Redirections liens googles.. virus

Question

Bonjour, 

Quand je click sur un liens google cela me redirige 2 fois sur 3 sur de mauvais sites.. J'ai passé hijacjthis mais je ne sais pas quoi ''fixé'' pour éliminer le virus.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:50:44, on 2011-04-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Digidesign\Drivers\MMERefresh.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\NVIDIA Corporation\Performance Drivers
vPDsvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Avid\Avid Media Composer\AvidMediaComposer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Bureau\HuJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.showbizz.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation
View
wiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: itlnfw32 - itlnfw32.dll (file missing)
O20 - Winlogon Notify: itlntfy - itlnfw32.dll (file missing)
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Performance Driver Service - Unknown owner - C:\Program Files\NVIDIA Corporation\Performance Drivers
vPDsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

Utilisateur anonyme · Answer

Salut,  


Nous allons effectuer un diagnostic plus profond de ton PC:   
*Télécharge ZHPDiag sur ton bureau :   

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html   
ou :   
http://www.premiumorange.com/zeb-help-process/zhpdiag.html   

* Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"   

/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »   

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)   
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette   
* Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :   
http://pjjoint.malekal.com/   

Si indisponible:   
http://www.cijoint.fr/   

* Tuto zhpdiag :   
http://www.premiumorange.com/zeb-help-process/zhpdiag.html   


Hébergement de rapport sur pjjoint.malekal.com   

* Rends toi sur http://pjjoint.malekal.com/   
* Clique sur le bouton Parcourir   
* Sélectionne le fichier que tu veux heberger et clique sur Ouvrir   
*Clique sur le bouton Envoyer   
* Un message de confirmation s'affiche, copie le lien dans ta prochaine réponse.  
@+
H.F.  :  Fish66

Blackmonster2 · Answer

Voici le rapport

https://pjjoint.malekal.com/files.php?id=0dadd9c1d57158

Utilisateur anonyme · Answer

Re,  

Plusieurs infections :vundo,rootkit,rogue.... 

On commence par ceci : 

1/  
* Télécharge load_tdsskiller (de Loup Blanc) sur ton Bureau   

http://fradesch.perso.cegetel.net/transf/Load_tdsskiller.exe   

* Lance load_tdsskiller en faisant un double-clic dessus / Lance par un clic-droit dessus ? Exécuter en temps qu'administrateur   
* L'outil va se connecter pour télécharger une copie à jour de TDSSKiller, puis va lancer une analyse   
* Lorsque l'outil a terminé son travail d'inspection, si des nuisibles ("Malicious objects") ont été trouvés, vérifier que l'option (Cure) est sélectionnée,   
* Si des objects suspects ("Suspicious objects") ont été détectés, sur l'écran de demande de confirmation, modifier l'action à entreprendre et indiquer Quarantine (au lieu de Skip),   
* A la fin, il te sera demandé d'appuyer sur une touche, puis le rapport s'affichera automatiquement : copie-colle son contenu dans ta prochaine réponse (C:	dsskillereport.txt)   

2/  
 * Télécharge sur le bureau RogueKiller (par tigzy)  
https://www.luanagames.com/index.fr.html  


*( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )  

* Quitte tous tes programmes en cours  
* Lance RogueKiller.exe.  
* Lorsque demandé, tape 2 et valide  
* Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse  
* Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois.  


puis  


*Télécharges Malwarebytes' (mbam)  

ICI >> Malwarebytes' (mbam)  


* installes + mise a jour  
* Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) sans les ouvrir  
* Lances--> Malwarebytes (MBAM)  
* Puis vas dans l'onglet "Recherche", coche >>Exécuter un examen complet  
* puis "Rechercher"  
* Sélectionnes tes disques durs" puis clique sur "Lancer l'examen"  
* A la fin du scan, clique sur Afficher les résultats puis sur Enregistrer le rapport  
*Si MalwareBytes' détecte des infections, clique sur ==>Afficher les résultats, puis sur ==>Supprimer la sélection  
* S'il t' es demandé de redémarrer, clique sur "oui "  
* aprés la suppression(s) de ou des infections trouvées --> poste le rapport ici  
!!! Ne pas vider la quarantaine de MBAM sans avis !!!  

J'attend les trois rapports 

@+  
H.F.  :  Fish66

Blackmonster2 · Answer

TdSSKiller a riens trouver et suite a un redémarrage jai pus le rapport

RogueKiller V4.3.8 par Tigzy
contact sur https://www.luanagames.com/index.fr.html
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version
Demarrage : Mode normal
Utilisateur: Administrateur [Droits d'admin]
Mode: Suppression -- Date : 13/04/2011 16:47:37

Processus malicieux: 9
[SVCHOST] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED
[RESIDUE] svchost.exe -- c:\windows\system32\svchost.exe -> KILLED

Entrees de registre: 0

Fichier HOSTS:

Termine : << RKreport[1].txt >>
RKreport[1].txt

Malwarbytes est en cours mais d'habitude il ne trouve plus rien..

Blackmonster2 · Answer

Voicie le rapport de Malwarebytes mais le probleme de redirection ne semble pas résolu :(

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6354

Windows 5.1.2600 Service Pack 2
Internet Explorer 7.0.5730.11

2011-04-14 08:53:25
mbam-log-2011-04-14 (08-53-25).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 226484
Temps écoulé: 1 heure(s), 18 minute(s), 28 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Q7NZMT7RLB (Trojan.FakeAlert.SA) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Utilisateur anonyme · Answer

Re,

La désinfection n'est pas encore terminé, on vient de commencer !

Le rapport TDSSKiller est ici  : (C:	dsskillereport.txt) 

stp de me l'envoyer.



1/

Attention, avant de commencer, lit attentivement la procédure 

/!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\ 

? Fais un clic droit sur ce lien, enregistre le dans ton bureau 

Voici Aide combofix 


? /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\ 
 

? Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven) 

Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter 

? ? SURTOUT INSTALLES LA CONSOLE DE RECUPERATION 
(si il te propose de l'installer remets internet) 

? Mets-le en langue française F 

? Tape sur la touche 1 (Yes) pour démarrer le scan. 


? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC 

?En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire. 

? Une fois le scan achevé, un rapport va s'afficher : Poste son contenu 

? ? /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\ 

? Note : Le rapport se trouve également là : C:\ComboFix.txt  


2/

 * Télécharge de AD-Remover sur ton Bureau. 
http://www.teamxscript.org/adremoverTelechargement.html 

/!\ Ferme toutes applications en cours /!\ 

- Double-clique sur l'icône Ad-remover située sur ton Bureau. 
- Sur la page, clique sur le bouton « Nettoyer » 
- Confirme lancement du scan 
- Laisse travailler l'outil. 
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c


@+

Blackmonster2 · Answer

ComboFix 11-04-13.04 - Administrateur 2011-04-14   9:31.1.2 - x86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.2.1036.18.2942.2325 [GMT -4:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
 * Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrateur\Application Data\Adobe\plugs
c:\documents and settings\Administrateur\Application Data\Adobe\shed
c:\documents and settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web 
c:	dsskiller	dsskiller.exe
c:\windows\system32\_000116_.tmp.dll
c:\windows\system32\images
c:\windows\system32\images\+ DOSSIER UTILISE PAR LE PROGRAMME 'ENREGISTREZ SOUS EDITEUR'
c:\windows\system32\images\1.ico
c:\windows\system32\images\2.ico
c:\windows\system32\images\3.ico
c:\windows\system32\images\4.ico
c:\windows\system32\images\5.ico
c:\windows\system32\images\Flèche bas.ico
c:\windows\system32\images\Flèche haut.ico
c:\windows\system32\itlnfw32.dll
c:\windows\system32\itlpfw32.dll
c:\windows\system32\LANG\ENGLISH.LNG
.
c:\windowsegedit.exe . . . est infecté!!
.
.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_6TO4
-------\Legacy_ITLPERF
-------\Service_6to4
-------\Service_itlperf
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2011-03-14 au 2011-04-14  ))))))))))))))))))))))))))))))))))))
.
.
2011-04-13 21:12 . 2011-04-13 21:12	--------	d-----w-	c:\program files\ESET
2011-04-13 21:06 . 2011-04-14 13:39	--------	d-----w-	C:	dsskiller
2011-04-13 19:21 . 2011-04-13 19:21	512	----a-w-	C:\PhysicalDisk0_MBR.bin
2011-04-13 19:17 . 2011-04-13 19:39	--------	d-----w-	c:\program files\ZHPDiag
2011-04-06 21:32 . 2011-04-06 21:32	--------	d-----w-	c:\documents and settings\Administrateur\Application Data\Malwarebytes
2011-04-06 21:32 . 2010-12-20 22:09	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-06 21:32 . 2011-04-06 21:32	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-06 21:31 . 2011-04-06 21:32	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2011-04-06 21:31 . 2010-12-20 22:08	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-04-06 21:27 . 2011-02-23 13:54	19544	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2011-04-06 21:27 . 2011-02-23 13:56	301528	----a-w-	c:\windows\system32\drivers\aswSP.sys
2011-04-06 21:27 . 2011-02-23 13:57	101976	----a-w-	c:\windows\system32\drivers\aswFW.sys
2011-04-06 21:26 . 2011-02-23 13:56	192728	----a-w-	c:\windows\system32\drivers\aswNdis2.sys
2011-04-06 21:26 . 2011-02-23 13:55	49240	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2011-04-06 21:26 . 2011-02-23 13:55	25432	----a-w-	c:\windows\system32\drivers\aswRdr.sys
2011-04-06 21:26 . 2011-02-23 13:56	371544	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2011-04-06 21:26 . 2011-02-23 13:55	102232	----a-w-	c:\windows\system32\drivers\aswmon2.sys
2011-04-06 21:26 . 2011-02-23 13:55	96344	----a-w-	c:\windows\system32\drivers\aswmon.sys
2011-04-06 21:26 . 2011-02-23 13:54	30680	----a-w-	c:\windows\system32\drivers\aavmker4.sys
2011-04-06 21:24 . 2011-02-23 12:34	12112	----a-w-	c:\windows\system32\drivers\aswNdis.sys
2011-04-06 21:24 . 2011-02-23 14:04	40648	----a-w-	c:\windows\avastSS.scr
2011-04-06 21:24 . 2011-02-23 14:04	190016	----a-w-	c:\windows\system32\aswBoot.exe
2011-04-06 21:24 . 2011-04-06 21:24	--------	d-----w-	c:\program files\AVAST Software
2011-04-06 21:24 . 2011-04-06 21:24	--------	d-----w-	c:\documents and settings\All Users\Application Data\AVAST Software
2011-04-06 21:10 . 2011-04-06 21:10	90112	--sha-r-	c:\windows\system32\kbdesw.dll
2011-04-06 21:10 . 2011-04-06 21:10	90112	--sha-r-	c:\windows\system32\devmgrx.dll
2011-04-06 21:10 . 2011-04-07 20:34	--------	d-----w-	c:\documents and settings\Administrateur\Application Data\255234EE7D8EC9004D7DFCE4AC3D60AB
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-07 21:12 . 2011-04-07 21:12	20081	----a-w-	c:\windows\system32\itlnfw32.zip
.
.
------- Sigcheck -------
.
[-] 2006-11-11 . 8D8949936913B041C6A0E184FBF1030B . 359808 . . [5.1.2600.2892] . . c:\windows\system32\drivers	cpip.sys
.
[-] 2006-11-18 . 7BA68DF484B550C1F75DD80AE1D7EF67 . 1035264 . . [6.00.2900.2649] . . c:\windows\explorer.exe
.
.
[-] 2006-12-13 . 0CEF991C04073F5EC8BFD65B961705F1 . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
c:\windows\System32\wscntfy.exe ... manque !!
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04	122512	----a-w-	c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-24 39408]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 61952]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"SoundMan"="SOUNDMAN.EXE" [2006-07-21 86016]
"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 2808832]
"DigidesignMMERefresh"="c:\program files\Digidesign\Drivers\MMERefresh.exe" [2007-10-31 77824]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-19 13680640]
"nwiz"="c:\program files\NVIDIA Corporation
View
wiz.exe" [2009-07-09 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-19 86016]
"CTHelper"="CTHELPER.EXE" [2003-06-20 24576]
"AsioReg"="CTASIO.DLL" [2003-06-20 118784]
"SBDrvDet"="c:\program files\Creative\SB Drive Det\SBDrvDet.exe" [2002-12-03 45056]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"Share-to-Web Namespace Daemon"="c:\program files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2002-04-17 69632]
"AdobeCS4ServiceManager"="c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-02-23 3451496]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]
.
c:\documents and settings\Administrateur\Menu D'marrer\Programmes\D'marrage\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-4-16 384000]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\LMIinit]
2009-09-28 23:34	87352	----a-w-	c:\windows\system32\LMIinit.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"wave1"=Digi32.dll
"MIDI1"=diomidi.dll
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\Avid\MetaSync\jre\bin\java.exe"=
"c:\Program Files\BitLord\BitLord.exe"=
"c:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
.
R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [2011-04-06 12112]
R0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [2011-04-06 192728]
R1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [2011-04-06 101976]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-04-06 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-04-06 301528]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-04-06 19544]
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2011-04-06 121000]
R2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\drivers\diginet.sys [2009-08-18 16400]
R2 NVIDIA Performance Driver Service;NVIDIA Performance Driver Service;c:\program files\NVIDIA Corporation\Performance Drivers
vPDsvc.exe [2008-12-11 3575808]
R3 Flamethrower;Flamethrower;c:\windows\system32\drivers\Flamethrower.sys [2009-08-18 133408]
S0 DigiFilter;DigiFilter;c:\windows\system32\drivers\DigiFilt.sys --> c:\windows\system32\drivers\DigiFilt.sys [?]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-28 135664]
S2 khlmzzmm;Microsoft UAA Function  for High Definition Audio ServiceController;c:\windows\System32\svchost.exe -k netsvcs [2004-08-19 14336]
S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys --> c:\program files\LogMeIn\x86\RaInfo.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
itlsvc	REG_MULTI_SZ   	itlperf
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
khlmzzmm
.
Contenu du dossier 'Tâches planifiées'
.
2011-04-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-28 22:50]
.
2011-04-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-28 22:50]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.showbizz.net/
uInternet Settings,ProxyOverride = *.local
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
FF - ProfilePath - 
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKLM-Run-LogMeIn GUI - c:\program files\LogMeIn\x86\LogMeInSystray.exe
Notify-itlntfy - itlnfw32.dll
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-14 09:46
Windows 5.1.2600 Service Pack 2 NTFS
.
Recherche de processus cachés ... 
.
Recherche d'éléments en démarrage automatique cachés ... 
.
Recherche de fichiers cachés ... 
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"WinSock_Registry_Version"="2.0"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(1148)
c:\windows\system32\LMIinit.dll
.
- - - - - - - > 'explorer.exe'(1268)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32undll32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32
vsvc32.exe
c:\windows\SOUNDMAN.EXE
c:\windows\ALCWZRD.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\program files\Java\jre6\bin\jucheck.exe
.
**************************************************************************
.
Heure de fin: 2011-04-14  09:53:12 - La machine a redémarré
ComboFix-quarantined-files.txt  2011-04-14 13:53
.
Avant-CF: 11 683 196 928 octets libres
Après-CF: 14 478 073 856 octets libres
.
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel Avid 2.7GB" /3GB /userva=2700 /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect
.
- - End Of File - - 338B64150F2BACB48ED6A0B531E8DE1C

Blackmonster2 · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 10:05:04 le 14/04/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 2 (X86) 
Administrateur@LATÉLÉVISION ( ) 
 
============== RECHERCHE ==============





============== SCAN ADDITIONNEL ==============

**** Internet Explorer Version [7.0.5730.11] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 14/04/2011 09:58:48 (1897 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 14/04/2011 09:57:42 (1557 Octet(s)) 
C:\Ad-Report-SCAN[2].txt - 14/04/2011 10:05:35 (443 Octet(s)) 

Fin à: 10:06:10, 14/04/2011 
 
============== E.O.F ==============

Blackmonster2 · Answer

( J'ai fait ce scan avant les deux autres) 2011/04/14 09:18:38.0859 2144	TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/04/14 09:18:39.0046 2144	================================================================================
2011/04/14 09:18:39.0046 2144	SystemInfo:
2011/04/14 09:18:39.0046 2144	
2011/04/14 09:18:39.0046 2144	OS Version: 5.1.2600 ServicePack: 2.0
2011/04/14 09:18:39.0046 2144	Product type: Workstation
2011/04/14 09:18:39.0046 2144	ComputerName: LATÉLÉVISION
2011/04/14 09:18:39.0046 2144	UserName: Administrateur
2011/04/14 09:18:39.0046 2144	Windows directory: C:\WINDOWS
2011/04/14 09:18:39.0046 2144	System windows directory: C:\WINDOWS
2011/04/14 09:18:39.0046 2144	Processor architecture: Intel x86
2011/04/14 09:18:39.0046 2144	Number of processors: 2
2011/04/14 09:18:39.0046 2144	Page size: 0x1000
2011/04/14 09:18:39.0046 2144	Boot type: Normal boot
2011/04/14 09:18:39.0046 2144	================================================================================
2011/04/14 09:18:39.0437 2144	Initialize success
2011/04/14 09:18:59.0109 1344	================================================================================
2011/04/14 09:18:59.0109 1344	Scan started
2011/04/14 09:18:59.0109 1344	Mode: Manual; 
2011/04/14 09:18:59.0109 1344	================================================================================
2011/04/14 09:19:00.0328 1344	61883           (86d7b1e70661d754685b9ac6d749aae5) C:\WINDOWS\system32\DRIVERS\61883.sys
2011/04/14 09:19:01.0406 1344	Aavmker4        (83631291adf2887cffc786d034d3fa15) C:\WINDOWS\system32\drivers\Aavmker4.sys
2011/04/14 09:19:04.0343 1344	ACPI            (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/04/14 09:19:05.0296 1344	ACPIEC          (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/04/14 09:19:06.0265 1344	adfs            (6d7f09cd92a9fef3a8efce66231fdd79) C:\WINDOWS\system32\drivers\adfs.sys
2011/04/14 09:19:08.0046 1344	aec             (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
2011/04/14 09:19:08.0968 1344	AFD             (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
2011/04/14 09:19:09.0890 1344	AFS2K           (b34b1ab0a7690a0e2301fec6d17b2fc1) C:\WINDOWS\system32\drivers\AFS2K.sys
2011/04/14 09:19:15.0312 1344	Arp1394         (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
2011/04/14 09:19:20.0093 1344	Aspi32          (b979979ab8027f7f53fb16ec4229b7db) C:\WINDOWS\system32\drivers\Aspi32.sys
2011/04/14 09:19:21.0015 1344	aswFsBlk        (1c2e6bb4fe8621b1b863855b02bc33eb) C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011/04/14 09:19:22.0156 1344	aswFW           (1ad83bfec454d43992a5b4333abc8769) C:\WINDOWS\system32\drivers\aswFW.sys
2011/04/14 09:19:23.0125 1344	aswMon2         (452d0ecd14fa02f9b061f42c8a30dd49) C:\WINDOWS\system32\drivers\aswMon2.sys
2011/04/14 09:19:24.0140 1344	aswNdis         (7b948e3657bea62e437bc46ca6ef6012) C:\WINDOWS\system32\DRIVERS\aswNdis.sys
2011/04/14 09:19:25.0093 1344	aswNdis2        (892e24024f23b9fdeffeddddffbaf1ea) C:\WINDOWS\system32\drivers\aswNdis2.sys
2011/04/14 09:19:26.0000 1344	aswRdr          (b6a9373619d851be80fb5f1b5eed0d4e) C:\WINDOWS\system32\drivers\aswRdr.sys
2011/04/14 09:19:26.0921 1344	aswSnx          (9be41c1ae8bc481eb662d85c98d979c2) C:\WINDOWS\system32\drivers\aswSnx.sys
2011/04/14 09:19:28.0656 1344	aswSP           (4b1a54ba2bc5873a774df6b70ab8b0b3) C:\WINDOWS\system32\drivers\aswSP.sys
2011/04/14 09:19:29.0609 1344	aswTdi          (c7f1cea32766184911293f4e1ee653f5) C:\WINDOWS\system32\drivers\aswTdi.sys
2011/04/14 09:19:30.0531 1344	AsyncMac        (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/04/14 09:19:32.0125 1344	atapi           (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/04/14 09:19:37.0046 1344	Atmarpc         (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/04/14 09:19:39.0796 1344	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/04/14 09:19:42.0640 1344	Avc             (87c223adb8f7596b31caae3c67b16ddd) C:\WINDOWS\system32\DRIVERS\avc.sys
2011/04/14 09:19:45.0328 1344	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/04/14 09:19:46.0531 1344	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/04/14 09:19:47.0843 1344	CCDECODE        (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/04/14 09:19:51.0171 1344	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/04/14 09:19:52.0734 1344	Cdfs            (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/04/14 09:19:54.0828 1344	Cdrom           (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/04/14 09:19:59.0734 1344	ctac32k         (e7610aba1f551eb77b6bb2274d194f93) C:\WINDOWS\system32\drivers\ctac32k.sys
2011/04/14 09:20:00.0953 1344	ctaud2k         (e9ee8b502acfbd0955d081d7a1ccce24) C:\WINDOWS\system32\drivers\ctaud2k.sys
2011/04/14 09:20:01.0906 1344	ctdvda2k        (437f2b31ba8b6b264d38b4fe6682faec) C:\WINDOWS\system32\drivers\ctdvda2k.sys
2011/04/14 09:20:02.0875 1344	ctprxy2k        (90fd30ea61c68df474a0b398f03e6d9b) C:\WINDOWS\system32\drivers\ctprxy2k.sys
2011/04/14 09:20:03.0796 1344	ctsfm2k         (ab564ee9668bf9af1c3e5544cceade1d) C:\WINDOWS\system32\drivers\ctsfm2k.sys
2011/04/14 09:20:08.0921 1344	DigiNet         (ca0e55b8570e3f4baf8855c3d78e9cc5) C:\WINDOWS\system32\DRIVERS\diginet.sys
2011/04/14 09:20:09.0984 1344	Disk            (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/04/14 09:20:11.0000 1344	dmboot          (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys
2011/04/14 09:20:12.0000 1344	dmio            (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys
2011/04/14 09:20:12.0921 1344	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/04/14 09:20:13.0859 1344	DMusic          (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2011/04/14 09:20:16.0765 1344	drmkaud         (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/04/14 09:20:17.0750 1344	E100B           (5c940a174dfb2c42b9f6ba6edc2baa0b) C:\WINDOWS\system32\DRIVERS\e100b325.sys
2011/04/14 09:20:18.0656 1344	emupia          (8b2303cf5fdc7e97a975bd1069cd99d6) C:\WINDOWS\system32\drivers\emupia2k.sys
2011/04/14 09:20:19.0625 1344	Fastfat         (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/04/14 09:20:20.0578 1344	Fdc             (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/04/14 09:20:21.0828 1344	Fips            (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys
2011/04/14 09:20:23.0265 1344	Flamethrower    (1eaa6c958718d9e7efaf30d2a9f2565b) C:\WINDOWS\system32\DRIVERS\Flamethrower.sys
2011/04/14 09:20:24.0265 1344	Flpydisk        (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/04/14 09:20:25.0218 1344	FltMgr          (5a85cd3d07273e3f6fe72ee9c6431632) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2011/04/14 09:20:26.0375 1344	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/04/14 09:20:27.0359 1344	Ftdisk          (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/04/14 09:20:28.0375 1344	gameenum        (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2011/04/14 09:20:29.0406 1344	Gpc             (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/04/14 09:20:30.0421 1344	ha10kx2k        (e64325ba1ede4a2551a0be186c61d4d7) C:\WINDOWS\system32\drivers\ha10kx2k.sys
2011/04/14 09:20:31.0437 1344	hap16v2k        (a28be5017b423a783dd0d0a4cd3b48f5) C:\WINDOWS\system32\drivers\hap16v2k.sys
2011/04/14 09:20:33.0171 1344	HdAudAddService (2a013e7530beab6e569faa83f517e836) C:\WINDOWS\system32\drivers\HdAudio.sys
2011/04/14 09:20:35.0828 1344	HDAudBus        (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/04/14 09:20:36.0765 1344	hidusb          (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/04/14 09:20:38.0640 1344	HSFHWBS2        (970178e8e003eb1481293830069624b9) C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys
2011/04/14 09:20:39.0625 1344	HSF_DP          (ebb354438a4c5a3327fb97306260714a) C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys
2011/04/14 09:20:40.0671 1344	HTTP            (909d110c9634b0f1487eaaea837317d9) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/04/14 09:20:43.0703 1344	i8042prt        (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/04/14 09:20:44.0750 1344	Imapi           (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/04/14 09:20:46.0953 1344	IntcAzAudAddService (41ef008d7b089ce6f5f2e4a61d5638e6) C:\WINDOWS\system32\drivers\RtkHDAud.sys
2011/04/14 09:20:48.0796 1344	IntelIde        (1367812f8a974e0c13a4888fa5e7ede6) C:\WINDOWS\system32\DRIVERS\intelide.sys
2011/04/14 09:20:49.0687 1344	intelppm        (dd5ad1e79ac26d3f8d8828ad4627f160) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/04/14 09:20:50.0625 1344	Ip6Fw           (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2011/04/14 09:20:51.0515 1344	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/04/14 09:20:52.0421 1344	IpInIp          (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/04/14 09:20:53.0406 1344	IpNat           (472c75f85e631f8aa87d21c9fee6238d) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/04/14 09:20:54.0312 1344	IPSec           (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/04/14 09:20:55.0234 1344	IRENUM          (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/04/14 09:20:56.0156 1344	isapnp          (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/04/14 09:20:57.0093 1344	Kbdclass        (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/04/14 09:20:57.0968 1344	kmixer          (8531438246ce9474e41ee1599904c0c7) C:\WINDOWS\system32\drivers\kmixer.sys
2011/04/14 09:20:58.0859 1344	KSecDD          (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/04/14 09:21:00.0859 1344	lmimirr         (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
2011/04/14 09:21:02.0718 1344	LMIRfsDriver    (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
2011/04/14 09:21:03.0718 1344	mdmxsdk         (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
2011/04/14 09:21:04.0687 1344	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/04/14 09:21:05.0640 1344	Modem           (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys
2011/04/14 09:21:06.0625 1344	Mouclass        (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/04/14 09:21:07.0578 1344	mouhid          (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/04/14 09:21:08.0578 1344	MountMgr        (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/04/14 09:21:11.0218 1344	MRxDAV          (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/04/14 09:21:12.0171 1344	MRxSmb          (3ecc5f53a627b28a23aa7cc8c9376db4) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/04/14 09:21:13.0140 1344	MSDV            (6dd721dfd2648f3f6d5808b5ba6cb095) C:\WINDOWS\system32\DRIVERS\msdv.sys
2011/04/14 09:21:14.0093 1344	Msfs            (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2011/04/14 09:21:15.0031 1344	MSKSSRV         (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/04/14 09:21:15.0937 1344	MSPCLOCK        (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/04/14 09:21:16.0828 1344	MSPQM           (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/04/14 09:21:17.0703 1344	mssmbios        (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/04/14 09:21:18.0593 1344	MSTEE           (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/04/14 09:21:19.0515 1344	Mup             (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2011/04/14 09:21:20.0453 1344	NABTSFEC        (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/04/14 09:21:21.0375 1344	NDIS            (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2011/04/14 09:21:22.0312 1344	NdisIP          (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/04/14 09:21:23.0203 1344	NdisTapi        (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS
distapi.sys
2011/04/14 09:21:24.0109 1344	Ndisuio         (8d3ce6b579cde8d37acc690b67dc2106) C:\WINDOWS\system32\DRIVERS
disuio.sys
2011/04/14 09:21:25.0046 1344	NdisWan         (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS
diswan.sys
2011/04/14 09:21:25.0953 1344	NDProxy         (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/04/14 09:21:26.0890 1344	NetBIOS         (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS
etbios.sys
2011/04/14 09:21:27.0828 1344	NetBT           (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS
etbt.sys
2011/04/14 09:21:28.0781 1344	NIC1394         (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS
ic1394.sys
2011/04/14 09:21:29.0703 1344	Npfs            (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2011/04/14 09:21:30.0656 1344	Ntfs            (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/04/14 09:21:31.0656 1344	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/04/14 09:21:34.0250 1344	nv              (0ae3a22dbe88dc219f8c0fdd30239e4f) C:\WINDOWS\system32\DRIVERS
v4_mini.sys
2011/04/14 09:21:36.0000 1344	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
2011/04/14 09:21:36.0906 1344	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
2011/04/14 09:21:37.0875 1344	ohci1394        (fc128c3d7d5ad30a13742dc3737b9df7) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
2011/04/14 09:21:38.0796 1344	ossrv           (8db15d0105d92c2fbca5e83cd882a477) C:\WINDOWS\system32\drivers\ctoss2k.sys
2011/04/14 09:21:39.0703 1344	Parport         (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/04/14 09:21:40.0593 1344	PartMgr         (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/04/14 09:21:41.0484 1344	ParVdm          (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/04/14 09:21:42.0359 1344	PCI             (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/04/14 09:21:44.0156 1344	PCIIde          (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\drivers\PCIIde.sys
2011/04/14 09:21:45.0046 1344	Pcmcia          (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/04/14 09:21:51.0187 1344	PfModNT         (c8a2d6ff660ac601b7bb9a9b16a5c25e) C:\WINDOWS\system32\drivers\PfModNT.sys
2011/04/14 09:21:52.0078 1344	PptpMiniport    (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERSaspptp.sys
2011/04/14 09:21:52.0984 1344	PSched          (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/04/14 09:21:53.0875 1344	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/04/14 09:21:59.0296 1344	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERSasacd.sys
2011/04/14 09:22:00.0187 1344	Rasl2tp         (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERSasl2tp.sys
2011/04/14 09:22:01.0156 1344	RasPppoe        (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERSaspppoe.sys
2011/04/14 09:22:02.0062 1344	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERSaspti.sys
2011/04/14 09:22:03.0000 1344	Rdbss           (ed375ce745c42a14f10753f7022ecd6a) C:\WINDOWS\system32\DRIVERSdbss.sys
2011/04/14 09:22:03.0906 1344	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/04/14 09:22:04.0796 1344	rdpdr           (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERSdpdr.sys
2011/04/14 09:22:05.0750 1344	RDPWD           (047bea21274c8a4a233674a76c958c2c) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/04/14 09:22:06.0640 1344	redbook         (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERSedbook.sys
2011/04/14 09:22:07.0609 1344	sbp2port        (3e2c3b180872be4120f246d85560b734) C:\WINDOWS\system32\DRIVERS\sbp2port.sys
2011/04/14 09:22:08.0578 1344	Secdrv          (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/04/14 09:22:09.0484 1344	Sentinel        (95a26d5d8ceda33377af627dafc2796f) C:\WINDOWS\System32\Drivers\SENTINEL.SYS
2011/04/14 09:22:10.0406 1344	serenum         (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/04/14 09:22:11.0296 1344	Serial          (ddb032b5dc45dca340ff96212248df70) C:\WINDOWS\system32\DRIVERS\avidXPserial.sys
2011/04/14 09:22:12.0187 1344	Sfloppy         (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/04/14 09:22:14.0015 1344	SLIP            (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/04/14 09:22:14.0921 1344	SNTNLUSB        (8d4a96868ae13c3cf8425b383b59d802) C:\WINDOWS\system32\DRIVERS\SNTNLUSB.SYS
2011/04/14 09:22:16.0718 1344	splitter        (9bb1dd670cb7505a90fc4e61d4aa8227) C:\WINDOWS\system32\drivers\splitter.sys
2011/04/14 09:22:17.0656 1344	sr              (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/04/14 09:22:18.0609 1344	Srv             (5230953c21c811b5fc1ff31ae2b48097) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/04/14 09:22:19.0578 1344	streamip        (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/04/14 09:22:20.0484 1344	swenum          (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/04/14 09:22:21.0375 1344	swmidi          (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2011/04/14 09:22:25.0859 1344	sysaudio        (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/04/14 09:22:26.0781 1344	Tcpip           (8d8949936913b041c6a0e184fbf1030b) C:\WINDOWS\system32\DRIVERS	cpip.sys
2011/04/14 09:22:27.0703 1344	TDPIPE          (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/04/14 09:22:28.0609 1344	TDTCP           (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/04/14 09:22:29.0500 1344	TermDD          (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS	ermdd.sys
2011/04/14 09:22:31.0343 1344	TPkd            (a00dbb3ccf4e0821dd531db8746a1374) C:\WINDOWS\system32\drivers\TPkd.sys
2011/04/14 09:22:32.0296 1344	Udfs            (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2011/04/14 09:22:35.0796 1344	Update          (a4815a4884898f355a3513e60843a4fd) C:\WINDOWS\system32\DRIVERS\update.sys
2011/04/14 09:22:36.0671 1344	usbehci         (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/04/14 09:22:37.0562 1344	usbhub          (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/04/14 09:22:38.0437 1344	usbscan         (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2011/04/14 09:22:39.0343 1344	USBSTOR         (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/04/14 09:22:40.0203 1344	usbuhci         (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/04/14 09:22:41.0078 1344	VgaSave         (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2011/04/14 09:22:42.0859 1344	VolSnap         (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/04/14 09:22:43.0796 1344	Wanarp          (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/04/14 09:22:45.0609 1344	wdmaud          (0bfa8203b8148fb4e54bc212c41ce497) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/04/14 09:22:46.0546 1344	winachsf        (1225ebea76aac3c84df6c54fe5e5d8be) C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys
2011/04/14 09:22:47.0515 1344	WSTCODEC        (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/04/14 09:22:48.0390 1344	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/04/14 09:22:49.0328 1344	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/04/14 09:22:49.0609 1344	================================================================================
2011/04/14 09:22:49.0609 1344	Scan finished
2011/04/14 09:22:49.0609 1344	================================================================================
2011/04/14 09:25:30.0734 1716	Deinitialize success

Utilisateur anonyme · Answer

Re,

Maintenant stp un nouveau rapport ZHPDiag  :


@+

Blackmonster2 · Answer

Rapport de ZHPDiag v1.27.1870 par Nicolas Coolman, Update du 12/04/2011
Run by Administrateur at 2011-04-19 15:49:05
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v7.0.5730.11 (Defaut)

---\ System Information
Windows XP Professional Service Pack 2 (Build 2600)
Processor: x86 Family 15 Model 4 Stepping 1, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2941 MB (85% free)
System Restore: Activé (Enable)
System drive C: has 13 GB (11%) free of 112 GB

---\ Logged in mode
Computer Name: LATÉLÉVISION
User Name: Administrateur
All Users Names: SUPPORT_388945a0, HelpAssistant, E1A701A0E38141858111, Administrateur, 
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\ Environnement Variables
%AppData%=C:\Documents and Settings\Administrateur\Application Data
%LocalAppData%=C:\Documents and Settings\Administrateur\Local Settings\Application Data
%StartMenu%=C:\Documents and Settings\Administrateur\Menu Démarrer

---\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 13 Go of 112 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Hard drive, Flash drive, Thumb drive (Free 42 Go of 56 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 3 Go of 56 Go)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK



---\ Recherche particulière de fichiers génériques
[MD5.7BA68DF484B550C1F75DD80AE1D7EF67] - (.Microsoft Corporation - Explorateur Windows.) (.2006-11-18 18:59:06.) -- C:\WINDOWS\Explorer.exe [1035264]
[MD5.7CF0B0D5D9D47585853E2A6978441F64] - (.Microsoft Corporation - Internet Extensions for Win32.) (.2006-12-13 07:46:27.) -- C:\WINDOWS\system32\wininet.dll [818688]
[MD5.123EEA158F74D0F67A51DCDF065D1091] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.2004-08-19 12:10:05.) -- C:\WINDOWS\system32\Winlogon.exe [506368]
[MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.2004-08-03 18:59:43.) -- C:\WINDOWS\system32\drivers\atapi.sys [95360]
[MD5.B78BE402C3F63DD55521F73876951CDD] - (.Microsoft Corporation - NT File System Driver.) (.2004-08-03 19:15:09.) -- C:\WINDOWS\system32\drivers
tfs.sys [574592]



---\ Processus lancés
[MD5.2695E3E9497BF72ABB44B5010EC5DA16] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [42184]
[MD5.FECA6966ED470AC6EFE3ED8C33D60B81] - (.Digidesign, A Division of Avid Technology, - Digidesign MME Binder.) -- C:\Program Files\Digidesign\Drivers\MMERefresh.exe   [77824]
[MD5.112325F53AB720CA77825726D427FBDC] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376]
[MD5.B90E093E7A7250906F1054418B5339C0] - (.Nero AG - Nero BackItUp.) -- C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe   [935208]
[MD5.E00696D78AF663C523D3483410C66F21] - (.Pas de propriétaire - NVIDIA Performance Driver Service.) -- C:\Program Files\NVIDIA Corporation\Performance Drivers
vPDsvc.exe   [3575808]
[MD5.B54C19B0CDA652A65F99701490C9D20F] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.0.) -- C:\WINDOWS\system32
vsvc32.exe   [163908]
[MD5.0D034E8C4F88C5B2B0C1AF3CF438CC4F] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.EXE   [86016]
[MD5.EC05E964058693D1F71D1B5506B5CF09] - (.RealTek Semicoductor Corp. - RealTek AlcWzrd Application.) -- C:\WINDOWS\ALCWZRD.EXE   [2808832]
[MD5.CDD7140C0EAA754C527B983CCC9993CD] - (...) -- C:\WINDOWS\system32\RUNDLL32.EXE   [33792]
[MD5.90E0F7FDCAC66FB50C1CE1A1C7396642] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe   [149280]
[MD5.D5BC63D2822B8E244E53D2FF8078CC6B] - (.Hewlett-Packard - hpgs2wnd.) -- C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe   [69632]
[MD5.BAD6BEA0DE1F69C82BDB74378CE0C20A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe   [932288]
[MD5.2E9A1A6555C20424FC6DCC3AF21F4D68] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe   [3451496]
[MD5.59380D1808A83AA4150F550F45BEE3A9] - (.Pas de propriétaire - hpgs2wnf Module.) -- c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe   [77824]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe   [39408]
[MD5.3A19B2D2B5659D375FFFBA9EB71987B8] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe   [7424000]
[MD5.EEBD0B763F32A26421A35CC2C735E8E3] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin   [7418368]
[MD5.95BEB516BFD2ADD228BE63D543CEA47A] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [642560]



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.2.183.39
pGoogleOneClick8.dll



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-1214440339-1284227242-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.5730.11 (winmain(wmbla).061017-1135)) -- C:\WINDOWS\system32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\ ---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Pas de propriétaire - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll



---\ ---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] . (.Windows (R) Server 2003 DDK provider - High Definition Audio Property Page Shortcu.) -- C:\Windows\System32\HDAShCut.exe 
O4 - HKLM\..\Run: [SkyTel] . (.Realtek Semiconductor Corp. - Realtek Voice  Manager.) -- C:\WINDOWS\SkyTel.exe 
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\WINDOWS\SOUNDMAN.exe 
O4 - HKLM\..\Run: [AlcWzrd] . (.RealTek Semicoductor Corp. - RealTek AlcWzrd Application.) -- C:\WINDOWS\ALCWZRD.exe 
O4 - HKLM\..\Run: [DigidesignMMERefresh] . (.Digidesign, A Division of Avid Technology, - Digidesign MME Binder.) -- C:\Program Files\Digidesign\Drivers\MMERefresh.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll 
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Program Files\NVIDIA Corporation
View
wiz.exe 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [CTHelper] . (.Creative Technology Ltd - CtHelper MFC Application.) -- C:\Windows\System32\CTHELPER.exe 
O4 - HKLM\..\Run: [AsioReg] . (.Creative Technology Ltd - Creative ASIO Driver.) -- C:\WINDOWS\system32\CTASIO.dll 
O4 - HKLM\..\Run: [SBDrvDet] . (.Creative Technology Ltd - SBDrvDet.exe.) -- C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe 
O4 - HKLM\..\Run: [UpdReg] . (.Creative Technology Ltd. - Creative UpdReg.) -- C:\WINDOWS\UpdReg.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe 
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] . (.Hewlett-Packard - hpgs2wnd.) -- c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe 
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] . (.Adobe Systems Incorporated - Adobe CS4 Service Manager.) -- C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe 
O4 - HKUS\S-1-5-21-1214440339-1284227242-839522115-500\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-21-1214440339-1284227242-839522115-500\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-1214440339-1284227242-839522115-500\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe 
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.1.lnk . (...)  -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe



---\ ---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\4U M2TS Converter.lnk . (...)  -- C:\Program Files\4U Computing\M2TS Converter\M2TSConverter.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Bridge CS4.lnk . (.Adobe Systems, Inc..)  -- C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Drive CS4.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Fichiers communs\Adobe\Adobe Drive CS4\ConnectUI\Adobe Drive CS4.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ExtendScript Toolkit CS4.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit CS4\ExtendScript Toolkit.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Extension Manager CS4.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Adobe Extension Manager CS4\Adobe Extension Manager CS4.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop CS4.lnk . (.Adobe Systems, Incorporated.)  -- C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A93000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. SA.)  -- C:\Program Files\Hewlett-Packard\Digital Imaging\DocProcegipe.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Paint.NET.lnk . (.Paint.NET Team.)  -- C:\Program Files\UTILS\Paint.NET\PaintDotNet.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Free FLV Converter.lnk . (.Koyote Soft.)  -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.microsoft.com/sites/production/ieawsdc32.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{80CA73E9-8CEF-42E5-9F89-D85F3AE24DD1}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{80CA73E9-8CEF-42E5-9F89-D85F3AE24DD1}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{80CA73E9-8CEF-42E5-9F89-D85F3AE24DD1}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: LMIinit . (.LogMeIn, Inc. - LogMeIn Remote Control Helper.) -- C:\Windows\System32\LMIinit.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} . (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service:  (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service:  (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service:  (DigiRefresh) . (.Digidesign, A Division of Avid Technology, - Digidesign MME Binder.) - C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O23 - Service:  (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
O23 - Service:  (FLEXnet Licensing Service) . (.Acresso Software Inc. - Activation Licensing Service.) - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service:  (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service:  (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service:  (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service:  (NVIDIA Performance Driver Service) . (.Pas de propriétaire - NVIDIA Performance Driver Service.) - C:\Program Files\NVIDIA Corporation\Performance Drivers
vPDsvc.exe
O23 - Service:  (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 182.0.) - C:\WINDOWS\system32
vsvc32.exe



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS
etbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERSedbook.sys
O41 - Driver:  (Serial) . (...) - C:\WINDOWS\system32\DRIVERS\avidXPserial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS	ermdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys



---\ Logiciels installés (O42)
O42 - Logiciel: 4U M2TS Converter (version 1.6.9) - (.4U Computing, Inc..) [HKLM] -- 4U M2TS Converter_is1
O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1
O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1
O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
O42 - Logiciel: Adobe Anchor Service CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {1618734A-3957-4ADD-8199-F973763109A8}
O42 - Logiciel: Adobe Bridge CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {83877DB1-8B77-45BC-AB43-2BAC22E093E0}
O42 - Logiciel: Adobe CMaps CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {94D398EB-D2FD-4FD1-B8C4-592635E8A191}
O42 - Logiciel: Adobe CSI CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0F723FC1-7606-4867-866C-CE80AD292DAF}
O42 - Logiciel: Adobe Color - Photoshop Specific CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
O42 - Logiciel: Adobe Color EU Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}
O42 - Logiciel: Adobe Color JA Extra Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {0D6013AB-A0C7-41DC-973C-E93129C9A29F}
O42 - Logiciel: Adobe Color NA Recommended Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {00ADFB20-AE75-46F4-AD2C-F48B15AC3100}
O42 - Logiciel: Adobe Color Video Profiles CS CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {63C24A08-70F3-4C8E-B9FB-9F21A903801D}
O42 - Logiciel: Adobe Default Language CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {C52E3EC1-048C-45E1-8D53-10B0C6509683}
O42 - Logiciel: Adobe Drive CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {16E16F01-2E2D-4248-A42F-76261C147B6C}
O42 - Logiciel: Adobe ExtendScript Toolkit CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
O42 - Logiciel: Adobe Extension Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {054EFA56-2AC1-48F4-A883-0AB89874B972}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM] -- {FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
O42 - Logiciel: Adobe Linguistics CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {931AB7EA-3656-4BB7-864D-022B09E3DD67}
O42 - Logiciel: Adobe Output Module - (.Adobe Systems Incorporated.) [HKLM] -- {BB4E33EC-8181-4685-96F7-8554293DEC6A}
O42 - Logiciel: Adobe PDF Library Files CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {F93C84A6-0DC6-42AF-89FA-776F7C377353}
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe_faf656ef605427ee2f42989c3ad31b8
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
O42 - Logiciel: Adobe Photoshop CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {E4848436-0345-47E2-B648-8B522FCDA623}
O42 - Logiciel: Adobe Photoshop CS4 Support - (.Adobe Systems Incorporated.) [HKLM] -- {63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
O42 - Logiciel: Adobe Reader 9.3.2 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001}
O42 - Logiciel: Adobe Search for Help - (.Adobe Systems Incorporated.) [HKLM] -- {F0E64E2E-3A60-40D8-A55D-92F6831875DA}
O42 - Logiciel: Adobe Service Manager Extension - (.Adobe Systems Incorporated.) [HKLM] -- {4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM] -- {0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
O42 - Logiciel: Adobe Type Support CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
O42 - Logiciel: Adobe Update Manager CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {05308C4E-7285-4066-BAE3-6B50DA6ED755}
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM] -- {3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
O42 - Logiciel: Adobe XMP Panels CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
O42 - Logiciel: AdobeColorCommonSetCMYK - (.Adobe Systems Incorporated.) [HKLM] -- {68243FF8-83CA-466B-B2B8-9F99DA5479C4}
O42 - Logiciel: AdobeColorCommonSetRGB - (.Adobe Systems Incorporated.) [HKLM] -- {16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM] -- {b2ec4a38-b545-4a00-8214-13fe0e915e6d}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Avid EDL Manager - (.Avid Technology, Inc..) [HKLM] -- {83CDBCBC-6C9F-43A0-ACE3-DBCD5C6CAE37}
O42 - Logiciel: Avid FilmScribe - (.Avid Technology, Inc..) [HKLM] -- {7C328A47-ED8F-4C59-8B9D-9CA509E54E52}
O42 - Logiciel: Avid Log Exchange - (.Avid Technology, Inc..) [HKLM] -- {EC6F6FA6-D2E6-4B0D-83C9-A8F58B2DC9ED}
O42 - Logiciel: Avid Media Composer - (.Avid Technology, Inc..) [HKLM] -- {47E775E8-831B-4CC5-BA74-F7E42EBBDB29}
O42 - Logiciel: Avid MediaLog - (.Avid Technology, Inc..) [HKLM] -- {13831831-446B-4411-B189-0C5F486640E1}
O42 - Logiciel: Avid MetaSync - (.Avid Technology, Inc..) [HKLM] -- {41EB322A-B860-41CA-AF64-E17D8AB35509}
O42 - Logiciel: BitLord 1.1 - (.www.bitlord.com.) [HKLM] -- BitLord
O42 - Logiciel: Connect - (.Adobe Systems Incorporated.) [HKLM] -- {B29AD377-CC12-490A-A480-1452337C618D}
O42 - Logiciel: Creative System Information - (.Pas de propriétaire.) [HKLM] -- SysInfo
O42 - Logiciel: DVD Decoder Pak for Windows XP - (.roddy2000@hotbox.ru.) [HKLM] -- {92C5DB3D-9D6F-4324-BB11-57825F4C2635}
O42 - Logiciel: Digidesign Audio Drivers 7.4 - (.Digidesign, A Division of Avid Technology, Inc..) [HKLM] -- {9F1D8E17-2AE6-4608-901D-42146D7D9C68}
O42 - Logiciel: Disque de souvenirs HP - (.Hewlett-Packard Company.) [HKLM] -- {B376402D-58EA-45EA-BD50-DD924EB67A70}
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1
O42 - Logiciel: Emicsoft FLV Converter - (.Pas de propriétaire.) [HKLM] -- Emicsoft FLV Converter_is1
O42 - Logiciel: Free FLV Converter V 6.93.0 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Photo and Imaging 2.0 - Scanners - (.{&Tahoma8}Hewlett-Packard.) [HKLM] -- {6CC93102-135E-49E2-99A4-C431E671C12A}
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Windows XP (KB926239) - (.Microsoft Corporation.) [HKLM] -- KB926239
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Intel(R) PRO Network Connections 11.2.0.69 - (.Intel.) [HKLM] -- {2222B364-0854-4265-B32E-A142DB9DC7BB}
O42 - Logiciel: Interlok driver setup x32 - (.PACE Anti-Piracy.) [HKLM] -- {25613C10-27D2-410B-942B-D922D5C3A7BE}
O42 - Logiciel: Java(TM) 6 Update 15 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216013FF}
O42 - Logiciel: LMSOFT Web Creator 4 - (.LMSOFT.) [HKLM] -- LMSOFT Web Creator 4
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 6.0 Parser (KB925673) - (.Microsoft Corporation.) [HKLM] -- {FE9126DB-5F84-495A-BB46-3C724F1C2D08}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 2.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 2.0
O42 - Logiciel: Microsoft .NET Framework 3.0 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.0
O42 - Logiciel: Microsoft .NET Framework 3.0 - (.Microsoft Corporation.) [HKLM] -- {15095BF3-A3D7-4DDF-B193-3A496881E003}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA Performance Drivers - (.NVIDIA Corporation.) [HKLM] -- {4C0A8D65-4286-4B58-87FE-18AD24289285}
O42 - Logiciel: NVIDIA nView Desktop Manager - (.NVIDIA Corporation.) [HKLM] -- NVIDIA nView Desktop Manager
O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM] -- {7d1fc7f7-a9b3-4c76-9a5c-3b235e8b6992}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM] -- {bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM] -- {e8a80433-302b-4ff1-815d-fcc8eac482ff}
O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM] -- {dba84796-8503-4ff0-af57-1747dd9a166d}
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM] -- {7748ac8c-18e3-43bb-959b-088faea16fb2}
O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM] -- {4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}
O42 - Logiciel: OpenOffice.org 3.1 - (.OpenOffice.org.) [HKLM] -- {0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PDF Settings CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
O42 - Logiciel: Photoshop Camera Raw - (.Adobe Systems Incorporated.) [HKLM] -- {CC75AB5C-2110-4A7F-AF52-708680D22FE8}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C78EAC6F-7A73-452E-8134-DBB2165C5A68}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: Sentinel Protection Installer 7.4.0 - (.SafeNet, Inc..) [HKLM] -- {5A180ED5-0AC1-410A-B790-5E0319CD0A93}
O42 - Logiciel: Sound Blaster Audigy 2 ZS - (.Pas de propriétaire.) [HKLM] -- {9E2514D9-DC24-4634-B348-61F3EF0F1628}
O42 - Logiciel: Suite Shared Configuration CS4 - (.Adobe Systems Incorporated.) [HKLM] -- {842B4B72-9E8F-4962-B3C1-1C422A5C4434}
O42 - Logiciel: Windows Communication Foundation - (.Microsoft Corporation.) [HKLM] -- {491DD792-AD81-429C-9EB4-86DD3D22E333}
O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Presentation Foundation - (.Microsoft Corporation.) [HKLM] -- {BAF78226-3200-4DB4-BE33-4D922A799840}
O42 - Logiciel: Windows Workflow Foundation - (.Microsoft Corporation.) [HKLM] -- {7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
O42 - Logiciel: avast! Internet Security - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: kuler - (.Adobe Systems Incorporated.) [HKLM] -- {098727E1-775A-4450-B573-3F441F1CA243}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

---\ HKCU & HKLM Software Keys
[HKCU\Software\3rd Eye Solutions]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Avance]
[HKCU\Software\Avast Software]
[HKCU\Software\Avid Technology]
[HKCU\Software\BitLord]
[HKCU\Software\Classes]
[HKCU\Software\Creative Tech]
[HKCU\Software\DirectShow]
[HKCU\Software\ESET]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\LMSOFT]
[HKCU\Software\Lavalys]
[HKCU\Software\Leadertech]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogMeIn]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Need4Video]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Notepad2]
[HKCU\Software\Oak Technology]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PACE Anti-Piracy]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\SampleView]
[HKCU\Software\Sony Creative Software]
[HKCU\Software\SubSystems]
[HKCU\Software\Sysinternals]
[HKCU\Software\Trolltech]
[HKCU\Software\Wget]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\aboabuu]
[HKLM\Software\781]
[HKLM\Software\ASIO]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Audible]
[HKLM\Software\Avid Technology, Inc.]
[HKLM\Software\Avid Technology]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Chair]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Creative Tech]
[HKLM\Software\Debug]
[HKLM\Software\Digidesign]
[HKLM\Software\Driver Robot]
[HKLM\Software\Eset]
[HKLM\Software\Flute]
[HKLM\Software\Gemplus]
[HKLM\Software\Genesys Logic]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Ifymdnhc]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\LMSOFT]
[HKLM\Software\Licenses]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Need4Video]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\Oak Technology]
[HKLM\Software\OldTimer Tools]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PACE Anti-Piracy]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Rainbow Technologies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sandwich]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Sony Creative Software]
[HKLM\Software\Sony Media Software]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Swearware]
[HKLM\Software\TrendMicro]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\aboabuu]
[HKLM\Software\instinno]



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2010-03-24 - 14:31:10 - [11915198] ----D- C:\Program Files\4U Computing
O43 - CFD: 2011-04-14 - 09:57:28 - [38076914] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 2010-05-11 - 15:27:00 - [763473689] ----D- C:\Program Files\Adobe
O43 - CFD: 2009-08-19 - 09:23:28 - [2221118] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 2011-04-06 - 17:24:16 - [318535188] ----D- C:\Program Files\AVAST Software
O43 - CFD: 2009-08-18 - 09:49:10 - [1718694726] ----D- C:\Program Files\Avid
O43 - CFD: 2010-04-20 - 15:50:52 - [62976312] ----D- C:\Program Files\AVS4YOU
O43 - CFD: 2010-03-23 - 11:29:06 - [674999073] ----D- C:\Program Files\BitLord
O43 - CFD: 2009-08-17 - 10:36:22 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 2009-08-31 - 15:08:54 - [37873182] ----D- C:\Program Files\Creative
O43 - CFD: 2009-08-18 - 09:52:24 - [19618724] ----D- C:\Program Files\Digidesign
O43 - CFD: 2010-03-10 - 14:07:46 - [30147868] ----D- C:\Program Files\Emicsoft Studio
O43 - CFD: 2011-04-13 - 17:12:20 - [108104548] ----D- C:\Program Files\ESET
O43 - CFD: 2011-04-14 - 09:35:42 - [790022930] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 2010-10-15 - 11:46:52 - [12043804] ----D- C:\Program Files\Free FLV Converter
O43 - CFD: 2010-01-28 - 18:50:52 - [15846950] ----D- C:\Program Files\Google
O43 - CFD: 2010-03-23 - 10:56:38 - [143126378] ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 2009-08-31 - 15:08:52 - [25785368] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2009-08-18 - 09:39:04 - [0] ----D- C:\Program Files\Intel
O43 - CFD: 2009-08-18 - 09:52:32 - [0] ----D- C:\Program Files\InterLok
O43 - CFD: 2011-04-06 - 17:10:16 - [3325651] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 2009-09-15 - 14:19:30 - [90513247] ----D- C:\Program Files\Java
O43 - CFD: 2009-08-17 - 10:46:00 - [22448712] ----D- C:\Program Files\JEUX
O43 - CFD: 2009-08-25 - 14:57:00 - [16283032] ----D- C:\Program Files\JRE
O43 - CFD: 2009-08-17 - 12:29:06 - [6815185] ----D- C:\Program Files\Lavalys
O43 - CFD: 2010-06-28 - 12:15:20 - [0] ----D- C:\Program Files\LogMeIn
O43 - CFD: 2011-04-06 - 17:32:08 - [4922244] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 2009-08-24 - 16:28:10 - [226432] ----D- C:\Program Files\Microsoft
O43 - CFD: 2009-08-17 - 10:40:40 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 2009-09-16 - 17:06:46 - [140986952] ----D- C:\Program Files\Mindscape
O43 - CFD: 2009-08-17 - 10:37:34 - [10371290] ----D- C:\Program Files\Movie Maker
O43 - CFD: 2009-11-16 - 12:17:12 - [12167] ----D- C:\Program Files\MSBuild
O43 - CFD: 2009-08-17 - 10:35:56 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 2009-09-01 - 16:37:20 - [137635473] ----D- C:\Program Files\Nero
O43 - CFD: 2009-08-17 - 10:37:44 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 2009-08-27 - 14:25:30 - [21657228] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 2009-08-25 - 14:56:58 - [376485936] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 2009-08-18 - 10:08:14 - [4381883] ----D- C:\Program Files\Outlook Express
O43 - CFD: 2009-08-19 - 09:24:30 - [77503796] ----D- C:\Program Files\QuickTime
O43 - CFD: 2009-08-18 - 09:22:42 - [50864956] ----D- C:\Program Files\Realtek
O43 - CFD: 2009-11-16 - 12:13:38 - [24296362] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 2009-08-17 - 10:38:30 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 2010-03-24 - 14:09:52 - [3010] ----D- C:\Program Files\Tipard Studio
O43 - CFD: 2009-08-17 - 10:36:34 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 2009-08-17 - 10:46:00 - [6852093] ----D- C:\Program Files\UTILS
O43 - CFD: 2009-08-24 - 16:28:04 - [45806173] ----D- C:\Program Files\Windows Live
O43 - CFD: 2009-08-24 - 16:27:48 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 2009-08-19 - 09:56:12 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 2009-08-19 - 09:56:10 - [10672450] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 2009-08-17 - 10:35:54 - [3937023] ----D- C:\Program Files\Windows NT
O43 - CFD: 2009-08-17 - 10:38:34 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 2010-04-20 - 15:47:32 - [3886217] ----D- C:\Program Files\WinRAR
O43 - CFD: 2009-08-17 - 10:46:02 - [3999949] ----D- C:\Program Files\WSTARTUP
O43 - CFD: 2009-08-17 - 10:40:40 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 2011-04-19 - 15:49:08 - [3934103] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 2010-05-11 - 15:27:46 - [420848211] ----D- C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 2009-08-18 - 10:00:20 - [23053398] ----D- C:\Program Files\Fichiers communs\Avid
O43 - CFD: 2010-04-20 - 15:50:50 - [63087428] ----D- C:\Program Files\Fichiers communs\AVSMedia
O43 - CFD: 2010-02-18 - 12:24:20 - [0] ----D- C:\Program Files\Fichiers communs\Blizzard Entertainment
O43 - CFD: 2009-08-18 - 09:58:52 - [22769286] ----D- C:\Program Files\Fichiers communs\Digidesign
O43 - CFD: 2010-03-23 - 10:55:46 - [115118] ----D- C:\Program Files\Fichiers communs\Hewlett-Packard
O43 - CFD: 2009-08-31 - 15:03:22 - [4951730] ----D- C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 2010-03-23 - 13:16:38 - [655885] ----D- C:\Program Files\Fichiers communs\Macrovision Shared
O43 - CFD: 2009-11-16 - 12:19:24 - [15206194] ----D- C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 2009-08-17 - 10:37:40 - [568832] ----D- C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 2009-09-01 - 16:36:26 - [82904224] ----D- C:\Program Files\Fichiers communs\Nero
O43 - CFD: 2009-08-17 - 06:13:04 - [0] ----D- C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 2009-08-18 - 10:08:12 - [18480] ----D- C:\Program Files\Fichiers communs\PACE Anti-Piracy
O43 - CFD: 2009-08-18 - 09:54:54 - [472549] ----D- C:\Program Files\Fichiers communs\SafeNet Sentinel
O43 - CFD: 2009-08-17 - 10:37:42 - [8106] ----D- C:\Program Files\Fichiers communs\Services
O43 - CFD: 2009-08-17 - 06:12:54 - [3787229] ----D- C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 2009-08-17 - 10:37:10 - [6811317] ----D- C:\Program Files\Fichiers communs\System
O43 - CFD: 2009-08-24 - 16:22:46 - [144764943] ----D- C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 2010-05-11 - 16:07:32 - [74921719] ----D- C:\Documents and Settings\All Users\Application Data\Adobe
O43 - CFD: 2009-08-17 - 10:46:08 - [742] ----D- C:\Documents and Settings\All Users\Application Data\aignes
O43 - CFD: 2009-08-19 - 09:23:26 - [2083840] ----D- C:\Documents and Settings\All Users\Application Data\Apple
O43 - CFD: 2009-08-19 - 09:23:48 - [28016128] ----D- C:\Documents and Settings\All Users\Application Data\Apple Computer
O43 - CFD: 2011-04-06 - 17:24:16 - [20659155] ----D- C:\Documents and Settings\All Users\Application Data\AVAST Software
O43 - CFD: 2009-08-18 - 10:07:18 - [0] ----D- C:\Documents and Settings\All Users\Application Data\Avid
O43 - CFD: 2010-03-10 - 16:14:52 - [0] ----D- C:\Documents and Settings\All Users\Application Data\AVS4YOU
O43 - CFD: 2011-04-07 - 16:20:38 - [53501] ----D- C:\Documents and Settings\All Users\Application Data\FLEXnet
O43 - CFD: 2009-08-24 - 15:15:38 - [536308] ----D- C:\Documents and Settings\All Users\Application Data\Google
O43 - CFD: 2009-08-17 - 10:46:08 - [623] ----D- C:\Documents and Settings\All Users\Application Data\gtopala
O43 - CFD: 2011-04-06 - 17:32:04 - [6547306] ----D- C:\Documents and Settings\All Users\Application Data\Malwarebytes
O43 - CFD: 2011-04-18 - 11:37:50 - [21570267] ---AD- C:\Documents and Settings\All Users\Application Data\Microsoft
O43 - CFD: 2009-09-01 - 16:37:06 - [4920878] ----D- C:\Documents and Settings\All Users\Application Data\Nero
O43 - CFD: 2009-08-19 - 13:40:04 - [180724] ----D- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
O43 - CFD: 2010-06-30 - 10:59:54 - [0] ----D- C:\Documents and Settings\All Users\Application Data
View_Profiles
O43 - CFD: 2009-08-18 - 10:08:14 - [4893] ----D- C:\Documents and Settings\All Users\Application Data\PACE Anti-Piracy
O43 - CFD: 2009-11-16 - 12:20:36 - [358] ----D- C:\Documents and Settings\All Users\Application Data\Sony
O43 - CFD: 2009-10-06 - 09:56:18 - [0] ---AD- C:\Documents and Settings\All Users\Application Data\TEMP
O43 - CFD: 2009-08-19 - 09:50:58 - [3078] ----D- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
O43 - CFD: 2010-05-11 - 15:24:54 - [296839391] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Adobe
O43 - CFD: 2009-08-19 - 09:23:30 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Apple
O43 - CFD: 2009-08-19 - 09:23:12 - [107973504] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Apple Computer
O43 - CFD: 2009-08-19 - 09:06:58 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Axialis
O43 - CFD: 2011-04-18 - 11:37:50 - [0] --HAD- C:\Documents and Settings\Administrateur\Local Settings\Application Data\BOefZXFHCnSsb
O43 - CFD: 2010-03-30 - 14:28:44 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Deployment
O43 - CFD: 2010-03-19 - 15:12:32 - [2777051] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google
O43 - CFD: 2009-12-17 - 17:04:36 - [576734812] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Identities
O43 - CFD: 2010-10-04 - 13:36:20 - [463464423] -S--D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft
O43 - CFD: 2009-08-18 - 10:08:12 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\PACE Anti-Piracy
O43 - CFD: 2009-11-16 - 12:21:28 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Sony
O43 - CFD: 2010-10-20 - 00:05:16 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Temp
O43 - CFD: 2010-02-24 - 22:03:10 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 2011-01-12 - 16:56:08 - [8878067] ----D- C:\Documents and Settings\Administrateur\Application Data\.minecraft
O43 - CFD: 2011-04-07 - 16:34:18 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\255234EE7D8EC9004D7DFCE4AC3D60AB
O43 - CFD: 2011-04-14 - 09:39:40 - [4931052] ----D- C:\Documents and Settings\Administrateur\Application Data\Adobe
O43 - CFD: 2009-09-01 - 14:02:40 - [3591] ----D- C:\Documents and Settings\Administrateur\Application Data\Apple Computer
O43 - CFD: 2009-08-18 - 10:07:18 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Avid
O43 - CFD: 2010-03-10 - 16:14:52 - [7396] ----D- C:\Documents and Settings\Administrateur\Application Data\AVS4YOU
O43 - CFD: 2009-08-18 - 08:58:48 - [9174634] ----D- C:\Documents and Settings\Administrateur\Application Data\Blitware
O43 - CFD: 2011-04-14 - 09:46:26 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web
O43 - CFD: 2011-04-14 - 09:46:26 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web 
O43 - CFD: 2010-10-20 - 16:14:00 - [52847] ----D- C:\Documents and Settings\Administrateur\Application Data\FreeFLVConverter
O43 - CFD: 2009-08-24 - 15:15:54 - [26190] ----D- C:\Documents and Settings\Administrateur\Application Data\Google
O43 - CFD: 2009-08-17 - 10:47:24 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Identities
O43 - CFD: 2009-08-18 - 09:48:32 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\InstallShield
O43 - CFD: 2010-08-26 - 15:43:14 - [36270] ----D- C:\Documents and Settings\Administrateur\Application Data\Leadertech
O43 - CFD: 2009-08-24 - 15:11:50 - [2049692] ----D- C:\Documents and Settings\Administrateur\Application Data\Macromedia
O43 - CFD: 2011-04-06 - 17:32:20 - [5338680] ----D- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
O43 - CFD: 2009-12-17 - 17:04:36 - [4695085] -S--D- C:\Documents and Settings\Administrateur\Application Data\Microsoft
O43 - CFD: 2009-09-01 - 16:55:50 - [403581] ----D- C:\Documents and Settings\Administrateur\Application Data\Nero
O43 - CFD: 2009-08-25 - 15:00:46 - [3233537] ----D- C:\Documents and Settings\Administrateur\Application Data\OpenOffice.org
O43 - CFD: 2009-08-18 - 10:08:14 - [4870] ----D- C:\Documents and Settings\Administrateur\Application Data\PACE Anti-Piracy
O43 - CFD: 2009-11-16 - 12:23:34 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Publish Providers
O43 - CFD: 2009-11-16 - 12:23:26 - [2] ----D- C:\Documents and Settings\Administrateur\Application Data\Sony
O43 - CFD: 2009-11-16 - 12:11:12 - [52770895] ----D- C:\Documents and Settings\Administrateur\Application Data\Sony Setup
O43 - CFD: 2009-08-25 - 14:55:12 - [14676576] ----D- C:\Documents and Settings\Administrateur\Application Data\Sun
O43 - CFD: 2009-10-19 - 16:46:04 - [110592] ----D- C:\Documents and Settings\Administrateur\Application Data\U3
O43 - CFD: 2010-04-20 - 15:47:40 - [12] ----D- C:\Documents and Settings\Administrateur\Application Data\WinRAR
O43 - CFD: 2011-01-12 - 16:56:08 - [8878067] ----D- C:\Documents and Settings\Administrateur\Application Data\.minecraft
O43 - CFD: 2011-04-07 - 16:34:18 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\255234EE7D8EC9004D7DFCE4AC3D60AB
O43 - CFD: 2011-04-14 - 09:39:40 - [4931052] ----D- C:\Documents and Settings\Administrateur\Application Data\Adobe
O43 - CFD: 2009-09-01 - 14:02:40 - [3591] ----D- C:\Documents and Settings\Administrateur\Application Data\Apple Computer
O43 - CFD: 2009-08-18 - 10:07:18 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Avid
O43 - CFD: 2010-03-10 - 16:14:52 - [7396] ----D- C:\Documents and Settings\Administrateur\Application Data\AVS4YOU
O43 - CFD: 2009-08-18 - 08:58:48 - [9174634] ----D- C:\Documents and Settings\Administrateur\Application Data\Blitware
O43 - CFD: 2011-04-14 - 09:46:26 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web
O43 - CFD: 2011-04-14 - 09:46:26 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web 
O43 - CFD: 2010-10-20 - 16:14:00 - [52847] ----D- C:\Documents and Settings\Administrateur\Application Data\FreeFLVConverter
O43 - CFD: 2009-08-24 - 15:15:54 - [26190] ----D- C:\Documents and Settings\Administrateur\Application Data\Google
O43 - CFD: 2009-08-17 - 10:47:24 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Identities
O43 - CFD: 2009-08-18 - 09:48:32 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\InstallShield
O43 - CFD: 2010-08-26 - 15:43:14 - [36270] ----D- C:\Documents and Settings\Administrateur\Application Data\Leadertech
O43 - CFD: 2009-08-24 - 15:11:50 - [2049692] ----D- C:\Documents and Settings\Administrateur\Application Data\Macromedia
O43 - CFD: 2011-04-06 - 17:32:20 - [5338680] ----D- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
O43 - CFD: 2009-12-17 - 17:04:36 - [4695085] -S--D- C:\Documents and Settings\Administrateur\Application Data\Microsoft
O43 - CFD: 2009-09-01 - 16:55:50 - [403581] ----D- C:\Documents and Settings\Administrateur\Application Data\Nero
O43 - CFD: 2009-08-25 - 15:00:46 - [3233537] ----D- C:\Documents and Settings\Administrateur\Application Data\OpenOffice.org
O43 - CFD: 2009-08-18 - 10:08:14 - [4870] ----D- C:\Documents and Settings\Administrateur\Application Data\PACE Anti-Piracy
O43 - CFD: 2009-11-16 - 12:23:34 - [0] ----D- C:\Documents and Settings\Administrateur\Application Data\Publish Providers
O43 - CFD: 2009-11-16 - 12:23:26 - [2] ----D- C:\Documents and Settings\Administrateur\Application Data\Sony
O43 - CFD: 2009-11-16 - 12:11:12 - [52770895] ----D- C:\Documents and Settings\Administrateur\Application Data\Sony Setup
O43 - CFD: 2009-08-25 - 14:55:12 - [14676576] ----D- C:\Documents and Settings\Administrateur\Application Data\Sun
O43 - CFD: 2009-10-19 - 16:46:04 - [110592] ----D- C:\Documents and Settings\Administrateur\Application Data\U3
O43 - CFD: 2010-04-20 - 15:47:40 - [12] ----D- C:\Documents and Settings\Administrateur\Application Data\WinRAR
O43 - CFD: 2010-05-11 - 15:24:54 - [296839391] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Adobe
O43 - CFD: 2009-08-19 - 09:23:30 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Apple
O43 - CFD: 2009-08-19 - 09:23:12 - [107973504] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Apple Computer
O43 - CFD: 2009-08-19 - 09:06:58 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Axialis
O43 - CFD: 2011-04-18 - 11:37:50 - [0] --HAD- C:\Documents and Settings\Administrateur\Local Settings\Application Data\BOefZXFHCnSsb
O43 - CFD: 2010-03-30 - 14:28:44 - [0] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Deployment
O43 - CFD: 2010-03-19 - 15:12:32 - [2777051] ----D- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google
O43 - CFD: 2009-12-17 - 17:04:36 - [576734812] ----D- C:\Documents and Settings\Administrateur\Local Settings\Applic

Utilisateur anonyme · Answer

Re,   

Pour avancer :   

Pour bien vérifier que les  fichiers ci-dessous sont infectés rend toi sur ce site   

Virus Total   

Colle directement le chemin des fichiers , un par un , dans l'espace "Parcourir"   

apres chaque analyse :   

c:\windows\system32\drivers\Flamethrower.sys    

* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation   

actuelle : en cours d'analyse" est affiché.   

* Il est possible que le fichier soit mis en file d'attente en raison d'un grand   

nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser   

la page.   

* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine   

réponse.   

Fait de la même facon le fichier :   

c:\windows\system32\itlnfw32.zip  
 
c:\windows\System32\wscntfy.exe

c:\windows\system32\kbdesw.dll   

c:\windows\system32\devmgrx.dll   
  

@+   

Membre, Contributeur   

H.F.  :  Fish66

Redirections liens googles.. virus

12 réponses

Votre réponse

Discussions similaires

Newsletters