Rapport scam ZHPDiag virus ou pas?

Bonjour,



slt tous le monde kelk1 peut'il m'aider a comprendre mon scan que j'ai fait avec ZHPDiag

Rapport de ZHPDiag v1.28.223 par Nicolas Coolman, Update du 10/11/2011
Run by osipt at 11/11/2011 22:02:56
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.

---\\ Web Browser
MSIE: Internet Explorer v6.0.2800.1106
MFIE: Mozilla Firefox 8.0 v8.0 (Defaut)

---\\ Windows Product Information
Windows 2000 Professional Service Pack 4 (Build 2195)
Windows Server License Manager Script : Absent (Not found)
Windows ID Activation : Inconnue (Unknown)
Windows Licence : Inconnue (Unknown)
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 6 Model 8 Stepping 3, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 511 MB (15% free)
System Restore: Inconnu (Unknown)
System drive C: has 7 GB (77%) free of 9 GB

---\\ Logged in mode
~ Computer Name: OSIPT-48CE1D974
~ User Name: osipt
~ All Users Names: osipt, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
~ Logged in as Unknown

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\osipt\Application Data\
~ %Desktop% : C:\Documents and Settings\osipt\Bureau\
~ %Favorites% : C:\Documents and Settings\osipt\Favoris\
~ %LocalAppData% : C:\Documents and Settings\osipt\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\osipt\Menu Démarrer\
~ %Windir% : C:\WINNT\s\
~ %System% : C:\WINNT\system32\

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 7 Go of 9 Go)
D:\ CD-ROM drive (Free 0 Go of 1 Go)

---\\ Security Center & Tools Informations
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.61CF5B74A4B5FE430F87E9259B7E4F60] - (....) (.11/11/2011 - 09:00:00.) -- C:\WINNT\system32\rundll32.exe [10000]
[MD5.86EFBF18FF8EC607A90B726EA06E7149] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.11/11/2011 - 15:53:48.) -- C:\WINNT\system32\wininet.dll [582144]
[MD5.5B5C3A13997C536C1EA1956AC7A41DB8] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.11/11/2011 - 11:25:34.) -- C:\WINNT\system32\Winlogon.exe [191248]
[MD5.632D753E9F103EBD30B18CE9F03596AB] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.11/11/2011 - 11:38:38.) -- C:\WINNT\system32\drivers\AFD.sys [119152]
[MD5.8C718AA8C77041B3285D55A0CE980867] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\atapi.sys [86672]
[MD5.66C19373D5EB657FB028133BDE5D2ACB] - (.Microsoft Corporation - CD-ROM File System Driver.) (.11/11/2011 - 12:51:14.) -- C:\WINNT\system32\drivers\Cdfs.sys [63248]
[MD5.4B86A90A7F0095D514D22A9083826488] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\Cdrom.sys [27984]
[MD5.B27A36D4725A362A13D0C52AD6C7175B] - (.Microsoft Corporation - FIPS Crypto Driver.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\Fips.sys [33616]
[MD5.6D953C5F6885A49C4DDFF7FC0D68FE22] - (.Microsoft Corporation - Pilote de port i8042.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\i8042prt.sys [48432]
[MD5.ADB8A3465C0FC01C3AE633ADB33FCBB3] - (.Microsoft Corporation - IP Network Address Translator.) (.11/11/2011 - 23:42:40.) -- C:\WINNT\system32\drivers\IpNat.sys [67344]
[MD5.9D61C8E8044BDAAC6D922EB27552F93A] - (.Microsoft Corporation - IPSEC Driver (US/Canada Only, Not for Export).) (.11/11/2011 - 19:19:42.) -- C:\WINNT\system32\drivers\IPSec.sys [80848]
[MD5.FC5A904BC78D43F2F7F014BD0D239C6D] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.11/11/2011 - 07:46:24.) -- C:\WINNT\system32\drivers\MRxSmb.sys [416304]
[MD5.A7CA87628217BBF4A6F501DB65B19E9D] - (.Microsoft Corporation - MBT Transport driver.) (.11/11/2011 - 12:51:14.) -- C:\WINNT\system32\drivers\netBT.sys [175632]
[MD5.7DC1F0F9BF87CA5CEE9A46C9A63DC1D3] - (.Microsoft Corporation - NT File System Driver.) (.11/11/2011 - 10:20:32.) -- C:\WINNT\system32\drivers\ntfs.sys [513424]
[MD5.EEB9D4705BEFF7CDFE7E0C6EDEA6085A] - (.Microsoft Corporation - Pilote de port parallèle.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\Parport.sys [25328]
[MD5.EC6037C594F20ADEDEA65F0D809493D2] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.11/11/2011 - 11:05:04.) -- C:\WINNT\system32\drivers\Rasl2tp.sys [52112]
[MD5.FB832B074B7215110E81B0B96EBDB4D5] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.11/11/2011 - 12:05:04.) -- C:\WINNT\system32\drivers\redbook.sys [36304]
~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4
~ Mes musiques (My Musics) : 0/0
~ Mes Videos (My Video) : 0/0
~ Mes Documents (My Documents) : 1/85
~ Mon Bureau (My Desktop) : 0/9
~ Menu demarrer (Programs) : 0/19
~ Scan Hidden Files in 00mn 00s

---\\ Processus lancés
[MD5.189C45C7CC2526DA72932872E152A061] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe [258103] [PID.]
[MD5.C7BB95CF9631AA401E4ADED1648F6AF7] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [974944] [PID.]
[MD5.B3A6BC70F941A92DA318F3BD44362BCC] - (.Microsoft Corporation - Remote Registry Service.) -- C:\WINNT\system32\regsvc.exe [68368] [PID.]
[MD5.3FE6A50EDC179C4260C85E354ADC0085] - (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINNT\system32\MSTask.exe [123664] [PID.]
[MD5.974EE1A488A7AF678F84826B588D4AF1] - (.Microsoft Corporation - Infrastructure de gestion Windows.) -- C:\WINNT\System32\WBEM\WinMgmt.exe [196706] [PID.]
[MD5.C3ED032AF1C30F92546A698CC7173605] - (.ESET - ESET GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [3080264] [PID.672]
[MD5.406B12788886496BD299C3F9E5E310D0] - (.Microsoft Corporation - Application d'indication de langue du clavi.) -- C:\WINNT\system32\internat.exe [20752] [PID.1036]
[MD5.CFCB4F1C6DBE8A5DC0B8DBF058E2586A] - (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe [976192] [PID.1068]
[MD5.A2CD5B30A85F087DE72CD3A116BD7512] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [581693] [PID.1072]
[MD5.C006846FAEAE81CC4A004735BA4B08A4] - (.Microsoft Corporation - Symantec Fax Starter Edition Port Launcher.) -- C:\Program Files\Microsoft Office\Office\1036\OLFSNT40.EXE [46080] [PID.1084]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
[MD5.026423673B8563E9975BDA97ED6273C7] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449608] [PID.992]
[MD5.4CB4054659ABEEEF925B153E2290E634] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.1112]
[MD5.CD0204AA98E03B936704CA6E30BC6897] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2183168] [PID.1332]
~ Scan Processes Running in 00mn 01s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [osipt] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
~ Scan Firefox Browser in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- %SystemRoot%\system32\shdocvw.dll
~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
~ Scan BHO in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} . (.Microsoft Corporation - Contrôle ActiveX du Lecteur Windows Media.) -- C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
~ Scan Toolbar in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Synchronization Manager] . (.Microsoft Corporation - Gestionnaire de synchronisation Microsoft.) -- C:\WINNT\system32\mobsync.exe
O4 - HKLM\..\Run: [egui] . (.ESET - ESET GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKCU\..\Run: [internat.exe] . (.Microsoft Corporation - Application d'indication de langue du clavi.) -- C:\WINNT\system32\internat.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
O4 - HKUS\S-1-5-18\..\Run: [internat.exe] . (.Microsoft Corporation - Application d'indication de langue du clavi.) -- C:\WINNT\system32\internat.exe
O4 - HKUS\S-1-5-21-839522115-1606980848-1060284298-1000\..\Run: [internat.exe] . (.Microsoft Corporation - Application d'indication de langue du clavi.) -- C:\WINNT\system32\internat.exe
O4 - HKUS\S-1-5-21-839522115-1606980848-1060284298-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-839522115-1606980848-1060284298-1000\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] . (.Microsoft Corporation - Assistant Connexion Internet.) -- C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe
~ Scan Application in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Favoris Bluetooth.lnk - Clé orpheline
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Access.lnk . (...) -- C:\WINNT\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\accicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Excel.lnk . (...) -- C:\WINNT\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Outlook.lnk . (...) -- C:\WINNT\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\outicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft PowerPoint.lnk . (...) -- C:\WINNT\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\pptico.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Word.lnk . (...) -- C:\WINNT\Installer\{0001040C-78E1-11D2-B60F-006097C998E7}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\osipt\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - Global Startup: C:\Documents And Settings\osipt\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\osipt\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 00s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Envoyer à &Bluetooth . (...) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
~ Scan IE Menu Contextuel in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -- (.not file.)
O9 - Extra button: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Logiciel Bluetooth\bt_hot_icon.ico
~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Windows Socket2 NameSpace DLL.) -- C:\WINNT\system32\rnr20.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINNT\system32\winrnr.dll
~ Scan Winsock in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F209582-8FF3-40C4-A4A1-42E33507F56B}: DhcpNameServer = 212.27.54.252 212.27.53.252
O17 - HKLM\System\CCS\Services\Tcpip\..\{36A61D4A-5BD0-463C-99F2-0C2AC91E165F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{2F209582-8FF3-40C4-A4A1-42E33507F56B}: DhcpNameServer = 212.27.54.252 212.27.53.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{36A61D4A-5BD0-463C-99F2-0C2AC91E165F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2F209582-8FF3-40C4-A4A1-42E33507F56B}: DhcpNameServer = 212.27.54.252 212.27.53.252
O17 - HKLM\System\CS2\Services\Tcpip\..\{36A61D4A-5BD0-463C-99F2-0C2AC91E165F}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINNT\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (...) -- C:\WINNT\s\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINNT\system32\itss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- C:\WINNT\s\system32\mshtml.dll
O18 - Handler: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} . (.Microsoft Corporation - Contrôle ActiveX du Lecteur Windows Media.) -- C:\WINNT\system32\msdxm.ocx
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINNT\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (...) -- C:\WINNT\s\system32\shell32.dll
~ Scan Protocole Additionnel in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINNT\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINNT\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent Réseau hors-connexion.) -- C:\WINNT\system32\cscdll.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINNT\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINNT\system32\WlNotify.dll
O20 - Winlogon Notify: wzcnotif . (.Microsoft Corporation - UI du service de configuration automatique.) -- C:\WINNT\system32\wzcdlg.dll
~ Scan Winlogon in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: Network.ConnectionTray - {7007ACCF-3202-11D1-AAD2-00805FC1270E} . (.Microsoft Corporation - Noyau des Connexions réseau.) -- C:\WINNT\system32\NETSHELL.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (....) -- C:\WINNT\s\system32\webcheck.dll (.not file.)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINNT\system32\stobject.dll
~ Scan SSODL in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (...) -- C:\WINNT\s\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (...) -- C:\WINNT\s\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Explorateur d'ordinateur (Browser) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Client DHCP (Dhcp) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Gestionnaire de disque logique (dmserver) . (...) - C:\WINNT\s\System32\services.exe (.not file.)
O23 - Service: Client DNS (Dnscache) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Journal des événements (Eventlog) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Serveur (lanmanserver) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Station de travail (lanmanworkstation) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Service d'application d'assistance TCP/IP NetBIOS (LmHosts) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Affichage des messages (Messenger) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Plug-and-Play (PlugPlay) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Agent de stratégie IPSEC (PolicyAgent) . (...) - C:\WINNT\s\system32\lsass.exe (.not file.)
O23 - Service: Emplacement protégé (ProtectedStorage) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Service d'accès à distance au Registre (RemoteRegistry) . (...) - C:\WINNT\s\system32\regsvc.exe (.not file.)
O23 - Service: Planificateur de tâches (Schedule) . (...) - C:\WINNT\s\system32\MSTask.exe (.not file.)
O23 - Service: Service d'exécution par délégation (seclogon) . (...) - C:\WINNT\s\system32\services.exe (.not file.)
O23 - Service: Spouleur d'impression (Spooler) . (...) - C:\WINNT\s\system32\spoolsv.exe (.not file.)
O23 - Service: Infrastructure de gestion Windows (WinMgmt) . (...) - C:\WINNT\s\System32\WBEM\WinMgmt.exe (.not file.)
~ Scan Services in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s

---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINNT\system32\DRIVERS\cdrom.sys
O41 - Driver: (ehdrv) . (.ESET - ESET Helper driver.) - C:\WINNT\system32\DRIVERS\ehdrv.sys
O41 - Driver: (epfwtdir) . (.ESET - ESET Antivirus Network Redirector.) - C:\WINNT\system32\DRIVERS\epfwtdir.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINNT\system32\DRIVERS\i8042prt.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINNT\system32\DRIVERS\kbdclass.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINNT\system32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINNT\system32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINNT\system32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINNT\system32\DRIVERS\netbt.sys
O41 - Driver: (Parport) . (.Microsoft Corporation - Pilote de port parallèle.) - C:\WINNT\system32\DRIVERS\parport.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINNT\system32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINNT\system32\DRIVERS\rdbss.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINNT\system32\DRIVERS\redbook.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINNT\system32\DRIVERS\serial.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP driver.) - C:\WINNT\system32\DRIVERS\tcpip.sys
O41 - Driver: (VgaSave) . (. - .) - C:\WINNT\s\system32\drivers\vga.sys (.not file.)
~ Scan Drivers in 00mn 00s

---\\ Logiciels installés (O42)
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: CPUID CPU-Z 1.58 - (.Pas de propriétaire.) [HKLM] -- CPUID CPU-Z_is1
O42 - Logiciel: Chicken Invaders v1.30 - (.InterAction studios.) [HKLM] -- Chicken Invaders_is1
O42 - Logiciel: Conjugaison - (.Vinz.) [HKLM] -- {F593B63F-2F70-401F-BB30-87BD5282AA98}
O42 - Logiciel: DivX Player - (.DivXNetworks, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1
O42 - Logiciel: GOM Player - (.Pas de propriétaire.) [HKLM] -- GOM Player
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Hotfix for MDAC 2.53 (KB927779) - (.Microsoft Corporation.) [HKLM] -- KB927779
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Office 2000 Professional - (.Microsoft Corporation.) [HKLM] -- {0001040C-78E1-11D2-B60F-006097C998E7}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mozilla Firefox 8.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 8.0 (x86 fr)
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
O42 - Logiciel: WIDCOMM Bluetooth Software - (.WIDCOMM, Inc..) [HKLM] -- {3F4EC965-28EF-45C3-B063-04B25D4E9679}
O42 - Logiciel: WinRAR Archiveur - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Installer 3.1 (KB893803) - (.Microsoft Corporation.) [HKLM] -- KB893803v2

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DivXNetworks]
[HKCU\Software\ESET]
[HKCU\Software\GRETECH]
[HKCU\Software\Google]
[HKCU\Software\Hilgraeve Inc]
[HKCU\Software\Intel]
[HKCU\Software\Kodak]
[HKCU\Software\KurtZ]
[HKCU\Software\Lavalys]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Netscape]
[HKCU\Software\Neuf]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\SAGEM]
[HKCU\Software\WOI]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR]
[HKLM\Software\ALWIL Software]
[HKLM\Software\Adaptec]
[HKLM\Software\Adobe]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Common Toolkit Suite]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Eset]
[HKLM\Software\FUJIFILM]
[HKLM\Software\GRETECH]
[HKLM\Software\Google]
[HKLM\Software\INTEL]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Mozilla]
[HKLM\Software\Neuf]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RTE]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Secure]
[HKLM\Software\Symantec]
[HKLM\Software\Voice]
[HKLM\Software\Widcomm]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 15/06/2007 - 09:59:16 - [0] ----D- C:\Program Files\Accessoires
O43 - CFD: 01/11/2011 - 19:09:08 - [45002] ----D- C:\Program Files\Adobe
O43 - CFD: 18/06/2007 - 10:27:42 - [0] ----D- C:\Program Files\Alwil Software
O43 - CFD: 26/10/2011 - 22:33:22 - [7168] ----D- C:\Program Files\Avira
O43 - CFD: 01/11/2011 - 19:40:42 - [4174784] ----D- C:\Program Files\CCleaner
O43 - CFD: 18/06/2007 - 10:34:08 - [9296821] ----D- C:\Program Files\Chicken Invaders
O43 - CFD: 08/10/2011 - 08:43:38 - [0] ----D- C:\Program Files\Common Files
O43 - CFD: 15/06/2007 - 10:00:56 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 18/06/2007 - 10:34:22 - [3062978] ----D- C:\Program Files\Conjugaison
O43 - CFD: 01/11/2011 - 14:05:06 - [2992075] ----D- C:\Program Files\CPUID
O43 - CFD: 18/06/2007 - 10:35:32 - [2062316] ----D- C:\Program Files\DivX
O43 - CFD: 30/10/2011 - 20:59:26 - [59755278] ----D- C:\Program Files\ESET
O43 - CFD: 18/06/2007 - 14:51:20 - [114372169] ---AD- C:\Program Files\Fichiers communs
O43 - CFD: 30/06/2007 - 13:59:18 - [3707171] ----D- C:\Program Files\Google
O43 - CFD: 13/01/2009 - 20:58:54 - [20825367] ----D- C:\Program Files\GRETECH
O43 - CFD: 08/10/2011 - 08:43:40 - [16416538] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 29/10/2011 - 23:33:04 - [6815872] ----D- C:\Program Files\Lavalys
O43 - CFD: 15/06/2007 - 09:59:44 - [0] ----D- C:\Program Files\Lecteur Windows Media
O43 - CFD: 10/11/2011 - 19:45:54 - [1144] ----D- C:\Program Files\ma-config.com
O43 - CFD: 11/11/2011 - 18:35:24 - [7004113] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 18/06/2007 - 11:25:16 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 18/06/2007 - 11:27:34 - [199636964] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 18/06/2007 - 11:28:08 - [10789158] ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 10/11/2011 - 16:26:58 - [38170320] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 08/10/2011 - 08:48:54 - [2684052] ----D- C:\Program Files\NetMeeting
O43 - CFD: 08/10/2011 - 08:43:38 - [4271346] ----D- C:\Program Files\Outlook Express
O43 - CFD: 07/10/2011 - 19:31:18 - [14912306] ----D- C:\Program Files\SFR
O43 - CFD: 18/06/2007 - 11:26:44 - [138333] ----D- C:\Program Files\Snapshot Viewer
O43 - CFD: 28/10/2007 - 13:02:02 - [0] ----D- C:\Program Files\SRMP3 1.0
O43 - CFD: 08/10/2011 - 08:43:40 - [4822302] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 13/01/2009 - 21:22:28 - [522202] ----D- C:\Program Files\VideoLAN
O43 - CFD: 19/11/2007 - 12:59:02 - [14508459] ----D- C:\Program Files\WIDCOMM
O43 - CFD: 08/10/2011 - 08:41:28 - [17872267] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 15/06/2007 - 09:59:34 - [4493423] ----D- C:\Program Files\Windows NT
O43 - CFD: 24/09/2010 - 18:29:20 - [0] --HAD- C:\Program Files\WindowsUpdate
O43 - CFD: 15/04/2010 - 22:51:52 - [1867418] ----D- C:\Program Files\WinRAR
O43 - CFD: 11/11/2011 - 22:03:02 - [5742251] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 08/10/2011 - 08:43:38 - [0] ----D- C:\Program Files\Common Files\System
O43 - CFD: 18/06/2007 - 10:36:52 - [4568670] ----D- C:\Program Files\Fichiers Communs\Adaptec Shared
O43 - CFD: 01/11/2011 - 19:09:08 - [33661] ----D- C:\Program Files\Fichiers Communs\Adobe
O43 - CFD: 18/06/2007 - 11:28:06 - [86016] ----D- C:\Program Files\Fichiers Communs\Designer
O43 - CFD: 26/10/2011 - 22:18:22 - [90291450] ---AD- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 15/06/2007 - 10:49:46 - [0] ---AD- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 18/06/2007 - 14:51:36 - [13510] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 08/10/2011 - 08:37:14 - [18924206] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 01/11/2011 - 19:09:16 - [157157] ----D- C:\Documents and Settings\osipt\Application Data\Adobe
O43 - CFD: 13/01/2009 - 21:27:02 - [199] ----D- C:\Documents and Settings\osipt\Application Data\dvdcss
O43 - CFD: 01/07/2007 - 15:45:00 - [0] ----D- C:\Documents and Settings\osipt\Application Data\Google
O43 - CFD: 13/01/2009 - 20:59:26 - [783] ----D- C:\Documents and Settings\osipt\Application Data\GRETECH
O43 - CFD: 11/07/2007 - 16:17:18 - [0] ----D- C:\Documents and Settings\osipt\Application Data\Help
O43 - CFD: 18/06/2007 - 10:14:06 - [0] ----D- C:\Documents and Settings\osipt\Application Data\Identities
O43 - CFD: 07/10/2011 - 20:13:36 - [25602] ----D- C:\Documents and Settings\osipt\Application Data\Macromedia
O43 - CFD: 11/11/2011 - 18:35:32 - [1053] ----D- C:\Documents and Settings\osipt\Application Data\Malwarebytes
O43 - CFD: 26/10/2011 - 20:40:46 - [915066] -S--D- C:\Documents and Settings\osipt\Application Data\Microsoft
O43 - CFD: 18/06/2007 - 11:25:32 - [0] ----D- C:\Documents and Settings\osipt\Application Data\Microsoft Web Folders
O43 - CFD: 09/10/2011 - 19:03:12 - [15859310] ----D- C:\Documents and Settings\osipt\Application Data\Mozilla
O43 - CFD: 25/10/2011 - 22:45:08 - [396436] ----D- C:\Documents and Settings\osipt\Application Data\vlc
O43 - CFD: 26/10/2011 - 23:38:56 - [21365] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Adobe
O43 - CFD: 30/10/2011 - 21:57:04 - [34289692] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\ESET
O43 - CFD: 30/06/2007 - 14:06:04 - [0] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Google
O43 - CFD: 08/06/2009 - 14:18:28 - [10843] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Help
O43 - CFD: 10/07/2007 - 22:10:16 - [470619] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Identities
O43 - CFD: 18/06/2007 - 10:36:24 - [886862] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Microsoft
O43 - CFD: 09/10/2011 - 19:02:32 - [42802350] ----D- C:\Documents and Settings\osipt\Local Settings\Application Data\Mozilla
~ Scan Program Folder in 00mn 01s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D79D3F46B9A55A27474BBD544878B1F2] - 11/11/2011 - 18:35:09 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINNT\system32\drivers\mbam.sys [20552]
O44 - LFC:[MD5.CE338FE6899778AACFC28414F2D9498B] - 02/11/2011 - 20:13:43 ---A- . (...) -- C:\WINNT\system32\Perflib_Perfdata_514.dat [16384]
O44 - LFC:[MD5.CE338FE6899778AACFC28414F2D9498B] - 02/11/2011 - 19:41:24 ---A- . (...) -- C:\WINNT\system32\Perflib_Perfdata_438.dat [16384]
O44 - LFC:[MD5.C2EB4539A4F6AB6EDD01BDC191619975] - 01/11/2011 - 14:06:39 ---A- . (.CPUID - CPUID Driver.) -- C:\WINNT\system32\drivers\cpuz135_x32.sys [21992]
O44 - LFC:[MD5.486E0B1BC94C346E5C352C295388C803] - 30/10/2011 - 20:14:13 ---A- . (...) -- C:\WINNT\system32\CONFIG.NT [3072]
O44 - LFC:[MD5.CA96881640C781770917EA833DA07B6B] - 27/10/2011 - 19:14:08 ---A- . (...) -- C:\WINNT\system32\dfrg.msc [100352]
~ Scan Files in 00mn 11s

---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINNT\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINNT\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINNT\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINNT\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINNT\system32\schannel.dll
~ Scan Keys in 00mn 00s

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.VERITAS Software Corp. - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINNT\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.VERITAS Software Corp. - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINNT\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.VERITAS Software Corp. - NT Disk Manager Startup Driver.) -- C:\WINNT\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINNT\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sglfb.sys . (...) -- C:\WINNT\system32\Drivers\sglfb.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\tga.sys . (...) -- C:\WINNT\system32\Drivers\tga.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINNT\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINNT\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.VERITAS Software Corp. - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINNT\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.VERITAS Software Corp. - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINNT\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.VERITAS Software Corp. - NT Disk Manager Startup Driver.) -- C:\WINNT\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nbf.sys . (.Microsoft Corporation - NetBEUI Frames Protocol Driver.) -- C:\WINNT\system32\Drivers\nbf.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINNT\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sglfb.sys . (...) -- C:\WINNT\system32\Drivers\sglfb.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tga.sys . (...) -- C:\WINNT\system32\Drivers\tga.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINNT\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINNT\system32\Drivers\vgasave.sys (.not file.)
~ Scan CSB in 00mn 00s

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINNT\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\WINNT\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINNT\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINNT\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINNT\system32\iac25_32.ax" . (...) -- (.not file.)
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINNT\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINNT\system32\l3codeca.acm" . (...) -- (.not file.)
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINNT\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINNT\system32\iac25_32.ax"="Indeo® audio software" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\WINNT\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINNT\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"tssoft32.acm"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINNT\system32\tssoft32.acm
O52 - TDSD: \drivers.desc\"iccvid.dll"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\WINNT\system32\iccvid.dll
O52 - TDSD: \drivers.desc\"ir32_32.dll"="ir32_32.dll" . (...) -- C:\WINNT\system32\ir32_32.dll
O52 - TDSD: \drivers.desc\"mciqtz32.dll"="mciqtz32.dll" . (...) -- C:\WINNT\system32\mciqtz32.dll
~ Scan Keys in 00mn 02s

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINNT\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINNT\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINNT\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINNT\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINNT\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINNT\system32\digest.dll
~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=149
O56 - MWPE:[HKCU\...\policies\Explorer] - "CDRAutoRun"=0
~ Scan Keys in 00mn 00s

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.3292260A6AE8F328C7EF698B6EBD56E2] - 11/11/2011 - 11:15:08 ---A- . (.Broadcom Corporation - USB Driver for Bluetooth Adapter.) -- C:\WINNT\system32\drivers\bcbthub.sys [148794]
O58 - SDL:[MD5.CEB361F3F7F177F50061AD29137B9E1A] - 11/11/2011 - 12:13:50 ---A- . (.Broadcom Corporation. - BTW LAN Access Server Driver Filter for Windows 2000.) -- C:\WINNT\system32\drivers\bt2kndfl.sys [3879]
O58 - SDL:[MD5.3BC0AFBD546162FE6ED6CCB15BEFAD73] - 11/11/2011 - 12:21:22 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\WINNT\system32\drivers\btaudio.sys [401664]
O58 - SDL:[MD5.9515D10CEAF284AB1A21934E1958D4FD] - 11/11/2011 - 12:19:04 ---A- . (.Broadcom Corporation. - Bluetooth Bus Enumerator.) -- C:\WINNT\system32\drivers\btkrnl.sys [1342602]
O58 - SDL:[MD5.1D25FB8B6B073E6F4FB51034F734EA2C] - 11/11/2011 - 12:17:18 ---A- . (.Broadcom Corporation. - Bluetooth BTPORT Driver for Windows 2000.) -- C:\WINNT\system32\drivers\btport.sys [30363]
O58 - SDL:[MD5.AF3CC52FC040A402A6AD07AC1BD4FE76] - 11/11/2011 - 12:20:04 ---A- . (.Broadcom Corporation. - Bluetooth Serial Driver for Windows 2000.) -- C:\WINNT\system32\drivers\btserial.sys [23271]
O58 - SDL:[MD5.E233AE94F1B66DDBFBCA9566D0F7FDBA] - 11/11/2011 - 12:20:00 ---A- . (.Broadcom Corporation. - Bluetooth Serial Driver for Windows 2000.) -- C:\WINNT\system32\drivers\btslbcsp.sys [222876]
O58 - SDL:[MD5.66BFF2643E5F6A0F80208DDE1C4B653A] - 11/11/2011 - 12:13:46 ---A- . (.Broadcom Corporation. - Bluetooth LAN Access Server Driver.) -- C:\WINNT\system32\drivers\btwdndis.sys [148168]
O58 - SDL:[MD5.4272BAB9291D26DA5AC913BC79C3CE85] - 11/11/2011 - 12:16:44 ---A- . (.Broadcom Corporation. - Driver for Bluetooth USB Devices.) -- C:\WINNT\system32\drivers\btwusb.sys [57320]
O58 - SDL:[MD5.9880F86F4261699273F818AE50216B8C] - 11/11/2011 - 10:36:50 ---A- . (.Roxio - CDR4_2k CDR Helper.) -- C:\WINNT\system32\drivers\cdr4_2K.sys [58000]
O58 - SDL:[MD5.300500FB3EF21374F7194F9F42B130BC] - 11/11/2011 - 10:36:50 ---A- . (.Roxio - CDRAL for Windows 2000 Kernel Driver.) -- C:\WINNT\system32\drivers\cdralw2k.sys [23420]
O58 - SDL:[MD5.3918528E4992DE465483A9688D3684EC] - 11/11/2011 - 09:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINNT\system32\drivers\cinemst2.sys [272496]
O58 - SDL:[MD5.C2EB4539A4F6AB6EDD01BDC191619975] - 11/11/2011 - 15:35:30 ---A- . (.CPUID - CPUID Driver.) -- C:\WINNT\system32\drivers\cpuz135_x32.sys [21992]
O58 - SDL:[MD5.FA45DDCD183F7CF307821854CADB61B4] - 11/11/2011 - 11:05:04 ---A- . (.VERITAS Software Corp. - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINNT\system32\drivers\dmboot.sys [369104]
O58 - SDL:[MD5.8ACEDA70A5962B5EF908203E3D91CF5F] - 11/11/2011 - 11:05:04 ---A- . (.VERITAS Software Corp. - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINNT\system32\drivers\dmio.sys [138096]
O58 - SDL:[MD5.3F1701FFA97AB012685ABC8A2D6FCE22] - 11/11/2011 - 11:05:04 ---A- . (.VERITAS Software Corp. - NT Disk Manager Startup Driver.) -- C:\WINNT\system32\drivers\dmload.sys [7312]
O58 - SDL:[MD5.9309C5C9831203436E64CF2AE605C5D7] - 11/11/2011 - 14:24:52 ---A- . (.ESET - Amon monitor.) -- C:\WINNT\system32\drivers\eamon.sys [154136]
O58 - SDL:[MD5.DEFF87F04AB5F6DD5EDF2B80853BBE10] - 11/11/2011 - 09:20:36 ---A- . (.ESET - ESET Helper driver.) -- C:\WINNT\system32\drivers\ehdrv.sys [118104]
O58 - SDL:[MD5.06C65AC0A703CF8EEA4F284D901A1550] - 11/11/2011 - 09:20:38 ---A- . (.ESET - ESET Antivirus Network Redirector.) -- C:\WINNT\system32\drivers\epfwtdir.sys [103112]
O58 - SDL:[MD5.3F014E5FF5E4A1A68AA2DE93E4C5F06E] - 11/11/2011 - 15:59:28 ---A- . (.ESS Technology, Inc. - ES1988/ES1998/ES199A Adapter Driver.) -- C:\WINNT\system32\drivers\es198x.sys [157934]
O58 - SDL:[MD5.AB27AEA7AA99B1FEDD7BCE1457447772] - 11/11/2011 - 11:05:04 ---A- . (.IBM Corporation - NDIS 5 driver.) -- C:\WINNT\system32\drivers\ibmfent5.sys [85776]
O58 - SDL:[MD5.2103BD93DCB8E267AED829CB24C6A427] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\drivers\lvcam.sys [88816]
O58 - SDL:[MD5.AEF9AA9261DC271095753CC1E1ABEF07] - 11/11/2011 - 09:00:00 ---A- . (.Logitech Inc. - Video Codec.) -- C:\WINNT\system32\drivers\lvcodek.sys [79120]
O58 - SDL:[MD5.2877BBBEE506BEC0BD5388BBA407D730] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\drivers\lvsound.sys [17424]
O58 - SDL:[MD5.D79D3F46B9A55A27474BBD544878B1F2] - 11/11/2011 - 17:00:50 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINNT\system32\drivers\mbam.sys [20552]
O58 - SDL:[MD5.07C02C892E8E1A72D6BF35004F0E9C5E] - 11/11/2011 - 02:13:18 ---A- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\WINNT\system32\drivers\PCASp50.sys [20096]
O58 - SDL:[MD5.B78775F217255F786C2E8DBE4334E413] - 11/11/2011 - 11:05:04 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINNT\system32\drivers\ptilink.sys [17680]
O58 - SDL:[MD5.5B69B0212D4DA72F1627C354277138B3] - 11/11/2011 - 03:17:18 ---A- . (.Realtek Semiconductor Corporation - NDIS 5.0 driver.) -- C:\WINNT\system32\drivers\RTL8139.sys [18704]
O58 - SDL:[MD5.9582268EFFD61588E4F9BE9C253028D2] - 11/11/2011 - 23:35:34 ---A- . (.S3 Incorporated - S3 Miniport Driver.) -- C:\WINNT\system32\drivers\s3sav4m.sys [65072]
O58 - SDL:[MD5.30F4123FA4E82F72CD3B3554B17D27D5] - 11/11/2011 - 09:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINNT\system32\drivers\tsbvcap.sys [22000]
O58 - SDL:[MD5.0B1065656E0F9AA72DB73AA6A7C93DF4] - 11/11/2011 - 09:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINNT\system32\drivers\vdmindvd.sys [59280]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\himem.sys [4912]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\keyboard.sys [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntdos.sys [27866]
O58 - SDL:[MD5.F95818D2D4F032458DEA3C6086B68C34] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.51737453EC885A127194D4981B2D2890] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.F50815636C53F200A3DF46B2ABACB66E] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.51C48AB85E0AAAE601AC2FA22DE5B422] - 11/11/2011 - 09:00:00 ---A- . (...) -- C:\WINNT\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.B11D8D063B76F9DF41BB4AB85FE7C3BB] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntio.sys [33824]
O58 - SDL:[MD5.E0BD6AD1524C84650DDE1958DC2AF495] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntio404.sys [34544]
O58 - SDL:[MD5.0879C7C88665DF39C1F8AC6874D7B915] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntio411.sys [35648]
O58 - SDL:[MD5.08A0B881AAE6CA0A4FFB4EE1D20D35D1] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntio412.sys [35408]
O58 - SDL:[MD5.92579AC40036F1A547C75FBD842C7A66] - 11/11/2011 - 11:05:04 ---A- . (...) -- C:\WINNT\system32\ntio804.sys [34544]
~ Scan Drivers in 00mn 05s

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\drivers\afd.sys (.not file.) - Environnement de prise en charge de réseau AFD (AFD) .(...) - LEGACY_AFD
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Gestion d'applications (AppMgmt) .(...) - LEGACY_APPMGMT
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\svchost.exe (.not file.) - Service de transfert intelligent en arrière-plan (BITS) .(...) - LEGACY_BITS
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Explorateur d'ordinateur (Browser) .(...) - LEGACY_BROWSER
O64 - Services: CurCS - 12/05/2006 - C:\WINNT\system32\drivers\btserial.sys - Bluetooth Serial Driver(BTSERIAL) .(.Broadcom Corporation. - Bluetooth Serial Driver for Windows 2000.) - LEGACY_BTSERIAL
O64 - Services: CurCS - 12/05/2006 - C:\WINNT\system32\drivers\btslbcsp.sys - Bluetooth Port Client Driver(BTSLBCSP) .(.Broadcom Corporation. - Bluetooth Serial Driver for Windows 2000.) - LEGACY_BTSLBCSP
O64 - Services: CurCS - 12/05/2006 - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe - Bluetooth Service(btwdins) .(.Broadcom Corporation. - Bluetooth Support Server.) - LEGACY_BTWDINS
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\clipsrv.exe (.not file.) - Gestionnaire de l'Album (ClipSrv) .(...) - LEGACY_CLIPSRV
O64 - Services: CurCS - 09/11/2010 - C:\WINNT\system32\drivers\cpuz135_x32.sys - cpuz135(cpuz135) .(.CPUID - CPUID Driver.) - LEGACY_CPUZ135
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Client DHCP (Dhcp) .(...) - LEGACY_DHCP
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\dmadmin.exe (.not file.) - Service d'administration du Gestionnaire de disque logique (dmadmin) .(...) - LEGACY_DMADMIN
O64 - Services: CurCS - 19/06/2003 - C:\WINNT\system32\drivers\dmboot.sys - dmboot(dmboot) .(.VERITAS Software Corp. - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 19/06/2003 - C:\WINNT\system32\drivers\dmload.sys - dmload(dmload) .(.VERITAS Software Corp. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\services.exe (.not file.) - Gestionnaire de disque logique (dmserver) .(...) - LEGACY_DMSERVER
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Client DNS (Dnscache) .(...) - LEGACY_DNSCACHE
O64 - Services: CurCS - 09/08/2011 - C:\WINNT\system32\DRIVERS\eamon.sys - eamon(eamon) .(.ESET - Amon monitor.) - LEGACY_EAMON
O64 - Services: CurCS - 04/08/2011 - C:\WINNT\system32\DRIVERS\ehdrv.sys - ehdrv(ehdrv) .(.ESET - ESET Helper driver.) - LEGACY_EHDRV
O64 - Services: CurCS - 22/09/2011 - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe - ESET Service(ekrn) .(.ESET - ESET Service.) - LEGACY_EKRN
O64 - Services: CurCS - 04/08/2011 - C:\WINNT\system32\DRIVERS\epfwtdir.sys - No object(No service) .(.ESET - ESET Antivirus Network Redirector.) - LEGACY_EPFWTDIR
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\faxsvc.exe (.not file.) - Service de télécopie (Fax) .(...) - LEGACY_FAX
O64 - Services: CurCS - 27/06/2007 - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe - Google Updater Service(gusvc) .(.Google - gusvc.) - LEGACY_GUSVC
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\svchost.exe (.not file.) - Moniteur infrarouge (Irmon) .(...) - LEGACY_IRMON
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Serveur (LanmanServer) .(...) - LEGACY_LANMANSERVER
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Station de travail (LanmanWorkstation) .(...) - LEGACY_LANMANWORKSTATION
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Service d'application d'assistance TCP/IP NetBIOS (LmHosts) .(...) - LEGACY_LMHOSTS
O64 - Services: CurCS - 31/08/2011 - C:\WINNT\system32\drivers\mbam.sys - MBAMProtector(MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 31/08/2011 - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe - MBAMService(MBAMService) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSERVICE
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Affichage des messages (Messenger) .(...) - LEGACY_MESSENGER
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\netdde.exe (.not file.) - DDE réseau (NetDDE) .(...) - LEGACY_NETDDE
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\netdde.exe (.not file.) - DSDM DDE réseau (NetDDEdsdm) .(...) - LEGACY_NETDDEDSDM
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\drivers\netdtect.sys (.not file.) - NetDetect (NetDetect) .(...) - LEGACY_NETDETECT
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\svchost.exe (.not file.) - Connexions réseau (Netman) .(...) - LEGACY_NETMAN
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\svchost.exe (.not file.) - Médias amovibles (NtmsSvc) .(...) - LEGACY_NTMSSVC
O64 - Services: CurCS - 19/11/2005 - C:\WINNT\system32\Drivers\PCASp50.sys - PCASp50 NDIS Protocol Driver(PCASp50) .(.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 SPR Protocol Driver.) - LEGACY_PCASP50
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\lsass.exe (.not file.) - Agent de stratégie IPSEC (PolicyAgent) .(...) - LEGACY_POLICYAGENT
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Emplacement protégé (ProtectedStorage) .(...) - LEGACY_PROTECTEDSTORAGE
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\svchost.exe (.not file.) - Gestionnaire de connexions d'accès distant (RasMan) .(...) - LEGACY_RASMAN
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\svchost.exe (.not file.) - Routage et accès distant (RemoteAccess) .(...) - LEGACY_REMOTEACCESS
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\regsvc.exe (.not file.) - Service d'accès à distance au Registre (RemoteRegistry) .(...) - LEGACY_REMOTEREGISTRY
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\rsvp.exe (.not file.) - QoS RSVP (RSVP) .(...) - LEGACY_RSVP
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\lsass.exe (.not file.) - Gestionnaire de comptes de sécurité (SamSs) .(...) - LEGACY_SAMSS
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\SCardSvr.exe (.not file.) - Prise en charge des cartes à puces (SCardDrv) .(...) - LEGACY_SCARDDRV
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\System32\SCardSvr.exe (.not file.) - Carte à puce (SCardSvr) .(...) - LEGACY_SCARDSVR
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\MSTask.exe (.not file.) - Planificateur de tâches (Schedule) .(...) - LEGACY_SCHEDULE
O64 - Services: CurCS - ??/??/???? - C:\WINNT\s\system32\services.exe (.not file.) - Service d'exécution par délégation (seclogon) .(...) - LEGACY_SECLOGON