Mon ordinateur est infecté.

Bonjour,

Voila, depuis 2 jours, mon ordinateur est infecté par un virus qui m'empeche l'acces a mes dossiers et programmes puis a fait apparaitre des "logiciel" windows security alert et windows restore et antimalware doctor tous les 3 payants évidement pour me forcer a payer pour nettoyer mon ordi.
L'acces a mon gestionnaire de taches etait lui aussi restreint. J'ai reussit a y acceder par le biais d'une commande sur "executer" et j'ai arreté les taches qui me parassaient anormales pour enfin les supprimer de mon disque dur. Je n'ai pas du réussir puisque je n'arrive toujours pas a acceder a mes documents, sauf certains fichiers de musique et videos a travers le lecteur windows, et parce que firefox m'informe qu'une somme de données exceptionellement elevée est transmise via mon ordinateur.
Je commence donc a sérieusement paniquer car je ne veux pas avoir d'ennuis avec la justice...

Voici le rapport ZHPDiag, je vous remercie a l'avance de tout coeur pour votre aide!!

Jeff

Rapport de ZHPDiag v1.27.1901 par Nicolas Coolman, Update du 15/04/2011
Run by Jeff at 16/04/2011 01:47:49
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\\ Web Browser
MSIE: Internet Explorer v8.0.7600.16385
MFIE: Mozilla Firefox v3.6.16 (fr) (Defaut)
GCIE: Google Chrome v10.0.648.204

---\\ System Information
Windows 7 Business Edition, 64-bit (Build 7600)
Processor: Intel64 Family 6 Model 26 Stepping 5, GenuineIntel
Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4094 MB (71% free)
System Restore: Désactivé (Disabled)
System drive C: has 116 GB (24%) free of 466 GB

---\\ Logged in mode
Computer Name: JEFF-PC
User Name: Jeff
All Users Names: Jeff, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\Jeff\AppData\Roaming
%LocalAppData%=C:\Users\Jeff\AppData\Local
%StartMenu%=C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 116 Go of 466 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified



---\\ Recherche particulière de fichiers génériques
[MD5.58CF72A4A60E49FF5C6AC58C01BDC056] - (.Microsoft Corporation - Explorateur Windows.) (.04/05/2010 12:59:07.) -- C:\Windows\Explorer.exe [2870272]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256]
[MD5.214605C48AE416BC067C39D227CFCC57] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.24/02/2011 06:32:44.) -- C:\Windows\system32\wininet.dll [981504]



---\\ Processus lancés
[MD5.F34E7705751BB413283434697BF8E55D] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [357696]
[MD5.FC755A4004EDE404417964312F6B842A] - (...) -- C:\Users\Jeff\AppData\Roaming\Yvubu\umyz.exe [111104]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- C:\Windows\SysWOW64\rundll32.exe [44544]
[MD5.BAD6BEA0DE1F69C82BDB74378CE0C20A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288]
[MD5.66893067C2FB0505F151D3FCB8EA92B5] - (.ALWIL Software - avast! service GUI component.) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe [78008]
[MD5.819892199645F33A680E50F1D5271879] - (.Apple Inc. - iTunesHelper Module.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [305440]
[MD5.773CDDBA65983D33ABB74E7F4EF9EAB5] - (.Apple Inc. - Safari Web Browser.) -- C:\Program Files (x86)\Safari\Safari.exe [5110568]
[MD5.32E9CE88DF7F4816710650560CCC6E64] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [643584]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Jeff] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.4.2.7.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdivx32.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.0".) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=8] - (.Google Inc. - Google Update.) -- C:\Users\Jeff\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
G1 - GCS: Preference [User Data\Default] None



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mobistar.be
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mobistar.be
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Jeff\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [{96472BFE-39A4-D123-27D4-584F89172B2E}] . (...) -- C:\Users\Jeff\AppData\Roaming\Yvubu\umyz.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Ewodejimijigok] . (.FileZilla Project - SFTP module for FileZilla based on PuTTY's.) -- C:\Users\Jeff\AppData\Local\welicC.dll
O4 - HKCU\..\Run: [k70ccreloc.exe] C:\Users\Jeff\AppData\Roaming\DA9083DE47BD29913DD8EFFA827DBFF2\k70ccreloc.exe (.not file.)
O4 - HKCU\..\Run: [0ESKOMO9JO] . (...) -- C:\Users\Jeff\AppData\Local\Temp\Psl.exe
O4 - HKCU\..\Run: [PxOuRnWAHQGhyii] C:\ProgramData\PxOuRnWAHQGhyii.exe (.not file.)
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper Module.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [SkinClock] C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Jeff\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [{96472BFE-39A4-D123-27D4-584F89172B2E}] . (...) -- C:\Users\Jeff\AppData\Roaming\Yvubu\umyz.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [Ewodejimijigok] . (.FileZilla Project - SFTP module for FileZilla based on PuTTY's.) -- C:\Users\Jeff\AppData\Local\welicC.dll
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [k70ccreloc.exe] C:\Users\Jeff\AppData\Roaming\DA9083DE47BD29913DD8EFFA827DBFF2\k70ccreloc.exe (.not file.)
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [0ESKOMO9JO] . (...) -- C:\Users\Jeff\AppData\Local\Temp\Psl.exe
O4 - HKUS\S-1-5-21-3585605561-3169075951-1757872390-1000\..\Run: [PxOuRnWAHQGhyii] C:\ProgramData\PxOuRnWAHQGhyii.exe (.not file.)
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk . (.McAfee, Inc..) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\Assassin's Creed II - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Jeff\Desktop\DivX Movies.lnk . (...) -- C:\Users\Jeff\Videos\DivX Movies
O4 - Global Startup: C:\Users\Jeff\Desktop\PartyPoker.lnk . (...) -- C:\Programs\PartyGaming\PartyGaming.exe
O4 - Global Startup: C:\Users\Jeff\Desktop\Windows Restore.lnk . (...) -- C:\ProgramData\49995528.exe (.not file.)
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{2D6ED011-055B-4041-B198-BB903827EBFB}\SafariIco.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\aTube Catcher.lnk . (.DsNET.) -- C:\Program Files (x86)\DsNET Corp\aTube Catcher 1.0\yct.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ethereal.lnk . (...) -- C:\Program Files (x86)\Ethereal\ethereal.exe (.not file.)
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Users\Jeff\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jeff\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PartyPoker.lnk . (...) -- C:\Programs\PartyGaming\PartyGaming.exe



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.exe



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpDomain = lan
O17 - HKLM\System\CS1\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpDomain = lan
O17 - HKLM\System\CS2\Services\Tcpip\..\{712E002B-23E8-4533-94F9-FEBD7120BFC9}: DhcpDomain = lan
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: (avast! Mail Scanner) . (.ALWIL Software - avast! e-Mail Scanner Service.) - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: (avast! Web Scanner) . (.ALWIL Software - avast! Web Scanner.) - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: (Bonjour Service) . (...) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: (iPod Service) . (.Apple Inc. - iPodService Module (32-bit).) - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: (LBTServ) . (.Logitech, Inc. - Logitech Bluetooth Service.) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: (McComponentHostService) . (.McAfee, Inc. - Component Host Service.) - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (...) - C:\Program Files\WinPcap\rpcapd.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3585605561-3169075951-1757872390-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3585605561-3169075951-1757872390-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\vfmcxsh.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-3585605561-3169075951-1757872390-1000Core] (.Google Inc..) -- C:\Users\Jeff\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-3585605561-3169075951-1757872390-1000UA] (.Google Inc..) -- C:\Users\Jeff\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.61CFEDAF9C527A1463F34F71240F9BB5] [APT] [{1F9FD30D-1B59-455C-95DC-46E3736602E4}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
[MD5.0671A287B9F911FEBD5B92CFE0F2104E] [APT] [{22116563-108C-42c0-A7CE-60161B75E508}] (.Pas de propriétaire.) -- C:\Users\Jeff\AppData\Local\Temp\Psl.exe
[MD5.00000000000000000000000000000000] [APT] [{366D9E65-BB47-49A9-B895-6D4F234F0577}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{39896AEF-B696-4BB3-B5F8-44D938182C66}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{44DD0365-4726-477C-8C9A-632C81F6C456}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.61CFEDAF9C527A1463F34F71240F9BB5] [APT] [{470E99D2-4B30-4B2E-BF29-DF2CAAC516EB}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{4C98DD18-AE77-497D-9728-609AA571B615}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{590AD5C3-CBFC-4107-BE1A-3861A4AD7142}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{629E1942-B83C-42B9-ACCF-AD1CF34906D7}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{72B64FE1-996F-4F52-B258-4906826489C4}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{810401E2-DDE0-454e-B0E2-AA89C9E5967C}] (.Pas de propriétaire.) -- C:\Windows\Pteqia.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{841895B4-8C17-46F0-8829-5389FDF78FD0}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9781AD2A-2D55-4276-B556-BC9D884E0EA9}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9C7CB8A8-BFA9-4208-B324-D244B79C2242}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{A341717C-6EF9-49A8-936E-BB9181BA0EFB}] (.Pas de propriétaire.) -- C:\Users\Jeff\Logiciels\programmes\iTunesSetup9.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{AFE9952E-1B42-43F8-BD2E-0C7AB782BDAB}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{E6C34DD6-2CF7-458E-953A-5C1C9084833A}] (.Pas de propriétaire.) -- C:\Program Files (x86)\Atomic Alarm Clock\AtomicAlarmClock.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{F75C951C-4B1F-4CDE-950C-15EE3310FED6}] (.Pas de propriétaire.) -- C:\Users\Jeff\Logiciels\programmes\Alcohol120 1.9.8.6221\Alcohol120_trial_1.9.7.6221.exe (.not file.)
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: 'Fallout New Vegas' (Àíãëèéñêàÿ Âåðñèÿ) - (.Pas de propriétaire.) [HKLM][64Bits] -- 'Fallout New Vegas'_is1
O42 - Logiciel: 7-Zip 4.65 (x64 edition) - (.Igor Pavlov.) [HKLM] -- {23170F69-40C1-2702-0465-000001000000}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 10.0.42.34 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {24762012-C6C8-4AAD-A02D-71A009FA1683}
O42 - Logiciel: Adobe Reader 9.4.0 - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: AirSnare - (.Pas de propriétaire.) [HKLM][64Bits] -- AirSnare
O42 - Logiciel: Antimalware Doctor - (.Pas de propriétaire.) [HKCU] -- Antimalware Doctor
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {0C34B801-6AEC-4667-B053-03A67E2D0415}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assassin's Creed II - (.Ubisoft.) [HKLM][64Bits] -- {8570BEE8-0CA3-4977-9AB1-80ED93F0513C}
O42 - Logiciel: Atomic Alarm Clock 5.55 - (.Drive Software Company.) [HKLM][64Bits] -- Atomic Alarm Clock_is1
O42 - Logiciel: Barcode Maker 5 - (.Shareware by Lars Sams.) [HKLM][64Bits] -- {BDC4C1B8-3C4F-493F-AEF3-52B3F8A23E74}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {DAE239CE-EB9D-4EB3-B0D4-528D6BAA48FD}
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM][64Bits] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM][64Bits] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM][64Bits] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM][64Bits] -- DivX Plus DirectShow Filters
O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM][64Bits] -- {B7050CBDB2504B34BC2A9CA0A692CC29}
O42 - Logiciel: Ethereal 0.99.0 - (.The Ethereal developer community, http://www.ethereal.com.) [HKLM][64Bits] -- Ethereal
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: HD Tune Pro 3.00 - (.EFD Software.) [HKLM][64Bits] -- HD Tune Pro_is1
O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Logitech SetPoint 6.20 - (.Logitech.) [HKLM] -- sp6
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {7299052b-02a4-4627-81f2-1818da5d550d}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {8220EEFE-38CD-377E-8595-13398D740ACE}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Mozilla Firefox (3.6.16) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox (3.6.16)
O42 - Logiciel: Notepad++ - (.Pas de propriétaire.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: O&O FormatRecovery - (.O&O Software GmbH.) [HKLM][64Bits] -- {534803A0-780C-4011-AB72-DAAB0CB82FD6}
O42 - Logiciel: Paint.NET v3.5.5 - (.dotPDN LLC.) [HKLM] -- {F0E2B312-D7FD-4349-A9B6-E90B36DB1BD1}
O42 - Logiciel: PartyPoker - (.PartyGaming.) [HKLM][64Bits] -- PartyPoker
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {2D6ED011-055B-4041-B198-BB903827EBFB}
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM][64Bits] -- {A29549FD-65F3-440C-A552-6B8114CF319D}
O42 - Logiciel: Skype(TM) 5.1 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM][64Bits] -- {888F1505-C2B3-4FDE-835D-36353EBD4754}
O42 - Logiciel: VLC media player 1.0.3 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: WinPcap 3.1 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst
O42 - Logiciel: aTube Catcher - (.DsNET.) [HKLM][64Bits] -- aTube Catcher
O42 - Logiciel: avast! Antivirus - (.Alwil Software.) [HKLM][64Bits] -- avast!
O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM][64Bits] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {EC2A8F27-4FBF-4E41-B27B-FE822511B761}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\0ESKOMO9JO]
[HKCU\Software\ALWIL Software]
[HKCU\Software\Adobe]
[HKCU\Software\Antimalware Doctor Inc]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Bomers]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ClockSkin53]
[HKCU\Software\DT Soft]
[HKCU\Software\DivXNetworks]
[HKCU\Software\EFD Software]
[HKCU\Software\Google]
[HKCU\Software\JavaSoft]
[HKCU\Software\Leadertech]
[HKCU\Software\LockHunter]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\PartyGaming]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Qmtusr]
[HKCU\Software\Skype]
[HKCU\Software\Sysinternals]
[HKCU\Software\TBXQRHV4KR]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\techPowerUp]
[HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec]
[HKLM\Software\7-Zip]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\Alienware]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Bethesda Softworks]
[HKLM\Software\Bomers]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DT Soft]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Google]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Notepad]
[HKLM\Software\O&O]
[HKLM\Software\ODBC]
[HKLM\Software\Paint.NET]
[HKLM\Software\Policies]
[HKLM\Software\Qmtusr]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Ubisoft]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 29/10/2010 - 02:42:56 - [4022438] ----D- C:\Program Files\7-Zip
O43 - CFD: 04/12/2010 - 23:33:28 - [78822637] ----D- C:\Program Files\Alwil Software
O43 - CFD: 20/11/2010 - 23:26:56 - [193024] ----D- C:\Program Files\Bonjour
O43 - CFD: 21/02/2011 - 12:39:34 - [94147784] ----D- C:\Program Files\Common Files
O43 - CFD: 14/07/2009 - 13:22:14 - [90257428] ----D- C:\Program Files\DVD Maker
O43 - CFD: 29/10/2010 - 02:38:10 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 15/04/2011 - 03:17:10 - [5230893] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 21/02/2011 - 12:40:20 - [27120164] ----D- C:\Program Files\Logitech
O43 - CFD: 29/10/2010 - 05:19:16 - [594270] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 29/10/2010 - 02:41:34 - [10065947] ----D- C:\Program Files\Paint.NET
O43 - CFD: 14/07/2009 - 07:32:40 - [36253865] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 27/04/2010 - 01:30:22 - [900096] ----D- C:\Program Files\TweaksLogon
O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 29/04/2010 - 20:02:04 - [16584350] ----D- C:\Program Files\Utility_GT
O43 - CFD: 14/07/2009 - 13:02:46 - [4039168] ----D- C:\Program Files\Windows Defender
O43 - CFD: 28/04/2010 - 00:48:22 - [25862247] ----D- C:\Program Files\Windows GT
O43 - CFD: 14/07/2009 - 13:22:12 - [9224824] ----D- C:\Program Files\Windows Journal
O43 - CFD: 20/01/2011 - 15:33:38 - [6667264] ----D- C:\Program Files\Windows Mail
O43 - CFD: 20/01/2011 - 15:33:34 - [7687085] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 29/10/2010 - 02:38:10 - [12627124] ----D- C:\Program Files\Windows NT
O43 - CFD: 14/07/2009 - 13:02:46 - [5516568] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 14/07/2009 - 07:32:40 - [235008] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 29/10/2010 - 06:14:32 - [13450478] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 21/02/2011 - 12:40:40 - [24838501] ----D- C:\Program Files\Common Files\LogiShrd
O43 - CFD: 21/02/2011 - 12:39:44 - [56687842] ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 14/07/2009 - 13:02:46 - [12009971] ----D- C:\Program Files\Common Files\System
O43 - CFD: 14/11/2010 - 14:14:56 - [26306817] ----D- C:\ProgramData\Adobe
O43 - CFD: 20/11/2010 - 23:26:52 - [16177664] ----D- C:\ProgramData\Apple
O43 - CFD: 02/02/2011 - 21:12:10 - [103917352] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 29/10/2010 - 02:38:10 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 25/11/2010 - 23:29:40 - [1520] ----D- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 29/10/2010 - 02:38:10 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 21/02/2011 - 12:40:40 - [3736552] ----D- C:\ProgramData\Logishrd
O43 - CFD: 01/11/2010 - 22:13:24 - [238711] ----D- C:\ProgramData\McAfee
O43 - CFD: 04/12/2010 - 20:10:38 - [852] ----D- C:\ProgramData\McAfee Security Scan
O43 - CFD: 29/10/2010 - 02:38:10 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 04/12/2010 - 20:10:30 - [151771684] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 29/10/2010 - 05:21:32 - [65254] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 29/10/2010 - 02:38:10 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 15/04/2011 - 16:25:06 - [43588] ----D- C:\ProgramData\ppData
O43 - CFD: 25/02/2011 - 17:48:36 - [39280457] ----D- C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 20/11/2010 - 23:20:56 - [0] ----D- C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 15/03/2011 - 20:12:56 - [0] ----D- C:\ProgramData\Ubisoft
O43 - CFD: 14/04/2011 - 06:50:44 - [4507927] --H-D- C:\Users\Jeff\AppData\Roaming\Adobe
O43 - CFD: 02/02/2011 - 21:54:38 - [392283] --H-D- C:\Users\Jeff\AppData\Roaming\Apple Computer
O43 - CFD: 14/04/2011 - 07:11:20 - [55444] --H-D- C:\Users\Jeff\AppData\Roaming\DA9083DE47BD29913DD8EFFA827DBFF2
O43 - CFD: 25/11/2010 - 23:32:10 - [472] --H-D- C:\Users\Jeff\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 10/01/2011 - 00:04:06 - [16440] --H-D- C:\Users\Jeff\AppData\Roaming\DivX
O43 - CFD: 13/03/2011 - 17:14:14 - [199] --H-D- C:\Users\Jeff\AppData\Roaming\dvdcss
O43 - CFD: 29/10/2010 - 03:05:22 - [0] --H-D- C:\Users\Jeff\AppData\Roaming\Identities
O43 - CFD: 25/02/2011 - 13:29:10 - [9801308] --H-D- C:\Users\Jeff\AppData\Roaming\Idfyun
O43 - CFD: 21/02/2011 - 12:40:46 - [511] --H-D- C:\Users\Jeff\AppData\Roaming\Leadertech
O43 - CFD: 20/11/2010 - 19:19:08 - [2394] --H-D- C:\Users\Jeff\AppData\Roaming\LockHunter
O43 - CFD: 21/02/2011 - 12:39:34 - [112564] --H-D- C:\Users\Jeff\AppData\Roaming\Logishrd
O43 - CFD: 21/02/2011 - 12:41:02 - [32779] --H-D- C:\Users\Jeff\AppData\Roaming\Logitech
O43 - CFD: 01/11/2010 - 22:24:20 - [63240] --H-D- C:\Users\Jeff\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 13:21:48 - [0] --H-D- C:\Users\Jeff\AppData\Roaming\Media Center Programs
O43 - CFD: 21/02/2011 - 13:06:46 - [2439122] -S--D- C:\Users\Jeff\AppData\Roaming\Microsoft
O43 - CFD: 29/10/2010 - 06:37:12 - [25299632] --H-D- C:\Users\Jeff\AppData\Roaming\Mozilla
O43 - CFD: 16/01/2011 - 23:03:02 - [258177] --H-D- C:\Users\Jeff\AppData\Roaming\Mozilla-Cache
O43 - CFD: 20/11/2010 - 23:20:48 - [195588] --H-D- C:\Users\Jeff\AppData\Roaming\Notepad++
O43 - CFD: 16/04/2011 - 01:25:12 - [3876717] --H-D- C:\Users\Jeff\AppData\Roaming\Skype
O43 - CFD: 05/04/2011 - 16:09:40 - [34992] --H-D- C:\Users\Jeff\AppData\Roaming\skypePM
O43 - CFD: 15/03/2011 - 20:12:56 - [2036] --H-D- C:\Users\Jeff\AppData\Roaming\Ubisoft
O43 - CFD: 13/03/2011 - 17:20:18 - [479469] --H-D- C:\Users\Jeff\AppData\Roaming\vlc
O43 - CFD: 20/02/2011 - 13:06:52 - [111104] --H-D- C:\Users\Jeff\AppData\Roaming\Yvubu
O43 - CFD: 10/11/2010 - 01:39:12 - [130006909] --H-D- C:\Users\Jeff\Appdata\Local\Adobe
O43 - CFD: 20/11/2010 - 23:26:52 - [0] --H-D- C:\Users\Jeff\Appdata\Local\Apple
O43 - CFD: 02/02/2011 - 21:54:44 - [54487503] --H-D- C:\Users\Jeff\Appdata\Local\Apple Computer
O43 - CFD: 29/10/2010 - 03:05:10 - [0] -SH-D- C:\Users\Jeff\Appdata\Local\Application Data
O43 - CFD: 08/04/2011 - 13:24:50 - [0] --H-D- C:\Users\Jeff\Appdata\Local\ElevatedDiagnostics
O43 - CFD: 25/11/2010 - 23:58:30 - [0] --H-D- C:\Users\Jeff\Appdata\Local\FalloutNV
O43 - CFD: 08/12/2010 - 07:14:54 - [434189439] --H-D- C:\Users\Jeff\Appdata\Local\Google
O43 - CFD: 29/10/2010 - 03:05:10 - [0] -SH-D- C:\Users\Jeff\Appdata\Local\Historique
O43 - CFD: 28/01/2011 - 22:39:46 - [357307221] --H-D- C:\Users\Jeff\Appdata\Local\Microsoft
O43 - CFD: 29/10/2010 - 05:18:54 - [0] --H-D- C:\Users\Jeff\Appdata\Local\Microsoft Help
O43 - CFD: 29/10/2010 - 06:37:06 - [108067739] --H-D- C:\Users\Jeff\Appdata\Local\Mozilla
O43 - CFD: 16/04/2011 - 01:47:46 - [1004298633] --H-D- C:\Users\Jeff\Appdata\Local\Temp
O43 - CFD: 29/10/2010 - 03:05:10 - [0] -SH-D- C:\Users\Jeff\Appdata\Local\Temporary Internet Files
O43 - CFD: 15/03/2011 - 20:21:36 - [173596] --H-D- C:\Users\Jeff\Appdata\Local\Ubisoft Game Launcher
O43 - CFD: 06/11/2010 - 03:39:50 - [244060795] ----D- C:\Program Files (x86)\Adobe
O43 - CFD: 20/11/2010 - 23:26:52 - [2221118] ----D- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 25/02/2011 - 17:48:40 - [372594708] ----D- C:\Program Files (x86)\Common Files
O43 - CFD: 25/11/2010 - 23:29:58 - [10308220] ----D- C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 10/01/2011 - 00:00:36 - [57802016] ----D- C:\Program Files (x86)\DivX
O43 - CFD: 08/12/2010 - 07:17:34 - [17221484] ----D- C:\Program Files (x86)\DsNET Corp
O43 - CFD: 08/12/2010 - 07:12:24 - [1918070] ----D- C:\Program Files (x86)\HD Tune Pro
O43 - CFD: 15/03/2011 - 20:10:00 - [8990733] --H-D- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 15/04/2011 - 03:17:10 - [5655957] ----D- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 02/02/2011 - 21:12:10 - [1582699] ----D- C:\Program Files (x86)\iPod
O43 - CFD: 02/02/2011 - 21:12:24 - [112137144] ----D- C:\Program Files (x86)\iTunes
O43 - CFD: 29/10/2010 - 02:42:30 - [88439666] ----D- C:\Program Files (x86)\Java
O43 - CFD: 12/11/2010 - 22:18:20 - [9454922] ----D- C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 29/10/2010 - 05:20:46 - [551722052] ----D- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 29/10/2010 - 02:42:42 - [38271979] ----D- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 29/10/2010 - 05:20:46 - [14904] ----D- C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 29/10/2010 - 05:19:12 - [1387249] ----D- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 29/10/2010 - 05:20:54 - [3178824] ----D- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 29/10/2010 - 05:20:42 - [8152064] ----D- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 05/04/2011 - 15:21:10 - [34142588] ----D- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 29/10/2010 - 05:20:48 - [26521] ----D- C:\Program Files (x86)\MSBuild
O43 - CFD: 29/10/2010 - 02:41:24 - [9200563] ----D- C:\Program Files (x86)\Notepad++
O43 - CFD: 29/10/2010 - 06:17:06 - [3277802] ----D- C:\Program Files (x86)\OO Software
O43 - CFD: 02/02/2011 - 21:11:42 - [79279759] ----D- C:\Program Files (x86)\QuickTime
O43 - CFD: 25/11/2010 - 23:34:00 - [6771674785] ----D- C:\Program Files (x86)\R.G. Catalyst
O43 - CFD: 14/07/2009 - 07:32:40 - [38597377] ----D- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 20/11/2010 - 23:27:10 - [69539333] ----D- C:\Program Files (x86)\Safari
O43 - CFD: 25/02/2011 - 17:48:52 - [26925701] R---D- C:\Program Files (x86)\Skype
O43 - CFD: 15/03/2011 - 20:10:02 - [6232358361] ----D- C:\Program Files (x86)\Ubisoft
O43 - CFD: 14/07/2009 - 06:57:08 - [0] --H-D- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 15/11/2010 - 03:14:54 - [75156207] ----D- C:\Program Files (x86)\VideoLAN
O43 - CFD: 14/07/2009 - 13:02:46 - [524800] ----D- C:\Program Files (x86)\Windows Defender
O43 - CFD: 20/01/2011 - 15:33:38 - [6180864] ----D- C:\Program Files (x86)\Windows Mail
O43 - CFD: 20/01/2011 - 15:33:34 - [5024017] ----D- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:40 - [12197556] ----D- C:\Program Files (x86)\Windows NT
O43 - CFD: 14/07/2009 - 13:02:46 - [4417800] ----D- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 14/07/2009 - 07:32:42 - [189440] ----D- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 14/07/2009 - 13:02:46 - [13089518] ----D- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 16/04/2011 - 01:48:00 - [3745339] ----D- C:\Program Files (x86)\ZHPDiag
O43 - CFD: 21/02/2011 - 12:40:40 - [24838501] ----D- C:\Program Files\Common Files\LogiShrd
O43 - CFD: 21/02/2011 - 12:39:44 - [56687842] ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 14/07/2009 - 13:02:46 - [12009971] ----D- C:\Program Files\Common Files\System



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.B3BA3128D1391C7CBBB82694B60E784E] - 16/04/2011 - 00:27:34 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1532276]
O44 - LFC:[MD5.2F8A8DFE63769A5BBFFC623BCB0D5A21] - 16/04/2011 - 00:27:34 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [104214]
O44 - LFC:[MD5.9FB6227646EDFE0487FB84992F6666E8] - 16/04/2011 - 00:27:34 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [128356]
O44 - LFC:[MD5.44EDFBB9A1C82D65E051C558903F031A] - 16/04/2011 - 00:27:34 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [609896]
O44 - LFC:[MD5.4D779C45E21AAF294009422AC2A82E78] - 16/04/2011 - 00:27:34 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [697522]
O44 - LFC:[MD5.0B921F561A046160C3BED20A8CCC6FA0] - 16/04/2011 - 00:23:12 ---A- . (...) -- C:\Windows\setupact.log [15669]
O44 - LFC:[MD5.DEF8E5AB96383B08D34AB1E7521F0DB8] - 16/04/2011 - 00:23:12 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.C2869677774C32A99A9CB537B1527DD9] - 15/04/2011 - 02:18:25 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [419256]
O44 - LFC:[MD5.24A2352E5791DC6B8A1D1E0296DDF79A] - 15/04/2011 - 02:17:08 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1750654]
O44 - LFC:[MD5.8BD25A34DA5E53AE115977DD1E15AB3C] - 14/04/2011 - 22:57:11 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\SysNative\atmlib.dll [46080]
O44 - LFC:[MD5.EFC5353E4F513DEF55ED7B7872363957] - 14/04/2011 - 22:57:11 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\SysNative\atmfd.dll [367104]
O44 - LFC:[MD5.EFC5353E4F513DEF55ED7B7872363957] - 14/04/2011 - 22:57:11 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\System32\atmfd.dll [294912]
O44 - LFC:[MD5.8BD25A34DA5E53AE115977DD1E15AB3C] - 14/04/2011 - 22:57:10 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\System32\atmlib.dll [34304]
O44 - LFC:[MD5.ACBA934B9FED59EEB1DBDF310D0657C3] - 14/04/2011 - 05:50:35 ---A- . (...) -- C:\Windows\srun.log [12]



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.)



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "VerboseStatus"=1



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsHistory"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoSMHelp"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "LinkResolveIgnoreLinkInfo"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoResolveSearch"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoResolveTrack"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoInternetOpenWith"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoRecentDocsHistory"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoSMHelp"=1



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536]
O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864]
O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440]
O58 - SDL:[MD5.7A4B413614C055935567CF88A9734D38] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [106576]
O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128]
O58 - SDL:[MD5.B4AD0CACBAB298671DD6F6EF7E20679D] - 14/07/2009 - 02:52:21 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [28752]
O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632]
O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856]
O58 - SDL:[MD5.B20AC3B0B6096857A0C3EAB98036BEF0] - 19/07/2008 - 16:37:52 ---A- . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [22096]
O58 - SDL:[MD5.A749113217AD127AA072939C86333881] - 19/07/2008 - 16:36:19 ---A- . (.ALWIL Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [63568]
O58 - SDL:[MD5.09B4298FA6C76A3F4BC9C66976040260] - 19/07/2008 - 16:33:47 ---A- . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [27216]
O58 - SDL:[MD5.899ADF28077442F5C21E4A2AFC7AE4C7] - 19/07/2008 - 16:35:48 ---A- . (.ALWIL Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [89168]
O58 - SDL:[MD5.1E1A76A5AE62CA771CBC2843844270A9] - 19/07/2008 - 16:32:42 ---A- . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [48720]
O58 - SDL:[MD5.E857EEE6B92AAA473EBB3465ADD8F7E7] - 20/06/2009 - 03:09:57 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athrx.sys [1394688]
O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848]
O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432]
O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704]
O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720]
O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104]
O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976]
O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720]
O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480]
O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496]
O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016]
O58 - SDL:[MD5.F2523EF6460FC42405B122483