Problème de virus, lien abnow, internet lent

Question

Bonjour, 

j'ai un problème sur mon PC qui est: 
Suite à une insertion de clé USB, j'ai eu un signalement de la part de mon anti virus (Bitdefender) d'un troja 
Il ralenti mon PC sur internet, et il dirigeait toutes mes recherches google sur un site Abnow 
J'ai réussi à récupérer mes recherches internet, je ne suis plus redirigé vers Abnow, mais mon internet est toujours très lent 
J'ai trouvé la trace de votre discussion sur le site : affich-23547789-pc-infecte-impossible-de-detruire-infection 
J'ai le même problème que cette personne, à savoir HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell qui réapparait tout le temps, et un fichier C:/User/Appdata/local/1cf6efbe que je n'arrive pas à supprimer 

J'ai déjà passé ZHPDiag, voila le rapport: 

Rapport de ZHPDiag v1.28.34 par Nicolas Coolman, Update du 06/03/2012 
Run by Guillaume at 13/03/2012 22:58:54 
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
Web site : http://nicolascoolman.skyrock.com/ 
State : Nouvelle version disponible 


---\ Web Browser 
MSIE: Internet Explorer v8.0.6001.19088 
MFIE: Mozilla Firefox v3.6.18 (fr) (Defaut) 

---\ Windows Product Information 
~ Langage: Français 
Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001) 
Windows Server License Manager Script : OK 
~ Vista, OEM_SLP channel 
System Locked Preinstallation (OEM_SLP) : OK 
Windows ID Activation : OK 
~ Windows Partial Key : WQD8Q 
Windows License : OK 
Windows Automatic Updates : OK 

---\ System Information 
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel 
~ Operating System: 32 Bits 
Boot mode: Normal (Normal boot) 
Total RAM: 3068 MB (44% free) 
System Restore: Activé (Enable) 
System drive C: has 39 GB (17%) free of 224 GB 

---\ Logged in mode 
~ Computer Name: PCAWAM 
~ User Name: Guillaume 
~ All Users Names: Guillaume, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 
Logged in as Administrator 

---\ Environnement Variables 
~ System Unit : C:\ 
~ %AppData% : C:\Users\Guillaume\AppData\Roaming\ 
~ %Desktop% : C:\Users\Guillaume\Desktop\ 
~ %Favorites% : C:\Users\Guillaume\Favorites\ 
~ %LocalAppData% : C:\Users\Guillaume\AppData\Local\ 
~ %StartMenu% : C:\Users\Guillaume\AppData\Roaming\Microsoft\Windows\Start Menu\ 
~ %Windir% : C:\Windows\ 
~ %System% : C:\Windows\system32\ 

---\ DOS/Devices 
C:\ Hard drive, Flash drive, Thumb drive (Free 39 Go of 224 Go) 
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 9 Go) 
E:\ CD-ROM drive (Not Inserted) 



---\ Security Center & Tools Informations 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK 
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date 
~ Scan Security Center in 00mn 00s 



---\ Recherche particulière de fichiers génériques 
[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Explorateur Windows.) (.29/10/2008 - 07:29:41.) -- C:\Windows\Explorer.exe [2927104] 
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32undll32.exe [44544] 
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\system32\Wininit.exe [96768] 
[MD5.DE4685DE5130039FA63DA66C0F72F787] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/05/2011 - 07:08:58.) -- C:\Windows\system32\wininet.dll [916480] 
[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/01/2008 - 03:24:49.) -- C:\Windows\system32\Winlogon.exe [314880] 
[MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows multi-utilisateurs.) (.10/06/2008 - 08:02:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480] 
[MD5.48EB99503533C27AC6135648E5474457] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:16:42.) -- C:\Windows\system32\drivers\AFD.sys [273408] 
[MD5.2D9C903DC76A66813D350A562DE40ED9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.21/01/2008 - 03:23:00.) -- C:\Windows\system32\drivers\atapi.sys [21560] 
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\drivers\Cdfs.sys [70144] 
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/01/2008 - 03:23:02.) -- C:\Windows\system32\drivers\Cdrom.sys [67072] 
[MD5.B0F395AF1F5154DAE91A9E9358B7113D] - (....) (.14/04/2011 - 15:24:14.) -- C:\Windows\system32\drivers\DfsC.sys [75264] 
[MD5.C87B1EE051C0464491C1A7B03FA0BC99] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/01/2008 - 03:23:22.) -- C:\Windows\system32\drivers\HDAudBus.sys [53760] 
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\drivers\i8042prt.sys [54784] 
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\drivers\IpNat.sys [100864] 
[MD5.5734A0F2BE7E495F7D3ED6EFD4B9F5A1] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 13:49:35.) -- C:\Windows\system32\drivers\MRxSmb.sys [105984] 
[MD5.7C5FEE5B1C5728507CD96FB4A13E7A02] - (.Microsoft Corporation - MBT Transport driver.) (.21/01/2008 - 03:24:59.) -- C:\Windows\system32\drivers
etBT.sys [184320] 
[MD5.B4EFFE29EB4F15538FD8A9681108492D] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\drivers
tfs.sys [1081912] 
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360] 
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288] 
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\driversdpdr.sys [248832] 
[MD5.031E6BCD53C9B2B9ACE111EAFEC347B6] - (.Microsoft Corporation - SMB Transport driver.) (.21/01/2008 - 03:25:00.) -- C:\Windows\system32\drivers\smb.sys [66560] 
[MD5.D09276B1FAB033CE1D40DCBDF303D10F] - (.Microsoft Corporation - TDI Translation Driver.) (.21/01/2008 - 03:24:53.) -- C:\Windows\system32\drivers	dx.sys [71680] 
[MD5.D8B4A53DD2769F226B3EB374374987C9] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/01/2008 - 03:23:21.) -- C:\Windows\system32\drivers\volsnap.sys [227896] 
~ Scan Generic Processes in 00mn 00s 



---\ Etat des fichiers cachés (Caché/Total) 
~ Mes musiques (My Musics) : 3/39 
~ Mes Videos (My Videos) : 1/229 
~ Mes Favoris (My Favorites) : Non accessible (Not found) 
~ Mes Documents (My Documents) : 11/423 
~ Mon Bureau (My Desktop) : 0/27 
~ Menu demarrer (Programs) : 6/38 
~ Scan Hidden Files in 00mn 00s 



---\ Processus lancés 
[MD5.C9EA2C551E79353062624E9A51E4F04B] - (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe [1198048] [PID.3808] 
[MD5.BF9C0C31202259D2BE2B7072499504CE] - (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe [458844] [PID.3964] 
[MD5.62B3C9786081ECAAB272A118408D2817] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1045800] [PID.3972] 
[MD5.2AB3858EF3B7C2228DFD30DED1A4546F] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe [468264] [PID.3988] 
[MD5.544C1EF07AEC178A83538A251A72CE13] - (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [554288] [PID.4068] 
[MD5.A995F7D9E1276D7C75A9C69D73073D25] - (.Patchou - Messenger Plus!.) -- C:\Program Files\MessengerPlus! 3\MsgPlus.exe [185480] [PID.2304] 
[MD5.8CB896C573FD15AE8B13180DA53E93D2] - (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752] [PID.2408] 
[MD5.90A3525C7399B7784D28F99EA1A51C4C] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe [673616] [PID.800] 
[MD5.95D0EA1BECAD6D781C3D09AEC1295E8F] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208] [PID.804] 
[MD5.6E3245DF783E58375B3465F03274743E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.848] 
[MD5.7746FF4871C7EE3C169D19B424A47710] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.1888] 
[MD5.6CF023F0A798C56599B8EA9FF9F083A0] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2289664] [PID.2764] 
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.1332] 
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.] 
[MD5.1F52E8EBC111C7C578CC9E5BDF06EBE6] - (.BitDefender S.R.L. - BitDefender Security Center.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe [1118232] [PID.2748] 
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.4052] 
[MD5.8D07F0687318214A3CEF62EA1048D101] - (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE [316720] [PID.2432] 
[MD5.1EDC4865C8003A0251956835273904B1] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe [685360] [PID.1472] 
[MD5.1F373C5DB440D92839DDDF63F5BA2E8A] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [95528] [PID.4212] 
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [PID.4952] 
[MD5.7D04F8CF659D852BC8D7275BD92DC000] - (.Sun Microsystems, Inc. - Java(TM) Update Checker.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe [507624] [PID.1488] 
[MD5.F96EBC5A624349D81DCC7600A3C5DC43] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.4596] 
[MD5.89D583FC41D48328128A974C25AFAEB7] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OBealsched.exe [185896] [PID.5004] 
[MD5.8AA71DF6DF89DBA50D2B7410E53D450A] - (.BitDefender S.R.L. - BitDefender Antivirus Scanner.) -- C:\Program Files\BitDefender\BitDefender 2010\uiscan.exe [1562144] [PID.6816] 
[MD5.85D374F30A2015D795B1E8D1258866D4] - (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe [116280] [PID.5796] 
[MD5.ED65737D70FDEAC29F738E77D2496EE5] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638232] [PID.840] 
[MD5.7A6DFCE4B8033CCD303918FACCCA9588] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe [307824] [PID.2828] 
[MD5.46AE705AC463F50AC714C8084A09A2A3] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2211328] [PID.6180] 
[MD5.51E7F2C26B6ECE61C5241F1F731EAB2B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 186.4.) -- C:\Windows\system32
vvsvc.exe [211488] [PID.] 
[MD5.05AE358CD777BF8857F512A18E1DE7AA] - (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe [221266] [PID.] 
[MD5.0BA91E1358AD25236863039BB2609A2E] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [2623488] [PID.] 
[MD5.DB8CF923DFD8DD336BEA7F439A627858] - (.Hewlett-Packard Corporation - HpService.) -- C:\Windows\system32\Hpservice.exe [24880] [PID.] 
[MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208] [PID.] 
[MD5.827DBC22C96EECF6D36A13162FABAFD3] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe [81920] [PID.] 
[MD5.7EF47644B74EBE721CC32211D3C35E76] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.] 
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.] 
[MD5.984ECB68ED2A2B2E6A544E87E24FBA2D] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728] [PID.] 
[MD5.6803B69C14696CC4907C5F77FBB04A14] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [292232] [PID.] 
[MD5.95A0B86B9F1D27B613830864341A8252] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [112008] [PID.] 
[MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024] [PID.] 
[MD5.D50FDAD1E57AA60F1973CFC77D905F0E] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [148832] [PID.] 
[MD5.7795F8CEBC284A426B53F541E538695F] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840] [PID.] 
[MD5.CE004777B92DEA56FE14EC900D20BAA4] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.] 
[MD5.A19B0BB5A7EB6DF2DD4A0711D36955EE] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.] 
[MD5.AA2364E962727447B611E06B7B96311D] - (.BitDefender S.R.L. http://www.bitdefender.c - Arrakis Web Server.) -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [183880] [PID.] 
[MD5.B715ABF90831A37918EB4CAD2CF9DF69] - (.BitDefender S.R.L. - BitDefender Security Service.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe [1615688] [PID.] 
[MD5.D727571BD79E5812ADBEB687DB595360] - (.BitDefender S.R.L. - BitDefender Update Service.) -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [310856] [PID.] 
[MD5.0615B72D5E241103769003452B4AFB1C] - (...) -- C:\Program Files\Lavasoft\Ad-Aware\AWSC.exe [1101960] [PID.] 
~ Scan Processes Running in 00mn 00s 



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) 
C:\Users\Guillaume\AppData\Roaming\Mozilla\Firefox\Profiles\lig107ur.default\prefs.js 
M3 - MFPP: Plugins - [Guillaume] -- C:\Users\Guillaume\AppData\Roaming\Mozilla\Firefox\Profiles\lig107ur.default\searchplugins\askcom.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Users\Guillaume\AppData\Roaming\Mozilla\Firefox\Profiles\lig107ur.default\searchplugins\bing.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml 
M3 - MFPP: Plugins - [Guillaume] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml 
M0 - MFSP: prefs.js [Guillaume - lig107ur.default] https://www.google.fr/?gws_rd=ssl 
M2 - MFEP: prefs.js [Guillaume - lig107ur.default\vshare@toolbar] [] vShare v1.0.0 (.vShare.) 
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins
p-mswmp.dll 
P2 - FPN:Firefox Plugin Navigator . (.BitTorrent, Inc. - BitTorrent Plugin 1.) -- C:\Program Files\Mozilla Firefox\Plugins
pbittorrent.dll 
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeployJava1.dll 
P2 - FPN:Firefox Plugin Navigator . (.Foxit Software Company - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins
pFoxitReaderPlugin.dll 
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll 
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL 
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins
ppl3260.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin2.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin3.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin4.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin5.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin6.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin7.dll 
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin8.dll 
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins
prjplug.dll 
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.46.) -- C:\Program Files\Mozilla Firefox\Plugins
prpjplug.dll 
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll 
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.6.1.629.) -- C:\Windows\System32\Adobe\Director
p32dsw.dll 
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins
pitunes.dll 
P2 - FPN: [HKLM] [@bittorrent.com/BitTorrentDNA] - (.BitTorrent, Inc. - Delivery Network Acceleration by BitTorrent(TM).) -- C:\Program Files\DNA\plugins
pbtdna.dll 
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin
pgeplugin.dll 
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin
ew_plugin
pjp2.dll 
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0
pctrl.dll 
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live
pOLW.dll 
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll 
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll 
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.46] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6
ppl3260.dll 
P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.46] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6
prjplug.dll 
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.46] - (.RealNetworks, Inc. - 6.0.12.46.) -- C:\Program Files\Real\RealPlayer\Netscape6
prpjplug.dll 
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll 
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.99
pGoogleUpdate3.dll 
P2 - FPN: [HKLM] [@viewpoint.com/VMP] - (.Pas de propriétaire - MetaStream 3 Plugin r4.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology
pViewpoint.dll 
~ Scan Firefox Browser in 00mn 00s 



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) 
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl 
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank 
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/ 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm 
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\System32\ieframe.dll 
R3 - URLSearchHook: (no name) - {b80f591e-fe9a-46cf-a13e-180377240586} . (...) (No version) -- (.not file.) 
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1 
~ Scan IE Browser in 00mn 00s 



---\ Internet Explorer, Proxy Management (R5) 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll 
~ Scan Proxy management in 00mn 00s 



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) 
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, 
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" 
~ Scan Keys in 00mn 00s 



---\ Redirection du fichier Hosts (O1) 
~ Le fichier hosts est sain (The hosts file is clean). 
~ Scan Hosts File in 00mn 00s 
~ Nombre de lignes (Lines number): 20 



---\ Browser Helper Objects de navigateur (O2) 
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll 
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} . (...) -- C:\Program Files\vShare\vshare_toolbar.dll 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 6.0 for Act.) -- C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll 
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin for I.) -- C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll 
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - Bad download blocker.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll 
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline 
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} . (.AOL LLC - AOL IE Toolbar Dynamic Link Library.) -- C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll 
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll 
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll 
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll 
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 
~ Scan BHO in 00mn 00s 



---\ Internet Explorer Toolbars (O3) 
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} . (.AOL LLC - AOL IE Toolbar Dynamic Link Library.) -- C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll 
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll 
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} . (...) -- C:\Program Files\vShare\vshare_toolbar.dll 
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} . (.BitDefender S.R.L. - BitDefender Antiphishing Toolbar.) -- C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll 
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll 
~ Scan Toolbar in 00mn 00s 



---\ Applications démarrées par registre & par dossier (O4) 
O4 - HKLM\..\Run: [Windows Mobile-based device management] . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\WindowsMobile\wmdc.exe 
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe 
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe 
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe 
O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe 
O4 - HKLM\..\Run: [OnScreenDisplay] . (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\System32
vcpl.dll 
O4 - HKLM\..\Run: [MessengerPlus3] . (.Patchou - Messenger Plus!.) -- C:\Program Files\MessengerPlus! 3\MsgPlus.exe 
O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe 
O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe 
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe 
O4 - HKLM\..\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe 
O4 - HKLM\..\Run: [BDAgent] . (.BitDefender S.R.L. - BitDefender Agent.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe 
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] . (.BitDefender S.R.L. - IEShow Application.) -- C:\Program Files\BitDefender\BitDefender 2010\ieshow.exe 
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\hpwuschd2.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe 
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe 
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe 
O4 - HKCU\..\Run: [EPSON SX510W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFIE.exe 
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [EPSON SX510W Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFIE.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-21-2009296313-2561507790-2157274573-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe 
~ Scan Application in 00mn 00s 



---\ Autres liens utilisateurs (O4) 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Satellites.LNK . (...) -- C:\Program Files\Satellites\Satellite.exe (.not file.) 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Audacity.lnk . (...) -- C:\Program Files\Audacity\audacity.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\AVIcodec.lnk . (.P. Duby Productions.) -- C:\Program Files\AVIcodec\AVIcodec.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\avimeca.lnk . (...) -- C:\Users\Guillaume\Docs à wam\cours\Logiciels\Logiciels video\avimeca2.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\ChemSketch.lnk . (.Advanced Chemistry Development Inc..) -- C:\ACDFREE10\CHEMSK.EXE 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Cours.lnk . (...) -- C:\Users\Guillaume\Docs à wam\cours\Lycée 
O4 - Global Startup: C:\Users\Guillaume\Desktop\EVEREST Home Edition.lnk . (...) -- C:\Program Files\Lavalys\EVEREST Home Edition\everest.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Excel.lnk . (...) -- C:\Windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\xlicons.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Gestionnaire pda.lnk . (.Microsoft Corporation.) -- C:\Windows\WindowsMobile\wmdc.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\HotPotatoes 6.lnk . (.HalfBaked.) -- C:\Program Files\HotPotatoes6\HotPot.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Nero Burning ROM.lnk . (.Ahead Software AG.) -- C:\Program Files\Ahead\Nero
ero.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\PC Wizard 2008.lnk . (.CPUID.) -- C:\Program Files\PC Wizard 2008\PC Wizard.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Première S.lnk . (...) -- C:\Program Files\mpc1s 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Seconde.lnk . (...) -- C:\Program Files\PHYSIQUE CHIMIE SECONDE 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Stellarium.lnk . (...) -- C:\Program Files\Stellarium\stellarium.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\SureThing CD Labeler Deluxe 5.lnk . (.MicroVision Development, Inc..) -- C:\Program Files\SureThing CD Labeler 5\stcd.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Terminale S.lnk . (...) -- C:\Program Files\mpcts 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe 
O4 - Global Startup: C:\Users\Guillaume\Desktop\Word.lnk . (...) -- C:\Windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.exe 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AIM 6.1.lnk . (...) -- C:\Program Files\AIM6\aim6.exe (.not file.) 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk . (.Foxit Software.) -- C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE 
O4 - Global Startup: C:\Users\Guillaume\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe 
~ Scan Global Startup in 00mn 00s 



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) 
O8 - Extra context menu item: &Recherche AOL Toolbar . (...) -- C:\ProgramData\AOL\ieToolbaresources\fr-FR\local\search.html 
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files\MICROS~3\Office12\EXCEL.exe 
~ Scan IE Menu Contextuel in 00mn 00s 



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) 
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll 
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} . (.Microsoft Corporation - Synchronisation des favoris ActiveSync.) -- C:\Windows\WindowsMobile\INetRepl.dll 
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} . (.Microsoft Corporation - Synchronisation des favoris ActiveSync.) -- C:\Windows\WindowsMobile\INetRepl.dll 
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO 
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 
~ Scan IE Extra Buttons in 00mn 00s 



---\ Winsock hijacker (Layered Service Provider) (O10) 
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32
laapi.dll 
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll 
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll 
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll 
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\System32\mswsock.dll 
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll 
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\System32\wshbth.dll 
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll 
~ Scan Winsock in 00mn 00s 



---\ Objets ActiveX (Downloaded Program Files)(O16) 
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab 
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab 
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://files-mjf.jeuxvideo-flash.com/popcap/popcaploader_v10_fr.cab 
~ Scan Objets ActiveX in 00mn 00s 



---\ Modification Domaine/Adresses DNS (O17) 
O17 - HKLM\System\CCS\Services\Tcpip\..\{01C2B999-2616-4BAD-A4BA-B4B92ADE360C}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CCS\Services\Tcpip\..\{BBA93806-DCDB-4ECD-AF90-3F708A247F4A}: DhcpDomain = INFRARED 
O17 - HKLM\System\CS1\Services\Tcpip\..\{01C2B999-2616-4BAD-A4BA-B4B92ADE360C}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CS1\Services\Tcpip\..\{BBA93806-DCDB-4ECD-AF90-3F708A247F4A}: DhcpDomain = INFRARED 
~ Scan Domain in 00mn 00s 



---\ Protocole additionnel (O18) 
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll 
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll 
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll 
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll 
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\microsoft shared\Help\hxds.dll 
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll 
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll 
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll 
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} . (...) -- C:\Program Files\vShare\vshare_toolbar.dll 
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll 
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll 
~ Scan Protocole Additionnel in 00mn 00s 



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) 
O20 - AppInit_DLLs: . (.Patchou - Messenger Plus! Process Monitor.) - C:\Windows\system32\MsgPlusLoader.dll 
~ Scan AppInit DLL in 00mn 00s 



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll 
~ Scan SSODL in 00mn 00s 



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) 
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll 
~ Scan STS/SSO in 00mn 00s 



---\ Liste des services NT non Microsoft et non désactivés (O23) 
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe 
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 
O23 - Service: (bdfsfltr) - Clé orpheline 
O23 - Service: (BDSelfPr) - Clé orpheline 
O23 - Service: (BDVEDISK) - Clé orpheline 
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe 
O23 - Service: EpsonBidirectionalService (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) - C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe 
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe 
O23 - Service: HP Health Check Service (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Corporation - HpService.) - C:\Windows\system32\Hpservice.exe 
O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 
O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe 
O23 - Service: (LIVESRV) - Clé orpheline 
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 186.4.) - C:\Windows\system32
vvsvc.exe 
O23 - Service: QuickPlay Background Capture Service (QB (QPCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe 
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe 
O23 - Service: Recovery Service for Windows (Recovery Service for Windows) . (...) - C:\Windows\SMINST\BLService.exe (.not file.) 
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe 
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe 
O23 - Service: C:\Windows\system32\SearchIndexer.exe (WSearch) . (...) - C:\Windows\system32\SearchIndexer.exe (.not file.) 
~ Scan Services in 00mn 00s 



---\ Enumération Active Desktop & MHTML Editor (O24) 
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe 
~ Scan Desktop Component in 00mn 00s 



---\ BootExecute (O34) 
O34 - HKLM BootExecute: (autocheck autochk *) - File not found 
O34 - HKLM BootExecute: (lsdelete) - File not found 
~ Scan Keys in 00mn 00s 



---\ Tâches planifiées en automatique (O39) 
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Epson Printer Software Downloader.job 
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForGuillaume.job 
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{E8D63AE6-2B99-4235-983F-D58FF70BDDBC}.job 
[MD5.98070A7FCE5B4AFB24A142C6F4C25CC1] [APT] [Ad-Aware Update (Weekly)] (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe 
[MD5.E7FAF17B920ACCE36C191B9151B10AB4] [APT] [Epson Printer Software Downloader] (.SEIKO EPSON CORPORATION.) -- C:\Program Files\epson\EPAPDL\E_SAPDL2.exe 
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe 
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe 
[MD5.AE37F6508716D2DD6122744C46686BEC] [APT] [HP Health Check] (.Hewlett-Packard.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe 
[MD5.BA6AE6BC66BEA0C1F3335AEE43C35385] [APT] [HPCeeScheduleForGuillaume] (.Hewlett-Packard.) -- C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe 
[MD5.00000000000000000000000000000000] [APT] [{668987E0-DA41-40AF-8AB4-62C70C1B6F79}] (...) -- E:\setup.exe (.not file.) 
[MD5.00000000000000000000000000000000] [APT] [{C92BEC8F-3455-40D6-B7A8-1EEA6137BA27}] (...) -- C:\Program Files\Veoh Networks\Veoh Video Compass\uninst.exe (.not file.) 
[MD5.00000000000000000000000000000000] [APT] [{EC1B2625-1C01-4142-B184-B447B2A14B0F}] (...) -- C:\Users\Guillaume\Docs ... wam\Guillaume-monnier\eMule0.49b-Installer1.exe (.not file.) 
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe 
~ Scan Scheduled Task in 00mn 02s 



---\ Composants installés (ActiveSetup Installed Components) (O40) 
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\Windows\system32\unregmp2.exe 
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe 
O40 - ASIC: Viewpoint Media Player - {03F998B2-0E00-11D3-A498-00104B6EB52E} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll 
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\binegutils.dll 
O40 - ASIC: LightScribe Control Panel - {10880D85-AAD9-4558-ABDC-2AB1552D831F} . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe 
O40 - ASIC: Macromedia Shockwave Director 10.1 - {166B1BCA-3F9C-11CF-8075-444553540000} . (.Adobe Systems, Inc. - Shockwave ActiveX Control.) -- C:\Windows\System32\Adobe\Director\SwDir.dll 
O40 - ASIC: Viewpoint Media Player - {1B00725B-C455-4DE6-BFB6-AD540AD427CD} . (.Viewpoint Corporation - Viewpoint Media Player for Internet Explorer.) -- C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll 
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll 
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll 
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe 
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll 
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.1 r102.) -- C:\Windows\System32\Macromed\Flash\Flash11e.ocx 
~ Scan Active Setup in 00mn 00s 



---\ Pilotes lancés au démarrage (O41) 
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys 
O41 - Driver: (BdfNdisf) . (.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) - C:\Windows\system32\DRIVERS\BdfNdisf6.sys 
O41 - Driver: (bdftdif) . (.BitDefender LLC - BitDefender Firewall TDI Filter Driver.) - C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys 
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys 
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (...) - C:\Windows\system32\Drivers\dfsc.sys 
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys 
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys 
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys 
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys 
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS
etbios.sys 
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS
etbt.sys 
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers
siproxy.sys 
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys 
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERSasacd.sys 
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERSdbss.sys 
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys 
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\driversdpencdd.sys 
O41 - Driver: C:\Windows\system32	cpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys 
O41 - Driver: C:\Windows\system32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS	dx.sys 
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS	ermdd.sys 
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys 
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys 
~ Scan Drivers in 00mn 00s 



---\ Logiciels installés (O42) 
O42 - Logiciel: ABBYY FineReader 6.0 Sprint - (.ABBYY Software House.) [HKLM] -- {ACF60000-22B9-4CE9-98D6-2CCF359BAC07} 
O42 - Logiciel: ACD/Labs Software in C:\ACDFREE10\ - (.ACD/Labs.) [HKLM] -- ACDLabs in C__ACDFREE10_ 
O42 - Logiciel: AOL Toolbar 5.0 - (.AOL LLC.) [HKLM] -- AOL Toolbar 
O42 - Logiciel: AVIcodec (remove only) - (.Pas de propriétaire.) [HKLM] -- AVIcodec 
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft

Rennes8 · Answer

voila la suite :
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites 
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E} 
O42 - Logiciel: Ad-Aware - (.Lavasoft Limited.) [HKLM] -- {8E9976D2-E563-43DE-A51F-5AEBC38D1F08} 
O42 - Logiciel: Ad-Aware SE Personal - (.Lavasoft AB.) [HKLM] -- {78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747} 
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin 
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX 
O42 - Logiciel: Adobe Reader 6.0.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A00000000001} 
O42 - Logiciel: Adobe Shockwave Player - (.Adobe Systems, Inc..) [HKLM] -- {1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A} 
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player 
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} 
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {EFC04D3F-A152-47E7-8517-EE0F6201AFEF} 
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} 
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7} 
O42 - Logiciel: Audacity 1.2.6 - (.Pas de propriétaire.) [HKLM] -- Audacity_is1 
O42 - Logiciel: BitDefender Internet Security 2010 - (.BitDefender.) [HKLM] -- {0DFF6117-CBBC-4F5C-9C57-6936644F10D4} 
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKLM] -- BitTorrent 
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKCU] -- BitTorrent 
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B} 
O42 - Logiciel: Crocodile Physics 1.51 FR - (.Pas de propriétaire.) [HKLM] -- {05B95A20-868B-472A-86D8-1E571DB6C42B} 
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} 
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} 
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} 
O42 - Logiciel: EPSON Easy Photo Print - (.Pas de propriétaire.) [HKLM] -- {5DA7BC15-18D3-41A0-9F59-838DA3EAEF17} 
O42 - Logiciel: EPSON Logiciel imprimante - (.Pas de propriétaire.) [HKLM] -- EPSON Printer and Utilities 
O42 - Logiciel: EPSON SX510W Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX510W Series 
O42 - Logiciel: EPSON Scan - (.Pas de propriétaire.) [HKLM] -- EPSON Scanner 
O42 - Logiciel: ESDX3800 Guide d'utilisation - (.Pas de propriétaire.) [HKLM] -- ESDX3800 Guide d'utilisation 
O42 - Logiciel: EVEREST Home Edition v2.01 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1 
O42 - Logiciel: EarthView - (.DeskSoft.) [HKLM] -- EarthView 
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {87C2248A-C7DD-49ED-9BCD-B312A9D0819E} 
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON Corporation.) [HKLM] -- {48F22622-1CC2-4A83-9C1E-644DD96F832D} 
O42 - Logiciel: Epson Printer Software Downloader - (.Pas de propriétaire.) [HKLM] -- Epson Printer Software Downloader 
O42 - Logiciel: Epson Printer Software Downloader - (.SEIKO EPSON CORPORATION.) [HKLM] -- {B6A98E5F-D6A7-46FB-9E9D-1F7BF4434001} 
O42 - Logiciel: Epson Stylus SX510W_TX550W Manuel - (.Pas de propriétaire.) [HKLM] -- Epson Stylus SX510W_TX550W Guide d'utilisation 
O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799} 
O42 - Logiciel: EpsonNet Setup - (.SEIKO EPSON CORPORATION.) [HKLM] -- {FFFAE01B-466F-4C07-9821-A94FD753BDDA} 
O42 - Logiciel: Foxit Reader - (.Foxit Software Company.) [HKLM] -- Foxit Reader 
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {1EE04769-91C4-4A06-92B7-FCAFE6BABDD9} 
O42 - Logiciel: Gestionnaire pour appareils Windows Mobile - (.Microsoft Corporation.) [HKLM] -- {1F2A5DF9-40E1-4644-ADBD-D80F347BA6C8} 
O42 - Logiciel: Google Toolbar for Firefox - (.Google Inc..) [HKLM] -- {2CCBABCB-6427-4A55-B091-49864623C43F} 
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} 
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} 
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} 
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008} 
O42 - Logiciel: HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF} 
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {B16DA0F8-26BC-4FFC-9363-1D9F3E6C3E21} 
O42 - Logiciel: HP Doc Viewer - (.Hewlett-Packard.) [HKLM] -- {082702D5-5DD8-4600-BCE5-48B15174687F} 
O42 - Logiciel: HP Easy Setup - Frontend - (.Hewlett-Packard.) [HKLM] -- {51E5C397-0AA0-48DD-9CB6-7259AFFDFB0A} 
O42 - Logiciel: HP Help and Support - (.Hewlett-Packard.) [HKLM] -- {31216452-5540-4C96-B754-94890A63D5AB} 
O42 - Logiciel: HP Quick Launch Buttons 6.40 D3 - (.Hewlett-Packard.) [HKLM] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355} 
O42 - Logiciel: HP QuickPlay 3.7 - (.Pas de propriétaire.) [HKLM] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1} 
O42 - Logiciel: HP QuickTouch 1.00 D2 - (.Hewlett-Packard.) [HKLM] -- {30DAA715-5032-40F9-A0AE-95C9AEBB3E3F} 
O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing 
O42 - Logiciel: HP Total Care Advisor - (.Hewlett-Packard.) [HKLM] -- {f32502b5-5b64-4882-bf61-77f23edcac4f} 
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {DDD5104F-1C44-49EB-9E6B-29EC5D27658B} 
O42 - Logiciel: HP User Guides 0103 - (.Hewlett-Packard.) [HKLM] -- {B8169E45-8E23-430B-91D1-EC64540C8ED0} 
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM] -- {A5CE7175-080D-49AC-B5A3-E7E3502428F5} 
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} 
O42 - Logiciel: HPNetworkAssistant - (.Hewlett-Packard..) [HKLM] -- {228C6B46-64E2-404E-898A-EF0830603EF4} 
O42 - Logiciel: HotPotatoes v 6.2.4.2 - (.HalfBaked.) [HKLM] -- hotpot_is1 
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} 
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8} 
O42 - Logiciel: Intel A/V Codecs V2.0 - (.Pas de propriétaire.) [HKLM] -- CodInstl 
O42 - Logiciel: JMicron JMB38X Flash Media Controller - (.JMicron Technology Corp..) [HKLM] -- {26604C7E-A313-4D12-867F-7C6E7820BE4C} 
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020F0} 
O42 - Logiciel: Java(TM) 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} 
O42 - Logiciel: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} 
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} 
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} 
O42 - Logiciel: K-Lite Mega Codec Pack 1.70 - (.Pas de propriétaire.) [HKLM] -- KLiteCodecPack_is1 
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} 
O42 - Logiciel: LightScribe System Software 1.12.33.2 - (.LightScribe.) [HKLM] -- {582287DA-0806-4AC0-BF19-C15E3A466034} 
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} 
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} 
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} 
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} 
O42 - Logiciel: Messenger Plus! 3 - (.Pas de propriétaire.) [HKLM] -- MsgPlus! Plugin 
O42 - Logiciel: Micro Application - PrintPratic - (.Pas de propriétaire.) [HKLM] -- {67380BB7-F6C4-458A-9F94-5012814A20B7} 
O42 - Logiciel: Microméga Première S - (.Pas de propriétaire.) [HKLM] -- ST6UNST #2 
O42 - Logiciel: Microméga Terminale S - (.Pas de propriétaire.) [HKLM] -- ST6UNST #3 
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6} 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E} 
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_PROR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0} 
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} 
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC} 
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Professional 2007 - (.Microsoft Corporation.) [HKLM] -- PROR 
O42 - Logiciel: Microsoft Office Professional 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_PROR_{14809F99-C601-4D4A-9391-F1E8FAA964C5} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_PROR_{A0516415-ED61-419A-981D-93596DA74165} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_PROR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_PROR_{F580DDD5-8D37-4998-968E-EBB76BB86787} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_PROR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} 
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{187308AB-5FA7-4F14-9AB9-D290383A10D9} 
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} 
O42 - Logiciel: Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs - (.Microsoft Corporation.) [HKLM] -- {90120000-00B2-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} 
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} 
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} 
O42 - Logiciel: MobileMe Control Panel - (.Apple Inc..) [HKLM] -- {146E206D-7D2C-493A-B431-1F1D16E822AF} 
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE} 
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack 
O42 - Logiciel: Mozilla Firefox (3.6.18) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.18) 
O42 - Logiciel: My HP Games - (.WildTangent.) [HKLM] -- WildTangent hp Master Uninstall 
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers 
O42 - Logiciel: Nero 6 Demo - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey 
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080} 
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} 
O42 - Logiciel: PC Wizard 2008.1.84 - (.Laurent KUTIL & Franck DELATTRE.) [HKLM] -- PC Wizard 2008_is1 
O42 - Logiciel: PVSonyDll - (.NVIDIA Corporation.) [HKLM] -- {3D3E663D-4E7E-4577-A560-7ECDDD45548A} 
O42 - Logiciel: Physique chimie seconde - (.Pas de propriétaire.) [HKLM] -- ST6UNST #1 
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} 
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} 
O42 - Logiciel: ProtectSmart Hard Drive Protection - (.Hewlett-Packard.) [HKLM] -- {9D615069-AA8F-4E89-AE9D-77AAE90F529F} 
O42 - Logiciel: QuickPlay SlingPlayer 0.4.6 - (.SlingMedia.) [HKLM] -- SlingMedia.QPSlingPlayer_is1 
O42 - Logiciel: QuickReport 1.1 - (.Nom de votre société.) [HKLM] -- {C6C126FF-029B-488B-AFA3-889C171505B4} 
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {7BE15435-2D3E-4B58-867F-9C75BED0208C} 
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 6.0 
O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} 
O42 - Logiciel: Regressi - (.Evariste.) [HKLM] -- {E2E164AB-1367-488F-8F1F-BA312DB2FF18} 
O42 - Logiciel: Satellites - (.Pas de propriétaire.) [HKLM] -- ST5UNST #1 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{5C497F0B-2061-4CC9-A61C-6B45B867354D} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{CD769337-C8AC-46DB-A7DC-643E50089263} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{536FB502-775F-4494-BACE-C02CC90B7A5B} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{5729F1AE-5895-468F-9165-BAD161C9E982} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08} 
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{7F207DCA-3399-40CB-A968-6E5991B1421A} 
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870 
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5} 
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{5A4E43D5-858F-49BD-BA72-8F30E1793060} 
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{65EA4836-B5A3-4C1D-8883-0C35E471003A} 
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB} 
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1} 
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062} 
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{3A4CDE54-2403-483D-8D9A-15E3264410DF} 
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D} 
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48} 
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{3D019598-7B59-447A-80AE-815B703B84FF} 
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC} 
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663 
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870 
O42 - Logiciel: Spybot - Search & Destroy 1.3 - (.Safer Networking Limited.) [HKLM] -- Spybot - Search & Destroy_is1 
O42 - Logiciel: Stellarium 0.10.1 - (.Pas de propriétaire.) [HKLM] -- Stellarium_is1 
O42 - Logiciel: SureThing CD Labeler Deluxe 5 - (.MicroVision Development, Inc..) [HKLM] -- {4ED7D297-58F7-45C3-A9BA-A7CD6FA0D373}_is1 
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey 
O42 - Logiciel: ThermaCAM QuickReport French Language Pack - (.FLIR Systems.) [HKLM] -- {46DA7A21-3185-4DE0-A2E5-895C4E7655E0} 
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D} 
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} 
O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4} 
O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2583910) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{BDC21583-5601-4B2B-88F3-7919F6DE8FB1} 
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2596560) - (.Microsoft.) [HKLM] -- {91120000-0014-0000-0000-0000000FF1CE}_PROR_{2964DDE1-4925-4DF1-AF2C-0A36B3442228} 
O42 - Logiciel: VLC media player 0.9.8a - (.VideoLAN Team.) [HKLM] -- VLC media player 
O42 - Logiciel: Viewpoint Media Player - (.Pas de propriétaire.) [HKLM] -- ViewpointMediaPlayer 
O42 - Logiciel: Vista Codec Package - (..) [HKLM] -- {F9FD80CE-0448-4D4F-8BCD-77FC514C3F99} 
O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27} 
O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01 
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver 
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504} 
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} 
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C} 
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818} 
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B} 
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA} 
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} 
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule 
O42 - Logiciel: ffdshow [rev 1483] [2007-09-24] - (.Pas de propriétaire.) [HKLM] -- ffdshow_is1 
O42 - Logiciel: iPod Updater 2004-08-06 - (.Apple Computer, Inc..) [HKLM] -- InstallShield_{2F8C106A-7DFC-45DE-8006-F9145AADF1D8} 
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {8B92D97D-DB3D-4926-A8F7-718FE7C5EE18} 
O42 - Logiciel: muvee autoProducer 6.1 - (.muvee Technologies.) [HKLM] -- {35F83303-C0C0-46B7-B8A8-ADA7C2AC5645} 
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} 
O42 - Logiciel: vShare Plugin - (.Pas de propriétaire.) [HKLM] -- vShare 

---\ HKCU & HKLM Software Keys 
[HKCU\Software\1cf6efbe] 
[HKCU\Software\ABBYY] 
[HKCU\Software\AC3filter] 
[HKCU\Software\AOL] 
[HKCU\Software\AVS4YOU] 
[HKCU\Software\Actecom] 
[HKCU\Software\Adobe] 
[HKCU\Software\Advanced Chemistry Development (ACD)] 
[HKCU\Software\Ahead] 
[HKCU\Software\America Online] 
[HKCU\Software\AppDataLow\Software\Adobe] 
[HKCU\Software\AppDataLow\Software\Google] 
[HKCU\Software\AppDataLow\Software\Macromedia] 
[HKCU\Software\AppDataLow\Software\Microsoft] 
[HKCU\Software\AppDataLow\Software] 
[HKCU\Software\AppDataLow] 
[HKCU\Software\Apple Computer, Inc.] 
[HKCU\Software\Apple Inc.] 
[HKCU\Software\Ascentive] 
[HKCU\Software\Audacity] 
[HKCU\Software\Bitberry] 
[HKCU\Software\Bitdefender] 
[HKCU\Software\CDDB] 
[HKCU\Software\Classes] 
[HKCU\Software\Clients] 
[HKCU\Software\CoreVorbis] 
[HKCU\Software\CyberLink] 
[HKCU\Software\DT Soft] 
[HKCU\Software\Datastead] 
[HKCU\Software\DivXNetworks] 
[HKCU\Software\EPSON] 
[HKCU\Software\FLIR Systems] 
[HKCU\Software\Foxit Software] 
[HKCU\Software\FreeTime] 
[HKCU\Software\Freeware] 
[HKCU\Software\GNU] 
[HKCU\Software\GSpot Appliance Corp] 
[HKCU\Software\Gabest] 
[HKCU\Software\Google] 
[HKCU\Software\HP Guide] 
[HKCU\Software\HaaliMkx] 
[HKCU\Software\Haali] 
[HKCU\Software\HalfBaked] 
[HKCU\Software\Hewlett-Packard] 
[HKCU\Software\HookNetwork] 
[HKCU\Software\IDT] 
[HKCU\Software\IM Providers] 
[HKCU\Software\Iceni] 
[HKCU\Software\Intel] 
[HKCU\Software\JavaSoft] 
[HKCU\Software\Lavalys] 
[HKCU\Software\Lavasoft] 
[HKCU\Software\Licenses] 
[HKCU\Software\LightScribe] 
[HKCU\Software\Local AppWizard-Generated Applications] 
[HKCU\Software\LowRegistry] 
[HKCU\Software\Macromedia] 
[HKCU\Software\MainConcept (Muvee)] 
[HKCU\Software\MainConcept] 
[HKCU\Software\MediaInfo] 
[HKCU\Software\Micro Application] 
[HKCU\Software\MozillaPlugins] 
[HKCU\Software\Mozilla] 
[HKCU\Software\NATHAN] 
[HKCU\Software\NVIDIA Corporation] 
[HKCU\Software\Netscape] 
[HKCU\Software\ODBC] 
[HKCU\Software\OJOsoft Corporation] 
[HKCU\Software\ORL] 
[HKCU\Software\OpenOffice.org] 
[HKCU\Software\Orban] 
[HKCU\Software\PC SOFT] 
[HKCU\Software\PC Wizard] 
[HKCU\Software\Patchou] 
[HKCU\Software\PepiMK Software] 
[HKCU\Software\Policies] 
[HKCU\Software\RealNetworks] 
[HKCU\Software\Regressi] 
[HKCU\Software\SEIKO EPSON] 
[HKCU\Software\SOFTWIN] 
[HKCU\Software\SWiSHzone.com] 
[HKCU\Software\Softonic] 
[HKCU\Software\Softthinks] 
[HKCU\Software\Synaptics] 
[HKCU\Software\Trolltech] 
[HKCU\Software\VB and VBA Program Settings] 
[HKCU\Software\Veoh] 
[HKCU\Software\WinRAR SFX] 
[HKCU\Software\WinRAR] 
[HKCU\Software\Windows Live Writer] 
[HKCU\Software\YahooPartnerToolbar] 
[HKCU\Software\Zylom] 
[HKCU\Software\bisoft] 
[HKCU\Software\combit] 
[HKCU\Software\eMule] 
[HKCU\Software\enso] 
[HKCU\Software\vShare] 
[HKLM\Software\ABBYY] 
[HKLM\Software\AOL] 
[HKLM\Software\AVS4YOU] 
[HKLM\Software\Adobe] 
[HKLM\Software\Advanced Chemistry Development (ACD)] 
[HKLM\Software\Ahead] 
[HKLM\Software\America Online] 
[HKLM\Software\AppDataLow] 
[HKLM\Software\Apple Computer, Inc.] 
[HKLM\Software\Apple Inc.] 
[HKLM\Software\AviSynth] 
[HKLM\Software\BitDefender] 
[HKLM\Software\BrowserChoice] 
[HKLM\Software\CXT] 
[HKLM\Software\Classes] 
[HKLM\Software\Clients] 
[HKLM\Software\Codec Tweak Tool] 
[HKLM\Software\Conduit] 
[HKLM\Software\Conexant] 
[HKLM\Software\Crocodile Clips] 
[HKLM\Software\Cyberlink] 
[HKLM\Software\DT Soft] 
[HKLM\Software\Debug] 
[HKLM\Software\DeskSoft] 
[HKLM\Software\DivXNetworks] 
[HKLM\Software\EPSON] 
[HKLM\Software\EasyBits] 
[HKLM\Software\EpsonNet] 
[HKLM\Software\FLIR Systems] 
[HKLM\Software\Foxit Software] 
[HKLM\Software\GEAR Software] 
[HKLM\Software\GNU] 
[HKLM\Software\Gabest] 
[HKLM\Software\Google] 
[HKLM\Software\HPQLOG] 
[HKLM\Software\HPQ] 
[HKLM\Software\HP] 
[HKLM\Software\HaaliMkx] 
[HKLM\Software\HalfBaked] 
[HKLM\Software\Hewlett-Packard] 
[HKLM\Software\IDT] 
[HKLM\Software\Infix PDF] 
[HKLM\Software\InstallShield] 
[HKLM\Software\InstalledOptions] 
[HKLM\Software\Intel] 
[HKLM\Software\InterVideo] 
[HKLM\Software\JMicron Technology Corp.] 
[HKLM\Software\JavaSoft] 
[HKLM\Software\JreMetrics] 
[HKLM\Software\KLCodecPack] 
[HKLM\Software\Lavasoft] 
[HKLM\Software\LightScribe] 
[HKLM\Software\Macromedia] 
[HKLM\Software\MetaStream] 
[HKLM\Software\Micro Application] 
[HKLM\Software\MicroVision] 
[HKLM\Software\MidasHeurScanner] 
[HKLM\Software\MimarSinan] 
[HKLM\Software\MozillaPlugins] 
[HKLM\Software\Mozilla] 
[HKLM\Software\NVIDIA Corporation] 
[HKLM\Software\ODBC] 
[HKLM\Software\On2 Technologies] 
[HKLM\Software\OpenOffice.org] 
[HKLM\Software\Patchou] 
[HKLM\Software\Policies] 
[HKLM\Software\RTLSetup] 
[HKLM\Software\RealNetworks] 
[HKLM\Software\Realtek] 
[HKLM\Software\RegisteredApplications] 
[HKLM\Software\RichFX] 
[HKLM\Software\S3R521] 
[HKLM\Software\SEIKO EPSON CORPORATION] 
[HKLM\Software\Softwin] 
[HKLM\Software\Sonic] 
[HKLM\Software\Sun Microsystems] 
[HKLM\Software\Symantec] 
[HKLM\Software\Synaptics] 
[HKLM\Software\The Silicon Realms Toolworks] 
[HKLM\Software\VideoLAN] 
[HKLM\Software\Viewpoint] 
[HKLM\Software\Volatile] 
[HKLM\Software\WOW6432Node] 
[HKLM\Software\Windows] 
[HKLM\Software\Xing Technology Corp.] 
[HKLM\Software\iTinySoft] 
[HKLM\Software\instinno] 
[HKLM\Software\mozilla.org] 
[HKLM\Software\muvee Technologies] 
~ Scan Softwares in 00mn 00s 



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) 
O43 - CFD: 04/11/2010 - 19:08:48 - [118,664] ----D- C:\Program Files\ABBYY FineReader 6.0 Sprint 
O43 - CFD: 09/06/2008 - 23:40:00 - [12,096] ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites 
O43 - CFD: 13/09/2008 - 14:41:20 - [52,079] ----D- C:\Program Files\Adobe 
O43 - CFD: 13/09/2008 - 16:20:48 - [66,579] ----D- C:\Program Files\Ahead 
O43 - CFD: 09/06/2008 - 23:49:16 - [2,821] ----D- C:\Program Files\AOL 
O43 - CFD: 16/02/2012 - 15:37:22 - [2,316] ----D- C:\Program Files\Apple Software Update 
O43 - CFD: 18/02/2010 - 14:35:48 - [8,288] ----D- C:\Program Files\Audacity 
O43 - CFD: 13/09/2008 - 17:20:16 - [0,607] ----D- C:\Program Files\AVIcodec 
O43 - CFD: 25/01/2011 - 21:33:04 - [123,619] ----D- C:\Program Files\BitDefender 
O43 - CFD: 09/03/2012 - 22:45:54 - [0,987] ----D- C:\Program Files\BitTorrent 
O43 - CFD: 02/05/2010 - 20:31:04 - [0] ----D- C:\Program Files\BitZipper 
O43 - CFD: 16/02/2012 - 15:43:20 - [0,586] ----D- C:\Program Files\Bonjour 
O43 - CFD: 13/09/2008 - 16:55:46 - [0] ----D- C:\Program Files\C2Media 
O43 - CFD: 07/03/2012 - 00:04:54 - [1531,025] ----D- C:\Program Files\Common Files 
O43 - CFD: 23/09/2008 - 16:44:34 - [27,723] ----D- C:\Program Files\Crocodile Clips 
O43 - CFD: 25/06/2008 - 13:29:00 - [862,103] ----D- C:\Program Files\CyberLink 
O43 - CFD: 19/03/2011 - 22:32:24 - [0,360] ----D- C:\Program Files\DNA 
O43 - CFD: 22/12/2010 - 11:07:54 - [38,981] ----D- C:\Program Files\EarthView 
O43 - CFD: 09/06/2008 - 23:48:46 - [66,410] ----D- C:\Program Files\EasyBits For Kids 
O43 - CFD: 07/08/2011 - 11:40:02 - [11,311] ----D- C:\Program Files\eMule 
O43 - CFD: 19/03/2011 - 22:32:00 - [97,444] ----D- C:\Program Files\epson 
O43 - CFD: 04/11/2010 - 19:13:36 - [114,305] ----D- C:\Program Files\Epson Software 
O43 - CFD: 04/11/2010 - 19:05:56 - [18,975] ----D- C:\Program Files\EpsonNet 
O43 - CFD: 13/09/2008 - 19:34:36 - [5,742] ----D- C:\Program Files\Evariste 
O43 - CFD: 14/02/2011 - 12:51:36 - [12,310] ----D- C:\Program Files\ffdshow 
O43 - CFD: 13/09/2008 - 10:03:12 - [0] -SH-D- C:\Program Files\Fichiers communs 
O43 - CFD: 18/09/2011 - 15:23:58 - [10,981] ----D- C:\Program Files\FLIR Systems 
O43 - CFD: 19/06/2010 - 16:20:08 - [10,638] ----D- C:\Program Files\Foxit Software 
O43 - CFD: 03/07/2011 - 11:21:32 - [102,328] ----D- C:\Program Files\Google 
O43 - CFD: 06/05/2009 - 16:29:26 - [220,549] ----D- C:\Program Files\Hewlett-Packard 
O43 - CFD: 14/04/2010 - 18:26:58 - [25,242] ----D- C:\Program Files\HotPotatoes6 
O43 - CFD: 27/03/2011 - 11:02:30 - [234,837] ----D- C:\Program Files\HP 
O43 - CFD: 09/06/2008 - 23:05:02 - [373,468] ----D- C:\Program Files\HP Games 
O43 - CFD: 25/06/2008 - 12:54:48 - [36,725] ----D- C:\Program Files\IDT 
O43 - CFD: 06/03/2012 - 23:44:44 - [126,010] --H-D- C:\Program Files\InstallShield Installation Information 
O43 - CFD: 25/06/2008 - 12:47:42 - [0,062] ----D- C:\Program Files\Intel 
O43 - CFD: 21/06/2011 - 19:34:10 - [6,133] ----D- C:\Program Files\Internet Explorer 
O43 - CFD: 10/03/2012 - 00:53:34 - [20,283] ----D- C:\Program Files\iPod 
O43 - CFD: 10/03/2012 - 00:56:34 - [122,578] ----D- C:\Program Files\iTunes 
O43 - CFD: 16/02/2012 - 15:56:00 - [93,584] ----D- C:\Program Files\iTunes(14) 
O43 - CFD: 23/10/2011 - 11:12:54 - [329,755] ----D- C:\Program Files\Java 
O43 - CFD: 22/12/2010 - 15:20:14 - [15,541] ----D- C:\Program Files\JRE 
O43 - CFD: 22/11/2009 - 20:12:52 - [28,914] ----D- C:\Program Files\K-Lite Codec Pack 
O43 - CFD: 13/09/2008 - 13:20:38 - [5,261] ----D- C:\Program Files\Lavalys 
O43 - CFD: 10/03/2012 - 23:11:22 - [45,204] ----D- C:\Program Files\Lavasoft 
O43 - CFD: 19/03/2011 - 22:32:24 - [12,215] ----D- C:\Program Files\MessengerPlus! 3 
O43 - CFD: 13/09/2008 - 17:56:54 - [11,346] ----D- C:\Program Files\Micro Application 
O43 - CFD: 06/07/2010 - 15:08:26 - [0,000] ----D- C:\Program Files\Micro Trivial Pursuit 
O43 - CFD: 21/04/2010 - 10:10:14 - [0,695] ----D- C:\Program Files\Microsoft 
O43 - CFD: 02/11/2006 - 13:37:36 - [88,508] ----D- C:\Program Files\Microsoft Games 
O43 - CFD: 10/12/2008 - 18:08:42 - [535,857] ----D- C:\Program Files\Microsoft Office 
O43 - CFD: 20/11/2011 - 09:57:40 - [37,611] ----D- C:\Program Files\Microsoft Silverlight 
O43 - CFD: 08/03/2009 - 20:34:42 - [1,745] ----D- C:\Program Files\Microsoft SQL Server Compact Edition 
O43 - CFD: 10/12/2008 - 18:08:40 - [0,014] ----D- C:\Program Files\Microsoft Visual Studio 
O43 - CFD: 19/03/2011 - 22:32:24 - [3,699] ----D- C:\Program Files\Microsoft Works 
O43 - CFD: 20/08/2010 - 09:49:10 - [7,789] ----D- C:\Program Files\Microsoft.NET 
O43 - CFD: 20/08/2010 - 12:19:54 - [94,574] ----D- C:\Program Files\Movie Maker 
O43 - CFD: 09/03/2012 - 16:29:32 - [32,094] ----D- C:\Program Files\Mozilla Firefox 
O43 - CFD: 19/03/2011 - 22:32:24 - [113,983] ----D- C:\Program Files\mpc1s 
O43 - CFD: 19/03/2011 - 22:32:24 - [23,146] ----D- C:\Program Files\mpcts 
O43 - CFD: 02/11/2006 - 13:37:36 - [0,025] ----D- C:\Program Files\MSBuild 
O43 - CFD: 08/05/2009 - 15:24:46 - [1,456] ----D- C:\Program Files\MSECache 
O43 - CFD: 13/09/2008 - 13:55:10 - [0] ----D- C:\Program Files\MSXML 4.0 
O43 - CFD: 09/06/2008 - 23:27:10 - [148,293] ----D- C:\Program Files\muvee Technologies 
O43 - CFD: 19/03/2011 - 21:07:54 - [7,104] ---AD- C:\Program Files
ewObjects 
O43 - CFD: 13/09/2008 - 10:10:18 - [20,914] R---D- C:\Program Files\Online Services 
O43 - CFD: 22/12/2010 - 15:19:14 - [0] ----D- C:\Program Files\OpenOffice.org 2.2 
O43 - CFD: 22/12/2010 - 15:20:10 - [368,596] ----D- C:\Program Files\OpenOffice.org 3 
O43 - CFD: 13/09/2008 - 19:27:10 - [3,442] ----D- C:\Program Files\PC Wizard 2008 
O43 - CFD: 19/03/2011 - 22:32:24 - [26,259] ----D- C:\Program Files\PHYSIQUE CHIMIE SECONDE 
O43 - CFD: 16/02/2012 - 15:42:12 - [72,583] ----D- C:\Program Files\QuickTime 
O43 - CFD: 13/09/2008 - 18:00:18 - [43,296] ----D- C:\Program Files\Real 
O43 - CFD: 25/06/2008 - 12:51:22 - [1,474] ----D- C:\Program Files\Realtek 
O43 - CFD: 02/11/2006 - 13:37:36 - [36,066] ----D- C:\Program Files\Reference Assemblies 
O43 - CFD: 13/09/2008 - 13:11:38 - [0,146] ----D- C:\Program Files\Softwin 
O43 - CFD: 30/05/2011 - 22:28:08 - [0] ----D- C:\Program Files\SopCast 
O43 - CFD: 19/03/2011 - 22:32:24 - [9,130] ----D- C:\Program Files\Spybot - Search & Destroy 
O43 - CFD: 08/03/2009 - 20:17:02 - [60,160] ----D- C:\Program Files\Stellarium 
O43 - CFD: 13/09/2008 - 17:18:50 - [33,318] ----D- C:\Program Files\SureThing CD Labeler 5 
O43 - CFD: 25/06/2008 - 12:52:32 - [13,951] ----D- C:\Program Files\Synaptics 
O43 - CFD: 06/03/2012 - 23:51:46 - [0,001] ----D- C:\Program Files\Thomas Wright Consulting 
O43 - CFD: 22/11/2009 - 20:07:06 - [0,002] ----D- C:\Program Files\Total Video Converter 
O43 - CFD: 19/03/2011 - 21:03:34 - [0] ----D- C:\Program Files\Uniblue 
O43 - CFD: 02/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information 
O43 - CFD: 14/12/2009 - 00:55:12 - [0,032] ----D- C:\Program Files\Veoh Networks 
O43 - CFD: 20/12/2008 - 10:11:12 - [59,123] ----D- C:\Program Files\VideoLAN 
O43 - CFD: 13/09/2008 - 10:10:14 - [7,209] ----D- C:\Program Files\Viewpoint 
O43 - CFD: 13/09/2008 - 18:25:30 - [64,378] ----D- C:\Program Files\VistaCodecPack 
O43 - CFD: 19/03/2011 - 22:32:24 - [1,124] ----D- C:\Program Files\vShare 
O43 - CFD: 10/06/2008 - 08:05:04 - [0,970] ----D- C:\Program Files\Windows Calendar 
O43 - CFD: 10/06/2008 - 08:05:04 - [2,633] ----D- C:\Program Files\Windows Collaboration 
O43 - CFD: 10/06/2008 - 08:05:04 - [4,284] ----D- C:\Program Files\Windows Defender 
O43 - CFD: 10/06/2008 - 08:05:04 - [6,756] ----D- C:\Program Files\Windows Journal 
O43 - CFD: 19/03/2011 - 22:32:00 - [127,266] ----D- C:\Program Files\Windows Live 
O43 - CFD: 19/03/2011 - 22:32:24 - [0,234] ----D- C:\Program Files\Windows Live SkyDrive 
O43 - CFD: 21/06/2011 - 19:34:12 - [8,694] ----D- C:\Program Files\Windows Mail 
O43 - CFD: 24/10/2010 - 16:28:10 - [4,291] ----D- C:\Program Files\Windows Media Player 
O43 - CFD: 13/09/2008 - 10:03:12 - [7,577] ----D- C:\Program Files\Windows NT 
O43 - CFD: 10/06/2008 - 08:05:04 - [12,841] ----D- C:\Program Files\Windows Photo Gallery 
O43 - CFD: 10/06/2008 - 08:05:04 - [6,210] ----D- C:\Program Files\Windows Sidebar 
O43 - CFD: 19/03/2011 - 22:32:24 - [3,171] ----D- C:\Program Files\WinRAR 
O43 - CFD: 13/03/2012 - 22:59:22 - [10,095] ----D- C:\Program Files\ZHPDiag 
O43 - CFD: 30/04/2009 - 17:55:50 - [0,005] ----D- C:\Program Files\Common Files\Adobe 
O43 - CFD: 13/09/2008 - 16:20:46 - [9,003] ----D- C:\Program Files\Common Files\Ahead 
O43 - CFD: 13/09/2008 - 10:09:36 - [1,034] ----D- C:\Program Files\Common Files\AOL 
O43 - CFD: 10/03/2012 - 00:53:32 - [118,328] ----D- C:\Program Files\Common Files\Apple 
O43 - CFD: 26/11/2009 - 17:59:18 - [0] ----D- C:\Program Files\Common Files\AVSMedia 
O43 - CFD: 25/01/2011 - 21:33:38 - [700,374] ----D- C:\Program Files\Common Files\BitDefender 
O43 - CFD: 22/11/2009 - 17:25:10 - [1,500] ----D- C:\Program Files\Common Files\Common Share 
O43 - CFD: 11/02/2011 - 20:56:40 - [11,402] ----D- C:\Program Files\Common Files\Data Dynamics 
O43 - CFD: 19/03/2011 - 22:32:22 - [0,089] ----D- C:\Program Files\Common Files\DESIGNER 
O43 - CFD: 04/11/2010 - 19:19:06 - [4,006] ----D- C:\Program Files\Common Files\EPSON 
O43 - CFD: 04/11/2010 - 19:11:20 - [13,507] ----D- C:\Program Files\Common Files\InstallShield 
O43 - CFD: 23/10/2011 - 11:15:04 - [43,243] ----D- C:\Program Files\Common Files\Java 
O43 - CFD: 19/03/2011 - 22:32:22 - [27,638] ----D- C:\Program Files\Common Files\LightScribe 
O43 - CFD: 20/05/2009 - 22:30:32 - [388,841] ----D- C:\Program Files\Common Files\microsoft shared 
O43 - CFD: 09/06/2008 - 23:27:10 - [49,096] ----D- C:\Program Files\Common Files\muvee Technologies 
O43 - CFD: 13/09/2008 - 18:45:28 - [20,688] ----D- C:\Program Files\Common Files\Real 
O43 - CFD: 02/11/2006 - 12:18:34 - [0,003] ----D- C:\Program Files\Common Files\Services 
O43 - CFD: 25/01/2009 - 10:50:20 - [34,294] ----D- C:\Program Files\Common Files\Softwin 
O43 - CFD: 02/11/2006 - 12:18:34 - [39,198] ----D- C:\Program Files\Common Files\SpeechEngines 
O43 - CFD: 19/03/2011 - 22:32:24 - [2,174] ----D- C:\Program Files\Common Files\SureThing Shared 
O43 - CFD: 13/09/2008 - 14:15:56 - [0,496] ----D- C:\Program Files\Common Files\Symantec Shared 
O43 - CFD: 20/05/2009 - 22:27:56 - [42,091] ----D- C:\Program Files\Common Files\System 
O43 - CFD: 08/03/2009 - 20:17:16 - [0] ----D- C:\Program Files\Common Files\Windows Live 
O43 - CFD: 13/09/2008 - 16:46:44 - [18,872] -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller 
O43 - CFD: 19/03/2011 - 22:32:24 - [4,568] ----D- C:\Program Files\Common Files\Wise Installation Wizard 
O43 - CFD: 13/09/2008 - 18:45:36 - [0,336] ----D- C:\Program Files\Common Files\xing shared 
O43 - CFD: 13/09/2008 - 14:41:22 - [0,000] ----D- C:\ProgramData\Adobe 
O43 - CFD: 14/09/2008 - 18:33:58 - [0,000] ----D- C:\ProgramData\Advanced Chemistry Development 
O43 - CFD: 04/01/2010 - 17:32:46 - [13,007] ----D- C:\ProgramData\AOL 
O43 - CFD: 04/01/2010 - 17:32:48 - [0,005] ----D- C:\ProgramData\AOL OCP 
O43 - CFD: 16/02/2012 - 15:35:26 - [392,183] ----D- C:\ProgramData\Apple 
O43 - CFD: 13/09/2008 - 23:45:52 - [72,057] ----D- C:\ProgramData\Apple Computer 
O43 - CFD: 22/11/2009 - 17:33:50 - [0] ----D- C:\ProgramData\AVS4YOU 
O43 - CFD: 16/02/2012 - 16:00:50 - [0] ----D- C:\ProgramData\Babylon 
O43 - CFD: 25/01/2011 - 21:42:24 - [4,900] ----D- C:\ProgramData\BitDefender 
O43 - CFD: 20/04/2010 - 22:36:22 - [0,006] ----D- C:\ProgramData\BOONTY 
O43 - CFD: 13/09/2008 - 10:03:12 - [0] -SH-D- C:\ProgramData\Bureau 
O43 - CFD: 20/04/2009 - 16:36:52 - [0,033] ----D- C:\ProgramData\CyberLink 
O43 - CFD: 16/07/2010 - 11:47:18 - [0,002] ----D- C:\ProgramData\DAEMON Tools Lite 
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop 
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents 
O43 - CFD: 27/01/2009 - 15:37:32 - [0] ----D- C:\ProgramData\eMule 
O43 - CFD: 04/11/2010 - 19:18:06 - [8,399] ----D- C:\ProgramData\EPSON 
O43 - CFD: 13/09/2008 - 10:03:12 - [0] -SH-D- C:\ProgramData\Favoris 
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites 
O43 - CFD: 03/07/2011 - 11:32:58 - [5,396] ----D- C:\ProgramData\Google 
O43 - CFD: 15/10/2008 - 15:53:50 - [48,550] ----D- C:\ProgramData\Hewlett-Packard 
O43 - CFD: 05/02/2010 - 09:57:56 - [0,065] ----D- C:\ProgramData\HP 
O43 - CFD: 10/03/2012 - 23:11:02 - [233,649] ----D- C:\ProgramData\Lavasoft 
O43 - CFD: 13/09/2008 - 10:46:40 - [0,000] ----D- C:\ProgramData\LightScribe 
O43 - CFD: 13/09/2008 - 10:03:12 - [0] -SH-D- C:\ProgramData\Menu Démarrer 
O43 - CFD: 19/03/2011 - 22:32:00 - [539,617] -S--D- C:\ProgramData\Microsoft 
O43 - CFD: 19/11/2011 - 23:34:12 - [0,356] ----D- C:\ProgramData\Microsoft Help 
O43 - CFD: 13/09/2008 - 10:03:12 - [0] -SH-D- C:\ProgramData\Modèles 
O43 - CFD: 13/09/2008 - 16:42:16 - [5,139] ----D- C:\ProgramData\MSN Messenger 6.2.0137 
O43 - CFD: 09/06/2008 - 23:27:06 - [0] ----D- C:\ProgramData\muvee Technologies 
O43 - CFD: 27/01/2009 - 13:34:44 - [4,332] ----D- C:\ProgramData\NBPROF 
O43 - CFD: 30/05/2010 - 13:55:10 - [0,000] ----D- C:\ProgramData\Norton 
O43 - CFD: 30/05/2010 - 12:37:56 - [0,164] ----D- C:\ProgramData\NortonInstaller 
O43 - CFD: 03/03/2010 - 16:34:30 - [0,223] ----D- C:\ProgramData\NVIDIA 
O43 - CFD: 20/04/2010 - 23:07:04 - [0,000] ----D- C:\ProgramData\PopCap Games 
O43 - CFD: 22/11/2009 - 17:47:50 - [0,000] ----D- C:\ProgramData\QuickMediaConverter 
O43 - CFD: 13/09/2008 - 14:47:00 - [0,010] ----D- C:\ProgramData\QuickTime 
O43 - CFD: 07/03/2012 - 00:04:54 - [0] ----D- C:\ProgramData\SpeedyPC Software 
O43 - CFD: 09/03/2012 - 22:45:54 - [11,601] ----D- C:\ProgramData\Spybot - Search & Destroy 
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu 
O43 - CFD: 12/03/2010 - 09:59:26 - [0,000] ----D- C:\ProgramData\Sun 
O43 - CFD: 30/05/2010 - 12:37:58 - [0,002] ----D- C:\ProgramData\Symantec 
O43 - CFD: 02/11/2006 - 14:02:06 - [0] -SH-D- C:\ProgramData\Templates 
O43 - CFD: 04/11/2010 - 19:15:20 - [3,896] ----D- C:\ProgramData\UDL 
O43 - CFD: 13/09/2008 - 10:10:14 - [0,004] ----D- C:\ProgramData\Viewpoint 
O43 - CFD: 15/05/2010 - 20:29:24 - [1240,829] ----D- C:\ProgramData\WildTangent 
O43 - CFD: 23/06/2010 - 16:08:44 - [0] ----D- C:\ProgramData\WindowsSearch 
O43 - CFD: 13/09/2008 - 16:45:08 - [0,377] ----D- C:\ProgramData\WLInstaller 
O43 - CFD: 20/04/2010 - 20:49:20 - [8,158] ----D- C:\ProgramData\Zylom 
O43 - CFD: 29/03/2009 - 19:05:38 - [0,003] ----D- C:\ProgramData\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} 
O43 - CFD: 09/06/2008 - 23:40:00 - [6,585] ----D- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} 
O43 - CFD: 25/04/2010 - 18:42:38 - [0,516] ----D- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 
O43 - CFD: 20/09/2009 - 18:42:58 - [0,002] ----D- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD} 
O43 - CFD: 03/05/2009 - 18:34:14 - [0,002] ----D- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} 
O43 - CFD: 22/11/2009 - 17:47:50 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Actecom 
O43 - CFD: 13/09/2008 - 14:38:18 - [7,494] ----D- C:\Users\Guillaume\AppData\Roaming\Adobe 
O43 - CFD: 15/09/2008 - 10:02:28 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\AdobeUM 
O43 - CFD: 22/11/2009 - 20:04:46 - [0,092] ----D- C:\Users\Guillaume\AppData\Roaming\aHisoft 
O43 - CFD: 16/02/2012 - 16:00:56 - [0,786] ----D- C:\Users\Guillaume\AppData\Roaming\Apple Computer 
O43 - CFD: 16/06/2010 - 21:32:38 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Aspell 
O43 - CFD: 22/11/2009 - 17:33:52 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\AVS4YOU 
O43 - CFD: 16/02/2012 - 16:00:50 - [0,002] ----D- C:\Users\Guillaume\AppData\Roaming\Babylon 
O43 - CFD: 25/01/2011 - 21:34:26 - [0,121] ----D- C:\Users\Guillaume\AppData\Roaming\BitDefender 
O43 - CFD: 11/03/2012 - 23:40:08 - [10,436] ----D- C:\Users\Guillaume\AppData\Roaming\BitTorrent 
O43 - CFD: 02/05/2010 - 20:31:00 - [0,000] ----D- C:\Users\Guillaume\AppData\Roaming\BitZipper 
O43 - CFD: 16/07/2010 - 11:29:28 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\CyberLink 
O43 - CFD: 16/07/2010 - 11:57:02 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\DAEMON Tools Lite 
O43 - CFD: 19/12/2010 - 15:35:40 - [26,644] ----D- C:\Users\Guillaume\AppData\Roaming\DeskSoft 
O43 - CFD: 06/03/2012 - 23:29:58 - [0,000] ----D- C:\Users\Guillaume\AppData\Roaming\DriverCure 
O43 - CFD: 29/04/2009 - 12:15:24 - [0] --H-D- C:\Users\Guillaume\AppData\Roaming\drivers 
O43 - CFD: 10/03/2012 - 00:34:34 - [0,000] ----D- C:\Users\Guillaume\AppData\Roaming\dvdcss 
O43 - CFD: 29/10/2008 - 11:00:02 - [0,035] ----D- C:\Users\Guillaume\AppData\Roaming\eMule 
O43 - CFD: 06/11/2010 - 23:43:42 - [0,003] ----D- C:\Users\Guillaume\AppData\Roaming\EPSON 
O43 - CFD: 11/02/2011 - 17:00:38 - [0,002] ----D- C:\Users\Guillaume\AppData\Roaming\FLIR Systems 
O43 - CFD: 10/03/2012 - 14:59:20 - [0,000] ----D- C:\Users\Guillaume\AppData\Roaming\Foxit Software 
O43 - CFD: 22/11/2009 - 17:42:02 - [0,049] ----D- C:\Users\Guillaume\AppData\Roaming\FreeFLVConverter 
O43 - CFD: 06/03/2012 - 23:46:18 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\GetRightToGo 
O43 - CFD: 13/09/2008 - 16:42:06 - [0,079] ----D- C:\Users\Guillaume\AppData\Roaming\Google 
O43 - CFD: 05/11/2008 - 16:58:12 - [0,296] ----D- C:\Users\Guillaume\AppData\Roaming\Hewlett-Packard 
O43 - CFD: 05/02/2010 - 10:06:56 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\HPAppData 
O43 - CFD: 03/04/2011 - 11:23:32 - [0,019] ----D- C:\Users\Guillaume\AppData\Roaming\HpUpdate 
O43 - CFD: 20/04/2010 - 21:07:06 - [0,001] ----D- C:\Users\Guillaume\AppData\Roaming\Identities 
O43 - CFD: 13/09/2008 - 15:59:26 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\InstallShield 
O43 - CFD: 13/09/2008 - 14:32:14 - [8,292] ----D- C:\Users\Guillaume\AppData\Roaming\Lavasoft 
O43 - CFD: 13/09/2008 - 10:11:12 - [0,214] ----D- C:\Users\Guillaume\AppData\Roaming\Macromedia 
O43 - CFD: 02/11/2006 - 13:37:36 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Media Center Programs 
O43 - CFD: 13/09/2008 - 21:04:20 - [0,000] ----D- C:\Users\Guillaume\AppData\Roaming\Media Player Classic 
O43 - CFD: 06/03/2012 - 23:38:44 - [37,627] -S--D- C:\Users\Guillaume\AppData\Roaming\Microsoft 
O43 - CFD: 22/01/2009 - 20:08:36 - [8,265] ----D- C:\Users\Guillaume\AppData\Roaming\Mozilla 
O43 - CFD: 22/12/2010 - 15:23:26 - [2,425] ----D- C:\Users\Guillaume\AppData\Roaming\OpenOffice.org 
O43 - CFD: 22/12/2010 - 15:09:32 - [2,730] ----D- C:\Users\Guillaume\AppData\Roaming\OpenOffice.org2 
O43 - CFD: 13/09/2008 - 18:52:08 - [8,768] ----D- C:\Users\Guillaume\AppData\Roaming\Real 
O43 - CFD: 30/09/2010 - 17:56:24 - [0,031] ----D- C:\Users\Guillaume\AppData\Roaming\Regressi 
O43 - CFD: 06/03/2012 - 23:29:58 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\SpeedyPC Software 
O43 - CFD: 08/03/2009 - 20:18:08 - [0,009] ----D- C:\Users\Guillaume\AppData\Roaming\Stellarium 
O43 - CFD: 30/05/2011 - 22:29:04 - [0,177] ----D- C:\Users\Guillaume\AppData\Roaming\StreamTorrent 
O43 - CFD: 13/09/2008 - 10:14:04 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Symantec 
O43 - CFD: 11/02/2011 - 16:58:58 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\ThermaCAM Connect 3 
O43 - CFD: 13/07/2010 - 12:01:58 - [1,326] ----D- C:\Users\Guillaume\AppData\Roaming\TorrentBitch 
O43 - CFD: 19/03/2011 - 21:04:24 - [0,460] ----D- C:\Users\Guillaume\AppData\Roaming\Uniblue 
O43 - CFD: 16/01/2009 - 19:33:04 - [0,002] ----D- C:\Users\Guillaume\AppData\Roaming\uTorrent 
O43 - CFD: 09/03/2012 - 22:45:58 - [0,426] ----D- C:\Users\Guillaume\AppData\Roaming\vlc 
O43 - CFD: 08/03/2009 - 23:20:56 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Windows Live Writer 
O43 - CFD: 20/04/2010 - 21:07:06 - [0] ----D- C:\Users\Guillaume\AppData\Roaming\Zylom 
O43 - CFD: 13/03/2012 - 22:21:58 - [0,002] -SH-D- C:\Users\Guillaume\AppData\Local\1cf6efbe 
O43 - CFD: 13/09/2008 - 14:39:26 - [0,102] ----D- C:\Users\Guillaume\AppData\Local\Adobe 
O43 - CFD: 13/09/2008 - 13:11:40 - [0,014] ----D- C:\Users\Guillaume\AppData\Local\AOL 
O43 - CFD: 04/01/2010 - 17:32:46 - [0,086] ----D- C:\Users\Guillaume\AppData\Local\AOL OCP 
O43 - CFD: 13/09/2008 - 15:05:58 - [2,250] ----D- C:\Users\Guillaume\AppData\Local\Apple 
O43 - CFD: 22/11/2009 - 18:04:18 - [8,418] ----D- C:\Users\Guillaume\AppData\Local\Apple Computer 
O43 - CFD: 13/09/2008 - 10:06:58 - [0] -SH-D- C:\Users\Guillaume\AppData\Local\Application Data 
O43 - CFD: 14/09/2008 - 14:56:40 - [0] ----D- C:\Users\Guillaume\AppData\Local\Apps 
O43 - CFD: 16/02/2012 - 16:00:52 - [68,751] ----D- C:\Users\Guillaume\AppData\Local\Babylon 
O43 - CFD: 05/01/2011 - 23:51:22 - [0] ----D- C:\Users\Guillaume\AppData\Local\Conduit 
O43 - CFD: 11/02/2011 - 16:54:32 - [2,536] ----D- C:\Users\Guillaume\AppData\Local\Downloaded Installations 
O43 - CFD: 03/07/2009 - 09:23:46 - [9,314] ----D- C:\Users\Guillaume\AppData\Local\eMule 
O43 - CFD: 09/03/2012 - 22:57:26 - [239,323] ----D- C:\Users\Guillaume\AppData\Local\Google 
O43 - CFD: 29/10/2008 - 16:37:10 - [0,002] ----D- C:\Users\Guillaume\AppData\Local\Hewlett-Packard 
O43 - CFD: 13/09/2008 - 10:06:58 - [0] -SH-D- C:\Users\Guillaume\AppData\Local\Historique 
O43 - CFD: 16/05/2010 - 14:37:12 - [0,001] ----D- C:\Users\Guillaume\AppData\Local\Iceni 
O43 - CFD: 26/08/2011 - 14:58:36 - [-793,117] ----D- C:\Users\Guillaume\AppData\Local\Microsoft 
O43 - CFD: 31/07/2010 - 14:09:04 - [1,132] ----D- C:\Users\Guillaume\AppData\Local\Microsoft Games 
O43 - CFD: 24/03/2009 - 22:38:40 - [0,092] ----D- C:\Users\Guillaume\AppData\Local\Microsoft Help 
O43 - CFD: 26/08/2011 - 14:59:14 - [0,002] ----D- C:\Users\Guillaume\AppData\Local\Microsoft_Corporation 
O43 - CFD: 13/09/2008 - 17:19:10 - [0,657] ----D- C:\Users\Guillaume\AppData\Local\MicroVision Applications 
O43 - CFD: 13/09/2008 - 18:04:12 - [60,617] ----D- C:\Users\Guillaume\AppData\Local\Mozilla 
O43 - CFD: 19/03/2011 - 21:02:58 - [0] ----D- C:\Users\Guillaume\AppData\Local\PackageAware 
O43 - CFD: 09/03/2012 - 22:45:56 - [0,217] ----D- C:\Users\Guillaume\AppData\Local\QuickPlay 
O43 - CFD: 13/03/2012 - 23:00:56 - [0,053] ----D- C:\Users\Guillaume\AppData\Local\Temp 
O43 - CFD: 13/09/2008 - 10:06:58 - [0] -SH-D- C:\Users\Guillaume\AppData\Local\Temporary Internet Files 
O43 - CFD: 13/09/2008 - 14:53:54 - [10,405] ----D- C:\Users\Guillaume\AppData\Local\VirtualStore 
O43 - CFD: 22/11/2009 - 17:46:58 - [0,000] ----D- C:\Users\Guillaume\AppData\Local\WDSetup 
O43 - CFD: 06/07/2010 - 14:08:44 - [0] ----D- C:\Users\Guillaume\AppData\Local\Windows Live 
O43 - CFD: 08/03/2009 - 23:21:04 - [0,312] ----D- C:\Users\Guillaume\AppData\Local\Windows Live Writer 
~ Scan Program Folder in 02mn 31s 



---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) 
O44 - LFC:[MD5.DCE2EE282C527B98274F2834F5787658] - 13/03/2012 - 23:01:11 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1231623] 
O44 - LFC:[MD5.74F95AADD8ED9EA44714881AA29306C9] - 13/03/2012 - 19:15:56 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] 
O44 - LFC:[MD5.42B6E1707E8B320DAADDDBEFF753A462] - 13/03/2012 - 11:14:17 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1503662] 
O44 - LFC:[MD5.2EFF9E2C75D09BC0E19C087DC33841EB] - 13/03/2012 - 11:14:17 ---A- . (...) -- C:\Windows\system32\perfc009.dat [104914] 
O44 - LFC:[MD5.CE896AE50D79A0AC168EDDF2FC0F0E32] - 13/03/2012 - 11:14:17 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [127504] 
O44 - LFC:[MD5.3F2B62380554B271F8E6AEB267ADDAD7] - 13/03/2012 - 11:14:17 ---A- . (...) -- C:\Windows\system32\perfh009.dat [598900] 
O44 - LFC:[MD5.024D30ADBE457F64946E7249A6E047FD] - 13/03/2012 - 11:14:17 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [681798] 
O44 - LFC:[MD5.E2E014A571CFCCC4F32A7F1F715E4A41] - 11/03/2012 - 21:36:54 --HA- . (...) -- C:\aaw7boot.cmd [264] 
O44 - LFC:[MD5.D597E001B0C6D6537A2DD519945B6135] - 11/03/2012 - 18:51:58 ---A- . (...) -- C:\Windows\setupact.log [143371] 
O44 - LFC:[MD5.0505DA5D357F18A5D42FC5DEDE6BC9A0] - 10/03/2012 - 23:18:41 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\Windows\system32\drivers\SBREDrv.sys [101720] 
O44 - LFC:[MD5.7A3EA5CA1AE2C8D94DCA120E0BEA0B02] - 10/03/2012 - 23:18:39 ---A- . (...) -- C:\Windows\system32\lsdelete.exe [16432] 
O44 - LFC:[MD5.336ABE8721CBC3110F1C6426DA633417] - 10/03/2012 - 23:11:39 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\Windows\system32\drivers\Lbd.sys [64512] 
O44 - LFC:[MD5.B1EB927AB1052FD10361DDA9324A5C9E] - 10/03/2012 - 13:26:50 ---A- . (...) -- C:\Windows\bdagent.INI [121] 
O44 - LFC:[MD5.EDB98905A97720982611F8F4DA404973] - 10/03/2012 - 13:26:09 ---A- . (...) -- C:\Windows\system32\ashttpstats.csv [52] 
O44 - LFC:[MD5.2370172B5DC7174688D2108895FD0ECB] - 10/03/2012 - 13:26:09 ---A- . (...) -- C:\bdlog.txt [132576] 
O44 - LFC:[MD5.8DF1306E26D9AEA03618F8CD8B1C4A76] - 09/03/2012 - 22:24:16 ---A- . (...) -- C:\Windows\PFRO.log [1424778] 
O44 - LFC:[MD5.B0719E500E857806AB2320C8477D6879] - 09/03/2012 - 21:08:48 ---A- . (...) -- C:\TDSSKiller.2.7.19.0_09.03.2012_20.52.56_log.txt [152570] 
O44 - LFC:[MD5.551599BC4F22F2295602445BECF23211] - 09/03/2012 - 20:41:43 ---A- . (...) -- C:\TDSSKiller.2.7.19.0_09.03.2012_20.33.16_log.txt [79436] 
O44 - LFC:[MD5.26B0F12F9A4C267AF5B2DA35F87A6EFA] - 15/02/2012 - 16:56:25 ---A- . (...) -- C:\Windows\system32\DOErrors.log [52] 
~ Scan Files in 00mn 37s 



---\ Export de clé d'application autorisée (O47) 
O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\bittorrent.exe 
~ Scan Keys in 00mn 00s 



---\ Déni du service (Local Security Authority) (O48) 
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll 
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll 
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll 
~ Scan Keys in 00mn 00s 



---\ Contrôle du Safe Boot (CSB) (O49) 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\system32\Drivers\Wdf01000.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network
siproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers
siproxy.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Driversdpencdd.sys 
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys 
O49 - CSB:Control Safe Boot H

Rennes8 · Answer

et voila la fin :
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\system32\Drivers\Wdf01000.sys
~ Scan CSB in 00mn 00s



---\ MountPoints2 Shell Key (O51)
O51 - MPSK:{37a65ad3-1ad6-11df-860f-001eec7aaa9f}\AutoRun\command. (...) -- F:\loader.exe (.not file.)
O51 - MPSK:{451cc9a2-a865-11e0-b9e9-001eec7aaa9f}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)
O51 - MPSK:{e4de8f2d-9ffc-11dd-ad23-001eec7aaa9f}\AutoRun\command - Clé orpheline
O51 - MPSK:{e57a333e-dfe4-11de-929a-001eec7aaa9f}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)
~ Scan Keys in 00mn 00s



---\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"vidc.i420"="i263_32.drv" . (.Intel Corporation - Intel I.263 Video Driver 2.55.016.) -- C:\Windows\System32\i263_32.drv
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\Windows\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\Windows\System32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.I263"="I263_32.drv" . (.Intel Corporation - Intel I.263 Video Driver 2.55.016.) -- C:\Windows\System32\i263_32.drv
O52 - TDSD: \Drivers32\"VIDC.IV41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\Windows\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\Windows\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\divx.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\Windows\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \Drivers32\"msacm.g723"="g723.acm" . (...) -- (.not file.)
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \drivers.desc\"C:\Windows\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\Windows\System32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® Video 5,10" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\Windows\System32\ir50_32.dll
O52 - TDSD: \drivers.desc\"divx.dll"="DivX Pro 6.5.0.53" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC3 ACM Decompressor" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\Windows\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\Windows\System32\ff_vfw.dll
~ Scan Keys in 00mn 01s



---\ ShareTools MSconfig StartupReg (O53) (None)

---\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
~ Scan Keys in 00mn 00s



---\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ Scan Keys in 00mn 00s



---\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.AEF9EE4451D5C46370142CB06D0F3591] - 07/08/2008 - 13:31:52 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\Windows\system32\drivers\Accelerometer.sys   [34608]
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys   [422968]
O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys   [300600]
O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys   [101432]
O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys   [149560]
O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys   [79416]
O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys   [79928]
O58 - SDL:[MD5.67C2A47DB7190673350A3F9F5A1507CB] - 03/02/2010 - 13:57:36 ---A- . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender Active Virus Control Filter Driver.) -- C:\Windows\system32\drivers\bdfm.sys   [153448]
O58 - SDL:[MD5.2E82EDC5E70163B2F72F7011E251EA63] - 25/01/2011 - 21:51:30 ---A- . (.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) -- C:\Windows\system32\drivers\BdfNdisf6.sys   [72784]
O58 - SDL:[MD5.A21A4A0E6BDF0C2BE0FABFA16D8C8F76] - 22/02/2010 - 14:58:40 ---A- . (.BitDefender - BitDefender AntiVirus FS filter driver.) -- C:\Windows\system32\drivers\bdfsfltr.sys   [291352]
O58 - SDL:[MD5.CA54223D5A5B6A7E3559CB100A0B5E57] - 03/02/2010 - 13:56:32 ---A- . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender AntiVirus Hypervisor driver.) -- C:\Windows\system32\drivers\bdhv.sys   [106464]
O58 - SDL:[MD5.375CD0B9F433465EC6F50D4DF44E9448] - 19/01/2010 - 19:32:40 ---A- . (.BitDefender - FileVault Disk Driver.) -- C:\Windows\system32\drivers\BDVEDISK.sys   [85128]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys   [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys   [5248]
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys   [71808]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys   [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys   [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys   [11904]
O58 - SDL:[MD5.B0F395AF1F5154DAE91A9E9358B7113D] - 14/04/2011 - 15:24:14 ---A- . (...) -- C:\Windows\system32\drivers\dfsc.sys   [75264]
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys   [71272]
O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys   [118784]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys   [342584]
O58 - SDL:[MD5.4CD6B056C5FD9E97C06FE74C81479517] - 24/01/2008 - 14:23:12 ---A- . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome.) -- C:\Windows\system32\drivers\enecir.sys   [52736]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys   [26600]
O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys   [40504]
O58 - SDL:[MD5.64637B65C90DF48C94BB9346AFB3AC61] - 07/08/2008 - 13:42:12 ---A- . (.Hewlett-Packard Corporation - HP Disk Filter - SATA/RAID.) -- C:\Windows\system32\drivers\hpdskflt.sys   [25392]
O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 16:12:04 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\system32\drivers\HpqKbFiltr.sys   [16768]
O58 - SDL:[MD5.115C0933B3ED51DFBEC4449348C8065B] - 11/07/2007 - 09:30:22 ---A- . (.Hewlett-Packard Development Company, L.P. - HP Remote Control HID Device.) -- C:\Windows\system32\drivers\HpqRemHid.sys   [7168]
O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys   [235064]
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys   [41576]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys   [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys   [35944]
O58 - SDL:[MD5.DEDB6CC1B166928A8F3F68DEF1766DB0] - 11/04/2008 - 18:55:04 ---A- . (.JMicron Technology Corp. - JMicron JMB38X Memory Card Reader Driver.) -- C:\Windows\system32\drivers\jmcr.sys   [84240]
O58 - SDL:[MD5.336ABE8721CBC3110F1C6426DA633417] - 23/12/2011 - 07:12:12 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\Windows\system32\drivers\Lbd.sys   [64512]
O58 - SDL:[MD5.5353218B3265E3B8190335059F697A11] - 26/05/2005 - 10:01:18 ---A- . (.LG Electronics Inc. - lgusbbus.sys.) -- C:\Windows\system32\drivers\lgusbbus.sys   [21344]
O58 - SDL:[MD5.7DD3EEFC62A1EF44E5F940FA651ED9ED] - 26/05/2005 - 10:01:36 ---A- . (.LG Electronics Inc. - lgusbdiag.sys.) -- C:\Windows\system32\drivers\lgusbdiag.sys   [38144]
O58 - SDL:[MD5.083031A78822ECCBD7510BCCD3E20D4C] - 24/06/2005 - 17:36:16 ---A- . (.LG Electronics Inc. - lgusbmodem.sys.) -- C:\Windows\system32\drivers\lgusbmodem.sys   [39036]
O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys   [96312]
O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys   [89656]
O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys   [96312]
O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys   [31288]
O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys   [386616]
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys   [33384]
O58 - SDL:[MD5.8DE67BD902095A13329FD82C85A1FA09] - 17/11/2008 - 15:40:22 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw5v32.sys   [3668480]
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers
frd960.sys   [45160]
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers
trigdigi.sys   [20608]
O58 - SDL:[MD5.F972DC046C374A9E02F2DFBE74EBB203] - 14/05/2008 - 03:09:00 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers
vhda32v.sys   [43552]
O58 - SDL:[MD5.9DAC05D828E56801FD6CE5FDFCED64AF] - 24/07/2009 - 04:01:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 186.44.) -- C:\Windows\system32\drivers
vlddmkm.sys   [9791072]
O58 - SDL:[MD5.1657F3FBD9061526C14FF37E79306F98] - 02/11/2006 - 08:30:56 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers
vm60x32.sys   [429056]
O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers
vraid.sys   [102968]
O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers
vstor.sys   [45112]
O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys   [1122360]
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys   [106088]
O58 - SDL:[MD5.7157E70A90CCE49DEB8885D23A073A39] - 15/04/2008 - 11:05:08 ---A- . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys   [118784]
O58 - SDL:[MD5.0505DA5D357F18A5D42FC5DEDE6BC9A0] - 10/03/2012 - 23:18:41 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\Windows\system32\drivers\SBREDrv.sys   [101720]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys   [20480]
O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys   [74808]
O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/07/2010 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys   [691696]
O58 - SDL:[MD5.E69A606872650B46DE54EC15DCC93529] - 21/07/2009 - 22:33:32 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\system32\drivers\stwrt.sys   [409088]
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys   [35944]
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys   [31848]
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys   [34920]
O58 - SDL:[MD5.F5D926807BD9BC0AF68F9376144DE425] - 28/03/2008 - 01:06:00 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys   [199472]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys   [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys   [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys   [115816]
O58 - SDL:[MD5.83CAFCB53201BBAC04D822F32438E244] - 10/05/2011 - 07:06:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys   [42496]
O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys   [130616]
O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS   [200704]
O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 21/01/2008 - 03:23:23 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS   [654336]
O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS   [987648]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS   [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys   [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS   [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS   [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS   [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS   [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS   [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS   [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS   [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS   [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS   [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS   [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS   [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS   [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS   [34672]
~ Scan Drivers in 00mn 19s

Rennes8 · Answer

voila la suite :
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - WDF dynamique.) -- C:\Windows\system32\Drivers\Wdf01000.sys
~ Scan CSB in 00mn 00s



---\ MountPoints2 Shell Key (O51)
O51 - MPSK:{37a65ad3-1ad6-11df-860f-001eec7aaa9f}\AutoRun\command. (...) -- F:\loader.exe (.not file.)
O51 - MPSK:{451cc9a2-a865-11e0-b9e9-001eec7aaa9f}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)
O51 - MPSK:{e4de8f2d-9ffc-11dd-ad23-001eec7aaa9f}\AutoRun\command - Clé orpheline
O51 - MPSK:{e57a333e-dfe4-11de-929a-001eec7aaa9f}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.)
~ Scan Keys in 00mn 00s



---\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"vidc.i420"="i263_32.drv" . (.Intel Corporation - Intel I.263 Video Driver 2.55.016.) -- C:\Windows\System32\i263_32.drv
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\Windows\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\Windows\System32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.I263"="I263_32.drv" . (.Intel Corporation - Intel I.263 Video Driver 2.55.016.) -- C:\Windows\System32\i263_32.drv
O52 - TDSD: \Drivers32\"VIDC.IV41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\Windows\System32\ir41_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\Windows\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"VIDC.DIVX"="divx.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\System32\divx.dll
O52 - TDSD: \Drivers32\"VIDC.YV12"="yv12vfw.dll" . (.www.helixcommunity.org - Helix YV12 YUV Codec.) -- C:\Windows\System32\yv12vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\lameACM.acm
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\Windows\System32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.vorbis"="vorbis.acm" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \Drivers32\"msacm.g723"="g723.acm" . (...) -- (.not file.)
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \drivers.desc\"C:\Windows\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\Windows\System32\iac25_32.ax
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® Video 5,10" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\Windows\System32\ir50_32.dll
O52 - TDSD: \drivers.desc\"divx.dll"="DivX Pro 6.5.0.53" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.98" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC3 ACM Decompressor" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\ac3acm.acm
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\Windows\System32\sl_anet.acm
O52 - TDSD: \drivers.desc\"vorbis.acm"="Ogg Vorbis Audio CODEC" . (.HMS http://hp.vector.co.jp/authors/VA012897 - Ogg Vorbis CODEC for MSACM.) -- C:\Windows\System32\vorbis.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\Windows\System32\ff_vfw.dll
~ Scan Keys in 00mn 01s



---\ ShareTools MSconfig StartupReg (O53) (None)

---\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll
~ Scan Keys in 00mn 00s



---\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ Scan Keys in 00mn 00s



---\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.AEF9EE4451D5C46370142CB06D0F3591] - 07/08/2008 - 13:31:52 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\Windows\system32\drivers\Accelerometer.sys   [34608]
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys   [422968]
O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys   [300600]
O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys   [101432]
O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys   [149560]
O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys   [79416]
O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys   [79928]
O58 - SDL:[MD5.67C2A47DB7190673350A3F9F5A1507CB] - 03/02/2010 - 13:57:36 ---A- . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender Active Virus Control Filter Driver.) -- C:\Windows\system32\drivers\bdfm.sys   [153448]
O58 - SDL:[MD5.2E82EDC5E70163B2F72F7011E251EA63] - 25/01/2011 - 21:51:30 ---A- . (.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) -- C:\Windows\system32\drivers\BdfNdisf6.sys   [72784]
O58 - SDL:[MD5.A21A4A0E6BDF0C2BE0FABFA16D8C8F76] - 22/02/2010 - 14:58:40 ---A- . (.BitDefender - BitDefender AntiVirus FS filter driver.) -- C:\Windows\system32\drivers\bdfsfltr.sys   [291352]
O58 - SDL:[MD5.CA54223D5A5B6A7E3559CB100A0B5E57] - 03/02/2010 - 13:56:32 ---A- . (.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender AntiVirus Hypervisor driver.) -- C:\Windows\system32\drivers\bdhv.sys   [106464]
O58 - SDL:[MD5.375CD0B9F433465EC6F50D4DF44E9448] - 19/01/2010 - 19:32:40 ---A- . (.BitDefender - FileVault Disk Driver.) -- C:\Windows\system32\drivers\BDVEDISK.sys   [85128]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys   [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys   [5248]
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys   [71808]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys   [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys   [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys   [11904]
O58 - SDL:[MD5.B0F395AF1F5154DAE91A9E9358B7113D] - 14/04/2011 - 15:24:14 ---A- . (...) -- C:\Windows\system32\drivers\dfsc.sys   [75264]
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys   [71272]
O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys   [118784]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys   [342584]
O58 - SDL:[MD5.4CD6B056C5FD9E97C06FE74C81479517] - 24/01/2008 - 14:23:12 ---A- . (.ENE TECHNOLOGY INC. - ENE CIR Driver for eHome.) -- C:\Windows\system32\drivers\enecir.sys   [52736]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys   [26600]
O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys   [40504]
O58 - SDL:[MD5.64637B65C90DF48C94BB9346AFB3AC61] - 07/08/2008 - 13:42:12 ---A- . (.Hewlett-Packard Corporation - HP Disk Filter - SATA/RAID.) -- C:\Windows\system32\drivers\hpdskflt.sys   [25392]
O58 - SDL:[MD5.35956140E686D53BF676CF0C778880FC] - 18/06/2007 - 16:12:04 ---A- . (.Hewlett-Packard Development Company, L.P. - HpqKbFiltr Keyboard Filter Driver.) -- C:\Windows\system32\drivers\HpqKbFiltr.sys   [16768]
O58 - SDL:[MD5.115C0933B3ED51DFBEC4449348C8065B] - 11/07/2007 - 09:30:22 ---A- . (.Hewlett-Packard Development Company, L.P. - HP Remote Control HID Device.) -- C:\Windows\system32\drivers\HpqRemHid.sys   [7168]
O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys   [235064]
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys   [41576]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys   [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys   [35944]
O58 - SDL:[MD5.DEDB6CC1B166928A8F3F68DEF1766DB0] - 11/04/2008 - 18:55:04 ---A- . (.JMicron Technology Corp. - JMicron JMB38X Memory Card Reader Driver.) -- C:\Windows\system32\drivers\jmcr.sys   [84240]
O58 - SDL:[MD5.336ABE8721CBC3110F1C6426DA633417] - 23/12/2011 - 07:12:12 ---A- . (.Lavasoft AB - Boot Driver.) -- C:\Windows\system32\drivers\Lbd.sys   [64512]
O58 - SDL:[MD5.5353218B3265E3B8190335059F697A11] - 26/05/2005 - 10:01:18 ---A- . (.LG Electronics Inc. - lgusbbus.sys.) -- C:\Windows\system32\drivers\lgusbbus.sys   [21344]
O58 - SDL:[MD5.7DD3EEFC62A1EF44E5F940FA651ED9ED] - 26/05/2005 - 10:01:36 ---A- . (.LG Electronics Inc. - lgusbdiag.sys.) -- C:\Windows\system32\drivers\lgusbdiag.sys   [38144]
O58 - SDL:[MD5.083031A78822ECCBD7510BCCD3E20D4C] - 24/06/2005 - 17:36:16 ---A- . (.LG Electronics Inc. - lgusbmodem.sys.) -- C:\Windows\system32\drivers\lgusbmodem.sys   [39036]
O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys   [96312]
O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys   [89656]
O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys   [96312]
O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys   [31288]
O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys   [386616]
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys   [33384]
O58 - SDL:[MD5.8DE67BD902095A13329FD82C85A1FA09] - 17/11/2008 - 15:40:22 ---A- . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\system32\drivers\NETw5v32.sys   [3668480]
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers
frd960.sys   [45160]
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers
trigdigi.sys   [20608]
O58 - SDL:[MD5.F972DC046C374A9E02F2DFBE74EBB203] - 14/05/2008 - 03:09:00 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers
vhda32v.sys   [43552]
O58 - SDL:[MD5.9DAC05D828E56801FD6CE5FDFCED64AF] - 24/07/2009 - 04:01:00 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 186.44.) -- C:\Windows\system32\drivers
vlddmkm.sys   [9791072]
O58 - SDL:[MD5.1657F3FBD9061526C14FF37E79306F98] - 02/11/2006 - 08:30:56 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers
vm60x32.sys   [429056]
O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers
vraid.sys   [102968]
O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers
vstor.sys   [45112]
O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys   [1122360]
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys   [106088]
O58 - SDL:[MD5.7157E70A90CCE49DEB8885D23A073A39] - 15/04/2008 - 11:05:08 ---A- . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys   [118784]
O58 - SDL:[MD5.0505DA5D357F18A5D42FC5DEDE6BC9A0] - 10/03/2012 - 23:18:41 ---A- . (.Sunbelt Software - Anti-Rootkit Engine.) -- C:\Windows\system32\drivers\SBREDrv.sys   [101720]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys   [20480]
O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys   [74808]
O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/07/2010 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys   [691696]
O58 - SDL:[MD5.E69A606872650B46DE54EC15DCC93529] - 21/07/2009 - 22:33:32 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\system32\drivers\stwrt.sys   [409088]
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys   [35944]
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys   [31848]
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys   [34920]
O58 - SDL:[MD5.F5D926807BD9BC0AF68F9376144DE425] - 28/03/2008 - 01:06:00 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys   [199472]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys   [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys   [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys   [115816]
O58 - SDL:[MD5.83CAFCB53201BBAC04D822F32438E244] - 10/05/2011 - 07:06:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys   [42496]
O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys   [130616]
O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS   [200704]
O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 21/01/2008 - 03:23:23 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS   [654336]
O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 21/01/2008 - 03:23:22 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS   [987648]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS   [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys   [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS   [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS   [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS   [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS   [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS   [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS   [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS   [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS   [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS   [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS   [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS   [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS   [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS   [34672]
~ Scan Drivers in 00mn 19s



---\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\ Liste des services Legacy (O64)
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\adp94xx.sys (adp94xx)  .(.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) - LEGACY_ADP94XX
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\adpahci.sys (adpahci)  .(.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) - LEGACY_ADPAHCI
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\adpu160m.sys (adpu160m)  .(.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) - LEGACY_ADPU160M
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\adpu320.sys (adpu320)  .(.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) - LEGACY_ADPU320
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\djsvs.sys (aic78xx)  .(.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) - LEGACY_AIC78XX
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\aliide.sys (aliide)  .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\arc.sys (arc)  .(.Adaptec, Inc. - Adaptec RAID Storport Driver.) - LEGACY_ARC
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\arcsas.sys (arcsas)  .(.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) - LEGACY_ARCSAS
O64 - Services: CurCS - 03/02/2010 - C:\Windows\system32\DRIVERS\bdfm.sys (bdfm)  .(.BitDefender S.R.L. Bucharest, ROMANIA - BitDefender Active Virus Control Filter Dri.) - LEGACY_BDFM
O64 - Services: CurCS - 25/01/2011 - C:\Windows\system32\DRIVERS\BdfNdisf6.sys (BdfNdisf)  .(.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) - LEGACY_BDFNDISF
O64 - Services: CurCS - 22/02/2010 - C:\Windows\system32\DRIVERS\bdfsfltr.sys (bdfsfltr)  .(.BitDefender - BitDefender AntiVirus FS filter driver.) - LEGACY_BDFSFLTR
O64 - Services: CurCS - 25/01/2011 - C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys (bdftdif)  .(.BitDefender LLC - BitDefender Firewall TDI Filter Driver.) - LEGACY_BDFTDIF
O64 - Services: CurCS - 23/04/2010 - C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys (BDSelfPr)  .(.BitDefender - BitDefender Self Protection Driver.) - LEGACY_BDSELFPR
O64 - Services: CurCS - 19/01/2010 - C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys (BDVEDISK)  .(.BitDefender - FileVault Disk Driver.) - LEGACY_BDVEDISK
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\cmdide.sys (cmdide)  .(.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) - LEGACY_CMDIDE
O64 - Services: CurCS - 14/04/2011 - C:\Windows\system32\drivers\dfsc.sys (DfsC)  .(...) - LEGACY_DFSC
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\elxstor.sys (elxstor)  .(.Emulex - Storport Miniport Driver for LightPulse HBA.) - LEGACY_ELXSTOR
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\hpcisss.sys (HpCISSs)  .(.Hewlett-Packard Company - Smart Array Storport Driver.) - LEGACY_HPCISSS
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\iastorv.sys (iaStorV)  .(.Intel Corporation - Intel Matrix Storage Manager driver (base).) - LEGACY_IASTORV
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\iirsp.sys (iirsp)  .(.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) - LEGACY_IIRSP
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\iteatapi.sys (iteatapi)  .(.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) - LEGACY_ITEATAPI
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\iteraid.sys (iteraid)  .(.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) - LEGACY_ITERAID
O64 - Services: CurCS - 23/12/2011 - C:\Windows\system32\DRIVERS\Lbd.sys (Lbd)  .(.Lavasoft AB - Boot Driver.) - LEGACY_LBD
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\lsi_fc.sys (LSI_FC)  .(.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) - LEGACY_LSI_FC
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\lsi_sas.sys (LSI_SAS)  .(.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) - LEGACY_LSI_SAS
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\lsi_scsi.sys (LSI_SCSI)  .(.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) - LEGACY_LSI_SCSI
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\megasas.sys (megasas)  .(.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) - LEGACY_MEGASAS
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\megasr.sys (MegaSR)  .(.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) - LEGACY_MEGASR
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\mraid35x.sys (Mraid35x)  .(.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) - LEGACY_MRAID35X
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers
frd960.sys (nfrd960)  .(.IBM Corporation - IBM ServeRAID Controller Driver.) - LEGACY_NFRD960
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers
vraid.sys (nvraid)  .(.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) - LEGACY_NVRAID
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers
vstor.sys (nvstor)  .(.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) - LEGACY_NVSTOR
O64 - Services: CurCS - 25/01/2011 - C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys (Profos)  .(.BitDefender S.R.L. - Profos Kernel Module.) - LEGACY_PROFOS
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\ql2300.sys (ql2300)  .(.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) - LEGACY_QL2300
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\ql40xx.sys (ql40xx)  .(.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) - LEGACY_QL40XX
O64 - Services: CurCS - ??\??\???? - C:\Windows\system32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\sisraid4.sys (SiSRaid4)  .(.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) - LEGACY_SISRAID4
O64 - Services: CurCS - ??\??\???? - C:\Windows\system32\Drivers\sptd.sys - sptd (sptd)  .(...) - LEGACY_SPTD
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\symc8xx.sys (Symc8xx)  .(.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) - LEGACY_SYMC8XX
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\sym_hi.sys (Sym_hi)  .(.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) - LEGACY_SYM_HI
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\sym_u3.sys (Sym_u3)  .(.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) - LEGACY_SYM_U3
O64 - Services: CurCS - 25/01/2011 - C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner	rufos.sys (Trufos)  .(.BitDefender S.R.L. - Trufos Kernel Module.) - LEGACY_TRUFOS
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\uliahci.sys (uliahci)  .(.ULi Electronics Inc. - ULi SATA Controller Driver.) - LEGACY_ULIAHCI
O64 - Services: CurCS - 02/11/2006 - C:\Windows\system32\drivers\ulsata.sys (UlSata)  .(.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) - LEGACY_ULSATA
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\ulsata2.sys (ulsata2)  .(.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) - LEGACY_ULSATA2
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\viaide.sys (viaide)  .(.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) - LEGACY_VIAIDE
O64 - Services: CurCS - 21/01/2008 - C:\Windows\system32\drivers\vsmraid.sys (vsmraid)  .(.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) - LEGACY_VSMRAID
~ Scan Services in 00mn 01s

Rennes8 · Answer

et la fin ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\system32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\system32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\system32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe ~ Scan Keys in 00mn 01s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe ~ Scan Keys in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: C:\Users\Guillaume\AppData\Roaming\Mozilla\Firefox\Profiles\lig107ur.default\searchplugins\askcom.xml O69 - SBI: SearchScopes [HKCU] {043C5167-00BB-4324-AF7E-62013FAEDACF} - (Web Search...) - http://ww1.toolbarhome.com O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 O69 - SBI: SearchScopes [HKCU] {A4882A0A-F56A-4A88-9C2B-79CD3786FB53} - (Kelkoo) - http://fr.kelkoopartners.net O69 - SBI: SearchScopes [HKCU] {B5273761-6F89-40E8-B5E5-7D007F149552} - (AOL Recherche) - http://slirsredirect.search.aol.com ~ Scan Keys in 00mn 00s ---\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\system32\aelupsvc.dll [24576] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\system32\wercplsupport.dll [62976] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\system32\shsvcs.dll [247808] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\system32\certprop.dll [40448] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\system32\certprop.dll [40448] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [125952] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\system32\gpsvc.dll [574464] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\system32\ikeext.dll [438272] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\system32\Audiosrv.dll [314368] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\system32 asauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\system32 asmans.dll [260608] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\system32\mprdim.dll [68608] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\system32\sens.dll [47104] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\system32\ipnathlp.dll [288256] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\system32 apisrv.dll [242688] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Terminal Server.) -- C:\Windows\system32 ermsrv.dll [448512] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [1929952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\system32\qmgr.dll [758272] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\system32\shsvcs.dll [247808] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [19968] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d'application.) -- C:\Windows\system32\appinfo.dll [33280] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [111616] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\system32\mmcss.dll [45056] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [153600] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\system32\eapsvc.dll [57344] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [161792] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [603648] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Terminal Server.) -- C:\Windows\system32\sessenv.dll [84992] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\system32\browser.dll [81920] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [68096] O83 - Search Svchost Services: ezSharedSvc (ezSharedSvc) . (.EasyBits Sofware AS - Shared EasyBits services for Windows.) -- C:\Windows\System32\ezsvc7.dll [129992] ~ Scan Services in 00mn 02s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.E8DAF60A46AF08D98B7702B970670AAC] [SPRF][11/01/2009] (...) -- C:\Users\Guillaume\AppData\Local\d3d8caps.dat [552] [MD5.FCD38DA78963F46E5F67C3551E9915DB] [SPRF][25/02/2012] (...) -- C:\Users\Guillaume\AppData\Local\d3d9caps.dat [7808] [MD5.878A637E2667E1BE8E70DE6E0169D6C3] [SPRF][25/06/2010] (.France Telecom - DSLtest.) -- C:\Users\Guillaume\Desktop\DSLtest2102.exe [3330048] [MD5.20216B7E0015DA141F4444F2B9599059] [SPRF][24/04/2003] (.Microsoft Corporation - Paint.) -- C:\Users\Guillaume\Desktop\paint.exe [344576] [MD5.AF193DCC61CE7AC65947A666FB857CBC] [SPRF][27/09/2010] (.Evariste - Traitement de données.) -- C:\Users\Guillaume\Desktop\Regressi.exe [8413210] [MD5.006C83751B9F17934B58085D0B7BDA2C] [SPRF][24/01/2007] (.America Online, Inc. - AOL Media Playback Control.) -- C:\Windows\Downloaded Program Files\ampAx3.0.84.2.dll [841304] [MD5.29FDF493EAE41AF560231B50403D6CE6] [SPRF][03/02/2009] (.Direction Générale des Impôts - Module de délivrance de certificat MINEFI.) -- C:\Windows\Downloaded Program Files\CERTDGI1.dll [118144] [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.DE2EB468A14E00F9A99326C6C9C07075] [SPRF][02/02/2009] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1914440] [MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [172032] [MD5.D28C65F59E5D6AA8D278B05B4F614BC3] [SPRF][16/08/2007] (.PopCap Games - PopCapLoader Module.) -- C:\Windows\Downloaded Program Files\popcaploader.dll [263488] [MD5.6F678556A6FCE04FC94F3435F6313705] [SPRF][13/09/2008] (...) -- C:\Windows\Downloaded Program Files\unagiuninst.exe [38428] [MD5.7FAF5222EEB546E1DC0F348DCB314B0B] [SPRF][29/08/2006] (.Zylom Games - Zylom Games Player.) -- C:\Windows\Downloaded Program Files\zylomgamesplayer.dll [161976] ~ Scan Files in 00mn 02s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{D1802490-E87E-48D0-BDAC-7EDECED1ABE5}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP QuickPlay.) -- C:\Program Files\HP\QuickPlay\QP.exe O87 - FAEL: "{8F283E0C-FCC7-4DB2-B168-1B9BEFE42EB2}" | In - None - P6 - TRUE | .(.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe O87 - FAEL: "{E8340E7C-740B-434C-87A4-26AC5DBE7C8C}" | In - None - P6 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\CyberLink\PowerDirector\PDR.exe O87 - FAEL: "{89F93281-E16D-439C-8941-50734DA1C938}" | In - Public - P6 - TRUE | .(.AOL LLC - AOL Loader.) -- C:\Program Files\Common Files\AOL\Loader\aolload.exe O87 - FAEL: "{2D47804E-83E2-4530-92C8-ABF2BF94A472}" | In - Public - P17 - TRUE | .(.AOL LLC - AOL Loader.) -- C:\Program Files\Common Files\AOL\Loader\aolload.exe O87 - FAEL: "{F7F777B8-3112-403A-BC10-D243F994B640}" | In - Public - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{6CDE5325-83B7-46E1-A9A2-742AE6E50FF7}" | In - Public - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{E2128151-CF8E-4A52-B349-89E472722ECC}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{F203DAA4-39E8-4E2A-90D8-774BB174EA17}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{C59CEABA-168D-411E-B0AC-CE9ABF2D4B37}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{EB2DE9CD-C7CD-4AF7-ABCA-8F3F1A189A52}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{3A17DF44-4436-4C2E-8169-F2BC5F6934FD}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{C2E6466B-BBE8-4D09-9AB0-2A693CD128FF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{57C67458-ED97-4FC0-AD3B-66896A195464}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe O87 - FAEL: "{1B49D847-231D-4D18-B093-C2652B8F4CA7}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe O87 - FAEL: "{64EF9BAE-3929-4EB6-B7F8-894AE44A4AF5}" | In - Public - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\bittorrent.exe O87 - FAEL: "{471B75C7-308D-4611-9F6A-2CB8B2C45A29}" | In - Public - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\bittorrent.exe O87 - FAEL: "{5D05C996-A7D5-47FD-AF72-1AD1D502ECE1}" | In - Public - P6 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\bittorrent.exe O87 - FAEL: "{67F8DA4B-D9D6-4A7F-99DF-899A3B62A983}" | In - Public - P17 - TRUE | .(.BitTorrent, Inc. - BitTorrent.) -- C:\Program Files\BitTorrent\bittorrent.exe O87 - FAEL: "TCP Query User{356D6014-7410-4A15-A6C6-6752336BA93D}C:\users\guillaume\program files\dna\btdna.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\guillaume\program files\dna\btdna.exe (.not file.) O87 - FAEL: "UDP Query User{2E7473CA-B986-4A0A-A7EC-D0363CD527F6}C:\users\guillaume\program files\dna\btdna.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\guillaume\program files\dna\btdna.exe (.not file.) O87 - FAEL: "{4FA612A5-374C-4369-9472-B81DD0962D9F}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (.not file.) O87 - FAEL: "{0CA45EE8-72F1-45F8-B4AF-607DA3A73BE9}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (.not file.) O87 - FAEL: "{647FF690-C0BB-41F8-AD3D-7A3F99A471B0}" | In - None - P17 - TRUE | .(.Hewlett-Packard - HP Update Client.) -- C:\Program Files\HP\HP Software Update\hpwucli.exe O87 - FAEL: "TCP Query User{24A7911A-2081-4FB4-BC4C-940A75432A70}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P6 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe O87 - FAEL: "UDP Query User{C89461A9-C248-441C-812E-3F654643663C}C:\program files\epson software\event manager\eeventmanager.exe" | In - Private - P17 - TRUE | .(.SEIKO EPSON CORPORATION.) -- C:\Program Files\Epson Software\Event Manager\EEventManager.ex O87 - FAEL: "{B72EF91B-05EA-4649-B45A-8EA357D50174}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{69AA1918-49C2-400E-A178-CC793DDEB36C}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{16AF5507-A602-48D2-A771-B13A0A83D80F}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{501CDF51-1E4E-4EFF-87F7-6051DF906820}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe ~ Scan Firewall in 00mn 02s ---\ Scan Additionnel (O88) Database Version : 9067 - (06/03/2012) Clés trouvées (Keys found) : 55 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 12 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]:Shell =>Hijack.Shell.Gen [HKLM\Software\Classes\PROTOCOLS\Handler\vsharechrome] =>PUP.VShareRedir [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Associations]:bak_Application =>Hijacker.Agent [HKLM\Software\MozillaPlugins\@viewpoint.com/VMP] =>Adware.MetaStream [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer] =>Adware.MetaStream [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare] =>PUP.VShareRedir [HKLM\Software\Classes\axmetastream.metastreamctl] =>Adware.MetaStream [HKLM\Software\Classes\axmetastream.metastreamctl.1] =>Adware.MetaStream [HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary] =>Adware.MetaStream [HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1] =>Adware.MetaStream [HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit [HKLM\Software\Classes\popcaploader.popcaploaderctrl2] =>Adware.PopCap [HKLM\Software\Classes\popcaploader.popcaploaderctrl2.1] =>Adware.PopCap [HKLM\Software\Classes\vShare.IMedixProtocol] =>PUP.VShareRedir [HKLM\Software\Classes\vShare.IMedixProtocol.1] =>PUP.VShareRedir [HKLM\Software\Classes\vShare.PugiObj] =>PUP.VShareRedir [HKLM\Software\Classes\vShare.PugiObj.1] =>PUP.VShareRedir [HKLM\Software\Classes\vShare.ScriptHelpers] =>PUP.VShareRedir [HKLM\Software\Classes\vShare.ScriptHelpers.1] =>PUP.VShareRedir [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKLM\Software\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}] =>Parasite.Pugi [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream [HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}] =>Adware.MetaStream [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}] =>PUP.OfferBox [HKLM\Software\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}] =>Parasite.Pugi [HKLM\Software\Classes\CLSID\{761f6a83-f007-49e4-8eac-cdb6808ef06f}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}] =>PUP.Eorezo [HKLM\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}] =>PUP.Eorezo [HKLM\Software\Classes\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1}] =>Adware.PopCap [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Classes\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}] =>Adware.PopCap [HKLM\Software\MetaStream] =>Adware.MetaStream [HKLM\Software\Viewpoint] =>Adware.MetaStream [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer] =>Adware.MetaStream [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\vShare] =>PUP.VShareRedir [HKLM\Software\Classes\Toolbar.CT2857573] =>Toolbar.Agent [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar C:\Users\Guillaume\AppData\Roaming\drivers\downld =>Worm.Bagle C:\Program Files\Viewpoint =>Adware.MetaStream C:\Program Files\vShare =>PUP.VShareRedir C:\ProgramData\Babylon =>Toolbar.Babylon C:\ProgramData\PopCap Games =>Adware.PopCap C:\ProgramData\Viewpoint =>Adware.MetaStream C:\Users\Guillaume\AppData\Roaming\Babylon =>Toolbar.Babylon C:\Users\Guillaume\AppData\Local\Babylon =>Toolbar.Babylon C:\Users\Guillaume\AppData\Local\Conduit =>Toolbar.Conduit C:\Users\Guillaume\AppData\LocalLow\vShare =>PUP.VShareRedir ~ Scan Additionnel in 00mn 09s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 02/03/2009 81920 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe SR - | Auto 27/02/2012 55144 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Demand 19/10/2009 183880 | (Arrakis3) . (.BitDefender S.R.L. http://www.bitdefender.c.) - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Demand 03/04/2008 193840 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe SR - | Auto 19/12/2006 94208 | (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe SS - | Demand 24/07/2007 181800 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe SS - | Auto 03/02/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 03/02/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 03/07/2011 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 09/10/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe SR - | Demand 25/01/2008 148832 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe SR - | Auto 07/08/2008 24880 | (hpsrv) . (.Hewlett-Packard Corporation.) - C:\Windows\System32\hpservice.exe SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe SR - | Demand 06/03/2012 821608 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SS - | Auto 10/03/2012 2152152 | (Lavasoft Ad-Aware Service) . (.Lavasoft Limited.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe SR - | Auto 26/02/2008 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 20/03/2011 310856 | (LIVESRV) . (.BitDefender S.R.L..) - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe SR - | Auto 23/07/2009 211488 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32 vvsvc.exe SR - | Auto 292232 | (QPCapSvc) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe SR - | Auto 112008 | (QPSched) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe SS - | Auto 0 | (Recovery Service for Windows) . (...) - C:\Windows\SMINST\BLService.exe SR - | Auto 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe SR - | Auto 21/07/2009 221266 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe SS - | Demand 06/02/2007 74656 | (stllssvr) . (.MicroVision Development, Inc..) - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe SR - | Auto 26/04/2010 1615688 | (VSSERV) . (.BitDefender S.R.L..) - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe SS - | Auto 0 | C:\Windows\system32\SearchIndexer.exe (WSearch) . (...) - C:\Windows\system32\SearchIndexer.exe SR - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 16s ---\ Liste des émulateurs de CD/DVD (Hook du MBR) O58 - SDL:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/07/2010 - 00:00:00 ---A- . (...) -- C:\Windows\system32\drivers\sptd.sys [691696] ~ Scan Emulateurs in 00mn 16s End of the scan (1779 lines in 04mn 34s)(0) Merci d'avance

Problème de virus, lien abnow, internet lent

4 réponses

Votre réponse

Discussions similaires

Newsletters