Mon pc est-il clean, rapport zhpdiag ! :-)

Bonjour,

J'aimerais savoir si mon pc est infecté mais la lecture d'un expert s'impose!
merci par avance.
voici le rapport zhp diag:

Rapport de ZHPDiag v1.27.1902 par Nicolas Coolman, Update du 16/04/2011
Run by doud at 16/04/2011 16:03:13
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 4.0 v4.0 (Defaut)

---\\ System Information
Windows XP Home Edition Service Pack 3 (Build 2600)
Processor: x86 Family 6 Model 14 Stepping 8, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (78% free)
System Restore: Activé (Enable)
System drive C: has 96 GB (85%) free of 112 GB

---\\ Logged in mode
Computer Name: DAVID
User Name: doud
All Users Names: SUPPORT_388945a0, HelpAssistant, doud, ASPNET, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Documents and Settings\doud\Application Data
%LocalAppData%=C:\Documents and Settings\doud\Local Settings\Application Data
%StartMenu%=C:\Documents and Settings\doud\Menu Démarrer

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 96 Go of 112 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.77C66BD5CED4E555919A5FB713322CDD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.23/02/2011 00:05:48.) -- C:\WINDOWS\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 10:40:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 11:15:54.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]



---\\ Processus lancés
[MD5.BAAB0EECD33888E7BEF52A75B6D6EC30] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS\system32\Ati2evxx.exe [405504]
[MD5.56DED3ADE453272E6A0AD582D945D1A4] - (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [114753]
[MD5.6C5155CC0E805C7BE6028BFF7AC14524] - (.Intel Corporation - Wireless Management Service.) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [540745]
[MD5.7207DB389CEAD101251883511A676F91] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336]
[MD5.64C4C17BF6A40FF1CD21205E6FD415B8] - (.ATI Technologies Inc. - CLI Application (Command Line Interface).) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [45056]
[MD5.53DCD7CEF78CC06692400B339336233B] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [761945]
[MD5.DEA4AC5B44F5A7E4E3DA071D0CDB0740] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [15691264]
[MD5.33FBA26946FB3BF16294561C97B35E76] - (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\Ltmoh.exe [184320]
[MD5.F2B869D0B4B765F573BB7B7F80B09DC3] - (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe [88203]
[MD5.2C0970FBC5A9FB5633B8D80671B3B5C9] - (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe [352256]
[MD5.47AF6F1C5BB854376B164C574CCEF481] - (.Synaptics, Inc. - Toshiba Custom PlugIn Application.) -- C:\Program Files\Synaptics\SynTP\Toshiba.exe [151552]
[MD5.E799A7B4431303AAAA11E077DEB379E3] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSMain.exe [266240]
[MD5.F1596B4720E67B478357C21682D8163A] - (.TOSHIBA CORPORATION - ConfigFree(TM) Tray.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [978944]
[MD5.74387D88985987ACDF294CCA1622640E] - (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe [73728]
[MD5.5C9A55D801ACCEFA5A6C4F3340BD5623] - (.TOSHIBA Corporation - TFncKy.) -- C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe [184320]
[MD5.57DF8F5D690EB782C532AC4A944145AE] - (.TOSHIBA Corporation - TDispVol.) -- C:\WINDOWS\system32\TDispVol.exe [73728]
[MD5.E3A9C76AD9192C82F80326ECDDA21C34] - (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\System32\DLA\DLACTRLW.EXE [122940]
[MD5.5A6ACFF04D39D4C16F1FF52682C3B1B0] - (.Intel Corporation - ZeroCfgSvc MFC Application.) -- C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [667718]
[MD5.D4830448B45CDD45F4285DC6E152764F] - (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [602182]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768]
[MD5.FEBC1591E5C0DC87EF9CF3D657B65FC2] - (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe [65536]
[MD5.1E3FD037E2D137CE1AB7D34950A552D6] - (.TOSHIBA Corporation - Pas de description.) -- C:\WINDOWS\system32\TPSBattM.exe [40960]
[MD5.62F7FD637CE42ADDA3748E1B6E8780D2] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480]
[MD5.3CB0CC8879956C187E87E18634EE5164] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960]
[MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
[MD5.1B2857EF12D79A9F9ADBA14B0637CBF8] - (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [217164]
[MD5.90861642FD6D8FAFB1408EE26FA93CB4] - (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) -- C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe [35328]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968]
[MD5.0335FD5493864EAC41785FA92C3D5E1D] - (.Intel Corporation - Intel 802.1x Server.) -- C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe [397381]
[MD5.4A4E8F1BC67105DDED5647CB3663AF87] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe [399736]
[MD5.0521F19114CA0ABB8AF7523B83B87F85] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [643584]



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [doud] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60129.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKUS\S-1-5-21-3283455342-2650556114-3303121774-1006\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R1 - HKUS\S-1-5-21-3283455342-2650556114-3303121774-1006\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19048 (longhorn_ie8_gdr.110221-1700)) -- C:\WINDOWS\system32\ieframe.dll



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll



---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ATICCC] . (.ATI Technologies Inc. - CLI Application (Command Line Interface).) -- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
O4 - HKLM\..\Run: [LtMoh] . (.Agere Systems - LtMoh MFC Application.) -- C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] . (.Agere Systems - SoftModem Messaging Applet.) -- C:\WINDOWS\AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] . (.TOSHIBA - Hotkey Utility.) -- C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] . (.TOSHIBA Corporation - Pas de description.) -- C:\Windows\System32\TPSMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Tvs] . (.TOSHIBA Corporation - TOSHIBA Virtual Sound Taskbar Module.) -- C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TDispVol] . (.TOSHIBA Corporation - TDispVol.) -- C:\Windows\System32\TDispVol.exe
O4 - HKLM\..\Run: [DLA] . (.Sonic Solutions - Drive Letter Access Component.) -- C:\WINDOWS\System32\DLA\DLACTRLW.exe
O4 - HKLM\..\Run: [IntelZeroConfig] . (.Intel Corporation - ZeroCfgSvc MFC Application.) -- C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
O4 - HKLM\..\Run: [IntelWireless] . (.Intel Corporation - Intel Framework MFC Application.) -- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-3283455342-2650556114-3303121774-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-3283455342-2650556114-3303121774-1006\..\Run: [TOSCDSPD] . (.TOSHIBA - CD/DVD Drive Acoustic Silencer.) -- C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe



---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\doud\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\doud\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\doud\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\doud\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{7FE73419-96B5-4197-AA37-5F00DD5031F1}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{7FE73419-96B5-4197-AA37-5F00DD5031F1}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{7FE73419-96B5-4197-AA37-5F00DD5031F1}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\Windows\System32\Ati2evxx.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (Ati HotKey Poller) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: (CFSvcs) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: (EvtEng) . (.Intel Corporation - Intel(R) PROSet/Wireless Event Log.) - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: (RegSrvc) . (.Intel Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: (S24EventMonitor) . (.Intel Corporation - Wireless Management Service.) - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: (TAPPSRV) . (.TOSHIBA Corp. - TOSHIBA TAPPSRV.) - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: (DLACDBHM) . (.Sonic Solutions - Shared Driver Component.) - C:\Windows\System32\Drivers\DLACDBHM.sys
O41 - Driver: (DLARTL_N) . (.Sonic Solutions - Shared Driver Component.) - C:\Windows\System32\Drivers\DLARTL_N.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\Windows\System32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\Windows\System32\DRIVERS\redbook.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys



---\\ Logiciels installés (O42)
O42 - Logiciel: ALTools Update - (.ESTsoft Corp..) [HKLM] -- ALUpdate_is1
O42 - Logiciel: ALZip - (.ESTsoft Corp..) [HKLM] -- ALZip_is1
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {06C71F80-0E30-4E2C-878F-8502AB5AE3BE}
O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.0.1) - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1033-7B44-AA0000000001}
O42 - Logiciel: Assist TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {12B3A009-A080-4619-9A2A-C6DB151D8D67}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.Pas de propriétaire.) [HKLM] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Commandes TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {A6690C0E-B96E-4F0F-A8EB-D5B332454AC6}
O42 - Logiciel: FileHippo.com Update Checker - (.Pas de propriétaire.) [HKLM] -- FileHippo.com
O42 - Logiciel: Formatage de carte mémoire SD TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {48CF9A66-5F03-4025-ABD0-B3A3FA095A59}
O42 - Logiciel: Gestion d'énergie TOSHIBA - (.Pas de propriétaire.) [HKLM] -- Power Saver
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Intel(R) PRO Network Connections Drivers - (.Pas de propriétaire.) [HKLM] -- PROSet
O42 - Logiciel: InterVideo WinDVD Creator 2 - (.Pas de propriétaire.) [HKLM] -- {2FCE4FC5-6930-40E7-A4F1-F862207424EF}
O42 - Logiciel: InterVideo WinDVD for TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {91810AFC-A4F8-4EBA-A5AA-B198BBC81144}
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150040}
O42 - Logiciel: Java(TM) 6 Update 22 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216022F0}
O42 - Logiciel: Java(TM) 6 Update 24 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216024FF}
O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless - (.Intel Corporation.) [HKLM] -- ProInst
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Macromedia Flash Player - (.Macromedia, Inc..) [HKLM] -- {0456ebd7-5f67-4ab6-852e-63781e3f389c}
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Manuels TOSHIBA - (.TOSHIBA.) [HKLM] -- {3EB6332B-AF02-457C-A31C-835458C5B48B}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM] -- Microsoft .NET Framework 1.1 (1033)
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB2416447) - (.Pas de propriétaire.) [HKLM] -- M2416447
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox 4.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 4.0 (x86 fr)
O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {05653DE1-6567-40C6-B930-39D399B64369}
O42 - Logiciel: Outil de diagnostic PC TOSHIBA - (.Pas de propriétaire.) [HKLM] -- Outil de diagnostic PC
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Réducteur de bruit lect. CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Son virtuel TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {8B12BA86-ADAC-4BA6-B441-FFC591087252}
O42 - Logiciel: Sonic DLA - (.Sonic Solutions.) [HKLM] -- {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
O42 - Logiciel: Sonic RecordNow! - (.Sonic Solutions.) [HKLM] -- {9541FED0-327F-4DF0-8B96-EF57EF622F19}
O42 - Logiciel: SplitCam - (.SplitCam Co.) [HKLM] -- SplitCam
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA ConfigFree - (.Pas de propriétaire.) [HKLM] -- {BDD83DC9-BEE9-4654-A5DA-CC46C250088D}
O42 - Logiciel: TOSHIBA Hotkey Utility - (.Pas de propriétaire.) [HKLM] -- {64DD71BC-3109-4C88-9AD3-D5422644B722}
O42 - Logiciel: TOSHIBA Software Modem - (.Pas de propriétaire.) [HKLM] -- TOSHIBA Software Modem
O42 - Logiciel: TOSHIBA TouchPad ON/Off Utility - (.Pas de propriétaire.) [HKLM] -- {69BE47C2-36FE-4397-8199-85D8EAE69982}
O42 - Logiciel: TOSHIBA Utilities - (.Pas de propriétaire.) [HKLM] -- {78C68CB9-3DF5-44F3-AB9D-FA305C5EB85C}
O42 - Logiciel: TeraCopy 2.12 - (.Code Sector Inc..) [HKLM] -- TeraCopy_is1
O42 - Logiciel: Texas Instruments PCIxx21/x515/xx12 drivers. - (.Texas Instruments Inc..) [HKLM] -- InstallShield_{4497AFF6-98C4-4F49-B073-F48F42BCBF9E}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Utilitaire de zoom TOSHIBA - (.Pas de propriétaire.) [HKLM] -- {64212898-097F-4F3F-AECA-6D34A7EF82DF}
O42 - Logiciel: VLC media player 1.1.8 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Windows Genuine Advantage Validation Tool (KB892130) - (.Microsoft Corporation.) [HKLM] -- KB892130
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Windows Media Player 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -- Windows XP Service
O42 - Logiciel: mCore - (.Intel Corporation.) [HKLM] -- {E81667C6-2856-46D6-ABEA-6A2F42166779}
O42 - Logiciel: mDrWiFi - (.Intel Corporation.) [HKLM] -- {F6090A17-0967-4A8A-B3C3-422A1B514D49}
O42 - Logiciel: mHelp - (.Intel.) [HKLM] -- {8C6BB412-D3A8-4AAE-A01B-35B681789D68}
O42 - Logiciel: mIWA - (.Intel Corporation.) [HKLM] -- {3E9D596A-61D4-4239-BD19-2DB984D2A16F}
O42 - Logiciel: mLogView - (.Intel Corporation.) [HKLM] -- {0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
O42 - Logiciel: mMHouse - (.Intel Corporation.) [HKLM] -- {F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
O42 - Logiciel: mPfMgr - (.Intel Corporation.) [HKLM] -- {8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
O42 - Logiciel: mPfWiz - (.Intel Corporation.) [HKLM] -- {90B0D222-8C21-4B35-9262-53B042F18AF9}
O42 - Logiciel: mProSafe - (.Intel.) [HKLM] -- {23FB368F-1399-4EAC-817C-4B83ECBE3D83}
O42 - Logiciel: mWlsSafe - (.Intel.) [HKLM] -- {FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
O42 - Logiciel: mXML - (.Intel Corporation.) [HKLM] -- {9CC89556-3578-48DD-8408-04E66EBEF401}
O42 - Logiciel: mZConfig - (.Intel Corporation.) [HKLM] -- {94658027-9F16-4509-BBD7-A59FE57C3023}
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\Avira]
[HKCU\Software\BitTorrent]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Code Sector]
[HKCU\Software\ESTsoft]
[HKCU\Software\FileHippo.com]
[HKCU\Software\Intel]
[HKCU\Software\InterVideo]
[HKCU\Software\JavaSoft]
[HKCU\Software\LoteSoft]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Sonic]
[HKCU\Software\Stardock]
[HKCU\Software\Synaptics]
[HKCU\Software\Toshiba]
[HKLM\Software\ATI Technologies Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Adobe]
[HKLM\Software\Agere]
[HKLM\Software\Avira]
[HKLM\Software\C07ft5Y]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Code Sector]
[HKLM\Software\ESTsoft]
[HKLM\Software\Freeze.com]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\InterVideo]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\LoteSoft]
[HKLM\Software\Lucent]
[HKLM\Software\MDC]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\TOSHIBA]
[HKLM\Software\VideoLAN]
[HKLM\Software\W3i]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\X-AVCSD]
[HKLM\Software\mozilla.org]



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 13/04/2011 - 05:55:22 - [111499108] ----D- C:\Program Files\Adobe
O43 - CFD: 30/03/2006 - 20:50:54 - [204000528] ----D- C:\Program Files\ATI Technologies
O43 - CFD: 13/04/2011 - 00:56:54 - [113195598] ----D- C:\Program Files\Avira
O43 - CFD: 13/04/2011 - 21:19:52 - [3673717] ----D- C:\Program Files\CCleaner
O43 - CFD: 16/01/2006 - 18:35:02 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 13/04/2011 - 22:18:16 - [26839468] ----D- C:\Program Files\ESTsoft
O43 - CFD: 13/04/2011 - 21:23:20 - [69779510] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 13/04/2011 - 01:04:32 - [381086] ----D- C:\Program Files\FileHippo.com
O43 - CFD: 13/04/2011 - 01:15:32 - [34291988] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 13/04/2011 - 01:16:16 - [13878138] ----D- C:\Program Files\Intel
O43 - CFD: 13/04/2011 - 02:29:40 - [4685304] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 13/04/2011 - 01:15:32 - [121481546] ----D- C:\Program Files\InterVideo
O43 - CFD: 13/04/2011 - 22:03:26 - [180952631] ----D- C:\Program Files\Java
O43 - CFD: 13/04/2011 - 08:33:10 - [358606] ----D- C:\Program Files\ltmoh
O43 - CFD: 13/04/2011 - 22:49:08 - [5009035] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 13/04/2011 - 23:05:06 - [7047] ----D- C:\Program Files\Messenger
O43 - CFD: 14/04/2011 - 18:59:10 - [800662] ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 13/04/2011 - 08:33:10 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 13/04/2011 - 21:42:24 - [1378] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 14/04/2011 - 19:02:20 - [38371963] ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 13/04/2011 - 02:21:56 - [10374874] ----D- C:\Program Files\Movie Maker
O43 - CFD: 13/04/2011 - 01:19:52 - [32943886] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 13/04/2011 - 03:21:24 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 13/04/2011 - 08:33:24 - [19278399] ----D- C:\Program Files\MSN
O43 - CFD: 13/04/2011 - 08:33:36 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 13/04/2011 - 02:19:52 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 13/04/2011 - 01:40:08 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 13/04/2011 - 08:34:18 - [1804] ----D- C:\Program Files\Online Services
O43 - CFD: 13/04/2011 - 22:04:26 - [368732184] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 13/04/2011 - 02:23:52 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 13/04/2011 - 08:34:20 - [43260469] ----D- C:\Program Files\Realtek
O43 - CFD: 13/04/2011 - 03:21:16 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 13/04/2011 - 08:34:30 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 30/03/2006 - 20:54:28 - [21161903] ----D- C:\Program Files\Sonic
O43 - CFD: 16/04/2011 - 01:10:14 - [5794359] ----D- C:\Program Files\SplitCam
O43 - CFD: 30/03/2006 - 20:54:38 - [27425185] ----D- C:\Program Files\Synaptics
O43 - CFD: 14/04/2011 - 19:09:20 - [4250977] ----D- C:\Program Files\TeraCopy
O43 - CFD: 13/04/2011 - 21:36:44 - [124180539] ----D- C:\Program Files\Toshiba
O43 - CFD: 13/04/2011 - 01:16:52 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 13/04/2011 - 22:46:22 - [795888] ----D- C:\Program Files\uTorrent
O43 - CFD: 13/04/2011 - 22:09:38 - [83106503] ----D- C:\Program Files\VideoLAN
O43 - CFD: 13/04/2011 - 22:53:56 - [3581070] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 13/04/2011 - 22:53:54 - [9218812] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 13/04/2011 - 01:40:04 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 16/01/2006 - 18:35:56 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 13/04/2011 - 08:35:52 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 16/04/2011 - 16:03:20 - [3738310] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 13/04/2011 - 05:55:40 - [2901648] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 13/04/2011 - 08:30:56 - [13068184] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 13/04/2011 - 01:10:10 - [30759394] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 14/04/2011 - 18:59:16 - [11408152] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 13/04/2011 - 08:31:26 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 13/04/2011 - 08:31:26 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 13/04/2011 - 08:31:26 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 13/04/2011 - 08:31:26 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 13/04/2011 - 21:25:40 - [436312] ----D- C:\Program Files\Fichiers Communs\Symantec Shared
O43 - CFD: 13/04/2011 - 01:39:58 - [7126325] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 13/04/2011 - 21:35:50 - [1523668] ----D- C:\Documents and Settings\doud\Application Data\Adobe
O43 - CFD: 13/04/2011 - 08:23:06 - [0] ----D- C:\Documents and Settings\doud\Application Data\ATI
O43 - CFD: 13/04/2011 - 03:18:00 - [0] ----D- C:\Documents and Settings\doud\Application Data\Avira
O43 - CFD: 13/04/2011 - 22:18:18 - [568175] ----D- C:\Documents and Settings\doud\Application Data\ESTsoft
O43 - CFD: 13/04/2011 - 08:23:06 - [0] ----D- C:\Documents and Settings\doud\Application Data\Identities
O43 - CFD: 13/04/2011 - 01:16:04 - [759] ----D- C:\Documents and Settings\doud\Application Data\Intel
O43 - CFD: 13/04/2011 - 00:45:32 - [3132] ----D- C:\Documents and Settings\doud\Application Data\Macromedia
O43 - CFD: 13/04/2011 - 21:48:24 - [1063] ----D- C:\Documents and Settings\doud\Application Data\Malwarebytes
O43 - CFD: 13/04/2011 - 21:40:38 - [1515201] -S--D- C:\Documents and Settings\doud\Application Data\Microsoft
O43 - CFD: 13/04/2011 - 01:20:16 - [15807008] ----D- C:\Documents and Settings\doud\Application Data\Mozilla
O43 - CFD: 13/04/2011 - 08:23:06 - [0] ----D- C:\Documents and Settings\doud\Application Data\Sonic
O43 - CFD: 13/04/2011 - 01:09:02 - [28424820] ----D- C:\Documents and Settings\doud\Application Data\Sun
O43 - CFD: 14/04/2011 - 19:09:58 - [1133] ----D- C:\Documents and Settings\doud\Application Data\TeraCopy
O43 - CFD: 13/04/2011 - 08:23:06 - [187] ----D- C:\Documents and Settings\doud\Application Data\toshiba
O43 - CFD: 16/04/2011 - 16:03:32 - [1383697] ----D- C:\Documents and Settings\doud\Application Data\uTorrent
O43 - CFD: 13/04/2011 - 08:23:06 - [51357] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\Adobe
O43 - CFD: 13/04/2011 - 02:24:24 - [7924] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\ApplicationHistory
O43 - CFD: 13/04/2011 - 08:23:06 - [6351] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\ATI
O43 - CFD: 14/04/2011 - 19:02:52 - [3882036] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\Microsoft
O43 - CFD: 13/04/2011 - 01:20:00 - [194708915] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\Mozilla
O43 - CFD: 13/04/2011 - 21:35:50 - [0] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\Temp
O43 - CFD: 13/04/2011 - 08:23:06 - [0] ----D- C:\Documents and Settings\doud\Local Settings\Application Data\Toshiba



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.64EF1200F915817C00FCFD7F38F01200] - 16/04/2011 - 14:00:52 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1654740]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/04/2011 - 13:59:59 ---A- . (...) -- C:\WINDOWS\0.log [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 16/04/2011 - 13:59:39 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048]
O44 - LFC:[MD5.64EF1200F915817C00FCFD7F38F01200] - 16/04/2011 - 13:58:23 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [8772]
O44 - LFC:[MD5.47A832FB0350AA2A0B8846C9CBE63113] - 16/04/2011 - 01:36:59 ---A- . (...) -- C:\WINDOWS\setupapi.log [89816]
O44 - LFC:[MD5.C7C361A04742AB187E10583BBF4FA975] - 16/04/2011 - 00:10:50 ---A- . (.LoteSoft Co. - Video Capture Stream Splitter.) -- C:\WINDOWS\System32\drivers\splitcam.sys [13824]
O44 - LFC:[MD5.F9C52B11EEAB942CD6B218813DE18EEC] - 16/04/2011 - 00:10:12 ---A- . (.Pas de propriétaire - ActiveSkin Module.) -- C:\WINDOWS\System32\actskn43.ocx [389120]
O44 - LFC:[MD5.010B8981F708845E90690E4B40C9C475] - 14/04/2011 - 18:03:10 ---A- . (...) -- C:\WINDOWS\System32\wpa.dbl [1158]
O44 - LFC:[MD5.1E4328C5284674987A33CE21BDDEE16E] - 14/04/2011 - 17:42:29 ---A- . (...) -- C:\WINDOWS\spupdsvc.log [1492]
O44 - LFC:[MD5.913E42073A3D63A318FDB205F3AD07C2] - 13/04/2011 - 23:07:52 ---A- . (...) -- C:\WINDOWS\KB2378111.log [5366]
O44 - LFC:[MD5.0517093831568588EE364202026B9668] - 13/04/2011 - 23:07:52 ---A- . (...) -- C:\WINDOWS\wmsetup.log [1236]
O44 - LFC:[MD5.25FAB2A12998DC514F17E36756B781B7] - 13/04/2011 - 23:07:48 ---A- . (...) -- C:\WINDOWS\KB975558.log [5663]
O44 - LFC:[MD5.6E5A8A28FBE6C073DF0CCA7042B9A593] - 13/04/2011 - 23:07:46 ---A- . (...) -- C:\WINDOWS\KB978695.log [5724]
O44 - LFC:[MD5.D1F31E00B68BEC597A5166534A9E620F] - 13/04/2011 - 23:07:43 ---A- . (...) -- C:\WINDOWS\KB952069.log [10739]
O44 - LFC:[MD5.171CEFF19AFC5CE164D090A671F218A3] - 13/04/2011 - 23:07:39 ---A- . (...) -- C:\WINDOWS\KB954155.log [5755]
O44 - LFC:[MD5.3F308B02B361C5142F5E3450011CEDA9] - 13/04/2011 - 23:07:37 ---A- . (...) -- C:\WINDOWS\KB973540.log [6514]
O44 - LFC:[MD5.436EBC12B14EDBF39AB44CF8334C261E] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\FaxSetup.log [18549]
O44 - LFC:[MD5.913E6F4072298433D41C51370DB68DE0] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\KB954154.log [4169]
O44 - LFC:[MD5.7CEED856FAD58333A18AAD7DECB5987D] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\comsetup.log [6076]
O44 - LFC:[MD5.FB5C1097704C80E210C8163A28F8CA60] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\iis6.log [2907]
O44 - LFC:[MD5.287307DB676D806B7883550F11B23073] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\imsins.log [1374]
O44 - LFC:[MD5.53568728934192AE256E54DCCB6D08C1] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\msgsocm.log [909]
O44 - LFC:[MD5.EA1DF15B27B7AD57F94AA2CF00B64C04] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log [3687]
O44 - LFC:[MD5.C62F0BDA0D8DB64854B930C7A731AC25] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\ocgen.log [8868]
O44 - LFC:[MD5.28095359D68578B466DAFEB99678AD27] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\ocmsn.log [1026]
O44 - LFC:[MD5.676BE5920F276BF5A149D772E6681ECC] - 13/04/2011 - 23:07:31 ---A- . (...) -- C:\WINDOWS\tsoc.log [7077]
O44 - LFC:[MD5.7936EE85BD138550B743F6A024094A1C] - 13/04/2011 - 23:07:28 ---A- . (...) -- C:\WINDOWS\KB929399.log [6168]
O44 - LFC:[MD5.C25302084BF0D7642C04DF6E54C6BC57] - 13/04/2011 - 23:07:28 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1374]
O44 - LFC:[MD5.0E9EED31ACD4324B4B149C2C06DBE815] - 13/04/2011 - 23:07:12 ---A- . (...) -- C:\WINDOWS\KB939683.log [5885]
O44 - LFC:[MD5.BCE6CDB55D9E2259D2A9A8935CC63C51] - 13/04/2011 - 23:06:54 ---A- . (...) -- C:\WINDOWS\KB941569.log [7474]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/04/2011 - 23:06:41 ---A- . (...) -- C:\WINDOWS\setupact.log [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/04/2011 - 23:06:41 ---A- . (...) -- C:\WINDOWS\setuperr.log [0]
O44 - LFC:[MD5.FED6CF058B4FB06F462AF2963E4B607A] - 13/04/2011 - 22:23:43 ---A- . (...) -- C:\WINDOWS\system.ini [258]
O44 - LFC:[MD5.0CF44F76C433ECAE608E4125D8980951] - 13/04/2011 - 22:05:07 ---A- . (...) -- C:\WINDOWS\System32\FNTCACHE.DAT [131688]
O44 - LFC:[MD5.6D6F4B1886E91EB37ABCCAD19C561EE0] - 13/04/2011 - 21:54:02 ---A- . (...) -- C:\WINDOWS\System32\amcompat.tlb [16832]
O44 - LFC:[MD5.A32B14BE5EDAE794FCE1A9E970827509] - 13/04/2011 - 21:54:02 ---A- . (...) -- C:\WINDOWS\System32\nscompat.tlb [23392]
O44 - LFC:[MD5.F5C397BEFBE878EBBAA17055D06359C7] - 13/04/2011 - 21:53:58 ---A- . (...) -- C:\WINDOWS\win.ini [507]
O44 - LFC:[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - 13/04/2011 - 21:53:13 ---A- . (...) -- C:\WINDOWS\WMSysPr9.prx [316640]
O44 - LFC:[MD5.91224B5364CBC92FA2D0673ED0424843] - 13/04/2011 - 21:03:24 ---A- . (...) -- C:\WINDOWS\System32\PerfStringBackup.INI [1121548]
O44 - LFC:[MD5.699C70D8104EE62484DB0B687D6D4F83] - 13/04/2011 - 21:03:24 ---A- . (...) -- C:\WINDOWS\System32\perfc009.dat [71394]
O44 - LFC:[MD5.D0CA0AC395F6349621BBDC8F387BBD6E] - 13/04/2011 - 21:03:24 ---A- . (...) -- C:\WINDOWS\System32\perfc00C.dat [84964]
O44 - LFC:[MD5.438E49E626888EE0E2B46A92CDFBDD03] - 13/04/2011 - 21:03:24 ---A- . (...) -- C:\WINDOWS\System32\perfh009.dat [441458]
O44 - LFC:[MD5.3F86DE77439B83347A64E0598ACD1EB0] - 13/04/2011 - 21:03:24 ---A- . (...) -- C:\WINDOWS\System32\perfh00C.dat [510980]
O44 - LFC:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 13/04/2011 - 20:48:16 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 13/04/2011 - 20:48:11 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [20952]
O44 - LFC:[MD5.B0AAF0DD160D80335D3211B6F61A34B2] - 13/04/2011 - 20:20:19 ---A- . (...) -- C:\WINDOWS\System32\LuResult.txt [85]
O44 - LFC:[MD5.7732A83233B7C3AAED06A1002AC52749] - 13/04/2011 - 01:24:00 ---A- . (...) -- C:\WINDOWS\System32\TZLog.log [4448]
O44 - LFC:[MD5.5C174F8108BAB900D3AB1DF1A29A58E5] - 13/04/2011 - 00:47:40 ---A- . (...) -- C:\WINDOWS\System32\spupdwxp.log [90]
O44 - LFC:[MD5.7794C3221F670DE270586A2CF6E68383] - 13/04/2011 - 00:37:22 RSHA- . (...) -- C:\ntldr [252240]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/04/2011 - 00:20:00 ---A- . (...) -- C:\WINDOWS\nsreg.dat [0]
O44 - LFC:[MD5.8070764A925643A8F32320703D80D437] - 13/04/2011 - 00:16:32 ---A- . (...) -- C:\WINDOWS\System32\results.txt [308]
O44 - LFC:[MD5.12DAFD934641DCF61E446313BC261EC2] - 13/04/2011 - 00:16:28 ---A- . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\System32\drivers\AegisP.sys [21275]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 13/04/2011 - 00:15:47 RSHA- . (...) -- C:\WINDOWS\System32\drivers\TOSHIBA_Satellite A100_04052-FR_PSAA9E-0G901.MRK [0]
O44 - LFC:[MD5.D5F086D26BADC2C000716591DCAC3E50] - 13/04/2011 - 00:13:16 ---A- . (...) -- C:\WINDOWS\System32\$winnt$.inf [602]
O44 - LFC:[MD5.D3BCEE679ED4285FFB025FC71C1F073B] - 13/04/2011 - 00:13:13 RSHA- . (...) -- C:\boot.ini [216]
O44 - LFC:[MD5.3FD411DF4A9999EA848615DEF336E905] - 13/04/2011 - 00:09:44 ---A- . (.Sun Microsystems, Inc. - Java(TM) Control Panel.) -- C:\WINDOWS\System32\javacpl.cpl [73728]
O44 - LFC:[MD5.F87BA06FE22C81CDE563761DDFBAB267] - 13/04/2011 - 00:09:44 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\deployJava1.dll [472808]
O44 - LFC:[MD5.68288DA42BC798992A42CD59061B199D] - 13/04/2011 - 00:09:44 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\java.exe [145184]
O44 - LFC:[MD5.5BF8BA1B854D7DFCE1F47E58852B3D8F] - 13/04/2011 - 00:09:44 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\WINDOWS\System32\javaw.exe [145184]
O44 - LFC:[MD5.58DC5CBDC930AF070B177843810F2C85] - 13/04/2011 - 00:09:44 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\WINDOWS\System32\javaws.exe [157472]
O44 - LFC:[MD5.8D27C405F90F90FD4BAB9868F1EAE510] - 12/04/2011 - 23:59:39 ---A- . (...) -- C:\WINDOWS\REGLOCS.OLD [8192]
O44 - LFC:[MD5.A36EE93698802CD899F98BFD553D8185] - 12/04/2011 - 23:56:56 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [28520]
O44 - LFC:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 12/04/2011 - 23:56:53 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [22360]
O44 - LFC:[MD5.5B44C214F9CD9F590BE9125347610380] - 12/04/2011 - 23:56:53 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\System32\drivers\avgntdd.sys [45416]
O44 - LFC:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 12/04/2011 - 23:56:53 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [137656]
O44 - LFC:[MD5.47B879406246FFDCED59E18D331A0E7D] - 12/04/2011 - 23:56:53 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [61960]
O44 - LFC:[MD5.8737F6F4C8EC1E2A9EA5516F1B3AE1AD] - 28/12/2006 - 11:01:32 ---A- . (...) -- C:\WINDOWS\002525_.tmp [19569]
O44 - LFC:[MD5.21E22E30CF0B2DEB8314108E64805CEE] - 20/08/2004 - 02:17:04 ---A- . (...) -- C:\WINDOWS\TOSHIBA SATELLITE.bmp [2359350]



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d



---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
O53 - SMSR:HKLM\...\startupreg\IS CfgWiz [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Norton Internet Security\cfgwiz.exe
O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Messenger\msmsgs.exe
O53 - SMSR:HKLM\...\startupreg\SmoothView [Key] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.12DAFD934641DCF61E446313BC261EC2] - 13/04/2011 - 00:16:28 ---A- . (.Meetinghouse Data Communications - IEEE 802.1X Protocol Driver.) -- C:\WINDOWS\system32\drivers\AegisP.sys [21275]
O58 - SDL:[MD5.B3192376C7A3814B5341EFC2202022F8] - 15/11/2005 - 17:00:22 ---A- . (.Agere Systems - SoftModem Device Driver.) -- C:\WINDOWS\system32\drivers\AGRSM.sys [1122656]
O58 - SDL:[MD5.0959C83F18F8A5966AFA2EC33BB96D14] - 21/12/2005 - 05:51:46 ---A- . (.ATI Technologies Inc. - ATI Radeon WindowsNT Miniport Driver.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys [1419264]
O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 17/06/2010 - 13:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416]
O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 04/03/2011