Virus impossible a effacer

sbelenne -  
Fish66 Messages postés 18337 Statut Contributeur sécurité -
Bonjour,

j'ai un virus qui revient tout le temps et eset le bloque mais ne le suprime pas , pouvez vous m'aider svp ?

5 réponses

  1. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Salut,
    1/
    Est ce que tu peux nous donner le nom de ce virus et son emplacement ?

    2/
    * Télécharge puis enregistre sur le bureau de ton PC ZHPDiag
    (de Nicolas Coolman) à partir l'un des deux liens : Lien 1 ou Lien 2
    * Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7)
    * Clique sur l'icône en forme de loupe pour lancer le diagnostique
    * Héberge le rapport ZHPDiag.txt de ton bureau sur : malekal.com ou cjoint.com
    * Fais copier/coller le lien fourni dans ta prochaine réponse
    * Aide ZHPDiag : <<< ICI >>>
    1
  2. sbelenne
     
    bonjour et merci de m'aider , le nom du virus est " win 64 sirfef.AE " et win 64 agent.BA "

    voici le rapport demander :

    MBRCheck, version 1.2.3
    (c) 2010, AD

    Command-line:
    Windows Version: Windows 7 Home Premium Edition
    Windows Information: Service Pack 1 (build 7601), 64-bit
    Base Board Manufacturer: Dell Inc.
    BIOS Manufacturer: Dell Inc.
    System Manufacturer: Dell Inc.
    System Product Name: XPS 8300
    Logical Drives Mask: 0x00002ffc

    Kernel Drivers (total 188):
    0x0345C000 \SystemRoot\system32\ntoskrnl.exe
    0x03413000 \SystemRoot\system32\hal.dll
    0x00BB8000 \SystemRoot\system32\kdcom.dll
    0x00C9C000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
    0x00CEB000 \SystemRoot\system32\PSHED.dll
    0x00CFF000 \SystemRoot\system32\CLFS.SYS
    0x00E50000 \SystemRoot\system32\CI.dll
    0x00F10000 \SystemRoot\system32\drivers\Wdf01000.sys
    0x00FB4000 \SystemRoot\system32\drivers\WDFLDR.SYS
    0x00D5D000 \SystemRoot\system32\drivers\ACPI.sys
    0x00FC3000 \SystemRoot\system32\drivers\WMILIB.SYS
    0x00FCC000 \SystemRoot\system32\drivers\msisadrv.sys
    0x00E00000 \SystemRoot\system32\drivers\pci.sys
    0x00E33000 \SystemRoot\system32\drivers\vdrvroot.sys
    0x00FD6000 \SystemRoot\System32\drivers\partmgr.sys
    0x00FEB000 \SystemRoot\system32\drivers\volmgr.sys
    0x00C00000 \SystemRoot\System32\drivers\volmgrx.sys
    0x00C5C000 \SystemRoot\System32\drivers\mountmgr.sys
    0x01054000 \SystemRoot\system32\DRIVERS\iaStor.sys
    0x01000000 \SystemRoot\system32\drivers\atapi.sys
    0x01009000 \SystemRoot\system32\drivers\ataport.SYS
    0x01033000 \SystemRoot\system32\drivers\msahci.sys
    0x0103E000 \SystemRoot\system32\drivers\PCIIDEX.SYS
    0x00E40000 \SystemRoot\system32\drivers\amdxata.sys
    0x00DB4000 \SystemRoot\system32\drivers\fltmgr.sys
    0x00C76000 \SystemRoot\system32\drivers\fileinfo.sys
    0x01447000 \SystemRoot\System32\Drivers\Ntfs.sys
    0x01635000 \SystemRoot\System32\Drivers\msrpc.sys
    0x01693000 \SystemRoot\System32\Drivers\ksecdd.sys
    0x016AE000 \SystemRoot\System32\Drivers\cng.sys
    0x01720000 \SystemRoot\System32\drivers\pcw.sys
    0x01731000 \SystemRoot\System32\Drivers\Fs_Rec.sys
    0x018A3000 \SystemRoot\system32\drivers\ndis.sys
    0x01996000 \SystemRoot\system32\drivers\NETIO.SYS
    0x01800000 \SystemRoot\System32\Drivers\ksecpkg.sys
    0x01AD5000 \SystemRoot\System32\drivers\tcpip.sys
    0x01CD8000 \SystemRoot\System32\drivers\fwpkclnt.sys
    0x01D22000 \SystemRoot\system32\DRIVERS\epfwwfp.sys
    0x01D37000 \SystemRoot\system32\drivers\volsnap.sys
    0x01D83000 \SystemRoot\System32\Drivers\spldr.sys
    0x01D8B000 \SystemRoot\System32\drivers\rdyboost.sys
    0x01DC5000 \SystemRoot\System32\Drivers\mup.sys
    0x01DD7000 \SystemRoot\System32\drivers\hwpolicy.sys
    0x01A00000 \SystemRoot\System32\DRIVERS\fvevol.sys
    0x01A3A000 \SystemRoot\system32\drivers\disk.sys
    0x01A50000 \SystemRoot\system32\drivers\CLASSPNP.SYS
    0x01A8E000 \SystemRoot\system32\DRIVERS\dtsoftbus01.sys
    0x0182B000 \SystemRoot\system32\DRIVERS\cdrom.sys
    0x04FDA000 \SystemRoot\System32\Drivers\Null.SYS
    0x04FE3000 \SystemRoot\System32\Drivers\Beep.SYS
    0x01855000 \SystemRoot\system32\DRIVERS\ehdrv.sys
    0x04FEA000 \SystemRoot\System32\drivers\vga.sys
    0x0187C000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
    0x04C00000 \SystemRoot\System32\drivers\watchdog.sys
    0x04C10000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
    0x04C19000 \SystemRoot\system32\drivers\rdpencdd.sys
    0x01DE0000 \SystemRoot\system32\drivers\rdprefmp.sys
    0x01DE9000 \SystemRoot\System32\Drivers\Msfs.SYS
    0x0173B000 \SystemRoot\System32\Drivers\Npfs.SYS
    0x0174C000 \SystemRoot\system32\DRIVERS\tdx.sys
    0x0176E000 \SystemRoot\system32\DRIVERS\TDI.SYS
    0x04072000 \SystemRoot\system32\drivers\afd.sys
    0x040FB000 \SystemRoot\System32\DRIVERS\netbt.sys
    0x04140000 \SystemRoot\system32\DRIVERS\wfplwf.sys
    0x04149000 \SystemRoot\system32\DRIVERS\pacer.sys
    0x0416F000 \SystemRoot\system32\DRIVERS\vwififlt.sys
    0x04185000 \SystemRoot\system32\DRIVERS\EpfwLWF.sys
    0x04192000 \SystemRoot\system32\DRIVERS\netbios.sys
    0x041A1000 \SystemRoot\system32\DRIVERS\wanarp.sys
    0x041BC000 \SystemRoot\system32\DRIVERS\termdd.sys
    0x04000000 \SystemRoot\system32\DRIVERS\rdbss.sys
    0x04051000 \SystemRoot\system32\drivers\nsiproxy.sys
    0x0405D000 \SystemRoot\system32\DRIVERS\mssmbios.sys
    0x041D0000 \SystemRoot\System32\drivers\discache.sys
    0x041DF000 \SystemRoot\System32\Drivers\dfsc.sys
    0x0177B000 \SystemRoot\system32\DRIVERS\blbdrive.sys
    0x0178C000 \SystemRoot\system32\DRIVERS\tunnel.sys
    0x0F414000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    0x0B2C1000 \SystemRoot\System32\drivers\dxgkrnl.sys
    0x0B3B5000 \SystemRoot\System32\drivers\dxgmms1.sys
    0x0B200000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
    0x0B224000 \SystemRoot\system32\DRIVERS\HECIx64.sys
    0x0B235000 \SystemRoot\system32\drivers\usbehci.sys
    0x0B246000 \SystemRoot\system32\drivers\USBPORT.SYS
    0x07A00000 \SystemRoot\system32\DRIVERS\bcmwl664.sys
    0x0B29C000 \SystemRoot\system32\DRIVERS\vwifibus.sys
    0x078CA000 \SystemRoot\system32\DRIVERS\k57nd60a.sys
    0x07934000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    0x07941000 \SystemRoot\system32\DRIVERS\intelppm.sys
    0x07957000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
    0x07967000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
    0x0797D000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
    0x079A1000 \SystemRoot\system32\DRIVERS\ndistapi.sys
    0x079AD000 \SystemRoot\system32\DRIVERS\ndiswan.sys
    0x079DC000 \SystemRoot\system32\DRIVERS\raspppoe.sys
    0x07800000 \SystemRoot\system32\DRIVERS\raspptp.sys
    0x07821000 \SystemRoot\system32\DRIVERS\rassstp.sys
    0x0783B000 \SystemRoot\system32\DRIVERS\kbdclass.sys
    0x0784A000 \SystemRoot\system32\DRIVERS\mouclass.sys
    0x07859000 \SystemRoot\system32\DRIVERS\swenum.sys
    0x0785B000 \SystemRoot\system32\DRIVERS\ks.sys
    0x0789E000 \SystemRoot\system32\DRIVERS\umbus.sys
    0x08082000 \SystemRoot\system32\DRIVERS\usbhub.sys
    0x080DC000 \SystemRoot\System32\Drivers\NDProxy.SYS
    0x080F1000 \SystemRoot\system32\drivers\nvhda64v.sys
    0x08123000 \SystemRoot\system32\drivers\portcls.sys
    0x08160000 \SystemRoot\system32\drivers\drmk.sys
    0x08182000 \SystemRoot\system32\drivers\ksthunk.sys
    0x08806000 \SystemRoot\system32\drivers\RTKVHD64.sys
    0x08188000 \SystemRoot\system32\drivers\HdAudio.sys
    0x00030000 \SystemRoot\System32\win32k.sys
    0x08BD9000 \SystemRoot\System32\drivers\Dxapi.sys
    0x08BE5000 \SystemRoot\System32\Drivers\crashdmp.sys
    0x04C22000 \SystemRoot\System32\Drivers\dump_iaStor.sys
    0x081E4000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
    0x08000000 \SystemRoot\system32\DRIVERS\monitor.sys
    0x00530000 \SystemRoot\System32\TSDDD.dll
    0x007B0000 \SystemRoot\System32\cdd.dll
    0x0800E000 \SystemRoot\system32\DRIVERS\hidusb.sys
    0x0801C000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    0x08BF3000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    0x08BFC000 \SystemRoot\system32\DRIVERS\USBD.SYS
    0x08035000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
    0x08050000 \SystemRoot\system32\DRIVERS\kbdhid.sys
    0x0805E000 \SystemRoot\system32\drivers\luafv.sys
    0x03CB1000 \SystemRoot\system32\DRIVERS\eamonm.sys
    0x03D93000 \SystemRoot\system32\drivers\WudfPf.sys
    0x03DB4000 \SystemRoot\system32\DRIVERS\xusb21.sys
    0x03DC7000 \SystemRoot\system32\DRIVERS\mouhid.sys
    0x03C00000 \SystemRoot\system32\DRIVERS\epfw.sys
    0x03C31000 \SystemRoot\system32\DRIVERS\lltdio.sys
    0x03C46000 \SystemRoot\system32\DRIVERS\nwifi.sys
    0x03C99000 \SystemRoot\system32\DRIVERS\ndisuio.sys
    0x03DD4000 \SystemRoot\system32\DRIVERS\rspndr.sys
    0x03DEC000 \SystemRoot\system32\DRIVERS\vwifimp.sys
    0x017B2000 \SystemRoot\System32\Drivers\fastfat.SYS
    0x06624000 \SystemRoot\system32\drivers\HTTP.sys
    0x066ED000 \SystemRoot\System32\DRIVERS\srvnet.sys
    0x0671E000 \SystemRoot\system32\DRIVERS\bowser.sys
    0x0673C000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
    0x06769000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    0x067B7000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    0x082B2000 \SystemRoot\System32\DRIVERS\srv2.sys
    0x0831B000 \SystemRoot\System32\DRIVERS\srv.sys
    0x08200000 \SystemRoot\system32\drivers\peauth.sys
    0x082A6000 \SystemRoot\System32\Drivers\secdrv.SYS
    0x083B3000 \SystemRoot\System32\drivers\tcpipreg.sys
    0x083C5000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
    0x77140000 \Windows\System32\ntdll.dll
    0x47E10000 \Windows\System32\smss.exe
    0xFF460000 \Windows\System32\apisetschema.dll
    0xFFEE0000 \Windows\System32\autochk.exe
    0xFF400000 \Windows\System32\ws2_32.dll
    0x76F30000 \Windows\System32\iertutil.dll
    0xFF380000 \Windows\System32\shlwapi.dll
    0x76E10000 \Windows\System32\kernel32.dll
    0xFF2E0000 \Windows\System32\msvcrt.dll
    0xFF200000 \Windows\System32\oleaut32.dll
    0x76D10000 \Windows\System32\user32.dll
    0xFF1F0000 \Windows\System32\nsi.dll
    0xFF110000 \Windows\System32\advapi32.dll
    0xFF070000 \Windows\System32\comdlg32.dll
    0xFF050000 \Windows\System32\imagehlp.dll
    0xFEF20000 \Windows\System32\rpcrt4.dll
    0xFEEF0000 \Windows\System32\imm32.dll
    0xFEE70000 \Windows\System32\difxapi.dll
    0x77310000 \Windows\System32\normaliz.dll
    0xFE0E0000 \Windows\System32\shell32.dll
    0xFE080000 \Windows\System32\Wldap32.dll
    0x76BC0000 \Windows\System32\urlmon.dll
    0x77300000 \Windows\System32\psapi.dll
    0xFE060000 \Windows\System32\sechost.dll
    0xFDE80000 \Windows\System32\setupapi.dll
    0xFDDB0000 \Windows\System32\usp10.dll
    0xFDBA0000 \Windows\System32\ole32.dll
    0xFDB30000 \Windows\System32\gdi32.dll
    0x76A60000 \Windows\System32\wininet.dll
    0xFDB20000 \Windows\System32\lpk.dll
    0xFDA80000 \Windows\System32\clbcatq.dll
    0xFD970000 \Windows\System32\msctf.dll
    0xFD900000 \Windows\System32\KernelBase.dll
    0xFD790000 \Windows\System32\crypt32.dll
    0xFD770000 \Windows\System32\devobj.dll
    0xFD6D0000 \Windows\System32\comctl32.dll
    0xFD690000 \Windows\System32\wintrust.dll
    0xFD650000 \Windows\System32\cfgmgr32.dll
    0xFD640000 \Windows\System32\msasn1.dll
    0x766A0000 \Windows\SysWOW64\normaliz.dll

    Processes (total 68):
    0 System Idle Process
    4 System
    388 C:\Windows\System32\smss.exe
    564 csrss.exe
    640 C:\Windows\System32\wininit.exe
    664 csrss.exe
    696 C:\Windows\System32\services.exe
    720 C:\Windows\System32\lsass.exe
    732 C:\Windows\System32\lsm.exe
    756 C:\Windows\System32\winlogon.exe
    908 C:\Windows\System32\svchost.exe
    964 C:\Windows\System32\nvvsvc.exe
    988 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    144 C:\Windows\System32\svchost.exe
    484 C:\Windows\System32\svchost.exe
    448 C:\Windows\System32\svchost.exe
    560 C:\Windows\System32\svchost.exe
    1168 C:\Windows\System32\svchost.exe
    1284 C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    1296 C:\Windows\System32\nvvsvc.exe
    1340 C:\Windows\System32\svchost.exe
    1432 C:\Windows\System32\wlanext.exe
    1440 C:\Windows\System32\conhost.exe
    1620 C:\Windows\System32\spoolsv.exe
    1864 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    1984 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    2012 C:\Program Files\Bonjour\mDNSResponder.exe
    1016 C:\Windows\System32\svchost.exe
    1248 C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
    1444 C:\Program Files\Intel\iCLS Client\HeciServer.exe
    2372 WUDFHost.exe
    3024 C:\Windows\System32\svchost.exe
    3052 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    2184 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    2284 C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    2500 C:\Program Files\Windows Media Player\wmpnetwk.exe
    2720 C:\Windows\System32\SearchIndexer.exe
    2576 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    1560 C:\Windows\System32\taskhost.exe
    1192 C:\Windows\System32\dwm.exe
    2888 C:\Windows\explorer.exe
    2788 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    444 C:\Program Files\ESET\ESET Smart Security\egui.exe
    2812 C:\Windows\vsnp2std.exe
    1768 C:\Windows\vsnpstd3.exe
    812 C:\Program Files (x86)\Internet Download Manager\IDMan.exe
    2088 C:\Program Files\Windows Sidebar\sidebar.exe
    1116 C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
    3116 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    3148 C:\Program Files (x86)\iTunes\iTunesHelper.exe
    3404 C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
    3736 C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    3772 C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
    3836 C:\Program Files\iPod\bin\iPodService.exe
    3100 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    3488 C:\Windows\System32\audiodg.exe
    2592 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    1100 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    4424 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
    1500 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
    1516 C:\Windows\SysWOW64\svchost.exe
    4348 C:\Windows\System32\taskeng.exe
    4420 C:\Windows\System32\SearchProtocolHost.exe
    3572 C:\Windows\System32\SearchFilterHost.exe
    1136 dllhost.exe
    4656 dllhost.exe
    2276 C:\Users\SBELENNE\Desktop\ZHPDiag\mbrcheck.exe
    2492 C:\Windows\System32\conhost.exe

    \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000003'19b00000 (NTFS)
    \\.\E: --> \\.\PhysicalDrive1 at offset 0x00000000'00007e00 (NTFS)
    \\.\F: --> \\.\PhysicalDrive2 at offset 0x00000000'00007e00 (NTFS)
    \\.\G: --> \\.\PhysicalDrive1 at offset 0x0000007a'11f97a00 (NTFS)
    \\.\H: --> \\.\PhysicalDrive1 at offset 0x0000009f'a2853800 (NTFS)

    PhysicalDrive0 Model Number: WDCWD10EALX-759BA1, Rev: 17.01H17
    PhysicalDrive1 Model Number: WDCWD10EALS-00Z8A0, Rev: 05.01D05
    PhysicalDrive2 Model Number: ST31000528AS, Rev: CC38

    Size Device Name MBR Status
    --------------------------------------------
    931 GB \\.\PhysicalDrive0 Windows 7 MBR code detected
    SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79
    931 GB \\.\PhysicalDrive1 Windows XP MBR code detected
    SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A
    931 GB \\.\PhysicalDrive2 Windows XP MBR code detected
    SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A

    Done!
    0
  3. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,
    1/
    Tu as envoyé le rapport mbrcheck et non ZHPDiag!
    Refais l'opération indiqué : ici stp et poste le rapport : ZHPDiag

    2/
    Télécharge TDSSKiller sur ton Bureau.

    # Décompresse le (clic droit sur le fichier et extraire) sur le bureau.
    # dans le dossier crée, déplacer le fichier TDSSKiller.exe pour le mettre sur le Bureau
    # Faire un double clic sur TDSSKiller.exe pour le lancer.
    # Cliquer sur Start scan pour lancer l'analyse,

    # Lorsque l'outil a terminé son travail d'inspection, si des nuisibles ("Malicious objects") ont été trouvés, vérifier que l'option Cure est sélectionnée,
    # Si des objects suspects "Suspicious objects" ont été détectés, sur l'écran de demande de confirmation, laisser l'option sur Skip.
    # Puis cliquer sur le bouton Continue.
    # Attendre l'affichage du fichier rapport.
    # Si l'outil a besoin d'un redémarrage pour finaliser le nettoyage, cliquer sur le bouton Reboot computer.

    Envoyer en réponse le rapport de TDSSKiller

    Note : Il se trouve aussi en C:\TDSSKiller.Version_Date_Heure_log.txt
    0
  4. sbelenne
     
    re voici le rapport ZHPDiag :

    Rapport de ZHPDiag v1.31.100 par Nicolas Coolman, Update du 17/06/2012
    Run by SBELENNE at 24/06/2012 17:58:51
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    Web site : http://nicolascoolman.skyrock.com/
    State : Version à jour.

    ---\\ Web Browser
    MSIE: Internet Explorer v

    ---\\ Windows Product Information
    ~ Langage: Français
    Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    ~ Windows(R) 7, OEM_SLP channel
    System Locked Preinstallation (OEM_SLP) : OK
    Windows ID Activation : OK
    ~ Windows Partial Key : RMV82
    Windows License : OK
    ~ Windows Remaining Initializations Number : 3
    Software Protection Service (Protection logicielle) : KO
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ System Information
    ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
    ~ Operating System: 64 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 6126 MB (70% free)
    System Restore: Inconnu (Unknown)
    System drive C: has 391 GB (42%) free of 919 GB

    ---\\ Logged in mode
    ~ Computer Name: SBELENNE-PC
    ~ User Name: SBELENNE
    ~ All Users Names: UpdatusUser, SBELENNE, HomeGroupUser$, Administrateur,
    ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
    Logged in as Administrator

    ---\\ Environnement Variables
    ~ System Unit : C:\
    ~ %AppData% : C:\Users\SBELENNE\AppData\Roaming\
    ~ %Desktop% : C:\Users\SBELENNE\Desktop\
    ~ %Favorites% : C:\Users\SBELENNE\Favorites\
    ~ %LocalAppData% : C:\Users\SBELENNE\AppData\Local\
    ~ %StartMenu% : C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 391 Go of 919 Go)
    D:\ CD-ROM drive (Not Inserted)
    E:\ Hard drive, Flash drive, Thumb drive (Free 67 Go of 488 Go)
    F:\ Hard drive, Flash drive, Thumb drive (Free 112 Go of 932 Go)
    G:\ Hard drive, Flash drive, Thumb drive (Free 114 Go of 150 Go)
    H:\ Hard drive, Flash drive, Thumb drive (Free 78 Go of 293 Go)
    I:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 7 Go)
    J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    L:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
    N:\ CD-ROM drive (Not Inserted)

    ---\\ Security Center & Tools Informations
    ~ Scan Security Center in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
    [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
    [MD5.870ECFEBD41C7B8F9C6777748368D51F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/05/2012 - 02:59:14.) -- C:\Windows\System32\wininet.dll [1392128]
    [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
    [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
    [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
    [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
    [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
    [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
    [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
    [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
    [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
    [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
    [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
    [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
    [MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
    [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
    [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
    [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
    [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
    [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
    ~ Scan Generic Processes in 00mn 00s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 1/2
    ~ Mes musiques (My Musics) : 1/3316
    ~ Mes Favoris (My Favorites) : 1/26
    ~ Mes Documents (My Documents) : 1/2033
    ~ Mon Bureau (My Desktop) : 1/4808
    ~ Menu demarrer (Programs) : 0/38
    ~ Scan Hidden Files in 00mn 02s

    ---\\ Processus lancés
    [MD5.B5C0AEB9DBB6E424936B2288F50BC79B] - (.Sonix - CameraMonitor Application.) -- C:\Windows\vsnp2std.exe [675840] [PID.2948]
    [MD5.FB0C8699B87F7140BB6201BE7B4B6778] - (.Pas de propriétaire - CameraMonitor Application.) -- C:\Windows\vsnpstd3.exe [827392] [PID.3000]
    [MD5.E78FA80D4D7FD757A53781E17A3B7402] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3487128] [PID.3008]
    [MD5.CEA0461AAE4B8B6216F164501B1B5A10] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [4910912] [PID.1312]
    [MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296] [PID.2252]
    [MD5.D9D79F547AE2A70C650DFCFC27AEC0F7] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421736] [PID.2692]
    [MD5.1B82BCF0B8F9228B39F75B0DFA079A21] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [462408] [PID.1812]
    [MD5.207B16FA69F61D1895F8D8532F587E4B] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe [263600] [PID.2552]
    [MD5.F9803B1B1FA3E9D34F309D2DD8DB30B5] - (.DT Soft Ltd - DAEMON Tools Shell Extensions Helper.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe [2998592] [PID.3380]
    [MD5.50650A6B920C576FC1C8266E17DD28BD] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480] [PID.3812]
    [MD5.D3C0837346C49095B8AF9EF54AD7E90A] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [913888] [PID.4104]
    [MD5.41623176FEF9DF3C113EAADADBB5FB42] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16864] [PID.4632]
    [MD5.682E4FBE954535E60C5DC7D4A3445ACC] - (.Adobe Systems, Inc. - Adobe Flash Player 11.3 r300.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe [1535176] [PID.2076]
    [MD5.E24F75DCD2A9576085DC2758EB040366] - (...) -- C:\Users\SBELENNE\securite\ZHPDiag\ZHPDiag.exe [4540928] [PID.4612]
    ~ Scan Processes Running in 00mn 00s

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Users\SBELENNE\AppData\Roaming\Mozilla\Firefox\Profiles\q930unnh.default\prefs.js
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
    M3 - MFPP: Plugins - [SBELENNE] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
    M2 - MFEP: prefs.js [SBELENNE - q930unnh.default\{1018e4d6-728f-4b20-ad56-37578a4de76b}] [] Flagfox v4.1.16 (.Dave Garrett.)
    ~ Scan Firefox Browser in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
    R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Interpréteur de commandes Windows.) (No version) -- (.not file.)
    ~ Scan IE Browser in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Scan Proxy management in 00mn 00s

    ---\\ Redirection du fichier Hosts (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Scan Hosts File in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
    O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
    O4 - HKCU\..\Run: [WebcamMaxAutoRun] . (.CoolwareMax - WebcamMax.) -- C:\Program Files (x86)\WebcamMax\WebcamMax.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
    ~ Scan Application in 00mn 00s

    ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Users\SBELENNE\Desktop\3D Live Pool - Raccourci.lnk . (...) -- C:\Program Files (x86)\3D Live Pool PC Game\3D Live Pool.exe
    O4 - Global Startup: C:\Users\SBELENNE\Desktop\Le Maillon Faible.lnk . (...) -- C:\Program Files (x86)\Activision\Le Maillon Faible\uninstall\slaunch.exe
    O4 - Global Startup: C:\Users\SBELENNE\Desktop\Safecracker.lnk . (.The Adventure Company - Kheops Studio.) -- C:\Program Files (x86)\The Adventure Company\Safecracker\Safecracker.exe
    O4 - Global Startup: C:\Users\SBELENNE\Desktop\scrabble2005 - Raccourci.lnk . (.Ubisoft Entertainment.) -- C:\Program Files (x86)\Ubisoft\SCRABBLE® 2005 EDITION\scrabble2005.exe
    O4 - Global Startup: C:\Users\SBELENNE\Desktop\t3dgm - Raccourci.lnk . (...) -- C:\Program Files (x86)\The Game Creators\The 3D Gamemaker\t3dgm.exe
    O4 - Global Startup: C:\Users\SBELENNE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\FreeArc.lnk . (...) -- C:\Program Files (x86)\FreeArc\bin\FreeArc.exe
    O4 - Global Startup: C:\Users\SBELENNE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk . (.AppWork GmbH.) -- C:\Program Files (x86)\JDownloader\JDownloaderPortable.exe
    O4 - Global Startup: C:\Users\SBELENNE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    ~ Scan Global Startup in 00mn 00s

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: Télécharger avec IDM . (...) -- C:\Program Files (x86)\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: Télécharger tous les liens avec IDM . (...) -- C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
    ~ Scan IE Menu Contextuel in 00mn 00s

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)
    ~ Scan Desktop Component in 00mn 00s

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
    [MD5.00000000000000000000000000000000] [APT] [{155B07B5-EF26-446B-BD13-F63C038E8CB7}] (...) -- C:\Users\SBELENNE\Desktop\mm2\INSTALL.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{24EF350D-BCB6-4F0B-B4AC-B241B7B0D15D}] (...) -- C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 2010\kitserver\manager.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{75744A4D-EB68-499F-9D97-3F47DE1390A4}] (...) -- C:\Users\SBELENNE\Desktop\installation pes 2010\Setup.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [{8248084C-3FD4-4568-8735-BC5C0D3A0112}] (...) -- C:\Users\SBELENNE\Downloads\Programs\STOR_Win7_XP_11.2.0.1006.exe (.not file.)
    [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
    ~ Scan Scheduled Task in 00mn 02s

    ---\\ Composants installés (ActiveSetup Installed Components) (O40) (None)

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 16/06/2012 - 01:11:36 - [7,091] ----D C:\Program Files (x86)\3D Live Pool PC Game
    O43 - CFD: 16/06/2012 - 01:36:33 - [559,666] ----D C:\Program Files (x86)\Activision
    O43 - CFD: 04/06/2012 - 14:41:10 - [122,146] ----D C:\Program Files (x86)\Adobe
    O43 - CFD: 21/05/2012 - 17:20:54 - [2,201] ----D C:\Program Files (x86)\Apple Software Update
    O43 - CFD: 16/06/2012 - 01:16:36 - [636,643] ----D C:\Program Files (x86)\Artefacts Studio
    O43 - CFD: 22/06/2012 - 16:19:49 - [463,684] ----D C:\Program Files (x86)\Atari
    O43 - CFD: 20/06/2012 - 12:05:41 - [864,798] ----D C:\Program Files (x86)\Avanquest
    O43 - CFD: 20/06/2012 - 12:10:22 - [2,746] ----D C:\Program Files (x86)\Avanquest update
    O43 - CFD: 23/05/2012 - 17:49:01 - [64,150] ----D C:\Program Files (x86)\AVS4YOU
    O43 - CFD: 21/05/2012 - 17:31:30 - [0,602] ----D C:\Program Files (x86)\Bonjour
    O43 - CFD: 26/05/2012 - 11:41:39 - [12,770] ----D C:\Program Files (x86)\CDBurnerXP
    O43 - CFD: 14/05/2012 - 13:07:37 - [3,432] ----D C:\Program Files (x86)\Cisco
    O43 - CFD: 24/05/2012 - 12:59:01 - [305,977] ----D C:\Program Files (x86)\Common Files
    O43 - CFD: 16/06/2012 - 01:27:02 - [1389,444] ----D C:\Program Files (x86)\Crash Time 4 - The Syndicate
    O43 - CFD: 13/06/2012 - 19:30:13 - [24,459] ----D C:\Program Files (x86)\DAEMON Tools Lite
    O43 - CFD: 13/06/2012 - 19:34:19 - [280,465] ----D C:\Program Files (x86)\Empire Interactive
    O43 - CFD: 25/05/2012 - 19:35:51 - [3,579] ----D C:\Program Files (x86)\FLV-Media Player
    O43 - CFD: 14/05/2012 - 18:55:47 - [29,247] ----D C:\Program Files (x86)\FreeArc
    O43 - CFD: 22/06/2012 - 16:19:50 - [150,194] --H-D C:\Program Files (x86)\InstallShield Installation Information
    O43 - CFD: 13/06/2012 - 16:54:52 - [35,446] ----D C:\Program Files (x86)\Intel
    O43 - CFD: 14/05/2012 - 13:53:52 - [9,391] ----D C:\Program Files (x86)\Internet Download Manager
    O43 - CFD: 13/06/2012 - 03:22:08 - [6,169] ----D C:\Program Files (x86)\Internet Explorer
    O43 - CFD: 21/05/2012 - 17:32:33 - [120,831] ----D C:\Program Files (x86)\iTunes
    O43 - CFD: 15/05/2012 - 14:23:32 - [93,354] ----D C:\Program Files (x86)\Java
    O43 - CFD: 22/06/2012 - 19:26:24 - [161,961] ----D C:\Program Files (x86)\JDownloader
    O43 - CFD: 15/05/2012 - 19:19:48 - [-1949,422] ----D C:\Program Files (x86)\KONAMI
    O43 - CFD: 14/05/2012 - 12:52:43 - [6,206] ----D C:\Program Files (x86)\ma-config.com
    O43 - CFD: 24/06/2012 - 15:17:43 - [11,554] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
    O43 - CFD: 16/06/2012 - 01:26:04 - [10,745] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
    O43 - CFD: 15/05/2012 - 21:39:13 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
    O43 - CFD: 05/06/2012 - 15:49:58 - [-1231,424] ----D C:\Program Files (x86)\Milestone
    O43 - CFD: 30/05/2012 - 04:47:26 - [426,628] ----D C:\Program Files (x86)\Mindscape
    O43 - CFD: 17/06/2012 - 15:47:30 - [37,206] ----D C:\Program Files (x86)\Mozilla Firefox
    O43 - CFD: 18/06/2012 - 11:18:06 - [0,195] ----D C:\Program Files (x86)\Mozilla Maintenance Service
    O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
    O43 - CFD: 22/06/2012 - 02:06:25 - [0] ----D C:\Program Files (x86)\MSXML 4.0
    O43 - CFD: 13/06/2012 - 16:57:46 - [118,425] ----D C:\Program Files (x86)\NVIDIA Corporation
    O43 - CFD: 15/05/2012 - 14:24:24 - [33,186] ----D C:\Program Files (x86)\Oracle
    O43 - CFD: 16/06/2012 - 01:10:47 - [178,144] ----D C:\Program Files (x86)\Petank Party
    O43 - CFD: 21/05/2012 - 17:28:21 - [72,431] ----D C:\Program Files (x86)\QuickTime
    O43 - CFD: 14/05/2012 - 13:08:42 - [3,210] ----D C:\Program Files (x86)\Realtek
    O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
    O43 - CFD: 22/06/2012 - 12:26:29 - [230,851] ----D C:\Program Files (x86)\SKIRYN
    O43 - CFD: 28/05/2012 - 17:13:45 - [1216,838] ----D C:\Program Files (x86)\Sonic the Hedgehog 4 - Episode II
    O43 - CFD: 14/05/2012 - 13:09:07 - [0] --H-D C:\Program Files (x86)\Temp
    O43 - CFD: 16/06/2012 - 01:18:46 - [360,001] ----D C:\Program Files (x86)\The Adventure Company
    O43 - CFD: 17/06/2012 - 15:32:27 - [1280,806] ----D C:\Program Files (x86)\The Game Creators
    O43 - CFD: 14/05/2012 - 16:26:06 - [727,799] ----D C:\Program Files (x86)\TmNationsForever
    O43 - CFD: 16/05/2012 - 01:44:20 - [1703,916] ----D C:\Program Files (x86)\TmUnitedForever
    O43 - CFD: 15/05/2012 - 14:00:47 - [1279,054] ----D C:\Program Files (x86)\TrackMania United
    O43 - CFD: 16/06/2012 - 01:40:39 - [1809,394] ----D C:\Program Files (x86)\Ubisoft
    O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
    O43 - CFD: 13/06/2012 - 17:23:59 - [9,935] ----D C:\Program Files (x86)\Veetle
    O43 - CFD: 14/05/2012 - 14:11:42 - [88,797] ----D C:\Program Files (x86)\VideoLAN
    O43 - CFD: 22/05/2012 - 17:52:02 - [46,489] ----D C:\Program Files (x86)\WebcamMax
    O43 - CFD: 12/04/2011 - 11:16:36 - [0,500] ----D C:\Program Files (x86)\Windows Defender
    O43 - CFD: 12/04/2011 - 11:16:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail
    O43 - CFD: 12/04/2011 - 11:16:36 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
    O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
    O43 - CFD: 12/04/2011 - 11:16:36 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
    O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
    O43 - CFD: 12/04/2011 - 11:16:36 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
    O43 - CFD: 06/06/2012 - 15:14:14 - [-702,162] ----D C:\Program Files (x86)\Worms Reloaded
    O43 - CFD: 22/05/2012 - 16:38:14 - [20,229] ----D C:\Program Files (x86)\Zylom Games
    O43 - CFD: 04/06/2012 - 14:41:13 - [6,046] ----D C:\Program Files (x86)\Common Files\Adobe
    O43 - CFD: 21/05/2012 - 17:32:19 - [105,239] ----D C:\Program Files (x86)\Common Files\Apple
    O43 - CFD: 23/05/2012 - 17:48:49 - [92,263] ----D C:\Program Files (x86)\Common Files\AVSMedia
    O43 - CFD: 14/05/2012 - 13:08:30 - [5,235] ----D C:\Program Files (x86)\Common Files\InstallShield
    O43 - CFD: 14/05/2012 - 13:16:44 - [0,012] ----D C:\Program Files (x86)\Common Files\Intel Corporation
    O43 - CFD: 15/05/2012 - 14:24:40 - [1,181] ----D C:\Program Files (x86)\Common Files\Java
    O43 - CFD: 15/05/2012 - 14:25:59 - [1,962] ----D C:\Program Files (x86)\Common Files\Metaboli
    O43 - CFD: 16/06/2012 - 01:11:05 - [19,567] ----D C:\Program Files (x86)\Common Files\microsoft shared
    O43 - CFD: 14/05/2012 - 13:06:10 - [0,185] ----D C:\Program Files (x86)\Common Files\postureAgent
    O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
    O43 - CFD: 22/05/2012 - 02:24:19 - [25,314] ----D C:\Program Files (x86)\Common Files\snp2std
    O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
    O43 - CFD: 14/05/2012 - 16:33:08 - [9,771] ----D C:\Program Files (x86)\Common Files\System
    O43 - CFD: 04/06/2012 - 14:43:59 - [137,377] ----D C:\ProgramData\Adobe
    O43 - CFD: 21/05/2012 - 17:25:11 - [61,248] ----D C:\ProgramData\Apple
    O43 - CFD: 21/05/2012 - 17:32:19 - [72,499] ----D C:\ProgramData\Apple Computer
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
    O43 - CFD: 20/06/2012 - 12:10:22 - [34,863] ----D C:\ProgramData\Avanquest
    O43 - CFD: 20/06/2012 - 12:09:04 - [0] ----D C:\ProgramData\Avanquest Software
    O43 - CFD: 23/05/2012 - 17:49:57 - [0] ----D C:\ProgramData\AVS4YOU
    O43 - CFD: 14/05/2012 - 12:43:20 - [0] --H-D C:\ProgramData\Bureau
    O43 - CFD: 26/05/2012 - 11:41:42 - [0] ----D C:\ProgramData\Canneverbe Limited
    O43 - CFD: 18/06/2012 - 11:19:07 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
    O43 - CFD: 14/05/2012 - 13:38:13 - [137,228] ----D C:\ProgramData\ESET
    O43 - CFD: 14/05/2012 - 12:43:20 - [0] --H-D C:\ProgramData\Favoris
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
    O43 - CFD: 15/05/2012 - 13:35:04 - [0,002] ----D C:\ProgramData\HiddenSecretsNightmare
    O43 - CFD: 14/05/2012 - 13:06:33 - [0,072] ----D C:\ProgramData\Intel
    O43 - CFD: 22/06/2012 - 00:39:52 - [75,533] ----D C:\ProgramData\IronCode
    O43 - CFD: 15/05/2012 - 19:19:48 - [62,031] ----D C:\ProgramData\KONAMI
    O43 - CFD: 14/05/2012 - 12:52:40 - [1,207] ----D C:\ProgramData\ma-config.com
    O43 - CFD: 24/06/2012 - 15:17:42 - [7,016] ----D C:\ProgramData\Malwarebytes
    O43 - CFD: 04/06/2012 - 14:41:32 - [0] ----D C:\ProgramData\McAfee
    O43 - CFD: 14/05/2012 - 12:43:20 - [0] --H-D C:\ProgramData\Menu Démarrer
    O43 - CFD: 24/06/2012 - 16:30:07 - [12,553] -S--D C:\ProgramData\Microsoft
    O43 - CFD: 14/05/2012 - 12:43:20 - [0] --H-D C:\ProgramData\Modèles
    O43 - CFD: 14/05/2012 - 13:51:15 - [0,007] ----D C:\ProgramData\Mozilla
    O43 - CFD: 24/06/2012 - 17:50:03 - [3,983] ----D C:\ProgramData\NVIDIA
    O43 - CFD: 14/05/2012 - 12:54:52 - [3,127] ----D C:\ProgramData\NVIDIA Corporation
    O43 - CFD: 28/05/2012 - 17:02:16 - [0,645] ----D C:\ProgramData\RELOADED
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
    O43 - CFD: 15/05/2012 - 14:24:40 - [0,000] ----D C:\ProgramData\Sun
    O43 - CFD: 16/06/2012 - 01:27:16 - [0,029] ----D C:\ProgramData\Synetic
    O43 - CFD: 22/06/2012 - 11:06:37 - [0] ---AD C:\ProgramData\TEMP
    O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
    O43 - CFD: 15/05/2012 - 14:43:23 - [2,420] ----D C:\ProgramData\TmForever
    O43 - CFD: 16/05/2012 - 12:37:08 - [25,481] ----D C:\ProgramData\TrackMania
    O43 - CFD: 22/05/2012 - 17:59:21 - [3,593] ----D C:\ProgramData\WebcamMax
    O43 - CFD: 22/05/2012 - 16:38:16 - [0,248] ----D C:\ProgramData\Zylom
    O43 - CFD: 21/05/2012 - 17:22:41 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
    O43 - CFD: 04/06/2012 - 14:43:14 - [4,677] ----D C:\Users\SBELENNE\AppData\Roaming\Adobe
    O43 - CFD: 21/05/2012 - 17:33:19 - [3,675] ----D C:\Users\SBELENNE\AppData\Roaming\Apple Computer
    O43 - CFD: 23/05/2012 - 17:49:58 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\AVS4YOU
    O43 - CFD: 15/05/2012 - 23:28:07 - [1,545] ----D C:\Users\SBELENNE\AppData\Roaming\BlackBean
    O43 - CFD: 26/05/2012 - 11:41:42 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\Canneverbe Limited
    O43 - CFD: 24/06/2012 - 17:45:11 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\DAEMON Tools Lite
    O43 - CFD: 24/06/2012 - 17:49:21 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\DMCache
    O43 - CFD: 15/06/2012 - 17:06:28 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\dvdcss
    O43 - CFD: 14/05/2012 - 13:38:43 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\ESET
    O43 - CFD: 14/05/2012 - 18:55:47 - [0,006] ----D C:\Users\SBELENNE\AppData\Roaming\FreeArc
    O43 - CFD: 22/05/2012 - 16:38:25 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\Identities
    O43 - CFD: 16/06/2012 - 00:50:24 - [-1294,782] ----D C:\Users\SBELENNE\AppData\Roaming\IDM
    O43 - CFD: 14/05/2012 - 13:07:02 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\InstallShield
    O43 - CFD: 14/05/2012 - 13:16:44 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\Intel Corporation
    O43 - CFD: 22/06/2012 - 00:39:51 - [0,641] ----D C:\Users\SBELENNE\AppData\Roaming\IronCode
    O43 - CFD: 14/05/2012 - 12:53:30 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\Macromedia
    O43 - CFD: 24/06/2012 - 15:17:47 - [0,004] ----D C:\Users\SBELENNE\AppData\Roaming\Malwarebytes
    O43 - CFD: 12/04/2011 - 11:27:52 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Media Center Programs
    O43 - CFD: 04/06/2012 - 14:43:14 - [4,463] -S--D C:\Users\SBELENNE\AppData\Roaming\Microsoft
    O43 - CFD: 05/06/2012 - 16:03:27 - [1,373] ----D C:\Users\SBELENNE\AppData\Roaming\Milestone
    O43 - CFD: 14/05/2012 - 13:51:24 - [18,317] ----D C:\Users\SBELENNE\AppData\Roaming\Mozilla
    O43 - CFD: 16/05/2012 - 00:11:39 - [0,013] ----D C:\Users\SBELENNE\AppData\Roaming\NVIDIA
    O43 - CFD: 24/06/2012 - 17:40:09 - [0,079] ----D C:\Users\SBELENNE\AppData\Roaming\vlc
    O43 - CFD: 22/05/2012 - 17:52:53 - [0,000] ----D C:\Users\SBELENNE\AppData\Roaming\WebcamMax
    O43 - CFD: 14/05/2012 - 13:53:00 - [0,000] ----D C:\Users\SBELENNE\AppData\Roaming\WinRAR
    O43 - CFD: 22/05/2012 - 16:38:25 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Zylom
    O43 - CFD: 04/06/2012 - 14:43:14 - [14,553] ----D C:\Users\SBELENNE\AppData\Local\Adobe
    O43 - CFD: 02/06/2012 - 12:46:37 - [0] ----D C:\Users\SBELENNE\AppData\Local\Apple
    O43 - CFD: 06/06/2012 - 00:15:36 - [10,340] ----D C:\Users\SBELENNE\AppData\Local\Apple Computer
    O43 - CFD: 14/05/2012 - 12:43:33 - [0] ----D C:\Users\SBELENNE\AppData\Local\Application Data
    O43 - CFD: 22/06/2012 - 12:21:41 - [0,011] ----D C:\Users\SBELENNE\AppData\Local\Black_Tree_Gaming
    O43 - CFD: 16/06/2012 - 01:15:00 - [4,495] ----D C:\Users\SBELENNE\AppData\Local\Diagnostics
    O43 - CFD: 31/05/2012 - 23:21:49 - [1138,676] ----D C:\Users\SBELENNE\AppData\Local\ESET
    O43 - CFD: 13/06/2012 - 19:53:38 - [0,094] ----D C:\Users\SBELENNE\AppData\Local\FlatOut Ultimate Carnage
    O43 - CFD: 14/05/2012 - 12:43:33 - [0] ----D C:\Users\SBELENNE\AppData\Local\Historique
    O43 - CFD: 12/06/2012 - 22:53:08 - [0] ----D C:\Users\SBELENNE\AppData\Local\Macromedia
    O43 - CFD: 20/06/2012 - 12:08:42 - [23,611] ----D C:\Users\SBELENNE\AppData\Local\Micro Application
    O43 - CFD: 13/06/2012 - 19:53:47 - [24,326] ----D C:\Users\SBELENNE\AppData\Local\Microsoft
    O43 - CFD: 20/06/2012 - 12:15:32 - [0,003] ----D C:\Users\SBELENNE\AppData\Local\Micro_Application
    O43 - CFD: 31/05/2012 - 16:11:13 - [44,110] ----D C:\Users\SBELENNE\AppData\Local\Mozilla
    O43 - CFD: 05/06/2012 - 15:42:03 - [0] ----D C:\Users\SBELENNE\AppData\Local\Paint.NET
    O43 - CFD: 22/06/2012 - 12:22:07 - [0,001] ----D C:\Users\SBELENNE\AppData\Local\Skyrim
    O43 - CFD: 24/06/2012 - 17:58:41 - [0,001] ----D C:\Users\SBELENNE\AppData\Local\Temp
    O43 - CFD: 14/05/2012 - 12:43:33 - [0] ----D C:\Users\SBELENNE\AppData\Local\Temporary Internet Files
    O43 - CFD: 22/06/2012 - 14:28:13 - [50,063] ----D C:\Users\SBELENNE\AppData\Local\VirtualStore
    O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    O43 - CFD: 16/06/2012 - 01:37:07 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Activision
    O43 - CFD: 14/05/2012 - 16:37:11 - [0,000] R---D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    O43 - CFD: 23/05/2012 - 17:48:59 - [0,001] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
    O43 - CFD: 13/06/2012 - 19:39:55 - [0,003] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Empire Interactive
    O43 - CFD: 25/05/2012 - 19:35:34 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
    O43 - CFD: 14/05/2012 - 18:55:46 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
    O43 - CFD: 15/05/2012 - 13:54:43 - [0] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
    O43 - CFD: 14/05/2012 - 13:53:45 - [0,006] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
    O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    O43 - CFD: 24/06/2012 - 14:52:21 - [0] R---D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    O43 - CFD: 14/05/2012 - 13:52:52 - [0,003] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
    O43 - CFD: 22/05/2012 - 16:38:16 - [0,000] ----D C:\Users\SBELENNE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zylom Games
    O43 - CFD: 16/06/2012 - 01:11:36 - [7,091] ----D C:\Program Files (x86)\3D Live Pool PC Game
    O43 - CFD: 16/06/2012 - 01:36:33 - [559,666] ----D C:\Program Files (x86)\Activision
    O43 - CFD: 04/06/2012 - 14:41:10 - [122,146] ----D C:\Program Files (x86)\Adobe
    O43 - CFD: 21/05/2012 - 17:20:54 - [2,201] ----D C:\Program Files (x86)\Apple Software Update
    O43 - CFD: 16/06/2012 - 01:16:36 - [636,643] ----D C:\Program Files (x86)\Artefacts Studio
    O43 - CFD: 22/06/2012 - 16:19:49 - [463,684] ----D C:\Program Files (x86)\Atari
    O43 - CFD: 20/06/2012 - 12:05:41 - [864,798] ----D C:\Program Files (x86)\Avanquest
    O43 - CFD: 20/06/2012 - 12:10:22 - [2,746] ----D C:\Program Files (x86)\Avanquest update
    O43 - CFD: 23/05/2012 - 17:49:01 - [64,150] ----D C:\Program Files (x86)\AVS4YOU
    O43 - CFD: 21/05/2012 - 17:31:30 - [0,602] ----D C:\Program Files (x86)\Bonjour
    O43 - CFD: 26/05/2012 - 11:41:39 - [12,770] ----D C:\Program Files (x86)\CDBurnerXP
    O43 - CFD: 14/05/2012 - 13:07:37 - [3,432] ----D C:\Program Files (x86)\Cisco
    O43 - CFD: 24/05/2012 - 12:59:01 - [305,977] ----D C:\Program Files (x86)\Common Files
    O43 - CFD: 16/06/2012 - 01:27:02 - [1389,444] ----D C:\Program Files (x86)\Crash Time 4 - The Syndicate
    O43 - CFD: 13/06/2012 - 19:30:13 - [24,459] ----D C:\Program Files (x86)\DAEMON Tools Lite
    O43 - CFD: 13/06/2012 - 19:34:19 - [280,465] ----D C:\Program Files (x86)\Empire Interactive
    O43 - CFD: 25/05/2012 - 19:35:51 - [3,579] ----D C:\Program Files (x86)\FLV-Media Player
    O43 - CFD: 14/05/2012 - 18:55:47 - [29,247] ----D C:\Program Files (x86)\FreeArc
    O43 - CFD: 22/06/2012 - 16:19:50 - [150,194] --H-D C:\Program Files (x86)\InstallShield Installation Information
    O43 - CFD: 13/06/2012 - 16:54:52 - [35,446] ----D C:\Program Files (x86)\Intel
    O43 - CFD: 14/05/2012 - 13:53:52 - [9,391] ----D C:\Program Files (x86)\Internet Download Manager
    O43 - CFD: 13/06/2012 - 03:22:08 - [6,169] ----D C:\Program Files (x86)\Internet Explorer
    O43 - CFD: 21/05/2012 - 17:32:33 - [120,831] ----D C:\Program Files (x86)\iTunes
    O43 - CFD: 15/05/2012 - 14:23:32 - [93,354] ----D C:\Program Files (x86)\Java
    O43 - CFD: 22/06/2012 - 19:26:24 - [161,961] ----D C:\Program Files (x86)\JDownloader
    O43 - CFD: 15/05/2012 - 19:19:48 - [-1949,422] ----D C:\Program Files (x86)\KONAMI
    O43 - CFD: 14/05/2012 - 12:52:43 - [6,206] ----D C:\Program Files (x86)\ma-config.com
    O43 - CFD: 24/06/2012 - 15:17:43 - [11,554] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
    O43 - CFD: 16/06/2012 - 01:26:04 - [10,745] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
    O43 - CFD: 15/05/2012 - 21:39:13 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
    O43 - CFD: 05/06/2012 - 15:49:58 - [-1231,424] ----D C:\Program Files (x86)\Milestone
    O43 - CFD: 30/05/2012 - 04:47:26 - [426,628] ----D C:\Program Files (x86)\Mindscape
    O43 - CFD: 17/06/2012 - 15:47:30 - [37,206] ----D C:\Program Files (x86)\Mozilla Firefox
    O43 - CFD: 18/06/2012 - 11:18:06 - [0,195] ----D C:\Program Files (x86)\Mozilla Maintenance Service
    O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
    O43 - CFD: 22/06/2012 - 02:06:25 - [0] ----D C:\Program Files (x86)\MSXML 4.0
    O43 - CFD: 13/06/2012 - 16:57:46 - [118,425] ----D C:\Program Files (x86)\NVIDIA Corporation
    O43 - CFD: 15/05/2012 - 14:24:24 - [33,186] ----D C:\Program Files (x86)\Oracle
    O43 - CFD: 16/06/2012 - 01:10:47 - [178,144] ----D C:\Program Files (x86)\Petank Party
    O43 - CFD: 21/05/2012 - 17:28:21 - [72,431] ----D C:\Program Files (x86)\QuickTime
    O43 - CFD: 14/05/2012 - 13:08:42 - [3,210] ----D C:\Program Files (x86)\Realtek
    O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
    O43 - CFD: 22/06/2012 - 12:26:29 - [230,851] ----D C:\Program Files (x86)\SKIRYN
    O43 - CFD: 28/05/2012 - 17:13:45 - [1216,838] ----D C:\Program Files (x86)\Sonic the Hedgehog 4 - Episode II
    O43 - CFD: 14/05/2012 - 13:09:07 - [0] --H-D C:\Program Files (x86)\Temp
    O43 - CFD: 16/06/2012 - 01:18:46 - [360,001] ----D C:\Program Files (x86)\The Adventure Company
    O43 - CFD: 17/06/2012 - 15:32:27 - [1280,806] ----D C:\Program Files (x86)\The Game Creators
    O43 - CFD: 14/05/2012 - 16:26:06 - [727,799] ----D C:\Program Files (x86)\TmNationsForever
    O43 - CFD: 16/05/2012 - 01:44:20 - [1703,916] ----D C:\Program Files (x86)\TmUnitedForever
    O43 - CFD: 15/05/2012 - 14:00:47 - [1279,054] ----D C:\Program Files (x86)\TrackMania United
    O43 - CFD: 16/06/2012 - 01:40:39 - [1809,394] ----D C:\Program Files (x86)\Ubisoft
    O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
    O43 - CFD: 13/06/2012 - 17:23:59 - [9,935] ----D C:\Program Files (x86)\Veetle
    O43 - CFD: 14/05/2012 - 14:11:42 - [88,797] ----D C:\Program Files (x86)\VideoLAN
    O43 - CFD: 22/05/2012 - 17:52:02 - [46,489] ----D C:\Program Files (x86)\WebcamMax
    O43 - CFD: 12/04/2011 - 11:16:36 - [0,500] ----D C:\Program Files (x86)\Windows Defender
    O43 - CFD: 12/04/2011 - 11:16:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail
    O43 - CFD: 12/04/2011 - 11:16:36 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
    O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
    O43 - CFD: 12/04/2011 - 11:16:36 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
    O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
    O43 - CFD: 12/04/2011 - 11:16:36 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
    O43 - CFD: 06/06/2012 - 15:14:14 - [-702,162] ----D C:\Program Files (x86)\Worms Reloaded
    O43 - CFD: 22/05/2012 - 16:38:14 - [20,229] ----D C:\Program Files (x86)\Zylom Games
    O43 - CFD: 04/06/2012 - 14:41:13 - [6,046] ----D C:\Program Files (x86)\Common Files\Adobe
    O43 - CFD: 21/05/2012 - 17:32:19 - [105,239] ----D C:\Program Files (x86)\Common Files\Apple
    O43 - CFD: 23/05/2012 - 17:48:49 - [92,263] ----D C:\Program Files (x86)\Common Files\AVSMedia
    O43 - CFD: 14/05/2012 - 13:08:30 - [5,235] ----D C:\Program Files (x86)\Common Files\InstallShield
    O43 - CFD: 14/05/2012 - 13:16:44 - [0,012] ----D C:\Program Files (x86)\Common Files\Intel Corporation
    O43 - CFD: 15/05/2012 - 14:24:40 - [1,181] ----D C:\Program Files (x86)\Common Files\Java
    O43 - CFD: 15/05/2012 - 14:25:59 - [1,962] ----D C:\Program Files (x86)\Common Files\Metaboli
    O43 - CFD: 16/06/2012 - 01:11:05 - [19,567] ----D C:\Program Files (x86)\Common Files\microsoft shared
    O43 - CFD: 14/05/2012 - 13:06:10 - [0,185] ----D C:\Program Files (x86)\Common Files\postureAgent
    O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
    O43 - CFD: 22/05/2012 - 02:24:19 - [25,314] ----D C:\Program Files (x86)\Common Files\snp2std
    O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
    O43 - CFD: 14/05/2012 - 16:33:08 - [9,771] ----D C:\Program Files (x86)\Common Files\System
    ~ Scan Program Folder in 00mn 28s

    ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
    O44 - LFC:[MD5.8C13088ACCBAB915221C46F6052DC5F0] - 24/06/2012 - 16:52:45 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1842129]
    O44 - LFC:[MD5.D74E3C688AA4F552EB9F55CB8EA67170] - 24/06/2012 - 16:50:07 ---A- . (...) -- C:\Windows\setupact.log [56]
    O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/06/2012 - 16:50:07 ---A- . (...) -- C:\Windows\setuperr.log [0]
    O44 - LFC:[MD5.F6999DADE0A2C63FBFB0469294B55D56] - 24/06/2012 - 16:50:06 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [348312]
    O44 - LFC:[MD5.64AE46C2836F87BAA5473A5D47AA01F1] - 24/06/2012 - 16:50:03 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
    O44 - LFC:[MD5.34DC37D35DE5051960B93EC3B5E17617] - 24/06/2012 - 13:59:21 ---A- . (...) -- C:\TDSSKiller.2.7.41.0_24.06.2012_14.58.43_log.txt [127636]
    O44 - LFC:[MD5.5E0CD4AE3FF9B2AA657FBCC692548DAA] - 22/06/2012 - 15:16:13 . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\System32\perfc009.dat [364352]]]]]
    O44 - LFC:[MD5.BF5318759A816D19A63346F918435272] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1661710]
    O44 - LFC:[MD5.5E0CD4AE3FF9B2AA657FBCC692548DAA] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [120870]
    O44 - LFC:[MD5.9F7266D26E8C7B332EC5D76556B11B6F] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [148574]
    O44 - LFC:[MD5.C06A020D057DE68092C4CD82178689B0] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [651938]
    O44 - LFC:[MD5.99EC02466F758380504D4F984DA0582B] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745056]
    O44 - LFC:[MD5.BF5318759A816D19A63346F918435272] - 22/06/2012 - 15:16:13 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1661710]
    O44 - LFC:[MD5.9F1871743384288A0D13EF1FBFBFB164] - 13/06/2012 - 15:56:24 . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\System32\nvhdap64.dll [364352]]
    O44 - LFC:[MD5.EF8979B2B8802D7372F37529C4C1A094] - 13/06/2012 - 15:56:24 . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\System32\nvinitx.dll [364352]]]
    O44 - LFC:[MD5.B521C917323C51F858F349346A760369] - 13/06/2012 - 15:56:24 . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\System32\nvoglv64.dll [364352]]]]
    O44 - LFC:[MD5.763C6C130FEE93EEB0CB3DFB365F3259] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Driver, Version 301.42.) -- C:\Windows\SysNative\nvcuda.dll [8139072]
    O44 - LFC:[MD5.763C6C130FEE93EEB0CB3DFB365F3259] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Driver, Version 301.42.) -- C:\Windows\System32\nvcuda.dll [8139072]
    O44 - LFC:[MD5.27A7461D26E098E4CDC9902D581ABAAA] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 301.4.) -- C:\Windows\SysNative\nvcuvid.dll [2681664]
    O44 - LFC:[MD5.27A7461D26E098E4CDC9902D581ABAAA] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Decode API, Version 301.4.) -- C:\Windows\System32\nvcuvid.dll [2681664]
    O44 - LFC:[MD5.91698A30542A6443421E629954DD3A92] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 301.42.) -- C:\Windows\SysNative\nvcuvenc.dll [2881856]
    O44 - LFC:[MD5.91698A30542A6443421E629954DD3A92] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Video Encoder, Version 301.42.) -- C:\Windows\System32\nvcuvenc.dll [2881856]
    O44 - LFC:[MD5.B521C917323C51F858F349346A760369] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA Compatible OpenGL ICD.) -- C:\Windows\SysNative\nvoglv64.dll [25743168]
    O44 - LFC:[MD5.C1F84FDC305AC75197F653B340F1645E] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA Compiler, Version 301.42.) -- C:\Windows\SysNative\nvcompiler.dll [25248064]
    O44 - LFC:[MD5.C1F84FDC305AC75197F653B340F1645E] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA Compiler, Version 301.42.) -- C:\Windows\System32\nvcompiler.dll [25248064]
    O44 - LFC:[MD5.9F1871743384288A0D13EF1FBFBFB164] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\SysNative\nvhdap64.dll [31040]
    O44 - LFC:[MD5.5087C9C50C40919D0CDDB2D7502B8BC2] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\SysNative\nvdecodemft.dll [364352]
    O44 - LFC:[MD5.5087C9C50C40919D0CDDB2D7502B8BC2] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA Video Decoder MFT, Version 301.42.) -- C:\Windows\System32\nvdecodemft.dll [364352]
    O44 - LFC:[MD5.EF8979B2B8802D7372F37529C4C1A094] - 13/06/2012 - 15:56:24 ---A- . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 301.) -- C:\Windows\SysNative\nvinitx.dll [246592]
    O44 - LFC:[MD5.53E83F1F6CF9D62F32801CF66D8352A8] - 01/05/2012 - 06:40:20 . (...) -- C:\Windows\System32\profsvc.dll [1661710]]
    O44 - LFC:[MD5.6D5DCC1579B3961D791ABDE286A1CB5E] - 26/04/2012 - 06:41:56 . (...) -- C:\Windows\System32\rdpwsx.dll [1661710]]]]
    O44 - LFC:[MD5.5B236296E233CAA6BF86BE0C6501A224] - 26/04/2012 - 06:41:55 . (...) -- C:\Windows\System32\rdpcorekmts.dll [1661710]]]
    ~ Scan Files in 00mn 05s

    ---\\ Contrôle du Safe Boot (CSB) (O49) (None)

    ---\\ MountPoints2 Shell Key (O51) (None)

    ---\\ ShareTools MSconfig StartupReg (O53) (None)

    ---\\ Liste des Drivers Système (O58)
    O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
    O58 - SDL:[MD5.9F66C4BD06334BB772317C438644EF74] - 25/01/2007 - 17:48:34 ---A- . (.Pas de propriétaire - USB2.0 PC Camera driver.) -- C:\Windows\SysWOW64\drivers\sncamd.sys [25472]
    ~ Scan Drivers in 00mn 00s

    ---\\ File Associations Shell Spawning (O67)
    O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    ~ Scan Keys in 00mn 00s

    ---\\ Start Menu Internet (O68) (None)

    ---\\ Search Browser Infection (O69)
    O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
    ~ Scan Keys in 00mn 00s

    ---\\ Recherche des services démarrés par Svchost (O83) (None)

    ---\\ Recherche particuliere à la racine de certains dossiers (O84)
    [MD5.BA08C02A209407416793D716E732E02C] [SPRF][17/06/2012] (...) -- C:\Users\SBELENNE\Desktop\T3DGMInstaller.exe [317590904]
    ~ Scan Files in 00mn 03s

    End of the scan (544 lines in 00mn 53s)(0)

    ET VOICI LE RAPPORT TDSSKiller :

    18:03:43.0254 1816 TDSS rootkit removing tool 2.7.41.0 Jun 20 2012 20:53:32
    18:03:43.0360 1816 ============================================================
    18:03:43.0360 1816 Current date / time: 2012/06/24 18:03:43.0360
    18:03:43.0360 1816 SystemInfo:
    18:03:43.0360 1816
    18:03:43.0360 1816 OS Version: 6.1.7601 ServicePack: 1.0
    18:03:43.0360 1816 Product type: Workstation
    18:03:43.0360 1816 ComputerName: SBELENNE-PC
    18:03:43.0361 1816 UserName: SBELENNE
    18:03:43.0361 1816 Windows directory: C:\Windows
    18:03:43.0361 1816 System windows directory: C:\Windows
    18:03:43.0361 1816 Running under WOW64
    18:03:43.0361 1816 Processor architecture: Intel x64
    18:03:43.0361 1816 Number of processors: 8
    18:03:43.0361 1816 Page size: 0x1000
    18:03:43.0361 1816 Boot type: Normal boot
    18:03:43.0361 1816 ============================================================
    18:03:43.0689 1816 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    18:03:43.0698 1816 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    18:03:43.0708 1816 Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    18:03:43.0718 1816 Drive \Device\Harddisk3\DR3 - Size: 0x1CD800000 (7.21 Gb), SectorSize: 0x200, Cylinders: 0x3AD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
    18:03:43.0738 1816 ============================================================
    18:03:43.0738 1816 \Device\Harddisk0\DR0:
    18:03:43.0738 1816 MBR partitions:
    18:03:43.0738 1816 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x4E800, BlocksNum 0x187F000
    18:03:43.0738 1816 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x18CD800, BlocksNum 0x72E38800
    18:03:43.0738 1816 \Device\Harddisk1\DR1:
    18:03:43.0738 1816 MBR partitions:
    18:03:43.0738 1816 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3D08FC7E
    18:03:43.0738 1816 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3D08FCBD, BlocksNum 0x12C845DF
    18:03:43.0738 1816 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x4FD1429C, BlocksNum 0x249F1725
    18:03:43.0738 1816 \Device\Harddisk2\DR2:
    18:03:43.0738 1816 MBR partitions:
    18:03:43.0738 1816 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
    18:03:43.0738 1816 \Device\Harddisk3\DR3:
    18:03:43.0738 1816 MBR partitions:
    18:03:43.0738 1816 \Device\Harddisk3\DR3\Partition0: MBR, Type 0xB, StartLBA 0x2000, BlocksNum 0xE6A000
    18:03:43.0738 1816 ============================================================
    18:03:43.0818 1816 C: <-> \Device\Harddisk0\DR0\Partition1
    18:03:43.0838 1816 E: <-> \Device\Harddisk1\DR1\Partition0
    18:03:43.0848 1816 F: <-> \Device\Harddisk2\DR2\Partition0
    18:03:43.0898 1816 G: <-> \Device\Harddisk1\DR1\Partition1
    18:03:43.0928 1816 H: <-> \Device\Harddisk1\DR1\Partition2
    18:03:43.0928 1816 ============================================================
    18:03:43.0928 1816 Initialize success
    18:03:43.0928 1816 ============================================================
    18:03:55.0409 4764 ============================================================
    18:03:55.0409 4764 Scan started
    18:03:55.0409 4764 Mode: Manual; SigCheck; TDLFS;
    18:03:55.0409 4764 ============================================================
    18:03:56.0022 4764 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
    18:03:56.0130 4764 1394ohci - ok
    18:03:56.0214 4764 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
    18:03:56.0232 4764 ACPI - ok
    18:03:56.0266 4764 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
    18:03:56.0342 4764 AcpiPmi - ok
    18:03:56.0415 4764 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    18:03:56.0426 4764 AdobeARMservice - ok
    18:03:56.0541 4764 AdobeFlashPlayerUpdateSvc (990dc6edc9f933194d7cd4e65146bc94) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    18:03:56.0556 4764 AdobeFlashPlayerUpdateSvc - ok
    18:03:56.0634 4764 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
    18:03:56.0657 4764 adp94xx - ok
    18:03:56.0719 4764 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
    18:03:56.0745 4764 adpahci - ok
    18:03:56.0788 4764 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
    18:03:56.0804 4764 adpu320 - ok
    18:03:56.0841 4764 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
    18:03:56.0962 4764 AeLookupSvc - ok
    18:03:57.0056 4764 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
    18:03:57.0126 4764 AFD - ok
    18:03:57.0170 4764 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
    18:03:57.0183 4764 agp440 - ok
    18:03:57.0204 4764 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
    18:03:57.0258 4764 ALG - ok
    18:03:57.0294 4764 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
    18:03:57.0307 4764 aliide - ok
    18:03:57.0322 4764 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
    18:03:57.0334 4764 amdide - ok
    18:03:57.0365 4764 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
    18:03:57.0396 4764 AmdK8 - ok
    18:03:57.0413 4764 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
    18:03:57.0439 4764 AmdPPM - ok
    18:03:57.0488 4764 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
    18:03:57.0502 4764 amdsata - ok
    18:03:57.0538 4764 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
    18:03:57.0555 4764 amdsbs - ok
    18:03:57.0576 4764 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
    18:03:57.0584 4764 amdxata - ok
    18:03:57.0621 4764 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
    18:03:57.0774 4764 AppID - ok
    18:03:57.0821 4764 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
    18:03:57.0886 4764 AppIDSvc - ok
    18:03:57.0931 4764 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
    18:03:57.0992 4764 Appinfo - ok
    18:03:58.0069 4764 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    18:03:58.0080 4764 Apple Mobile Device - ok
    18:03:58.0110 4764 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
    18:03:58.0124 4764 arc - ok
    18:03:58.0144 4764 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
    18:03:58.0158 4764 arcsas - ok
    18:03:58.0279 4764 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    18:03:58.0291 4764 aspnet_state - ok
    18:03:58.0318 4764 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    18:03:58.0378 4764 AsyncMac - ok
    18:03:58.0441 4764 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
    18:03:58.0454 4764 atapi - ok
    18:03:58.0529 4764 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
    18:03:58.0604 4764 AudioEndpointBuilder - ok
    18:03:58.0612 4764 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
    18:03:58.0637 4764 AudioSrv - ok
    18:03:58.0692 4764 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
    18:03:58.0783 4764 AxInstSV - ok
    18:03:58.0868 4764 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
    18:03:58.0978 4764 b06bdrv - ok
    18:03:59.0025 4764 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    18:03:59.0085 4764 b57nd60a - ok
    18:03:59.0277 4764 BCM43XX (2d659b569a76cdb83b815675a80d7096) C:\Windows\system32\DRIVERS\bcmwl664.sys
    18:03:59.0379 4764 BCM43XX - ok
    18:03:59.0484 4764 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
    18:03:59.0540 4764 BDESVC - ok
    18:03:59.0579 4764 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    18:03:59.0636 4764 Beep - ok
    18:03:59.0712 4764 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
    18:03:59.0809 4764 BITS - ok
    18:03:59.0838 4764 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    18:03:59.0868 4764 blbdrive - ok
    18:03:59.0982 4764 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
    18:04:00.0012 4764 Bonjour Service - ok
    18:04:00.0069 4764 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
    18:04:00.0091 4764 bowser - ok
    18:04:00.0130 4764 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
    18:04:00.0162 4764 BrFiltLo - ok
    18:04:00.0178 4764 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
    18:04:00.0196 4764 BrFiltUp - ok
    18:04:00.0249 4764 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
    18:04:00.0303 4764 Browser - ok
    18:04:00.0339 4764 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    18:04:00.0400 4764 Brserid - ok
    18:04:00.0419 4764 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    18:04:00.0449 4764 BrSerWdm - ok
    18:04:00.0470 4764 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    18:04:00.0502 4764 BrUsbMdm - ok
    18:04:00.0506 4764 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    18:04:00.0524 4764 BrUsbSer - ok
    18:04:00.0540 4764 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
    18:04:00.0559 4764 BTHMODEM - ok
    18:04:00.0614 4764 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
    18:04:00.0657 4764 bthserv - ok
    18:04:00.0701 4764 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    18:04:00.0754 4764 cdfs - ok
    18:04:00.0798 4764 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
    18:04:00.0807 4764 cdrom - ok
    18:04:00.0828 4764 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
    18:04:00.0874 4764 CertPropSvc - ok
    18:04:00.0917 4764 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
    18:04:00.0942 4764 circlass - ok
    18:04:00.0985 4764 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    18:04:01.0004 4764 CLFS - ok
    18:04:01.0083 4764 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    18:04:01.0095 4764 clr_optimization_v2.0.50727_32 - ok
    18:04:01.0170 4764 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    18:04:01.0194 4764 clr_optimization_v2.0.50727_64 - ok
    18:04:01.0287 4764 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    18:04:01.0299 4764 clr_optimization_v4.0.30319_32 - ok
    18:04:01.0321 4764 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    18:04:01.0334 4764 clr_optimization_v4.0.30319_64 - ok
    18:04:01.0380 4764 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
    18:04:01.0405 4764 CmBatt - ok
    18:04:01.0423 4764 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
    18:04:01.0435 4764 cmdide - ok
    18:04:01.0507 4764 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
    18:04:01.0548 4764 CNG - ok
    18:04:01.0586 4764 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
    18:04:01.0599 4764 Compbatt - ok
    18:04:01.0628 4764 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
    18:04:01.0656 4764 CompositeBus - ok
    18:04:01.0674 4764 COMSysApp - ok
    18:04:01.0699 4764 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
    18:04:01.0710 4764 crcdisk - ok
    18:04:01.0754 4764 CryptSvc (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll
    18:04:01.0802 4764 CryptSvc - ok
    18:04:01.0855 4764 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
    18:04:01.0916 4764 DcomLaunch - ok
    18:04:02.0032 4764 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
    18:04:02.0072 4764 defragsvc - ok
    18:04:02.0123 4764 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
    18:04:02.0177 4764 DfsC - ok
    18:04:02.0222 4764 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
    18:04:02.0306 4764 Dhcp - ok
    18:04:02.0337 4764 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    18:04:02.0395 4764 discache - ok
    18:04:02.0440 4764 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
    18:04:02.0454 4764 Disk - ok
    18:04:02.0496 4764 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
    18:04:02.0566 4764 Dnscache - ok
    18:04:02.0587 4764 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
    18:04:02.0663 4764 dot3svc - ok
    18:04:02.0703 4764 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
    18:04:02.0760 4764 DPS - ok
    18:04:02.0892 4764 driverhardwarev2x64 (b28c853770c995552b9f5760d8245f44) C:\Program Files (x86)\ma-config.com\Drivers\driverhardwarev2x64.sys
    18:04:02.0919 4764 driverhardwarev2x64 - ok
    18:04:02.0992 4764 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    18:04:03.0025 4764 drmkaud - ok
    18:04:03.0074 4764 dtsoftbus01 (d3d64cf7b2bceaa34a270f45a3fffb36) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
    18:04:03.0090 4764 dtsoftbus01 - ok
    18:04:03.0170 4764 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
    18:04:03.0235 4764 DXGKrnl - ok
    18:04:03.0309 4764 eamonm (13533557d01b88c83110d5cf749f14d7) C:\Windows\system32\DRIVERS\eamonm.sys
    18:04:03.0323 4764 eamonm - ok
    18:04:03.0370 4764 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
    18:04:03.0421 4764 EapHost - ok
    18:04:03.0560 4764 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\dri
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,
    Les deux rapports sont incomplets!
    Héberge les comme suit :
    * Rends toi sur pjjoint.malekal.com
    * Clique sur le bouton Parcourir
    * Sélectionne le fichier que tu veux héberger et clique sur Ouvrir
    * Clique sur le bouton Envoyer
    * Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015

    * Copie le lien dans ta prochaine réponse.
    0