19:51.0349 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
2011/04/13 15:19:51.0397 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
2011/04/13 15:19:51.0443 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) C:\Windows\system32\Drivers\dfsc.sys
2011/04/13 15:19:51.0482 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
2011/04/13 15:19:51.0522 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
2011/04/13 15:19:51.0570 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
2011/04/13 15:19:51.0653 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
2011/04/13 15:19:51.0753 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
2011/04/13 15:19:51.0934 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
2011/04/13 15:19:51.0965 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
2011/04/13 15:19:52.0026 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
2011/04/13 15:19:52.0055 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
2011/04/13 15:19:52.0098 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
2011/04/13 15:19:52.0149 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
2011/04/13 15:19:52.0171 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
2011/04/13 15:19:52.0204 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/04/13 15:19:52.0238 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
2011/04/13 15:19:52.0277 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
2011/04/13 15:19:52.0316 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
2011/04/13 15:19:52.0351 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
2011/04/13 15:19:52.0376 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
2011/04/13 15:19:52.0429 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
2011/04/13 15:19:52.0455 gdrv (d556cb79967e92b5cc69686d16c1d846) C:\Windows\gdrv.sys
2011/04/13 15:19:52.0496 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
2011/04/13 15:19:52.0521 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/04/13 15:19:52.0541 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
2011/04/13 15:19:52.0576 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
2011/04/13 15:19:52.0633 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
2011/04/13 15:19:52.0679 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
2011/04/13 15:19:52.0750 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
2011/04/13 15:19:52.0804 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
2011/04/13 15:19:52.0830 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
2011/04/13 15:19:52.0850 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/04/13 15:19:52.0887 iaStorV (934af4d7c5f457b9f0743f4299b77b67) C:\Windows\system32\DRIVERS\iaStorV.sys
2011/04/13 15:19:52.0922 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
2011/04/13 15:19:53.0020 IntcAzAudAddService (38d5b498c555403ef637806937ab6639) C:\Windows\system32\drivers\RTKVHDA.sys
2011/04/13 15:19:53.0074 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
2011/04/13 15:19:53.0118 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
2011/04/13 15:19:53.0144 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/04/13 15:19:53.0180 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
2011/04/13 15:19:53.0206 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
2011/04/13 15:19:53.0240 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
2011/04/13 15:19:53.0263 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
2011/04/13 15:19:53.0297 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/04/13 15:19:53.0326 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/04/13 15:19:53.0367 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/04/13 15:19:53.0405 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
2011/04/13 15:19:53.0442 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
2011/04/13 15:19:53.0481 L1C (6c32bfeab708915d6bbf4b20d4f3ef7b) C:\Windows\system32\DRIVERS\L1C62x86.sys
2011/04/13 15:19:53.0533 L8042Kbd (d88846f9f4f27ae9be584a6e5b6b8753) C:\Windows\system32\DRIVERS\L8042Kbd.sys
2011/04/13 15:19:53.0574 L8042mou (bea61fda2103f6f51b14eb0872e8a050) C:\Windows\system32\DRIVERS\L8042mou.Sys
2011/04/13 15:19:53.0664 LHidFilt (3fa98339e8d9e007726be62f231e2015) C:\Windows\system32\DRIVERS\LHidFilt.Sys
2011/04/13 15:19:53.0694 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
2011/04/13 15:19:53.0740 LMouFilt (f259f758e04d8fb8d48c6cdbe45223e8) C:\Windows\system32\DRIVERS\LMouFilt.Sys
2011/04/13 15:19:53.0760 LMouKE (cab504e38fced9a56d87d838e9ba13e9) C:\Windows\system32\DRIVERS\LMouKE.Sys
2011/04/13 15:19:53.0805 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
2011/04/13 15:19:53.0834 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
2011/04/13 15:19:53.0871 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2011/04/13 15:19:53.0901 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2011/04/13 15:19:53.0943 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
2011/04/13 15:19:53.0986 lvpopflt (9fb982de1c8dd769f8ed681dd878b12f) C:\Windows\system32\DRIVERS\lvpopflt.sys
2011/04/13 15:19:54.0018 LVPr2Mon (1a7db7a00a4b0d8da24cd691a4547291) C:\Windows\system32\DRIVERS\LVPr2Mon.sys
2011/04/13 15:19:54.0073 LVRS (a1857fbb9b4930eeb2fd92386c45c529) C:\Windows\system32\DRIVERS\lvrs.sys
2011/04/13 15:19:54.0180 LVUVC (3703406af0726badd24c5e552493e5b1) C:\Windows\system32\DRIVERS\lvuvc.sys
2011/04/13 15:19:54.0330 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
2011/04/13 15:19:54.0368 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
2011/04/13 15:19:54.0407 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
2011/04/13 15:19:54.0463 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
2011/04/13 15:19:54.0486 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
2011/04/13 15:19:54.0541 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
2011/04/13 15:19:54.0575 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
2011/04/13 15:19:54.0607 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
2011/04/13 15:19:54.0695 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
2011/04/13 15:19:54.0730 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
2011/04/13 15:19:54.0755 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/04/13 15:19:54.0782 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/04/13 15:19:54.0815 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/04/13 15:19:54.0848 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
2011/04/13 15:19:54.0888 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
2011/04/13 15:19:54.0933 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
2011/04/13 15:19:54.0958 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
2011/04/13 15:19:54.0976 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
2011/04/13 15:19:55.0018 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
2011/04/13 15:19:55.0048 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/04/13 15:19:55.0090 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
2011/04/13 15:19:55.0122 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
2011/04/13 15:19:55.0156 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/04/13 15:19:55.0176 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
2011/04/13 15:19:55.0196 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
2011/04/13 15:19:55.0220 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
2011/04/13 15:19:55.0264 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
2011/04/13 15:19:55.0291 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
2011/04/13 15:19:55.0322 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
2011/04/13 15:19:55.0346 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/04/13 15:19:55.0368 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/04/13 15:19:55.0388 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/04/13 15:19:55.0407 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
2011/04/13 15:19:55.0425 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
2011/04/13 15:19:55.0473 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
2011/04/13 15:19:55.0527 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
2011/04/13 15:19:55.0559 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
2011/04/13 15:19:55.0586 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
2011/04/13 15:19:55.0641 Ntfs (3795dcd21f740ee799fb7223234215af) C:\Windows\system32\drivers\Ntfs.sys
2011/04/13 15:19:55.0687 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
2011/04/13 15:19:55.0721 NVHDA (8571011b62ce0207fa1dc95d88308f1d) C:\Windows\system32\drivers\nvhda32v.sys
2011/04/13 15:19:55.0934 nvlddmkm (377140a534d013bd661c69f1741de43c) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/04/13 15:19:56.0240 nvraid (3f3d04b1d08d43c16ea7963954ec768d) C:\Windows\system32\DRIVERS\nvraid.sys
2011/04/13 15:19:56.0266 nvstor (c99f251a5de63c6f129cf71933aced0f) C:\Windows\system32\DRIVERS\nvstor.sys
2011/04/13 15:19:56.0295 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
2011/04/13 15:19:56.0313 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/04/13 15:19:56.0385 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
2011/04/13 15:19:56.0403 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
2011/04/13 15:19:56.0432 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
2011/04/13 15:19:56.0537 pavboot (55d654258a9c509b671310c314bd30b4) C:\Windows\system32\Drivers\pavboot.sys
2011/04/13 15:19:56.0619 PavProc (018f51f5757819fcd9f32162c9808565) C:\Windows\system32\DRIVERS\PavProc.sys
2011/04/13 15:19:56.0704 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
2011/04/13 15:19:56.0736 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
2011/04/13 15:19:56.0770 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
2011/04/13 15:19:56.0802 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
2011/04/13 15:19:56.0841 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
2011/04/13 15:19:56.0940 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
2011/04/13 15:19:56.0969 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
2011/04/13 15:19:57.0020 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
2011/04/13 15:19:57.0083 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
2011/04/13 15:19:57.0175 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
2011/04/13 15:19:57.0204 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
2011/04/13 15:19:57.0230 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
2011/04/13 15:19:57.0281 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
2011/04/13 15:19:57.0305 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/04/13 15:19:57.0329 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/04/13 15:19:57.0348 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
2011/04/13 15:19:57.0387 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
2011/04/13 15:19:57.0411 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
2011/04/13 15:19:57.0445 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/04/13 15:19:57.0473 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
2011/04/13 15:19:57.0532 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
2011/04/13 15:19:57.0561 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
2011/04/13 15:19:57.0619 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
2011/04/13 15:19:57.0705 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
2011/04/13 15:19:57.0746 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
2011/04/13 15:19:57.0804 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
2011/04/13 15:19:57.0838 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
2011/04/13 15:19:57.0955 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
2011/04/13 15:19:57.0986 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
2011/04/13 15:19:58.0023 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
2011/04/13 15:19:58.0088 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
2011/04/13 15:19:58.0120 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
2011/04/13 15:19:58.0142 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\Windows\system32\drivers\sffp_sd.sys
2011/04/13 15:19:58.0165 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
2011/04/13 15:19:58.0232 ShldDrv (a2f0bf07cac43a11555c173f7b1ad28a) C:\Windows\system32\DRIVERS\ShlDrv51.sys
2011/04/13 15:19:58.0270 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
2011/04/13 15:19:58.0301 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2011/04/13 15:19:58.0337 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
2011/04/13 15:19:58.0372 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
2011/04/13 15:19:58.0417 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
2011/04/13 15:19:58.0483 srv (2dbedfb1853f06110ec2aa7f3213c89f) C:\Windows\system32\DRIVERS\srv.sys
2011/04/13 15:19:58.0536 srv2 (db37131d1027c50ea7ee21c8bb4536aa) C:\Windows\system32\DRIVERS\srv2.sys
2011/04/13 15:19:58.0577 srvnet (f5980b74124db9233b33f86fc5ebbb4f) C:\Windows\system32\DRIVERS\srvnet.sys
2011/04/13 15:19:58.0658 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
2011/04/13 15:19:58.0718 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
2011/04/13 15:19:58.0811 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\drivers\tcpip.sys
2011/04/13 15:19:58.0860 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) C:\Windows\system32\DRIVERS\tcpip.sys
2011/04/13 15:19:58.0898 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
2011/04/13 15:19:58.0938 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
2011/04/13 15:19:58.0959 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
2011/04/13 15:19:58.0984 tdx (cb39e896a2a83702d1737bfd402b3542) C:\Windows\system32\DRIVERS\tdx.sys
2011/04/13 15:19:59.0003 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
2011/04/13 15:19:59.0074 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/04/13 15:19:59.0159 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
2011/04/13 15:19:59.0194 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
2011/04/13 15:19:59.0228 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
2011/04/13 15:19:59.0260 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
2011/04/13 15:19:59.0316 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
2011/04/13 15:19:59.0355 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
2011/04/13 15:19:59.0387 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
2011/04/13 15:19:59.0432 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
2011/04/13 15:19:59.0466 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/04/13 15:19:59.0486 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
2011/04/13 15:19:59.0511 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) C:\Windows\system32\DRIVERS\usbehci.sys
2011/04/13 15:19:59.0534 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) C:\Windows\system32\DRIVERS\usbhub.sys
2011/04/13 15:19:59.0584 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\DRIVERS\usbohci.sys
2011/04/13 15:19:59.0648 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
2011/04/13 15:19:59.0691 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
2011/04/13 15:19:59.0739 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/04/13 15:19:59.0770 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/04/13 15:19:59.0829 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
2011/04/13 15:19:59.0876 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/04/13 15:19:59.0900 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
2011/04/13 15:19:59.0920 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
2011/04/13 15:19:59.0961 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
2011/04/13 15:19:59.0987 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
2011/04/13 15:20:00.0016 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
2011/04/13 15:20:00.0038 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
2011/04/13 15:20:00.0060 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
2011/04/13 15:20:00.0095 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
2011/04/13 15:20:00.0126 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
2011/04/13 15:20:00.0161 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
2011/04/13 15:20:00.0197 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
2011/04/13 15:20:00.0237 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
2011/04/13 15:20:00.0252 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
2011/04/13 15:20:00.0308 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
2011/04/13 15:20:00.0337 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
2011/04/13 15:20:00.0392 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
2011/04/13 15:20:00.0432 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
2011/04/13 15:20:00.0506 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
2011/04/13 15:20:00.0568 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/04/13 15:20:00.0645 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
2011/04/13 15:20:00.0695 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
2011/04/13 15:20:00.0727 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/04/13 15:20:00.0792 ================================================================================
2011/04/13 15:20:00.0792 Scan finished
2011/04/13 15:20:00.0792 ================================================================================
0
c 'es le scan tdsskiller
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
Modifié par Smart91 le 13/04/2011 à 19:19
Cette fois-ci TDSSKiller est bien passé.
En revanche il faiy que tu postes le rapport ZHPDiag via cijoint comme demandé, car il est trop long pour être mis directement dans la réponse

Smart
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)
0
le probleme c'est que je n'arrive pas a le poste avec ci joint et l'autre site
0
le pc bloque ou internet
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
14 avril 2011 à 11:16
J'ai vu que tu avais deux antivirus Avast et Panda, cela ne sert à rien, sinon que d'engendrer des conflits et ralentir ton PC. Il ne faut en garder qu'un seul

J'ai vu également que tu as des barres d'outils infectées et qq addawares.
Mais on va d'abord s'occuper pour quoi tune peusx pas télécharger les rapports. On fera ensuite le rests

Maintenant tu vas faire ceci:
- Télécharge sur le bureau RogueKiller de Tigzy
- Quitte tous tes programmes en cours
- Sous Vista/Seven , clique droit -> lancer en tant qu'administrateur
- Sinon lance simplement RogueKiller.exe
- Lorsque demandé, tape 1 [SCAN] et valide
- Un rapport (RKreport.txt) a du se créer sur le bureau, poste-le.

* Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois. Si cela ne passe toujours pas , (cela peut arriver), renommer RogueKiller.exe en Winlogon.exe

Smart
0
no iitems founf
0
Smart91 Messages postés 29096 Date d'inscription dimanche 15 juillet 2007 Statut Contributeur sécurité Dernière intervention 5 avril 2014 2 327
14 avril 2011 à 15:02
Tu peux poster le rapport directement dans ta réponse STP

Smart
0
pas de rapport
0